last executing test programs: 6.584176191s ago: executing program 0 (id=3100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r3, 0x25, 0x4, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r3, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) pselect6(0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f00000005c0)={0x8}, 0x0, 0x0) 5.542064711s ago: executing program 0 (id=3114): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x2, 0x81}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r1, 0x6, 0x20, 0x7ff, 0x10000}, &(0x7f00000000c0)=0x18) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r2, &(0x7f0000000180)='{\x00', 0x18d000, &(0x7f00000001c0)={@_ha_fsid={[0x4, 0x80000000]}, {0x5, 0x8, 0x401, 0x3}}, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x6}) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x34, @local, 0xa}, 0x1c) (async) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x5, 0x100000001, 0xfffffffffffffffb, 0xffff, 0x5]}, &(0x7f0000000380)=0x78) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r3, 0x84, 0x25, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e20, 0x5172, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x5, 0x0, 0x3ff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp6_SCTP_EVENT(r3, 0x84, 0x7f, &(0x7f00000004c0)={r4, 0x800b}, &(0x7f0000000500)=0x8) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x1407, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) sendmsg$NL80211_CMD_NOTIFY_RADAR(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r8, 0x24, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x282}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r3) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000840)) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000880)={r4, 0x5, 0x8}, 0x8) sendmsg$kcm(r3, &(0x7f0000001d00)={&(0x7f00000008c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-ce\x00'}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000940)="1255f433b00e1cd0e86dfe78d08856ac570cc7a9e9e33dcafab24c36740f285c3dca0f0b1a8335a361d9ea573172cc77d4fc9ca5f7c926dad7677b1d470efbe3e74b798dcdd88e92fba2d6eeca3ee03b8549a847cca97f225731fd8beb2a0af5d4269e5509b11ec0e19cac02ff5f0793ebc385b05cb2bd1378a9f5b321bf929d5555f815e15a06f6ef0b2291b747bfa4e61a360a", 0x94}, {&(0x7f0000000a00)="300e8d46e8a75c667f7a0ca6e79816b053b3dc1c0ea0a03be00ccefc26886569186b3068ad37a0e7353d6c14e7af244f24bec3f29effe405d0845d65c3118968e3164f5cd7d4a08b82128176c7f15a2f2b9fa0fe6b4f2f2c", 0x58}, {&(0x7f0000000a80)="ab3af360", 0x4}, {&(0x7f0000000ac0)="78d4db23477dfd02cae65461031c44ab62c0eb698706ff53018f82e57f2350f49f8116d3b6c2f9c6eee6c2356a771f8f5c1c91bd9da2919d702be770516c67fcc3b2d37fb01a9613dea120daaad85310cbe9f99a6054b204e35cf5f86c937cbfed07f9b828e8cfc2f5debcd4e0abe1a6a7a694245cfa696ade2659b81889783550d4f0e6896251a047ae477c4a266764f368add0a24242da98736215a07422da42550cab5e01de88f27207517600446a62c7739da6e08b823875b3877ce1543dfb9751a88db1e003346468d34ec6b55262dfa90651d311", 0xd7}], 0x4, &(0x7f0000000c00)=[{0xd8, 0x104, 0x5, "9ddeab89bc6c644a524027a9d14dc788f51da01cac2a623f9664e6a0a3db2a8a5f095770102ad2f4320f699965dfe1ef2e5c23f400a3bec88c99a60ed300642b5779afcf3f7c21143492e3c38a88c726689988de5a781ab2a766d8b89e0df9ee90d5eaa381e54035ebaa54f4427c864e1b18968d8dbbc22d0d1a7836347a27a231f46607f9160c04153d7beabe65d8820ed440db899ec8a011aaa593f3dd1ba44db838337ae940dceebcea5120a80562b201364d3deda610a225fecfe011b0bccb"}, {0x1010, 0x0, 0x6, "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"}], 0x10e8}, 0x8010) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001d40)={0x0, 0x7, 0x6e, "cfc7db69cc65479d72c00784235d8ca307203bb456c334a7ff33447b6525dadc41fc105dbc7ef50f91b79383e75aa3cd459712ec7a9de2e9d21c0aa579fc90c801e34289d6bd771aacbbadcecb281a2ed6698e451a9dfb08841e6f49dbcdd715dfffeaebd19a0bd896fd520cdacc"}, 0x76) (async) r9 = accept4$inet(r3, &(0x7f0000001dc0)={0x2, 0x0, @multicast2}, &(0x7f0000001e00)=0x10, 0x81000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001e40)={r5, 0x7}, &(0x7f0000001e80)=0x8) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r9, 0x84, 0x84, &(0x7f0000001ec0)={r10, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x4e23}, &(0x7f0000001f80)=0x90) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000001fc0)={r11, 0x7ff, 0x10}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x10, 0x140e, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4048004) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002140), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x30, r12, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x1, 0x2}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc014}, 0x40800) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000002240)={0x3c, 0x8, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0x82, [0xfffffffffffff0e0, 0x7fffffffffffffff, 0x7, 0x2, 0x8]}}, @pad1]}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x34, r12, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x5, 0x1, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0xc253495398debbbe}, 0x40040) 5.178886347s ago: executing program 0 (id=3119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x7, 0xb, &(0x7f00000000c0)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x90) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4c0c0) 4.950579s ago: executing program 0 (id=3120): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x20000, 0x0, {{@in6=@local, @in=@private=0xa010101}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffffd, 0x3}, {}, 0x0, 0x3502, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000140)='connect 11:aa:aa:aa:aa:aa 1', 0x1b) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0xc30, r2}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000180)}, 0x10) 4.808708262s ago: executing program 0 (id=3121): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000), 0x28, 0x0, 0x0, 0x2004c004}, 0x4000801) 4.7142581s ago: executing program 0 (id=3122): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2040800) 3.035327198s ago: executing program 4 (id=3138): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'macsec0\x00', 0x0}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000d80)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e26, 0x2, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="c804ce1d70a7d5aaf0870d03ea4729bdfce44c500ce84fe0a0c388c79bddd9d5097c0a3c2543b435a7b1924cf05ca958e928062140c745689e06bc8220415e56be7c5290bed0fb84aa10d1089caa25dbd6cb231419a445ab24ab5a7f9f644936770228b5085f08d2f775a92f7df44d9a390da57262d4879a709f608a1f8f8cbc382a3921794fd0dd25bba7812129e1baaf794e72", 0xffd0}], 0x1}}], 0x40000000000006c, 0x4001c00) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r1, r3, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000014000000003d849078ac1414bbac14140e"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x38, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x0, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000c40)="11223344", 0x4, 0x0, &(0x7f0000000c80)={0xa, 0x4d2, 0x0, @remote}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x28, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x8, 0xa, '\x00\x00\x00\x00'}]}, 0x28}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000640)=@gcm_128={{0x303}, "f92b9813358a6f4d", "6befc6022f4662ef0f955dd9ce0bb557", "92d70804", "1f2cd68d79e9a218"}, 0x28) sendmsg$NFT_BATCH(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(0x3) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x8000, @loopback, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='g', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000002c0)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r9, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @private1}, 0x1c) shutdown(r9, 0x1) writev(r7, &(0x7f0000000380)=[{&(0x7f00000003c0)='.', 0x1}], 0x1) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000400)=0xffff1884, 0x4) 1.968842889s ago: executing program 4 (id=3153): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x50, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2844b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffff5, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x14000000}, @TCA_FQ_PLIMIT={0x1300, 0x1, 0x5}]}}]}, 0x48}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x2) (async) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x3fa, 0x8, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000002}, 0xc000) 1.836925851s ago: executing program 2 (id=3154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, r1, 0x1, 0x70bd29, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x4c, 0x82}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c881}, 0x20040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r3, 0xa773a000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x12, r2, 0x604ac000) 1.775695523s ago: executing program 2 (id=3155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6115ba00000000006113380000000000bfa000000000000007000000080000002d0301000000000095006900000000006916000000000000bf67000000000000350607000fff07206706000002000000150300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562eff4ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df0a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c29dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d57c4e9b2ad9bc1142ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57d20000009f0f53acbb40b4f8e2738270b31562ed838b9df97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000020000000000000000000000c1eb2d91fb79ea00000000000000000000000000e4007be511fe32fbc90e2364a55e9bb66ad2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7a43c8da0c44d2ebf2f3f2b87be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d78854ca4d3116dbc7e2bf2402a75fd7a5573336004084d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b527c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae93234c2cc17dc4a5dfacba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b3bc87b0da80000d9ef418cf19e7a8cf8ffffffce91798adc2dca87ddd9d064e081383409ed2912c811c600f03212a5331c2a4ead000000000000000000008d4496dc862fcdb0ee67fdd006d4e466e8b32b3afdaecee9862edf61cd0dd24ff2dba562c5ae5c053355abb762ef2a5ee5f285e333b522ca09af626c6e4ad1c685165388000015de7f2077cd6d96a8a687c97e7d1d5cc25ffebc53b2ef9d57cf5d995bad3de6f555e9616d0e7c258205668dcfb35c3550ef80e0a704a7d9dc23e1742dc9e7d7d8c3b3cba2229cd1c0d8046981789493b26c611c40b86157d7c383144bff7115f440e059bdfb739d7c285d6c2048c229d1fd67791bff7fa758b953b41cf077028716a411afef49f51d490f09ce0781f2d1769551bb8f882dfe8d1491142666de72b230356376b60abc0b7494a683ecf96463e89744ea228ac17f7ac5a06b103ea8c78d82d48d7700b661357224b847a6adced04d87e0f4019cae065b48be01956d7c279e8232e7f7e7b4b0c7c740cb7920823c26ad3ec97db1e09c347db220851d1e280ea6bce40c16193a89719b74be9456afef6b6b56ee88b878404a308b4e9471e11bc250c36c154c20c8533376e347c89020b7ef9599ea49ee6d3b9b355ad9fbda34625d243168d788bf9a681b09aa85e0da7d76f2cd029ee3df390cba760cd9c9b5fe625827edae4e7c19dc6c2fe701797df47324cad92d8ea62270f89d04141e89bee3c3611a996d9d9db00508adc93d7bb21dfe1174ab2f31d075e30ee07e16d28aaa70a35c55370a3af315cf25a6cce2cae3d6c75906290d55a2a2447bb571d6991522136ed013b8f6f4cf0a91931f0a7d88d4e69729a77a6e76433c1a0668677f8c7683f779d3301db1f43bd7dd0b301098f522437ec5ff0c358900000000000000000000000000007f91ee647a956ca982a84a97f9231a107466f2f9d62994907a93b9d183c0c6187d0a9ea8ccb3ba859b05"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) recvfrom(r1, &(0x7f00000009c0)=""/42, 0x2a, 0x60012022, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0x2, 0xfcc0) 1.6731422s ago: executing program 3 (id=3156): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x2, 0x4) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00f82d00000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4009054}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.595072977s ago: executing program 4 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0x1, 0x4c, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xfffffffc}}]}}}]}, 0x78}}, 0x0) 1.594662366s ago: executing program 2 (id=3158): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) 1.489637544s ago: executing program 4 (id=3160): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000a0000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) accept4(r4, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000480)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) socket(0x27, 0x6, 0x2) 1.438761645s ago: executing program 3 (id=3161): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x8) 1.438459136s ago: executing program 2 (id=3162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00', @ANYRES64, @ANYBLOB="010000000000000000003f"], 0x38}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffa, 0x25dfdbfd, {{@in=@multicast2, @in=@empty, 0x0, 0xfd, 0x2, 0x7f, 0xa, 0x20, 0x10}, {0x8, 0x14, 0x100001002, 0x81, 0xfff, 0xffffffffffffb473, 0xfffffffffffffffb}, {0x1000000000, 0x2000000000000001, 0x2, 0xffffffffffffffff}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r0, &(0x7f0000000680)={@val={0x0, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x2a, 0x40, 0x65, 0x0, 0x7, 0x6, 0x0, @private=0xa010100, @loopback}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x1, 0xb, 0x1, 0x2, 0x9000, 0x0, 0x0, 0x4, 0x4, 0x1, 0x6, 0xf5, 0x2, 0x4e23, 0x4e21}, 0x1}}, 0x2}}}}}}}}, 0x56) 1.389808886s ago: executing program 1 (id=3163): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002140), 0xfffffffffffffef3, 0x10, &(0x7f0000002180), 0xfffffffffffffd00}, 0x48) syz_emit_ethernet(0x11ff, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd65e6471911c90601ff010000000000000000000000000001000000000000000000000000000000010002024000000000000000000000000000000000000000003c080000000000000740000000030e080002ff070000000000000700400000000000020000000000000001ffffffffffffff07000000000000000001000000000000056c46f0f70000000001000000002f27000000000000b000f65025543accd80be8b862ef5b8495d270b97742a69c0964db0f168041f2dcf73b8351503022198a8de2184be0589957b12bcbb58877f22f647bfbc3c38c842e6d5ff79fa80cf1e5d62e4b1bf034ab48ade3a16506f5d2c126d4ee05b1bcb38bcc83a29afd996201011b30f795c9f74eeac98918e43dd24ab198905f5cac6341cb8854ea7d274c68cd85bc4a4e0259b2c7584bd2c51a32e295faea60a530c99a4946375e0f89e51917b95fab8e4b9700716ce6c176c74539029699523cdf9662b6cfa0e53ba82c38552a8d98c9fdaf6fb5a80fedecfe40dc879a9603f19aa20b5ef17b389388a18ac66f0cada793ea75fd2a4edd37616441fd77c2e77595bdd5f19382fdf5fc8f2badb04b633c9a826538d4317a4c20ae92a0bf7002b0c75e4b183ad4457c5d23e0764673a1ec6b81c1cbc7ce516789b2ebbbbe932a529f5e3cb86d13141cc4fa3638b529e950ac481535f0283c7f6ed8811ebd65d5e4ddb9144678b0a5a8408fde1408339154c974aafbdf958e4f2e4825f638266bf9c62ae4cd3d6b17c84a59cd4f0d09033e0dd2cec47d236ccf6940312ba3fb3aa53fb7ee50ebaaf876d6c62fc99dc68ad995d7575738ffe63578fea5fcb6b2eeff2617f49c33170f5edee6ac3b0fd488518ec270bb1d686fd08aca70fb2f6123cb36561228e288eac0f7d363ac78340a96f5a959883ea280a073db0e882c408f93eead7e1abd4700af641a7c04fc7bb0465552e25199b37c8d17e89d4cc73622cbf86b938c6427338cdef354c62808d6dcc6973473a5d6a786c7491b6c8f44cfe2e9127bb7ad7610143eb0320f16110fa7f342b29124a44cdae05ba4f899df2c150e8a2a1faa921f2f30129504c424b184c2aad4fa667d0ed7eeac0f9120241c32bb78bb29e8436f5b1f8362a9a2f2250039d5b8c684c4fd29f91f2f93f6c45f9903f3d94d4ca9d32619f513660b7177778067f0e08aa9197d0dedebe634b130c9395588fdc07af59d4e4706f3a8ddfb26d95ea035cc94bb6cb5f9ce2d372db1c7b8b5d6e925408f502ff1b746b31eb2afd1e7d1ee407c1fa27085159b5e3cb3b9f6dad9d9250c935116bb70d6d17fc4a3e93c76157d7417a094a0c3a93c52a63edf1e5091c14f5b8c7b04e7dd284ed0b8cfe9063697c219aec5717bf651ef77e2896e2b1ee9a300f564ffab7fad8dbb92c95fa8388c9f09921134adc23ac3c25a0a2fdd35f75c797d542c7b528b399f9c18be52896ac2ccf474ac70b8e43a6a2426ae1655bb3245dc295535c17ddce2b05c0e181a65a1b0826f3c485ddfdba84ee98a8100dbbab52666788d08151482c46fe7d09362932183ccc235a3451f7aaa08d431648a8688af0c5c1c330b2bea5734321bb2e28eb761b417925fc1f7eb0429176b73049012ded984620f5e62d1ad015df58dd7752b3a48a5c77d757dbb783aab7ca84698b51e88a6fd14405af265a8f601f0cec13faa60749a56830d8f982c3acb388538917f0f642b8d1a38820761aa54a6a4ea32e4763cfcba41d5c605c365dfb08f1f00bc2e65e55704da1bb7721c5cd9a2b1d3a39ff59727aeb824bb29487a657f8d4e6ead8e38a93deb0a17adec8177e974ea9166f1784389ae059708ac4bb6b09d4fabe7c97398c0bb1631bc5b22bc2b63b90d2644c2c4054cbfccc2d7c5c69076b6ef33a24b5f6eef829b919c1ca6a5279595820a7126e8412a914f9a077b2682c2529661c6fac7f6a43c55dccf98e1995d775b1bee3d57285da5d0ef5c04f651ead7e517c03552e6f724d9e1ddef3802ba0bfe081858d4bdfcd4a1dbab4237ab9c45305c0cd2efedf43be02a8b07525f16c20c738c32c671232cba30f4c26bc35f8df2676743347e3368f6cd7097cd40a54778de9262bbcbff3abd38937ae6343a61d62d83afd8f38498ed95541f2cafc1714144014393b79312924bf682e53502e95e0fcc69a6725c0ef89f5df7da972de20f713875fce329e935fd7e42c7450066954dcfa1915a66d4810fe2e278ca4c141c63c0c587379ea0a0e8790b5f2c591d0cd2c46f52c1de882c6b1052659908c824e0648522304a8ccb6ed213021ea5e9c1fe5cfc6087de4350a123723df37637fe061aab35321bcaeb6b318aca277686cd90dd6b193ad8bab4e809c1a5a7d45a132e74a011fb34e1af5be2b9aaed2820848b102d6d57826bbc726e0dd5592f680766ff51f26a98fd0f128e158dda0e231e28a6985eb0c9575fd5e3d651232514a485c7283b1f835d8061407528df1f7ecbdaedf0c58d790197b3c66bef126f82079dabf92c936cbe436a3e9ab8e1cd4a173f59419e861d3b08943cc44324e0625df9664f76350b8849c3f3e3306b163c473afe52ae7eeb8b938aa3232cf92976a291071076585f2a3a60bf710279867b7a02bac49fa3ef10bdfcc11cbd32cff812a4f97228767d07d0a6d190dfb408b6565c89a2712c47f7794ce5bb87edb00cdb3a41e5aa651fe6ef9b57d4108c9e5e01729fda664c64d7260d285dee83349ccb8f55e3b7d8069b9279ae9a375b9607fc5e8de28f9496c57dcb0188e13f82ab2af5b2f86f97e8d106c3ed958f97abc6c9ce60c74796a7edd9dfaa70afea526a3f0c65fec0bb569947bbd9da273bfa0a2b65bb190e32445c3f5d517877e2eb1e87e432c2aec1611adc42f5fd178b589fdf13709be621ce4ce9ce7190f9cfa3dabea4721fb3c1b3d76cfc56a788a3b2d3c9c53d9aceaa9e0155b95aa524d5b28f1ad99cba1eaeb8a9c427048a57665bffa42641e004fbf04dbf8e80ec21c4eac8c07b454e7c33b5815cb37ea751bf1c2e08df0da0e5848475a72e9eab270c9617278ed286869b157df5f88eac0087544559aadbd33f113aa1f6d17ed09e5ca1bac1c137261205ec04bf9f18878947a1406f90fea7a596613306a2cb14344023bbe761e4af12d921623450de04a7872844a987f212804dda397329352a8806cfaacde47996f9626192590b69759725711ffa1d777f3899750a82517c7f81fc950d389f05cc154314f3b72117fb65a0026fa99711a019302d1e8d4b4fca5646f45f05df6463057e1ede5e77e4fe6b08f2c203643cd0d07d1912ad50d3a8caaeb7575891ee78b951081e63962e828444547e6a08ca614797af4f5c8a92f49dc6e9629d501f6e7370ba33b7fd2839ceee0e020819bde4d5996ebe159878c2cc31227a276e2e84d6f00cce387f11ce163e48de5126e180047226a908981bbba629fef7d761ba522b9f3c7401b643814a25d71bbc7c85d7c90215a90181bbd5ba583fb3e56803261e229d31d9d732aac83cf67a18710455dc5ad09aae190b66f15793047eeb6d9d77a034cad5cbfe45b72664d01c6cbfe0e25d3a879f816858f8cbc23dae4f002f583f34078331ebb4da1804926bc5819460ab0892beb9aaf83be84b2d645b908038020233e17ae0df61020dbe2d66a6acf9ac6cf7bd08e793e9bd7232cf6863fd8b271761cd872afbe3c4b8e2bc13aafcabfead477cb50ea6657062db629dca7823a9b28b925188aa80f566c9760eeb058f42bca302288e220871c9cca67a3971a58871dbbb6c4001667e04ec3f6508fc2f74f26287932435a3c9cd63b8ede0ff2ebd1bebd00d2372220129a31d1941be4e1becfc0382a2644535ee989602ca020a7f83715d80280d95d6864792f209e8aba3984560778359b75f531e09eaf78bf0f2d8c5923dc60bee459dedae5abeacafb1412a9b549c9da258e126915492d2e6cf62fa27b808f19f9a0c31cdadf7a6c5b9723baa4f4620f5fdd3ebf35075946d810d3ce29dbd517f642cf5b5576d11ce133b755d17a568e531acdaa2a7fd9f0f5b3ec503277d7eb95bdc6d4f47e89b96013199b24a06abf779d2f182c2e0bf3fbff1656993b1744668df0b73743de3a950c73fd6e21cdff074556ca8da71f084ae201b1be727f92bfb34cc31e24a09eebf9a1f2b8e140baf1dd55d7d2dddc24d379356f8b615a979f848376c824f2897de0d78756301c0390b63c7f33c87b42e094fa3f92bbb70535437f6b154e6a09b793d990ad643f43fb751aeb5c177dfd9b771d0c471469997003ea544ea6bfcfd179be05eadf86d35ed3c754e69ade94ceb2642e0ded5e6c27a749ea2172c5cd4fb79637be38ec34ade4ef19ad0d415c963eb4c13dcfa0e5ceb78eb5df8a652ef3e1cbc56ed03aea91368abe022f4e5b102dd10415c5d5d8f4a01c8466188dffd4ae3de466c7f764a7b988bbd507640dbca09b5cb9efee0c4fb0b3db70456416b4852af1f138bec5d9295446704f475e6ab84a8bab6c17ee1fd3283d34f876b9df0a6de23037b10b69e2d043594dfd630052067a65589f8cf68009271282a88c0fb7e0f0b075d7a19dbd3aad436fb72d149699fcafe0d81b6a0d4d9d5de4117f7ebad52cc874ec3e21c21dd71eac58c280c54f9064ad7a97343a49013bebea654cb1af963e9a7e9636463f69325ea9aba19026ced81201a6e5f90598e9028fb0539e729c583431b1bb1120aa16d1936db586dd6e3a4f12499d026e1e3a3b87fb861a84bc49636b16eb00a81d655839644c704aff91df9f2f4460016059fcfa396f22d7864ddf9ffb57170921dd8336eaf5f440b974f5d1e1056ac6538b4f63bfa4d06b30411bef4de97e7ff8e2d99c4c27984344ddc650b5089874a9bd515c2882121e2c05f1fa7af8dd8d52ad0ef97c6dbb5a906a182346b930b7c4b1d3076d8629fd3b1ac018171a259835451e86a47b261e7a3bc7ca3e2f9e7471e121aa4c399894081e6ddfef60b0c7db446cfc6c51806c839f3817abf16e953c0bbf4b34cc22c80881b5586c649a121bef0810cdde82213af799320e2ab9cd079e24e8178c791c73226825a26d22684961644570555dde15580f3966f52a7c45e880db4b019f178ac269830dcea7fdba25b8392372a326dbd0a30cdb1ac554e6b415280aee0a8625df28a2fdf31bb4e80b2891b8ebc350e573ac3bc7a290f13a94935086a28c3bfef2512a8fd5f4846350dcabf9fe5991990ff201be0568344f7347f8803df35db22518b0e1eb934686d8fbac7c56532623f1dbcaef1b0561e36b3afece1aabafc158618ccaf041ec9ccc25e0b41e1176a71b08dc57d7ce01187ab9253b29a6280fa2fa8d935783d4f4b13870050484244f74364befc288edfcc3cb16cb66cf62acbb4043718ec1b1ee8a09225b86c2ad2d6111325eec7db124ae97842085cf82d1b0df4acfcb556710674551fcbe1675b76dc71f8fafaacfc62d82e3c42b2a7a969a344d6b3913018ae241436c10413f8c384cf0b74807b929a6101d85d5123965764f4933215a2e87455db0c99b14c96e47d0cf98e708b4adfa8ae8e5476e6fa919a55df6d8d34b181c2801060d8ffa663e04aac7823402beaee8c832047315eafc6b08ecbead8599a7acbc450078e2ff81c437f541fd03a073c3250baf2de9640381d721f624273f66a215f4c25b5514b73a429235c69577dc2fe585947951c7c30a46c5d647b6e3e207055cd37ceaf5d5f3af963bdc3d82461d61021722b02a316ea134cd4fdb9afbbd378486c15fdcc4de96fcb2468663c18166a875840dc7fd89384c7484a30643253c0f569439be997b0d6a5e4fd7484211919b95422e94154da670307786142319ef454497be09dea1d03ed9ce4f1d4a3d761f8ed859b13180a965515a23a831c6ddfc07f65d20fea85d63ecfe51ccbc2d754d42b2a1c8627d833ccb5f4216024ffb3e431573b7b8531c532145193398e77302a5150accdfc102697f8ffe2876d80c4ad53b5ee279becfa79a5f969eb21834b23b1106e50ec9057c10df00136d003f4989c2f75ecbd2b728c870fe4a4775e1ba2886ba29f6448829d3ef360261b9c4b84c3e1a973a2bea973350312f100e86e59b397253067de289b7654d56a2060c5dcc3a2f2346c5fa8b52302682b83e41a9873e9ed35289a24574c9fc3b28c0d9e1001a859d1dcf786065a57ea3eca9271e64fe33348880b216a61fb98192ca613d7089e54604b734795a12236ef08bbcd9166c890ce23c05bac263ef95d3027ec23fc5f753bb8ad80e00497818c9540ec9020e2a2363b86a1f8f71fd32e78b157f98f6041668bdbc1dfbf5be456622dffb74ec539353d4913309c0884a6138a9a438945de15d0e90c525c73c677dd09ad9977f8942bf2904e692e7dda933c5a4df89b1fac37f3eb93d026e36225d1e0f6af3d3cd26487b64885c10b94c5c8978c8d000000000000000000000000000000000100004e2000004e2400"], 0x0) 1.259198383s ago: executing program 3 (id=3164): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1, 0x0, 0x0, 0x11, 0x1}]}}, 0x0, 0x2a}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x80, 0x6, 0x8, 0x1}, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) close(0x3) 1.142976388s ago: executing program 1 (id=3165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000090900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000208000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c080003400000007a0800044000000022050002008900000008000640000000020900010073797a30"], 0x2ec}}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.121383308s ago: executing program 3 (id=3166): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f0000000100)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x14, 0x0, &(0x7f0000000240)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34d6e}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.052586642s ago: executing program 3 (id=3167): r0 = socket(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000100)=""/252, 0xfc, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) 985.883063ms ago: executing program 2 (id=3168): r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1fc, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x140, 0x3, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x130, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xfe}, @NFTA_SOCKET_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2b}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x17}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x40}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x90, 0x3, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "668917bc63e8deb78d61a4b43c8987beb3c7214d311495e5fb6b30a783d47ccc32f2cc22cf8e696d24971b2425b1bb82abf2e67d9231936b44df876b71976f084d87ff8c3f01"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x7, 0x30}, &(0x7f0000000580)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={r6, 0x0, 0x8}, &(0x7f0000000600)=0x8) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "7939e95c8abbe5b5e1f221a1d7105c605988f34c0d913b5d621a39b2de39727cda"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x1, 0x7ff, 0x11, @rand_addr=' \x01\x00', @remote, 0x8, 0x7827, 0x1, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x1, 0x40, 0x2, 0x1, {{0x11, 0x4, 0x1, 0x1, 0x44, 0x67, 0x0, 0x8, 0x4, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0x1b, 0x4, [@dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x32, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x40, 0x10, 0xe5f, 0x5ca, {{0xa, 0x4, 0x0, 0x24, 0x28, 0x68, 0x0, 0x5, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0xaa, [@multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x9, 0x8, {{0x67, 0x4, 0x1, 0x9, 0x19c, 0x64, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0x10, 0x74, 0x0, 0x5, [0x9, 0xfffffff8, 0x5]}, @cipso={0x86, 0x18, 0x1, [{0x2, 0x12, "1e378380768c64a7d297c6044ebbd6d8"}]}, @cipso={0x86, 0x26, 0x3, [{0x7, 0xc, "55e9dbc9389423fd5a52"}, {0x6, 0x9, "171e0f588f3e45"}, {0x1, 0xb, "398c0592dce8dcaf4d"}]}, @lsrr={0x83, 0x27, 0xb4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @remote, @empty, @remote, @rand_addr=0x64010102]}, @end, @cipso={0x86, 0x50, 0x0, [{0x7, 0xb, "f8560eb28dc2312cf9"}, {0x5, 0x12, "2695fdf64bfaf466b09f1e7727103d4f"}, {0x7, 0x10, "72e30cbda03c86658122751e7caa"}, {0x5, 0xb, "0a34cd7921bae36173"}, {0x0, 0x12, "a71a0ea178859e9238458f1262be27f4"}]}, @cipso={0x86, 0x4b, 0x1, [{0x2, 0x9, "43d7e04ca16896"}, {0x1, 0xd, "3003432e5618d22f7fe315"}, {0x6, 0xf, "cd5603c299052410fe9c64ba59"}, {0x6, 0x10, "eed9590309c8a2799cf1ee774596"}, {0x0, 0x10, "4742f65ce8a8ea827526cb601be8"}]}, @timestamp_addr={0x44, 0x4c, 0x95, 0x1, 0x3, [{@multicast2, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x1}, {@multicast2, 0x7}, {@private=0xa010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x10000}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xc}, {@loopback, 0x2}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x25, 0x1, 0x6, [{@broadcast, 0x3}, {@remote, 0x4}, {@remote}, {@multicast1, 0x4}]}]}}}}}) getpeername$packet(r3, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d40)=0x14) getsockname$packet(r3, &(0x7f0000000d80)={0x11, 0x0, 0x0}, &(0x7f0000000dc0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e00)={'dvmrp1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000e40)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000f40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x55, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000001500)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001180)={0x310, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r19 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={r10, 0x5, 0x8}, 0xc) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x0, 0x2, &(0x7f00000015c0)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xac4}], &(0x7f0000001600)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001640)=""/4096, 0x41100, 0x4, '\x00', r14, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002680)={0x1, 0x4, 0x10, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000026c0)=[r19, r19, r19, r19, r19, r19, r19], 0x0, 0x10, 0x10000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000027c0)=@o_path={&(0x7f0000001580)='./file0\x00', r20, 0x4000, r2}, 0x18) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000002800), &(0x7f0000002840)=0x4) r21 = syz_genetlink_get_family_id$ipvs(&(0x7f00000028c0), r3) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000002a80)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002a40)={&(0x7f0000002900)={0x114, r21, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x209}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5f3}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 949.326145ms ago: executing program 3 (id=3169): socket$kcm(0x10, 0x2, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x484800, 0x0) write$tun(r0, &(0x7f0000001600)=ANY=[@ANYBLOB="000088fbe501f8ff0900f80701000104ffac50f53c7ca730ad2ed39be536078264c3e21856ec1a307d0f48b25d93c417c2da41b3e6be59c62b7ffbbbfe1f69bfa8acbc558e16f133e0354190336e50b7d8d99429a90dde367a2ce8b51df03218a0bf898cb07ccc4233fda88bbb87cb6a152760537bbe71b00000c66dbf37a9f038c309417594944277e92d2811f5f734890493954d7995473dad04136ee7d60152cccda5a833e5a2c6d5972cc2c5d4937e4e206016ebdd303a84501031ee36d16af16a1c172a2569784625ec19efeabfc0c799ff4f63b46d544b6e"], 0xdb) (async) write$tun(r0, &(0x7f0000001600)=ANY=[@ANYBLOB="000088fbe501f8ff0900f80701000104ffac50f53c7ca730ad2ed39be536078264c3e21856ec1a307d0f48b25d93c417c2da41b3e6be59c62b7ffbbbfe1f69bfa8acbc558e16f133e0354190336e50b7d8d99429a90dde367a2ce8b51df03218a0bf898cb07ccc4233fda88bbb87cb6a152760537bbe71b00000c66dbf37a9f038c309417594944277e92d2811f5f734890493954d7995473dad04136ee7d60152cccda5a833e5a2c6d5972cc2c5d4937e4e206016ebdd303a84501031ee36d16af16a1c172a2569784625ec19efeabfc0c799ff4f63b46d544b6e"], 0xdb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640", @ANYRESHEX], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x13, 0x19}}]}}]}, 0x44}}, 0x4008000) socket(0x2b, 0x80801, 0x1) (async) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) shutdown(r6, 0x1) (async) shutdown(r6, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000001540)={0x0, 0xc}, &(0x7f0000001580)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000001540)={0x0, 0xc}, &(0x7f0000001580)=0x8) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f00000014c0)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 888.915731ms ago: executing program 1 (id=3170): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x24000084) r2 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c1f4dc151af358007633c8f41410025ea", @ANYRESDEC=r4, @ANYBLOB="02002abd7000fddbdf2509000000050007000a0000370500070013000000050007000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000044}, 0x10) 633.74971ms ago: executing program 1 (id=3171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x800) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x5, 0x8001, 0x0, 0x4, 0x3d310c44, 0xe}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, "7b93de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20020090}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x1, 0x5, 0x4, 0x2, 0x16, 0x4}}]}}]}, 0x150}}, 0x0) 450.040086ms ago: executing program 4 (id=3172): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000000000000000000200000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000040010000000000004000050000d5bea2784d005b17"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) (async) sendmsg$nl_generic(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="40000000310009002abd700000000000040000002c0011802ebe"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000500)={0x18}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080), 0x56) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x40480c4}, 0xc010) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf2503000000050003008c000000070000004d240000000200000008000b00000000", @ANYRES32=r4, @ANYBLOB="06000a004e20000014000700fc02000000000000000000000000000006000a004e220000060001004e200000"], 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x48004) 203.669043ms ago: executing program 4 (id=3173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff2d, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041890}, 0x48c4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fdd3df250800000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1fb69, 0x51227}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) 98.44313ms ago: executing program 1 (id=3174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 42.890941ms ago: executing program 2 (id=3175): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) 0s ago: executing program 1 (id=3176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff040000001d00000008000300", @ANYRES32=0x0, @ANYBLOB="64002f800c0002000200aaaaaaaaaaaa540003800c0005000f00000000000000050002000200000008000100030000000800040009000000050002000100000005000200000000001c00038006000300a1aa000008000200020000000600010003000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000009c0)={r0, &(0x7f00000008c0)='[\x00', 0x200b01, &(0x7f0000000900)={@_ha_fsid={[0x6, 0x103e]}, {0x6, 0xffff, 0x6, 0x7}}, 0x6, &(0x7f0000000940), &(0x7f0000000980)=0x8}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0}, &(0x7f0000000a40)=0xc) write$cgroup_pid(r1, &(0x7f0000000a80)=r2, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000000)='\x00', 0x10000, &(0x7f0000000080)={@align=0x5, {0x0, 0x600c, 0x7, 0x7fff}}, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x3}, {[0x7, 0x7, 0x8]}, 0xffc, 0x66, &(0x7f0000000200)=""/102}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) unshare(0x20040600) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2f, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xc8, r8}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x43}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r6, &(0x7f0000000700)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r9, &(0x7f0000000400)="1ce0", 0x2, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000880)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast2=0xac14143c}}) r11 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x80088a02, &(0x7f0000000380)) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$OCFS2_IOC_GROUP_ADD64(r12, 0x40186f03, &(0x7f00000003c0)={0xfffffffffffffc00, 0x4, 0x9, 0xb}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r4, r5, 0xa}, 0x14) kernel console output (not intermixed with test programs): length. [ 209.190142][T11256] netlink: 'syz.2.1479': attribute type 2 has an invalid length. [ 209.692423][T11287] netlink: 'syz.0.1487': attribute type 1 has an invalid length. [ 210.119084][T11302] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 210.963119][T11350] netlink: 'syz.3.1507': attribute type 30 has an invalid length. [ 211.394438][T11366] TC_ACT_REPEAT abuse ? [ 212.005699][T11368] validate_nla: 1 callbacks suppressed [ 212.005723][T11368] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 212.041632][T11368] team0: Port device wg2 added [ 212.146399][T11390] __nla_validate_parse: 25 callbacks suppressed [ 212.146422][T11390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1513'. [ 212.757684][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'. [ 213.087932][T11452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1534'. [ 213.087957][T11452] bridge: RTM_NEWNEIGH with invalid ether address [ 213.125403][T11456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1536'. [ 213.202104][T11465] xt_MASQUERADE: bad MAP_IPS. [ 213.313971][T11461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 213.382145][T11475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1540'. [ 213.425976][T11475] netlink: 'syz.3.1540': attribute type 18 has an invalid length. [ 213.499775][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 213.715777][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 213.715815][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 213.722161][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 213.722259][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 214.221035][T11523] syzkaller0: entered promiscuous mode [ 214.221054][T11523] syzkaller0: entered allmulticast mode [ 214.896472][T11526] netlink: 'syz.1.1554': attribute type 10 has an invalid length. [ 216.918199][T11502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.140958][T11537] netlink: 'syz.4.1557': attribute type 6 has an invalid length. [ 217.247987][T11544] __nla_validate_parse: 2 callbacks suppressed [ 217.248010][T11544] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1560'. [ 217.272843][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 217.348618][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 217.387078][T11555] bond7: entered promiscuous mode [ 217.387106][T11555] bond7: entered allmulticast mode [ 217.409565][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 217.421544][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 217.433266][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 217.450485][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 217.462271][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 217.472487][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 217.483804][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 217.737383][T11570] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 218.347680][T11610] ip_tables: iptables: counters copy to user failed while replacing table [ 218.767730][T11628] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 218.805614][T11631] lo: entered promiscuous mode [ 218.805965][T11631] netlink: 'syz.3.1584': attribute type 2 has an invalid length. [ 218.806545][T11631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.806765][ T5739] lo speed is unknown, defaulting to 1000 [ 218.985362][T11638] bond8 (unregistering): Released all slaves [ 219.013521][T11651] ip_tables: iptables: counters copy to user failed while replacing table [ 219.823762][T11693] netlink: 'syz.0.1600': attribute type 2 has an invalid length. [ 219.894091][T11695] ip_tables: iptables: counters copy to user failed while replacing table [ 220.469055][T11727] vlan6: entered promiscuous mode [ 220.469088][T11727] bond0: entered promiscuous mode [ 220.693766][T11737] vlan0: entered allmulticast mode [ 220.956782][T11761] netlink: 'syz.4.1617': attribute type 3 has an invalid length. [ 221.440942][T11785] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 221.529692][T11780] Cannot find del_set index 4 as target [ 221.579852][T11803] Bluetooth: hci0: unsupported parameter 5135 [ 221.584748][T11803] Bluetooth: hci0: unsupported parameter 8192 [ 221.584786][T11803] Bluetooth: hci0: unsupported parameter 5135 [ 221.584801][T11803] Bluetooth: hci0: unsupported parameter 8192 [ 221.622331][T11803] bridge5: entered promiscuous mode [ 221.623291][T11803] bridge5: entered allmulticast mode [ 222.156495][T11836] netlink: 'syz.3.1636': attribute type 3 has an invalid length. [ 222.304304][T11840] __nla_validate_parse: 41 callbacks suppressed [ 222.304328][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1637'. [ 222.304343][T11840] tc_dump_action: action bad kind [ 222.365511][T11842] bond8: entered promiscuous mode [ 222.365953][T11842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.393567][T11846] xt_HMARK: proto mask must be zero with L3 mode [ 222.404990][T11847] openvswitch: netlink: Key type 31 is not supported [ 222.418546][T11842] bridge6: entered promiscuous mode [ 222.419238][T11842] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 222.437368][T11848] openvswitch: netlink: Key type 31 is not supported [ 222.706280][T11863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1645'. [ 222.788322][T11867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.242100][T11888] bond0: (slave dummy0): Error: Slave does not support XDP [ 223.349491][T11894] 8021q: adding VLAN 0 to HW filter on device bond8 [ 223.494323][T11900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1656'. [ 223.494596][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1656'. [ 223.521289][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 223.575695][T11899] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.579371][T11899] bond9: entered promiscuous mode [ 223.580578][T11899] bond0: (slave bond9): Enslaving as an active interface with an up link [ 224.146878][T11771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.389946][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.429927][T11948] dummy0: left promiscuous mode [ 224.545834][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.565816][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.637441][T11948] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 224.664760][T11948] bond1: left promiscuous mode [ 224.664783][T11948] gre1: left promiscuous mode [ 224.719075][T11948] syzkaller0: left promiscuous mode [ 224.719101][T11948] syzkaller0: left allmulticast mode [ 224.732965][T11948] bond3: left promiscuous mode [ 224.732988][T11948] bridge1: left promiscuous mode [ 224.754133][T11948] bond4: left promiscuous mode [ 224.754157][T11948] bond4: left allmulticast mode [ 224.778791][T11948] bond7: left promiscuous mode [ 224.778814][T11948] bond7: left allmulticast mode [ 224.779600][T11948] bridge5: left promiscuous mode [ 224.779620][T11948] bridge5: left allmulticast mode [ 224.804723][T11948] bond8: left promiscuous mode [ 224.804746][T11948] bridge6: left promiscuous mode [ 224.852421][T10298] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.852454][T10298] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.852523][T10298] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.852548][T10298] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.852614][T10298] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.852654][T10298] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.852726][T10298] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.852751][T10298] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.052169][T11963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1669'. [ 225.202497][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1672'. [ 225.755858][T12008] syzkaller0: entered promiscuous mode [ 225.755884][T12008] syzkaller0: entered allmulticast mode [ 226.296544][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'. [ 226.298591][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1685'. [ 228.687369][T12000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.948543][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 229.102685][T12055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1693'. [ 229.265229][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 229.265259][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 229.265276][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 229.267488][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 229.267512][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 229.267529][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 229.302314][T12071] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1694'. [ 229.304540][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'. [ 229.833695][T12106] netlink: 'syz.0.1709': attribute type 10 has an invalid length. [ 229.946042][T12104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.957864][T12104] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.987377][T12104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.123136][T12104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.144585][T12104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.216491][T12104] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 230.256765][T12106] team0: Device dummy0 is of different type [ 230.351994][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.352111][T10297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.388062][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.388178][T10297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.566720][T12138] 8021q: VLANs not supported on vcan0 [ 230.566849][T12138] 8021q: VLANs not supported on vcan0 [ 230.566939][T12138] 8021q: VLANs not supported on vcan0 [ 230.567028][T12138] 8021q: VLANs not supported on vcan0 [ 230.583286][T12138] 8021q: VLANs not supported on vcan0 [ 230.583591][T12138] 8021q: VLANs not supported on vcan0 [ 230.583803][T12138] 8021q: VLANs not supported on vcan0 [ 230.584021][T12138] 8021q: VLANs not supported on vcan0 [ 230.608188][T12138] 8021q: VLANs not supported on vcan0 [ 230.608380][T12138] 8021q: VLANs not supported on vcan0 [ 230.608642][T12138] 8021q: VLANs not supported on vcan0 [ 230.608861][T12138] 8021q: VLANs not supported on vcan0 [ 230.609080][T12138] 8021q: VLANs not supported on vcan0 [ 230.612636][T12138] 8021q: VLANs not supported on vcan0 [ 230.671540][T12138] 8021q: VLANs not supported on vcan0 [ 230.671666][T12138] 8021q: VLANs not supported on vcan0 [ 230.671756][T12138] 8021q: VLANs not supported on vcan0 [ 230.671847][T12138] 8021q: VLANs not supported on vcan0 [ 230.671934][T12138] 8021q: VLANs not supported on vcan0 [ 230.672022][T12138] 8021q: VLANs not supported on vcan0 [ 230.672108][T12138] 8021q: VLANs not supported on vcan0 [ 230.676467][T12138] 8021q: VLANs not supported on vcan0 [ 230.676559][T12138] 8021q: VLANs not supported on vcan0 [ 230.676671][T12138] 8021q: VLANs not supported on vcan0 [ 230.684659][T12138] 8021q: VLANs not supported on vcan0 [ 230.684913][T12138] 8021q: VLANs not supported on vcan0 [ 230.718744][T12138] 8021q: VLANs not supported on vcan0 [ 230.718960][T12138] 8021q: VLANs not supported on vcan0 [ 230.719179][T12138] 8021q: VLANs not supported on vcan0 [ 230.719417][T12138] 8021q: VLANs not supported on vcan0 [ 230.727347][T12138] 8021q: VLANs not supported on vcan0 [ 230.743010][T12138] 8021q: VLANs not supported on vcan0 [ 230.743137][T12138] 8021q: VLANs not supported on vcan0 [ 230.743226][T12138] 8021q: VLANs not supported on vcan0 [ 230.743318][T12138] 8021q: VLANs not supported on vcan0 [ 230.743510][T12138] 8021q: VLANs not supported on vcan0 [ 230.743797][T12138] 8021q: VLANs not supported on vcan0 [ 230.744000][T12138] 8021q: VLANs not supported on vcan0 [ 230.744207][T12138] 8021q: VLANs not supported on vcan0 [ 230.744414][T12138] 8021q: VLANs not supported on vcan0 [ 230.744613][T12138] 8021q: VLANs not supported on vcan0 [ 230.769487][T12138] 8021q: VLANs not supported on vcan0 [ 230.769710][T12138] 8021q: VLANs not supported on vcan0 [ 230.828943][T12138] 8021q: VLANs not supported on vcan0 [ 230.829339][T12138] 8021q: VLANs not supported on vcan0 [ 230.829599][T12138] 8021q: VLANs not supported on vcan0 [ 230.829795][T12138] 8021q: VLANs not supported on vcan0 [ 230.878774][T12148] netlink: 'syz.0.1714': attribute type 21 has an invalid length. [ 230.878864][T12148] netlink: 'syz.0.1714': attribute type 5 has an invalid length. [ 230.878878][T12148] netlink: 'syz.0.1714': attribute type 6 has an invalid length. [ 230.892423][T12138] 8021q: VLANs not supported on vcan0 [ 230.892761][T12138] 8021q: VLANs not supported on vcan0 [ 230.892976][T12138] 8021q: VLANs not supported on vcan0 [ 230.893184][T12138] 8021q: VLANs not supported on vcan0 [ 230.893449][T12138] 8021q: VLANs not supported on vcan0 [ 230.893729][T12138] 8021q: VLANs not supported on vcan0 [ 230.922487][T12138] 8021q: VLANs not supported on vcan0 [ 230.922754][T12138] 8021q: VLANs not supported on vcan0 [ 230.923029][T12138] 8021q: VLANs not supported on vcan0 [ 230.923239][T12138] 8021q: VLANs not supported on vcan0 [ 230.923445][T12138] 8021q: VLANs not supported on vcan0 [ 230.923625][T12138] 8021q: VLANs not supported on vcan0 [ 230.971475][T12138] 8021q: VLANs not supported on vcan0 [ 230.971584][T12138] 8021q: VLANs not supported on vcan0 [ 230.971664][T12138] 8021q: VLANs not supported on vcan0 [ 230.971748][T12138] 8021q: VLANs not supported on vcan0 [ 230.971831][T12138] 8021q: VLANs not supported on vcan0 [ 230.971908][T12138] 8021q: VLANs not supported on vcan0 [ 231.303467][T12153] bond12: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 231.327024][T12153] bond12 (unregistering): Released all slaves [ 231.653408][T12176] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 232.172259][T12203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.175501][ T29] lo speed is unknown, defaulting to 1000 [ 232.175535][ T29] syz0: Port: 1 Link DOWN [ 232.238576][ T5739] lo speed is unknown, defaulting to 1000 [ 234.536674][T12169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.708156][T12228] __nla_validate_parse: 8 callbacks suppressed [ 234.708179][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 234.996731][T12240] FAULT_INJECTION: forcing a failure. [ 234.996731][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.996768][T12240] CPU: 0 UID: 0 PID: 12240 Comm: syz.1.1745 Not tainted syzkaller #0 PREEMPT(full) [ 234.996793][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 234.996806][T12240] Call Trace: [ 234.996814][T12240] [ 234.996824][T12240] dump_stack_lvl+0xe8/0x150 [ 234.996873][T12240] should_fail_ex+0x410/0x560 [ 234.996911][T12240] _copy_from_user+0x2d/0xb0 [ 234.996945][T12240] kstrtouint_from_user+0xd6/0x180 [ 234.996976][T12240] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 234.997013][T12240] ? lock_acquire+0x115/0x350 [ 234.997043][T12240] proc_fail_nth_write+0x8e/0x210 [ 234.997074][T12240] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 234.997115][T12240] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 234.997150][T12240] vfs_write+0x296/0xba0 [ 234.997187][T12240] ? __pfx_vfs_write+0x10/0x10 [ 234.997216][T12240] ? __fget_files+0x2a/0x420 [ 234.997236][T12240] ? __fget_files+0x3a2/0x420 [ 234.997258][T12240] ? __fget_files+0x2a/0x420 [ 234.997285][T12240] ? fdget+0x1ac/0x250 [ 234.997318][T12240] ksys_write+0x150/0x270 [ 234.997346][T12240] ? __pfx_ksys_write+0x10/0x10 [ 234.997386][T12240] do_syscall_64+0x166/0x520 [ 234.997408][T12240] ? trace_irq_disable+0x3b/0x140 [ 234.997434][T12240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.997457][T12240] ? clear_bhb_loop+0x70/0xc0 [ 234.997484][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.997506][T12240] RIP: 0033:0x7f74ef35fd8e [ 234.997526][T12240] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.997544][T12240] RSP: 002b:00007f74f020cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.997567][T12240] RAX: ffffffffffffffda RBX: 00007f74f020d6c0 RCX: 00007f74ef35fd8e [ 234.997584][T12240] RDX: 0000000000000001 RSI: 00007f74f020d0a0 RDI: 0000000000000006 [ 234.997597][T12240] RBP: 00007f74f020d090 R08: 0000000000000000 R09: 0000000000000000 [ 234.997612][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.997624][T12240] R13: 00007f74ef626038 R14: 00007f74ef625fa0 R15: 00007ffc6375ef48 [ 234.997660][T12240] [ 235.373409][T12249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1748'. [ 235.476066][T12261] ip_tables: iptables: counters copy to user failed while replacing table [ 236.036381][T12284] openvswitch: netlink: Tunnel attr 229 out of range max 16 [ 236.195077][T12290] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 236.445130][T12295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1763'. [ 236.456720][T12297] ip_tables: iptables: counters copy to user failed while replacing table [ 236.660560][T12302] netlink: 'syz.1.1766': attribute type 28 has an invalid length. [ 236.660586][T12302] netlink: 'syz.1.1766': attribute type 3 has an invalid length. [ 236.660601][T12302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1766'. [ 236.962594][T12316] netlink: 'syz.0.1769': attribute type 29 has an invalid length. [ 237.096141][T12322] netlink: 'syz.1.1772': attribute type 3 has an invalid length. [ 237.219481][T12328] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 237.226944][T12328] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 237.245313][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1772'. [ 237.382740][T12336] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 237.402675][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 237.404221][T12336] syz.4.1776: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.404458][T12336] CPU: 1 UID: 0 PID: 12336 Comm: syz.4.1776 Not tainted syzkaller #0 PREEMPT(full) [ 237.404483][T12336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 237.404505][T12336] Call Trace: [ 237.404514][T12336] [ 237.404523][T12336] dump_stack_lvl+0xe8/0x150 [ 237.404562][T12336] warn_alloc+0x24d/0x270 [ 237.404591][T12336] ? kasan_save_track+0x4f/0x80 [ 237.404619][T12336] ? kasan_save_track+0x3e/0x80 [ 237.404660][T12336] ? __pfx_warn_alloc+0x10/0x10 [ 237.404685][T12336] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 237.404717][T12336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.404764][T12336] __vmalloc_node_range_noprof+0x127/0x1540 [ 237.404815][T12336] ? rcu_is_watching+0x16/0xb0 [ 237.404850][T12336] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.404876][T12336] ? __kmalloc_cache_noprof+0x31c/0x600 [ 237.404904][T12336] ? __kmalloc_cache_noprof+0x148/0x600 [ 237.404931][T12336] ? xskq_create+0x56/0x220 [ 237.404969][T12336] xskq_create+0x148/0x220 [ 237.405002][T12336] ? xsk_init_queue+0x8a/0xe0 [ 237.405037][T12336] xsk_init_queue+0x8a/0xe0 [ 237.405072][T12336] xsk_setsockopt+0x52a/0x960 [ 237.405107][T12336] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.405140][T12336] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.405177][T12336] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.405198][T12336] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.405232][T12336] do_sock_setsockopt+0x17c/0x1b0 [ 237.405270][T12336] __x64_sys_setsockopt+0x13d/0x1b0 [ 237.405310][T12336] do_syscall_64+0x166/0x520 [ 237.405332][T12336] ? trace_irq_disable+0x3b/0x140 [ 237.405358][T12336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.405380][T12336] ? clear_bhb_loop+0x70/0xc0 [ 237.405408][T12336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.405429][T12336] RIP: 0033:0x7f559199f559 [ 237.405450][T12336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.405469][T12336] RSP: 002b:00007f5592796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.405491][T12336] RAX: ffffffffffffffda RBX: 00007f5591c25fa0 RCX: 00007f559199f559 [ 237.405508][T12336] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 237.405521][T12336] RBP: 00007f5591a36b20 R08: 0000000000000004 R09: 0000000000000000 [ 237.405534][T12336] R10: 0000200000000d80 R11: 0000000000000246 R12: 0000000000000000 [ 237.405548][T12336] R13: 00007f5591c26038 R14: 00007f5591c25fa0 R15: 00007ffce06f7598 [ 237.405584][T12336] [ 237.405611][T12336] Mem-Info: [ 237.405620][T12336] active_anon:5532 inactive_anon:0 isolated_anon:0 [ 237.405620][T12336] active_file:1 inactive_file:43055 isolated_file:0 [ 237.405620][T12336] unevictable:0 dirty:93 writeback:0 [ 237.405620][T12336] slab_reclaimable:11579 slab_unreclaimable:109994 [ 237.405620][T12336] mapped:29187 shmem:551 pagetables:1296 [ 237.405620][T12336] sec_pagetables:0 bounce:0 [ 237.405620][T12336] kernel_misc_reclaimable:0 [ 237.405620][T12336] free:1262530 free_pcp:21179 free_cma:0 [ 237.406475][T12342] netlink: 'syz.3.1777': attribute type 2 has an invalid length. [ 237.406494][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'. [ 237.441621][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 237.446911][T12336] Node 0 active_anon:22228kB inactive_anon:0kB active_file:4kB inactive_file:172016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116748kB dirty:368kB writeback:0kB shmem:2204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14760kB pagetables:4940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 237.447074][T12336] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 237.447266][T12336] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.447432][T12336] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 237.447539][T12336] Node 0 DMA32 free:1110548kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22228kB inactive_anon:0kB active_file:4kB inactive_file:172016kB unevictable:0kB writepending:368kB zspages:0kB present:3129332kB managed:2526412kB mlocked:0kB bounce:0kB free_pcp:76560kB local_pcp:21340kB free_cma:0kB [ 237.447755][T12336] lowmem_reserve[]: 0 0 0 0 0 [ 237.447853][T12336] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.448044][T12336] lowmem_reserve[]: 0 0 0 0 0 [ 237.448142][T12336] Node 1 Normal free:3924212kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:7808kB local_pcp:7808kB free_cma:0kB [ 237.448336][T12336] lowmem_reserve[]: 0 0 0 0 0 [ 237.448374][T12336] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 237.486725][T12336] Node 0 DMA32: 1225*4kB (UME) 755*8kB (UME) 267*16kB (UME) 342*32kB (UME) 24*64kB (UME) 141*128kB (UME) 115*256kB (UME) 48*512kB (UME) 13*1024kB (UE) 5*2048kB (UME) 241*4096kB (UM) = 1110444kB [ 237.489298][T12336] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 237.528983][T12336] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 13*16kB (UM) 1*32kB (M) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 957*4096kB (M) = 3924212kB [ 237.529472][T12336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.529514][T12336] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.529555][T12336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.529596][T12336] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.529641][T12336] 43603 total pagecache pages [ 237.529667][T12336] 0 pages in swap cache [ 237.529687][T12336] Free swap = 124996kB [ 237.529707][T12336] Total swap = 124996kB [ 237.529728][T12336] 2097051 pages RAM [ 237.529748][T12336] 0 pages HighMem/MovableOnly [ 237.529768][T12336] 433832 pages reserved [ 237.529787][T12336] 0 pages cma reserved [ 237.589485][T12347] netlink: 'syz.3.1777': attribute type 2 has an invalid length. [ 237.589543][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'. [ 238.198070][T12350] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 238.386169][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 238.613641][T12377] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 238.732844][T12384] ip_tables: iptables: counters copy to user failed while replacing table [ 238.738355][T12380] netlink: 'syz.1.1792': attribute type 32 has an invalid length. [ 238.758316][T12385] xt_hashlimit: size too large, truncated to 1048576 [ 238.769787][T12385] xt_TCPMSS: Only works on TCP SYN packets [ 238.783823][T12385] netlink: zone id is out of range [ 239.046276][T12399] bond10: entered allmulticast mode [ 239.046801][T12399] 8021q: adding VLAN 0 to HW filter on device bond10 [ 239.285083][T12417] lo: entered promiscuous mode [ 239.297428][T12417] tunl0: entered promiscuous mode [ 239.306353][T12417] gre0: entered promiscuous mode [ 239.333341][T12417] erspan0: entered promiscuous mode [ 239.490714][T12424] syzkaller0: entered promiscuous mode [ 239.490767][T12424] syzkaller0: entered allmulticast mode [ 239.664773][T12428] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 239.667701][T12428] bond12 (unregistering): Released all slaves [ 239.750546][T12434] smc: smcd device lo applied user defined pnetid SYZ0 [ 239.802662][T12404] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 240.003672][T12450] __nla_validate_parse: 6 callbacks suppressed [ 240.003693][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 240.007993][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1813'. [ 240.092445][T12461] sctp: [Deprecated]: syz.1.1817 (pid 12461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.092445][T12461] Use struct sctp_sack_info instead [ 240.142784][T12467] ip_tables: iptables: counters copy to user failed while replacing table [ 240.145269][T12467] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1818'. [ 240.300952][T12469] macvlan0: entered promiscuous mode [ 240.300976][T12469] bond0: entered promiscuous mode [ 240.300991][T12469] bond_slave_0: entered promiscuous mode [ 240.301207][T12469] bond_slave_1: entered promiscuous mode [ 240.301940][T12469] macvlan0: entered allmulticast mode [ 240.301959][T12469] bond0: entered allmulticast mode [ 240.301974][T12469] bond_slave_0: entered allmulticast mode [ 240.301990][T12469] bond_slave_1: entered allmulticast mode [ 240.303715][T12469] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 240.304720][T12469] bond0: left allmulticast mode [ 240.304735][T12469] bond_slave_0: left allmulticast mode [ 240.304748][T12469] bond_slave_1: left allmulticast mode [ 240.304828][T12469] bond0: left promiscuous mode [ 240.402566][ T3223] bond_slave_0: left promiscuous mode [ 240.402595][ T3223] bond_slave_1: left promiscuous mode [ 240.428558][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1822'. [ 240.458090][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 240.645997][T12486] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1826'. [ 240.675624][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 240.675646][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 240.678242][T12488] vlan0: left allmulticast mode [ 240.777862][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 240.777921][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 240.936210][T10302] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 240.936459][T10302] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 240.960314][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 241.046454][T12509] Cannot find set identified by id 4 to match [ 241.170385][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 241.400349][ T5774] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 241.517610][T12528] netlink: 'syz.3.1836': attribute type 142 has an invalid length. [ 241.586317][T12534] rxe_eth0 speed is unknown, defaulting to 1000 [ 241.710563][T12537] netlink: 'syz.1.1839': attribute type 83 has an invalid length. [ 241.717175][T12537] netlink: 'syz.1.1839': attribute type 3 has an invalid length. [ 241.810483][ T5774] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 242.025884][T12557] gretap2: entered promiscuous mode [ 242.163825][T12561] openvswitch: netlink: Tunnel attr 37 out of range max 16 [ 242.488401][T12585] Bluetooth: hci0: unsupported parameter 5135 [ 242.488428][T12585] Bluetooth: hci0: unsupported parameter 8192 [ 242.488442][T12585] Bluetooth: hci0: unsupported parameter 5135 [ 242.488457][T12585] Bluetooth: hci0: unsupported parameter 8192 [ 242.489199][T12585] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 243.144348][T12621] bridge9: entered promiscuous mode [ 243.144373][T12621] bridge9: entered allmulticast mode [ 243.164706][T12581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.188817][T12621] team0: Port device bridge9 added [ 243.195952][T12623] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 243.279624][T12621] bridge0: port 4(team0) entered blocking state [ 243.279727][T12621] bridge0: port 4(team0) entered disabled state [ 243.280710][T12621] team0: entered allmulticast mode [ 243.280760][T12621] team_slave_0: entered allmulticast mode [ 243.285115][T12621] team_slave_1: entered allmulticast mode [ 243.335539][T12621] team0: entered promiscuous mode [ 243.335565][T12621] team_slave_0: entered promiscuous mode [ 243.335760][T12621] team_slave_1: entered promiscuous mode [ 243.339024][T12621] bridge0: port 4(team0) entered blocking state [ 243.339159][T12621] bridge0: port 4(team0) entered forwarding state [ 243.632797][T12639] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 243.632823][T12639] netlink: 'syz.4.1876': attribute type 2 has an invalid length. [ 244.930220][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 245.084799][T12721] __nla_validate_parse: 22 callbacks suppressed [ 245.084822][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 245.354779][T12737] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 245.822786][T12766] netlink: 'syz.3.1909': attribute type 2 has an invalid length. [ 246.039041][ T30] audit: type=1800 audit(1793256796.425:3): pid=12775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1912" name="memory.numa_stat" dev="tmpfs" ino=2020 res=0 errno=-22 [ 246.137910][T12777] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 246.158022][T12777] bond4 (unregistering): Released all slaves [ 246.244214][T12775] 8021q: VLANs not supported on ip6gre0 [ 246.496847][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 246.497043][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 246.498014][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 246.498650][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 246.499145][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 246.499436][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 246.499694][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 246.512815][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 246.513340][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 247.242239][T12853] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 247.371568][T12860] tipc: Enabling of bearer rejected, media not registered [ 247.610239][T12877] bond9: Removing last arp target with arp_interval on [ 247.727826][T12884] netlink: 'syz.2.1946': attribute type 4 has an invalid length. [ 247.934848][T12897] netlink: 'syz.4.1950': attribute type 61 has an invalid length. [ 248.074600][T12906] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 248.243082][T12916] ip_tables: iptables: counters copy to user failed while replacing table [ 248.609635][T12945] netlink: 'syz.3.1963': attribute type 7 has an invalid length. [ 249.183301][T12981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 249.505158][T12998] sit0: entered promiscuous mode [ 249.523436][T12998] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 249.606864][T13002] netlink: 'syz.2.1980': attribute type 32 has an invalid length. [ 249.848286][T13017] sit1: entered promiscuous mode [ 250.271463][T13041] netlink: 'syz.1.1989': attribute type 6 has an invalid length. [ 250.312572][T13042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.344728][T13046] __nla_validate_parse: 72 callbacks suppressed [ 250.344750][T13046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1994'. [ 250.514936][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 250.589694][T13059] netlink: 'syz.1.1996': attribute type 21 has an invalid length. [ 250.589720][T13059] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1996'. [ 250.589798][T13059] netlink: 'syz.1.1996': attribute type 5 has an invalid length. [ 250.589815][T13059] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1996'. [ 251.262858][T13096] bond11: entered promiscuous mode [ 251.263318][T13096] 8021q: adding VLAN 0 to HW filter on device bond11 [ 251.446521][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 251.446547][T13104] netlink: 5740 bytes leftover after parsing attributes in process `syz.4.2006'. [ 251.446581][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 251.750548][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'. [ 251.979778][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 252.059444][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 252.090913][T13125] syzkaller1: entered promiscuous mode [ 252.090937][T13125] syzkaller1: entered allmulticast mode [ 252.313037][T13142] team0: left allmulticast mode [ 252.313062][T13142] team_slave_0: left allmulticast mode [ 252.313081][T13142] team_slave_1: left allmulticast mode [ 252.314773][T13142] team0: left promiscuous mode [ 252.314792][T13142] team_slave_0: left promiscuous mode [ 252.315085][T13142] team_slave_1: left promiscuous mode [ 252.316064][T13142] bridge0: port 4(team0) entered disabled state [ 252.319691][T13142] batadv1: left allmulticast mode [ 252.319712][T13142] batadv1: left promiscuous mode [ 252.373783][T13142] bridge0: port 3(batadv1) entered disabled state [ 252.389091][T13142] bridge_slave_1: left allmulticast mode [ 252.389120][T13142] bridge_slave_1: left promiscuous mode [ 252.389368][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.416510][T13142] bridge_slave_0: left allmulticast mode [ 252.416536][T13142] bridge_slave_0: left promiscuous mode [ 252.416724][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.450387][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 252.457110][T13142] bond0: (slave bridge0): Releasing backup interface [ 255.041948][T13125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.223558][T13162] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 255.386086][T13168] syzkaller0: entered promiscuous mode [ 255.386109][T13168] syzkaller0: entered allmulticast mode [ 255.527035][T13185] __nla_validate_parse: 4 callbacks suppressed [ 255.527056][T13185] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2035'. [ 255.527082][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'. [ 255.527098][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 255.652578][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.113794][T13207] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 256.218917][T13215] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 256.218959][T13215] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 256.219003][T13215] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 256.277238][T13222] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2044'. [ 256.323725][T13222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.342977][T13222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.374554][T13222] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 256.377397][T13222] bridge0: port 1(syz_tun) entered disabled state [ 256.378434][T13222] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.414019][T13222] bond0 (unregistering): Released all slaves [ 256.432159][T13224] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2045'. [ 256.445733][T13224] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2045'. [ 256.470426][ T8133] infiniband syz1: ib_query_port failed (-19) [ 256.497658][T10300] smbdirect: ib_dev[syz1] removed [ 256.509211][T13215] siw: device registration error -19 [ 256.540677][T13227] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2047'. [ 256.540707][T13227] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2047'. [ 256.541529][T13227] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2047'. [ 256.664894][T13232] validate_nla: 2 callbacks suppressed [ 256.664918][T13232] netlink: 'syz.2.2048': attribute type 21 has an invalid length. [ 256.664938][T13232] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.974243][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 256.976323][T13247] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 257.002118][T13250] openvswitch: netlink: IP tunnel dst address not specified [ 257.063264][T13241] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 257.385826][T13275] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.453822][T13274] syzkaller0: entered promiscuous mode [ 257.453850][T13274] syzkaller0: entered allmulticast mode [ 257.597979][T13288] SET target dimension over the limit! [ 257.727688][T13294] SET target dimension over the limit! [ 259.836840][T13333] ip_tables: iptables: counters copy to user failed while replacing table [ 260.127999][T13352] sctp: [Deprecated]: syz.0.2083 (pid 13352) Use of int in maxseg socket option. [ 260.127999][T13352] Use struct sctp_assoc_value instead [ 260.215075][T13356] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 260.219174][T13357] bond0: entered promiscuous mode [ 260.219278][T13357] bond0: entered allmulticast mode [ 260.219687][T13357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.495038][T13377] ip_tables: iptables: counters copy to user failed while replacing table [ 260.611475][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.983980][T13401] __nla_validate_parse: 9 callbacks suppressed [ 260.984001][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 261.090704][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.113822][T13410] xt_hashlimit: size too large, truncated to 1048576 [ 261.181677][T13416] bond6: entered promiscuous mode [ 261.181701][T13416] bond6: entered allmulticast mode [ 261.671948][T13425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2103'. [ 261.893226][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.089480][T13438] netlink: 'syz.2.2106': attribute type 30 has an invalid length. [ 262.130320][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.261522][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2110'. [ 262.283762][T13453] syzkaller1: entered promiscuous mode [ 262.283784][T13453] syzkaller1: entered allmulticast mode [ 262.391510][T13461] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2113'. [ 262.391724][T13461] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2113'. [ 262.393578][T13461] ip_tables: iptables: counters copy to user failed while replacing table [ 262.574783][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2114'. [ 262.703621][T10298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.819821][T13468] team0 (unregistering): Port device team_slave_0 removed [ 262.822363][T13476] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 262.885502][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 262.894244][T13468] team0 (unregistering): Port device team_slave_1 removed [ 262.944861][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 262.945078][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 262.945296][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 263.032037][T13488] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 263.089323][T13488] bond7: entered promiscuous mode [ 263.089757][T13488] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.134678][T13488] vlan4: entered allmulticast mode [ 263.134702][T13488] bond7: entered allmulticast mode [ 263.162250][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.178933][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.228019][T13488] bond7: (slave bridge4): making interface the new active one [ 263.228042][T13488] bridge4: entered promiscuous mode [ 263.228211][T13488] bridge4: entered allmulticast mode [ 263.252693][T13488] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 263.369055][T13503] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 263.377798][T13509] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 263.936279][T13542] bond0: Caught tx_queue_len zero misconfig [ 264.215331][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.243522][T13556] netlink: 'syz.1.2140': attribute type 5 has an invalid length. [ 264.611121][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.834149][T13580] macvtap0: entered promiscuous mode [ 264.834175][T13580] vlan0: entered promiscuous mode [ 264.839450][T13580] macvtap0: entered allmulticast mode [ 264.839473][T13580] vlan0: entered allmulticast mode [ 264.839489][T13580] veth0_vlan: entered allmulticast mode [ 265.251066][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.717140][T13624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.175613][T13651] __nla_validate_parse: 41 callbacks suppressed [ 266.175643][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 266.372458][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'. [ 266.377229][T13667] netlink: 'syz.1.2166': attribute type 1 has an invalid length. [ 266.377252][T13667] netlink: 'syz.1.2166': attribute type 4 has an invalid length. [ 266.377265][T13667] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2166'. [ 266.537545][T13673] Bluetooth: hci0: unsupported parameter 5135 [ 266.537569][T13673] Bluetooth: hci0: unsupported parameter 8192 [ 266.537583][T13673] Bluetooth: hci0: unsupported parameter 5135 [ 266.537596][T13673] Bluetooth: hci0: unsupported parameter 8192 [ 266.771420][T13691] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 266.863890][T13696] netlink: 'syz.0.2177': attribute type 4 has an invalid length. [ 266.864624][T13697] netlink: 'syz.0.2177': attribute type 4 has an invalid length. [ 267.033132][T13709] syzkaller0: entered promiscuous mode [ 267.050279][T13709] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2179'. [ 267.217948][T13713] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 267.363242][ T8133] net_ratelimit: 3 callbacks suppressed [ 267.363264][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.409644][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2175'. [ 267.536024][T13723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.582634][T13723] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 267.651867][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.965884][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'. [ 268.275685][T13756] xt_REDIRECT: bad MAP_IPS. [ 268.285335][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 268.300418][T13756] syz_tun: left allmulticast mode [ 268.300445][T13756] syz_tun: left promiscuous mode [ 268.311804][T13756] bridge0: port 1(syz_tun) entered disabled state [ 268.315002][T13756] bridge_slave_1: left allmulticast mode [ 268.315028][T13756] bridge_slave_1: left promiscuous mode [ 268.315354][T13756] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.351671][T13756] bridge0 (unregistering): left allmulticast mode [ 268.375693][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.450151][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 268.453246][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.499199][ T5634] Bluetooth: hci4: link tx timeout [ 268.499218][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 268.616144][T13772] veth0_to_bond: entered allmulticast mode [ 268.647959][T13775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.802525][T13780] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2196'. [ 268.944341][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 269.053149][T13795] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.412201][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.534768][T13814] netlink: 'syz.1.2206': attribute type 2 has an invalid length. [ 269.536881][T13814] x_tables: unsorted underflow at hook 2 [ 269.538394][T13814] netlink: 'syz.1.2206': attribute type 1 has an invalid length. [ 269.628417][T13820] ip_tables: iptables: counters copy to user failed while replacing table [ 269.736094][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.819281][T13826] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2208'. [ 269.820407][T13826] 0ªî{X¹¦: renamed from gretap0 [ 269.846609][T13826] 0ªî{X¹¦: entered allmulticast mode [ 269.865512][T13826] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 269.972417][T13830] 0ªî{X¹¦: left allmulticast mode [ 270.009220][T13833] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 270.026067][T13833] 1ªî{X¹¦: entered allmulticast mode [ 270.530100][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 271.044808][T13903] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 271.154219][T13911] x_tables: duplicate underflow at hook 3 [ 271.251805][T13916] __nla_validate_parse: 80 callbacks suppressed [ 271.251982][T13916] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2228'. [ 271.392166][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 271.416897][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2230'. [ 271.416934][T13926] netlink: 'syz.1.2230': attribute type 5 has an invalid length. [ 271.416951][T13926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2230'. [ 271.550287][T13929] netlink: 'syz.3.2232': attribute type 10 has an invalid length. [ 271.603507][T13932] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2232'. [ 271.663036][T13932] netdevsim netdevsim3 : renamed from netdevsim0 [ 271.707392][T13934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2231'. [ 271.707429][T13934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2231'. [ 271.868687][T13947] netlink: 'syz.4.2233': attribute type 1 has an invalid length. [ 272.356445][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 272.531260][ T8133] net_ratelimit: 4 callbacks suppressed [ 272.531277][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.448266][T13987] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 273.571441][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.629079][T13998] xt_hashlimit: size too large, truncated to 1048576 [ 273.681887][T14000] xt_hashlimit: size too large, truncated to 1048576 [ 274.210791][T10298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.610524][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.676643][T13936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.823726][T14008] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 274.853277][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.877506][T14010] sch_tbf: burst 7 is lower than device lo mtu (32783) ! [ 274.942031][T14016] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2251'. [ 274.952536][T14016] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2251'. [ 274.967163][T14021] netlink: 'syz.1.2253': attribute type 32 has an invalid length. [ 275.026826][T14025] netlink: 'syz.1.2253': attribute type 32 has an invalid length. [ 275.041802][T14021] bond8: option coupled_control: invalid value (192) [ 275.044993][T14021] bond8 (unregistering): Released all slaves [ 275.187947][T14025] bond8: option coupled_control: invalid value (192) [ 275.191778][T14025] bond8 (unregistering): Released all slaves [ 275.486563][T14056] ip_tables: iptables: counters copy to user failed while replacing table [ 275.650297][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.691676][T10296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.937949][T14124] __nla_validate_parse: 2 callbacks suppressed [ 276.937971][T14124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2280'. [ 277.103835][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 277.124940][T14138] bridge0: entered allmulticast mode [ 277.547235][T14162] netlink: 'syz.2.2294': attribute type 1 has an invalid length. [ 277.547256][T14162] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2294'. [ 277.548337][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 277.599158][T14162] bond11: entered promiscuous mode [ 277.601360][T14162] 8021q: adding VLAN 0 to HW filter on device bond11 [ 277.637808][T14162] 8021q: adding VLAN 0 to HW filter on device bond11 [ 277.639475][T14162] bond11: (slave sit2): The slave device specified does not support setting the MAC address [ 277.647959][T14162] bond11: (slave sit2): Error -95 calling set_mac_address [ 277.807886][T14172] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.809141][T14173] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 278.019079][T14181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2298'. [ 278.050276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.230756][T14192] xt_HMARK: proto mask must be zero with L3 mode [ 278.358300][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 278.638768][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2309'. [ 278.649479][T14216] IPVS: set_ctl: invalid protocol: 27786 224.0.0.2:20265 [ 278.658742][T14216] IPVS: nq: FWM 3 0x00000003 - no destination available [ 278.729299][ T53] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 278.778917][T14224] nbd: must specify a size in bytes for the device [ 279.009771][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2316'. [ 279.206247][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'. [ 279.257025][T10302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.475281][T14277] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 279.476906][T14278] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 279.584111][T14285] netlink: 'syz.1.2328': attribute type 29 has an invalid length. [ 279.629329][T14277] bond12: entered promiscuous mode [ 279.635795][T14277] 8021q: adding VLAN 0 to HW filter on device bond12 [ 279.723457][T14293] 8021q: adding VLAN 0 to HW filter on device bond12 [ 279.738326][T14293] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 279.738351][T14293] bond12: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 279.775464][T14293] bond12: (slave ip6gre3): making interface the new active one [ 279.775492][T14293] ip6gre3: entered promiscuous mode [ 279.797497][T14293] bond12: (slave ip6gre3): Enslaving as an active interface with an up link [ 279.894732][T14272] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2325'. [ 280.588592][T14339] netlink: 'syz.2.2341': attribute type 5 has an invalid length. [ 280.614226][T10298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.874930][T14361] netlink: 'syz.0.2350': attribute type 4 has an invalid length. [ 280.896147][T14361] netlink: 'syz.0.2350': attribute type 4 has an invalid length. [ 280.927690][T14361] xt_hashlimit: size too large, truncated to 1048576 [ 281.003703][T14367] netlink: 'syz.2.2352': attribute type 7 has an invalid length. [ 281.108402][T14372] veth1_macvtap: left promiscuous mode [ 281.108435][T14372] macsec0: entered promiscuous mode [ 281.136568][T14373] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 281.873556][T14413] netlink: 'syz.3.2363': attribute type 20 has an invalid length. [ 281.873581][T14413] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.901882][T10296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.669821][T14444] __nla_validate_parse: 9 callbacks suppressed [ 282.669941][T14444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2371'. [ 282.669973][T14444] netlink: 'syz.4.2371': attribute type 7 has an invalid length. [ 282.669987][T14444] netlink: 'syz.4.2371': attribute type 8 has an invalid length. [ 282.670001][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 282.735260][T14444] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 282.765117][T14444] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 282.765154][T14444] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 282.770446][T14444] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 283.024614][T14452] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2374'. [ 283.187953][T14460] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2374'. [ 283.337563][T14476] netlink: 'syz.0.2378': attribute type 10 has an invalid length. [ 283.546572][T14487] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2382'. [ 283.546597][T14487] netlink: 'syz.2.2382': attribute type 9 has an invalid length. [ 283.859616][T14512] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2385'. [ 283.946857][T14520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2387'. [ 284.127738][T14519] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 284.153391][T14519] bond12 (unregistering): Released all slaves [ 284.215285][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 284.380959][T14529] bond13: entered promiscuous mode [ 284.381373][T14529] 8021q: adding VLAN 0 to HW filter on device bond13 [ 284.448298][T14551] ipt_REJECT: TCP_RESET invalid for non-tcp [ 284.456052][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.472337][T14534] bond14: option packets_per_slave: invalid value (18446744073709551615) [ 284.472362][T14534] bond14: option packets_per_slave: allowed values 0 - 65535 [ 284.475633][T14534] bond14 (unregistering): Released all slaves [ 284.528138][T14558] ipt_REJECT: TCP_RESET invalid for non-tcp [ 284.746914][T14564] bond4: entered allmulticast mode [ 284.747411][T14564] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.064906][T14580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.346682][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 285.498371][T14597] hsr_slave_1 (unregistering): left promiscuous mode [ 285.735698][T10296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.118152][T14632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.532187][T14666] Cannot find add_set index 34 as target [ 286.757979][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 286.820144][T14689] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 286.896888][T14691] lo: Caught tx_queue_len zero misconfig [ 287.161578][T14704] netlink: 'syz.4.2430': attribute type 5 has an invalid length. [ 287.265133][T14714] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 287.265159][T14714] netlink: 'syz.1.2432': attribute type 3 has an invalid length. [ 287.592424][T14729] netlink: 'syz.1.2434': attribute type 32 has an invalid length. [ 287.652199][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.825720][T14740] __nla_validate_parse: 4 callbacks suppressed [ 287.825768][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2437'. [ 287.825797][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2437'. [ 288.143378][T14739] bridge4: entered promiscuous mode [ 288.143405][T14739] bridge4: entered allmulticast mode [ 288.549122][T14786] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 288.653597][T14786] bond8: entered promiscuous mode [ 288.655616][T14786] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.658387][T14794] netlink: 'syz.4.2445': attribute type 1 has an invalid length. [ 288.709998][T14799] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2446'. [ 288.719505][T14793] macvtap1: entered allmulticast mode [ 288.736013][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 288.854298][T14809] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2449'. [ 288.904568][T14786] bond8: (slave bridge6): making interface the new active one [ 288.904589][T14786] bridge6: entered promiscuous mode [ 288.906621][T14786] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 289.025892][T14813] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2450'. [ 289.027043][T14813] xt_MASQUERADE: bad MAP_IPS. [ 289.122436][T14818] netdevsim netdevsim4 netdevsim2: IPsec offload requires 128 bit authentication [ 289.298296][T14830] veth1_to_bond: entered allmulticast mode [ 289.321070][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2453'. [ 289.325101][T14828] veth1_to_bond: left allmulticast mode [ 289.682069][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2462'. [ 289.751842][T14852] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 289.792295][T14857] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 289.792319][T14857] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2464'. [ 289.792480][T14857] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 289.792495][T14857] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2464'. [ 289.792639][T14857] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 289.793834][T14857] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 290.210516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.211599][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.269405][T14884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.271361][T14885] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 290.290310][T14884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.363361][T14891] openvswitch: netlink: IP tunnel dst address not specified [ 290.504722][T14905] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20000 [ 290.504828][T14904] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20000 [ 290.608109][T14913] syzkaller0: entered promiscuous mode [ 290.608134][T14913] syzkaller0: entered allmulticast mode [ 290.971999][T14931] 8021q: adding VLAN 0 to HW filter on device bond14 [ 290.987417][T14939] macvlan2: entered promiscuous mode [ 290.987458][T14939] macvlan2: entered allmulticast mode [ 291.501322][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.504686][T14965] bridge0: entered promiscuous mode [ 291.504757][T14965] bridge0: entered allmulticast mode [ 291.777824][T14974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.955698][T14991] Cannot find del_set index 3 as target [ 292.066452][T14998] xt_connbytes: Forcing CT accounting to be enabled [ 292.066500][T14998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.192804][T15007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 292.376673][T15017] ip_tables: iptables: counters copy to user failed while replacing table [ 292.446605][T15019] sch_fq: defrate 0 ignored. [ 292.468732][T15020] sch_fq: defrate 0 ignored. [ 292.634988][T15036] ip6tnl0: Caught tx_queue_len zero misconfig [ 292.771272][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.904106][T15050] __nla_validate_parse: 80 callbacks suppressed [ 292.904127][T15050] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2524'. [ 292.904142][T15050] tc_dump_action: action bad kind [ 292.904746][T15051] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2524'. [ 292.904760][T15051] tc_dump_action: action bad kind [ 293.077830][T15058] validate_nla: 32 callbacks suppressed [ 293.077846][T15058] netlink: 'syz.3.2526': attribute type 1 has an invalid length. [ 293.377359][T15071] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2530'. [ 293.377395][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2530'. [ 293.377475][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2530'. [ 293.666902][T15084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2535'. [ 293.685151][T15081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2534'. [ 293.731661][T15084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2535'. [ 294.022956][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'. [ 294.042615][T15109] batadv0: entered promiscuous mode [ 294.044052][T15109] macsec1: entered promiscuous mode [ 294.045500][T15109] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 294.136365][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 294.201556][T15111] bond12: option xmit_hash_policy: invalid value (64) [ 294.224178][T15111] bond12 (unregistering): Released all slaves [ 294.752571][T15151] netlink: 'syz.1.2551': attribute type 16 has an invalid length. [ 294.752610][T15151] veth0_macvtap: entered allmulticast mode [ 295.251637][T10298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.286155][T15162] infiniband syz2: set active [ 295.286259][T15162] infiniband syz2: added bridge_slave_1 [ 295.313938][T15162] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 295.313971][T15162] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 295.314003][T15162] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 295.372516][T15162] RDS/IB: syz2: added [ 295.372574][T15162] smc: adding ib device syz2 with port count 1 [ 295.372597][T15162] smc: ib device syz2 port 1 has no pnetid [ 296.611811][T10298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.496675][T15136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.699549][T15168] netlink: 'syz.4.2555': attribute type 58 has an invalid length. [ 297.770235][T15175] netlink: 'syz.4.2555': attribute type 83 has an invalid length. [ 298.013522][T15188] netlink: 'syz.4.2561': attribute type 2 has an invalid length. [ 298.071814][T15194] netlink: 'syz.4.2561': attribute type 29 has an invalid length. [ 298.362565][T15209] ip_tables: iptables: counters copy to user failed while replacing table [ 298.410349][T15211] bridge0: left allmulticast mode [ 298.503143][T15214] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 298.531605][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.582080][T15217] __nla_validate_parse: 3 callbacks suppressed [ 298.582100][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 298.582115][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 298.582140][T15217] netlink: 'syz.2.2567': attribute type 6 has an invalid length. [ 298.624449][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 298.624470][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 298.624493][T15217] netlink: 'syz.2.2567': attribute type 6 has an invalid length. [ 298.652001][T10300] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.652046][T10300] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.652082][T10300] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.681647][T10300] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.222447][T15250] ip_tables: iptables: counters copy to user failed while replacing table [ 299.452534][T15263] netlink: 'syz.4.2582': attribute type 1 has an invalid length. [ 299.452556][T15263] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2582'. [ 300.191214][T15295] ip_tables: iptables: counters copy to user failed while replacing table [ 300.290801][T10302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.450389][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.862797][T15315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2597'. [ 300.862823][T15315] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2597'. [ 300.862875][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 300.944241][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2600'. [ 300.944285][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2600'. [ 301.136698][T15330] ip_tables: iptables: counters copy to user failed while replacing table [ 301.284443][T15340] netlink: 'syz.1.2607': attribute type 1 has an invalid length. [ 301.665672][T15371] ip_tables: iptables: counters copy to user failed while replacing table [ 301.732080][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.919996][T15385] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 301.924266][T15385] bond13 (unregistering): Released all slaves [ 301.983261][T15372] syzkaller0: entered promiscuous mode [ 301.983286][T15372] syzkaller0: entered allmulticast mode [ 302.144999][T15397] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 302.237108][ T53] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 302.314844][T15401] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 302.327776][T15401] netlink: 'syz.4.2623': attribute type 4 has an invalid length. [ 302.390340][T15416] Bluetooth: hci0: unsupported parameter 5161 [ 302.390364][T15416] Bluetooth: hci0: unsupported parameter 8192 [ 302.390378][T15416] Bluetooth: hci0: unsupported parameter 5161 [ 302.390391][T15416] Bluetooth: hci0: unsupported parameter 8192 [ 302.391837][T15416] bond0: left promiscuous mode [ 302.391857][T15416] bond0: left allmulticast mode [ 303.336023][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.603502][T15474] lo: entered promiscuous mode [ 303.608815][T15474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.648320][T15477] tap0: tun_chr_ioctl cmd 1074025676 [ 303.648346][T15477] tap0: owner set to 0 [ 303.835959][T15493] netlink: 'syz.2.2652': attribute type 2 has an invalid length. [ 303.850563][T15487] 8021q: adding VLAN 0 to HW filter on device bond13 [ 303.856643][T15498] netlink: 'syz.1.2651': attribute type 3 has an invalid length. [ 303.925507][T15487] __nla_validate_parse: 9 callbacks suppressed [ 303.925526][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 303.925541][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2650'. [ 303.925950][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 303.925967][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2650'. [ 303.988896][T15494] netlink: 'syz.3.2650': attribute type 4 has an invalid length. [ 303.988918][T15494] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2650'. [ 304.031630][T15501] vlan0: entered promiscuous mode [ 304.031656][T15501] bond0: entered promiscuous mode [ 304.031671][T15501] bond_slave_0: entered promiscuous mode [ 304.031895][T15501] bond_slave_1: entered promiscuous mode [ 304.032232][T15501] vlan0: left allmulticast mode [ 304.073641][T15504] IPv6: addrconf: prefix option has invalid lifetime [ 304.124062][T15506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2655'. [ 304.145058][T15506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2655'. [ 304.162662][T15506] vlan5: entered promiscuous mode [ 304.162687][T15506] erspan0: entered promiscuous mode [ 304.249621][T15508] ip_tables: iptables: counters copy to user failed while replacing table [ 304.293130][T10302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.344270][T15512] --map-set only usable from mangle table [ 304.822979][T15551] netlink: 'syz.3.2670': attribute type 10 has an invalid length. [ 304.856876][T15553] netlink: 'syz.4.2671': attribute type 2 has an invalid length. [ 304.915657][T15556] ip_tables: iptables: counters copy to user failed while replacing table [ 305.091782][T15565] syzkaller0: entered allmulticast mode [ 305.226468][T15575] netlink: 'syz.2.2678': attribute type 12 has an invalid length. [ 305.338772][T15581] xt_hashlimit: size too large, truncated to 1048576 [ 305.444751][T15591] ip_tables: iptables: counters copy to user failed while replacing table [ 305.530883][T15595] dvmrp0: entered allmulticast mode [ 305.581058][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.981636][ T30] audit: type=1800 audit(1793256856.365:4): pid=15620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2691" name="memory.events" dev="tmpfs" ino=2909 res=0 errno=-22 [ 306.412404][T15655] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2701'. [ 306.412746][T15655] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2701'. [ 306.413224][T15655] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2701'. [ 306.671867][T15668] block nbd1: server does not support multiple connections per device. [ 306.672277][T15668] block nbd1: shutting down sockets [ 306.855671][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.994052][T15680] bridge0: left allmulticast mode [ 307.025807][T15690] wg0: Caught tx_queue_len zero misconfig [ 307.131255][T15695] sch_fq: defrate 0 ignored. [ 307.137975][T15695] sch_fq: defrate 0 ignored. [ 307.167466][T15701] netlink: 'syz.3.2714': attribute type 11 has an invalid length. [ 307.190156][T15702] netlink: 'syz.2.2713': attribute type 21 has an invalid length. [ 307.192083][T15703] netlink: 'syz.2.2713': attribute type 21 has an invalid length. [ 307.230062][T15702] bond12: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 307.232257][T15705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.239710][T15702] bond12 (unregistering): Released all slaves [ 307.273141][T15707] netlink: 'syz.1.2715': attribute type 3 has an invalid length. [ 307.348729][T15514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.376297][T15703] bond12: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 307.399784][T15703] bond12 (unregistering): Released all slaves [ 307.638265][T15722] sctp: [Deprecated]: syz.4.2719 (pid 15722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.638265][T15722] Use struct sctp_sack_info instead [ 307.915188][T10302] tipc: Subscription rejected, illegal request [ 307.975507][T15743] hsr_slave_0: left promiscuous mode [ 307.978845][T15743] hsr_slave_1: left promiscuous mode [ 308.954471][T15813] __nla_validate_parse: 67 callbacks suppressed [ 308.954493][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 308.957313][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 308.957595][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 308.957844][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 308.958616][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 308.958853][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 309.031719][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 309.031971][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 309.032219][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 309.032456][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 309.171634][T15821] bridge5: entered promiscuous mode [ 309.171693][T15821] bridge5: entered allmulticast mode [ 309.247338][T15795] xt_hashlimit: max too large, truncated to 1048576 [ 309.257620][T15795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.958717][T15866] bridge_slave_0: entered promiscuous mode [ 309.991575][T15865] x_tables: duplicate underflow at hook 2 [ 310.052472][T10298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.097956][T15869] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 310.136942][T15872] validate_nla: 2 callbacks suppressed [ 310.136960][T15872] netlink: 'syz.1.2755': attribute type 17 has an invalid length. [ 310.193519][T15872] gretap0: entered promiscuous mode [ 310.221124][T15872] gretap0: left promiscuous mode [ 310.302689][T15869] geneve2: entered promiscuous mode [ 310.302712][T15869] geneve2: entered allmulticast mode [ 310.512145][T15896] sctp: [Deprecated]: syz.4.2761 (pid 15896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.512145][T15896] Use struct sctp_sack_info instead [ 310.616835][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.612310][T15976] ip_tables: iptables: counters copy to user failed while replacing table [ 311.835604][T15988] Bluetooth: hci0: unsupported parameter 5135 [ 311.835622][T15988] Bluetooth: hci0: unsupported parameter 8192 [ 311.835631][T15988] Bluetooth: hci0: unsupported parameter 5135 [ 311.835641][T15988] Bluetooth: hci0: unsupported parameter 8192 [ 311.890981][T10298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.116577][T16063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.407865][T16076] xt_socket: unknown flags 0x8 [ 314.004421][T16100] __nla_validate_parse: 38 callbacks suppressed [ 314.004443][T16100] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2814'. [ 314.059850][T16100] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 314.137676][T16113] ip_tables: iptables: counters copy to user failed while replacing table [ 314.515974][T16132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2819'. [ 314.530045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.530262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.683470][T16125] netlink: 'syz.4.2822': attribute type 21 has an invalid length. [ 315.101282][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.150765][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 315.177832][T16154] netlink: 'syz.3.2828': attribute type 10 has an invalid length. [ 315.512512][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'. [ 315.512636][T16168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.565402][T16168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.651085][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.727938][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.737658][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.740002][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.749030][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.765383][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.786601][T16176] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 315.945993][T16176] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 316.094774][T16187] netlink: 'syz.3.2840': attribute type 21 has an invalid length. [ 316.094887][T16187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2840'. [ 316.142795][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'. [ 316.654618][T16173] rxe_eth0 speed is unknown, defaulting to 1000 [ 316.930493][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.092671][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.225820][T16173] lo speed is unknown, defaulting to 1000 [ 317.804203][T16268] netlink: 'syz.0.2865': attribute type 3 has an invalid length. [ 317.814094][ T53] Bluetooth: hci5: command tx timeout [ 317.857528][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2864'. [ 317.858420][T16268] netlink: 'syz.0.2865': attribute type 3 has an invalid length. [ 317.908301][ T53] Bluetooth: hci4: connection err: -111 [ 317.962935][T16276] netlink: 'syz.4.2866': attribute type 1 has an invalid length. [ 318.201647][T16283] bridge0: port 1(syz_tun) entered blocking state [ 318.201754][T16283] bridge0: port 1(syz_tun) entered disabled state [ 318.201884][T16283] syz_tun: entered allmulticast mode [ 318.205203][T16283] syz_tun: entered promiscuous mode [ 318.205651][T16283] bridge0: port 1(syz_tun) entered blocking state [ 318.205763][T16283] bridge0: port 1(syz_tun) entered forwarding state [ 318.317418][T16288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2870'. [ 318.477824][T16293] netlink: 'syz.1.2871': attribute type 1 has an invalid length. [ 318.533383][T16293] 8021q: adding VLAN 0 to HW filter on device bond9 [ 318.538011][T16299] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 318.565000][T16299] bond9: entered allmulticast mode [ 318.593322][T16293] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2871'. [ 318.629473][T16301] netlink: 'syz.0.2873': attribute type 1 has an invalid length. [ 318.674605][T16293] lo: left promiscuous mode [ 318.674768][T16293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.735343][T16299] netlink: 'syz.1.2871': attribute type 1 has an invalid length. [ 318.811839][T16299] block nbd296: server does not support multiple connections per device. [ 318.812936][T16299] block nbd296: shutting down sockets [ 318.825853][T16301] 8021q: adding VLAN 0 to HW filter on device bond15 [ 318.828801][T16302] veth0_to_bond: left allmulticast mode [ 318.846830][T16302] bond6: (slave veth0_to_bond): Releasing active interface [ 318.878238][T16302] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 318.892819][T16300] bond15: entered promiscuous mode [ 318.892840][T16300] bond15: entered allmulticast mode [ 318.958426][T16303] macvlan3: entered promiscuous mode [ 318.958448][T16303] macvlan3: entered allmulticast mode [ 318.973487][T16303] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 319.115022][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.115161][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.115329][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.115444][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.115557][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.115673][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.115787][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.115920][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.116043][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.116121][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 319.257198][T16173] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.259461][T16173] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.262089][T16173] bridge_slave_0: entered allmulticast mode [ 319.271256][T16173] bridge_slave_0: entered promiscuous mode [ 319.357651][T16173] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.357881][T16173] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.358073][T16173] bridge_slave_1: entered allmulticast mode [ 319.374627][T16173] bridge_slave_1: entered promiscuous mode [ 319.447511][T16337] IPv6: sit2: Disabled Multicast RS [ 319.507073][T16173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.525131][T16173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.578641][T16354] netlink: 'syz.3.2878': attribute type 1 has an invalid length. [ 319.638907][T16173] team0: Port device team_slave_0 added [ 319.658681][T16173] team0: Port device team_slave_1 added [ 319.760049][T16173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.760069][T16173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.760095][T16173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.764367][T16173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.764384][T16173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.764411][T16173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.887061][T16362] bond6: (slave veth0_to_bond): Releasing backup interface [ 319.894582][ T53] Bluetooth: hci5: command tx timeout [ 319.919532][T16362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.919560][T16362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.940523][T16362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.940548][T16362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.945490][T16362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.052600][T16173] hsr_slave_0: entered promiscuous mode [ 320.053729][T16173] hsr_slave_1: entered promiscuous mode [ 320.173185][T16374] netlink: 'syz.1.2885': attribute type 3 has an invalid length. [ 320.452056][T16173] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.474112][T16383] ip_tables: iptables: counters copy to user failed while replacing table [ 320.705042][T16392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.779542][T16173] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.867737][T16173] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.930062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.933651][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.935050][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.000457][T16173] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.556505][T16507] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 321.668969][T16497] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 321.691628][T16497] bond5 (unregistering): Released all slaves [ 321.772931][T16173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.798349][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.799221][T16173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.832502][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.835689][T16173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.895607][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.898286][T16173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.954971][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.955370][T16513] lo: entered promiscuous mode [ 321.955537][T16513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.975309][ T53] Bluetooth: hci5: command tx timeout [ 322.213484][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.266073][T16528] netlink: 'syz.1.2899': attribute type 10 has an invalid length. [ 322.266117][T16528] macsec0: left promiscuous mode [ 322.287741][T16528] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 322.310546][T16173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.375514][T16173] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.395829][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.395935][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.434270][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.434398][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.791423][T16541] ip_tables: iptables: counters copy to user failed while replacing table [ 323.000780][T16546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.067837][T16556] TCP: TCP_TX_DELAY enabled [ 323.085212][T16558] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 323.278752][T16564] netlink: 'syz.1.2910': attribute type 1 has an invalid length. [ 323.304445][T16565] bridge10: entered promiscuous mode [ 323.304485][T16565] bridge10: entered allmulticast mode [ 323.324658][T16565] team0: Port device bridge10 added [ 323.452653][T16571] bond10: (slave gretap4): making interface the new active one [ 323.457492][T16574] netlink: 'syz.0.2913': attribute type 13 has an invalid length. [ 323.458604][T16575] netlink: 'syz.0.2913': attribute type 13 has an invalid length. [ 323.507912][T16571] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 323.508186][T16565] bridge0: port 1(team0) entered blocking state [ 323.508264][T16565] bridge0: port 1(team0) entered disabled state [ 323.508445][T16565] team0: entered allmulticast mode [ 323.508587][T16565] team_slave_0: entered allmulticast mode [ 323.508606][T16565] team_slave_1: entered allmulticast mode [ 323.511075][T16565] team0: entered promiscuous mode [ 323.511094][T16565] team_slave_0: entered promiscuous mode [ 323.511294][T16565] team_slave_1: entered promiscuous mode [ 323.695218][T16579] ip_tables: iptables: counters copy to user failed while replacing table [ 323.781239][T16584] veth0: entered promiscuous mode [ 323.883081][T16173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.967807][T16582] veth0: left promiscuous mode [ 324.003289][T16173] veth0_vlan: entered promiscuous mode [ 324.034493][T16173] veth1_vlan: entered promiscuous mode [ 324.051451][ T53] Bluetooth: hci5: command tx timeout [ 324.117814][T16599] netlink: 'syz.1.2920': attribute type 2 has an invalid length. [ 324.238874][T16173] veth0_macvtap: entered promiscuous mode [ 324.264295][T16173] veth1_macvtap: entered promiscuous mode [ 324.324819][T16173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.349195][T16173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.380113][ T1166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.380183][ T1166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.380220][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.380254][ T1166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.499145][T10295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.499192][T10295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.676917][ T8775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.676940][ T8775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.773832][ T8775] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 324.775845][ T157] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 324.778337][ T1176] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 324.778701][ T1176] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 325.434232][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.450250][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.451066][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.453303][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.453923][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.527866][T16675] xt_nfacct: accounting object `' does not exist [ 325.856217][T16693] __nla_validate_parse: 35 callbacks suppressed [ 325.856239][T16693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 325.957405][T16698] net_ratelimit: 1 callbacks suppressed [ 325.957428][T16698] ip_tables: iptables: counters copy to user failed while replacing table [ 325.990611][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2941'. [ 325.994443][T16701] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 325.994463][T16701] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2941'. [ 326.052374][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.053470][T10295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.101053][T16692] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 326.166136][T16712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2943'. [ 326.231814][T16692] bond14 (unregistering): Released all slaves [ 326.575374][T16717] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.671635][T16730] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20004 [ 326.747127][T10295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.747166][T10295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.747670][T10295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.769810][T16734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2948'. [ 326.805778][T16734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2948'. [ 326.919065][T10295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.919103][T10295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.919130][T10295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.966999][T16741] ebt_limit: overflow, try lower: 0/0 [ 327.011825][T16669] rxe_eth0 speed is unknown, defaulting to 1000 [ 327.131835][T10295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.131877][T10295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.131907][T10295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 327.277137][T10295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.277261][T10295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.277354][T10295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 327.314243][T16669] lo speed is unknown, defaulting to 1000 [ 327.336460][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.572388][ T5634] Bluetooth: hci3: command tx timeout [ 327.653638][T16762] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.666629][T10295] bridge_slave_1: left allmulticast mode [ 327.666677][T10295] bridge_slave_1: left promiscuous mode [ 327.667932][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.707512][T10295] bridge_slave_0: left allmulticast mode [ 327.707539][T10295] bridge_slave_0: left promiscuous mode [ 327.709484][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.879383][T16769] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2955'. [ 328.146584][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 328.146824][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 328.147040][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 328.377258][T10295] bond10 (unregistering): (slave gretap4): Releasing active interface [ 328.430655][T10295] bond1 (unregistering): (slave geneve5): Releasing active interface [ 328.526354][T10295] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 328.526384][T10295] bridge3 (unregistering): left promiscuous mode [ 328.548897][T10295] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 328.548925][T10295] bridge4 (unregistering): left promiscuous mode [ 328.548944][T10295] bridge4 (unregistering): left allmulticast mode [ 328.581416][T10295] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 328.581447][T10295] bridge6 (unregistering): left promiscuous mode [ 328.623687][T10295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.625905][T10295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.627197][T10295] bond0 (unregistering): Released all slaves [ 328.657040][T10295] bond1 (unregistering): Released all slaves [ 328.677815][T10295] bond2 (unregistering): Released all slaves [ 328.703926][T10295] bond3 (unregistering): Released all slaves [ 328.717978][T10295] bond4 (unregistering): Released all slaves [ 328.735375][T10295] bond5 (unregistering): Released all slaves [ 328.759148][T10295] bond6 (unregistering): Released all slaves [ 328.786439][T10295] bond7 (unregistering): Released all slaves [ 328.814839][T10295] bond8 (unregistering): Released all slaves [ 328.836250][T10295] bond9 (unregistering): Released all slaves [ 328.853653][T10295] bond10 (unregistering): Released all slaves [ 329.273924][T16802] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 329.274271][T16802] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 329.274609][T16802] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 329.274921][T16802] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 329.287710][T16802] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 329.288642][T16802] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 329.449144][T10295] IPVS: stopping master sync thread 11197 ... [ 329.650070][ T5634] Bluetooth: hci3: command tx timeout [ 329.717741][T16816] x_tables: duplicate underflow at hook 1 [ 330.095519][T16826] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 330.457332][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 331.140135][T16887] __nla_validate_parse: 69 callbacks suppressed [ 331.140158][T16887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2978'. [ 331.292703][T16669] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.292780][T16669] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.292902][T16669] bridge_slave_0: entered allmulticast mode [ 331.297694][T16669] bridge_slave_0: entered promiscuous mode [ 331.327224][T16669] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.327579][T16669] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.327734][T16669] bridge_slave_1: entered allmulticast mode [ 331.368724][T16669] bridge_slave_1: entered promiscuous mode [ 331.483989][T16900] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 331.493182][T16899] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 331.546464][T16669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.566367][T16669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.697322][T10295] hsr_slave_0: left promiscuous mode [ 331.715386][T10295] veth0_macvtap: left promiscuous mode [ 331.729978][ T5634] Bluetooth: hci3: command tx timeout [ 331.811363][ T157] net_ratelimit: 59 callbacks suppressed [ 331.811384][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.034158][T10295] team0 (unregistering): Port device team_slave_1 removed [ 332.064403][T10295] team0 (unregistering): Port device team_slave_0 removed [ 332.224486][T16669] team0: Port device team_slave_0 added [ 332.232924][T16669] team0: Port device team_slave_1 added [ 332.232981][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2980'. [ 332.362818][T16669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.362838][T16669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.362868][T16669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.400361][T16669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.400499][T16669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.400630][T16669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.469559][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.729063][T16669] hsr_slave_0: entered promiscuous mode [ 332.736707][T16669] hsr_slave_1: entered promiscuous mode [ 332.742967][T16669] debugfs: 'hsr0' already exists in 'hsr' [ 332.743036][T16669] Cannot create hsr debugfs directory [ 332.791641][T16919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2981'. [ 332.791671][T16919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2981'. [ 333.090008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.091883][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.235083][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 333.254941][T16939] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 333.285321][T10295] IPVS: stop unused estimator thread 0... [ 333.311195][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 333.422905][T16939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 333.485685][T16939] bond5: (slave bridge11): making interface the new active one [ 333.487193][T16939] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 333.541035][T16945] openvswitch: netlink: IP tunnel dst address not specified [ 333.618674][T16949] netlink: 'syz.0.2987': attribute type 1 has an invalid length. [ 333.618723][T16949] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2987'. [ 333.811585][ T5634] Bluetooth: hci3: command tx timeout [ 333.947259][T16965] netlink: 'syz.3.2990': attribute type 12 has an invalid length. [ 333.947287][T16965] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2990'. [ 334.091904][T16976] netlink: 'syz.3.2993': attribute type 30 has an invalid length. [ 334.129419][T16886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.213250][T16973] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2991'. [ 334.260575][T16976] bond14: option arp_missed_max: invalid value (0) [ 334.260603][T16976] bond14: option arp_missed_max: allowed values 1 - 255 [ 334.267378][T16976] bond14 (unregistering): Released all slaves [ 334.807921][T16669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.828512][T16669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.832458][T16669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.858885][T16669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.873095][T16669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.906637][T16669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.908845][T16669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.967823][T16669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.128274][T16669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.151805][T16669] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.171746][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.171823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.203191][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.203273][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.756802][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3001'. [ 335.883784][T17054] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3002'. [ 335.892380][T17054] netlink: 'syz.4.3002': attribute type 9 has an invalid length. [ 335.892431][T17054] netlink: 'syz.4.3002': attribute type 4 has an invalid length. [ 335.904254][T17054] netlink: 'syz.4.3002': attribute type 7 has an invalid length. [ 335.904306][T17054] netlink: 'syz.4.3002': attribute type 8 has an invalid length. [ 336.592036][T17097] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 336.593768][T17090] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 336.594452][T17090] netlink: 'syz.0.3006': attribute type 2 has an invalid length. [ 336.594473][T17090] nbd: couldn't find a device at index -2147221500 [ 336.605451][T17090] __nla_validate_parse: 2 callbacks suppressed [ 336.605468][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3006'. [ 336.690505][T17090] bond16: Invalid ad_actor_system MAC address. [ 336.690528][T17090] bond16: option ad_actor_system: invalid value (1) [ 336.697753][T17090] bond16 (unregistering): Released all slaves [ 336.802426][T16669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.856936][T16669] veth0_vlan: entered promiscuous mode [ 336.898613][T16669] veth1_vlan: entered promiscuous mode [ 336.988114][T16669] veth0_macvtap: entered promiscuous mode [ 337.005984][T16669] veth1_macvtap: entered promiscuous mode [ 337.042250][T16669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.072306][T16669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.111434][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.112562][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.112606][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.112644][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.348000][T17121] netlink: 'syz.3.3014': attribute type 3 has an invalid length. [ 337.456700][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.456730][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.491560][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.577584][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.629807][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.629901][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.826282][T17148] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3016'. [ 337.947333][T17154] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.3019'. [ 338.240905][ T5634] Bluetooth: hci4: unexpected event for opcode 0x203d [ 338.245050][T17174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3023'. [ 338.445961][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.448740][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.466235][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.478437][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.479757][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.853355][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.331274][T17220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3032'. [ 339.385859][T17220] veth10: entered promiscuous mode [ 339.385884][T17220] veth10: entered allmulticast mode [ 339.529393][T17187] rxe_eth0 speed is unknown, defaulting to 1000 [ 339.537382][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 339.700281][T17235] team0: Port device team_slave_1 removed [ 339.835949][T17249] validate_nla: 1 callbacks suppressed [ 339.836155][T17249] netlink: 'syz.1.3037': attribute type 21 has an invalid length. [ 339.836189][T17249] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3037'. [ 339.836352][T17250] netlink: 'syz.1.3037': attribute type 21 has an invalid length. [ 339.836368][T17250] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3037'. [ 339.839100][T17249] netlink: 'syz.1.3037': attribute type 5 has an invalid length. [ 339.839126][T17249] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3037'. [ 339.856652][T17250] netlink: 'syz.1.3037': attribute type 5 has an invalid length. [ 339.856697][T17250] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3037'. [ 339.864453][T17248] ip_tables: iptables: counters copy to user failed while replacing table [ 340.145066][T17187] lo speed is unknown, defaulting to 1000 [ 340.200648][T17263] gretap1: entered promiscuous mode [ 340.204726][T17263] batman_adv: batadv0: Adding interface: gretap1 [ 340.204741][T17263] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.204768][T17263] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 340.523007][T17275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 340.530667][ T5634] Bluetooth: hci1: command tx timeout [ 340.969498][T17300] xt_hashlimit: size too large, truncated to 1048576 [ 341.204486][T17309] netlink: 'syz.0.3049': attribute type 10 has an invalid length. [ 341.238846][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.256138][T17309] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 341.270217][T17309] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 341.696277][T17328] xt_addrtype: ipv6 does not support BROADCAST matching [ 341.786399][T17336] Bluetooth: MGMT ver 1.23 [ 342.025435][T17338] bond16: entered promiscuous mode [ 342.025482][T17338] bond16: entered allmulticast mode [ 342.026116][T17338] 8021q: adding VLAN 0 to HW filter on device bond16 [ 342.183349][T17353] __nla_validate_parse: 6 callbacks suppressed [ 342.183373][T17353] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3058'. [ 342.537876][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.570332][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 342.611167][ T5634] Bluetooth: hci1: command tx timeout [ 342.645768][T17377] syzkaller0: entered promiscuous mode [ 342.645791][T17377] syzkaller0: entered allmulticast mode [ 342.703295][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.768187][ T5296] veth1_vlan: left promiscuous mode [ 343.078839][T17187] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.080674][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.080810][T17187] bridge_slave_0: entered allmulticast mode [ 343.084837][T17187] bridge_slave_0: entered promiscuous mode [ 343.109756][T17187] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.111279][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.111657][T17187] bridge_slave_1: entered allmulticast mode [ 343.120462][T17187] bridge_slave_1: entered promiscuous mode [ 343.259619][T17187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.284952][T17187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.473318][T17187] team0: Port device team_slave_0 added [ 343.486267][T17187] team0: Port device team_slave_1 added [ 343.625039][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3069'. [ 343.658363][T17187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.658384][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.658414][T17187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.681911][T17187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.681967][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.682062][T17187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.012634][T17187] hsr_slave_0: entered promiscuous mode [ 344.017254][T17187] hsr_slave_1: entered promiscuous mode [ 344.019589][T17187] debugfs: 'hsr0' already exists in 'hsr' [ 344.019613][T17187] Cannot create hsr debugfs directory [ 344.610940][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.691672][ T5634] Bluetooth: hci1: command tx timeout [ 344.812387][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 344.815910][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 344.834878][T17187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.834979][T17187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.155828][T17187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.155868][T17187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.335359][T17187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.335400][T17187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.456934][T17187] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.456972][T17187] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.845933][T17187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.870839][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.874687][T17187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.898211][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.906823][T17187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.924929][T17508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3087'. [ 345.926460][T17507] IPVS: set_ctl: invalid protocol: 88 0.0.0.0:0 [ 345.926896][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.938193][T17187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.981193][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.382955][T17187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.445008][T17187] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.467981][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.468116][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.501956][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.502086][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.745875][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3092'. [ 346.746021][T17531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.770174][ T5634] Bluetooth: hci1: command tx timeout [ 346.856675][T17531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.541810][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'. [ 347.541925][T17558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.594964][T17558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.618775][T17566] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 347.760950][T17566] bond17: entered promiscuous mode [ 347.761368][T17566] 8021q: adding VLAN 0 to HW filter on device bond17 [ 347.813479][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.839335][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.862809][T17574] 8021q: adding VLAN 0 to HW filter on device bond17 [ 347.863126][T17574] bond17: (slave xfrm1): The slave device specified does not support setting the MAC address [ 347.863147][T17574] bond17: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 347.899778][T17574] bond17: (slave xfrm1): making interface the new active one [ 347.900357][T17574] xfrm1: entered promiscuous mode [ 347.925878][T17574] xfrm1: left promiscuous mode [ 348.044193][T17575] bond17: (slave xfrm1): The slave device specified does not support setting the MAC address [ 348.061725][T17575] bond17: (slave xfrm1): making interface the new active one [ 348.162520][T17187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.336155][T17187] veth0_vlan: entered promiscuous mode [ 348.382856][T17187] veth1_vlan: entered promiscuous mode [ 348.446754][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 348.519637][T17187] veth0_macvtap: entered promiscuous mode [ 348.563926][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'. [ 348.578769][T17187] veth1_macvtap: entered promiscuous mode [ 348.655066][T17187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.685510][T17187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.730346][ T9943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.733129][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.733701][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.733741][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.956375][T17627] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3118'. [ 349.006062][ T9942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.006084][ T9942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.116822][ T9942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.116847][ T9942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.760191][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.762705][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.764357][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.766774][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.767382][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.077145][T17664] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 350.101146][T17664] netlink: 316 bytes leftover after parsing attributes in process `syz.4.3129'. [ 350.101163][T17664] openvswitch: netlink: Flow key attr not present in new flow. [ 350.108471][T17676] netlink: 316 bytes leftover after parsing attributes in process `syz.4.3129'. [ 350.108496][T17676] openvswitch: netlink: Flow key attr not present in new flow. [ 350.110626][T17664] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 350.374890][ T5632] bridge0: port 1(syz_tun) entered disabled state [ 350.375021][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.445092][ T5632] syz_tun (unregistering): left allmulticast mode [ 350.445120][ T5632] syz_tun (unregistering): left promiscuous mode [ 350.445195][ T5632] bridge0: port 1(syz_tun) entered disabled state [ 350.685786][T17693] xt_hashlimit: size too large, truncated to 1048576 [ 350.685808][T17693] xt_hashlimit: max too large, truncated to 1048576 [ 350.685822][T17693] xt_hashlimit: invalid rate [ 350.774961][ T147] IPVS: starting estimator thread 0... [ 350.774988][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 350.863039][T17697] IPVS: using max 29 ests per chain, 69600 per kthread [ 350.986414][T17652] rxe_eth0 speed is unknown, defaulting to 1000 [ 351.309227][T17721] ip_tables: iptables: counters copy to user failed while replacing table [ 351.383000][T17725] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3142'. [ 351.383029][T17725] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3142'. [ 351.383477][T17725] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3142'. [ 351.633518][T17730] syzkaller0: entered promiscuous mode [ 351.633542][T17730] syzkaller0: entered allmulticast mode [ 351.709783][T17732] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 351.753760][T17652] lo speed is unknown, defaulting to 1000 [ 351.897782][T17743] netlink: 'syz.3.3148': attribute type 1 has an invalid length. [ 351.899958][ T5634] Bluetooth: hci2: command tx timeout [ 352.234646][T17756] batadv0: entered promiscuous mode [ 352.234846][T17756] macsec3: entered promiscuous mode [ 352.238192][T17756] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 352.263245][T17756] batadv0: left promiscuous mode [ 352.940912][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.987394][T17793] macsec1: entered promiscuous mode [ 353.602279][ T9942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.731035][T17652] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.731154][T17652] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.731294][T17652] bridge_slave_0: entered allmulticast mode [ 353.736216][T17652] bridge_slave_0: entered promiscuous mode [ 353.774782][T17652] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.776660][T17652] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.776812][T17652] bridge_slave_1: entered allmulticast mode [ 353.780405][T17652] bridge_slave_1: entered promiscuous mode [ 353.919079][T17836] gre0: Caught tx_queue_len zero misconfig [ 353.936591][T17652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.964841][T17652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.971526][ T5634] Bluetooth: hci2: command tx timeout [ 354.130943][ C1] [ 354.133331][ C1] ================================ [ 354.138461][ C1] WARNING: inconsistent lock state [ 354.143641][ C1] syzkaller #0 Not tainted [ 354.148080][ C1] -------------------------------- [ 354.153230][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 354.160096][ C1] ksoftirqd/1/23 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 354.166364][ C1] ffff888027518260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 354.175752][ C1] {SOFTIRQ-ON-W} state was registered at: [ 354.181499][ C1] lock_acquire+0x115/0x350 [ 354.186124][ C1] lock_sock_nested+0x41/0x100 [ 354.191017][ C1] x25_release+0xa0/0x3d0 [ 354.195467][ C1] __sock_release+0xa0/0x1f0 [ 354.200183][ C1] sock_close+0x1c/0x30 [ 354.204458][ C1] __fput+0x408/0xa40 [ 354.208556][ C1] fput_close_sync+0x11f/0x240 [ 354.213437][ C1] filp_close_sync+0x6e/0xa0 [ 354.218147][ C1] __se_sys_close_range+0xa77/0xef0 [ 354.223466][ C1] do_syscall_64+0x166/0x520 [ 354.228173][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.234188][ C1] irq event stamp: 3432696 [ 354.238643][ C1] hardirqs last enabled at (3432696): [] __local_bh_enable_ip+0xd6/0x140 [ 354.248773][ C1] hardirqs last disabled at (3432695): [] __local_bh_enable_ip+0x72/0x140 [ 354.258882][ C1] softirqs last enabled at (3432604): [] run_ksoftirqd+0x36/0x60 [ 354.268302][ C1] softirqs last disabled at (3432609): [] run_ksoftirqd+0x36/0x60 [ 354.277714][ C1] [ 354.277714][ C1] other info that might help us debug this: [ 354.285815][ C1] Possible unsafe locking scenario: [ 354.285815][ C1] [ 354.293284][ C1] CPU0 [ 354.296581][ C1] ---- [ 354.299877][ C1] lock(sk_lock-AF_X25); [ 354.304240][ C1] [ 354.307716][ C1] lock(sk_lock-AF_X25); [ 354.312255][ C1] [ 354.312255][ C1] *** DEADLOCK *** [ 354.312255][ C1] [ 354.320421][ C1] locks held by ksoftirqd/1/23: 1, last CPU#1: [ 354.326601][ C1] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 354.336675][ C1] [ 354.336675][ C1] stack backtrace: [ 354.342601][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 354.351834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.361950][ C1] Call Trace: [ 354.365259][ C1] [ 354.368222][ C1] dump_stack_lvl+0xe8/0x150 [ 354.372859][ C1] print_usage_bug+0x28c/0x2e0 [ 354.377668][ C1] valid_state+0xbe/0xf0 [ 354.381953][ C1] mark_lock_irq+0x36/0x380 [ 354.383720][T17839] geneve4: entered allmulticast mode [ 354.391796][ C1] mark_lock+0x117/0x190 [ 354.396073][ C1] __lock_acquire+0x71e/0x2de0 [ 354.400987][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 354.406319][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 354.411487][ C1] ? lock_acquire+0x115/0x350 [ 354.416200][ C1] lock_acquire+0x115/0x350 [ 354.420730][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 354.425891][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 354.431047][ C1] lock_sock_nested+0x41/0x100 [ 354.435883][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 354.441034][ C1] x25_kill_by_neigh+0x10d/0x250 [ 354.446015][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 354.451425][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 354.456912][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 354.462405][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 354.468338][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 354.473748][ C1] lapbeth_napi_poll+0x42/0x90 [ 354.478555][ C1] __napi_poll+0xaa/0x330 [ 354.482927][ C1] net_rx_action+0x61d/0xf50 [ 354.487571][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 354.492733][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 354.498002][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 354.503334][ C1] handle_softirqs+0x265/0x8d0 [ 354.508146][ C1] run_ksoftirqd+0x36/0x60 [ 354.512609][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 354.517625][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 354.522697][ C1] kthread+0x38b/0x480 [ 354.526802][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 354.532305][ C1] ? __pfx_kthread+0x10/0x10 [ 354.536936][ C1] ret_from_fork+0x514/0xb70 [ 354.541574][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 354.546711][ C1] ? __switch_to+0xc78/0x1410 [ 354.551430][ C1] ? __pfx_kthread+0x10/0x10 [ 354.556061][ C1] ret_from_fork_asm+0x1a/0x30 [ 354.560858][ C1] [ 354.564048][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3910 [ 354.564067][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23, name: ksoftirqd/1 [ 354.564085][ C1] preempt_count: 100, expected: 0 [ 354.564097][ C1] RCU nest depth: 1, expected: 0 [ 354.564108][ C1] INFO: lockdep is turned off. [ 354.564115][ C1] Preemption disabled at: [ 354.564122][ C1] [] handle_softirqs+0xed/0x8d0 [ 354.564162][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 354.564188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.564202][ C1] Call Trace: [ 354.564210][ C1] [ 354.564219][ C1] dump_stack_lvl+0xe8/0x150 [ 354.564272][ C1] __might_resched+0x36a/0x4c0 [ 354.564309][ C1] ? handle_softirqs+0xed/0x8d0 [ 354.564346][ C1] lock_sock_nested+0x56/0x100 [ 354.564378][ C1] x25_kill_by_neigh+0x10d/0x250 [ 354.564413][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 354.564450][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 354.564478][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 354.564505][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 354.564539][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 354.564571][ C1] lapbeth_napi_poll+0x42/0x90 [ 354.564604][ C1] __napi_poll+0xaa/0x330 [ 354.564637][ C1] net_rx_action+0x61d/0xf50 [ 354.564678][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 354.564709][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 354.564752][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 354.564787][ C1] handle_softirqs+0x265/0x8d0 [ 354.564823][ C1] run_ksoftirqd+0x36/0x60 [ 354.564854][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 354.564891][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 354.564932][ C1] kthread+0x38b/0x480 [ 354.564955][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 354.564989][ C1] ? __pfx_kthread+0x10/0x10 [ 354.565013][ C1] ret_from_fork+0x514/0xb70 [ 354.565039][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 354.565063][ C1] ? __switch_to+0xc78/0x1410 [ 354.565100][ C1] ? __pfx_kthread+0x10/0x10 [ 354.565123][ C1] ret_from_fork_asm+0x1a/0x30 [ 354.565156][ C1] [ 354.593554][T17652] team0: Port device team_slave_0 added [ 354.675480][T17652] team0: Port device team_slave_1 added [ 354.842546][T17652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.842567][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.842595][T17652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.844984][T17652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.845001][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.845030][T17652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.025645][T17652] hsr_slave_0: entered promiscuous mode [ 355.027181][T17652] hsr_slave_1: entered promiscuous mode [ 355.027606][T17652] debugfs: 'hsr0' already exists in 'hsr' [ 355.027620][T17652] Cannot create hsr debugfs directory [ 355.154798][T17652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.154827][T17652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.154848][T17652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 355.208436][T17652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.208477][T17652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.208506][T17652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 355.308403][T17652] bond0: (slave netdevsim1): Releasing backup interface [ 355.308753][T17652] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 355.309041][T17652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.309065][T17652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.309085][T17652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 355.411028][T17652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.411068][T17652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.411089][T17652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 355.479067][T17652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.495639][T17652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.496388][T17652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.498219][T17652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.498844][T17652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.528732][T17652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.529359][T17652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.545488][T17652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.598227][T17652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.615902][T17652] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.619480][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.619531][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.636286][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.636509][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.969309][T17652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.014214][T17652] veth0_vlan: entered promiscuous mode [ 356.019253][T17652] veth1_vlan: entered promiscuous mode [ 356.049943][ T5634] Bluetooth: hci2: command tx timeout [ 356.051513][T17652] veth0_macvtap: entered promiscuous mode [ 356.054545][T17652] veth1_macvtap: entered promiscuous mode [ 356.083042][T17652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.089238][T17652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.134337][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.134764][T17652] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 356.174312][ T9943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.174335][ T9943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.179081][T17652] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 356.216138][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.216766][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.216806][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.216851][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.265546][ T9943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.265567][ T9943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.409964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.050494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.129978][ T5634] Bluetooth: hci2: command tx timeout [ 358.691082][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.331145][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.891418][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.169946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.170103][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.811125][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog