last executing test programs: 7.296809943s ago: executing program 4 (id=1600): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001640)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001680)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000180080001000100000008000200", @ANYRES32=r5, @ANYBLOB="080003"], 0x4c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1, 0xa, 0x80000000) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) readv(r8, &(0x7f0000000340)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/4106, 0x100a}], 0x2) ioctl(r8, 0x6, &(0x7f0000001580)="cc72cf0e55a442e14192b18bf4754b581b72c887daa195cf9738cc67bd7678607ee3995459df56f0d1dd4091b7595757c61b0413ab14ad89744516003ca6cf9cf7993e0e167766d3d4f1a9ec3af2d533bc4ef8718363c5f46ad7fb9d0bf2384f358902775ad315ec72e65e8b2a1644628779e7282114ea7ee482828ed3ed7b4fd0a27e2da3add03b218ea19fd6ac0e05d01e61cfdc81c289c2a72f357373eb9222670a117aaff17f668df0dd4bb2d8074880d9") syz_genetlink_get_family_id$batadv(&(0x7f0000001480), r8) sendmsg$nl_generic(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x44) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @empty, @private}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40840}, 0x20000050) 6.890619721s ago: executing program 4 (id=1602): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f00000000c0)=0xa40, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x77ee}], 0x1, 0x40010103, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0xf9}, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x4e22, 0x4e20, 0x8}}}, 0x2a) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd70c8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce971e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402", 0x80}, {&(0x7f0000000200)="49ca212b4ee03b192d1048f96cc5eae838645dd5da7cc767a7fa4a8b", 0x1c}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x31, r2, 0xd8207000) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f00000000c0)=0xa40, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) (async) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x77ee}], 0x1, 0x40010103, 0x0) (async) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0xf9}, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x4e22, 0x4e20, 0x8}}}, 0x2a) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd70c8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce971e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402", 0x80}, {&(0x7f0000000200)="49ca212b4ee03b192d1048f96cc5eae838645dd5da7cc767a7fa4a8b", 0x1c}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) (async) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x31, r2, 0xd8207000) (async) close(r1) (async) 6.589443259s ago: executing program 3 (id=1604): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r0, r1, 0x0, 0x7feff000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) 6.177391476s ago: executing program 3 (id=1607): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000000c40)=0x9c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="2e00000011008188040f80ec59acbc04138f81b204000000fb0100000010e61e0e00dd2c0fd206f30f2ce1710b28", 0x2e}], 0x1, 0x0, 0xffffffffffffff62}, 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)={0x10, 0x34, 0x1}, 0x10}], 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x5, 0x5f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001a80], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x2, 0xdada, 'bond0\x00', 'syzkaller0\x00', 'nicvf0\x00', '\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @link_local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x0, 0x1d8, 0x1d8, 0x208, [@comment={{'comment\x00', 0x0, 0x100}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x4, 0x1000, 0x5, {0x8}}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x3, 0x1, 0x12ee5, 'virt_wifi0\x00', 'dvmrp0\x00', 'rose0\x00', 'sit0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x3, 0x459, 0x0, 0x0, "6fcfcacab4753f2bcc3fffcb188f5f212de09b24ba8416a6939ed0370856ddfa49621d3a3d201daf07a73dd87a213ad167854b06e0dd12afd6a6e8a950bd1fd2"}}}}, {0x5, 0xf6b545f397037a4c, 0x890d, 'erspan0\x00', 'vcan0\x00', 'wlan0\x00', 'ip_vti0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x230d, 'syz0\x00', {0x8}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x11, 0xf, 0xf6, 'wg0\x00', 'bridge_slave_1\x00', 'ip6erspan0\x00', 'dvmrp1\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0xff], @random="4e291711afe7", [0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{0x5, 0x29, 0x3, 'pim6reg0\x00', 'team_slave_0\x00', 'vlan0\x00', 'veth1_to_bond\x00', @broadcast, [0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x8, 0x8001, 0xf, 0x0, 0x0, "55ada0a8abede923099f4be4997d53516d15ced1efe583474d2c94f40bfd93d3e567cacf38dc6dcede39427170dfc46d614eeb15f121feb0b2644614174cadf0"}}}}]}]}, 0x670) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xf22fff7f, &(0x7f0000000100)=[{&(0x7f0000000240)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000001100001c0000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000700000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000ac0), 0x11000) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) sendmmsg(r8, &(0x7f0000000e40)=[{{&(0x7f0000000e80)=@hci={0x1f, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000f00)=[{0x10, 0x6, 0x7f}], 0x10}}], 0x1, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000ac0)=0xfffffffe, 0x43) close(r9) ioctl$EXT4_IOC_GETFSUUID(r8, 0x8008662c, &(0x7f00000010c0)) vmsplice(r7, &(0x7f0000000b00)=[{&(0x7f0000000b40)="85", 0x1}], 0x1, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000002900)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002940)={0x0, 0x2000}, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) 5.073352321s ago: executing program 3 (id=1612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x40) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000c80)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000cc0), 0x4) sendmsg$802154_dgram(r3, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000d80)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000c80), 0x318, 0x0) recvmmsg(r6, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000008c0)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000980)=""/7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0xd, 0x4, &(0x7f0000000a80)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd2}, 0xb6) setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000240)=0x80000000, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f0000000380)}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb4e2080004e2200000a00000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008084) 4.917808281s ago: executing program 1 (id=1613): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800010000000000000000001d01040008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x24}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) 4.867785418s ago: executing program 0 (id=1614): syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[], 0x0) 4.746719523s ago: executing program 0 (id=1615): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x2cb}, 0x0) (async) r0 = socket(0x2d, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e3, &(0x7f0000000100)={r0}) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001140)={@rand_addr=' \x01\x00', 0x0, 0x6f92971662672db3}, &(0x7f0000001180)=0x20) (async, rerun: 64) r3 = socket$pptp(0x18, 0x1, 0x2) (rerun: 64) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) read$alg(r1, &(0x7f00000011c0)=""/4086, 0x1114) (async) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x3, @empty}}, 0x1e) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004804}, 0x0) (rerun: 32) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, &(0x7f0000000200)=""/1, &(0x7f0000000240)=0xf002) (async) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 4.637577652s ago: executing program 4 (id=1616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x22, 0x0, &(0x7f00000002c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f00000003c0)="010a", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 4.182968736s ago: executing program 1 (id=1618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0xb8, r1, 0x9, 0x70bd2d, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38a23ab14f"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x0, 0x8, 0x2}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4059b6bf61b5ed38f6331bd2c5"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "413155f567590bd2d3"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "dfbf17ce508ceebcbe12a1b126a7"}, @NL80211_ATTR_KEY={0x0, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT]}]}, 0xb8}}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="030b06e4bfaa295f13aef5b0984aa524e4c71bdf99df803c93e5a4e9ce4539c7a2935933d888fbb30fde4d4fe19c63aceafb79ea01cbd4b088312e61112e9479d2ae2ed5decb82451b5ab70974d8d09f92e7d6ce9d463ba1598542caed9dbcece0d1f2e4af38ac6c6ff4907a69bc62400b8272ca28ce020000002a96d088b78d48af47af29fda42f77eed243e74ca65d45ae0d3045d7736eb7543161a8a2d9f7134fed06510855223f05d6fc50ca93ae5773b040bd26d38a79387a9fba96ce3d659ad9e55ad0", 0xffffffffffffff94, 0x91, 0x0, 0xfffffffffffffe6a) recvfrom$inet(r0, &(0x7f0000000280)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.863029731s ago: executing program 4 (id=1619): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x8, @empty, 0x4e23, 0x2, 'dh\x00', 0xc, 0xfffffffb, 0x53}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0xffffff45, 0x77, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x700, 0x7fff, 0x80}}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delqdisc={0x114, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0x10}, {0xfff1, 0xffe0}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x5000000}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7d4}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0x8, 0x8167, 0x1, 0x4, 0xfffffff7, 0x8}}, {0x14, 0x2, [0xb8, 0xa1f, 0x6, 0x5, 0x9ec0, 0x3, 0x4, 0x9]}}, {{0x1c, 0x1, {0xf7, 0x40, 0x6, 0xff, 0x2, 0x6305, 0x5, 0x7}}, {0x12, 0x2, [0x3, 0x2, 0x200, 0x6, 0xfffc, 0x8001, 0x7]}}, {{0x1c, 0x1, {0x3, 0xcb, 0x0, 0x2, 0x1, 0x10, 0x0, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x0, 0x9, 0x8cc4, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0x8, 0x40, 0x0, 0x92e, 0x1, 0x2}}, {0x8, 0x2, [0x8000, 0x3]}}]}]}, 0x114}}, 0x0) 3.472863327s ago: executing program 4 (id=1621): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read(r2, &(0x7f0000000040)=""/207, 0xcf) (async) connect$802154_dgram(r2, &(0x7f0000000140)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) sendmsg$802154_dgram(r2, &(0x7f0000000180)={&(0x7f00000001c0), 0x14, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x94) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) clock_gettime(0x0, &(0x7f0000000240)) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000f33f000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000004b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703001a779c445eeadc21b73ab9c7b7de29fb000d000000850000000600000018330000020000000000000000000000bf91000000000000b7020000010000008500000084000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0xf4, &(0x7f0000000740)=""/244, 0x41100, 0x20, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000005c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x6, 0x4, 0x54}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000640)=[{0x0, 0x1, 0xb, 0x6}, {0x1, 0x4, 0x0, 0x1}, {0x3, 0x4, 0xf, 0xe}, {0x2, 0x3, 0xb, 0xf}, {0x2, 0x3, 0x5, 0xc}, {0x1, 0x2, 0x8}, {0x5, 0x5, 0x1, 0x7}], 0x10, 0xffff0001}, 0x94) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000a40)="480e23") (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 3.443847172s ago: executing program 1 (id=1622): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r2, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x20}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 3.337664278s ago: executing program 2 (id=1623): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)=ANY=[@ANYBLOB='.']) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r4, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18, &(0x7f0000000300)={&(0x7f0000000240)="898bb9e64a1ac9233bc17351fff891c08305d484d66f2ffacab70433d04e08105eb0fc078e39a9d5ea553220bc76da7961d0bf70aed1d6707e43053ac70749e73ec7364a2107834fd78687ea0a6848cd518daed877c76c9749021842a580d52109d3294da79d897599e8b44d62fddc88ffe8d93f51e406461e8005d2c72b291a691125180df857b7b6d07c39576d52e71991402070d804", 0x97}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delqdisc={0xf8, 0x25, 0x40c, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {0x6, 0xfff2}, {0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x664}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x83, 0x4, 0x1, 0xfffffffa, 0x2, 0x80000001, 0xe0c, 0x5}}, {0xe, 0x2, [0x7, 0x5, 0x4, 0x6, 0xe6b]}}, {{0x1c, 0x1, {0xf3, 0x6, 0x8001, 0x2, 0x1, 0xe5, 0xf29, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xde, 0x2, 0x8, 0x1, 0x2, 0x10001, 0x58bf, 0x3}}, {0xa, 0x2, [0x6, 0x0, 0xc]}}, {{0x1c, 0x1, {0x4, 0x0, 0xe4a5, 0x73f9a48, 0x2, 0xd7b01315, 0x7, 0x2}}, {0x8, 0x2, [0x2, 0x100]}}, {{0x1c, 0x1, {0x1, 0x2, 0xb4a, 0x7fffffff, 0x1, 0x9, 0x7, 0x5}}, {0xe, 0x2, [0x7, 0x8001, 0x5, 0xc, 0x6]}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 3.215656029s ago: executing program 1 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_STATUS_MASK={0xfffffffffffffcaa, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x210}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x310}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x228}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x38, 0x1000, 0x0, 0x2}, {"9861"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 3.019338748s ago: executing program 2 (id=1625): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xc}, {0x90010022, 0x4}], 0x10, 0x1ff}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000f80)=0x20) close(r2) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x5) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00030e00080ff008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.77760917s ago: executing program 0 (id=1626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) (async, rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@migrate={0x50, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) (async, rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf252108000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x4048000) 2.493356443s ago: executing program 2 (id=1627): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x3, 0x3, 0x301}, 0x14}}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl(r6, 0xef3, &(0x7f0000000200)="17b35caf0db390a1e89f739104e960f540b5a4ae938694550e7bc869401861a677376d235f32cb3607151486e2faea18ac3818cfe883978d9e7eaa3d5333f1d3794dbbe62784c5ce192ea2a6baa428e7669e93023b3793b6780ee5ecdb2bdbcd3e96bc33de34aa5e17") 2.196485507s ago: executing program 1 (id=1628): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var={0x0, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0xffffffff}, {}, {}, {}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000000010c0000000000040000000000009e782949c4a27d9a30"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0x500}, 0x10}, 0x94) 2.037419916s ago: executing program 3 (id=1629): r0 = socket$kcm(0x21, 0x2, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x0, 0x30, 0x0, &(0x7f0000000000)=0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f00000006c0)=0xa, 0x1959cc36) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="ee", 0xfffffe5e}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="01000000f3ffffffde31c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.924649082s ago: executing program 2 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x121}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) 1.910643317s ago: executing program 1 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d00)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1002}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r9, 0x0, 0x14, 0x0, &(0x7f0000000240)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000280)="010a", 0x0}, 0x50) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x5a8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4d8, 0xffffffff, 0xffffffff, 0x4d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'\x00', {0x4, 0x1, 0x1a, 0x0, 0xdedd, 0x10000000, 0x0, 0x1000, 0x78, 0x20}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x608) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000005c0), 0x56) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r12], 0x3c}}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r13, 0x0, 0x0) write(r0, &(0x7f0000000580)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 1.705645044s ago: executing program 0 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x84) 1.704056133s ago: executing program 4 (id=1633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x38}}, 0x880) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000680), 0x56) sendmsg$kcm(r10, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d00000000000000892f3c35d5a8", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {0x80}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@tipc_packet={0xd, 0x6, "e471f9", 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x2, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x4, 0x4e24, 0x4e24}, 0x2, 0x1}}}}}]}}}}}}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}}}}}, 0x32) 183.868522ms ago: executing program 2 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030000bd7000fddbdf250e7aaa2f08000400ac1414aa08000200010000000800133c1cffc97ee6430100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 183.422439ms ago: executing program 3 (id=1635): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000480)={r4, &(0x7f00000005c0)="ca", &(0x7f0000000600)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000640)={r4, &(0x7f0000000680), &(0x7f0000000780)=""/6, 0x2}, 0x20) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5", 0x2f}], 0x1}, 0x4000804) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4c0c0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xe325, 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}], 0x1, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000380)={0x500, 0x0, &(0x7f00000003c0)={0x0, 0x70}}, 0x4081) shutdown(r6, 0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x8, 0x5}, 0xc) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 182.481647ms ago: executing program 2 (id=1636): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7111da71}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6670e460}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x8) listen(r0, 0x8) (async) listen(r0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x3c, 0x41, 0x1, 0x8, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000240)={0x1, 'veth1_macvtap\x00', {}, 0x4}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@mcast1]}}}]}, 0x4c}}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x9}, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000000c0), 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) (async) getsockname$packet(r9, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x72, r10}) (async) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x72, r10}) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r10}) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 182.223834ms ago: executing program 0 (id=1637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100037042dbd30000000000000000000", @ANYRES32=0x0, @ANYBLOB="0009000000000000240012800e00010069703665727370616e00000010000280080004000100000004001200"], 0x44}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r1, &(0x7f00000003c0)="27dff93155b71c2ed23fe12794d7ccbdd76d9111b7b6c8072e1e477e6183df47ad7fa82acc994614b65afdfba16631583524e74b19d7edec0e87a94da4568c51ef2e247ee7a1ab9d2c3c1e0e4512fc2a341500316dc10da43a4b681c6dfb2840cdb582c98b46e590a953723452411a06426265e98c8ee69e0921189ef3e0939f1e064859742a7224e756f3842f962691c0339b263a2d935a1f2bb6873cc7f26a844b65e6cb1a63e9613dc3d9fe9f711b1decb7033e0c5ac04a2ee8a6e22a094743130f81f27e212901f4a72a7b9e6e38e805236063fb8bf1c97371815fa8dab8c3eaf3fd6e247b02", &(0x7f0000000540)=""/84}, 0x20) 181.7778ms ago: executing program 3 (id=1638): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = epoll_create1(0x0) sendfile(r3, r1, &(0x7f0000000180)=0x6, 0x276f) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0xa}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 0s ago: executing program 0 (id=1639): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x0, 0x98, 0x1a0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4401000010000100fdffffbffe000800e0000002000000000000000000000000ffffffff000000000000000000000000000307944e230020020020003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000000200000002000000090000002cbd700000000000020000fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa2502, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f0000000080)) bind$inet(r5, &(0x7f00000008c0)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000900)='nv', 0x2) connect$inet(r5, &(0x7f0000000940)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000880)={'ip6gre0\x00', 0x4000}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000700)={{{@in=@private=0xa0100fd, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4e22, 0xe599, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x3a00, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000005140500ffffffffc11be51208000110000001000800030000000000"], 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="21052abd7000ffdbdf251200000008000300", @ANYRES32=r11, @ANYBLOB="0800a400010000000a0006000802110000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000009c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000062f61e81037f2fd6ffaa717dc40f79c60a3c0385720001000000000052492ad6fa7066f5866d7d2f45"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 89.690871][ T1017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.690907][ T1017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.690944][ T1017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.690980][ T1017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.691016][ T1017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.698229][ T5636] Bluetooth: hci1: command tx timeout [ 89.789294][ T5645] veth0_macvtap: entered promiscuous mode [ 89.810682][ T249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.810702][ T249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.841692][ T5645] veth1_macvtap: entered promiscuous mode [ 89.854192][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.854215][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.857895][ T4953] Bluetooth: hci2: command tx timeout [ 89.857929][ T4953] Bluetooth: hci3: command tx timeout [ 89.858003][ T5636] Bluetooth: hci4: command tx timeout [ 89.916418][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.916441][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.935851][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.973555][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.980797][ T5648] veth0_macvtap: entered promiscuous mode [ 90.037203][ T5635] veth0_vlan: entered promiscuous mode [ 90.042228][ T5648] veth1_macvtap: entered promiscuous mode [ 90.048234][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.048279][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.048313][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.048346][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.096680][ T5635] veth1_vlan: entered promiscuous mode [ 90.141565][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.183855][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.254800][ T5647] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.326388][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.326410][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.388151][ T1017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.389178][ T1017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.389219][ T1017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.389256][ T1017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.453478][ T5635] veth0_macvtap: entered promiscuous mode [ 90.484236][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.484259][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.513134][ T5635] veth1_macvtap: entered promiscuous mode [ 90.516610][ T5836] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 90.516674][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 90.634203][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.634228][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.684051][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.749844][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.885736][ T3333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.885759][ T3333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.963684][ T44] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 90.964403][ T5847] macsec1: entered promiscuous mode [ 90.964632][ T5847] macsec1: entered allmulticast mode [ 90.964653][ T5847] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 90.966743][ T5847] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 90.982639][ T5847] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 91.086202][ T44] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 91.121234][ T5856] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET) [ 91.153249][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.182147][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.268048][ T1017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.283527][ T5856] tipc: Started in network mode [ 91.283555][ T5856] tipc: Node identity ac1414aa, cluster identity 4711 [ 91.284261][ T5856] tipc: New replicast peer: 172.20.20.187 [ 91.291347][ T5856] tipc: Enabled bearer , priority 10 [ 91.302503][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.302524][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.304247][ T5857] tipc: Enabling of bearer rejected, already enabled [ 91.308695][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489579][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.489603][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.812048][ T5882] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 91.875416][ T5883] netlink: zone id is out of range [ 91.875473][ T5883] netlink: zone id is out of range [ 91.875481][ T5883] netlink: zone id is out of range [ 91.875488][ T5883] netlink: zone id is out of range [ 91.875495][ T5883] netlink: zone id is out of range [ 92.131290][ T5898] ip_tables: iptables: counters copy to user failed while replacing table [ 92.407497][ T44] tipc: Node number set to 2886997162 [ 92.714318][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 92.714496][ T5935] netlink: 6 bytes leftover after parsing attributes in process `syz.1.19'. [ 92.815360][ T5937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 92.815587][ T5937] netlink: 6 bytes leftover after parsing attributes in process `syz.1.19'. [ 92.882085][ T5940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.991960][ T5946] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 92.996064][ T5946] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ƒÄ&;ßC§ÂЊ¨—,_÷•QÇ丹¨Sö [_Ö [ 93.073697][ T5955] sctp: [Deprecated]: syz.1.23 (pid 5955) Use of int in max_burst socket option. [ 93.073697][ T5955] Use struct sctp_assoc_value instead [ 93.387555][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 93.393478][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.400858][ T5971] C: renamed from lo (while UP) [ 93.446374][ T5971] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 93.561885][ T5977] syz_tun: entered allmulticast mode [ 93.563426][ T5976] syz_tun: left allmulticast mode [ 93.686647][ T5979] Illegal XDP return value 2236634098 on prog (id 9) dev N/A, expect packet loss! [ 93.832645][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 93.834187][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 93.850068][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 93.850101][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 93.883763][ T5987] bridge0: entered promiscuous mode [ 93.902663][ T5987] bridge0: left promiscuous mode [ 94.307941][ T6014] ip_tables: iptables: counters copy to user failed while replacing table [ 94.537252][ T6024] netlink: 'syz.4.41': attribute type 4 has an invalid length. [ 94.554230][ T6024] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 94.779907][ T6034] warning: `syz.3.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.869080][ T6043] syzkaller0: entered promiscuous mode [ 94.869105][ T6043] syzkaller0: entered allmulticast mode [ 95.031647][ T6052] can: request_module (can-proto-0) failed. [ 95.259816][ T6058] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 95.342767][ T6058] Zero length message leads to an empty skb [ 95.946516][ T6092] __nla_validate_parse: 5 callbacks suppressed [ 95.946539][ T6092] netlink: 104 bytes leftover after parsing attributes in process `syz.3.63'. [ 96.121386][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 96.144974][ T6108] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 96.144998][ T6108] netlink: 'syz.0.65': attribute type 2 has an invalid length. [ 96.229578][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 96.229617][ T6110] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 96.229630][ T6110] netlink: 'syz.0.65': attribute type 2 has an invalid length. [ 96.382009][ T6123] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 96.471403][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.70'. [ 96.670143][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.72'. [ 96.670175][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.72'. [ 96.725900][ T6142] Bluetooth: MGMT ver 1.23 [ 96.725939][ T6142] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 96.786962][ T6147] netlink: 256 bytes leftover after parsing attributes in process `syz.4.76'. [ 96.971513][ T6147] net_ratelimit: 6 callbacks suppressed [ 96.971536][ T6147] ip_tables: iptables: counters copy to user failed while replacing table [ 97.052111][ T6164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.79'. [ 97.976998][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'. [ 98.201465][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 98.936273][ T6246] netlink: 'syz.2.103': attribute type 58 has an invalid length. [ 98.979133][ T6247] netlink: zone id is out of range [ 98.979303][ T6247] netlink: zone id is out of range [ 98.979382][ T6247] netlink: zone id is out of range [ 98.979619][ T6247] netlink: zone id is out of range [ 98.979645][ T6247] netlink: zone id is out of range [ 98.988471][ T6247] netlink: zone id is out of range [ 98.993256][ T6247] netlink: zone id is out of range [ 98.993511][ T6247] netlink: zone id is out of range [ 98.993520][ T6247] netlink: zone id is out of range [ 99.571117][ T6270] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 99.660281][ T6270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.665078][ T6279] smc: net device lo applied user defined pnetid SYZ0 [ 99.797317][ T6270] bond1: (slave geneve2): making interface the new active one [ 99.848758][ T6270] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.272416][ T5636] Bluetooth: hci1: unexpected cc 0x2002 length: 145 > 4 [ 100.275433][ T6316] xt_hl: Unknown Hop Limit match mode: 206 [ 100.696794][ T6338] batman_adv: batadv0: Adding interface: syzkaller0 [ 100.696816][ T6338] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.696849][ T6338] batman_adv: batadv0: Interface activated: syzkaller0 [ 101.984422][ T6380] netlink: 'syz.2.141': attribute type 2 has an invalid length. [ 102.052427][ T6338] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 102.103917][ T6338] batman_adv: batadv0: Removing interface: syzkaller0 [ 102.330689][ T6394] nbd: must specify an index to disconnect [ 102.428366][ T29] audit: type=1107 audit(1793698320.803:2): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 102.485455][ T6395] __nla_validate_parse: 9 callbacks suppressed [ 102.485478][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 102.530900][ T6401] xt_hashlimit: size too large, truncated to 1048576 [ 102.544693][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 102.992688][ T6432] netlink: 'syz.2.155': attribute type 2 has an invalid length. [ 103.618918][ T9] net_ratelimit: 10 callbacks suppressed [ 103.618942][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.783036][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.939669][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.249635][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.249923][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.276284][ T6502] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 104.276343][ T6503] tc_dump_action: action bad kind [ 104.290363][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 104.353107][ T6507] syz_tun: entered allmulticast mode [ 104.456613][ T6512] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.676290][ T6527] netlink: 96 bytes leftover after parsing attributes in process `syz.1.178'. [ 104.772432][ T6537] netlink: 96 bytes leftover after parsing attributes in process `syz.1.178'. [ 104.787119][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 104.933734][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 104.935794][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.182'. [ 104.935857][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.182'. [ 104.971103][ T6500] syz_tun: left allmulticast mode [ 104.972385][ T6542] tipc: Enabling of bearer rejected, already enabled [ 104.982075][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.175951][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 105.285649][ T6557] netlink: 'syz.2.188': attribute type 11 has an invalid length. [ 105.285673][ T6557] netlink: 'syz.2.188': attribute type 4 has an invalid length. [ 105.287231][ T6556] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 105.292534][ T6557] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 105.347130][ T6565] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 105.373661][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.373920][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.429185][ T6566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.551282][ T29] audit: type=1804 audit(1793698323.933:3): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.191" name="/newroot/42/cgroup.controllers" dev="tmpfs" ino=229 res=1 errno=0 [ 105.555438][ T29] audit: type=1800 audit(1793698323.933:4): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.191" name="cgroup.controllers" dev="tmpfs" ino=229 res=0 errno=-22 [ 105.653987][ T5636] Bluetooth: hci4: unexpected event 0x34 length: 0 < 6 [ 105.703652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.763179][ T6590] pim6reg: entered allmulticast mode [ 106.408252][ T6610] syzkaller1: entered promiscuous mode [ 106.408277][ T6610] syzkaller1: entered allmulticast mode [ 107.293871][ T6659] netlink: 'syz.3.213': attribute type 1 has an invalid length. [ 107.293895][ T6659] netlink: 'syz.3.213': attribute type 2 has an invalid length. [ 107.300042][ T6660] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 107.304434][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880731d8800: rx timeout, send abort [ 107.558145][ T6667] __nla_validate_parse: 11 callbacks suppressed [ 107.558169][ T6667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.217'. [ 107.798861][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880731d8000: rx timeout, send abort [ 107.804653][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880731d8800: abort rx timeout. Force session deactivation [ 108.071000][ T6702] netlink: 84 bytes leftover after parsing attributes in process `syz.0.222'. [ 108.071029][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 108.269228][ T6711] macvtap0: entered allmulticast mode [ 108.269264][ T6711] veth0_macvtap: entered allmulticast mode [ 108.298919][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880731d8000: abort rx timeout. Force session deactivation [ 108.353224][ T6715] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 108.608125][ T6727] C: entered allmulticast mode [ 108.687719][ T62] net_ratelimit: 13 callbacks suppressed [ 108.687742][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.688067][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.137820][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.789456][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.789779][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.859237][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.177926][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.523834][ T6721] C: left allmulticast mode [ 110.738503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.916493][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.931224][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.041756][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 111.045794][ T6762] netlink: 72 bytes leftover after parsing attributes in process `syz.2.237'. [ 111.336602][ T6778] netlink: 68 bytes leftover after parsing attributes in process `syz.0.243'. [ 111.336627][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 111.367161][ T6778] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 111.486715][ T6783] netlink: 14 bytes leftover after parsing attributes in process `syz.4.246'. [ 111.580303][ T6783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.615690][ T6783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.624704][ T6783] bond0 (unregistering): Released all slaves [ 111.777240][ T6798] syz_tun: entered allmulticast mode [ 111.861343][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.250'. [ 111.914580][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 112.044365][ T6812] syzkaller0: entered promiscuous mode [ 112.044391][ T6812] syzkaller0: entered allmulticast mode [ 112.152066][ T6815] veth3: entered allmulticast mode [ 112.166058][ T6822] netlink: 'syz.1.256': attribute type 8 has an invalid length. [ 112.542764][ T6835] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 112.691715][ T6835] syzkaller0: entered promiscuous mode [ 112.691743][ T6835] syzkaller0: entered allmulticast mode [ 112.834398][ T6857] __nla_validate_parse: 1 callbacks suppressed [ 112.834420][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 112.834585][ T6857] bridge_slave_1: left allmulticast mode [ 112.834608][ T6857] bridge_slave_1: left promiscuous mode [ 112.835904][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.854652][ T6857] bridge_slave_0: left allmulticast mode [ 112.854679][ T6857] bridge_slave_0: left promiscuous mode [ 112.856134][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.914522][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.266'. [ 114.017724][ C0] net_ratelimit: 12 callbacks suppressed [ 114.017762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.021697][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.237602][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.237757][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.337803][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.357684][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.357842][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.387871][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.444078][ T6835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.634979][ T6896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.276'. [ 116.422382][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.479142][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.454520][ T6908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.275'. [ 117.670120][ T6941] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 117.800336][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 117.800400][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 117.800741][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 117.805828][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 118.201150][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 118.406483][ T6983] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 118.432831][ T6983] bond1 (unregistering): Released all slaves [ 118.491921][ T6988] vlan2: entered promiscuous mode [ 118.491948][ T6988] hsr0: entered promiscuous mode [ 118.492303][ T6988] vlan2: entered allmulticast mode [ 118.492318][ T6988] hsr0: entered allmulticast mode [ 118.492330][ T6988] hsr_slave_0: entered allmulticast mode [ 118.492345][ T6988] hsr_slave_1: entered allmulticast mode [ 118.863117][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 118.863157][ T7011] netlink: 'syz.2.305': attribute type 30 has an invalid length. [ 118.886344][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 118.886380][ T7011] netlink: 'syz.2.305': attribute type 30 has an invalid length. [ 118.897609][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.897655][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.897687][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.897717][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.256385][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 119.305306][ T7033] syz_tun: entered allmulticast mode [ 119.413674][ T7033] dvmrp3: entered allmulticast mode [ 119.442079][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.309'. [ 119.503640][ T7032] syz_tun: left allmulticast mode [ 119.538087][ T44] net_ratelimit: 139 callbacks suppressed [ 119.538111][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.775631][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 119.775737][ T7057] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 119.792088][ T7057] netlink: 152 bytes leftover after parsing attributes in process `syz.3.318'. [ 119.809682][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.820708][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.820976][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.936802][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.321'. [ 119.936835][ T7066] netlink: 'syz.1.321': attribute type 6 has an invalid length. [ 119.972869][ T7063] ip6gretap1: entered allmulticast mode [ 120.080111][ T7073] netlink: 'syz.2.319': attribute type 12 has an invalid length. [ 120.080136][ T7073] netlink: 'syz.2.319': attribute type 29 has an invalid length. [ 120.080150][ T7073] netlink: 148 bytes leftover after parsing attributes in process `syz.2.319'. [ 120.080168][ T7073] netlink: 59 bytes leftover after parsing attributes in process `syz.2.319'. [ 120.099327][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.157299][ T7076] openvswitch: netlink: Message has 1 unknown bytes. [ 120.157341][ T7076] openvswitch: netlink: Actions may not be safe on all matching packets [ 120.596025][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.917841][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.918159][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.313054][ T7148] netlink: 'syz.2.343': attribute type 24 has an invalid length. [ 121.341071][ T7151] syz_tun: entered allmulticast mode [ 121.452447][ T7144] veth0: entered promiscuous mode [ 121.453181][ T7157] veth0: left promiscuous mode [ 124.534440][ T7145] syz_tun: left allmulticast mode [ 124.633950][ T7211] __nla_validate_parse: 1 callbacks suppressed [ 124.633972][ T7211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.349'. [ 124.710959][ T7213] gre1: entered promiscuous mode [ 124.710986][ T7213] gre1: entered allmulticast mode [ 124.737985][ T5626] net_ratelimit: 17 callbacks suppressed [ 124.738008][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.923282][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 124.935335][ T7223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.354'. [ 124.935360][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 124.935373][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 125.046379][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 125.056208][ T7229] ipt_REJECT: ECHOREPLY no longer supported. [ 125.139977][ T7231] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 125.201795][ T7231] bond0: entered promiscuous mode [ 125.202297][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.239457][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 125.274458][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.274882][ T7231] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 125.274901][ T7231] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 125.318499][ T7231] bond0: (slave wireguard0): making interface the new active one [ 125.318528][ T7231] wireguard0: entered promiscuous mode [ 125.321034][ T7231] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 125.370428][ T7242] syzkaller0: entered promiscuous mode [ 125.370454][ T7242] syzkaller0: entered allmulticast mode [ 125.428936][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.429245][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.617933][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 125.751699][ T7277] netlink: 'syz.1.370': attribute type 7 has an invalid length. [ 125.789939][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.882638][ T7282] netlink: 'syz.1.370': attribute type 7 has an invalid length. [ 125.928411][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'. [ 126.022162][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.547958][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.548290][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.837735][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.974468][ T7264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.095373][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'. [ 127.435730][ T7304] xt_NETMAP: bad MAP_IPS. [ 127.471276][ T7312] siw: device registration error -23 [ 127.647912][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.696765][ T7327] netlink: 'syz.3.388': attribute type 32 has an invalid length. [ 127.747904][ T7327] bond1: option coupled_control: invalid value (16) [ 127.755179][ T7327] bond1 (unregistering): Released all slaves [ 127.938775][ T5636] Bluetooth: hci3: command tx timeout [ 128.310061][ T7372] geneve2: entered promiscuous mode [ 128.363376][ T7369] wg1 speed is unknown, defaulting to 1000 [ 128.370077][ T7369] wg1 speed is unknown, defaulting to 1000 [ 128.370935][ T7369] wg1 speed is unknown, defaulting to 1000 [ 128.390142][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 60359 - 0 [ 128.390196][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 60359 - 0 [ 128.390230][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 60359 - 0 [ 128.390264][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 60359 - 0 [ 128.481895][ T7377] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 128.655392][ T7369] infiniband syz0: set active [ 128.655429][ T10] wg1 speed is unknown, defaulting to 1000 [ 128.655466][ T7369] infiniband syz0: added wg1 [ 128.680072][ T7369] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 128.680112][ T7369] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 128.680147][ T7369] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 128.725959][ T7369] RDS/IB: syz0: added [ 128.726030][ T7369] smc: adding ib device syz0 with port count 1 [ 128.726049][ T7369] smc: ib device syz0 port 1 has no pnetid [ 128.727591][ T10] wg1 speed is unknown, defaulting to 1000 [ 128.732352][ T7369] wg1 speed is unknown, defaulting to 1000 [ 128.884526][ T7369] wg1 speed is unknown, defaulting to 1000 [ 129.012616][ T7369] wg1 speed is unknown, defaulting to 1000 [ 129.160946][ T7369] wg1 speed is unknown, defaulting to 1000 [ 129.289309][ T7369] wg1 speed is unknown, defaulting to 1000 [ 129.868955][ T13] net_ratelimit: 8 callbacks suppressed [ 129.868980][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.869380][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.937820][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.017853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.023056][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.977784][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.989225][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.989507][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.017658][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.087716][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.218822][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.218894][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.139367][ T5626] net_ratelimit: 9 callbacks suppressed [ 135.139385][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.407714][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.408027][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.177841][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.262632][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.508614][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.508926][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.217752][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.609193][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.609508][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.337753][ T44] net_ratelimit: 8 callbacks suppressed [ 140.337771][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.917655][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.917826][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.377954][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.017765][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.017970][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.337725][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.417672][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.117704][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.117870][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.381652][ T5765] net_ratelimit: 6 callbacks suppressed [ 145.381667][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.538092][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.417697][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.417975][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.577725][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.517609][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.517764][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.617926][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.428105][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.580016][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.738686][ T5806] net_ratelimit: 6 callbacks suppressed [ 150.738702][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.827571][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.827729][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.457634][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.781821][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.927597][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.927757][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.817861][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.027647][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.027831][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.937884][ T44] net_ratelimit: 8 callbacks suppressed [ 155.937899][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.258685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.327735][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.327962][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.977943][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.031321][ T7403] __nla_validate_parse: 7 callbacks suppressed [ 157.031343][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 157.038981][ T7406] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.167271][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 157.373745][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 157.428784][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.429115][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.542656][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.567846][ T7440] hsr0: entered allmulticast mode [ 157.567870][ T7440] hsr_slave_0: entered allmulticast mode [ 157.567887][ T7440] hsr_slave_1: entered allmulticast mode [ 157.568484][ T7440] hsr0: entered promiscuous mode [ 157.570637][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 157.571972][ T7441] hsr_slave_0: left promiscuous mode [ 157.573109][ T7441] hsr_slave_1: left promiscuous mode [ 157.626699][ T7441] hsr0 (unregistering): left allmulticast mode [ 157.626757][ T7441] hsr0 (unregistering): left promiscuous mode [ 157.764865][ T7401] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 157.824606][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 158.019210][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.089095][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.091394][ T7465] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 158.168434][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.217812][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.250623][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.341912][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.376576][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.441920][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.517359][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.604746][ T7459] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 158.741717][ T9] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 158.794883][ T9] hid-generic 0005:16C0:4155.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 158.824148][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 159.058138][ T5636] Bluetooth: hci0: command 0x080f tx timeout [ 160.008860][ T7572] 8021q: VLANs not supported on sit0 [ 160.034091][ T7576] 8021q: VLANs not supported on sit0 [ 160.035865][ T7574] siw: device registration error -23 [ 160.270431][ T7590] netlink: 256 bytes leftover after parsing attributes in process `syz.4.451'. [ 160.293602][ T7584] netlink: 9380 bytes leftover after parsing attributes in process `syz.1.447'. [ 160.413006][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 161.138306][ T5806] net_ratelimit: 14 callbacks suppressed [ 161.138324][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.877626][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.877819][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.017708][ T53] Bluetooth: hci0: command 0x080f tx timeout [ 162.019888][ T5636] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 162.177668][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.337806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.507740][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.657708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.977802][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.978099][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.217653][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.296849][ T7598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.414855][ T7628] ip6gre1: entered allmulticast mode [ 163.595405][ T7640] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.466'. [ 163.610148][ T7645] validate_nla: 7 callbacks suppressed [ 163.610168][ T7645] netlink: 'syz.1.463': attribute type 30 has an invalid length. [ 163.611781][ T7640] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 163.624359][ T7640] 0ªX¹¦Dö»: entered allmulticast mode [ 163.815188][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 163.883513][ T7651] netlink: 244 bytes leftover after parsing attributes in process `syz.1.470'. [ 163.884926][ T7651] netlink: 80 bytes leftover after parsing attributes in process `syz.1.470'. [ 163.909882][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 163.939005][ T7649] block nbd0: not configured, cannot reconfigure [ 164.094578][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.471'. [ 164.353050][ T7670] netlink: 'syz.0.474': attribute type 6 has an invalid length. [ 164.431968][ T5930] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 165.597032][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.484'. [ 166.287865][ T12] net_ratelimit: 6 callbacks suppressed [ 166.287886][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.288135][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.337718][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.317197][ T7676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.324883][ T7706] netlink: 'syz.2.482': attribute type 11 has an invalid length. [ 167.390002][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.390306][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.393140][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.636327][ T7727] netlink: 104 bytes leftover after parsing attributes in process `syz.1.485'. [ 167.968025][ T7759] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.017806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.252029][ T7780] sctp: [Deprecated]: syz.4.502 (pid 7780) Use of int in maxseg socket option. [ 168.252029][ T7780] Use struct sctp_assoc_value instead [ 168.300213][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 168.379905][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 168.417778][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.437159][ T7789] nftables ruleset with unbound set [ 168.440957][ T7789] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.445643][ T7791] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.736773][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 168.736793][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 169.538863][ T5636] Bluetooth: hci0: command 0x080f tx timeout [ 171.152025][ T7773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.409523][ T7809] can: request_module (can-proto-0) failed. [ 171.446500][ T7813] netlink: 'syz.3.510': attribute type 4 has an invalid length. [ 171.538474][ T7827] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 171.548158][ T44] net_ratelimit: 12 callbacks suppressed [ 171.548178][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.788820][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.789133][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.848804][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.514'. [ 171.930608][ T7837] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 171.954577][ T7841] netlink: 'syz.2.515': attribute type 16 has an invalid length. [ 171.954599][ T7841] netlink: 'syz.2.515': attribute type 17 has an invalid length. [ 171.993249][ T7841] 0ªX¹¦Dö»: left allmulticast mode [ 172.231705][ T7841] macvtap0: left allmulticast mode [ 172.231730][ T7841] veth0_macvtap: left allmulticast mode [ 172.252501][ T7841] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 172.274076][ T7841] ip6gre1: left allmulticast mode [ 172.305128][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.584784][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.677187][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 172.785763][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.901209][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.901523][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.439887][ T7912] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 173.439913][ T7912] netlink: 244 bytes leftover after parsing attributes in process `syz.1.530'. [ 173.567169][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 173.621261][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.659615][ T7927] netlink: 'syz.1.530': attribute type 4 has an invalid length. [ 173.659639][ T7927] netlink: 224 bytes leftover after parsing attributes in process `syz.1.530'. [ 173.663961][ T7927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.962283][ T7934] rdma_rxe: rxe_newlink: failed to add wg1 [ 174.044563][ T7941] ipvlan0: entered promiscuous mode [ 174.044652][ T7941] ipvlan0: entered allmulticast mode [ 174.044667][ T7941] veth0_vlan: entered allmulticast mode [ 174.055353][ T7937] netlink: 'syz.3.536': attribute type 4 has an invalid length. [ 174.126035][ T7941] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 174.375882][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 174.503382][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 174.649424][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.546'. [ 174.735539][ T7977] syzkaller0: entered promiscuous mode [ 174.735564][ T7977] syzkaller0: entered allmulticast mode [ 174.878491][ T7983] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 174.925766][ T7986] netlink: 'syz.2.554': attribute type 4 has an invalid length. [ 175.068177][ T7995] x_tables: duplicate underflow at hook 2 [ 175.092263][ T7993] team0: Device gtp0 is up. Set it down before adding it as a team port [ 175.161447][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.555'. [ 175.163044][ T8001] netlink: 140 bytes leftover after parsing attributes in process `syz.3.555'. [ 175.169497][ T8001] netlink: 84 bytes leftover after parsing attributes in process `syz.3.555'. [ 175.393832][ T8010] bond0: (slave sit0): Error: Device can not be enslaved while up [ 175.407653][ T8011] bond0: (slave sit0): Error: Device can not be enslaved while up [ 175.506171][ T8021] xt_socket: unknown flags 0x8 [ 175.531904][ T8021] xt_socket: unknown flags 0x8 [ 175.546378][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'. [ 175.546403][ T8025] netlink: 'syz.2.564': attribute type 6 has an invalid length. [ 176.043275][ T13] IPVS: starting estimator thread 0... [ 176.127599][ T8059] IPVS: using max 63 ests per chain, 151200 per kthread [ 176.737717][ T5806] net_ratelimit: 15 callbacks suppressed [ 176.737738][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.832470][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 177.367825][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.368107][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.777637][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.467982][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.468163][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.592090][ T8028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.818625][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.844301][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.576'. [ 178.898743][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.989444][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 179.105340][ T8092] erspan0: entered promiscuous mode [ 179.221740][ T8099] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 179.227012][ T8099] 0ªX¹¦Dö»: entered allmulticast mode [ 179.249578][ T8099] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 179.363167][ T8104] netlink: 'syz.4.582': attribute type 32 has an invalid length. [ 179.547190][ T8116] x_tables: duplicate underflow at hook 2 [ 179.568243][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.568558][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.637071][ T8120] __nla_validate_parse: 6 callbacks suppressed [ 179.637093][ T8120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.588'. [ 179.979161][ T8137] Bluetooth: MGMT ver 1.23 [ 179.999591][ T8139] netlink: 'syz.3.592': attribute type 6 has an invalid length. [ 180.616188][ T8157] syz.2.598 (8157) used greatest stack depth: 17248 bytes left [ 181.841674][ T8232] netlink: 'syz.3.618': attribute type 9 has an invalid length. [ 181.841699][ T8232] netlink: 'syz.3.618': attribute type 4 has an invalid length. [ 181.918639][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 181.997342][ T8242] net_ratelimit: 7 callbacks suppressed [ 181.998716][ T8242] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 182.000412][ T8242] IPVS: set_ctl: invalid protocol: 103 172.20.20.18:20004 [ 183.906325][ T8263] netlink: zone id is out of range [ 183.906363][ T8263] netlink: zone id is out of range [ 183.906371][ T8263] netlink: zone id is out of range [ 183.906379][ T8263] netlink: zone id is out of range [ 183.906386][ T8263] netlink: zone id is out of range [ 184.709998][ T8222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.722342][ T8233] netlink: 1 bytes leftover after parsing attributes in process `syz.1.613'. [ 185.420578][ T8292] tipc: New replicast peer: 255.255.255.255 [ 185.421860][ T8292] tipc: Enabled bearer , priority 10 [ 185.502764][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 185.502803][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 185.504538][ T8293] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 185.582014][ T8302] 8021q: VLANs not supported on wg2 [ 185.605706][ T8297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.633'. [ 185.735790][ T8306] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 186.082891][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.645'. [ 186.175027][ T8337] veth1_to_bridge: entered promiscuous mode [ 186.201850][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.250851][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 186.254824][ T8340] bridge2: entered promiscuous mode [ 186.254889][ T8340] bridge2: entered allmulticast mode [ 186.324873][ T8343] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.353246][ T8342] macvtap1: entered promiscuous mode [ 186.353273][ T8342] vlan0: entered promiscuous mode [ 186.353889][ T8342] macvtap1: entered allmulticast mode [ 186.353904][ T8342] vlan0: entered allmulticast mode [ 186.353915][ T8342] veth0_vlan: entered allmulticast mode [ 186.393815][ T8347] netlink: 244 bytes leftover after parsing attributes in process `syz.4.651'. [ 186.415059][ T8342] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 186.415085][ T8342] netlink: 'syz.1.650': attribute type 2 has an invalid length. [ 186.923080][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.662'. [ 187.065095][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 187.119807][ T8395] bond5: entered promiscuous mode [ 187.120627][ T8395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.180547][ T8395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.181063][ T8395] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 187.186815][ T8395] bond5: (slave sit1): Error -95 calling set_mac_address [ 187.204190][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.665'. [ 187.467061][ T8412] netlink: 'syz.3.667': attribute type 6 has an invalid length. [ 187.467085][ T8412] netlink: 'syz.3.667': attribute type 5 has an invalid length. [ 187.508747][ T8414] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 187.533244][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.549595][ T8414] bond0: (slave team0): Enslaving as an active interface with an up link [ 187.641884][ T8421] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 187.652433][ T8421] bond1 (unregistering): Released all slaves [ 187.719878][ T8418] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 187.724118][ T8418] bond1 (unregistering): Released all slaves [ 187.762120][ T8424] tipc: Started in network mode [ 187.762307][ T8424] tipc: Node identity b20e89fae57a, cluster identity 4711 [ 187.762854][ T8424] tipc: Enabled bearer , priority 10 [ 187.836859][ T8426] tipc: Enabling of bearer rejected, already enabled [ 187.894701][ T8416] tipc: Resetting bearer [ 187.993481][ T8416] tipc: Disabling bearer [ 188.122349][ T8442] ip_tables: iptables: counters copy to user failed while replacing table [ 189.405420][ T8529] tun0: tun_chr_ioctl cmd 1074025675 [ 189.405438][ T8529] tun0: persist disabled [ 189.804763][ T8544] __nla_validate_parse: 16 callbacks suppressed [ 189.804781][ T8544] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.700'. [ 189.971561][ T8550] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 189.991514][ T8550] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.692365][ T8478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.918909][ T8557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.922286][ T8560] x_tables: duplicate underflow at hook 2 [ 191.923011][ T8560] C: renamed from lo (while UP) [ 191.930091][ T8557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.964638][ T8560] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.041606][ T8568] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 192.044976][ T8568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.709'. [ 192.054642][ T8570] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 192.063330][ T8571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.709'. [ 192.325675][ T5636] Bluetooth: hci1: connection err: -111 [ 192.477896][ T8594] xfrm1: entered allmulticast mode [ 192.520973][ T8597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.713'. [ 192.525421][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.713'. [ 192.952113][ T8619] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.127895][ T8625] netlink: 100 bytes leftover after parsing attributes in process `syz.3.719'. [ 193.239933][ T8633] netlink: 72 bytes leftover after parsing attributes in process `syz.1.721'. [ 193.259193][ T5930] IPVS: starting estimator thread 0... [ 193.348426][ T8636] IPVS: using max 28 ests per chain, 67200 per kthread [ 193.387217][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 193.477070][ T8641] bridge4: entered allmulticast mode [ 193.595459][ T8648] netlink: 288 bytes leftover after parsing attributes in process `syz.2.725'. [ 193.673654][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 193.673691][ T8658] netlink: 'syz.3.727': attribute type 30 has an invalid length. [ 193.732506][ T8662] bridge0: port 3(syz_tun) entered blocking state [ 193.732673][ T8662] bridge0: port 3(syz_tun) entered disabled state [ 193.732806][ T8662] syz_tun: entered allmulticast mode [ 193.734938][ T8662] syz_tun: entered promiscuous mode [ 193.763035][ T8662] bridge0: port 3(syz_tun) entered blocking state [ 193.763184][ T8662] bridge0: port 3(syz_tun) entered forwarding state [ 193.769339][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.770234][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.770267][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.770298][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.805446][ T8658] netlink: 'syz.3.727': attribute type 30 has an invalid length. [ 194.342514][ T8689] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 194.350856][ T8688] ip_tables: iptables: counters copy to user failed while replacing table [ 194.392511][ T8692] netlink: 'syz.1.736': attribute type 10 has an invalid length. [ 194.396082][ T8694] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 194.663329][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.853632][ T8718] bond2: option lp_interval: invalid value (0) [ 194.853659][ T8718] bond2: option lp_interval: allowed values 1 - 2147483647 [ 194.871146][ T8718] bond2 (unregistering): Released all slaves [ 194.984465][ T8722] __nla_validate_parse: 2 callbacks suppressed [ 194.984487][ T8722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.745'. [ 194.985728][ T8723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.745'. [ 195.231800][ T8737] x_tables: duplicate underflow at hook 3 [ 195.319895][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 195.621570][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 195.651297][ T8763] xt_policy: neither incoming nor outgoing policy selected [ 195.789122][ T8768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.763'. [ 195.789152][ T8768] netlink: 43 bytes leftover after parsing attributes in process `syz.0.763'. [ 195.789168][ T8768] netlink: 'syz.0.763': attribute type 6 has an invalid length. [ 195.789181][ T8768] netlink: 'syz.0.763': attribute type 5 has an invalid length. [ 195.789193][ T8768] netlink: 43 bytes leftover after parsing attributes in process `syz.0.763'. [ 195.973192][ T12] IPVS: starting estimator thread 0... [ 195.990831][ T8777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 195.990869][ T8777] netlink: 92 bytes leftover after parsing attributes in process `syz.0.764'. [ 196.021802][ T8776] bridge5: entered promiscuous mode [ 196.021884][ T8776] bridge5: entered allmulticast mode [ 196.045371][ T8776] bridge6: entered promiscuous mode [ 196.045399][ T8776] bridge6: entered allmulticast mode [ 196.067579][ T8782] IPVS: using max 28 ests per chain, 67200 per kthread [ 196.087152][ T8776] bridge7: entered promiscuous mode [ 196.087216][ T8776] bridge7: entered allmulticast mode [ 196.110385][ T8776] bridge8: entered promiscuous mode [ 196.110448][ T8776] bridge8: entered allmulticast mode [ 196.135248][ T8776] bridge9: entered promiscuous mode [ 196.135321][ T8776] bridge9: entered allmulticast mode [ 196.162010][ T8776] bridge10: entered promiscuous mode [ 196.162080][ T8776] bridge10: entered allmulticast mode [ 196.185459][ T8776] bridge11: entered promiscuous mode [ 196.185522][ T8776] bridge11: entered allmulticast mode [ 196.210052][ T8776] bridge12: entered promiscuous mode [ 196.210116][ T8776] bridge12: entered allmulticast mode [ 196.235205][ T8776] bridge13: entered promiscuous mode [ 196.235267][ T8776] bridge13: entered allmulticast mode [ 196.269181][ T8776] bridge14: entered promiscuous mode [ 196.269246][ T8776] bridge14: entered allmulticast mode [ 196.291992][ T8776] bridge15: entered promiscuous mode [ 196.292018][ T8776] bridge15: entered allmulticast mode [ 196.386344][ T8776] bridge16: entered promiscuous mode [ 196.386413][ T8776] bridge16: entered allmulticast mode [ 196.387197][ T8790] bond0: entered allmulticast mode [ 196.387220][ T8790] wireguard0: entered allmulticast mode [ 196.440397][ T8776] bridge17: entered promiscuous mode [ 196.440424][ T8776] bridge17: entered allmulticast mode [ 196.468300][ T8776] bridge18: entered promiscuous mode [ 196.468327][ T8776] bridge18: entered allmulticast mode [ 196.604376][ T8788] bond0: left allmulticast mode [ 196.604403][ T8788] wireguard0: left allmulticast mode [ 196.671043][ T8776] bridge19: entered promiscuous mode [ 196.671098][ T8776] bridge19: entered allmulticast mode [ 196.723436][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 196.756010][ T8776] bridge20: entered promiscuous mode [ 196.756036][ T8776] bridge20: entered allmulticast mode [ 196.810314][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.856659][ T8776] bridge21: entered promiscuous mode [ 196.856686][ T8776] bridge21: entered allmulticast mode [ 196.893339][ T8812] tipc: Can't bind to reserved service type 2 [ 197.533015][ T8843] sctp: [Deprecated]: syz.1.778 (pid 8843) Use of int in max_burst socket option. [ 197.533015][ T8843] Use struct sctp_assoc_value instead [ 197.666670][ T8862] netlink: 'syz.4.782': attribute type 21 has an invalid length. [ 197.666734][ T8862] netlink: 'syz.4.782': attribute type 6 has an invalid length. [ 197.747161][ T8867] netlink: 'syz.2.785': attribute type 1 has an invalid length. [ 197.862276][ T8871] nftables ruleset with unbound chain [ 198.069304][ T8880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.124111][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.175872][ T8880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.176957][ T8880] trusted_key: syz.3.791 sent an empty control message without MSG_MORE. [ 198.230341][ T8882] ip_tables: iptables: counters copy to user failed while replacing table [ 198.262029][ T8887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.264537][ T8887] netlink: 'syz.0.793': attribute type 2 has an invalid length. [ 198.900567][ T8918] macvtap1: entered promiscuous mode [ 198.900595][ T8918] vlan0: entered promiscuous mode [ 198.901139][ T8918] macvtap1: entered allmulticast mode [ 198.901154][ T8918] vlan0: entered allmulticast mode [ 199.034073][ T8927] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 199.134983][ T8925] netlink: 'syz.4.807': attribute type 11 has an invalid length. [ 199.445094][ T8943] netlink: 'syz.4.813': attribute type 3 has an invalid length. [ 201.208132][ T8991] __nla_validate_parse: 10 callbacks suppressed [ 201.208150][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 201.208165][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 202.585890][ T8952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.603289][ T8988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.823'. [ 202.603313][ T8988] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 202.968562][ T9012] netlink: 'syz.4.830': attribute type 2 has an invalid length. [ 203.785823][ T5298] veth1_vlan: left promiscuous mode [ 203.902958][ T9050] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 203.920897][ T9050] bond17 (unregistering): Released all slaves [ 203.954509][ T9059] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 204.018970][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.184358][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.184654][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.187242][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.212656][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.215012][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.215277][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.215516][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.215760][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.244684][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.244928][ T9067] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 204.301143][ T51] IPVS: starting estimator thread 0... [ 204.392162][ T9088] IPVS: using max 27 ests per chain, 64800 per kthread [ 205.622676][ T9162] syzkaller1: entered promiscuous mode [ 205.622703][ T9162] syzkaller1: entered allmulticast mode [ 205.899796][ T9172] bond5: entered allmulticast mode [ 205.901036][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 205.948060][ T51] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.948113][ T51] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.948149][ T51] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.948184][ T51] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.953721][ T9167] bond5: left allmulticast mode [ 206.558603][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 206.581097][ T9195] netlink: 224 bytes leftover after parsing attributes in process `syz.4.873'. [ 206.604541][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 206.606371][ T9195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.634534][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 206.811295][ T9214] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 206.915316][ T9216] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.937097][ T9219] ip_tables: iptables: counters copy to user failed while replacing table [ 206.941527][ T9216] team0: No ports can be present during mode change [ 206.977538][ T5655] Bluetooth: hci4: command 0x0406 tx timeout [ 206.978342][ T5655] Bluetooth: hci1: command 0x0406 tx timeout [ 206.978390][ T5655] Bluetooth: hci0: command 0x080f tx timeout [ 206.978417][ T5655] Bluetooth: hci2: command 0x0406 tx timeout [ 207.214395][ T9229] netlink: Conntrack attr has 8 unknown bytes [ 207.414212][ T9246] netlink: 9 bytes leftover after parsing attributes in process `syz.3.884'. [ 207.414420][ T9246] 0·: renamed from hsr0 (while UP) [ 207.441943][ T9246] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 207.635240][ T9260] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.791783][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 207.828282][ T9269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.875873][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 207.947616][ T9274] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003 [ 208.092915][ T9278] syzkaller0: entered promiscuous mode [ 208.092940][ T9278] syzkaller0: entered allmulticast mode [ 208.149263][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 208.367193][ T9289] ip6erspan0: entered promiscuous mode [ 208.435716][ T9294] syz_tun: entered allmulticast mode [ 208.490895][ T9292] syz_tun: left allmulticast mode [ 208.516915][ T9296] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 209.055459][ T9330] netlink: 598 bytes leftover after parsing attributes in process `syz.0.909'. [ 209.184171][ T9332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.909'. [ 209.262666][ T9337] Cannot find add_set index 4 as target [ 209.314366][ T9336] Cannot find add_set index 4 as target [ 210.085154][ T9364] block nbd0: not configured, cannot reconfigure [ 210.217688][ T5636] Bluetooth: hci2: Malformed Event: 0x02 [ 210.405534][ T9382] validate_nla: 29 callbacks suppressed [ 210.405556][ T9382] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 210.405568][ T9382] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 211.652671][ T9436] __nla_validate_parse: 5 callbacks suppressed [ 211.652698][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'. [ 213.633981][ T9392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.652260][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 213.703093][ T9434] netlink: 'syz.4.932': attribute type 2 has an invalid length. [ 213.822370][ T9440] netlink: 'syz.2.934': attribute type 25 has an invalid length. [ 213.969417][ T9451] ip_tables: iptables: counters copy to user failed while replacing table [ 214.222750][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 214.226946][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 214.276177][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 214.278354][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 214.332744][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 214.600895][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 215.786506][ T9536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.957'. [ 215.786525][ T9536] netlink: 11 bytes leftover after parsing attributes in process `syz.1.957'. [ 215.854419][ T9538] sctp: [Deprecated]: syz.1.958 (pid 9538) Use of int in max_burst socket option. [ 215.854419][ T9538] Use struct sctp_assoc_value instead [ 216.048505][ T9548] hsr_slave_0: left promiscuous mode [ 216.049071][ T9548] hsr_slave_1: left promiscuous mode [ 216.224151][ T10] wg1 speed is unknown, defaulting to 1000 [ 216.304759][ T9560] bridge_slave_0: entered promiscuous mode [ 216.456661][ T9565] xt_l2tp: v2 doesn't support IP mode [ 217.595531][ T9491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.986779][ T9622] __nla_validate_parse: 2 callbacks suppressed [ 217.986803][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 218.209830][ T9630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.976'. [ 218.302239][ T9646] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 218.302264][ T9646] netlink: 224 bytes leftover after parsing attributes in process `syz.3.979'. [ 218.361494][ T9648] syzkaller0: entered promiscuous mode [ 218.361519][ T9648] syzkaller0: entered allmulticast mode [ 219.000364][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 219.091114][ T9685] netlink: 14 bytes leftover after parsing attributes in process `syz.1.991'. [ 219.372652][ T5636] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 219.397802][ T5636] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 219.515396][ T9700] netlink: 'syz.2.997': attribute type 4 has an invalid length. [ 219.515423][ T9700] netlink: 'syz.2.997': attribute type 10 has an invalid length. [ 219.515437][ T9700] netlink: 152 bytes leftover after parsing attributes in process `syz.2.997'. [ 219.515548][ T9700] bond_slave_0: mtu greater than device maximum [ 219.587113][ T9700] netlink: 'syz.2.997': attribute type 10 has an invalid length. [ 219.770164][ T9700] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 219.787014][ T9700] team0: Device wlan0 failed to register rx_handler [ 219.845438][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1000'. [ 220.113062][ T9737] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 220.127788][ T9733] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 220.128775][ T9733] xt_hl: Unknown Hop Limit match mode: 206 [ 220.241097][ T9737] bond3: entered promiscuous mode [ 220.241574][ T9737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.355965][ T9737] macvtap1: entered allmulticast mode [ 220.368427][ T9735] syzkaller0: entered promiscuous mode [ 220.368451][ T9735] syzkaller0: entered allmulticast mode [ 220.373449][ T9735] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1006'. [ 220.373475][ T9735] nbd: illegal input index 65508 [ 220.449971][ T9737] bond3: (slave bridge3): making interface the new active one [ 220.449998][ T9737] bridge3: entered promiscuous mode [ 220.461874][ T9737] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 220.477528][ T9735] tipc: Started in network mode [ 220.477561][ T9735] tipc: Node identity 1aa86c642004, cluster identity 4711 [ 220.477888][ T9735] tipc: Enabled bearer , priority 0 [ 220.553804][ T9744] tipc: Resetting bearer [ 220.601800][ T9744] tipc: Disabling bearer [ 220.865547][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 221.107675][ T9783] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1018'. [ 221.910554][ T9835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.260799][ T9856] Bluetooth: hci0: unsupported parameter 5134 [ 222.260822][ T9856] Bluetooth: hci0: unsupported parameter 8192 [ 222.260834][ T9856] Bluetooth: hci0: unsupported parameter 5134 [ 222.260874][ T9856] Bluetooth: hci0: unsupported parameter 8192 [ 222.401371][ T9869] Bluetooth: ISO socket layer initialized [ 222.421791][ T9865] 8021q: adding VLAN 0 to HW filter on device bond7 [ 222.422988][ T9865] bond0: (slave bond7): Enslaving as an active interface with an up link [ 222.449676][ T9865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.451301][ T9865] bond0: (slave bond8): Enslaving as an active interface with an up link [ 222.477119][ T9865] 8021q: adding VLAN 0 to HW filter on device bond9 [ 222.479481][ T9865] bond0: (slave bond9): Enslaving as an active interface with an up link [ 222.535338][ T9865] 8021q: adding VLAN 0 to HW filter on device bond10 [ 222.538252][ T9865] bond0: (slave bond10): Enslaving as an active interface with an up link [ 222.574812][ T9865] 8021q: adding VLAN 0 to HW filter on device bond11 [ 222.577239][ T9865] bond0: (slave bond11): Enslaving as an active interface with an up link [ 222.613959][ T9865] 8021q: adding VLAN 0 to HW filter on device bond12 [ 222.616573][ T9865] bond0: (slave bond12): Enslaving as an active interface with an up link [ 222.657260][ T9865] 8021q: adding VLAN 0 to HW filter on device bond13 [ 222.659247][ T9865] bond0: (slave bond13): Enslaving as an active interface with an up link [ 222.700517][ T9865] 8021q: adding VLAN 0 to HW filter on device bond14 [ 222.702070][ T9865] bond0: (slave bond14): Enslaving as an active interface with an up link [ 222.732090][ T9865] 8021q: adding VLAN 0 to HW filter on device bond15 [ 222.733444][ T9865] bond0: (slave bond15): Enslaving as an active interface with an up link [ 222.769436][ T9865] 8021q: adding VLAN 0 to HW filter on device bond16 [ 222.770793][ T9865] bond0: (slave bond16): Enslaving as an active interface with an up link [ 222.789890][ T9865] 8021q: adding VLAN 0 to HW filter on device bond17 [ 222.791914][ T9865] bond0: (slave bond17): Enslaving as an active interface with an up link [ 222.820667][ T9865] 8021q: adding VLAN 0 to HW filter on device bond18 [ 222.822944][ T9865] bond0: (slave bond18): Enslaving as an active interface with an up link [ 222.847884][ T9865] 8021q: adding VLAN 0 to HW filter on device bond19 [ 222.849418][ T9865] bond0: (slave bond19): Enslaving as an active interface with an up link [ 222.869226][ T9865] 8021q: adding VLAN 0 to HW filter on device bond20 [ 222.872664][ T9865] bond0: (slave bond20): Enslaving as an active interface with an up link [ 222.901123][ T9865] 8021q: adding VLAN 0 to HW filter on device bond21 [ 222.902420][ T9865] bond0: (slave bond21): Enslaving as an active interface with an up link [ 222.922714][ T9865] 8021q: adding VLAN 0 to HW filter on device bond22 [ 222.926818][ T9865] bond0: (slave bond22): Enslaving as an active interface with an up link [ 222.953348][ T9865] 8021q: adding VLAN 0 to HW filter on device bond23 [ 222.954724][ T9865] bond0: (slave bond23): Enslaving as an active interface with an up link [ 222.986158][ T9865] 8021q: adding VLAN 0 to HW filter on device bond24 [ 222.987512][ T9865] bond0: (slave bond24): Enslaving as an active interface with an up link [ 223.015986][ T9865] 8021q: adding VLAN 0 to HW filter on device bond25 [ 223.018509][ T9865] bond0: (slave bond25): Enslaving as an active interface with an up link [ 223.055453][ T9865] 8021q: adding VLAN 0 to HW filter on device bond26 [ 223.056671][ T9865] bond0: (slave bond26): Enslaving as an active interface with an up link [ 223.090301][ T9865] 8021q: adding VLAN 0 to HW filter on device bond27 [ 223.091780][ T9865] bond0: (slave bond27): Enslaving as an active interface with an up link [ 223.113706][ T9865] 8021q: adding VLAN 0 to HW filter on device bond28 [ 223.115298][ T9865] bond0: (slave bond28): Enslaving as an active interface with an up link [ 223.145967][ T9865] 8021q: adding VLAN 0 to HW filter on device bond29 [ 223.147331][ T9865] bond0: (slave bond29): Enslaving as an active interface with an up link [ 223.176636][ T9865] 8021q: adding VLAN 0 to HW filter on device bond30 [ 223.185747][ T9865] bond0: (slave bond30): Enslaving as an active interface with an up link [ 223.209171][ T9865] 8021q: adding VLAN 0 to HW filter on device bond31 [ 223.210393][ T9865] bond0: (slave bond31): Enslaving as an active interface with an up link [ 223.227015][ T9865] 8021q: adding VLAN 0 to HW filter on device bond32 [ 223.230132][ T9865] bond0: (slave bond32): Enslaving as an active interface with an up link [ 223.254705][ T9865] 8021q: adding VLAN 0 to HW filter on device bond33 [ 223.255735][ T9865] bond0: (slave bond33): Enslaving as an active interface with an up link [ 224.447322][ T9802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.602714][ T9903] __nla_validate_parse: 7 callbacks suppressed [ 224.602736][ T9903] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1036'. [ 224.670254][ T9910] netlink: 'syz.2.1037': attribute type 1 has an invalid length. [ 224.729449][ T9905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.773578][ T9913] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 224.800011][ T9905] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1035'. [ 224.801549][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'. [ 225.280123][ T9952] Bluetooth: MGMT ver 1.23 [ 225.429565][ T9963] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1046'. [ 225.568351][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1053'. [ 225.655422][ T9973] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1054'. [ 225.693428][ T9975] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1055'. [ 225.703481][ T9975] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1055'. [ 225.755314][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1056'. [ 225.853471][ T9988] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 226.022770][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 226.025481][T10000] netlink: 'syz.4.1060': attribute type 10 has an invalid length. [ 226.401588][T10016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.005137][T10049] xt_bpf: check failed: parse error [ 227.177021][T10059] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.332544][T10067] netlink: 'syz.2.1081': attribute type 2 has an invalid length. [ 227.374340][T10066] batman_adv: batadv0: Adding interface: veth0 [ 227.374360][T10066] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.374400][T10066] batman_adv: batadv0: Interface activated: veth0 [ 227.380669][T10066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.380693][T10066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.401395][T10066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.401419][T10066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.410962][T10066] batman_adv: batadv0: Interface deactivated: veth0 [ 227.410987][T10066] batman_adv: batadv0: Removing interface: veth0 [ 227.912087][T10091] Cannot find set identified by id 4 to match [ 228.360648][T10111] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 228.404147][T10111] bridge0: port 4(veth1_to_bridge) entered blocking state [ 228.404352][T10111] bridge0: port 4(veth1_to_bridge) entered disabled state [ 228.404503][T10111] veth1_to_bridge: entered allmulticast mode [ 228.411850][T10111] veth1_to_bridge: entered promiscuous mode [ 228.412026][T10111] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 228.412598][T10111] bridge0: port 4(veth1_to_bridge) entered blocking state [ 228.412702][T10111] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 228.489283][T10114] ip_tables: iptables: counters copy to user failed while replacing table [ 228.493504][T10120] ip_tables: iptables: counters copy to user failed while replacing table [ 228.712293][T10113] bond4: option fail_over_mac: invalid value (23) [ 228.718625][T10113] bond4 (unregistering): Released all slaves [ 228.826569][T10142] ip_tables: iptables: counters copy to user failed while replacing table [ 229.563654][T10163] udevd[10163]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 229.612945][T10185] __nla_validate_parse: 19 callbacks suppressed [ 229.612965][T10185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1113'. [ 229.619029][T10183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1113'. [ 229.753440][T10192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1115'. [ 229.825427][T10195] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 230.158540][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'. [ 230.158567][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 230.294312][T10215] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1123'. [ 230.464730][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.464861][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.464924][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.464964][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465004][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465044][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465084][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465121][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465160][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465210][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465252][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465291][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465333][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465372][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465412][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465450][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465489][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465530][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465570][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465608][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465646][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465685][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465723][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465764][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465804][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465842][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465882][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465923][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.465962][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.556393][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.556440][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.556477][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.556511][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 230.603867][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 230.603890][T10254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.603907][T10254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.613940][T10254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.613962][T10254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.812560][T10261] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1133'. [ 230.828972][T10263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1134'. [ 230.871758][T10265] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1133'. [ 231.857588][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 233.406004][T10234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.439487][T10268] netlink: 'syz.2.1135': attribute type 11 has an invalid length. [ 233.587319][T10273] netlink: 'syz.4.1136': attribute type 2 has an invalid length. [ 233.989374][T10295] openvswitch: netlink: Flow key attr not present in new flow. [ 234.383442][T10321] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 234.386180][T10309] netlink: 'syz.1.1144': attribute type 8 has an invalid length. [ 235.112571][T10355] __nla_validate_parse: 3 callbacks suppressed [ 235.112594][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1153'. [ 235.557761][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1154'. [ 236.975731][T10297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.282933][T10399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1160'. [ 237.544295][T10416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1163'. [ 237.559574][T10419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1163'. [ 237.894647][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 237.894673][T10434] netlink: 5740 bytes leftover after parsing attributes in process `syz.1.1167'. [ 238.062061][T10442] tipc: Enabling of bearer rejected, failed to enable media [ 238.203571][T10452] netlink: 'syz.4.1170': attribute type 33 has an invalid length. [ 238.481566][T10456] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 238.541210][T10459] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1171'. [ 238.541241][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1171'. [ 238.542941][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1171'. [ 238.816405][T10476] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 238.816405][T10476] Please contact the netfilter-devel mailing list or update your nftables rules. [ 240.096259][T10452] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 240.098321][T10456] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR [ 240.274121][T10498] bridge_slave_0: default FDB implementation only supports local addresses [ 240.297193][T10493] __nla_validate_parse: 4 callbacks suppressed [ 240.297213][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 240.301736][T10505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1180'. [ 240.746494][T10522] Bluetooth: hci0: unsupported parameter 5134 [ 240.746520][T10522] Bluetooth: hci0: unsupported parameter 8192 [ 240.746533][T10522] Bluetooth: hci0: unsupported parameter 5134 [ 240.746546][T10522] Bluetooth: hci0: unsupported parameter 8192 [ 240.885325][T10530] xt_hl: Unknown Hop Limit match mode: 206 [ 240.886624][T10532] netlink: 'syz.3.1188': attribute type 28 has an invalid length. [ 240.886644][T10532] netlink: 'syz.3.1188': attribute type 3 has an invalid length. [ 240.886656][T10532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1188'. [ 240.888991][T10530] netlink: 'syz.3.1188': attribute type 28 has an invalid length. [ 240.889008][T10530] netlink: 'syz.3.1188': attribute type 3 has an invalid length. [ 240.889019][T10530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1188'. [ 240.950923][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 240.950953][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 240.974813][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 240.974890][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1187'. [ 241.016342][T10532] : entered promiscuous mode [ 241.268278][T10539] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 241.501719][T10547] ip6t_ah: unknown flags 5 [ 242.817607][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 244.273653][T10562] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1193'. [ 244.332079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.332102][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.390108][T10562] netlink: 'syz.0.1193': attribute type 2 has an invalid length. [ 244.904485][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1203'. [ 245.008778][ T62] bond0: (slave bond7): link status definitely down, disabling slave [ 245.013523][ T62] bond0: (slave bond8): link status definitely down, disabling slave [ 245.013743][ T62] bond0: (slave bond9): link status definitely down, disabling slave [ 245.013954][ T62] bond0: (slave bond10): link status definitely down, disabling slave [ 245.014131][ T62] bond0: (slave bond11): link status definitely down, disabling slave [ 245.055797][ T62] bond0: (slave bond12): link status definitely down, disabling slave [ 245.056042][ T62] bond0: (slave bond13): link status definitely down, disabling slave [ 245.056213][ T62] bond0: (slave bond14): link status definitely down, disabling slave [ 245.056435][ T62] bond0: (slave bond15): link status definitely down, disabling slave [ 245.056663][ T62] bond0: (slave bond16): link status definitely down, disabling slave [ 245.061400][ T62] bond0: (slave bond17): link status definitely down, disabling slave [ 245.061649][ T62] bond0: (slave bond18): link status definitely down, disabling slave [ 245.061847][ T62] bond0: (slave bond19): link status definitely down, disabling slave [ 245.062000][ T62] bond0: (slave bond20): link status definitely down, disabling slave [ 245.062151][ T62] bond0: (slave bond21): link status definitely down, disabling slave [ 245.062416][ T62] bond0: (slave bond22): link status definitely down, disabling slave [ 245.062611][ T62] bond0: (slave bond23): link status definitely down, disabling slave [ 245.062822][ T62] bond0: (slave bond24): link status definitely down, disabling slave [ 245.063074][ T62] bond0: (slave bond25): link status definitely down, disabling slave [ 245.063234][ T62] bond0: (slave bond26): link status definitely down, disabling slave [ 245.063587][ T62] bond0: (slave bond27): link status definitely down, disabling slave [ 245.063763][ T62] bond0: (slave bond28): link status definitely down, disabling slave [ 245.063924][ T62] bond0: (slave bond29): link status definitely down, disabling slave [ 245.064076][ T62] bond0: (slave bond30): link status definitely down, disabling slave [ 245.064296][ T62] bond0: (slave bond31): link status definitely down, disabling slave [ 245.064449][ T62] bond0: (slave bond32): link status definitely down, disabling slave [ 245.064823][ T62] bond0: (slave bond33): link status definitely down, disabling slave [ 245.440971][T10602] udevd[10602]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 245.452403][T10615] __nla_validate_parse: 2 callbacks suppressed [ 245.452421][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 245.454013][T10569] udevd[10569]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 245.489672][T10614] batman_adv: batadv0: Adding interface: veth0 [ 245.489691][T10614] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.489720][T10614] batman_adv: batadv0: Interface activated: veth0 [ 245.760931][T10629] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 245.885186][T10634] syzkaller0: entered promiscuous mode [ 245.885222][T10634] syzkaller0: entered allmulticast mode [ 245.933019][T10629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1213'. [ 246.299765][T10648] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 246.319997][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1218'. [ 246.769419][T10662] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1219'. [ 246.769448][T10662] nbd: illegal input index -8454144 [ 246.952387][T10667] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 246.976551][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 246.988710][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 247.043015][T10669] bond34: (slave gretap1): making interface the new active one [ 247.056382][T10669] bond34: (slave gretap1): Enslaving as an active interface with an up link [ 247.073025][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 247.076585][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 247.221805][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'. [ 247.515996][T10702] 0: reclassify loop, rule prio 0, protocol 03 [ 247.622460][T10710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1231'. [ 248.079344][T10730] tipc: Enabling of bearer rejected, failed to enable media [ 248.532471][T10738] vlan0 (unregistering): left allmulticast mode [ 248.532502][T10738] vlan0 (unregistering): left promiscuous mode [ 249.413179][T10771] netlink: 'syz.2.1247': attribute type 14 has an invalid length. [ 249.432524][T10764] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 249.532025][T10771] netlink: 'syz.2.1247': attribute type 14 has an invalid length. [ 250.191416][T10809] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 250.332919][T10809] bond4: entered promiscuous mode [ 250.336514][T10809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.397888][T10810] bond4: (slave bridge4): making interface the new active one [ 250.397918][T10810] bridge4: entered promiscuous mode [ 250.406731][T10810] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 250.424284][T10814] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 250.424308][T10814] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 250.491446][T10779] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 250.609294][T10823] block nbd1: Unsupported socket: should be TCP or UNIX. [ 250.693184][T10833] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 250.744404][T10833] bond20: entered promiscuous mode [ 250.750512][T10833] 8021q: adding VLAN 0 to HW filter on device bond20 [ 250.772600][T10833] __nla_validate_parse: 39 callbacks suppressed [ 250.772625][T10833] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1257'. [ 250.806621][T10833] tipc: Started in network mode [ 250.806656][T10833] tipc: Node identity 9aa062180d49, cluster identity 4711 [ 250.806895][T10833] tipc: Enabled bearer , priority 0 [ 250.869368][T10836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1257'. [ 251.002345][T10833] syzkaller0: entered promiscuous mode [ 251.002374][T10833] syzkaller0: entered allmulticast mode [ 251.003168][T10833] tipc: Resetting bearer [ 251.003398][T10838] netlink: 'syz.4.1259': attribute type 12 has an invalid length. [ 251.003415][T10838] netlink: 'syz.4.1259': attribute type 29 has an invalid length. [ 251.003428][T10838] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1259'. [ 251.003448][T10838] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1259'. [ 251.003842][T10831] tipc: Resetting bearer [ 251.092363][T10831] syzkaller0: left promiscuous mode [ 251.697743][ T53] Bluetooth: hci0: command 0x080f tx timeout [ 252.086353][T10871] netlink: 'syz.3.1267': attribute type 1 has an invalid length. [ 252.995154][T10821] tipc: Disabling bearer [ 253.030370][T10847] syzkaller0: entered promiscuous mode [ 253.030393][T10847] syzkaller0: entered allmulticast mode [ 254.769796][ T991] tipc: Node number set to 2548654616 [ 255.277900][T10921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1278'. [ 255.431716][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1284'. [ 255.568785][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 255.710814][T10956] netlink: 'syz.4.1288': attribute type 7 has an invalid length. [ 255.784420][ T29] audit: type=1804 audit(1793698474.153:5): pid=10959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1289" name="/newroot/251/cgroup.controllers" dev="tmpfs" ino=1303 res=1 errno=0 [ 255.784480][ T29] audit: type=1800 audit(1793698474.153:6): pid=10959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1289" name="cgroup.controllers" dev="tmpfs" ino=1303 res=0 errno=-22 [ 256.037185][T10973] netlink: 'syz.4.1294': attribute type 1 has an invalid length. [ 256.039546][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 256.042495][T10976] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1294'. [ 256.076599][T10971] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1293'. [ 256.100218][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.513250][T10998] Bluetooth: MGMT ver 1.23 [ 256.567184][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 256.567214][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 256.601705][T11001] syzkaller1: entered promiscuous mode [ 256.601726][T11001] syzkaller1: entered allmulticast mode [ 256.612174][T11004] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1303'. [ 256.653441][T11007] netlink: 'syz.0.1304': attribute type 11 has an invalid length. [ 256.742720][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1305'. [ 257.101480][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 257.101511][T11030] netlink: 5740 bytes leftover after parsing attributes in process `syz.1.1311'. [ 257.225911][T11033] syzkaller0: entered promiscuous mode [ 257.225937][T11033] syzkaller0: entered allmulticast mode [ 257.247987][T11033] 0: reclassify loop, rule prio 0, protocol 800 [ 257.285007][T11039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.347065][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'. [ 257.351603][T11037] ip_tables: iptables: counters copy to user failed while replacing table [ 257.351826][T11041] ip_tables: iptables: counters copy to user failed while replacing table [ 257.421732][T11043] tipc: Enabling of bearer rejected, failed to enable media [ 257.566326][T11048] can: request_module (can-proto-0) failed. [ 258.115237][T11079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 258.115492][T11080] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 258.823332][T11128] netlink: 'syz.3.1331': attribute type 7 has an invalid length. [ 259.290370][T11141] bond0: left promiscuous mode [ 259.290398][T11141] wireguard0: left promiscuous mode [ 259.297595][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 259.375795][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.376935][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.395880][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.396066][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.396211][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.396340][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.397130][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.397298][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.443011][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.443153][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.523710][ T51] nci: nci_rsp_packet: unknown rsp opcode 0x102 [ 260.801356][T11224] ip_tables: iptables: counters copy to user failed while replacing table [ 260.940190][T11228] openvswitch: netlink: Flow key attr not present in new flow. [ 262.416387][T11153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.648643][T11238] ip_tables: iptables: counters copy to user failed while replacing table [ 262.813036][T11235] __nla_validate_parse: 43 callbacks suppressed [ 262.813059][T11235] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1360'. [ 262.943916][T11250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1362'. [ 262.943989][T11250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1362'. [ 263.091002][T11254] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 263.133916][T11254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.173208][T11254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1364'. [ 263.195802][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 263.210899][T11258] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 263.395569][T11270] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 263.471092][T11271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1369'. [ 263.472848][T11277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1369'. [ 263.522213][T11270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.535420][T11281] sctp: [Deprecated]: syz.1.1372 (pid 11281) Use of int in maxseg socket option. [ 263.535420][T11281] Use struct sctp_assoc_value instead [ 263.554462][T11270] veth1_to_bond: entered allmulticast mode [ 263.561848][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 263.665961][T11268] veth1_to_bond: left allmulticast mode [ 263.836273][T11298] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 263.864353][T11301] netlink: 'syz.0.1374': attribute type 10 has an invalid length. [ 263.864376][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1374'. [ 263.925012][T11298] bond23: option mode: invalid value (13) [ 263.945295][T11298] bond23 (unregistering): Released all slaves [ 263.998687][ T62] IPVS: starting estimator thread 0... [ 264.030977][T11301] dummy0: entered promiscuous mode [ 264.127484][T11313] IPVS: using max 29 ests per chain, 69600 per kthread [ 264.287785][T11323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1384'. [ 264.867804][T11343] netlink: 'syz.3.1390': attribute type 10 has an invalid length. [ 264.903304][T11343] netlink: 'syz.3.1390': attribute type 10 has an invalid length. [ 265.285635][ T53] block nbd1: Receive control failed (result -107) [ 265.690817][T11384] tun0: tun_chr_ioctl cmd 1074025675 [ 265.690878][T11384] tun0: persist disabled [ 265.716139][T11382] nft_compat: unsupported protocol 0 [ 266.455804][ T53] Bluetooth: hci2: connection err: -111 [ 266.715083][T11427] netlink: 'syz.2.1410': attribute type 4 has an invalid length. [ 266.941722][T11437] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 266.998995][T11439] netlink: 'syz.4.1413': attribute type 10 has an invalid length. [ 267.030748][T11437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.063432][T11439] dummy0: entered promiscuous mode [ 267.155199][T11445] bond4: invalid ARP target 0.0.0.0 specified for addition [ 267.155228][T11445] bond4: option arp_ip_target: invalid value (0) [ 267.161166][T11445] bond4 (unregistering): Released all slaves [ 267.747129][T11481] netlink: 'syz.0.1421': attribute type 21 has an invalid length. [ 267.747158][T11481] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.890307][T11484] __nla_validate_parse: 15 callbacks suppressed [ 267.890334][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 267.976870][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 268.190471][T11502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1430'. [ 268.357730][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 268.560483][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 268.591900][T11526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1436'. [ 269.043351][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 269.057732][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 269.063569][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 269.226398][T11560] rdma_rxe: rxe_newlink: failed to add wg1 [ 269.365569][T11574] Bluetooth: MGMT ver 1.23 [ 269.824631][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 270.214441][T11596] team0 (unregistering): Port device team_slave_0 removed [ 270.396224][T11596] team0 (unregistering): Port device team_slave_1 removed [ 270.439352][T11617] Bluetooth: hci0: unsupported parameter 5135 [ 270.439378][T11617] Bluetooth: hci0: unsupported parameter 8192 [ 270.439392][T11617] Bluetooth: hci0: unsupported parameter 5135 [ 270.439405][T11617] Bluetooth: hci0: unsupported parameter 8192 [ 270.575807][T11604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.715969][T11611] 0ªX¹¦Dö»: entered promiscuous mode [ 270.866283][T11603] syzkaller0: entered promiscuous mode [ 270.866348][T11603] syzkaller0: entered allmulticast mode [ 272.980667][T11667] 8021q: VLANs not supported on tunl0 [ 273.001171][T11667] x_tables: duplicate underflow at hook 2 [ 273.050863][T11671] validate_nla: 1 callbacks suppressed [ 273.050888][T11671] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 273.485653][T11691] __nla_validate_parse: 6 callbacks suppressed [ 273.485677][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 274.693288][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 274.865500][T11722] 8021q: VLANs not supported on bond0 [ 275.172468][T11727] bond0: Error: CAN devices cannot be enslaved [ 275.201238][T11727] netlink: 'syz.4.1485': attribute type 83 has an invalid length. [ 275.624110][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.644546][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.644945][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.646203][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.646306][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.646402][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.646498][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.646595][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.646702][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.646799][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.646948][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.647047][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.647144][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.647239][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.662695][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.664514][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.664627][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.664787][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.664918][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.665017][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.672379][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.672494][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.672590][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.672695][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.672793][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.672920][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.673019][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.673118][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.673214][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.898571][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.898737][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.898863][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.898962][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899069][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899166][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899264][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899362][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899460][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899557][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899651][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899749][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.899873][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900010][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900116][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900263][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900361][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900458][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900555][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900651][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900748][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900871][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.900969][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901073][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901170][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901267][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901364][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901512][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901610][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901753][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901878][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.901976][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.902081][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.902179][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.902275][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 275.902371][ T53] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 276.865264][T11750] ip_tables: iptables: counters copy to user failed while replacing table [ 276.911138][T11759] ip_tables: iptables: counters copy to user failed while replacing table [ 278.379619][T11751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.399560][T11751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.423587][T11751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.445202][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 278.477921][T11751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.927607][T11792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.010615][T11751] 8021q: adding VLAN 0 to HW filter on device bond34 [ 279.270069][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'. [ 280.207650][ T5930] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.207717][ T5930] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.207753][ T5930] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.401089][T11820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1498'. [ 282.232259][T11865] netlink: 'syz.3.1512': attribute type 4 has an invalid length. [ 282.232287][T11865] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 282.232301][T11865] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1512'. [ 282.232413][T11865] bond_slave_0: mtu greater than device maximum [ 282.599042][T11872] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.418811][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 283.993683][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 283.993949][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 283.995990][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 283.996226][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 284.041917][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 284.066190][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 284.463155][ T53] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 284.773371][T11907] __nla_validate_parse: 27 callbacks suppressed [ 284.773394][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 284.870864][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.873766][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.873959][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.874105][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.874262][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.874452][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.874673][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.875686][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.875882][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.876062][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.876215][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.876372][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.876534][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.896711][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.995748][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.995960][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.996114][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.996269][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.996492][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.996644][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.996792][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.996969][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.997119][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 284.997276][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.066985][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.075554][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.075747][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.076228][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.076943][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.077094][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.077306][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.120992][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.121122][ T53] Bluetooth: hci0: Malformed Event: 0x2f [ 285.167920][T11927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1524'. [ 285.670247][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 285.736286][T11935] ip6gre1: entered allmulticast mode [ 285.753930][T11930] veth0_to_bridge: entered promiscuous mode [ 285.835859][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 285.947498][T11937] veth0_to_bridge: left promiscuous mode [ 286.219512][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1532'. [ 286.339978][T11952] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 286.340007][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 286.643033][T11966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1533'. [ 286.643390][T11968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1533'. [ 286.711695][T11968] netlink: 'syz.1.1533': attribute type 4 has an invalid length. [ 286.711720][T11968] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1533'. [ 287.110345][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 287.474499][T11988] tipc: Started in network mode [ 287.474522][T11988] tipc: Node identity , cluster identity 4711 [ 287.474539][T11988] tipc: Failed to obtain node identity [ 287.474568][T11988] tipc: Enabling of bearer rejected, failed to enable media [ 287.685656][T11993] netlink: 'syz.3.1538': attribute type 12 has an invalid length. [ 288.477695][T12012] raw_sendmsg: syz.3.1543 forgot to set AF_INET. Fix it! [ 289.363192][T12032] nbd: must specify an index to disconnect [ 289.366686][T12032] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 289.366891][T12032] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.048716][T12051] __nla_validate_parse: 5 callbacks suppressed [ 290.048741][T12051] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1556'. [ 290.174426][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1554'. [ 290.320728][T12064] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 290.580109][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1554'. [ 290.748933][T12056] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 291.025877][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 291.025907][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1559'. [ 291.305785][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1561'. [ 291.305853][T12081] netlink: 'syz.2.1561': attribute type 7 has an invalid length. [ 291.305869][T12081] netlink: 'syz.2.1561': attribute type 8 has an invalid length. [ 291.305882][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 291.360331][T12083] openvswitch: netlink: Key type 207 is out of range max 32 [ 291.385524][T12081] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 291.435623][T12081] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 291.464227][T12081] erspan0: entered promiscuous mode [ 291.507907][T12081] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 292.019536][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.019566][T12091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.087021][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.087049][T12091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.170936][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1565'. [ 292.170963][T12090] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1565'. [ 292.170980][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1565'. [ 294.754340][T12161] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 294.944480][T12168] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 295.738047][T12182] : renamed from bond0 (while UP) [ 295.940154][T12195] __nla_validate_parse: 8 callbacks suppressed [ 295.940178][T12195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1594'. [ 296.032147][T12198] netlink: 'syz.3.1595': attribute type 39 has an invalid length. [ 296.060338][T12192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1594'. [ 296.331239][T12199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.453930][T12209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1599'. [ 296.453981][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 296.732315][T12215] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 296.733743][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 297.061137][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.063267][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.096630][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.307654][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.367720][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.747797][T12246] syzkaller0: entered promiscuous mode [ 297.747876][T12246] syzkaller0: entered allmulticast mode [ 298.885579][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1611'. [ 299.077878][T12272] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 299.727574][T12298] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 300.758943][T12315] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1624'. [ 301.200029][T12321] sctp: [Deprecated]: syz.4.1621 (pid 12321) Use of int in max_burst socket option. [ 301.200029][T12321] Use struct sctp_assoc_value instead [ 301.457603][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.741469][T12358] netlink: 'syz.3.1635': attribute type 39 has an invalid length. [ 302.844040][T12363] sock: sock_timestamping_bind_phc: sock not bind to device [ 302.932244][T12369] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 303.067915][T12360] syzkaller0: entered promiscuous mode [ 303.067951][T12360] syzkaller0: entered allmulticast mode [ 303.146436][T12369] netlink: 'syz.2.1636': attribute type 1 has an invalid length. [ 307.007338][ C1] sched: DL replenish lagged too much [ 311.139741][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 318.128424][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.699424][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.546764][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.734075][ T4953] Bluetooth: hci3: command 0x0405 tx timeout [ 379.331774][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.777272][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 417.784437][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12347/1:b..l.. [ 417.793546][ C1] rcu: (detected by 1, t=10503 jiffies, g=49009, q=11905 ncpus=2) [ 417.801461][ C1] task:syz.4.1633 state:R running task stack:23400 pid:12347 tgid:12347 ppid:5642 task_flags:0x400040 flags:0x00080002 [ 417.815002][ C1] Call Trace: [ 417.818307][ C1] [ 417.821284][ C1] __schedule+0x17dd/0x5830 [ 417.825865][ C1] ? __lock_acquire+0x747/0x2de0 [ 417.830844][ C1] ? __pfx___schedule+0x10/0x10 [ 417.835727][ C1] ? __lock_acquire+0x747/0x2de0 [ 417.840710][ C1] preempt_schedule_irq+0x4b/0x90 [ 417.845763][ C1] irqentry_exit+0x14f/0x9b0 [ 417.850391][ C1] ? trace_irq_disable+0x3b/0x140 [ 417.855466][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.861475][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 417.866796][ C1] Code: ff ff ff e8 20 99 5e 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 22 f3 1b 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f ac 61 0a cc 48 8d 3d a7 8f fc [ 417.886746][ C1] RSP: 0018:ffffc90004cbea00 EFLAGS: 00000296 [ 417.892851][ C1] RAX: eec4781ac0e73b00 RBX: 0000000000000000 RCX: 0000000000000046 [ 417.900851][ C1] RDX: 00000000a8cf8187 RSI: ffffffff8e92d623 RDI: ffffffff8c8e8c80 [ 417.908856][ C1] RBP: ffff888033421f40 R08: ffffffff817879cf R09: 0000000000000000 [ 417.917308][ C1] R10: ffffc90004cbeb38 R11: ffffffff81b3a880 R12: ffffffff8ff5a320 [ 417.925303][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 417.933309][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 417.939502][ C1] ? unwind_next_frame+0x8f/0x2550 [ 417.944663][ C1] ? do_mmap+0xe0a/0x1300 [ 417.949028][ C1] ? unwind_next_frame+0x8f/0x2550 [ 417.954175][ C1] unwind_next_frame+0xac/0x2550 [ 417.959149][ C1] ? unwind_next_frame+0x8f/0x2550 [ 417.964305][ C1] ? mmap_region+0x95a/0x2840 [ 417.969016][ C1] ? unwind_next_frame+0x8f/0x2550 [ 417.974166][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 417.980439][ C1] arch_stack_walk+0x11b/0x150 [ 417.985248][ C1] ? do_mmap+0xe0a/0x1300 [ 417.989792][ C1] stack_trace_save+0xa9/0x100 [ 417.994592][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 417.999994][ C1] ? __lock_acquire+0x747/0x2de0 [ 418.004976][ C1] save_stack+0x122/0x230 [ 418.009348][ C1] ? __pfx_save_stack+0x10/0x10 [ 418.014231][ C1] ? lock_acquire+0x115/0x350 [ 418.018933][ C1] ? __free_frozen_pages+0xc97/0xd90 [ 418.024242][ C1] ? __slab_free+0x269/0x2c0 [ 418.028890][ C1] ? qlist_free_all+0x99/0x100 [ 418.033682][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 418.039341][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 418.044400][ C1] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 418.050061][ C1] ? mas_alloc_nodes+0x291/0x350 [ 418.055028][ C1] ? mas_preallocate+0x42a/0x840 [ 418.059991][ C1] ? __split_vma+0x2fb/0xa90 [ 418.064633][ C1] ? vms_gather_munmap_vmas+0x4e3/0x1370 [ 418.070300][ C1] ? mmap_region+0x95a/0x2840 [ 418.075013][ C1] ? do_mmap+0xe0a/0x1300 [ 418.079396][ C1] __reset_page_owner+0x73/0x2a0 [ 418.084550][ C1] __free_frozen_pages+0xc97/0xd90 [ 418.089699][ C1] __slab_free+0x269/0x2c0 [ 418.094163][ C1] qlist_free_all+0x99/0x100 [ 418.098786][ C1] ? mas_alloc_nodes+0x291/0x350 [ 418.103759][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 418.109427][ C1] kasan_quarantine_reduce+0x148/0x160 [ 418.114921][ C1] __kasan_slab_alloc+0x22/0x80 [ 418.119809][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 418.125309][ C1] ? mas_alloc_nodes+0x291/0x350 [ 418.130273][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 418.135934][ C1] ? mas_alloc_nodes+0x291/0x350 [ 418.141081][ C1] mas_alloc_nodes+0x291/0x350 [ 418.145881][ C1] mas_preallocate+0x42a/0x840 [ 418.150675][ C1] ? rcu_is_watching+0x16/0xb0 [ 418.155479][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 418.160882][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 418.166220][ C1] ? __mas_set_range+0x11a/0x3a0 [ 418.171243][ C1] __split_vma+0x2fb/0xa90 [ 418.175698][ C1] ? mas_next_slot+0xc91/0xd70 [ 418.180497][ C1] ? __pfx___split_vma+0x10/0x10 [ 418.185477][ C1] ? mas_find+0x6d6/0xcb0 [ 418.189849][ C1] vms_gather_munmap_vmas+0x4e3/0x1370 [ 418.195539][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 418.201471][ C1] ? mas_walk+0x37e/0x490 [ 418.205851][ C1] mmap_region+0x95a/0x2840 [ 418.210430][ C1] ? __pfx_mmap_region+0x10/0x10 [ 418.215408][ C1] ? __pfx_mmap_region+0x10/0x10 [ 418.220383][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 418.225439][ C1] ? irqentry_exit+0x2a0/0x9b0 [ 418.230496][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 418.235725][ C1] ? irqentry_exit+0x2a0/0x9b0 [ 418.240514][ C1] ? trace_irq_disable+0x3b/0x140 [ 418.245578][ C1] ? mas_ascend+0x2f9/0x8b0 [ 418.250220][ C1] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 418.256859][ C1] ? __lock_acquire+0x747/0x2de0 [ 418.261837][ C1] ? cap_mmap_addr+0xaa/0xf0 [ 418.266467][ C1] ? bpf_lsm_mmap_addr+0x9/0x50 [ 418.271354][ C1] ? security_mmap_addr+0x71/0x240 [ 418.276502][ C1] ? shmem_mapping+0xd/0x50 [ 418.281290][ C1] ? memfd_check_seals_mmap+0xc5/0x220 [ 418.286781][ C1] do_mmap+0xe0a/0x1300 [ 418.290996][ C1] ? __pfx_do_mmap+0x10/0x10 [ 418.295636][ C1] ? vm_mmap_pgoff+0x1ed/0x520 [ 418.300432][ C1] ? down_write_killable+0x179/0x230 [ 418.305931][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 418.311596][ C1] ? apparmor_mmap_file+0x2e7/0x390 [ 418.316843][ C1] vm_mmap_pgoff+0x27a/0x520 [ 418.321565][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 418.326710][ C1] ? __fget_files+0x2a/0x420 [ 418.331332][ C1] ? __fget_files+0x3a2/0x420 [ 418.336054][ C1] ? __fget_files+0x2a/0x420 [ 418.340679][ C1] ksys_mmap_pgoff+0x4dc/0x760 [ 418.345488][ C1] do_syscall_64+0x166/0x520 [ 418.350106][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.356198][ C1] ? clear_bhb_loop+0x70/0xc0 [ 418.360911][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.366916][ C1] RIP: 0033:0x7f2a65d9f882 [ 418.371361][ C1] RSP: 002b:00007ffc059e6e18 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 418.379802][ C1] RAX: ffffffffffffffda RBX: 00007f2a637f4000 RCX: 00007f2a65d9f882 [ 418.387803][ C1] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f2a637f4000 [ 418.395804][ C1] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 418.403803][ C1] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 418.411831][ C1] R13: 0000000000000003 R14: 0000000000000000 R15: 00007f2a66025fa0 [ 418.419854][ C1] [ 418.422894][ C1] rcu: rcu_preempt kthread starved for 1101 jiffies! g49009 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 418.433869][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 418.443857][ C1] rcu: RCU grace-period kthread stack dump: [ 418.449765][ C1] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 418.463307][ C1] Call Trace: [ 418.466601][ C1] [ 418.469561][ C1] __schedule+0x17dd/0x5830 [ 418.474099][ C1] ? __lock_acquire+0x747/0x2de0 [ 418.479086][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 418.484237][ C1] ? __pfx___schedule+0x10/0x10 [ 418.489113][ C1] ? lock_acquire+0x115/0x350 [ 418.493839][ C1] ? schedule+0x90/0x2b0 [ 418.498111][ C1] schedule+0x164/0x2b0 [ 418.502298][ C1] schedule_timeout+0x152/0x2c0 [ 418.507186][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 418.512596][ C1] ? __pfx_process_timeout+0x10/0x10 [ 418.517920][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.523842][ C1] ? prepare_to_swait_event+0x220/0x3e0 [ 418.529421][ C1] ? prepare_to_swait_event+0x35e/0x3e0 [ 418.535009][ C1] rcu_gp_fqs_loop+0x30c/0x1230 [ 418.539920][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 418.546149][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 418.551469][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 418.556709][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 418.562716][ C1] rcu_gp_kthread+0x9c/0x340 [ 418.567338][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 418.572550][ C1] ? __kthread_parkme+0x71/0x1f0 [ 418.577513][ C1] ? __kthread_parkme+0x199/0x1f0 [ 418.582571][ C1] kthread+0x38b/0x480 [ 418.586685][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 418.591943][ C1] ? __pfx_kthread+0x10/0x10 [ 418.596580][ C1] ret_from_fork+0x514/0xb70 [ 418.601215][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 418.606354][ C1] ? __switch_to+0xc78/0x1410 [ 418.611081][ C1] ? __pfx_kthread+0x10/0x10 [ 418.615709][ C1] ret_from_fork_asm+0x1a/0x30 [ 418.620532][ C1] [ 418.623575][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 418.629913][ C1] Sending NMI from CPU 1 to CPUs 0: [ 418.635144][ C0] NMI backtrace for cpu 0 [ 418.635160][ C0] CPU: 0 UID: 0 PID: 5929 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 418.635181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 418.635192][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 418.635222][ C0] RIP: 0010:__local_bh_disable_ip+0x4/0xd0 [ 418.635249][ C0] Code: 02 00 00 74 ec fb 5b c3 cc cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 56 53 89 f3 65 48 8b 05 ef bd 36 13 a9 00 00 00 0f 0f 85 98 00 [ 418.635265][ C0] RSP: 0018:ffffc90000006898 EFLAGS: 00000246 [ 418.635281][ C0] RAX: ffffffff89ccf6cb RBX: ffff8881be3f1488 RCX: 8000000000000100 [ 418.635295][ C0] RDX: ffff888030db9f40 RSI: 0000000000000200 RDI: ffffffff89ccf6db [ 418.635308][ C0] RBP: ffffc90000006b58 R08: 0000000000000100 R09: 1ffffffff233ae37 [ 418.635321][ C0] R10: dffffc0000000000 R11: fffffbfff233ae38 R12: dffffc0000000000 [ 418.635334][ C0] R13: 1ffff92000000d34 R14: ffffffff89ccf6db R15: ffff8881be3f1490 [ 418.635348][ C0] FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 418.635370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.635384][ C0] CR2: 00007f90c35ffffc CR3: 000000000fd48000 CR4: 00000000003526f0 [ 418.635401][ C0] Call Trace: [ 418.635408][ C0] [ 418.635415][ C0] __dev_queue_xmit+0x2a8/0x3920 [ 418.635438][ C0] ? br_flood+0x402/0x650 [ 418.635463][ C0] ? NF_HOOK+0x64e/0x6e0 [ 418.635481][ C0] ? process_backlog+0x727/0x18b0 [ 418.635508][ C0] ? net_rx_action+0x61d/0xf50 [ 418.635533][ C0] ? handle_softirqs+0x265/0x8d0 [ 418.635556][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 418.635579][ C0] ? blake2s_update+0x140/0x450 [ 418.635605][ C0] ? kdf+0xff/0x290 [ 418.635620][ C0] ? wg_packet_handshake_send_worker+0x18c/0x370 [ 418.635642][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 418.635667][ C0] ? worker_thread+0xa47/0xfb0 [ 418.635692][ C0] ? ret_from_fork+0x514/0xb70 [ 418.635712][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 418.635734][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 418.635764][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 418.635787][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 418.635809][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 418.635827][ C0] ? kmem_cache_free+0x182/0x650 [ 418.635853][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 418.635878][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 418.635903][ C0] ? NF_HOOK+0xa2/0x6e0 [ 418.635921][ C0] NF_HOOK+0x64e/0x6e0 [ 418.635941][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 418.635960][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 418.635981][ C0] ? ip_vs_conn_out_get+0xab/0x1030 [ 418.636003][ C0] br_nf_post_routing+0xa51/0xee0 [ 418.636021][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 418.636043][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 418.636063][ C0] nf_hook_slow+0xc5/0x220 [ 418.636082][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 418.636108][ C0] NF_HOOK+0x23e/0x3f0 [ 418.636134][ C0] ? NF_HOOK+0xa2/0x3f0 [ 418.636158][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 418.636184][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 418.636212][ C0] ? net_generic+0x1e/0x240 [ 418.636230][ C0] br_forward_finish+0xd3/0x130 [ 418.636255][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 418.636282][ C0] br_nf_forward_finish+0xa76/0xea0 [ 418.636306][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 418.636327][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 418.636361][ C0] ? NF_HOOK+0xa2/0x6e0 [ 418.636379][ C0] ? NF_HOOK+0xa2/0x6e0 [ 418.636397][ C0] NF_HOOK+0x64e/0x6e0 [ 418.636417][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 418.636433][ C0] ? net_generic+0x1e/0x240 [ 418.636451][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 418.636472][ C0] ? net_generic+0x1e/0x240 [ 418.636489][ C0] ? net_generic+0x1e/0x240 [ 418.636509][ C0] br_nf_forward_ip+0x7e7/0xa30 [ 418.636528][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 418.636548][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 418.636568][ C0] nf_hook_slow+0xc5/0x220 [ 418.636586][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 418.636612][ C0] NF_HOOK+0x23e/0x3f0 [ 418.636639][ C0] ? NF_HOOK+0xa2/0x3f0 [ 418.636663][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 418.636689][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 418.636715][ C0] ? maybe_deliver+0x3f0/0x5b0 [ 418.636741][ C0] ? br_handle_vlan+0x60/0x580 [ 418.636767][ C0] __br_forward+0x41e/0x5d0 [ 418.636790][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 418.636818][ C0] br_flood+0x402/0x650 [ 418.636847][ C0] br_handle_frame_finish+0x11fc/0x1ae0 [ 418.636872][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 418.636889][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 418.636912][ C0] ? ipt_do_table+0x137f/0x15d0 [ 418.636936][ C0] ? nf_nat_inet_fn+0x90c/0xb50 [ 418.636960][ C0] ? nf_hook_slow+0x176/0x220 [ 418.636980][ C0] br_nf_pre_routing_finish+0x138a/0x1a10 [ 418.637007][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 418.637028][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 418.637048][ C0] ? NF_HOOK+0xa2/0x6e0 [ 418.637066][ C0] ? NF_HOOK+0xa2/0x6e0 [ 418.637083][ C0] NF_HOOK+0x64e/0x6e0 [ 418.637100][ C0] ? net_generic+0x1e/0x240 [ 418.637119][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 418.637138][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 418.637160][ C0] ? setup_pre_routing+0x4d1/0x6e0 [ 418.637179][ C0] br_nf_pre_routing+0xec2/0x14b0 [ 418.637197][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 418.637221][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 418.637239][ C0] br_handle_frame+0x1329/0x1600 [ 418.637257][ C0] ? __lock_acquire+0x747/0x2de0 [ 418.637282][ C0] ? kasan_save_track+0x3e/0x80 [ 418.637306][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 418.637323][ C0] ? handle_softirqs+0x265/0x8d0 [ 418.637348][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 418.637371][ C0] ? wg_noise_handshake_create_initiation+0x29e/0x810 [ 418.637390][ C0] ? wg_packet_handshake_send_worker+0x18c/0x370 [ 418.637411][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 418.637436][ C0] ? worker_thread+0xa47/0xfb0 [ 418.637460][ C0] ? kthread+0x38b/0x480 [ 418.637479][ C0] ? ret_from_fork+0x514/0xb70 [ 418.637501][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 418.637519][ C0] __netif_receive_skb_core+0x989/0x30f0 [ 418.637554][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 418.637579][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 418.637601][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 418.637631][ C0] ? process_backlog+0x3de/0x18b0 [ 418.637656][ C0] ? process_backlog+0x3de/0x18b0 [ 418.637683][ C0] process_backlog+0x727/0x18b0 [ 418.637712][ C0] ? process_backlog+0x3de/0x18b0 [ 418.637744][ C0] __napi_poll+0xaa/0x330 [ 418.637770][ C0] net_rx_action+0x61d/0xf50 [ 418.637802][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 418.637827][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 418.637859][ C0] ? net_tx_action+0x5bb/0xc30 [ 418.637887][ C0] ? net_tx_action+0xbff/0xc30 [ 418.637916][ C0] handle_softirqs+0x265/0x8d0 [ 418.637944][ C0] ? kernel_fpu_end+0x62/0x80 [ 418.637969][ C0] do_softirq+0x77/0xd0 [ 418.637991][ C0] [ 418.637997][ C0] [ 418.638004][ C0] __local_bh_enable_ip+0x100/0x140 [ 418.638028][ C0] blake2s_compress+0xfa/0x1c00 [ 418.638055][ C0] ? __asan_memset+0x22/0x50 [ 418.638075][ C0] ? encode_point+0x8346/0x84b0 [ 418.638097][ C0] ? __pfx_encode_point+0x10/0x10 [ 418.638114][ C0] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 418.638144][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 418.638170][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 418.638189][ C0] ? kernel_fpu_end+0x62/0x80 [ 418.638224][ C0] blake2s_update+0x140/0x450 [ 418.638251][ C0] hmac+0x1f4/0x3b0 [ 418.638270][ C0] ? __pfx_hmac+0x10/0x10 [ 418.638304][ C0] kdf+0xff/0x290 [ 418.638324][ C0] ? __pfx_kdf+0x10/0x10 [ 418.638358][ C0] wg_noise_handshake_create_initiation+0x29e/0x810 [ 418.638380][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 418.638401][ C0] ? __lock_acquire+0x747/0x2de0 [ 418.638427][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 418.638451][ C0] ? lock_acquire+0x115/0x350 [ 418.638476][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 418.638502][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 418.638521][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 418.638545][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 418.638571][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 418.638595][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 418.638617][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 418.638645][ C0] ? rcu_is_watching+0x16/0xb0 [ 418.638671][ C0] ? process_scheduled_works+0x97a/0x1630 [ 418.638697][ C0] process_scheduled_works+0xc3d/0x1630 [ 418.638738][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 418.638767][ C0] ? assign_work+0x3cf/0x5d0 [ 418.638794][ C0] worker_thread+0xa47/0xfb0 [ 418.638833][ C0] kthread+0x38b/0x480 [ 418.638853][ C0] ? __pfx_worker_thread+0x10/0x10 [ 418.638878][ C0] ? __pfx_kthread+0x10/0x10 [ 418.638899][ C0] ret_from_fork+0x514/0xb70 [ 418.638919][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 418.638939][ C0] ? __switch_to+0xc78/0x1410 [ 418.638967][ C0] ? __pfx_kthread+0x10/0x10 [ 418.638987][ C0] ret_from_fork_asm+0x1a/0x30 [ 418.639013][ C0]