last executing test programs: 15.906872877s ago: executing program 4 (id=3076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x361}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x244, 0x9, 0x9, 0x8, 0x0, 0x2, 0x5]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x12, 0x4, 0x3, 0xb, 0xc, 0x30, 0x24, 0x4, 0xb, 0x16, 0xc, 0x18, 0x4, 0x0, 0x60, 0x6, 0x1b, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x12b, 0x56b, 0x800, 0xb, 0x6, 0x298, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xd, 0x5, 0x9, 0x2, 0x7, 0x45, 0x4]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x4}, {0x7, 0x9}, {0x5, 0xa}, {0x4, 0xa}, {0x3}, {0x4}, {0x1, 0x7}, {0x1, 0x9}, {0x4}, {0x3, 0x4}, {0x6, 0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x3}, {0x5, 0x9}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x1}, {0x3, 0xa}, {0x2}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0x4}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x1}]}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xa6, 0x0, 0x4, @private0, @loopback, 0x8, 0x0, 0xe, 0x9}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000440)=@deltfilter={0x49c, 0x2d, 0x4742fde22d506827, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0x1}, {0xc, 0xfff3}}, [@f_rsvp6={{0xa}, {0x430, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x4, 0x9}, {0x2, 0x7, 0x6}, 0x6c, 0x9, 0x5}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x3fb, 0x7, 0x4, 0x3ff, 0x4, 0x1, 0x5, 0xfffffff9, 0x8, 0x2, 0x7, 0x0, 0x3, 0xe4, 0xfffff801, 0x4, 0xff, 0x7, 0x1000, 0x3, 0x4eedf4a2, 0xfffffffe, 0xf73, 0x1, 0x2, 0x0, 0x9, 0x10001, 0x9, 0x9, 0x4, 0x400, 0x5, 0x80, 0x1ff, 0x5, 0xb, 0xfffffffa, 0x6, 0x80000001, 0x8, 0x3fcc, 0xff18, 0x5, 0x7, 0x4, 0x9, 0x8, 0xbf, 0x6, 0x0, 0x3, 0x2, 0x1, 0x7, 0x5, 0x5, 0x2, 0x8, 0x1, 0x1, 0x5, 0x5, 0x401, 0x3, 0x4, 0xfffffff9, 0x7ff, 0x0, 0x23a0, 0x3, 0x0, 0x4, 0x2, 0x7, 0x1000, 0x7, 0x7fffffff, 0x3, 0x80, 0xb, 0x3, 0x9, 0x7, 0x3, 0x85, 0x5, 0xf1, 0x3, 0x7, 0x81, 0x6, 0x3, 0x0, 0x59, 0x2, 0xffff0001, 0x400, 0x7, 0x80, 0x81, 0x2, 0x9, 0x0, 0x5, 0xb6, 0x8, 0xe7b, 0x9, 0x3, 0x6, 0x4, 0x6, 0x5, 0x10, 0x400, 0x4, 0x1, 0x6, 0x7f, 0xb, 0x0, 0x2, 0xffff, 0x81, 0x4, 0x1, 0x551e14d2, 0x1, 0xe4, 0x4, 0x380000, 0x2, 0xfffffffb, 0xf, 0x400, 0x2, 0x23, 0xd, 0xa61, 0x0, 0xe879, 0x6, 0xbbcf, 0xff, 0x9, 0x2, 0x4, 0x7f, 0x4, 0xffffff80, 0x2, 0x6c89, 0xe1, 0x0, 0xffff0001, 0x7, 0x3, 0x9, 0x1, 0x10, 0x0, 0xad, 0x7f, 0x0, 0x401, 0x9, 0x4, 0x8e, 0x5, 0x39a, 0x8, 0x8, 0x2, 0x6, 0x5, 0x8, 0x9cd, 0x9, 0x6, 0x100, 0xc5e5, 0xfffffffe, 0x1f0d, 0x5, 0x51c, 0x0, 0x5, 0xffff, 0x8, 0xffffff01, 0x94, 0x6, 0x57de, 0x6, 0x1, 0x0, 0x7f, 0x4, 0x5, 0x400, 0x2, 0xfff, 0xd568, 0xc09, 0x2, 0x4, 0x3, 0xb8, 0x1, 0x3c, 0x1, 0x2, 0x3, 0xab4, 0x8, 0x7, 0x0, 0x1ff, 0xfffffffb, 0xd, 0x8710, 0x8000, 0x6, 0x6, 0x7988, 0xfffffc2d, 0x4, 0x3, 0xd4f, 0x8, 0x8, 0x569, 0x5, 0x4, 0xfffffffd, 0x9f, 0xfffffffb, 0x9, 0x0, 0xa, 0x4, 0xffffffff, 0x6, 0x200, 0xa3a0, 0x7, 0x6, 0x668, 0x6d54, 0x5, 0xfffffff6, 0xd, 0x6, 0x6d2c3540]}]}, @TCA_RSVP_POLICE={0x4}]}}, @f_rsvp={{0x9}, {0x30, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xbbb, 0xff, 0x800000}, {0x2, 0xfffffff8, 0x8}, 0x2, 0x4, 0xf9}}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}]}}]}, 0x49c}}, 0x48085) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000980)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x42, r4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x10}}}}}, 0x28}}, 0x40000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000b00)={0x0, 0x4}, &(0x7f0000000b40)=0x8) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000b80)={@private0={0xfc, 0x0, '\x00', 0x2e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x2, 0x8, 0x8, 0x400, 0x8, 0x2140002, r4}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8011}, 0x4040010) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000e80)={r8, &(0x7f0000000d80)='wlan1\x00', 0x200100, &(0x7f0000000dc0)={@_ha_fsid={[0x401, 0x1]}, {0x6, 0xa844, 0x7, 0x1}}, 0xffffffff, &(0x7f0000000e00), &(0x7f0000000e40)=0x4}) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000ec0), 0x3) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xe8, r12, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3468}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x34dc}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000}, 0x4004000) socket$inet6_tcp(0xa, 0x1, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r13, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x20}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), r14) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f00000015c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001340)={0x20c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x7c, 0x19, "75e086cd25319ed80f6c340ec1c243516ee79a225aad5225508e3be15a59c13d920e5acbe0f07b92ba10a12a2e4255bfb5a38694c1ea702ced909d0e9b990bd4c7c6d7733664f56ca623ab7705f6bc29f645fab6bfad7e70797b2947d71cef83c93e6c81688a1a66d8ca70f3667c3d6ea114f9eb90098e96"}, @NFC_ATTR_SE_APDU={0xb2, 0x19, "68547d4773e42c03b79ce1cc1e2a963cee954f2a508fa0617c5f21fd997cf02fb4ec72a7ea41961b61ead84627f8cf7948b90a49b2838786f2e0b51793489526139eb0bef6d2dc37163328207cb8cf79977c0c182eb7149d6894c579723fbeace767fed51c1d1d0073105309582f1587e20c72018788362409613cc441286416506fc3aaab1909d6992cd68dd7c50ca32032c35e122af7f26fb30036c81e58b9b74678991136a657b344cb913bd4"}, @NFC_ATTR_SE_APDU={0xae, 0x19, "d90b758a5598efbd1905bdddb723b61960814d2e3c767849e9880836702fa2d28167fade5d60c107393ce15a12e37f6bd263fe197d7733b72e09ad0324c3c49cbac77e2e89ac707228b52889a3c039cd19fa81da27e1db09efe989c85de3ae55267b751bdba94d23cce79de2d78a8b34dc2c9cec46a7b113163327d88b33316b906b8cb01e18edb6f753045ef734a7fb126ceb125a2b6161c44f3d6897e6f443ba8d992836fda54983b3"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 15.431843516s ago: executing program 4 (id=3077): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ipvlan0\x00', 0x10) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 15.430259126s ago: executing program 4 (id=3080): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) 15.421536138s ago: executing program 4 (id=3081): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x49}}}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc891) 12.418638937s ago: executing program 4 (id=3092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000018000085000000d1000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 12.283932742s ago: executing program 4 (id=3095): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000480)={0xa, 0x1, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44191) (async) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'netdevsim0\x00', 0x800}) r2 = socket$kcm(0x2b, 0x1, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=""/35, &(0x7f00000000c0)=0x23) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) close(r2) 4.456837532s ago: executing program 2 (id=3144): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_deladdr={0x40, 0x15, 0x400, 0x70bd2d, 0x25dfdbfb, {0xa, 0x8, 0x9, 0xf3e440360cb3cdb7}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffffe, 0x8001, 0x4, 0x8}}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000180)={0xbb8, 0x0, 0x5, 0x3, 0x0, 0x0, {0xe, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x3}, 0xb, 0x8, 0x7, 0x80, 0x6, 'syz1\x00', "7b291fe67dae8948b2a061114ad93903f2538b1198de5739a61115943cbc4355", "d1acfe96ea60a03bbf59be9ba61f18860032adcee8ba301c13720419c5bf0f05", [{0xfffa, 0x1, {0x1, 0x9}}, {0xd, 0xe, {0x1, 0x8}}, {0x2, 0x4, {0x2, 0x7}}, {0x8, 0x8, {0x0, 0x401}}, {0xc, 0x8, {0x3, 0xfffff100}}, {0x1, 0x8, {0x1, 0x7}}, {0x0, 0x9, {0x3, 0x10001}}, {0x9, 0x3, {0x2, 0xfffffffb}}, {0xfb8, 0x100, {0x1, 0x1}}, {0x4, 0x2, {0x2, 0x400}}, {0x10, 0x2, {0x2, 0x6}}, {0x2, 0x7, {0x2, 0x1}}, {0xfffd, 0x2, {0x6, 0x5}}, {0x1, 0x4, {0x1, 0xfffffffb}}, {0x0, 0x3, {0x2, 0x2d}}, {0x3, 0x3, {0x2, 0x9714}}, {0x9e, 0xe, {0x3, 0x2}}, {0x6, 0x4, {0x3, 0x3}}, {0x2, 0x2, {0x0, 0x80}}, {0x4, 0xfff, {0x1, 0x2}}, {0x76cf, 0x353, {0x1}}, {0x400, 0x1, {0x0, 0xb97}}, {0x9, 0xfff7, {0x1, 0x6}}, {0x4, 0x34, {0x2, 0x9}}, {0xc, 0x1, {0x2, 0x3}}, {0x8001, 0x1, {0x2, 0x8}}, {0x8, 0x8af, {0x0, 0x5}}, {0x5, 0x400, {0x0, 0x11c9}}, {0x5, 0x6, {0x3, 0x7fffffff}}, {0x9, 0x9, {0x1, 0x401}}, {0x8000, 0x101, {0x3, 0xb4c}}, {0xffff, 0x8, {0x3, 0xfffffd3f}}, {0x0, 0x4, {0x1}}, {0x3, 0x8, {0x3, 0xfffffff8}}, {0x7, 0x401, {0x2, 0xffffffa6}}, {0x7, 0x7, {0x0, 0x1}}, {0x0, 0xb10, {0x0, 0x3}}, {0x5, 0x3, {0x1, 0x7}}, {0x800, 0x8, {0x2}}, {0x3ff, 0x200, {0x2, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x7fff}, 0x57, 0x8, 0x9, 0x6, 0x11, 'syz0\x00', "204cea34fe39d7ce429e73f5694238d6ea6e2356fea6a8c197b2ed7e7f5553e8", "3a11b9c368e1578d2de33a63b836a017720254f4a50359d3833c6c33ae6ca96e", [{0x8, 0x101, {0x0, 0x400}}, {0x38ca, 0x8, {0x1}}, {0x8, 0x9, {0x1, 0x1}}, {0x3, 0x1, {0x1, 0xffff}}, {0x0, 0x7, {0x0, 0x4}}, {0xd, 0x1, {0x0, 0x6}}, {0x3, 0x2, {0x0, 0x1}}, {0x3ff, 0x3, {0x0, 0x2}}, {0x6, 0x9, {0x0, 0x8}}, {0x1, 0xfff9, {0x3, 0x72e3}}, {0x74d7, 0x9, {0x2, 0xb4}}, {0x5, 0x40, {0x1, 0x1}}, {0x200, 0x8a, {0x1, 0x5}}, {0xfff, 0xfffa, {0x1, 0x6}}, {0x3, 0xfffe, {0x3, 0x7}}, {0x1, 0xfffc, {0x2, 0x9}}, {0x4, 0xd, {0x2, 0x2}}, {0x8, 0x10, {0x3, 0x10000}}, {0x7400, 0x1, {0x2, 0x4}}, {0x4, 0x1, {0x2, 0x40}}, {0x1c94, 0x5, {0x1, 0x6}}, {0x6, 0x0, {0x3, 0x5}}, {0xe467, 0x8, {0x0, 0xff}}, {0x65, 0x1ff, {0x1, 0x8}}, {0x1, 0x8000, {0x3, 0x9}}, {0x5, 0x9, {0x3, 0xffff0001}}, {0x0, 0x735c, {0x1, 0x3}}, {0x2, 0x7, {0x3, 0x5}}, {0x1, 0x7, {0x2, 0xa349}}, {0x3, 0xdce8, {0x0, 0xfffffff2}}, {0xff, 0xc0, {0x1, 0x5}}, {0x81, 0xfff3, {0x2, 0x8}}, {0x4, 0x401, {0x1, 0xd7}}, {0x6, 0x2d, {0x0, 0xc18d}}, {0x8, 0x3, {0x2, 0xc}}, {0x819, 0x5, {0x1, 0x3}}, {0x4, 0x1, {0x0, 0x4}}, {0x0, 0x0, {0x1, 0x1}}, {0x7, 0x7, {0x2, 0x1}}, {0x60a6, 0xb, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0xacdc}, 0x2, 0x9, 0x8001, 0x4, 0x13, 'syz0\x00', "0c7c2d337bfe2e02806e3316b3ffe015e72e47f070d227455ebe2ae47ca1a9e0", "c0acafcfbdc51b4b94ab2a989a64e9fb6c728350ade7a4edcf0a950f0c6e6362", [{0xfff, 0x9, {0x3, 0x1}}, {0x2, 0x7, {0x1, 0x19}}, {0x7, 0x7, {0x2, 0xdf}}, {0x8, 0x40, {0x1}}, {0xfffb, 0x4, {0x0, 0xa}}, {0x6, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x80}}, {0xffff, 0x100, {0x1, 0x6}}, {0x6, 0x6, {0x3}}, {0x1, 0xd, {0x1, 0x5}}, {0x2, 0x7, {0x0, 0x35}}, {0x9, 0x2, {0x2, 0x5}}, {0x51, 0x4, {0x1, 0x1000}}, {0x113, 0xa, {0x1, 0xfffffffd}}, {0x6a4, 0x7fff, {0x3, 0xfffffabb}}, {0x7fff, 0x94, {0x3, 0xbd}}, {0x5732, 0x6, {0x2, 0x2}}, {0x3, 0x9, {0x2, 0xa8}}, {0x2, 0x9, {0x2, 0xb7}}, {0xf, 0x3, {0x1, 0x8}}, {0x2f2, 0x80, {0x3, 0x3}}, {0xd, 0x8, {0x1, 0xffff}}, {0x8, 0x1, {0x1, 0xea34}}, {0x0, 0x3, {0x0, 0x6}}, {0x401, 0xc906, {0x1, 0x9}}, {0xf, 0x1}, {0x401, 0x0, {0x2, 0x3ff}}, {0x2e7, 0x507, {0x1, 0x400}}, {0xfff9, 0x322, {0x1, 0x6}}, {0x7, 0x71d, {0x3}}, {0x6a, 0x0, {0x0, 0x5}}, {0x7ff, 0x200, {0x0, 0x1000}}, {0x100, 0x1, {0x3, 0x7}}, {0x0, 0xfff7, {0x0, 0xcea0}}, {0x3ff, 0xfff9, {0x0, 0xf}}, {0x9, 0x8, {0x2, 0x4}}, {0x0, 0x9, {0x0, 0x40}}, {0xf63d, 0x7, {0x0, 0xac}}, {0x8, 0x9, {0x3, 0x8}}, {0x7, 0x4, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x3}, 0xe, 0xa, 0x0, 0x8, 0x4, 'syz1\x00', "14753fc1d5f1a3da23293a2233e1e40f7e9fb2fb579a8b77712336d7fa1de485", "73ed901c8f5903b81336b448a7f2ca094f31603e5619bfa547e465e01e3a192c", [{0x4, 0x81, {0x2, 0x9}}, {0x3ff, 0x2, {0x1, 0x5}}, {0x5, 0xc9, {0x1, 0x5}}, {0xf5f6, 0x33, {0x1, 0xfffffff3}}, {0x0, 0x8, {0x1, 0x6}}, {0x6, 0xa, {0x0, 0x1}}, {0x77, 0x4, {0x2, 0x4}}, {0x2, 0xfff, {0x2}}, {0xfffc, 0x9, {0x2, 0x6}}, {0x4, 0xe3, {0x0, 0x5}}, {0x5, 0x2, {0x0, 0xfffffff9}}, {0x7, 0x1, {0x0, 0x3ff}}, {0xff, 0xfff, {0x0, 0x49bef677}}, {0x1000, 0x7ff, {0x3, 0x8}}, {0x86f0, 0x5, {0x0, 0x81}}, {0x3, 0x5}, {0x80, 0x9, {0x3, 0x6}}, {0x2, 0x3, {0x3, 0xf0}}, {0x2, 0x500, {0x3, 0x7}}, {0x8bdf, 0x8000, {0x2, 0x4}}, {0x1, 0x8, {0x1, 0x1}}, {0x10, 0x5, {0x1, 0x1}}, {0x3, 0x1, {0x3, 0x2}}, {0x0, 0x401, {0x3, 0x400}}, {0x5, 0x7, {0x0, 0x400}}, {0x7cb, 0x3, {0x2, 0x6}}, {0x5, 0x7, {0x1, 0x101}}, {0x7ff, 0x2, {0x3, 0x1}}, {0x7, 0x2, {0x0, 0x19e}}, {0x101, 0x8, {0x3, 0xfff}}, {0x0, 0x0, {0x1, 0x7}}, {0x3, 0x6, {0x0, 0x10001}}, {0x7fff, 0xfff, {0x1, 0xe5fe}}, {0x5a, 0x401, {0x2, 0x5}}, {0xfff, 0x8000}, {0x1, 0x2, {0x2, 0x7f}}, {0x0, 0x1, {0x2, 0x7}}, {0x20f, 0x604f, {0x1, 0x6}}, {0x80, 0x9, {0x2, 0x2}}, {0x2, 0x7409, {0x3, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x40, 0xf8, 0xf7a8, 0x2, 0x2, 'syz1\x00', "bc50f8d92d6034b0b210bb3c37f2861c4774c3559891a2b77891410cb71cc509", "b6521770f48205539b655a2803d550b228f7d191981555e251e89c84f9cfaf8f", [{0x8001, 0x40, {0x0, 0xfffffff4}}, {0xcfa6, 0xfff5, {0x2, 0x3ff}}, {0x800, 0x8, {0x3}}, {0xfff9, 0x2ca9, {0x2, 0x4}}, {0x7, 0x8, {0x2, 0x6}}, {0xd, 0x1800, {0x3, 0x8000}}, {0x5, 0x0, {0x2}}, {0x8, 0x800, {0x2, 0x200}}, {0x3, 0x7, {0x2, 0xfffffffc}}, {0x1, 0xa, {0x2, 0x74}}, {0x6, 0x1bb8, {0x2, 0x90}}, {0xb, 0xebd, {0x1, 0x324c}}, {0x3, 0x5, {0x2, 0xcaf}}, {0x5, 0x2, {0x3, 0xfffffffc}}, {0x4, 0x8001, {0x1, 0x5}}, {0x9, 0x3, {0x3, 0x213}}, {0x85e, 0x1, {0x3, 0x7ff}}, {0x0, 0x800, {0x3, 0x6}}, {0x6, 0x400, {0x2}}, {0x8, 0x7ff, {0x2}}, {0x4, 0xca8, {0x2}}, {0x0, 0x800, {0x1, 0x3}}, {0x9, 0x1, {0x3, 0x7fff}}, {0x6, 0x4, {0x0, 0x1}}, {0x3ded, 0x1, {0x0, 0x2}}, {0x2, 0x4, {0x3, 0x7}}, {0x27d, 0x517, {0x1, 0x80000000}}, {0x332, 0x8, {0x0, 0xa07b}}, {0x2, 0x3}, {0xa6, 0x800, {0x0, 0x6}}, {0x8, 0x200, {0x2, 0x2}}, {0x9, 0x5, {0x3, 0x6}}, {0x1, 0x9, {0x3, 0xa51e}}, {0xffff, 0x73d, {0x3, 0xff6f}}, {0x7, 0x1, {0x0, 0xffffff9d}}, {0x8, 0x9, {0x1, 0x6}}, {0x1, 0x9, {0x3, 0x8}}, {0x2, 0xfffc, {0x0, 0x6}}, {0x7, 0x65, {0x2, 0x10001}}, {0x6, 0x5623, {0x2, 0x1000}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20004014}, 0x4000000) 4.336230096s ago: executing program 2 (id=3145): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x21, &(0x7f0000001a40)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e3", "dc094a", 0x22eb, "81b5be3181fd3b87d0a0a7"}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0xfda7, &(0x7f0000000340)={&(0x7f0000000140)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x410) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x4d9, 0x4, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x0) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000100)="00000005", 0x4}, {&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c5", 0xd}, {&(0x7f0000000800)="38c8", 0x2}], 0x3) 3.97557786s ago: executing program 0 (id=3148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xffffffff}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 3.812445189s ago: executing program 1 (id=3149): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) listen(r5, 0xfffffff5) (async) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000240)=0x3) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="a384db65c54f10d05a14df394ca7c8b3f6a96d75fc333a2cfb055426999cdf52adb75ccf3b982c0fb08b5208691769a8f3fd20e147c083c7c65d22d644646340642dca0933e94fcaaae48d0ff9ce677d39ccc8e5e8285bf3333b05e9c1942fce46f89608e458ac97daf3ab8c099932949fb6e3e3abc1394edc9a32b5a7bacb84af03697094c4adc24dcac3501ac8aac9e5dd7b14c38a443c3d40a03e266cdb64c9ada1aef4ca98a5bfde0f98dcd8459abfefcbbdbf5097dd5c337c623add6a699cfcb5e0f0b359a497861467fe18ce549627267fa1aa518593e03ccee59e8e4321a654cdd8d86df1423265d695a5f8592ce5712c0b59ad292547feebcecfb235d65af54a3019a232b6b4d88a45d9e66d4e009fe7055fc3dab14205ef701866963419725b77c23e66c34b3a2bf7eceee92c1e4d6570edca4872d75a1e4a2cf137e86f33bf2a9f500d0f037a0fdccc58d3c55c383b968176f4bc5e554be9df50bf9665f5b33e7b91437a0cd90f6a"], 0x3c}}, 0x8000) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a0000000000dee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.79857769s ago: executing program 0 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x64048040}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x30c, 0xfa, 0x4209, 0x100000000, 0x200, 0x400, 0x5, 0x10001}, &(0x7f0000000200)={0x4, 0x7fffffff, 0x55a0, 0x58, 0x7ff, 0x2, 0x7}, &(0x7f0000000240)={0x2, 0xa55870e, 0x7, 0xd3, 0x4, 0xfffffffffffffffa, 0x5, 0x5}, &(0x7f00000002c0)={r3, r4+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x7]}, 0x8}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000480)={r2, &(0x7f0000000380)='\\\x00', 0x511200, &(0x7f00000003c0)={@align=0x7, {0x3ff, 0x400, 0x7, 0x6}}, 0xc, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x8000}) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000840)={r2, &(0x7f0000000740)='@}-\x00', 0x400, &(0x7f0000000780)={@_ha_fsid={[0x2, 0x2]}, {0x0, 0x8000, 0xab1, 0x10}}, 0x9, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x5, 0x0}, 0x8) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940)={0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001bc0)={{r2, &(0x7f0000000ac0)='].\x00', 0x80000, &(0x7f0000000b00)={@_ha_fsid={[0x8, 0xfff]}, {0x2, 0x0, 0x7, 0x2}}, 0x0, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0x8}, {[0x8, 0x8, 0xfffffffd, 0xcb]}, 0x439, 0x1000, &(0x7f0000000bc0)=""/4096}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c80)=@generic={&(0x7f0000001c40)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x4, 0x16, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x0, 0x9, 0x6, 0xff, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x31}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000580)='syzkaller\x00', 0x1, 0xea, &(0x7f00000005c0)=""/234, 0x41100, 0x8, '\x00', r6, @fallback=0x26, r7, 0x8, &(0x7f0000000880)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x1, 0x3, 0x9}, 0x10, r8, r9, 0x8, &(0x7f0000001cc0)=[0xffffffffffffffff, r10, r11, r12, r13], &(0x7f0000001d00)=[{0x0, 0x2, 0xa, 0x5}, {0x0, 0x5, 0xe, 0x1}, {0x4, 0x1, 0x6, 0xc}, {0x1, 0x5, 0x10, 0x3}, {0x0, 0x5, 0x7, 0x8}, {0x5, 0x4, 0x4, 0xc}, {0x3, 0x4, 0x2, 0x2}, {0x4, 0x4, 0x2, 0x9}], 0x10, 0x401}, 0x94) write(0xffffffffffffffff, &(0x7f0000001e40)="87758980cb56db3a7c09bfbe6c", 0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000030c0)={r12, 0x0, 0xe6, 0x1000, &(0x7f0000001e80)="ed71c3b80d5e84d04a9dc7a35bf6170349e726a9764dc6b6e71a44d34e4258168efc34725d68319715bc2a7e8a0121700fe55bd39b2b69c99634c9ea829c7f387dd8d0f5478a5d7c908cb9c88806ee2548680b25408f06cf739e7e7f0703fee6ff117d62c5cd73a911b8d331bbca3d1ebfa99762de489d23bfe6c6c261eeffa245f833ad3d437d974318cbf4632fdfdb04d5039ce731ba29a8552075ced52e87b6e4d6aefc88fd3779e58e4443d39981168307ad41525a10c64e87d72c6f07d61d7f5e565882bd64c4a0b927c4c28952390ea35ccaec52d90c1b7928af6904bb9c8fb7bb36bc", &(0x7f0000001f80)=""/4096, 0x6, 0x0, 0x1f, 0xf2, &(0x7f0000002f80)="50e51ecb4b76d7be93e55978ad0ceee347e866d36ab8a6e0781da5d7416162", &(0x7f0000002fc0)="460b3a80fcd05aae918456077c06566a46db2ffc6be7e68e52f213ba49e34212db22293a47ac02eb529090822ceab17301317afae2c1cf242cc12bf64a3f6734f814402d6115fb392a977feba423eb455ae8eafd5ab8e98a9378aa14bbc28fba31dd105d90d33311aac7deb772d1ad3b2ca030728fab5044624c3a3899c6bdfefeed338d0e185c02108d5df0d3cd4397e70148fc51ecfe9e973b2f6a56b9ac93fd9c918a8710ec0042411231312e9afd459f09476d78425a0711b97d8e0476c0ee63f891675b502105100b11cb220315bc39483d4dd013806c0f3b83f069dd37e6162935a67949b9820310bdc13ac5cb8490", 0x0, 0x0, 0x2}, 0x50) ioctl$XFS_IOC_AG_GEOMETRY(r7, 0xc080583d, &(0x7f0000003140)={0xed2, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffffd, 0x9}) ioctl$AUTOFS_IOC_ASKUMOUNT(r13, 0x80049370, &(0x7f00000031c0)) r14 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCDELRT(r14, 0x890c, &(0x7f0000003200)={0x0, @isdn={0x22, 0x0, 0x7a, 0x68, 0x6}, @phonet={0x23, 0x7, 0xca, 0xc4}, @phonet={0x23, 0x8, 0x7, 0x7}, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5760, 0x7, 0x5}) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000003280)={r7}, 0x8) bind$nfc_llcp(r15, &(0x7f00000032c0)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x7, 0x51, "15693febedcff707b1a46a0366f52634f53ae46a0ba74db4e5e39f266c1f5ed7fec6d7a93fd7becd78c5e2772c94ffcd3662c47a2cb132dc7eb6646d5d703b", 0x32}, 0x60) sendmsg$nl_generic(r7, &(0x7f00000034c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000003480)={&(0x7f0000003380)={0xc4, 0x1a, 0x10, 0x70bd28, 0x25dfdbfb, {0x10}, [@typed={0x8, 0x5e, 0x0, 0x0, @u32=0x60}, @generic="999ad02421719d03e76d5c9ae756c98deef691e1ee1fb7f5ebd9f6b83a89c2ae5c0b490cdb5ada33fad94c97a23473d9a705d7cfad4a84376f01629037a725eb06b54e1ef4c9b3faefe00ffc070620fbd768a9738710b57e22fc2c03d190967752bb71c15657a0997fddd2fc97a1b9b48e84ad84a8725913b93066df08f9a1bcef6493be7024a43a23b73a4b50766e2636591fa01811f808d8d9d5046c820d50ef", @generic="dfefe0537ea3"]}, 0xc4}, 0x1, 0x0, 0x0, 0x850}, 0x40010) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003540), r7) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000003700)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x84081880}, 0xc, &(0x7f00000036c0)={&(0x7f0000003580)={0x110, r16, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$sock_x25_SIOCADDRT(r12, 0x890b, &(0x7f0000003740)={@null, 0x1, 'team_slave_1\x00'}) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000003980)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0xb}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x44}}, 0x90) 3.791664225s ago: executing program 2 (id=3151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000184200000600000000000000fe000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3.595900638s ago: executing program 0 (id=3152): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote, @in=@multicast2}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) 3.493781102s ago: executing program 2 (id=3154): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="710502060303820500c118aae6174b823388d40620f3"], 0x13d) 3.206291436s ago: executing program 0 (id=3155): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300101080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.914594043s ago: executing program 3 (id=3156): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 2.914094668s ago: executing program 1 (id=3157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.7319833s ago: executing program 3 (id=3158): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) 2.683150305s ago: executing program 1 (id=3159): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, 0xfffffffffffffffc, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r3 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000380), &(0x7f00000003c0)=@tcp=r3, 0x3}, 0x20) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c040000f30300082bbd7000fddbdf2502000000020000000600000006000000ff7f0000040000008b00000001800000050e0000040000008500000008000000fafffffff4ffffff04000000080000001f0200000800000000080000f8260000ef2700000100000005000000010000000400000002000000c8f700000900000000000000070000000200000008000000070000000040000094ae00000100008005000000090000000f000000020000000300000007000000ffffffff0500000007000000ff7fffff040000000200000009000000ffffff7f050000000700000001010000e80f0000060000000e0000000e000000080000000d0000000600000000000000060000000500000001800000090000000f000000c90000000d0000008100000027f1000007000000000100000500000096c200007f0000000f000000010001000900000002000000090000000800000073450000b604000000000000010001000900000006000000060000009c0600001700000003000000070000007400000005000000030000000200000000000000080000000300000006000000e2b70000ffffffffffffffff98070000001000000000000003000000fffffeff03000000ffff000034000000ff010000ff000000080000000900000013b0000067000000fd000000030000000900000001000000ff0f000005000000030000000800000007000000000800009c00000081000000060000000900000008000000ffffffff02000000f6d6205000000000830000006300000000080000080000000600000006000000020000000800000002000000000088060a0000008100000006000000f8ffffff8d000000a1020000080000000400000002000000050000009c090000050000000200000009000000d90000000800000004000000ff00000003000000000000000500000009000000050000000000000031030000050000000700000005000000ff0f000003000000ff7f000007000000ff03000006000000080000003e0c00000200000001000000e20200000300000001000000040000000500000004000000ff7f0000060000000300000005000000000000807f0000000100000003000000030000000200000000020000030000000600000005000000000800000100000000000048018000004ade0000020000000b000000080000000c00000006000000ff0000007b0000000d00000003000000af330000d1ab410001000000070000000900000000000000050000000da3000080ffffffffffffff0400000004000000ff0700000200000001000000050000000b0000000900000007000000cf6f000080000000010001000700000001f0ffffffffffffff01000081000000090000000400000000000000ff07000009000000ff0f000000010000090000000400000007000000060000000300000002000000018000001c0000003a265e2c2c40f8002500002a5c007d5b285b7b2f5b212d0029292400"], 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c00010006000600080000001000040000000000000a000191004000140002", @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 2.592171359s ago: executing program 3 (id=3160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic={0x0, 0x0, 0x0, 0x0, 0x81}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic={0x0, 0x0, 0x0, 0x0, 0x40}, @generic={0xbf, 0x2, 0xa}, @generic={0x9, 0x2, 0xb, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @exit, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x23, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.50724589s ago: executing program 3 (id=3161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf2501000000080001006200000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000000) 2.485320339s ago: executing program 1 (id=3162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000dd2607c687b1c9920d000000000001000000000000000000d8a35b2d5c683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x5c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x0, 0x2, 0x5, 0x9, 0x8}, {0x7, 0x2, 0x6, 0x7, 0x200, 0x4}, 0x7fff, 0x240000, 0x1440}}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x400, 0x34, 0x91f}}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@loopback, @empty, 0x0}, &(0x7f0000000200)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b405000000000000611034000000000063012e00000000009500000000000000e0316112cd34f6785092e21badf8d9f0c3767f7cb7ec129337f38827eee7d6ca297166eb4c7e7a8378f5d227ae067749e0632558ae0ce3b2cca6b286b56cad3e9574e1d2f963fa1b1e67a47bbe3fae7e6402cfce5a77c1abcae298375ce28887ed0f9261375df52238"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) (async) r10 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)={0x130, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0xffffff03, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)={0x130, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0xffffff03, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) close(r0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x8000000, 0x0, 0x75d}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x8000000, 0x0, 0x75d}, 0x10) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) close(r12) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005e5ff0928000000000a030000000001000000000a0000070800024000adba3b795581f91716a93763aa0000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 312.17508ms ago: executing program 3 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000002010000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 310.017708ms ago: executing program 1 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x63}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x150, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6c, 0x7, 0x1, 0x0, "890459899e922af651bf0d808fbab99775561ae95f5ad4e767adfa24e87d9a9e0baef444041f9ffcfc41ff5fb209b6d8abbbdd3d74e3e661b93af33c3c11ff3bef0f226fa9f18563b8d49cb5c80b1aa6fe1e2bfa8e2adc9b31282cff0b2dcb338587b5051448ef3c"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}]}], {0x14}}, 0x178}, 0x1, 0x0, 0x0, 0x8044}, 0x4044) 304.898609ms ago: executing program 2 (id=3165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="40004c060a000200aaaa"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) 279.497114ms ago: executing program 0 (id=3166): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000004100070127bd7000fefdffff047c000008004280040008000c0009800600cc00800a0000180002"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r1, &(0x7f00000001c0), &(0x7f0000001200)=@tcp, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00aad5dbd4b6f911f97b000000000085100000020000008500000000000000950008100000fdff9400a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 27.969652ms ago: executing program 3 (id=3167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000003c0)={@dev}, &(0x7f0000000400)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000002800128009000100766c616e000000001800028006000100fe0f00000c0002001a0000001a00000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000e7472cbcbbb7b541000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000008108000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0) socketpair(0x22, 0x800, 0x800, &(0x7f0000000440)) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100003000010028bd7000fbdbdf25040117800c00160006ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8, 0x3, 0x5, 0x4, 0x0, 0x3ff, 0xd1c, 0x2, 0xfffffffc, 0x10, 0x4, 0x6, 0xffffffff, 0x7f, 0x1, 0xfff, 0x6, 0x514f, 0x401, 0x6, 0x9, 0x3}}) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000001980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f00000019c0)=ANY=[@ANYBLOB="e4140000070a01010000000000000000020000010900020073797a320000000088140480841401800e000100696d6d6564696174650000007014028008000140000000010800014000000002bc1002807100010093edfa998d256a394175866d00c94883a947f49fedeff7e9bc45d5e91fd3aab55daa2489d0050974cdcc4be2d2bc65a0486a15f27da63a11e55f65781d9e9c3203c22ece4c0e5e7241851926ad211a6d64bea49fd83209b8976ef05eabea608b02d789ce18520ca1b875f06e040000000c000280080003400000000134000280080003400000000108000180fffffffe0900020073797a320000000008000180000000000900020073797a300000000004100100df62fa7e81406e2b04aeb9841bc302d03ad5c519206ebfa1e4c810126ebb1fa7f5f3dfce516c37040aed5bd4557c93fdb97300a0b02d02b45f422da051594e78e4930e0cc239050a232cbcfc4d8d1d26b4b9366e4ba8894e7bc99c1636ec1042ff456161aec8bcc60e8f11a7201e24960b7cae5878c23fad044cdaed514feeb144153f8590401b8ac42ec08a6609929ebf9c7d2c2b061f32dd0c211ef8256cc6becb5fb9e532063a18bd1220e07e6b644f35a5f2297f67470e46d8467818af1832bd7986c643f77f16a3245908223dc06e0fcc622a4fb667a9d02350ecc2d3988218454240baf8bfcdbd3fd52268949c9edc9f9b9141d4bbdd57e784cc13d8acded9a28d9712843169dd144a7a9123cb1a6671cbbe840d60efbb3d93805aa8515ae0454dcb6d94aa7487e05873299cab00f1d6a32c90bd15dd5c67421acc65d238fd52b51d01214f2a2be5a9267d4cb0492eab5e76a486c4393b0707e0ea3727f1f29aabc709843031c28dfaed19a9f17dd6b48b5d2948ac79b58289b79c3401f59b9de91252d834a85156e20526eafbb71d649318c5d7460cf44df77f64f811f2412915f9f6d16c4418ea19f2842db5cb2c5f4db47ebf2ba552fe88a64e7f35add3df8ecf029fc680ede6c96d573ef8031e1c623883c3e71a24aa4f13fc898b71f0a5ebf4f9260e5836771ccc5ca1bbb682b664e07135b51c08700f06061e3ffec4ef4816b6b60c405d40311a06c495ef56742abfc30d69db7a17652ad73d0a958a3ae99611fe2bef069481ea06f76fe9923931609218897be37c7b6ccd848ff8e7d70118dc44c7d3eb8836fe728b9d47bb63afe654481d6015d5449cd52330c1bfc431652b1344ad2d9ee5d08b72f3c023cae3ba71fdb70bbb1a86aa69f842d5fbb60cc09ee55ca405f8952d5399d58ad8064a9aed75f53c4e1714063776d6f1a83c539fcf8fc62a27cc1ecffb72c9f09b849d8baccb28b075bd83444c36e02e200603c62cfa2c8d0e157044cdbbb6f91fa6cbe48bb15b2b58af267671a318e5546d0a147c98036cab64c5d9d82a4a15d7fa3789b495a33b843c974fa969c3d9afa7232b9f3d946f013a764a1ec4305fdf435bac66ec5cfe6adda778294c9ddc676e2443f18086efa1bd0ee5407b61649eac78a90421ca8e1a554ae894d71ac0d5550ccae2ab5dcbbc9e753b398ac4651a506b9eb7b8e363642c5cf1dcc9732113cf3c5cc42debabf827597505b2377a3b51e8fc8091850f6cb1ac46bf46b087417e723514524304d628ae311ef0d89b492552b8c190bb00d096b6aa0bb00117a4a46b1dd2eac8aa5a4f386331635c8018258804e8fe3a24a0cb52e209377ad0d185bcc57c9e66d3777e42b3760fc3db1b3aaff54402afb8eb375e1dbe833d40b0bcdacdd9264f443eab885a1fc2fafbeb7a5705cc9afd9685703c0ce6cc7741953cf2487cf5bfb8347a0d0393c153ddcc33d5d8f6cc9de1237ffaa2ef70c2b8062dc3905939cb49e5334affb7214fbbf9caa7a707d89baa99f1d10b6fcbec52098aa172cf137901053622a78a4f8d9c763a367eff97c7653bcba47b597989895463662155c3f941a3964762b671b8c9963e8eff692e0965c25d5130b31048c2b525e7fafbac818ba4ed9cb23d2f2f42c072de054d9ecd278152957cb6ade8c0724b3e2ffc8863a68807942835a8f8bc7b548abf66f04bdd7f9eec0d8762251b44498bb3172cac67c3869cde55fcf89e9ab43f2dc334aa21eefe28ababb9e5bf9127fb4edaa1a6b4b08065b2b6940d1546fb56c843ce639d5b53b1c0d1f5b3a2373e19279592c42463a440387fafbd13c633c79f14a4a53576b7bf5a3a74f074e3d0fa01d3225aacf694c4c85da66ae25ed2124e41b56524f90baabba3cf07a32803de243f0a45460f5fcaa935b9e1c34c40145507724efd3e9c86cc114e293c449a65d6bb9306c9a0b216c34089d968ccaf10cc0db2c1641e4b0e70af534e2038ba827f80f01dab23d14392ab1475e76e2eceec1bc53a9be1eed6318a57ef0498cd3dc0b1ab698ac5f68dcf077a120310dee9f5e7e0ecc8d3e5f870f1a9ca0b8bb7b04fed529c4305d914f1c0bedd616c2d460b459c3c191970cc5c240583391c0dea54800639804a9d3000ffffff2ee5e4e0bcde96a1774a662b7162b7acb2b9b11929b30b79bded94b7e3232d75cbc8bf430225cfb765f0b686496ffa7f8f9882f8443e7a781db3b86b7569fe4f0bae93c53e0482db45e454b1834c9ae61a9e39a0ec7591faa4cf8166c97d9dcbf21e8009aabe3ca1cab74c6bb076adfb76003f89904ac72b83784ca01a8e642bf67019725ca259752a489b5405340241df9690406906d9fca697684bc591fe0f47eadf628a581c9bb79cf5ddb25e97677e720fa09eff95c740d20396618118f4663fce4b3c587911a5556a71e6489004676676003fb9e122905e1b48aee2aa72604a19b71a7df6b75fa15709c70209809286542741b7c728e007b6220a8b534843acfa1337f34e2ebad3df19e7f48444c7792413dd45413d2a7edf8e61195a74270644717f1affe9f95bd9a23e454849ba1553735a2ed1377bec8c94db4668981944d8b0bc78e89b661cdc6316ef4ebee133aae2a0dfaa378bc64a0668175ab02d16f401e3bbd82e55f8814237be3040023137a79e3d8361046ef884eb5f34c0c1a9c7de9d35f0fca13b37a6da8e7ed80fc76a1b467efc056cbe0d63b2ac9ee4a0b2a9de821f6cfdf5b24223ee9599a2384ac904a2949e63ab17669f126c3f5bb3bf8764a8114e9305dc59d0a7b0ab543900a5a507d05f42b2586b2db17021f9d01776430ef17a4540dc6c8bf70231caaa1bcd99370b9ba1db31e4eab5dc77f1efc155404307f26309cfdee7ad627b58e010eabbc4e35cd8f3b060ae2062078755a5621afbbd3109110f7750800ae466ffdfb7945ed1b642efd370cb63fd23a9b6e75b5fb9f76aea51ebb8e9b8e1c9a1b5272e2c31c2b169e6044c23ff9b437ca3c51366c136802282f2f1bb6920c40c6adf2f1db5ef35951ceaaf64656534fc08c17439cd6ef4e952baf542f4e5dec35944a20b1c18ae0eb05aa66d0fd9dd8a87a38da81fc95941e9c17090af4d92b882d9529553131910cc77180ba18c608bc0b85473c3df35681af7821715c067b65bf24918af6f3cd10b517d735e0bdba1c5537301476046898b4dad7161b4b2008f6057e049e7ee21dda927311df61278b48a7e57f253a6533dd00e97484d43f564ff61f340d8cf32360d654069c556e197af5c26133df5022e5d2247f7b1666fedcca6a2d3dcdfc2682c5826332a7c44b11996d212558915e446dc38cd6d7eb6300b0f9d17801f4af2080ec3740b290d4eaf3a661f7ff06b3cc61d331883e00af5c7d9f1ab0373aba0628052d4c494eb13af50ae37b4d92ff1f68ceeaaaeafee115c35ce689fa66fd5df4fd1885c7df80731f55e8404b4152a8cbebc5c5e97bebd31852d88ca00e50733c8d8a80afdc0ce77db35502c426f084eb950cad2cc62bcf860f2b046403ad7137b6d774981295f23d0e64da06cde0c42f75802dce4eb692f6eba804366b24898b15f1dff9952b3383fd9ffb5e5e3d41fcd16c6b6984ac37e8e20eb90b6516aa46f200388a8f7b5eb6309048f6bd40f8fdd0df0141a90e23c5463f7727fa75a9a8ad3b718aa3686640fb4944e22209ed4b74f2864f527607eb3ceddaef66546c9309114455e6d77854b52a509e3291ad0f0bb25ef640a1d386afe497c58e41b9d743e961f0b35b058e1d5afdd0d85ba17b2015db82b94caca43af80eef7c80262c1f0ebcd5865d66dbbeec6d38af85b8ec807b251fe3220365e2621366e9a1977afbd589fdb3b84d197466409ec82d7f9ee31f86c16689ffe95902485c25e59b8b21fb5feced42430322e61a53092f5cd557052560dda6e022fedfffcae1c38b3af0731e0676c8ef6d88e83da854f73b92961acb0b81c2b05ce93ecf6c6b25aec2b6ea22642590317f152ff21f9d149edbb85e16b3e04e9fe031379416076268c033c19ccb5dfe3553e9cc43efc0bf4070bec8869193a97dd44589b826fffcac605d5463bddaab2ded5a52284013435546079de583bc26cd8788c2b743c19377f1059817cd1fbb9795f7e3c3e7f86423de56ceffc8ff80156fbb5b18f9f75b1133ee62cdafddcae619c56040a03db0fde9a8f5d6a838870e60bd26ee61e7c0069513c13dc5e4de25a9c7ea612a2aa6036abc74138aad0025ec34349d8b48de4584cc3f68d582917f0accd45feb5b454e6a65dcd64ede03059ff9acd07150571449fddcdd04f140c6360b3f1b311d9a8f6700c66c89f249e1424605883bf8d833b91d16baa708794073a1fbf2f87cf00133cf5416e89ff51630aa299405cd0e5c55a32cf63949e27bae551b3e51f6db91ee40519fdb71f0f510fbee02af044a3a66729ec22bccc73d6b7440e8166441f97dccc8cde85a12841ffc135d8d66bd8a5756402874ff0aed0e17d1b96484ba9158c006d9c0cb3380edd57f0bce6da20cd119c849a33155c110a8f03d4af3d496862664b21015e5b612f7a04fb6f4aa44070afd4bbd8fb0dbc39b0dc5210384cf025772c77e67c854d59e5fbfef6bd48d57541e74c6e5b29e4337220575d6fa5975aa97c212122f45b9f2dbb3cc6b71616d6922b26cac44eeb48c66d57ff70933a4c512fcc026f4a6a8a81ea5f4e2a5158b3c8ab410324f6355b886945069787726d8a3e8112108529975fa5818de188b332f2f40f43ae3083916b48c9d2519e3a35ad88dc3e02a057a7e44d62025720692616e6806a4615e7e09298657a64fdcc0714d9a43ee7d1426aa35cd533c0304a067ef3ce3788b91a93fee32eaa1f58942b57cf418c39eeb2e45abe7c0d6fd8ac51a5cd237bef0876aaa195ecc7dbe12cb99a069ed5caf3a16aa61273d479034e3ea8a128cbb43d310651fe052fa59e05b94f070f7e45d386496424186c47b75c4aa6f3fd739ff6e5cb96247a8438fb2d41643d76446fb22499e501bfcc0e82e37e86837afed08391b1a437bf17d596b0a533fdafaf3aaa59beb7ac8cd300dae4765f2e8e19e5cae7e830938c0aae61fd1ff50056120682b979a5601ed2ebefd335631796ab2a0132f7dc5d5a35e2c82f110056e1f073082f1e5f735dce44953d18037ed8f14a66010b99985f3cab4d90758cde85a5085b3947391658f3fd9f8f9e72be4a2bd2ef0c6129d2e4a434d46d4047ed7ccd89ecc3bc2c3e3fff8fe4b3c6faba64dfb4f4d4039740deeac78dbcb26ba384428a4118358acb86316b814955a5bcc26a48a1aae5782878b7f311e01bca8727caf4f53cf23c2ad571074b146abcd757ff2c15b40465fb6d64155c445db74200b0acaed33cbc520b54a4060dcac6fe708ca181bdb49db9b0fd1577e54ac9a785d85931b20bb69fa609bc1507607aefd5aabdf7e40a9a09bcc420f1ff5ca3d7140b9f3224cde32f8a4a5384d63e07416eb23bebb52b99fcbe8d7783497cb28539b99f85a15fb21924114cf89ec13d2720a63f5f50f68cb673ce617ee18f47cf80473cb5f083f5f9e68a8d03015921cde2a99c3eb6c1b17e1def7a6f0d19ddf4d15bb1fc866c06ab60c62de8075f3457302afe0d7e2f05f511909eca1a614fd7f967800b9cb851fa42350b30b3d398eb0dcb587221aacdf046ea2f38885d2f4afbaa3c8a0b4e424e5c38e83d175e0e99bfaf830e883ad66ad4f4ca9c766b39fd6491eedff90fc2e209dc3cc2aeea2adbbeefb9235875d2a91ae636d1bfa8d164d33b7f43eb64c6108d080001400000001298030280c6000100cf5668896e1a7d4341492fb376047c7c3ba54fa14ab40184fdbaf25eb3c34580c53b7c7d86de6460859a2d59c8cc0f5b01d0002c83093c313745977231faa7fd9ed2beecd65b51991e07a3188a73a846f541bdd6e86611239e2116810494eb8a23f65978e0e82b55b75b22cf5109df4ea57031739ffb5ce3f363ca60e1428e5cf907b61648a3332d2bdda363c45626dbe21ddf27c943cd82163650b136ed839ca63fb11e91162691b95bc125e3438abed7fa1c7975ce9949ec352127f3900d557e5e00001400028008000180fffffffd080003400000000478000100198eaf1e4931d158e24158da85677f26656493cf1cdd2a29648c3ec7803be17f801513bc672e517d742edf2dd697bd2c8b2ebf899b303247a6459d178c61c0daf3e84f52f762d5c0ba0dfdb258c9534b8c39ed0a286021152253dd56de44f4a5cb788504dc3bef3cede43e7cee10ae5d18c29497180002800900020073797a320000000008000340000000034c0002800900020073797a3100000000080003400000000108000340000000020900020073797a31000000000900020073797a310000000008000180fffffffc0900020073797a3200000000c2000100050b30363bc3f185f5c70d93c72d54dd536bd9df145eb397d8b4efedd526ca20b6f2e182ed207914b4b2b67bb565561a77d0ab8ba6082ef3deb3491f055e23227b348c91d6d8011dcc0d059c7b76bb537c25d3874209bef0dd55af603e0ba7e8796cb2e877afbe53408d1ad5c34076b78c53df02d4f7720d2966899251787a2a420a884e79534e0fab04cea63f0b1afa4a926328e3e82988fb1cf00d29896b4b86db33e1085842fa8291beebbe196674f347a9b38a24b0df05c5a230ae15000004000280340002800900020073797a30000000000900020073797a300000000008000180fffffffe08000180fffffffb0800034000000002de00010018aee9192bd9ffdc2305320d20218bc7cf1e89da6dcb492900d5c6812a97e01c8d34cb264e147c4f3fed7cf3830b39763a2be8f3ad59080a278ee9320abe848053c2c57c7c731c6bc9fe1fe89381f81a336fe2cce41111bdda1263d3e03a58cce5c27f5a75a75d7d2c97b2a10775ae3e4bb6cbcdc895ebf9cf252ed855931e9a93a67984053cb28b18821e5f87416c06694a67ad74d57f4f0466aad73a5dbb91ab551fe34cc32939b3ecf070dd729d8ceb3ead4b684fee60b0bf2a06b495b01219fa614439c27b98a57b53ec6be4e92126d68a21e2dc6b34852b00000900010073797a31000000000c000340000000000000000322000740b0917bcf8c01fef261ca5a71508855b159ada52818949cf9c888f2c171ba0000"], 0x14e4}, 0x1, 0x0, 0x0, 0x404}, 0x8004) sendto(r2, &(0x7f0000000100)="97f4751c78b1fe7654ce6a304d640170c5f000a99aaa4a428686236cb8398c316595b7d4503bfe1d4a185d91e5468802208670df6a6f6a11f3c4067f5be0881d5f157e64a049dae7a44cf9f80b86ff1c81c6f298baef68", 0x57, 0x20000040, &(0x7f0000000240)=@generic={0x22, "cef9b6924823822e210119d12fd52e63abc4599870132d486c3b45a59dc1eecbd2ef2d0163fa90aa20977950956d68bbcaa4f837c824facdfd2f0b43f5c6d6a445088a2ac312e9d762d5c50562dc829875a3035fb326c47b86b760405b455d3b5353366daeb0955941ece45b195d0ea2bc254cf54edba2b94cd9ce4d94f1"}, 0x80) 27.527253ms ago: executing program 1 (id=3168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 25.908307ms ago: executing program 0 (id=3169): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf2503"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000), 0xc) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x1406, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], 0x38}}, 0x0) 0s ago: executing program 2 (id=3170): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r2], 0x2c}}, 0x4000000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000004c0)={0x969c, {{0xa, 0x4e21, 0x5, @loopback, 0x2}}, {{0xa, 0x4e21, 0x3, @private1, 0xa9e}}}, 0x108) kernel console output (not intermixed with test programs): expected=80) [ 248.588289][T11621] __nla_validate_parse: 1 callbacks suppressed [ 248.588352][T11621] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1566'. [ 248.997578][T11635] netlink: 'syz.1.1572': attribute type 11 has an invalid length. [ 248.997741][T11635] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1572'. [ 249.144896][T11645] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1575'. [ 249.155679][T11645] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1575'. [ 249.176436][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 249.518017][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1582'. [ 249.528226][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.820394][T11677] geneve0: entered allmulticast mode [ 250.325172][T11699] veth0: entered promiscuous mode [ 250.335524][T11698] veth0: left promiscuous mode [ 250.816804][T11719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.407756][T11752] syzkaller0: entered promiscuous mode [ 251.407800][T11752] syzkaller0: entered allmulticast mode [ 251.426226][T11708] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 251.806974][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 251.945560][ T5733] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 252.012379][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 252.044722][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1610'. [ 252.392943][T11791] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 252.397182][T11791] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 252.734280][T11805] netlink: 'syz.3.1620': attribute type 34 has an invalid length. [ 252.745607][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 252.934346][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1622'. [ 252.975824][T11815] bond0: ARP target 8.4.0.0 is already present [ 252.975874][T11815] bond0: option arp_ip_target: invalid value (1032) [ 253.276370][T11827] raw_sendmsg: syz.1.1625 forgot to set AF_INET. Fix it! [ 253.325053][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880121a5800: rx timeout, send abort [ 253.577021][T11842] syzkaller0: create flow: hash 14835572 index 1 [ 253.669760][ T139] syzkaller0: tun_net_xmit 76 [ 253.679666][ T139] syzkaller0: tun_net_xmit 48 [ 253.694045][ T10] syzkaller0: tun_net_xmit 76 [ 253.825139][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880121a5800: abort rx timeout. Force session deactivation [ 253.878715][T11834] syzkaller0: delete flow: hash 14835572 index 1 [ 254.159728][T11859] openvswitch: netlink: Message has 1 unknown bytes. [ 256.015134][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.015221][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.214778][T11868] netlink: Unknown conntrack attr (type=1030, max=9) [ 256.214836][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.235766][T11868] netlink: 'syz.1.1640': attribute type 12 has an invalid length. [ 256.299175][T11875] veth0: entered promiscuous mode [ 256.305075][T11865] openvswitch: netlink: Message has 8 unknown bytes. [ 256.371216][T11874] ip6t_srh: unknown srh invflags 4000 [ 256.599620][T11874] __nla_validate_parse: 1 callbacks suppressed [ 256.599676][T11874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1642'. [ 256.979031][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1647'. [ 257.061312][T11902] netlink: 'syz.4.1648': attribute type 9 has an invalid length. [ 257.073793][T11869] veth0: left promiscuous mode [ 257.115548][T11904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1650'. [ 257.125359][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'. [ 257.308080][T11918] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 257.308527][T11919] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 257.385251][T11918] team0: Port device dummy0 added [ 257.427465][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'. [ 257.506255][T11928] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 257.605081][T11928] 8021q: adding VLAN 0 to HW filter on device bond17 [ 257.653264][T11936] netlink: 'syz.1.1657': attribute type 4 has an invalid length. [ 257.804940][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 257.804998][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1659'. [ 258.080538][T11946] syzkaller0: entered promiscuous mode [ 258.086638][T11946] syzkaller0: entered allmulticast mode [ 258.099738][T11946] tipc: Enabled bearer , priority 0 [ 258.116338][T11946] tipc: Resetting bearer [ 258.145177][T11945] tipc: Resetting bearer [ 258.223554][T11945] tipc: Disabling bearer [ 258.705387][T11966] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1670'. [ 258.874976][T11979] team0: Device ipvlan0 failed to register rx_handler [ 259.310209][T12000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1679'. [ 259.542192][T12010] netlink: 'syz.0.1683': attribute type 1 has an invalid length. [ 259.748005][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 260.192691][T12033] netlink: 'syz.2.1690': attribute type 83 has an invalid length. [ 260.298055][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.298477][T12034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.299406][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.299696][T12034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.603546][T12034] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 260.694352][T12051] syzkaller1: entered promiscuous mode [ 260.694403][T12051] syzkaller1: entered allmulticast mode [ 262.171403][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.238081][T12134] netlink: 'syz.4.1718': attribute type 2 has an invalid length. [ 262.254981][T12135] netlink: 'syz.4.1718': attribute type 2 has an invalid length. [ 262.255039][T12135] __nla_validate_parse: 6 callbacks suppressed [ 262.255073][T12135] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1718'. [ 262.406443][T12139] netlink: zone id is out of range [ 262.652286][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.211833][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.693720][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.251879][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.842627][T12107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.855610][T12165] netlink: 'syz.4.1733': attribute type 2 has an invalid length. [ 264.855660][T12165] netlink: 'syz.4.1733': attribute type 2 has an invalid length. [ 265.291358][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.381836][T12178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'. [ 265.690237][T12191] team0 (unregistering): Port device team_slave_0 removed [ 265.716152][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.760220][T12194] ipt_REJECT: ECHOREPLY no longer supported. [ 265.774227][T12194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.878243][T12191] team0 (unregistering): Port device team_slave_1 removed [ 266.073482][T12191] team0 (unregistering): Port device dummy0 removed [ 266.332989][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.737030][T12236] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1757'. [ 266.829979][T12236] netlink: 'syz.2.1757': attribute type 46 has an invalid length. [ 266.842267][T12236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1757'. [ 266.864621][T12236] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1757'. [ 266.868811][T12251] netlink: 'syz.2.1757': attribute type 46 has an invalid length. [ 267.014413][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 267.371500][ T30] net_ratelimit: 1 callbacks suppressed [ 267.371564][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.477666][T12279] netlink: 'syz.0.1770': attribute type 7 has an invalid length. [ 267.513324][T12279] netlink: 'syz.0.1770': attribute type 7 has an invalid length. [ 267.513348][ T6081] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.513889][ T6081] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.514043][ T6081] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.514127][ T6081] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.929046][T12281] geneve2: entered allmulticast mode [ 268.416159][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.590589][T12316] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1778'. [ 268.646211][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 268.646295][T12322] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1782'. [ 268.646354][T12322] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1782'. [ 268.732114][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.895918][T12325] netlink: 'syz.2.1783': attribute type 12 has an invalid length. [ 268.895967][T12325] netlink: 'syz.2.1783': attribute type 29 has an invalid length. [ 268.896023][T12325] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1783'. [ 268.896051][T12325] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 268.896072][T12325] netlink: 'syz.2.1783': attribute type 2 has an invalid length. [ 268.896092][T12325] netlink: 'syz.2.1783': attribute type 3 has an invalid length. [ 268.896111][T12325] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1783'. [ 269.423231][T12341] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1789'. [ 269.434771][T12351] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1789'. [ 269.451892][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.727398][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1793'. [ 269.741051][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1793'. [ 269.822311][T12360] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 270.042274][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031b87000: rx timeout, send abort [ 270.492988][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.541314][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031b85400: rx timeout, send abort [ 270.542378][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031b87000: abort rx timeout. Force session deactivation [ 271.041418][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031b85400: abort rx timeout. Force session deactivation [ 271.253442][T12399] bond1: option mode: unable to set because the bond device has slaves [ 271.351520][T12400] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 271.535234][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.553181][T12407] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 271.562363][T12407] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 271.792623][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.864353][T12413] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 271.884385][T12413] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 272.055425][T12416] bridge4: entered allmulticast mode [ 272.325312][T12431] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 272.337152][T12431] netlink: 'syz.3.1812': attribute type 3 has an invalid length. [ 272.572395][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.646121][T12446] sctp: [Deprecated]: syz.2.1815 (pid 12446) Use of int in maxseg socket option. [ 272.646121][T12446] Use struct sctp_assoc_value instead [ 272.990033][T12459] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20000 [ 273.298071][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.298310][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.386291][T12476] syz.3.1825: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.404514][T12476] CPU: 0 UID: 0 PID: 12476 Comm: syz.3.1825 Not tainted syzkaller #0 PREEMPT(full) [ 273.404546][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.404570][T12476] Call Trace: [ 273.404583][T12476] [ 273.404594][T12476] dump_stack_lvl+0xe8/0x150 [ 273.404635][T12476] warn_alloc+0x24d/0x270 [ 273.404673][T12476] ? kasan_save_track+0x4f/0x80 [ 273.404696][T12476] ? kasan_save_track+0x3e/0x80 [ 273.404723][T12476] ? __pfx_warn_alloc+0x10/0x10 [ 273.404755][T12476] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 273.404779][T12476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.404824][T12476] __vmalloc_node_range_noprof+0x127/0x1540 [ 273.404882][T12476] ? rcu_is_watching+0x16/0xb0 [ 273.404916][T12476] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.404950][T12476] ? __kmalloc_cache_noprof+0x321/0x600 [ 273.404985][T12476] ? __kmalloc_cache_noprof+0x14d/0x600 [ 273.405020][T12476] ? xskq_create+0x56/0x220 [ 273.405058][T12476] xskq_create+0x148/0x220 [ 273.405090][T12476] ? xsk_init_queue+0x8a/0xe0 [ 273.405123][T12476] xsk_init_queue+0x8a/0xe0 [ 273.405158][T12476] xsk_setsockopt+0x52a/0x960 [ 273.405191][T12476] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.405221][T12476] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.405266][T12476] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 273.405294][T12476] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.405326][T12476] do_sock_setsockopt+0x17c/0x1b0 [ 273.405355][T12476] __x64_sys_setsockopt+0x13d/0x1b0 [ 273.405386][T12476] do_syscall_64+0x166/0x520 [ 273.405424][T12476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.405447][T12476] ? clear_bhb_loop+0x70/0xc0 [ 273.405477][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.405500][T12476] RIP: 0033:0x7fa20899e159 [ 273.405529][T12476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.405550][T12476] RSP: 002b:00007fa2097c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 273.405575][T12476] RAX: ffffffffffffffda RBX: 00007fa208c25fa0 RCX: 00007fa20899e159 [ 273.405593][T12476] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 273.405607][T12476] RBP: 00007fa208a35024 R08: 0000000000000004 R09: 0000000000000000 [ 273.405622][T12476] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.405637][T12476] R13: 00007fa208c26038 R14: 00007fa208c25fa0 R15: 00007ffe0b13c158 [ 273.405674][T12476] [ 273.432762][T12476] Mem-Info: [ 273.432780][T12476] active_anon:6334 inactive_anon:0 isolated_anon:0 [ 273.432780][T12476] active_file:0 inactive_file:43270 isolated_file:0 [ 273.432780][T12476] unevictable:0 dirty:57 writeback:0 [ 273.432780][T12476] slab_reclaimable:10825 slab_unreclaimable:105779 [ 273.432780][T12476] mapped:29469 shmem:535 pagetables:1258 [ 273.432780][T12476] sec_pagetables:0 bounce:0 [ 273.432780][T12476] kernel_misc_reclaimable:0 [ 273.432780][T12476] free:1320916 free_pcp:10862 free_cma:0 [ 273.432841][T12476] Node 0 active_anon:25336kB inactive_anon:0kB active_file:0kB inactive_file:172892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117876kB dirty:228kB writeback:0kB shmem:2140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14080kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.432904][T12476] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.432966][T12476] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.433032][T12476] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 273.433074][T12476] Node 0 DMA32 free:1330600kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25336kB inactive_anon:0kB active_file:0kB inactive_file:172892kB unevictable:0kB writepending:228kB zspages:0kB present:3129332kB managed:2546712kB mlocked:0kB bounce:0kB free_pcp:43448kB local_pcp:20444kB free_cma:0kB [ 273.433141][T12476] lowmem_reserve[]: 0 0 0 0 0 [ 273.433180][T12476] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.433251][T12476] lowmem_reserve[]: 0 0 0 0 0 [ 273.433291][T12476] Node 1 Normal free:3937704kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.433356][T12476] lowmem_reserve[]: 0 0 0 0 0 [ 273.433396][T12476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.433530][T12476] Node 0 DMA32: 542*4kB (UME) 536*8kB (UME) 293*16kB (UME) 211*32kB (UME) 69*64kB (UME) 37*128kB (UME) 10*256kB (UM) 1*512kB (E) 2*1024kB (ME) 4*2048kB (UME) 315*4096kB (M) = 1330600kB [ 273.433706][T12476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 273.433851][T12476] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 3*16kB (UM) 5*32kB (UM) 5*64kB (UM) 7*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3937704kB [ 273.434015][T12476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.434034][T12476] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.434062][T12476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.434080][T12476] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.434099][T12476] 43801 total pagecache pages [ 273.434112][T12476] 0 pages in swap cache [ 273.434120][T12476] Free swap = 124996kB [ 273.434129][T12476] Total swap = 124996kB [ 273.434138][T12476] 2097051 pages RAM [ 273.434145][T12476] 0 pages HighMem/MovableOnly [ 273.434153][T12476] 428757 pages reserved [ 273.434161][T12476] 0 pages cma reserved [ 273.747076][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.087284][T12486] __nla_validate_parse: 37 callbacks suppressed [ 274.087345][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1826'. [ 274.191849][T12478] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 274.292098][ T59] IPVS: starting estimator thread 0... [ 274.299962][T12496] IPVS: ip_vs_add_dest(): server weight less than zero [ 274.312441][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1829'. [ 274.380900][T12499] IPVS: using max 21 ests per chain, 50400 per kthread [ 274.652257][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 274.667384][T12521] lo: Caught tx_queue_len zero misconfig [ 274.811319][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.813863][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.059670][T12543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.859150][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.890991][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.277245][T12498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.546689][T12563] xt_hashlimit: size too large, truncated to 1048576 [ 277.570517][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 277.571488][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 277.597522][T12567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1848'. [ 277.615756][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1848'. [ 277.852810][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.899008][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'. [ 277.931186][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.099432][T12584] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1857'. [ 278.109755][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 278.119696][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 278.229078][T12590] netlink: 'syz.1.1856': attribute type 15 has an invalid length. [ 278.293039][T12591] netlink: 'syz.1.1856': attribute type 15 has an invalid length. [ 278.585967][T12608] netlink: 'syz.4.1863': attribute type 14 has an invalid length. [ 278.854653][T12620] bond5: entered promiscuous mode [ 278.861134][T12620] bond5: entered allmulticast mode [ 278.866872][T12620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.941748][T12625] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 278.949790][T12624] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 278.972418][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.121491][T12638] __nla_validate_parse: 6 callbacks suppressed [ 279.122355][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'. [ 279.139256][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'. [ 280.011251][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.891519][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.051147][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.752870][T12620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.013996][T12663] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 282.092112][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.649070][T12682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1883'. [ 282.664985][T12682] nbd: illegal input index 65508 [ 282.670595][T12682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1883'. [ 282.670927][T12682] nbd: illegal input index 65508 [ 282.671110][T12682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1883'. [ 282.671134][T12682] nbd: illegal input index 65508 [ 282.687311][T12682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1883'. [ 282.687378][T12682] nbd: illegal input index 65508 [ 282.687756][T12682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1883'. [ 282.687800][T12682] nbd: illegal input index 65508 [ 282.688153][T12682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1883'. [ 282.688196][T12682] nbd: illegal input index 65508 [ 282.697381][T12682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1883'. [ 282.697446][T12682] nbd: illegal input index 65508 [ 282.697843][T12682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1883'. [ 282.697885][T12682] nbd: illegal input index 65508 [ 282.698374][T12682] nbd: illegal input index 65508 [ 282.698746][T12682] nbd: illegal input index 65508 [ 282.711956][T12682] nbd: illegal input index 65508 [ 282.712140][T12682] nbd: illegal input index 65508 [ 282.715203][T12682] nbd: illegal input index 65508 [ 282.723288][T12682] nbd: illegal input index 65508 [ 282.723676][T12682] nbd: illegal input index 65508 [ 282.724017][T12682] nbd: illegal input index 65508 [ 282.759880][T12682] nbd: illegal input index 65508 [ 282.900311][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.093492][T12695] netlink: 'syz.4.1888': attribute type 12 has an invalid length. [ 283.104968][T12695] netlink: 'syz.4.1888': attribute type 29 has an invalid length. [ 283.133707][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.227838][T12697] netlink: 'syz.1.1886': attribute type 11 has an invalid length. [ 283.331270][T12707] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 283.342471][T12707] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 283.359230][T12708] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 283.594404][T12716] sctp: [Deprecated]: syz.4.1897 (pid 12716) Use of int in max_burst socket option. [ 283.594404][T12716] Use struct sctp_assoc_value instead [ 283.934833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.147682][T12743] __nla_validate_parse: 12 callbacks suppressed [ 284.166380][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 284.177768][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.471808][T12753] ip6tnl0: Caught tx_queue_len zero misconfig [ 285.221632][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.459004][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.473378][T12796] Bluetooth: hci0: unsupported parameter 5135 [ 285.473430][T12796] Bluetooth: hci0: unsupported parameter 8192 [ 285.473447][T12796] Bluetooth: hci0: unsupported parameter 5135 [ 285.473461][T12796] Bluetooth: hci0: unsupported parameter 8192 [ 285.477406][T12796] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1921'. [ 285.553132][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.556379][T12798] Bluetooth: hci0: unsupported parameter 5135 [ 285.556440][T12798] Bluetooth: hci0: unsupported parameter 8192 [ 285.556495][T12798] Bluetooth: hci0: unsupported parameter 5135 [ 285.556524][T12798] Bluetooth: hci0: unsupported parameter 8192 [ 285.573404][T12799] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1921'. [ 285.814675][T12813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1923'. [ 286.229092][T12833] netlink: 'syz.0.1929': attribute type 11 has an invalid length. [ 286.251502][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.367003][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1930'. [ 286.510050][T12840] xt_REDIRECT: bad rangesize 26624. [ 286.621380][ T5822] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.700408][T12842] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1933'. [ 286.769596][T12844] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1934'. [ 286.878918][T12853] netlink: 'syz.0.1936': attribute type 10 has an invalid length. [ 286.879441][T12853] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 286.889743][T12853] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 287.203573][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 287.240258][T12876] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 287.293002][T12877] netlink: 'syz.4.1945': attribute type 10 has an invalid length. [ 287.293049][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1945'. [ 287.321333][T12876] 8021q: adding VLAN 0 to HW filter on device bond18 [ 287.451895][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.512893][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1947'. [ 287.522286][T12884] netlink: 'syz.2.1947': attribute type 7 has an invalid length. [ 287.530270][T12884] netlink: 'syz.2.1947': attribute type 8 has an invalid length. [ 287.584955][T12895] netlink: 'syz.2.1947': attribute type 7 has an invalid length. [ 287.592951][T12895] netlink: 'syz.2.1947': attribute type 8 has an invalid length. [ 288.005881][T12911] net_ratelimit: 3 callbacks suppressed [ 288.005941][T12911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.125066][T12917] vlan0: entered promiscuous mode [ 288.355934][T12926] tipc: Enabling of bearer rejected, failed to enable media [ 289.395442][T12981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.404973][T12983] openvswitch: netlink: Flow key attr not present in new flow. [ 289.751331][T13010] __nla_validate_parse: 6 callbacks suppressed [ 289.758341][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1977'. [ 289.758386][T13010] openvswitch: netlink: Flow key attr not present in new flow. [ 289.865625][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'. [ 289.865679][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'. [ 290.081514][T13030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1982'. [ 290.520738][ T5985] udevd[5985]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 290.940103][T13010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.042104][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'. [ 291.174630][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1989'. [ 291.175082][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1989'. [ 292.034803][T13055] xfrm0: entered promiscuous mode [ 292.044912][T13055] xfrm0: entered allmulticast mode [ 292.174240][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.174310][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.174368][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.262830][T13076] netlink: 'syz.3.1994': attribute type 1 has an invalid length. [ 292.271165][T13076] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1994'. [ 292.271190][T13076] netlink: 'syz.3.1994': attribute type 1 has an invalid length. [ 292.357730][T13077] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1992'. [ 292.357790][T13077] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1992'. [ 292.477758][T13085] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 292.478997][T13085] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20003 [ 292.487563][T13085] sctp: [Deprecated]: syz.0.1996 (pid 13085) Use of int in maxseg socket option. [ 292.487563][T13085] Use struct sctp_assoc_value instead [ 292.662516][T13094] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 292.662596][T13094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.846416][T13103] sctp: [Deprecated]: syz.4.2000 (pid 13103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.846416][T13103] Use struct sctp_sack_info instead [ 294.095947][T13158] syzkaller1: entered promiscuous mode [ 294.102027][T13158] syzkaller1: entered allmulticast mode [ 294.969069][T13201] __nla_validate_parse: 3 callbacks suppressed [ 294.980236][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 294.980292][T13201] netlink: 'syz.2.2030': attribute type 29 has an invalid length. [ 294.980325][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 295.011418][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 295.011471][T13204] netlink: 'syz.2.2030': attribute type 29 has an invalid length. [ 295.011502][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 295.042895][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 295.042965][T13201] netlink: 'syz.2.2030': attribute type 29 has an invalid length. [ 295.043000][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 295.514328][T13218] x_tables: duplicate underflow at hook 1 [ 295.540543][T13218] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 295.819579][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2042'. [ 295.928059][T13235] team0: Port device team_slave_0 removed [ 295.979353][T13242] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2044'. [ 296.224778][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 296.241639][T13249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.360440][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 296.985626][T13278] netlink: 'syz.1.2056': attribute type 1 has an invalid length. [ 297.467169][T13303] netlink: 'syz.3.2066': attribute type 21 has an invalid length. [ 297.482375][T13304] : renamed from bond0 [ 297.488568][T13304] bond1: Primary slave changed to , reselecting active slave [ 297.509093][T13303] netlink: 'syz.3.2066': attribute type 21 has an invalid length. [ 298.260394][T13324] netlink: 'syz.1.2071': attribute type 7 has an invalid length. [ 298.260451][T13324] netlink: 'syz.1.2071': attribute type 8 has an invalid length. [ 298.763186][T13361] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 299.626678][T13377] netlink: 'syz.1.2088': attribute type 10 has an invalid length. [ 299.780355][T13404] netlink: 'syz.3.2096': attribute type 15 has an invalid length. [ 299.942879][T13409] bridge0: port 3(batadv1) entered blocking state [ 299.952835][T13409] bridge0: port 3(batadv1) entered disabled state [ 299.953046][T13409] batadv1: entered allmulticast mode [ 299.969466][T13409] batadv1: entered promiscuous mode [ 299.992639][T13409] __nla_validate_parse: 25 callbacks suppressed [ 299.999490][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 300.051865][T13409] bridge0: port 4(batadv2) entered blocking state [ 300.051997][T13409] bridge0: port 4(batadv2) entered disabled state [ 300.052192][T13409] batadv2: entered allmulticast mode [ 300.075240][T13409] batadv2: entered promiscuous mode [ 300.084696][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 300.114706][T13409] bridge0: port 5(batadv3) entered blocking state [ 300.123003][T13409] bridge0: port 5(batadv3) entered disabled state [ 300.129807][T13409] batadv3: entered allmulticast mode [ 300.155704][T13409] batadv3: entered promiscuous mode [ 300.167918][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 300.233431][T13409] bridge0: port 6(batadv4) entered blocking state [ 300.233990][T13409] bridge0: port 6(batadv4) entered disabled state [ 300.235867][T13409] batadv4: entered allmulticast mode [ 300.255118][T13409] batadv4: entered promiscuous mode [ 300.267444][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 300.323170][T13409] bridge0: port 7(batadv5) entered blocking state [ 300.325533][T13409] bridge0: port 7(batadv5) entered disabled state [ 300.327982][T13409] batadv5: entered allmulticast mode [ 300.345512][T13409] batadv5: entered promiscuous mode [ 300.356714][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 300.402008][ T13] batman_adv: batadv1: IGMP Querier appeared [ 300.402057][ T13] batman_adv: batadv1: MLD Querier appeared [ 300.457676][T13409] bridge0: port 8(batadv6) entered blocking state [ 300.459886][T13409] bridge0: port 8(batadv6) entered disabled state [ 300.466255][T13409] batadv6: entered allmulticast mode [ 300.486660][T13409] batadv6: entered promiscuous mode [ 300.524593][ T59] batman_adv: batadv2: IGMP Querier appeared [ 300.525002][ T59] batman_adv: batadv2: MLD Querier appeared [ 300.529905][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 300.588823][T13409] bridge0: port 9(batadv7) entered blocking state [ 300.588960][T13409] bridge0: port 9(batadv7) entered disabled state [ 300.589151][T13409] batadv7: entered allmulticast mode [ 300.605769][T13409] batadv7: entered promiscuous mode [ 300.611920][ T59] batman_adv: batadv3: IGMP Querier appeared [ 300.611938][ T59] batman_adv: batadv3: MLD Querier appeared [ 300.615930][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 300.713437][ T6081] batman_adv: batadv4: IGMP Querier appeared [ 300.713475][ T6081] batman_adv: batadv4: MLD Querier appeared [ 300.737207][T13409] bridge0: port 10(batadv8) entered blocking state [ 300.744347][T13409] bridge0: port 10(batadv8) entered disabled state [ 300.751484][T13409] batadv8: entered allmulticast mode [ 300.759268][T13409] batadv8: entered promiscuous mode [ 300.791708][ T6081] batman_adv: batadv5: IGMP Querier appeared [ 300.791753][ T6081] batman_adv: batadv5: MLD Querier appeared [ 300.943846][ T6081] batman_adv: batadv6: IGMP Querier appeared [ 300.944663][ T6081] batman_adv: batadv6: MLD Querier appeared [ 301.062856][ T6081] batman_adv: batadv7: IGMP Querier appeared [ 301.062904][ T6081] batman_adv: batadv7: MLD Querier appeared [ 301.084431][T13448] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2110'. [ 301.141049][T13456] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2111'. [ 301.159544][T13459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2111'. [ 301.242583][ T59] batman_adv: batadv8: IGMP Querier appeared [ 301.242624][ T59] batman_adv: batadv8: MLD Querier appeared [ 302.282736][T13517] netlink: 'syz.0.2126': attribute type 32 has an invalid length. [ 302.312087][T13517] bond2: option coupled_control: invalid value (110) [ 302.321983][T13517] bond2 (unregistering): Released all slaves [ 304.459834][T13472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.882287][T13531] bond2: (slave bond_slave_0): Device is not our slave [ 304.882333][T13531] bond2: option active_slave: invalid value (bond_slave_0) [ 304.921735][T13531] bond2 (unregistering): Released all slaves [ 305.031947][T13529] __nla_validate_parse: 4 callbacks suppressed [ 305.032005][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 305.069455][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 305.258477][T13554] openvswitch: netlink: Flow actions attr not present in new flow. [ 305.376637][ T31] audit: type=1804 audit(1788552688.775:3): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2137" name="/newroot/448/cgroup.controllers" dev="tmpfs" ino=2301 res=1 errno=0 [ 305.401454][ T31] audit: type=1800 audit(1788552688.805:4): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2137" name="cgroup.controllers" dev="tmpfs" ino=2301 res=0 errno=0 [ 305.606966][T13572] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2140'. [ 305.760422][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2141'. [ 305.796933][T13576] bond0: (slave bond_slave_0): Releasing backup interface [ 305.943759][T13576] bond_slave_0: entered promiscuous mode [ 305.943807][T13576] bond_slave_0: entered allmulticast mode [ 306.074451][T13583] netlink: 'syz.0.2142': attribute type 62 has an invalid length. [ 306.083770][T13583] netlink: 'syz.0.2142': attribute type 62 has an invalid length. [ 306.105645][T13583] netlink: 'syz.0.2142': attribute type 62 has an invalid length. [ 306.106383][T13583] netlink: 'syz.0.2142': attribute type 62 has an invalid length. [ 306.117859][T13583] netlink: 'syz.0.2142': attribute type 62 has an invalid length. [ 306.118641][T13583] netlink: 'syz.0.2142': attribute type 62 has an invalid length. [ 306.148276][T13583] netlink: 'syz.0.2142': attribute type 62 has an invalid length. [ 306.535178][T13596] xt_TCPMSS: Only works on TCP SYN packets [ 306.624299][T13607] netlink: 'syz.2.2146': attribute type 15 has an invalid length. [ 307.292619][T13638] ipvlan2: entered allmulticast mode [ 307.292670][T13638] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 307.308909][T13650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2153'. [ 307.325610][T13638] batman_adv: batadv0: Adding interface: ipvlan2 [ 307.325659][T13638] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.329514][T13638] batman_adv: batadv0: Interface activated: ipvlan2 [ 307.725546][T13664] bond0: Caught tx_queue_len zero misconfig [ 307.832004][T13670] netlink: 'syz.0.2158': attribute type 2 has an invalid length. [ 308.003574][T13667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.039519][T13678] netlink: 'syz.4.2160': attribute type 7 has an invalid length. [ 308.039571][T13678] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2160'. [ 308.070582][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2160'. [ 308.535657][T13698] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2165'. [ 308.651290][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 308.958580][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2167'. [ 309.086668][T13713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2167'. [ 310.309077][T13768] bond7: option miimon: invalid value (18446744073709551365) [ 310.309127][T13768] bond7: option miimon: allowed values 0 - 2147483647 [ 310.339538][T13768] bond7 (unregistering): Released all slaves [ 310.425221][T13763] bridge0: port 3(dummy0) entered disabled state [ 310.448252][T13763] bridge_slave_1: left allmulticast mode [ 310.448297][T13763] bridge_slave_1: left promiscuous mode [ 310.451409][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.497579][T13763] bridge_slave_0: left promiscuous mode [ 310.506348][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.996339][T13809] __nla_validate_parse: 3 callbacks suppressed [ 310.996397][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2190'. [ 311.018533][T13809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2190'. [ 311.104072][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2189'. [ 311.228363][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2194'. [ 311.237754][T13827] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2194'. [ 311.761956][T13846] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 311.771567][T13846] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 312.171773][T13863] netlink: Failed to add helper -22 [ 312.171858][T13863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.248763][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 312.592861][T13887] validate_nla: 1 callbacks suppressed [ 312.593831][T13887] netlink: 'syz.2.2213': attribute type 2 has an invalid length. [ 312.665575][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.665638][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.665706][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.665793][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.665861][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.665935][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.665993][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666058][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666148][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666220][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666287][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666359][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666424][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666501][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666575][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666645][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666717][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666784][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666848][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666922][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.666982][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.673969][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.674014][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.674042][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.674068][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.674094][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.674120][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.674146][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.674172][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.674198][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.697707][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.697868][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 312.697941][T13894] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 313.287101][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2217'. [ 313.544994][T13914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2218'. [ 313.836622][T13937] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 313.836685][T13937] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 313.902234][T13939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2223'. [ 314.143326][T13950] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 314.180813][T13950] xt_TCPMSS: Only works on TCP SYN packets [ 314.217976][T13955] SET target dimension over the limit! [ 314.284875][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2229'. [ 314.465253][T13961] ip_tables: iptables: counters copy to user failed while replacing table [ 314.586946][T13965] netlink: 'syz.2.2232': attribute type 7 has an invalid length. [ 314.824880][T13982] batman_adv: batadv0: Adding interface: veth0 [ 314.824923][T13982] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.824957][T13982] batman_adv: batadv0: Interface activated: veth0 [ 314.929479][T13981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.929531][T13981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.954722][T13981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.954777][T13981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.996162][T13981] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 314.996213][T13981] batman_adv: batadv0: Removing interface: ipvlan2 [ 315.013910][T13981] batman_adv: batadv0: Interface deactivated: veth0 [ 315.013962][T13981] batman_adv: batadv0: Removing interface: veth0 [ 315.167622][T13999] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 315.895635][T14043] sctp: [Deprecated]: syz.2.2253 (pid 14043) Use of int in maxseg socket option. [ 315.895635][T14043] Use struct sctp_assoc_value instead [ 315.922684][T14044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.017515][T14051] netlink: 'syz.4.2255': attribute type 2 has an invalid length. [ 316.017564][T14051] __nla_validate_parse: 7 callbacks suppressed [ 316.017577][T14051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2255'. [ 316.169828][T14056] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2254'. [ 316.285322][T14069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2262'. [ 316.497264][T14077] dvmrp8: entered allmulticast mode [ 316.622514][T14088] netlink: 'syz.4.2265': attribute type 20 has an invalid length. [ 316.726565][T14097] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2265'. [ 316.899098][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 316.960513][T14106] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 317.096502][T14113] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.107093][T14113] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.163902][T14118] netlink: 'syz.2.2271': attribute type 12 has an invalid length. [ 317.178323][T14120] bridge0: port 1(veth1_to_bridge) entered blocking state [ 317.178502][T14120] bridge0: port 1(veth1_to_bridge) entered disabled state [ 317.178678][T14120] veth1_to_bridge: entered allmulticast mode [ 317.211812][T14120] veth1_to_bridge: entered promiscuous mode [ 317.212737][T14120] bridge0: port 1(veth1_to_bridge) entered blocking state [ 317.212849][T14120] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 317.365336][T14125] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 317.374003][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2275'. [ 317.456681][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.463400][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.474507][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'. [ 317.485163][T14129] netlink: NAT attribute has 5 unknown bytes [ 317.491464][T14129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.529415][T14131] netlink: 'syz.2.2276': attribute type 2 has an invalid length. [ 317.538895][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2276'. [ 317.762802][T14136] syzkaller0: entered promiscuous mode [ 317.762855][T14136] syzkaller0: entered allmulticast mode [ 317.864294][T14136] tipc: Enabled bearer , priority 0 [ 317.884835][T14134] tipc: Resetting bearer [ 317.950273][T14134] tipc: Disabling bearer [ 318.176571][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 318.409729][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2288'. [ 318.544357][T14182] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 318.926391][T14207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 319.362903][T14227] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 319.374900][T14227] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 319.641244][T14244] netlink: 'syz.2.2308': attribute type 11 has an invalid length. [ 319.654944][T14233] netlink: 'syz.0.2304': attribute type 4 has an invalid length. [ 319.717389][T14243] netlink: 'syz.0.2304': attribute type 4 has an invalid length. [ 319.940159][T14253] bond0: ARP target 8.4.0.0 is already present [ 319.940210][T14253] bond0: option arp_ip_target: invalid value (1032) [ 320.024090][T14253] netlink: 'syz.0.2311': attribute type 8 has an invalid length. [ 320.275998][T14270] netlink: 'syz.1.2317': attribute type 5 has an invalid length. [ 320.856746][T14289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.856808][T14289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.058366][T14305] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 321.086565][T14289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.116294][T14289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.318156][T14289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.328761][T14289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.435213][T14313] syzkaller1: entered promiscuous mode [ 321.435263][T14313] syzkaller1: entered allmulticast mode [ 321.788062][T14289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.788130][T14289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.117168][T14345] __nla_validate_parse: 13 callbacks suppressed [ 322.117238][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 322.144161][T14351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2334'. [ 322.250367][ T6067] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.250424][ T6067] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.500391][ T6067] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.500458][ T6067] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.617678][T14379] xt_hashlimit: max too large, truncated to 1048576 [ 322.628166][T14379] No such timeout policy "syz1" [ 322.831731][T14393] trusted_key: syz.3.2341 sent an empty control message without MSG_MORE. [ 323.044226][T14296] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.044287][T14296] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.180129][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 323.209750][T14405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2343'. [ 323.220183][T14405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2343'. [ 323.269198][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 323.291953][T14296] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.292024][T14296] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.566449][T14373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.831847][T14501] netlink: 'syz.4.2349': attribute type 32 has an invalid length. [ 325.931860][T14509] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2353'. [ 326.695580][T14521] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 326.702006][ T6078] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.702042][ T6078] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.737266][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 326.757948][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.758018][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.799035][T14526] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 326.936272][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 327.030877][ T6078] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.036947][ T6078] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.063023][T14551] netlink: 'syz.0.2363': attribute type 6 has an invalid length. [ 327.072621][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2363'. [ 327.082217][T14551] bridge: RTM_NEWNEIGH with invalid ether address [ 327.109136][ T6078] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.109199][ T6078] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.333380][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 327.652998][T14577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2374'. [ 327.657889][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 327.969041][T14593] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2378'. [ 328.387379][T14610] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 328.708206][T14624] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2391'. [ 328.873393][T14636] netlink: 'syz.4.2395': attribute type 10 has an invalid length. [ 328.944080][T14636] syz_tun: entered promiscuous mode [ 328.972339][T14636] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 329.012349][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'. [ 329.182531][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2396'. [ 329.182587][T14646] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2396'. [ 329.478913][T14666] tipc: Failed to remove unknown binding: 66,0,0/0:1653395931/1653395932 [ 329.479446][T14666] tipc: Failed to remove unknown binding: 66,0,0/0:1653395931/1653395932 [ 329.814650][T14679] ipvlan1: entered promiscuous mode [ 329.814692][T14679] ipvlan1: entered allmulticast mode [ 330.162554][T14702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2406'. [ 330.346372][T14709] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2408'. [ 330.403825][T14705] syzkaller1: entered promiscuous mode [ 330.403880][T14705] syzkaller1: entered allmulticast mode [ 330.655347][T14717] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 330.791194][T14721] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000 [ 330.804429][T14721] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 331.439855][T14741] sit0: entered promiscuous mode [ 331.456201][T14741] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 331.653001][T14753] netlink: 'syz.2.2421': attribute type 3 has an invalid length. [ 331.873167][T14757] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 332.199454][T14789] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 332.199651][T14789] syzkaller1: Refused to change device type [ 332.219360][T14787] netlink: 'syz.2.2431': attribute type 2 has an invalid length. [ 332.268306][T14787] gretap0: entered promiscuous mode [ 332.288136][T14791] syzkaller0: entered promiscuous mode [ 332.293976][T14791] syzkaller0: entered allmulticast mode [ 333.444803][T14815] __nla_validate_parse: 4 callbacks suppressed [ 333.445848][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2437'. [ 333.445936][T14815] netlink: 'syz.4.2437': attribute type 5 has an invalid length. [ 333.445986][T14815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2437'. [ 333.497845][T14815] geneve2: entered promiscuous mode [ 333.497893][T14815] geneve2: entered allmulticast mode [ 333.511604][ T6081] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 333.511671][ T6081] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 333.511725][ T6081] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 333.511775][ T6081] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 334.758512][T14763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.884761][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805636b400: rx timeout, send abort [ 335.384852][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805636b400: abort rx timeout. Force session deactivation [ 335.385051][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055401400: rx timeout, send abort [ 335.591874][T14872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2456'. [ 335.755594][T14866] syzkaller0: entered promiscuous mode [ 335.757264][T14866] syzkaller0: entered allmulticast mode [ 335.823372][T14889] sctp: [Deprecated]: syz.3.2459 (pid 14889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.823372][T14889] Use struct sctp_sack_info instead [ 335.886495][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055401400: abort rx timeout. Force session deactivation [ 335.995270][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 335.995326][T14900] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2461'. [ 335.996753][T14900] netlink: 'syz.3.2461': attribute type 5 has an invalid length. [ 336.074864][T14905] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.788674][T14919] batadv_slave_0: entered promiscuous mode [ 338.791500][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2466'. [ 338.791902][T14919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.955549][T14919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.959971][T14929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2465'. [ 339.169933][T14926] erspan0: left promiscuous mode [ 339.224303][T14926] 8021q: adding VLAN 0 to HW filter on device  [ 339.259912][T14926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.313660][T14926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.326077][T14926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.326131][T14926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.335305][T14926] hsr0: left promiscuous mode [ 339.357394][T14926] veth1_vlan: left promiscuous mode [ 339.363634][T14926] veth0_vlan: left promiscuous mode [ 339.373939][T14926] veth0_vlan: entered promiscuous mode [ 339.388319][T14926] veth1_vlan: entered promiscuous mode [ 339.415088][T14926] veth1_macvtap: left promiscuous mode [ 339.424800][T14926] veth0_macvtap: left promiscuous mode [ 339.434690][T14926] veth0_macvtap: entered promiscuous mode [ 339.444072][T14926] veth1_macvtap: entered promiscuous mode [ 339.461622][T14926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.471842][T14926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.486595][T14926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.517414][T14926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.588566][T14926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.602224][T14926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.617961][T14926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.629979][T14926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.637710][T14926] erspan0: entered promiscuous mode [ 339.644516][T14953] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2472'. [ 339.657489][T14926] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.711426][T14926] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.773106][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.773255][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.802031][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.803249][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.960243][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2475'. [ 340.226324][T14980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2479'. [ 340.401369][ T6081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.441556][ T6067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.452989][ T6067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.674465][ T8484] bond1: (slave ): link status definitely up, 20000 Mbps full duplex [ 340.684961][ T8484] bond1: (slave ): making interface the new active one [ 340.754789][ T8484] bond1: active interface up! [ 340.992501][T15009] netlink: 'syz.2.2484': attribute type 29 has an invalid length. [ 340.992555][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 341.011126][T15010] netlink: 'syz.2.2484': attribute type 29 has an invalid length. [ 341.011169][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 341.037109][T15014] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 341.325886][T15023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.078763][T15073] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2504'. [ 342.311918][T15078] xt_CT: No such helper "netbios-ns" [ 342.370154][T15079] xt_CT: No such helper "netbios-ns" [ 342.434033][T15088] Bluetooth: hci0: unsupported parameter 5134 [ 342.434084][T15088] Bluetooth: hci0: unsupported parameter 8192 [ 342.434100][T15088] Bluetooth: hci0: unsupported parameter 5134 [ 342.434114][T15088] Bluetooth: hci0: unsupported parameter 8192 [ 342.435776][T15088] netlink: 'syz.3.2508': attribute type 10 has an invalid length. [ 342.488713][T15088] syz_tun: entered promiscuous mode [ 342.510019][T15093] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 342.539965][T15088] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 342.794950][T15113] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2514'. [ 342.977435][T15119] syzkaller0: entered promiscuous mode [ 342.977482][T15119] syzkaller0: entered allmulticast mode [ 343.759668][T15140] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2519'. [ 344.189934][T15135] syzkaller0: entered promiscuous mode [ 344.189980][T15135] syzkaller0: entered allmulticast mode [ 344.327839][T15118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2515'. [ 344.327896][T15118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2515'. [ 344.546740][T15157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2515'. [ 344.546801][T15157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2515'. [ 344.594162][T15118] gretap1: entered promiscuous mode [ 344.601031][T15118] gretap1: entered allmulticast mode [ 344.753767][T15162] netlink: 'syz.4.2523': attribute type 2 has an invalid length. [ 345.006411][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'. [ 345.118609][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 345.118674][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 345.180142][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.180201][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.468048][T15191] netlink: 'syz.2.2530': attribute type 12 has an invalid length. [ 345.945205][T15212] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 346.058304][T15217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2534'. [ 346.328157][T15231] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 346.788479][T15256] netlink: 'syz.1.2543': attribute type 39 has an invalid length. [ 346.836544][T15257] netlink: 'syz.4.2545': attribute type 1 has an invalid length. [ 347.206430][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2548'. [ 348.074661][T15317] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2564'. [ 348.155861][T15317] nbd: must specify at least one socket [ 348.336064][T15332] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 348.348263][T15332] bridge_slave_0: invalid flags given to default FDB implementation [ 349.472538][T15381] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:5 [ 349.571091][T15380] __nla_validate_parse: 7 callbacks suppressed [ 349.571154][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2577'. [ 349.592054][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2577'. [ 349.599307][T15386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2580'. [ 349.599390][T15386] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 349.796414][T15394] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2583'. [ 349.914591][T15402] netlink: 'syz.3.2584': attribute type 10 has an invalid length. [ 349.944739][T15402] netlink: 'syz.3.2584': attribute type 10 has an invalid length. [ 350.134050][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2585'. [ 350.212081][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'. [ 350.466977][T15427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.609599][T15440] netlink: 'syz.0.2592': attribute type 6 has an invalid length. [ 350.618101][T15439] netlink: 'syz.0.2592': attribute type 6 has an invalid length. [ 353.788210][T15456] ip6t_srh: unknown srh invflags 4000 [ 353.790430][T15455] ip6t_srh: unknown srh invflags 4000 [ 353.808236][T15455] netlink: 'syz.1.2596': attribute type 4 has an invalid length. [ 353.808285][T15455] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2596'. [ 354.267799][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2598'. [ 354.297271][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'. [ 354.351280][T15476] blkio.reset_stats is deprecated [ 354.499142][T15486] netlink: 'syz.0.2604': attribute type 46 has an invalid length. [ 354.970390][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 355.032448][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 355.032507][T15505] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2611'. [ 355.087882][T15505] geneve3: entered promiscuous mode [ 355.087931][T15505] geneve3: entered allmulticast mode [ 355.168078][T15514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2615'. [ 355.528980][T15532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2619'. [ 355.637053][T15535] bridge5: entered allmulticast mode [ 355.712592][T15539] x_tables: duplicate underflow at hook 2 [ 355.846204][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 355.846269][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'. [ 355.847045][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 355.847069][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'. [ 358.655372][T15537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.963797][T15597] sctp: [Deprecated]: syz.4.2632 (pid 15597) Use of int in max_burst socket option deprecated. [ 358.963797][T15597] Use struct sctp_assoc_value instead [ 359.015078][T15605] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2635'. [ 359.251150][T15620] nftables ruleset with unbound chain [ 360.237008][T15661] __nla_validate_parse: 6 callbacks suppressed [ 360.237065][T15661] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2650'. [ 360.396454][T15668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2654'. [ 360.474552][T15673] netlink: 'syz.3.2656': attribute type 1 has an invalid length. [ 360.623894][T15673] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.744956][T15674] bond6: (slave gretap3): making interface the new active one [ 360.757544][T15674] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 361.194766][T15711] geneve2: entered allmulticast mode [ 361.218877][T15714] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 361.376102][T15718] bond7: option fail_over_mac: invalid value (16) [ 361.386307][T15718] bond7 (unregistering): Released all slaves [ 361.471586][T15724] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 361.504593][T15724] bond3 (unregistering): Released all slaves [ 361.749493][T15731] netlink: 'syz.4.2668': attribute type 1 has an invalid length. [ 361.749540][T15731] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2668'. [ 361.856105][T15735] openvswitch: netlink: IP tunnel dst address not specified [ 361.856173][T15735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.378827][T15743] veth0: entered promiscuous mode [ 362.515936][T15751] veth0: left promiscuous mode [ 362.863704][T15761] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 362.863750][T15761] netlink: 'syz.3.2672': attribute type 3 has an invalid length. [ 362.863960][T15761] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2672'. [ 363.113230][T15772] sctp: [Deprecated]: syz.2.2675 (pid 15772) Use of int in maxseg socket option. [ 363.113230][T15772] Use struct sctp_assoc_value instead [ 363.490294][T15785] netlink: Unknown conntrack attr (type=1030, max=9) [ 363.490363][T15785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.557662][T15785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.862711][T15769] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 364.020802][T15810] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 364.488751][T15834] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2693'. [ 364.631850][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 365.051521][ T5635] Bluetooth: hci1: command 0x0406 tx timeout [ 365.720099][T15876] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 365.720141][T15876] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2707'. [ 365.746657][T15880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2706'. [ 365.777030][T15879] netlink: 'syz.3.2706': attribute type 12 has an invalid length. [ 366.034528][T15889] x_tables: duplicate underflow at hook 1 [ 366.094937][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 366.176220][T15887] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2710'. [ 366.666744][T15908] IPVS: stopping master sync thread 7969 ... [ 367.286681][T15931] netlink: 'syz.0.2724': attribute type 2 has an invalid length. [ 367.298847][T15931] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2724'. [ 367.852719][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'. [ 367.852766][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'. [ 368.242214][T15976] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 368.269717][T15982] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 368.330354][T15977] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2735'. [ 368.840889][T15997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2739'. [ 369.075127][T16004] tipc: Enabled bearer , priority 0 [ 369.075954][T16004] syzkaller0: entered promiscuous mode [ 369.076319][T16004] syzkaller0: entered allmulticast mode [ 369.095703][T16004] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 369.198234][T16004] tipc: Resetting bearer [ 369.214038][T16002] tipc: Resetting bearer [ 369.337745][T16002] tipc: Disabling bearer [ 369.340535][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 370.730127][T16076] __nla_validate_parse: 7 callbacks suppressed [ 370.736694][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2763'. [ 370.746779][T16076] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2763'. [ 370.746808][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2763'. [ 371.178547][T16087] SET target dimension over the limit! [ 371.263975][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 371.264042][T16087] netlink: 'syz.4.2767': attribute type 22 has an invalid length. [ 371.264077][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2767'. [ 371.347417][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2771'. [ 371.359922][T16099] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 371.374966][T16097] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2770'. [ 371.421783][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 371.421842][T16087] netlink: 'syz.4.2767': attribute type 22 has an invalid length. [ 371.421858][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2767'. [ 371.689931][T16111] tipc: Enabling of bearer rejected, already enabled [ 371.856421][T16113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2776'. [ 372.386058][T16116] ip_tables: iptables: counters copy to user failed while replacing table [ 372.859826][T16158] netlink: 'syz.1.2789': attribute type 8 has an invalid length. [ 372.901847][T16159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.022964][T16166] bond1: (slave ): Releasing active interface [ 373.046528][T16166] bridge_slave_0: left allmulticast mode [ 373.046587][T16166] bridge_slave_0: left promiscuous mode [ 373.047366][T16166] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.079524][T16166] bridge_slave_1: left promiscuous mode [ 373.080149][T16166] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.105904][T16166] : (slave bond_slave_0): Releasing backup interface [ 373.123125][T16166] bond_slave_0: left allmulticast mode [ 373.144554][T16166] : (slave bond_slave_1): Releasing backup interface [ 373.159058][T16166] bond_slave_1: left allmulticast mode [ 373.179773][T16166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.179827][T16166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.202881][T16166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.771190][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.854425][T16122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.120139][T16182] openvswitch: netlink: Missing valid actions attribute. [ 375.143166][T16177] netlink: 'syz.4.2793': attribute type 10 has an invalid length. [ 375.259410][T16177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.285404][T16177] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 375.370804][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.382508][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.394057][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.404600][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.749315][T16205] __nla_validate_parse: 2 callbacks suppressed [ 375.757501][T16205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2799'. [ 375.786908][T16211] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2801'. [ 375.819265][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 376.277780][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 376.326383][T16239] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 376.455372][T16242] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2810'. [ 376.464735][T16242] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2810'. [ 376.474197][T16242] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2810'. [ 376.649219][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'. [ 376.860534][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 377.155166][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 377.186897][T16272] bond4: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 377.197220][T16272] bond4: entered allmulticast mode [ 377.251970][T16272] bridge7: entered promiscuous mode [ 377.266578][T16272] bridge7: entered allmulticast mode [ 377.274816][T16272] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 377.331034][T16277] x_tables: duplicate underflow at hook 1 [ 377.337344][T16277] openvswitch: netlink: Missing valid actions attribute. [ 378.432027][ T4934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.449835][ T4934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.462534][ T4934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.477230][ T4934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.489483][ T4934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.897541][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.209187][T16347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.298819][T16347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.394014][T16359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.419901][T16347] netlink: 'syz.3.2839': attribute type 1 has an invalid length. [ 379.655158][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.655224][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.735415][T16359] bridge5: entered promiscuous mode [ 379.769573][T16359] bond9: (slave bridge5): making interface the new active one [ 379.788398][T16359] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 380.009628][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.009697][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.125179][T16379] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 380.147378][T16379] bond0 (unregistering): Released all slaves [ 380.526495][T16377] syzkaller0: entered promiscuous mode [ 380.526552][T16377] syzkaller0: entered allmulticast mode [ 380.569688][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.571346][ T5635] Bluetooth: hci5: command tx timeout [ 380.581710][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.060287][T16421] __nla_validate_parse: 7 callbacks suppressed [ 381.060663][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 381.365484][T16428] netlink: 'syz.0.2853': attribute type 2 has an invalid length. [ 381.392056][T16428] netlink: 'syz.0.2853': attribute type 2 has an invalid length. [ 381.392110][T16428] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2853'. [ 382.651726][ T5635] Bluetooth: hci5: command tx timeout [ 383.815835][ T59] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.815905][ T59] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.955950][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 383.956019][T16442] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 384.735633][ T5635] Bluetooth: hci5: command tx timeout [ 386.178127][T16445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 386.773623][T16466] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2864'. [ 386.815586][ T5635] Bluetooth: hci5: command tx timeout [ 386.908842][ T59] veth1_to_bridge: left allmulticast mode [ 386.917486][ T59] veth1_to_bridge: left promiscuous mode [ 386.923491][ T59] bridge0: port 1(veth1_to_bridge) entered disabled state [ 387.943687][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.958757][ T59] bond0 (unregistering): Released all slaves [ 387.970444][ T59] bond1 (unregistering): Released all slaves [ 387.985552][ T59] bond2 (unregistering): Released all slaves [ 388.012191][ T59] bond3 (unregistering): Released all slaves [ 388.027015][ T59] bond4 (unregistering): Released all slaves [ 388.044625][ T59] bond5 (unregistering): Released all slaves [ 388.059384][ T59] bond6 (unregistering): Released all slaves [ 388.210257][T16484] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 388.302857][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 388.729311][T16524] tunl0: entered promiscuous mode [ 388.738574][T16524] netlink: 'syz.0.2869': attribute type 4 has an invalid length. [ 388.759119][T16524] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2869'. [ 388.816439][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2872'. [ 388.949498][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.972521][T16323] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.979986][T16323] bridge_slave_0: entered allmulticast mode [ 389.004032][T16323] bridge_slave_0: entered promiscuous mode [ 389.013124][T16323] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.013232][T16323] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.013387][T16323] bridge_slave_1: entered allmulticast mode [ 389.049541][T16323] bridge_slave_1: entered promiscuous mode [ 389.215520][T16323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.229069][T16323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.346824][T16323] team0: Port device team_slave_0 added [ 389.370255][T16323] team0: Port device team_slave_1 added [ 389.507576][T16323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.507618][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.507648][T16323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.533215][T16323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.533269][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.533354][T16323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.921572][T16323] hsr_slave_0: entered promiscuous mode [ 389.924841][T16323] hsr_slave_1: entered promiscuous mode [ 389.927082][T16323] debugfs: 'hsr0' already exists in 'hsr' [ 389.927151][T16323] Cannot create hsr debugfs directory [ 389.957622][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 390.406946][T16568] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2879'. [ 390.475109][ T59] hsr_slave_0: left promiscuous mode [ 390.481527][ T59] hsr_slave_1: left promiscuous mode [ 390.484350][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.484477][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.515117][ T59] veth1_vlan: left promiscuous mode [ 390.828876][ T59] team0 (unregistering): Port device team_slave_1 removed [ 390.845994][ T59] team0 (unregistering): Port device team_slave_0 removed [ 391.436538][ T59] IPVS: stop unused estimator thread 0... [ 391.476165][T16518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.795466][T16583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 392.296123][T16600] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2887'. [ 392.371424][T16323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.404018][T16323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.413266][T16323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.464247][T16323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.475791][T16323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.491868][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 392.528792][T16323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.537089][T16323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.596953][T16323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.744927][T16628] netlink: 'syz.0.2881': attribute type 2 has an invalid length. [ 392.839958][T16628] : entered promiscuous mode [ 392.854582][T16632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2881'. [ 392.943888][T16323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.972270][T16323] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.994191][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.994367][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.042391][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 393.042440][T16640] netlink: 'syz.3.2892': attribute type 3 has an invalid length. [ 393.065947][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.066102][ T6078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.906057][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 393.915055][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 393.921742][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 393.926920][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 393.941526][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 393.950169][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 393.957359][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 394.248279][T16323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.356945][T16323] veth0_vlan: entered promiscuous mode [ 394.378589][T16323] veth1_vlan: entered promiscuous mode [ 394.467853][T16323] veth0_macvtap: entered promiscuous mode [ 394.488704][T16323] veth1_macvtap: entered promiscuous mode [ 394.551984][T16323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.582874][T16323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.685115][ T8486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.695810][ T8486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.763518][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.763591][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.711137][T16625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.972201][ T6078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.972245][ T6078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.307326][ T8486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.307377][ T8486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.433891][T16802] syzkaller0: entered promiscuous mode [ 397.433944][T16802] syzkaller0: entered allmulticast mode [ 397.462949][T16802] __nla_validate_parse: 27 callbacks suppressed [ 397.463221][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'. [ 397.566359][T16813] batman_adv: batadv0: Adding interface: veth0 [ 397.580122][T16810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2912'. [ 397.587188][T16813] batman_adv: batadv0: Interface activated: veth0 [ 397.627183][T16810] batman_adv: batadv0: Interface deactivated: veth0 [ 397.627235][T16810] batman_adv: batadv0: Removing interface: veth0 [ 400.205430][T16793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.455618][T16913] veth1_to_bond: entered allmulticast mode [ 400.468939][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 400.497284][T16913] bond_slave_0: entered promiscuous mode [ 400.504844][T16913] bond_slave_0: left promiscuous mode [ 400.536888][T16917] netlink: 'syz.4.2919': attribute type 3 has an invalid length. [ 400.544937][T16917] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 400.554116][T16917] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2919'. [ 400.684112][T16911] veth1_to_bond: left allmulticast mode [ 400.723687][T16924] openvswitch: netlink: IP tunnel dst address not specified [ 400.754043][T16924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2922'. [ 400.757348][T16924] netlink: 'syz.1.2922': attribute type 21 has an invalid length. [ 400.757400][T16924] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2922'. [ 400.757637][T16924] netlink: 'syz.1.2922': attribute type 5 has an invalid length. [ 400.759916][T16924] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2922'. [ 401.643129][ T4934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.657627][ T4934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.672539][ T4934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.683267][ T4934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.696398][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.849064][T17018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2944'. [ 402.861253][T16974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 402.861311][T16974] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 402.954091][T17023] openvswitch: netlink: Key type 255 is out of range max 32 [ 403.110078][T16974] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.110130][T16974] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 403.539284][T16974] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 403.539330][T16974] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 403.772087][ T4934] Bluetooth: hci2: command tx timeout [ 403.797306][T16974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.818467][T17060] xt_hashlimit: size too large, truncated to 1048576 [ 403.852866][T16974] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 404.219023][T16959] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.219172][T16959] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.219363][T16959] bridge_slave_0: entered allmulticast mode [ 404.246692][T16959] bridge_slave_0: entered promiscuous mode [ 404.266722][T16959] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.277225][T16959] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.284705][T16959] bridge_slave_1: entered allmulticast mode [ 404.298350][T16959] bridge_slave_1: entered promiscuous mode [ 404.399773][T16959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.831630][T16959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.967275][T16959] team0: Port device team_slave_0 added [ 404.993530][T16959] team0: Port device team_slave_1 added [ 405.117615][ T8484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.171404][T17104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2962'. [ 405.196938][T16959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.196970][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.197006][T16959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.233536][T16959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.233556][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.233585][T16959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.377948][T17117] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 405.526207][ T8484] : (slave netdevsim1): Releasing backup interface [ 405.556622][ T8484] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 405.582588][ T8484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.038948][ T8484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.218277][T17150] sctp: [Deprecated]: syz.3.2968 (pid 17150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.218277][T17150] Use struct sctp_sack_info instead [ 406.250179][T17133] syzkaller1: entered promiscuous mode [ 406.250236][T17133] syzkaller1: entered allmulticast mode [ 406.279712][T17150] sctp: [Deprecated]: syz.3.2968 (pid 17150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.279712][T17150] Use struct sctp_sack_info instead [ 406.531600][T16959] hsr_slave_0: entered promiscuous mode [ 406.538091][T16959] hsr_slave_1: entered promiscuous mode [ 406.550099][T16959] debugfs: 'hsr0' already exists in 'hsr' [ 406.550145][T16959] Cannot create hsr debugfs directory [ 407.327235][T17193] netlink: 'syz.3.2976': attribute type 17 has an invalid length. [ 407.337064][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 407.337110][T17193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2976'. [ 407.481735][ T8484] pimreg: left allmulticast mode [ 407.500378][ T8484] dvmrp8: left allmulticast mode [ 408.403954][ T8484]  (unregistering): Released all slaves [ 408.425521][ T8484] bond1 (unregistering): Released all slaves [ 408.449942][ T8484] bond2 (unregistering): Released all slaves [ 408.479152][ T8484] bond3 (unregistering): Released all slaves [ 408.495242][ T8484] bond4 (unregistering): Released all slaves [ 408.522395][ T8484] bond5 (unregistering): Released all slaves [ 408.539939][ T8484] bond6 (unregistering): (slave veth7): Releasing backup interface [ 408.549074][ T8484] veth7: left promiscuous mode [ 408.557581][ T8484] bond6 (unregistering): Released all slaves [ 408.579803][ T8484] bond7 (unregistering): Released all slaves [ 408.608711][T17193] 0ªX¹¦Dö»: entered promiscuous mode [ 408.613544][T17193] 0ªX¹¦Dö»: left promiscuous mode [ 408.641527][T17180] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2973'. [ 408.656024][T17180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.925340][ T8484] tipc: Disabling bearer [ 408.925647][ T8484] tipc: Left network mode [ 409.179320][T17225] netlink: Failed to add helper -22 [ 409.185805][T17225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.284676][T17234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2983'. [ 409.574300][T17253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2987'. [ 409.574357][T17253] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2987'. [ 409.574375][T17253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2987'. [ 409.643122][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 409.766305][T17241] bond11: option arp_all_targets: invalid value (18446744073709551613) [ 409.788991][T17241] bond11 (unregistering): Released all slaves [ 409.856941][T17261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2988'. [ 410.737345][T17292] gtp1: entered promiscuous mode [ 410.754239][T17292] gtp1: entered allmulticast mode [ 410.931306][T17299] wireguard1: entered promiscuous mode [ 410.939941][T17302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2995'. [ 410.952446][T17302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2995'. [ 410.953072][T17302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2995'. [ 411.458066][ T8484] hsr_slave_0: left promiscuous mode [ 411.477435][ T8484] hsr_slave_1: left promiscuous mode [ 411.553103][ T8484] veth1_macvtap: left promiscuous mode [ 411.558894][ T8484] veth0_macvtap: left promiscuous mode [ 411.565516][ T8484] veth1_vlan: left promiscuous mode [ 411.571165][ T8484] veth0_vlan: left promiscuous mode [ 413.007890][T16959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.038843][T16959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.042948][T16959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.135479][T16959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.163061][T16959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.188926][T16959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.269961][T16959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.313256][T16959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.484223][ T8484] IPVS: stop unused estimator thread 0... [ 413.553901][T17390] syzkaller0: entered promiscuous mode [ 413.553956][T17390] syzkaller0: entered allmulticast mode [ 413.679749][T17404] __nla_validate_parse: 64 callbacks suppressed [ 413.689476][T17404] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3007'. [ 413.766370][T17406] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3007'. [ 413.766461][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 413.833894][T17404] netlink: 'syz.2.3007': attribute type 29 has an invalid length. [ 413.833951][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 413.858083][T17408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3006'. [ 413.933886][T17408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3006'. [ 413.967650][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 414.352365][T16959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.405380][T16959] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.444783][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.445106][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.490479][T17442] bridge1: entered allmulticast mode [ 414.513275][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.513427][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.569481][T17445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3013'. [ 414.626294][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 414.638809][T17438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'. [ 414.973174][T17458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.816561][T17486] syzkaller0: entered promiscuous mode [ 415.816604][T17486] syzkaller0: entered allmulticast mode [ 416.175785][T17497] tipc: Started in network mode [ 416.175866][T17497] tipc: Node identity 62e22f446f14, cluster identity 4711 [ 416.176057][T17497] tipc: Enabled bearer , priority 0 [ 416.201813][T17497] syzkaller0: entered promiscuous mode [ 416.208690][T17497] syzkaller0: entered allmulticast mode [ 416.373966][T17501] tipc: Resetting bearer [ 416.403883][T17495] tipc: Resetting bearer [ 416.511938][T17495] tipc: Disabling bearer [ 416.764003][T16959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.992249][T16959] veth0_vlan: entered promiscuous mode [ 417.049332][T16959] veth1_vlan: entered promiscuous mode [ 417.206502][T16959] veth0_macvtap: entered promiscuous mode [ 417.270159][T16959] veth1_macvtap: entered promiscuous mode [ 417.409997][T16959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.483036][T16959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.748504][T17556] vlan0: entered promiscuous mode [ 417.755622][T17556] bridge0: entered promiscuous mode [ 417.851727][ T533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.853046][ T8484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.853187][ T8484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.853318][ T8484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.980128][T17564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.007774][T17564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.079875][T17564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.309762][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.319976][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.461809][T17585] sock: sock_set_timeout: `syz.3.3044' (pid 17585) tries to set negative timeout [ 418.764965][T17589] __nla_validate_parse: 7 callbacks suppressed [ 418.765030][T17589] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3045'. [ 418.965651][T17600] gre0: entered promiscuous mode [ 418.965707][T17600] gre0: entered allmulticast mode [ 419.252597][T17608] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3051'. [ 419.261988][T17608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.109726][T17571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.179858][ T6078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.179909][ T6078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.405194][T17619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3055'. [ 421.425499][T17620] ipvlan1: entered promiscuous mode [ 421.425549][T17620] ipvlan1: entered allmulticast mode [ 421.425564][T17620] veth0_vlan: entered allmulticast mode [ 421.440192][T17620] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3053'. [ 476.303682][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3058'. [ 476.334430][T17637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.789610][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.804335][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.814121][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.835852][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.847835][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.858974][ T5627] bond0: (slave syz_tun): Releasing backup interface [ 477.049358][T17666] geneve4: entered allmulticast mode [ 477.508982][T17682] bridge0: entered promiscuous mode [ 477.514700][T17682] bridge0: entered allmulticast mode [ 477.598241][T17659] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.598682][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.599805][T17659] bridge_slave_0: entered allmulticast mode [ 477.605727][T17659] bridge_slave_0: entered promiscuous mode [ 477.619121][T17659] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.619510][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.619665][T17659] bridge_slave_1: entered allmulticast mode [ 477.631409][T17659] bridge_slave_1: entered promiscuous mode [ 477.675186][T17659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.685176][T17659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.720506][T17659] team0: Port device team_slave_0 added [ 477.727237][T17659] team0: Port device team_slave_1 added [ 477.754775][T17659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.754826][T17659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.754855][T17659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.763582][T17659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.763627][T17659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.763695][T17659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.876896][T17659] hsr_slave_0: entered promiscuous mode [ 477.879875][T17659] hsr_slave_1: entered promiscuous mode [ 477.883648][T17659] debugfs: 'hsr0' already exists in 'hsr' [ 477.883711][T17659] Cannot create hsr debugfs directory [ 478.089123][T17659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.200858][T17659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.296052][T17659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.380420][T17659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.890864][ T5635] Bluetooth: hci1: command tx timeout [ 479.558189][T17648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.618219][T17659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.661212][T17659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.665004][T17659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.750295][T17659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.763252][T17659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.804876][T17659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.815216][T17659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.839253][T17659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.897317][T17693] IPv6: sit1: Disabled Multicast RS [ 480.205777][T17659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.253125][T17659] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.285110][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.285326][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.318940][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.319202][ T6078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.367236][ T6078] IPVS: starting estimator thread 0... [ 480.450943][T17723] IPVS: using max 25 ests per chain, 60000 per kthread [ 480.971129][ T5635] Bluetooth: hci1: command tx timeout [ 481.218442][T17758] syz_tun: entered allmulticast mode [ 481.227632][T17757] syz_tun: left allmulticast mode [ 481.427679][T17659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.467398][T17769] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3089'. [ 481.488751][T17769] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3089'. [ 481.546880][T17659] veth0_vlan: entered promiscuous mode [ 481.568909][T17659] veth1_vlan: entered promiscuous mode [ 481.625924][T17659] veth0_macvtap: entered promiscuous mode [ 481.638058][T17659] veth1_macvtap: entered promiscuous mode [ 481.660210][T17659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.674286][T17659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.760859][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.761321][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.761394][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.761431][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.051132][ T5635] Bluetooth: hci1: command tx timeout [ 483.475686][T17725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.663832][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.663876][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.778769][ T8486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.778807][ T8486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.827892][T17782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3093'. [ 484.549897][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 484.567752][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 484.579308][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 484.596992][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 484.606433][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 484.800002][ T5630] bond0: (slave syz_tun): Releasing backup interface [ 485.132156][ T5635] Bluetooth: hci1: command tx timeout [ 485.179644][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.179719][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.179752][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 485.364385][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.380116][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.390972][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 485.505116][ T59] bond0: (slave netdevsim1): Releasing backup interface [ 485.516356][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.516421][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.516452][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 485.626017][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 485.638826][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.638891][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.638928][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 485.959137][ T59] batadv8: left allmulticast mode [ 485.959311][ T59] batadv8: left promiscuous mode [ 485.963365][ T59] bridge0: port 10(batadv8) entered disabled state [ 485.977218][ T59] batadv7: left allmulticast mode [ 485.977273][ T59] batadv7: left promiscuous mode [ 485.978350][ T59] bridge0: port 9(batadv7) entered disabled state [ 485.997208][ T59] batadv6: left allmulticast mode [ 485.997261][ T59] batadv6: left promiscuous mode [ 485.998935][ T59] bridge0: port 8(batadv6) entered disabled state [ 486.016353][ T59] batadv5: left allmulticast mode [ 486.016404][ T59] batadv5: left promiscuous mode [ 486.017146][ T59] bridge0: port 7(batadv5) entered disabled state [ 486.035016][ T59] batadv4: left allmulticast mode [ 486.035066][ T59] batadv4: left promiscuous mode [ 486.038735][ T59] bridge0: port 6(batadv4) entered disabled state [ 486.053501][ T59] batadv3: left allmulticast mode [ 486.053563][ T59] batadv3: left promiscuous mode [ 486.056523][ T59] bridge0: port 5(batadv3) entered disabled state [ 486.074841][ T59] batadv2: left allmulticast mode [ 486.074909][ T59] batadv2: left promiscuous mode [ 486.076363][ T59] bridge0: port 4(batadv2) entered disabled state [ 486.094477][ T59] batadv1: left allmulticast mode [ 486.094533][ T59] batadv1: left promiscuous mode [ 486.096315][ T59] bridge0: port 3(batadv1) entered disabled state [ 486.112507][ T59] bridge_slave_1: left allmulticast mode [ 486.112567][ T59] bridge_slave_1: left promiscuous mode [ 486.113135][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.128051][ T59] bridge_slave_0: left allmulticast mode [ 486.128126][ T59] bridge_slave_0: left promiscuous mode [ 486.128808][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.168039][ T59] pim6reg: left allmulticast mode [ 486.168443][ T59] lo: left allmulticast mode [ 486.468979][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.483340][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.498305][ T59] bond0 (unregistering): Released all slaves [ 486.511903][ T59] bond1 (unregistering): Released all slaves [ 486.526350][ T59] bond2 (unregistering): Released all slaves [ 486.545230][ T59] bond3 (unregistering): Released all slaves [ 486.567066][ T59] bond4 (unregistering): Released all slaves [ 486.588406][ T59] bond5 (unregistering): Released all slaves [ 486.604053][ T59] bond6 (unregistering): Released all slaves [ 486.618729][ T59] bond7 (unregistering): Released all slaves [ 486.649450][ T59] bond8 (unregistering): Released all slaves [ 486.668082][ T59] bond9 (unregistering): Released all slaves [ 486.683350][ T59] bond10 (unregistering): Released all slaves [ 486.706932][ T59] bond11 (unregistering): Released all slaves [ 486.723515][ T59] bond12 (unregistering): Released all slaves [ 486.730877][ T5635] Bluetooth: hci3: command tx timeout [ 486.748591][ T59] bond13 (unregistering): Released all slaves [ 486.766135][ T59] bond14 (unregistering): Released all slaves [ 486.785139][ T59] bond15 (unregistering): Released all slaves [ 486.799289][ T59] bond16 (unregistering): Released all slaves [ 486.827066][ T59] bond17 (unregistering): Released all slaves [ 486.842225][ T59] bond18 (unregistering): Released all slaves [ 486.964689][T17826] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.973715][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.981279][T17826] bridge_slave_0: entered allmulticast mode [ 486.989458][T17826] bridge_slave_0: entered promiscuous mode [ 487.006501][T17826] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.006635][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.006803][T17826] bridge_slave_1: entered allmulticast mode [ 487.014957][T17826] bridge_slave_1: entered promiscuous mode [ 487.141035][T17826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.144585][T17826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.287234][T17826] team0: Port device team_slave_0 added [ 487.297648][T17826] team0: Port device team_slave_1 added [ 487.326733][ T59] : left promiscuous mode [ 487.356921][T17826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.356976][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.357006][T17826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.364012][T17826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.364030][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.364058][T17826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.406822][T17819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.597930][ T59] tipc: Left network mode [ 487.684275][T17826] hsr_slave_0: entered promiscuous mode [ 487.697775][T17826] hsr_slave_1: entered promiscuous mode [ 487.704045][T17826] debugfs: 'hsr0' already exists in 'hsr' [ 487.704094][T17826] Cannot create hsr debugfs directory [ 487.810130][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3107'. [ 487.810188][T17868] nbd: must specify a size in bytes for the device [ 487.949781][T17885] ipt_REJECT: TCP_RESET invalid for non-tcp [ 488.338414][T17875] syzkaller1: entered promiscuous mode [ 488.338468][T17875] syzkaller1: entered allmulticast mode [ 488.813103][ T5635] Bluetooth: hci3: command tx timeout [ 489.046518][T17920] erspan0: entered promiscuous mode [ 489.052960][T17920] erspan0: entered allmulticast mode [ 489.130433][T17932] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 489.240382][T17932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.427009][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 489.672694][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 489.682264][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 489.955883][T17963] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 489.955926][T17963] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3126'. [ 490.443152][T17983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.499988][ T59] hsr_slave_0: left promiscuous mode [ 490.512548][ T59] hsr_slave_1: left promiscuous mode [ 490.662572][ T59] veth1_macvtap: left promiscuous mode [ 490.662643][ T59] veth0_macvtap: left promiscuous mode [ 490.663092][ T59] veth1_vlan: left promiscuous mode [ 490.663299][ T59] veth0_vlan: left promiscuous mode [ 490.723862][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'. [ 491.007060][T18006] x_tables: duplicate underflow at hook 2 [ 491.589363][ T59] team0 (unregistering): Port device team_slave_1 removed [ 492.135667][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3148'. [ 492.303007][T18038] xt_hl: Unknown Hop Limit match mode: 206 [ 492.357602][T18038] netlink: 'syz.1.3149': attribute type 1 has an invalid length. [ 492.532918][T18041] netlink: 'syz.1.3149': attribute type 10 has an invalid length. [ 492.532974][T18041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3149'. [ 492.685160][T18038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.735699][T18040] bond1: (slave veth3): Enslaving as an active interface with a down link [ 492.758951][T18049] bond1: (slave dummy0): making interface the new active one [ 492.766556][T18049] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 492.817740][T18041] dummy0: entered promiscuous mode [ 492.839474][T18041] bond1: (slave dummy0): Releasing active interface [ 493.157441][ T59] IPVS: stop unused estimator thread 0... [ 493.459551][T18089] openvswitch: netlink: Flow actions attr not present in new flow. [ 493.769839][T18106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3162'. [ 493.783921][T18108] netlink: 'syz.1.3162': attribute type 7 has an invalid length. [ 495.602637][T18059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.642398][T17826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 495.712855][T17826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.734173][T17826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 495.785032][T17826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.792785][T17826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 495.813014][T17826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.820481][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3165'. [ 495.830298][T17826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 495.846875][T17826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.002390][T17826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.055866][T17826] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.108387][ ** replaying previous printk message ** [ 496.108387][T18142] ------------[ cut here ]------------ [ 496.108451][T18142] verifier bug: backtracking misuse [ 496.108490][T18142] WARNING: kernel/bpf/backtrack.c:819 at bpf_mark_chain_precision+0x5c90/0x7c20, CPU#1: syz.1.3168/18142 [ 496.136629][T18142] Modules linked in: [ 496.140746][T18142] CPU: 1 UID: 0 PID: 18142 Comm: syz.1.3168 Not tainted syzkaller #0 PREEMPT(full) [ 496.150311][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.161006][T18142] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20 [ 496.168682][T18142] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 0b 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16 [ 496.188866][T18142] RSP: 0018:ffffc90006807220 EFLAGS: 00010287 [ 496.196016][T18142] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000 [ 496.204527][T18142] RDX: ffffc90011e6e000 RSI: 00000000000044b0 RDI: ffffffff907e1490 [ 496.212994][T18142] RBP: 0000000000000003 R08: ffff88802f9d8000 R09: 0000000000000003 [ 496.213776][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.214183][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.235926][T18142] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888079d5f850 [ 496.244098][T18142] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 496.252585][T18142] FS: 00007f8b08ff66c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 496.261639][T18142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.268282][T18142] CR2: 000000110c294775 CR3: 000000007ef50000 CR4: 00000000003526f0 [ 496.276519][T18142] Call Trace: [ 496.279987][T18142] [ 496.283487][T18142] ? update_loop_inline_state+0x22a/0x610 [ 496.289441][T18142] do_check_insn+0x12c6d/0x17d70 [ 496.294983][T18142] ? __pfx_do_check_insn+0x10/0x10 [ 496.300197][T18142] ? verbose+0x11d/0x1a0 [ 496.304845][T18142] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 496.311253][T18142] ? __pfx_verbose+0x10/0x10 [ 496.315929][T18142] ? bpf_vlog_reset+0x2aa/0x340 [ 496.320995][T18142] ? print_insn_state+0x106/0x170 [ 496.326079][T18142] do_check_common+0x3c19/0x5d30 [ 496.331212][T18142] ? __pfx_do_check_common+0x10/0x10 [ 496.336554][T18142] ? __pfx_verbose+0x10/0x10 [ 496.341572][T18142] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 496.347464][T18142] bpf_check+0x2639/0x2e10 [ 496.352031][T18142] ? ktime_get_with_offset+0x93/0x2d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 496.357532][T18142] ? __pfx_bpf_check+0x10/0x10 [ 496.362398][T18142] ? bpf_obj_name_cpy+0x194/0x1e0 [ 496.367483][T18142] bpf_prog_load+0x14d6/0x1c20 [ 496.372758][T18142] ? __pfx_bpf_prog_load+0x10/0x10 [ 496.377966][T18142] __sys_bpf+0xd0d/0xd90 [ 496.382345][T18142] ? __pfx___sys_bpf+0x10/0x10 [ 496.387165][T18142] ? do_futex+0x458/0x4e0 [ 496.391759][T18142] ? rcu_is_watching+0x16/0xb0 [ 496.397038][T18142] __x64_sys_bpf+0xba/0xd0 [ 496.402320][T18142] do_syscall_64+0x166/0x520 [ 496.407125][T18142] ? trace_irq_disable+0x3b/0x140 [ 496.412238][T18142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.418405][T18142] ? clear_bhb_loop+0x70/0xc0 [ 496.423191][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.429192][T18142] RIP: 0033:0x7f8b0ad9e159 [ 496.434088][T18142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.453886][T18142] RSP: 002b:00007f8b08ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.462796][T18142] RAX: ffffffffffffffda RBX: 00007f8b0b025fa0 RCX: 00007f8b0ad9e159 [ 496.470954][T18142] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 496.478985][T18142] RBP: 00007f8b0ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 496.487158][T18142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.495615][T18142] R13: 00007f8b0b026038 R14: 00007f8b0b025fa0 R15: 00007ffec3e403d8 [ 496.504166][T18142] [ 496.507250][T18142] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 496.514569][T18142] CPU: 1 UID: 0 PID: 18142 Comm: syz.1.3168 Not tainted syzkaller #0 PREEMPT(full) [ 496.523991][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.534098][T18142] Call Trace: [ 496.537417][T18142] [ 496.540390][T18142] vpanic+0x56d/0xa60 [ 496.544472][T18142] ? __pfx__printk+0x10/0x10 [ 496.549115][T18142] ? __pfx_vpanic+0x10/0x10 [ 496.553681][T18142] ? is_bpf_text_address+0x292/0x2b0 [ 496.559017][T18142] ? is_bpf_text_address+0x26/0x2b0 [ 496.564284][T18142] panic+0xc5/0xd0 [ 496.568066][T18142] ? __pfx_panic+0x10/0x10 [ 496.572591][T18142] __warn+0x315/0x4c0 [ 496.576662][T18142] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 496.582635][T18142] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 496.588609][T18142] __report_bug+0x276/0x570 [ 496.593340][T18142] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 496.599289][T18142] ? __pfx___report_bug+0x10/0x10 [ 496.604371][T18142] ? number+0xc60/0xed0 [ 496.608666][T18142] ? __pfx_number+0x10/0x10 [ 496.613228][T18142] report_bug_entry+0x19b/0x290 [ 496.618143][T18142] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 496.624078][T18142] ? bpf_mark_chain_precision+0x5c95/0x7c20 [ 496.630012][T18142] handle_bug+0xce/0x200 [ 496.634312][T18142] exc_invalid_op+0x1a/0x50 [ 496.638856][T18142] asm_exc_invalid_op+0x1a/0x20 [ 496.643761][T18142] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20 [ 496.650340][T18142] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 0b 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16 [ 496.669995][T18142] RSP: 0018:ffffc90006807220 EFLAGS: 00010287 [ 496.676119][T18142] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000 [ 496.684130][T18142] RDX: ffffc90011e6e000 RSI: 00000000000044b0 RDI: ffffffff907e1490 [ 496.692151][T18142] RBP: 0000000000000003 R08: ffff88802f9d8000 R09: 0000000000000003 [ 496.700173][T18142] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888079d5f850 [ 496.708216][T18142] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 496.716244][T18142] ? bpf_mark_chain_precision+0x5c89/0x7c20 [ 496.722219][T18142] ? update_loop_inline_state+0x22a/0x610 [ 496.728009][T18142] do_check_insn+0x12c6d/0x17d70 [ 496.733025][T18142] ? __pfx_do_check_insn+0x10/0x10 [ 496.738210][T18142] ? verbose+0x11d/0x1a0 [ 496.742507][T18142] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 496.748453][T18142] ? __pfx_verbose+0x10/0x10 [ 496.753107][T18142] ? bpf_vlog_reset+0x2aa/0x340 [ 496.758025][T18142] ? print_insn_state+0x106/0x170 [ 496.763094][T18142] do_check_common+0x3c19/0x5d30 [ 496.768134][T18142] ? __pfx_do_check_common+0x10/0x10 [ 496.773468][T18142] ? __pfx_verbose+0x10/0x10 [ 496.778121][T18142] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 496.784017][T18142] bpf_check+0x2639/0x2e10 [ 496.788493][T18142] ? ktime_get_with_offset+0x93/0x2d0 [ 496.793906][T18142] ? __pfx_bpf_check+0x10/0x10 [ 496.798817][T18142] ? bpf_obj_name_cpy+0x194/0x1e0 [ 496.803894][T18142] bpf_prog_load+0x14d6/0x1c20 [ 496.808720][T18142] ? __pfx_bpf_prog_load+0x10/0x10 [ 496.813904][T18142] __sys_bpf+0xd0d/0xd90 [ 496.818218][T18142] ? __pfx___sys_bpf+0x10/0x10 [ 496.823109][T18142] ? do_futex+0x458/0x4e0 [ 496.827511][T18142] ? rcu_is_watching+0x16/0xb0 [ 496.832357][T18142] __x64_sys_bpf+0xba/0xd0 [ 496.836823][T18142] do_syscall_64+0x166/0x520 [ 496.841460][T18142] ? trace_irq_disable+0x3b/0x140 [ 496.846533][T18142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.852679][T18142] ? clear_bhb_loop+0x70/0xc0 [ 496.857419][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.863357][T18142] RIP: 0033:0x7f8b0ad9e159 [ 496.867848][T18142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.887503][T18142] RSP: 002b:00007f8b08ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.895971][T18142] RAX: ffffffffffffffda RBX: 00007f8b0b025fa0 RCX: 00007f8b0ad9e159 [ 496.904071][T18142] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 496.912091][T18142] RBP: 00007f8b0ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 496.920201][T18142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.928257][T18142] R13: 00007f8b0b026038 R14: 00007f8b0b025fa0 R15: 00007ffec3e403d8 [ 496.936293][T18142] [ 496.939535][T18142] Kernel Offset: disabled [ 496.943878][T18142] Rebooting in 86400 seconds..