last executing test programs: 12.628624246s ago: executing program 2 (id=6122): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfd3fe, {0x7, 0x0, 0x0, r3, 0x80, 0x7e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0xc0c0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.487820253s ago: executing program 2 (id=6126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002c00ed002bbd7000ffdbdf25077c0000100001800c00dd800800f400", @ANYRES32=r2, @ANYBLOB="080003"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x802}, [@IFLA_GROUP={0x8, 0x1b, 0x7}]}, 0x28}}, 0x0) 12.20408272s ago: executing program 2 (id=6129): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000450c500040000001200000000000000262fd27434bb431edf10bd9f1aa443", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x400000, &(0x7f0000000080)={@_ha_fsid={[0x1, 0xb]}, {0x1, 0x998, 0x5}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0xfb, 0x3, 0xab34, 0x60, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x5, 0x8}}) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000800)={0x2, 0x0, 0x400, 0xb67}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r11 = socket(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000018100000", @ANYRES32=r10, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x17, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x0, 0x0, 0xb, 0xffffffffffffffaf, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x3a, &(0x7f0000000280)=""/58, 0x40f00, 0x49, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x6, 0x6, 0xb}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r6, r7, r10, r12, r0], &(0x7f0000000640)=[{0x4, 0x5, 0xf, 0x1}, {0x0, 0x3, 0x10, 0x6}, {0x0, 0x4, 0x7}, {0x4, 0x3, 0xe, 0x5}, {0x1, 0x1, 0x6, 0x9}], 0x10, 0x80000000}, 0x94) 11.985325546s ago: executing program 2 (id=6130): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 11.747666235s ago: executing program 2 (id=6133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a0104000000000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x4000}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x4000}, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xf3, @null, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000021400022dbd7000fbdbdf250900020073797a310000000008004400", @ANYRES32, @ANYBLOB="0800000900020073797a310000000005005400000000000900020073797a32000000000500540000000000080044000000000000", @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x3f9, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000080) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x3f9, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x58, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "f102dcf29e"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x300, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 11.481358315s ago: executing program 2 (id=6136): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r5}, @IFLA_BRPORT_COST={0x8, 0x3, 0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0xfcf}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r1, 0x90d, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x1ffe000, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) listen(r0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @private1, 0x7c5}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r8, 0x0) listen(r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) write$tun(r6, &(0x7f00000003c0)={@val={0x1c}, @val={0x0, 0x5, 0x0, 0x300}, @ipv6=@udp={0x0, 0x6, '\'\vB', 0x18, 0x11, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}, 0x4e) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 3.111717473s ago: executing program 4 (id=6204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "3ac3014a9fe5b5be", "1f0111f25415d92e72c8263e63f2bdd8", "9f78339f", "72ea5413bc718716"}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10023, 0x0, 0x0) shutdown(r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xa00, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.630206179s ago: executing program 0 (id=6209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000080)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xa, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7fff, 0x2, 0x6}, {0xfff, 0xffffffffffffffd9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c054) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00n', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000b38322f586be66dca74175e300"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000050000009fe0044ca90000000000003509cc00013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000"], 0x270}, 0x1, 0x0, 0x0, 0x20080004}, 0x8880) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000024c0)=@deltfilter={0xd90, 0x2d, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0xf}, {0x0, 0x7}, {0x3, 0x7}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0xd4c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_ACT={0x4f0, 0x1, [@m_skbmod={0x15c, 0x18, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x1a, 0x10000003, 0x4, 0x40}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfff, 0x5, 0xffffffffffffffff, 0xfffffff8, 0xfffffe01}, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x8, 0x0, 0xd6cf, 0xd71}, 0xd}}]}, {0xa1, 0x6, "fedffe03fa4f71d7ab37f8254d7efa5b411da81c4124d8d93e7f13ccca532eb941fb2f257f068981a3c1e93d836d1975295fc40435eaf100ce904f8e6d0fd42eebd97ae0e7a1f59537feb23ecfe0c6dbd5519b1f06c2efc7b3595637d82ad7331bdaf643e2b3670615297692177fbf91a021c0038f7730e7d0124d3bd51f5c9a8426bd906a38dd3a9e0df686d0648588c603671c976286609bd9e2df1b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xac, 0x1a, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2264, 0x6}}]}, {0x73, 0x6, "4d527f40c2f40fca729b65d8961db7b361001dc8f3537417d6a85046c7f4be9ad171d398ce1bb2e647d04dcfc6e411dfe5de74c2f2a9d7514ebfe5c637b668372eddebff96d2d01031c708eda0394682778d78fb432b0b0ee66395dc452b72b1dbdbce9b282b55cae5e42e140545ad"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0xd0, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x0, 0x2, 0x401}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xfffffffe, 0x6, 0x64, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x0, 0x7, 0xb1, 0x2}, 0x3, r4}}]}, {0x42, 0x6, "428f1e129d15876b685a2a147b72806ed8144ff7f5a052efb4913220a3059d7c01fbfaf51d83f0b21e74869edcfd5823648313f99afc387c3fd3d44ffed2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x104, 0x4, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x1, 0x8, 0x5, 0xffffff34}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x83, 0x6, "f41d24c9d3ad3125fdcfbef02eae22dabfe285267bb64b3c8fc73b5c1248b8e7dbcdfa810917f2b89c67277269ea76f97e37683b42b0f2ffdd243ced40ff2d9b64a11ed555de179fa00478e19939f618286e79477c7b0ac07f665bc6130db4fd0da3aa37056061fec544b8154b43d17c2bb540db7fa5431c1179687d17be97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x110, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x2, 0x9}}}]}, {0xcc, 0x6, "280ff676c45c0637aabf37478156269cc21fad51888cbc256ded1b932ae2bcd2e44dd9c6cdc061d8cb990eb4aa72b2d9b293141ea3115ea8cfa795666b6175221c6217b9935bc644bd78b57e62c91f0a0f57a70a8ae35625c55941d53a5e8b480f53ff03b04ce1b8834a0455b4b564a4bcae43716806079709ec54e6fb5696f8cd66fe7991a278c8627a5ccc23dd03191a65eec3a8970c8785b4b450c805e0ba04e879947f749bdbcb237ea66ee5f89d36aeb494f43b12b2cb5831a9f1b8147618be6116cc29e616"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0x6}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x830, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x5, 0x4, 0x8, 0xfffffff7, 0xb, 0x7ff, 0xb, 0x8, 0x7, 0x9, 0xffffffff, 0xac, 0xc, 0x9, 0x8, 0xfffffffe, 0x9, 0x2, 0x95, 0x3, 0x4, 0x7fff, 0x1, 0x833edac6, 0x400, 0x6, 0x401, 0x9, 0x5, 0x6551, 0x4, 0x0, 0x6, 0x241a, 0x9fe, 0x0, 0x3, 0x0, 0x7, 0x0, 0x9, 0x8, 0x10001, 0xffff, 0x5, 0xfffffff8, 0x0, 0x400, 0x8, 0x8000, 0x632df83a, 0x2, 0x0, 0x2, 0x6, 0xcb, 0x7fff, 0x4, 0x5, 0x37, 0x2, 0x1, 0x3ff, 0x84, 0x7, 0x2804, 0x8, 0x6, 0x400, 0x52, 0x10001, 0x5bc, 0x3, 0x9df, 0x7, 0x9, 0x3, 0xfffeffff, 0xd, 0x5, 0x6, 0x7, 0xb, 0x401, 0x200, 0x1, 0x84, 0x0, 0x7, 0x91fd, 0x4, 0x0, 0x587e, 0xa0d7, 0xffffffff, 0x8, 0x6, 0xfffff800, 0x4, 0x9, 0x5, 0x7, 0x121, 0x48, 0xfffffff4, 0xfffffff9, 0x7fff, 0x0, 0x5e28, 0xffff0, 0x5, 0x2, 0x400, 0x4c, 0x3, 0x14448e35, 0x0, 0x6, 0x2, 0x6, 0x8, 0x3, 0x8, 0x1, 0x4, 0x9f, 0xfffffffc, 0x4, 0xffff, 0x1, 0x1800000, 0x8, 0x10000, 0x81, 0x6, 0xc, 0x1, 0x829d, 0xffffffff, 0xfa, 0x1, 0x6, 0x9, 0x2, 0x1, 0xfffffffc, 0x8, 0x80000000, 0xe4, 0x4, 0xc, 0x7, 0x2, 0x5, 0x7, 0x7, 0x8001, 0xa00, 0x1, 0x7, 0xffffff88, 0x0, 0x101, 0x9, 0xffff9bf7, 0x2, 0x1, 0x35c0a99c, 0x5, 0x24, 0x3, 0x101, 0x0, 0x4, 0x21d9800, 0x5, 0x4, 0x1, 0x3, 0x9, 0x1, 0xc68, 0xfffffffe, 0x1, 0x1, 0x1, 0x9, 0x3, 0x4, 0x5, 0x80000001, 0x75, 0xf, 0x0, 0x4c6e, 0x3, 0x7, 0x3, 0x9, 0xcc98, 0x3, 0x9, 0x0, 0x4000000, 0x6, 0x2, 0x9, 0x783, 0x1, 0x9, 0x5, 0x7c23, 0x80000001, 0x61, 0x8, 0x1, 0x400, 0xa, 0x3ff, 0x6, 0x9, 0xae0a, 0x510e2019, 0x8, 0x8, 0x8001, 0x63, 0x3, 0x760, 0x3, 0x3, 0xffffffff, 0x5, 0x98, 0x9, 0xff, 0x1, 0xfffffffd, 0x1, 0x51e, 0x14, 0x8, 0x88, 0x9, 0x1, 0x10000, 0x9, 0x7f, 0x2, 0x3ff, 0x3, 0x1, 0xfffffffa, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x5, 0x4, 0x8, 0x6, 0x1, 0x2, 0x7, 0x1000, 0x5, 0x2, 0xe1f4, 0x80000001, 0x38a, 0x4, 0x1, 0x7, 0xf988, 0x9, 0x7, 0xffffffff, 0x0, 0xffffffff, 0x6, 0x4, 0x9, 0x1, 0x6, 0x8, 0x10001, 0x2, 0x7, 0x6, 0x8, 0x1, 0x2, 0x1, 0x8, 0x1, 0x7fffffff, 0x1, 0x5, 0x9, 0x8, 0x8, 0x9, 0x0, 0x20, 0xf, 0x7, 0xb, 0x101, 0xd952, 0x9, 0x2, 0x8, 0x6, 0x6f6, 0x1, 0x7f, 0x8d1, 0x40, 0x3, 0x5b4c, 0x200, 0x1, 0x4, 0x2ae, 0x100, 0x3, 0x50344188, 0x9, 0xfffffffa, 0x3, 0x3, 0x30, 0x6, 0x3, 0x0, 0x7, 0x8000, 0xf, 0x5, 0x3, 0x7fff, 0x2, 0x80000001, 0xfffffff8, 0x7, 0x6, 0x3, 0x8, 0xd077, 0xc000000, 0x2, 0xa24, 0x0, 0x6, 0xcc8a, 0x8, 0x5, 0x9, 0x5, 0x100, 0xd, 0x7fffffff, 0x4, 0x6, 0x9, 0x0, 0x800, 0x9, 0x6, 0x9, 0x6, 0x3, 0x0, 0xd, 0x3, 0x1ff, 0x7, 0x9, 0xa7, 0x81, 0xbb9, 0x1, 0xc, 0x5, 0x0, 0x0, 0x2, 0x4, 0x8, 0x200000, 0x6, 0x3, 0x6, 0x200, 0x744, 0x2, 0x8000, 0x3, 0x0, 0x9, 0x0, 0xb8c6, 0x81, 0x0, 0x4757, 0x1, 0xaf, 0x5, 0x9, 0x7, 0x1, 0x3, 0x6, 0x100, 0x5, 0x1, 0x2, 0xb1, 0x4, 0xb, 0x7c04, 0x9, 0x2, 0x200, 0x4, 0xca0b, 0x200, 0x401, 0xff74, 0xc7b, 0x6, 0x80000001, 0x4, 0x4, 0x1, 0x6, 0x89, 0x3, 0x7fff, 0x3, 0x3, 0xdf07, 0x4000000, 0x1, 0x0, 0x6, 0x3, 0x401, 0xa, 0x10001, 0x2cd7, 0x6e, 0x4, 0x0, 0x101, 0x5, 0xffff14e4, 0x140, 0xc54, 0x0, 0x5, 0xfffff800, 0x1c0, 0x29, 0x3, 0x0, 0x7, 0x8001, 0x1000, 0x1, 0x5, 0x7ff00, 0xffffffff, 0xc, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x4a, 0x4, 0x7, 0x1, 0x1, 0x5, 0x1d74, 0xfffffffa, 0x74, 0xdd, 0x7, 0x0, 0x8, 0x0, 0x3, 0x2, 0xc7, 0x67, 0x10000, 0xffffffff, 0x2, 0x9d37, 0x7, 0x6, 0x1ff, 0x2, 0x81, 0x7, 0x10001, 0x5, 0xfd3, 0xfdeb]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffc0}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}]}]}}, @TCA_RATE={0x6, 0x5, {0x6b, 0x9}}]}, 0xd90}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbf91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000200)=r13, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r12, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000240)) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000dc0)=@newtfilter={0x16ec, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r10, {0xf}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x16c0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_ACT={0x1314, 0x7, [@m_police={0x1294, 0x13, 0x0, 0x0, {{0xb}, {0x1184, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x8c, 0x100, 0x8, 0x4, 0x101, 0x40a, 0x97c, 0x1, 0x1, 0x8000, 0xfffffffd, 0x9, 0x10, 0x0, 0x3ac6, 0x6, 0xff, 0xe7e2, 0x4, 0x7ff, 0x8, 0x7, 0x6, 0x2, 0xfff, 0x9, 0x7, 0x1, 0x7, 0x1, 0x7, 0x579, 0x8a3c, 0x7, 0x1, 0x6, 0xf4, 0x6, 0x6ce6, 0x2, 0x7, 0x5, 0x5, 0x7ff, 0x80, 0x2, 0xffff8000, 0x9, 0x5, 0x2, 0x2, 0x93, 0x5, 0x2, 0xe2, 0x45f221d4, 0x8, 0x3, 0x6, 0x101, 0x4, 0x2, 0x0, 0x9, 0x8, 0x0, 0x3, 0x9a0, 0x0, 0x8001, 0x7ff, 0x4, 0x3, 0xffffff30, 0x7, 0x9, 0x8, 0x1ff, 0x81, 0x4, 0x8, 0x1000, 0x401, 0xf20, 0x7, 0x3ff, 0xff, 0x101, 0xffff, 0x19, 0x6, 0x3, 0x80000000, 0x6, 0x8, 0x4, 0xb43, 0x5, 0x5, 0x2, 0x9, 0x80000000, 0xa8, 0xfffffe01, 0x1000, 0x10001, 0x1ff, 0x1000, 0x3, 0x5, 0x3, 0xa71, 0x6e53, 0x4, 0x9, 0x6, 0x0, 0xc47b, 0x6, 0x7, 0xfffff001, 0x9, 0xfffffff8, 0xba, 0x4, 0xfff, 0x4, 0x9, 0x52d5, 0x9, 0x1f31d35b, 0xc353, 0x7, 0xffff5c21, 0x8, 0x1, 0x0, 0x8, 0x5, 0x5, 0x1, 0x873, 0x5, 0x6, 0xc6b, 0x7, 0x0, 0x3, 0xfffffff7, 0x1, 0x10001, 0x5, 0x8, 0x5, 0x6, 0x6e5, 0x78, 0x1, 0x8, 0xc263, 0x1, 0x1, 0x1, 0x5, 0x9, 0x7, 0xf, 0xc, 0xb, 0x7fff, 0x3, 0x5096, 0x124, 0x3, 0x4, 0x1, 0x2, 0x7, 0x7f, 0x7fff, 0x3, 0x8, 0x5, 0xffff, 0x995d, 0x400, 0x7f, 0x95, 0x1, 0x4, 0x80, 0x4, 0x187, 0x943c, 0xf3, 0x9d5, 0x8001, 0x3e16, 0x3, 0x0, 0x4, 0xa, 0xfffffff8, 0xf, 0x9, 0xfff, 0x3, 0x7, 0xb, 0x7, 0xfffffff9, 0x0, 0x5, 0x401, 0x80000001, 0x6, 0xd, 0xffffffff, 0x591, 0xc, 0x9, 0x9, 0x5, 0x5, 0xfffffc00, 0x6, 0x0, 0x7fffffff, 0x4, 0x9, 0x5, 0x5, 0xdad, 0x9, 0x1, 0x80000000, 0x54, 0x8, 0x2, 0x8, 0xfffffffb, 0x6, 0x1f7, 0x7f, 0xfffffffc, 0x3, 0x2, 0x1, 0x2, 0x4, 0xd22a, 0xfffffffc, 0x4, 0x7, 0xd, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x7, 0x81, 0x3, 0xb9f, 0x675c, 0x8, 0x80, 0x9, 0x6, 0x8, 0x32fade51, 0xb, 0x6, 0x4, 0x3, 0x3, 0xffffffff, 0x1, 0x7f, 0x4, 0x6, 0x45ce17e9, 0x5, 0x54, 0x2, 0x2, 0x3, 0x5, 0xffff, 0x7, 0xfffffe01, 0x3, 0x7, 0x4, 0xd28e, 0x1d, 0x8, 0x5800000, 0x1000, 0x0, 0xba, 0x845, 0x10001, 0x80000000, 0x6, 0xffff8001, 0x3, 0xf87, 0x6, 0x9, 0x5, 0x58e0, 0x6a2b293e, 0x3, 0x3, 0x4, 0x4, 0x7fffffff, 0x1ff, 0x10000, 0x3, 0x3, 0x1d8, 0xb, 0x8, 0x8, 0x9, 0x4, 0x9, 0x7, 0x200, 0xccab, 0x8001, 0x2, 0x9, 0x5, 0x0, 0x39ba, 0x2, 0x8000, 0x7, 0x1, 0x57, 0x7fff, 0x8, 0x4, 0x3, 0x10001, 0x400, 0x1ff, 0x8, 0xc, 0x2, 0x1, 0xa72, 0x7, 0x0, 0x9, 0x0, 0x3b1, 0x9, 0x771, 0x7, 0xd, 0x6, 0xf8, 0x4000800, 0x2, 0x0, 0x3c18, 0x4, 0x80, 0x2, 0xffffffff, 0xfffffff7, 0x101, 0xfffffff1, 0x3, 0x5, 0xf58, 0x9, 0xfffffffa, 0xba48, 0x1, 0x2, 0x6, 0x4, 0xfffffffa, 0x8001, 0x1, 0x3ff, 0x2, 0x400, 0x0, 0x5, 0x3f, 0x1, 0x1, 0x0, 0x2, 0xa, 0x10001, 0xf8a9, 0x6, 0x4, 0xffffffff, 0x1000, 0x4, 0x35f8, 0x5, 0x1, 0x8, 0x101, 0x8, 0x8, 0x40, 0x13a, 0x1, 0x8, 0x9, 0x3, 0x2, 0x7, 0x2, 0x0, 0x3ff, 0x401, 0x0, 0x81, 0x339a, 0x8, 0x7ff, 0x1ff, 0x3, 0xd31, 0x8, 0xfffffc00, 0x6, 0x1, 0x3, 0x2, 0x80000001, 0x9, 0xe8000000, 0x6, 0x10000, 0x7a5, 0x10001, 0x9, 0x9, 0x1ff, 0x4, 0x9, 0xffffff80, 0x9, 0x8, 0xffff, 0x8, 0x5ee, 0x0, 0x4, 0xa, 0x7, 0x3, 0x0, 0x22a, 0x7c4, 0x400, 0xffff, 0x1, 0xe, 0x3fe00, 0xba, 0x3, 0x3, 0xffffffff, 0xffffffc0, 0xfffffffa, 0x1, 0x1, 0x554d, 0x4, 0x7fff, 0x0, 0x800, 0x78, 0x3, 0x10, 0xfffffffc, 0x6, 0xffff, 0x6, 0x6, 0x8, 0x0, 0xae0d, 0x9, 0xff, 0x51d, 0x1, 0x7, 0x4c1, 0x800, 0x5, 0x3, 0x4, 0x4, 0xbb9, 0xf, 0x0, 0x401, 0x2, 0x3, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x7, 0x4, 0x7, 0x8000, 0x81, 0x9, 0x3, 0x4, 0x5, 0x8, 0x7, 0x56, 0xf7, 0x4, 0x5, 0x4, 0x80, 0x80000000, 0x1, 0x6, 0x80, 0xf, 0x3, 0x8, 0x8000, 0x9, 0x1, 0x200, 0x400, 0x7f, 0x7, 0x3fd6, 0x4ae3, 0x8, 0x9, 0x6, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5, 0x80000000, 0xffff, 0xc42, 0xffffff5d, 0x7, 0x3, 0x3, 0xf01fd40, 0x10001, 0x3, 0x8001, 0x37, 0x6, 0x9, 0x5, 0x5, 0x8, 0x9, 0x7ff, 0x2, 0xa9, 0xc82f, 0x0, 0x81, 0x3ff, 0xffff, 0x4, 0xc, 0xe0000000, 0x3, 0x8000, 0x7, 0x8, 0x2, 0x6, 0xfffffffd, 0x7, 0x3ff, 0x2, 0x3, 0x4, 0x5, 0x4, 0x3, 0x8, 0x3, 0x80000001, 0x2, 0x5, 0x10, 0xa, 0x7ff, 0x3, 0x100, 0x8, 0x7fffffff, 0x4, 0x1, 0x1ff, 0x7, 0x8, 0xf135, 0x2f0e, 0x2, 0x7, 0x90, 0x52b1, 0x7, 0x0, 0x6, 0x10001, 0x4d, 0x1, 0x5, 0x0, 0x1, 0x849, 0x9, 0x0, 0x4, 0x80, 0x6, 0x0, 0x36933d82, 0x80000000, 0x3, 0x1, 0x4, 0x1ff, 0x6, 0x3, 0x9, 0x0, 0x2, 0x2, 0x1, 0x7fffffff, 0x7f, 0x6, 0x98, 0x0, 0x5, 0x31c72ebd, 0x4, 0x9, 0xe4, 0x8, 0x3, 0x1, 0x4, 0x8, 0x3, 0x3, 0x1, 0x4, 0x795, 0xfffffffb, 0x6, 0x9, 0x9, 0x6, 0x8, 0x5, 0x7fff, 0x6, 0x7, 0x10, 0x9, 0x8, 0x66776fb1, 0x2, 0x7, 0x9, 0x2, 0x400, 0x0, 0x1ff, 0x2, 0xe526958, 0x3ff, 0x81, 0x9, 0xfffffff8, 0x0, 0x5, 0x7, 0x2, 0x5, 0x6, 0x80, 0x4b8, 0x3c6, 0x3, 0x0, 0x1, 0x7fffffff, 0x0, 0xffffffff, 0x6, 0x1000, 0x80, 0x6, 0x7ff, 0x2, 0x1, 0x471, 0x57, 0x1, 0x3, 0x1, 0xe9, 0xd, 0x7, 0x5, 0x6, 0xfffffffd, 0x40, 0xda, 0x8, 0xffffffff, 0x4, 0x80, 0x6, 0x8, 0x1, 0x0, 0x7ff, 0x9, 0x9, 0x2, 0x8001, 0x6, 0xffff0001, 0x0, 0x3, 0xa2f7, 0x4, 0x9, 0xbe3, 0x2000, 0x0, 0x5d, 0xf, 0x2, 0xb, 0x8, 0x7, 0x5, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x57}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0xcce00, 0x0, 0x0, {0xa8, 0x0, 0x5, 0x3, 0x1, 0x3}, {0x4a, 0x1, 0x8, 0x4, 0xb, 0x9}, 0x2, 0xba1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x78}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x9, 0x81, 0x3, 0xe, 0x9, 0x7, 0x0, 0x2, 0x0, 0x2, 0x10, 0x1, 0x7, 0x9, 0xb, 0xfffffffe, 0xc, 0xc, 0x7, 0x2, 0x9, 0xd8, 0xb515, 0x4, 0x0, 0x49b8, 0x8000, 0x1, 0xb, 0x3, 0x9044, 0x101, 0xffffff81, 0x0, 0x9, 0x2, 0x1, 0x4c, 0xb, 0x2297, 0x3, 0x5, 0x10, 0x5, 0xdf, 0x4, 0x97, 0x10, 0x1, 0x9, 0x4, 0x7, 0x7, 0x400, 0x5, 0x0, 0x5, 0x8000, 0x7, 0xffff, 0x10, 0x8001, 0x3, 0x9, 0x6, 0x0, 0xff, 0x7, 0x4, 0xe6, 0x9, 0x5, 0x8, 0x0, 0x9b68, 0x428e2d0b, 0x9, 0x3, 0x9, 0x8, 0x8000, 0x84, 0x2, 0x8000, 0x1, 0x6, 0xfffffffe, 0x8000, 0x3, 0x1ff, 0x7, 0x5, 0x2, 0xe, 0x8, 0x4, 0x80000001, 0x544, 0x7, 0x2, 0x8, 0xe, 0x13, 0x5, 0x5be, 0x7, 0xf, 0xb05, 0xf75, 0x200, 0x7, 0x3, 0xffffffff, 0x200, 0x9, 0x9, 0x4, 0xfff, 0x53d, 0x5, 0xfffffff8, 0x6, 0x7, 0xfe3c, 0x5, 0x4, 0x3, 0x9, 0x7, 0x0, 0x8001, 0x2, 0xfffffff8, 0x0, 0x9, 0x6dd, 0x2, 0x4c37, 0x70, 0x1000, 0x1, 0xffff, 0x9, 0x2, 0x2, 0x6, 0x4, 0x76, 0x9, 0xffffffff, 0x6, 0x5, 0x6, 0xf, 0x4, 0x3, 0x0, 0x6, 0x0, 0x1, 0xeb71, 0x7f, 0x1ff, 0x10000, 0x8c6c, 0x2, 0xa684, 0x5c6a, 0x2, 0x80, 0x0, 0x0, 0x1, 0x2, 0x5, 0x81, 0x1, 0x7, 0x4, 0xfffffbff, 0x6, 0x0, 0xb75, 0x80000001, 0x1de, 0x4, 0xfffffff7, 0xff, 0x2, 0x7, 0xa, 0x9, 0x8, 0x5a, 0x3, 0x10000, 0x4, 0x6c6a, 0x2, 0x44d, 0x8f, 0x8, 0x7fff, 0x6, 0x6, 0xe7, 0x1, 0x6, 0xffffffff, 0x3, 0x0, 0x4, 0x7, 0x1, 0x1, 0x9, 0x1, 0x2, 0x3, 0x8, 0x9, 0x7f, 0x8, 0x8f, 0x6, 0x5, 0x6, 0x0, 0x6, 0x8, 0x2, 0x7f, 0x20000, 0xe784, 0x4, 0x6, 0xa346, 0x9, 0x197e9389, 0xe, 0xa0, 0x9, 0x7, 0x7, 0x9, 0x6, 0xca, 0x10000, 0x1, 0x6, 0x3ff, 0x50000, 0x60da, 0xd, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}], [], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4d34, 0x4, 0x10001, 0x7, 0xb, {0x82, 0x2, 0x3f81, 0x8, 0x7, 0x9}, {0x1, 0x2, 0x0, 0x8000, 0x0, 0x10001}, 0x9, 0x55, 0xfd}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x8, 0xfff, 0x2, {0x2, 0x1, 0xedc, 0x4, 0x2, 0x6}, {0x0, 0x2, 0x7, 0xfb93, 0x89, 0x3552b84}, 0x5, 0x10000, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]]}, {0xe7, 0x6, "57d04b45dd26662a857cec77c7b9c9b001b2f4b4d3a9e18a9c2603cf679fbd9d3349b619a99147d9e0416144611bac6c9709d599e5b303887d373febdaba8a02cf18333e3f654557d70f29f7408e21e4121be455aaf9357b460c2932bf017d864b8978ab0da49b07eaaced522a10d40a9a842eab319d3d998e0528c8bc6d767b883718d57412c6ca71ef92ca281d7bd64010b4a627ba1e541541dd6c2caf0a2b309e31ed2b1a5c1ff9602947dabb7f13b7b6d133cbb76dd0b40fcb70a618a783954e4d01842c9a0d3196fde7f3a5bffbdf4f4e2ded6efeb24ec8b594ef5fbee38fc5fa"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x7c, 0x7, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10000, 0x2, 0x0, 0x3, 0x2}, 0x2}}]}, {0x32, 0x6, "b4a2d785d7a2dd8bda50a05c0e6871ae36c1cd9da57a665bd7c9d82034b92451ba9d91138fb6c1f9091e6ec72c27"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x27c2ff9f}, @TCA_U32_INDEV={0x14, 0x8, 'macvlan0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_U32_HASH={0x8, 0x2, 0x7fffffff}, @TCA_U32_SEL={0x374, 0x5, {0x10, 0xb, 0xac, 0x6, 0x4, 0x1, 0xd, 0x7, [{0x0, 0x9, 0x6, 0x4}, {0x3, 0x4, 0xc, 0x3}, {0x1, 0xfff, 0x2, 0xb}, {0x8, 0xc0, 0x80, 0x70ae}, {0x0, 0x7, 0x8, 0x4}, {0x0, 0x81, 0x8, 0x7b}, {0x5, 0x81, 0x800, 0x1}, {0x6, 0x9, 0x3805, 0x80}, {0x3, 0x5}, {0x33a, 0x7, 0xc821}, {0x6, 0xfffffffb, 0x997, 0xb89}, {0x2d, 0x6, 0x9, 0x5}, {0x0, 0x6, 0xd0, 0xcd1}, {0x3, 0x5, 0x4, 0x9}, {0xd, 0x5, 0x5, 0x5}, {0x2, 0xfffffffb, 0x1, 0x8}, {0x0, 0x7, 0x4, 0x80000001}, {0xebbe4db0, 0x8000, 0x7, 0x5}, {0x9, 0xbf09, 0x9, 0x4712}, {0x400, 0x4, 0xfffffffe, 0x2}, {0x4, 0x6, 0x7}, {0xa72d, 0x0, 0x1, 0x2400}, {0x7, 0x1, 0x100}, {0x5, 0x4, 0x8, 0x4}, {0x242, 0x1, 0x8, 0x5}, {0xf2b, 0x7, 0xa, 0xb}, {0x4, 0x8, 0x6, 0x2}, {0xe, 0x54, 0x7, 0x3}, {0x8, 0xffff, 0xc6, 0x8001}, {0x5, 0xb, 0x4}, {0x61d, 0x180f, 0x80000000, 0x37}, {0x8, 0x5, 0x9, 0x63}, {0x5, 0xfffffffe, 0x7, 0x6}, {0x8, 0x3, 0x5, 0x5}, {0x8, 0x10000, 0x10001, 0x7}, {0x8, 0x6a, 0x1, 0x740}, {0x3, 0x8, 0x2, 0x6}, {0xffffffff, 0x4b9, 0x1, 0x4}, {0x400, 0x9, 0x10001, 0x8}, {0x73ff, 0x9, 0x5456, 0x4}, {0x8, 0x1, 0x40}, {0x101, 0x3, 0xffff}, {0xfffffffe, 0x9, 0x1bd, 0x8}, {0x9, 0x3, 0x1, 0x8}, {0xc7e, 0x4ff5, 0x10000, 0x1}, {0x5, 0x7, 0xffffff80, 0x7f}, {0x6, 0x9, 0xd, 0xffffffff}, {0x0, 0x8001, 0xc4f}, {0x3, 0x11, 0x80000001, 0x4}, {0x1, 0xf49666, 0x2, 0x6}, {0x6, 0x1, 0x3, 0x6}, {0x7420, 0x9, 0x5d4f, 0x7}, {0x9, 0x80000000, 0x5, 0x80000000}, {0x80000000, 0x0, 0x1, 0x6fc}]}}]}}]}, 0x16ec}, 0x1, 0x0, 0x0, 0x11}, 0x40) 2.086851448s ago: executing program 4 (id=6213): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00010b000082e4f64b00fc35420000000000000000000000000000000000ef000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0500000000000000000016e5"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000480)={{r7, 0x4, 0x9, 0x0, 0x100, 0x100000000, 0x10, 0x2, 0x8, 0x917, 0xa6a4, 0x2, 0x9, 0x1b8b84b7, 0xffffffffffff3e05}, 0x18, [0x0, 0x0, 0x0]}) 2.078439234s ago: executing program 1 (id=6214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000180)="c95ce1e5eedc57792eef59a3828bd7febb40", 0xfffffcc0) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r6, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x2006004}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20048850) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x20, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x49010, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x358, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "ba9e43465920b0dc62408d378db9dc2bebf40757380eb29d1200bd00dbf92db8a8387bc4c508a5894b84a23469ce8bbf9ac0ef59a89a010acffe37ae6925473755f45f20912edafb65f8630361944446c38194adeb6cc776b140bcc1fae2840b0fac5473f5273a78c9b9a4a9c80d49b8f429b8ed684dd1f852dc2613c11146055895935e6976dd4745a7b2ab55d3a669a6919bd264139adf3a130c7d31216b68442459fc3fa490a3f48d5ff5bcf6c37a10b5c5224c110f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8b, 0x6, "18157603bc00f6bf731e8b9bfd97811352dd107dfdaf854f5c3687af0caadfdecd932834b16e7ede157d30fffea5876fdf4be9f765c455fd456b41118f4d301a9054471a884e30faa680a6b3504026ea67f0de51c2d3b2ca5b74e9b8e10b2c2ecfeab51bc8a143a24a665ef6f722a804460677f02cc0039fa9f188dbeb1d9400544349b5b6c304"}, @NFTA_TABLE_USERDATA={0xe6, 0x6, "24b33d23415bd8e8c946eff90780ee0ba9e3be50843a374b10491e50fa17f43a8d898f455a9ff268e64bc5c450913bdf8cb1ce5af433ade93bad25cec64a4ad026934cba243cdc467fd45238be46415386862cffd7cb9dc65801c02041f3e5dd4f241be82e5f560dd45917e41a703f97267720671150bb1a2b47402416d000c6c019f2322f3b343e15b9ac0686d685a5e5df190dcb2748512c0bcfad038408ccc0a83aae90171008e8adcd6f20b38bd6a442b0edcfcc5063d628c921428651896a9d6601d265ad03614d8003c45f3beebba3574cf4d5f53b7ae343b662225c837472"}, @NFTA_TABLE_USERDATA={0xde, 0x6, "55329f6379fbe92b3a89e8eae9a8782b03e16bf69f080cf1f8048efe240b27dbbe83dbcb955a30e387f3cb5bcf15b414b43bf750408fa0a8bce37c515f336503b9819914bf1f99c3d90e317ac46d7d28810bb41ef92b3cea5bb006085d58f52190a185ee577924cb8c8cafbd86d0218d4356e7e6a9b308ca37c6e9c1d1ae21d267ae1493361b205518ddbf92f76c9fc5c882cfd183bd10907854477ad362012084dcd3827f47dd0d05c0a4de850edba8bc4b48d8ebe920841ff3258bfc49b3ba703028aa4329996fb5359aa44c0dd382f96392916cc49a129543"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x39c}, 0x1, 0x0, 0x0, 0x40098}, 0x10) 1.939065339s ago: executing program 0 (id=6216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000040)) r2 = socket(0x1000000010, 0x80802, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) 1.856918365s ago: executing program 4 (id=6217): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'pimreg\x00', @random="f39301dff678"}) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe8800000000000000000000000001016401010000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffffac1414aa000004d53c"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r4 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 1.711053242s ago: executing program 4 (id=6219): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x130, &(0x7f0000000100)={@link_local, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x7}}, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x3, 0x3, 0x11a, 0x67, 0x0, 0x8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x20}, {[@end, @timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x6, [{@loopback, 0x1}]}, @timestamp={0x44, 0xc, 0x80, 0x0, 0xd, [0x7fffffff, 0xfff]}, @timestamp={0x44, 0x14, 0xdf, 0x0, 0x7, [0x7ff, 0x7fff, 0x0, 0x7]}]}}, {{0x4e23, 0x4e21, r0, r2, 0x0, 0x0, 0xe, 0x10, 0x7f, 0x0, 0xff7d, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x1}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "ac0b9eb872a5975dff59f1602ea4c171"}]}}, {"e61ca701990ddb04bd4b866a901a1e9f22402b0cb20ff4ba7e96cab78c12851ce8a26a79ea48dbe2710498535db701ac1a4d1a28313df2c2c012ff813b3e6f15ad33239cec02bdbfeda7acea7a4aea7c338d1cda34e7e9be03597cb8ad917711682789182485f7172c2d1f68e3b6e5c848f428c0f0e3c882b2e2f526a1c67118ac857b4a8975df0dad1e3956c3b8b71c80460ceab5065e7f7ecf4ca6cc2c"}}}}}}, 0x0) 1.642511189s ago: executing program 0 (id=6220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r2, &(0x7f0000000140)=""/45, 0x2d, 0x1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.529195794s ago: executing program 3 (id=6221): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x94) 1.527735405s ago: executing program 4 (id=6222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "3ac3014a9fe5b5be", "1f0111f25415d92e72c8263e63f2bdd8", "9f78339f", "72ea5413bc718716"}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10023, 0x0, 0x0) shutdown(r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.51134532s ago: executing program 0 (id=6223): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x100]}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x54}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x4000000) r6 = accept$inet(r2, 0x0, &(0x7f0000000040)) recvfrom(r6, &(0x7f0000000240)=""/81, 0x51, 0x101, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x6, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x22, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593009290"}]}]}}}}}}}, 0x0) 1.370075177s ago: executing program 3 (id=6224): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}}], 0x1, 0x45) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x1d, &(0x7f0000000380), 0x8) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:75'], 0x9) 1.228601258s ago: executing program 0 (id=6225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syz_tun\x00', 0x400}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000004c0)={{r1, &(0x7f0000000180)='[\x00', 0x2800, &(0x7f00000001c0)={@align=0x54, {0x5, 0x44a, 0xfffffffe, 0x2}}, 0x6, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}, 0x2, &(0x7f0000000480)=[{0x1, 0x4, &(0x7f0000000280)='!^[:\\\x00', &(0x7f00000002c0)="5a69b9b8de8b04fb8a82fa91ba92dc379c39f0969cf345cba8c5fb48399a3c060a46db267db5f67dcb79cf1d9aa69ecbcec487be86916952d6daf3d2480dcb44343f64ff36d787a334bceff47816bd1eea2b5cbb90b4b24eb7d198ce74154d3b418241c32a0ad23b213eab551884", 0x6e, 0x10}, {0x1, 0x401, &(0x7f0000000340)='\x00', &(0x7f0000000380)="2caa1efb2ca3d2a9a5bac72d6d495017039ca939d34f1435fea4518ff0f3df9fca3283adcc947b7ba508f475007628137a7c4257cae3fe48b029bfc239fa942cae13201d458bdfda095002d8e4b0e92593fdac095c1cd0aef31ab6ddc40a42b0da9943df9f083fe21e1fa31559794a4f5f0b89c414a911d07a51ebe84a60349160e83cc9d04184b5cf004fdca29e224ada6154ad964e6681f55e1e181e5066cc1e9b19003437db67ca93af4356328595a3ed22e41435650353fd9dfb30f74588ae3bec0acb5e6933706e9f275992d84d7971a7a916", 0xd5}]}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000006c0)=0x2, 0x4) r4 = socket(0x2b, 0x2, 0x0) r5 = socket$kcm(0x29, 0x4, 0x0) r6 = socket(0x0, 0x6, 0x7b4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0) close(r7) write(r5, &(0x7f0000000740)="1fee3fc231305fa4d2748d764add97d6f144dbdb14ded2202497cad7e935e25141f01d89f7dbe5ad810797e40e074e", 0x2f) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x1402, 0x400, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000900)={'veth0_to_bond\x00', &(0x7f00000008c0)=@ethtool_perm_addr={0x20, 0x7, "6a7b0d14a1c651"}}) write(r6, &(0x7f0000000940)="49f97e0a8c87c2af6c658a115adcd6a925aca40e26f280b20cf29a1a9fd93acc5f0f715fe59f6e9f5d9dff97ea81ee058762e43a7662b05a5f13fdd9444278d744d517a9", 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x18, 0x1409, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000804}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={@private=0xa010102, 0x0, 0x0, 0x70, 0x0, [{@empty}, {}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r9 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x1, 0x6, 0x22, @local, @mcast1, 0x1, 0x1, 0x80, 0x80000000}}) sendmsg$nl_route_sched(r4, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@deltclass={0x60, 0x29, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xe, 0x10}, {0xfff3, 0xd}, {0xf, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x70}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0xa}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_sfb={0x8}]}, 0x60}}, 0x10) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000e00)) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000e40)) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000e80)={0xe, 0x1, 0x6, 0xe, 0x5}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) splice(r11, &(0x7f0000000ec0)=0x23, r9, &(0x7f0000000f00)=0x7fffffff, 0x6, 0x1) 1.190078547s ago: executing program 3 (id=6226): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x30, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x5, "ff6852"}, @ra={0x94, 0x4}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 1.125205159s ago: executing program 1 (id=6227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @multicast1}, &(0x7f0000000140)=0xc) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000130000082bbd7000fedbdf25060687014e204e2408000000000080010000000001000000020000000e0000000900000004000000", @ANYRES32=r2, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 981.275154ms ago: executing program 0 (id=6228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000300)=""/4096}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r1, 0x7}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) 970.772598ms ago: executing program 1 (id=6229): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r2, 0x40047452, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x3, 0x75040e60, @empty, 0x2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac7100206000000ffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 956.490139ms ago: executing program 3 (id=6230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='westwood', 0x8) sendto$inet(r1, &(0x7f0000000080)="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", 0xfe, 0x20c5, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) 717.568062ms ago: executing program 3 (id=6231): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x85, 0x94, &(0x7f00000006c0)="f2571811b00579e6107c8135e8d872106417bfa0a9822ab31b3a62bded025f37d67c86b5aaa07ce05b7fd598838890edccea99a6889835d20081e9ac95e446b0c5edff79ccdecbf73137b80932d4320f005c4dce178b8950368b0cb1bf02e2b1f2c0319a5275fe0c974d4117b616418f1d7e58b7bd3ceffc81c31ae5fe4a88ba1efd8829f2", &(0x7f0000000780)=""/148, 0x9, 0x0, 0x47, 0x63, &(0x7f00000001c0)="659dc38fee3df8ad4b7832b40ab86f4be55433c4702d98559bdd10e561ee44fe38ebfc8eccec4f878f43c55ef79e0fe24ef467ce08cc4cd579eb969246c043410e3096c16c66ad", &(0x7f0000000840)="7e804810072c3e7cb150be09cdc944a6587e6e64e80d27baf54697cc423f9cf0ad2668810d8682a6f0566eee692ff68d8d98908129aea8571f6301b99907f499fcb680c0f3bde3d8b9fb9d8fc77146f9b9d61181b7136c0f64f5a30b0b4d90ddfe4948", 0x1, 0x0, 0xffffffff}, 0x50) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 715.813907ms ago: executing program 1 (id=6232): syz_emit_ethernet(0xae, &(0x7f0000000180)=ANY=[@ANYBLOB="e28c59e5a32f4180c20000000800450000a000640000002f907800000000e0000001b480655800000000010110000800000086dd7d4a4a5f2279c9c5cacc6c503c8a20fb9718e89a61a733c5ad664d4ddcb8a1d98906f90faf07f54ab73ce0e10c9d7c009669d7f61f27e0f4d16c4c48cae41f7ac258d2fcc99f080088be010000021000002088f7ffff00000000080022eb00000000200000000200000000000000ffff000008006558fffffffe"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB="1a2a4c4bee8183a1227bfe04da6fce0d3e8fce0525c40802ee1a812b5ab758fa878a3be275435cdf9c74db2923abd99c64f9b89340441c7d49532f102de7d61f14811d47b55c2c155528e3bf3062b84adfc56787363a1fc620bc918fcb9387d66c1ef0bb2a6be7a2b61c6ae583c52f3530c5ca6ef5ef0ce8bdd38f7c5541105cf865fd9978d393135c5264c8e28ccd0f2ff7aadf76a97f7d4cbabead456e09250dfccee0db04e64c0f9d22812dce4148ee046abdcef5d0f158c8bdb9cdb7bd546eaeb2c3183a66e90b379031a3734d68e1995eeeef5473aa7488725204bfc3", @ANYRES32=r2, @ANYBLOB="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", @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES16=r4], 0x24}}, 0x0) 580.521721ms ago: executing program 4 (id=6233): socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x328}}], 0x1, 0x44010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) 316.576222ms ago: executing program 1 (id=6234): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, r0}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @remote, 0x5}], 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000040)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 215.173459ms ago: executing program 3 (id=6235): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000080)=0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9b, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 0s ago: executing program 1 (id=6236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000016c0)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r5, 0x0, 0x0}, 0x10) bind$can_j1939(r4, &(0x7f0000000680)={0x1d, r3, 0x2, {0x2, 0xf0}, 0x1fb}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x5, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) syz_emit_ethernet(0x187, &(0x7f0000001700)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @dccp={{0x1f, 0x4, 0x0, 0x9, 0x179, 0x6b, 0x0, 0x3, 0x21, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x3d, 0x1, 0x8, [{@rand_addr=0x64010101, 0xffffffff}, {@empty}, {@private=0xa010100, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x37}, 0xfffffffb}, {@broadcast, 0x80}, {@broadcast, 0x3}, {@empty, 0x9}, {@private=0xa010100, 0x8000}]}, @rr={0x7, 0xf, 0xdf, [@rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0x47, [@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x3, 'Rc}', 0x54, "6b5c9c"}, "dd086fe7e4220acbf3576f2ca88e7dfa26d6cdd40af74d6fa5e1b93acec1f1eb518afd4697e4ee265d4cbffeb2834ee4081c065a84e196181bde8e5ed3c23750eea7b73a3187a39e47caee60345e85903d13884af965b7dd3e131548a185ee60cf4f863eeb155c688ab973ab205be597a4230d1fe828a5c6550d40ae2f9ca65cd2a3ebfbb12482bf86d3fd27eace42e58a8f9e736698a1b8f735f8f863ac6842b2160a3901a3cdae5fb4c3d8c8d79a37e44f9d404b3e575a832b5d6bb3ac0c7e5e8b3e42be846e39d78302d6580d73a0105675e9b1f58a6f7c246482af88c6709721e0f192f1047d5e7fdd4b6a"}}}}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x52, "cbdc6cc0d87f3ccbcc97569fe2c0c2291c7953e6900424aadcf8bb3d09b1a09c9f4e23ef1f1b0c73fc099764a7999eac63fe831804efefd84bd2bd02e2f198e99469e1a1a4360b83b2697aac725fac272c82"}, &(0x7f00000000c0)=0x5a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000380)={r9, 0x2}, 0x8) r10 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_raw(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) sendmsg$xdp(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) recvmsg$can_raw(r10, &(0x7f0000001680)={&(0x7f0000001080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001100)=""/117, 0x75}, {&(0x7f0000001180)=""/244, 0xf4}, {&(0x7f0000001280)=""/243, 0xf3}, {&(0x7f0000001380)=""/95, 0x5f}, {&(0x7f0000001400)=""/116, 0x74}, {&(0x7f0000001480)=""/92, 0x5c}], 0x6, &(0x7f0000001580)=""/193, 0xc1}, 0x101) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000) kernel console output (not intermixed with test programs): invalid length. [ 444.678956][T22581] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 444.690306][T22581] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.702486][T22581] gretap2: entered promiscuous mode [ 444.708043][T22581] gretap2: entered allmulticast mode [ 444.915570][T22601] netlink: 'syz.3.4579': attribute type 23 has an invalid length. [ 444.943231][T22600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.028314][ T5889] IPVS: starting estimator thread 0... [ 445.139688][T22605] IPVS: using max 29 ests per chain, 69600 per kthread [ 445.226941][T22616] syzkaller0: entered promiscuous mode [ 445.232502][T22616] syzkaller0: entered allmulticast mode [ 445.540890][ T5889] IPVS: starting estimator thread 0... [ 445.632737][T22635] IPVS: using max 25 ests per chain, 60000 per kthread [ 445.751927][T22647] ip6tnl0: entered promiscuous mode [ 445.804890][T22653] netlink: 'syz.0.4595': attribute type 26 has an invalid length. [ 445.817107][T22653] netlink: 'syz.0.4595': attribute type 26 has an invalid length. [ 445.910874][T22661] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 445.958811][T22665] IPv6: Can't replace route, no match found [ 446.034917][T22668] __nla_validate_parse: 11 callbacks suppressed [ 446.034939][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4600'. [ 446.051932][T22670] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 446.073105][T22668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4600'. [ 446.346999][T22686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'. [ 446.373268][T22686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.394191][T22686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.425107][T22686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.432559][T22686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.826001][T22713] erspan0: entered allmulticast mode [ 447.168875][T22741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4625'. [ 447.207837][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 447.254924][T22744] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4626'. [ 447.298951][T22747] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4628'. [ 447.304519][T22744] netlink: 'syz.2.4626': attribute type 1 has an invalid length. [ 447.335351][T22744] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4626'. [ 447.453895][T22755] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 447.497478][T22755] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 447.554219][T22759] geneve2: entered promiscuous mode [ 447.571345][T22762] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4631'. [ 447.798107][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4634'. [ 447.834777][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4634'. [ 448.026559][T22779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.046368][T22779] team0: Port device batadv0 added [ 448.253975][T22787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.268705][T22787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.279299][T22787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 448.447896][T22787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.460489][T22787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.475935][T22787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 448.580542][T22787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.624793][T22787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.661941][T22787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 448.739839][T22787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.761566][T22787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.785026][T22787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 448.984992][T17755] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.996424][T17755] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 449.019843][T17755] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.148216][T17765] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.178605][T17765] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 449.215079][T17765] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.269668][T17752] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.298612][T17752] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 449.335950][T17752] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.420853][T17769] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.442563][T17769] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 449.467999][T17769] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 450.149227][T22879] netlink: 'syz.3.4661': attribute type 4 has an invalid length. [ 450.196095][T22867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.249940][T22882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.538613][T22899] netlink: 'syz.2.4666': attribute type 1 has an invalid length. [ 450.676033][T22904] openvswitch: netlink: Tunnel attr 95 out of range max 16 [ 450.852307][T22907] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 451.174370][T22934] bond3: entered promiscuous mode [ 451.192414][T22933] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 451.225840][T22942] __nla_validate_parse: 12 callbacks suppressed [ 451.225863][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4676'. [ 451.705441][T22966] bond0: Caught tx_queue_len zero misconfig [ 451.837641][T22976] ip6tnl0: Caught tx_queue_len zero misconfig [ 451.947758][T22982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.988774][T22982] tipc: Started in network mode [ 451.995823][T22982] tipc: Node identity 4, cluster identity 4711 [ 452.008177][T22982] tipc: Node number set to 4 [ 452.325766][T23002] x_tables: duplicate underflow at hook 3 [ 452.629835][T23017] syzkaller1: entered promiscuous mode [ 452.644129][T23017] syzkaller1: entered allmulticast mode [ 452.663808][T23012] wg1 speed is unknown, defaulting to 1000 [ 452.751230][T23029] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4699'. [ 453.147763][T23044] syzkaller1: entered promiscuous mode [ 453.160194][T23044] syzkaller1: entered allmulticast mode [ 453.295565][T23058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4704'. [ 455.540168][T23017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.931526][T23083] bond0: Error: Cannot enslave bond to itself. [ 455.955382][T23081] tipc: Enabling of bearer rejected, failed to enable media [ 456.062290][T23095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4716'. [ 456.151857][T23095] bond0: entered promiscuous mode [ 456.157938][T23095] bond_slave_1: entered promiscuous mode [ 456.177525][T23095] ip6erspan0: entered promiscuous mode [ 456.195860][T23095] hsr0: entered promiscuous mode [ 456.201442][T23098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.934761][T23118] bond4: (slave bond_slave_1): Device is not our slave [ 456.943833][T23122] xt_addrtype: ipv6 does not support BROADCAST matching [ 456.953438][T23122] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4725'. [ 456.964770][T23118] bond4: option active_slave: invalid value (bond_slave_1) [ 456.977250][T23118] bond4 (unregistering): Released all slaves [ 457.187606][T23133] netlink: 'syz.1.4727': attribute type 8 has an invalid length. [ 457.210315][T23137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.223444][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4727'. [ 457.235481][T23134] sit0: Caught tx_queue_len zero misconfig [ 457.261900][T23135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'. [ 457.626998][T23160] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4736'. [ 457.656243][T23163] netlink: 'syz.4.4737': attribute type 4 has an invalid length. [ 458.261341][T23188] netlink: 'syz.1.4741': attribute type 1 has an invalid length. [ 458.354062][T23190] netlink: 'syz.3.4742': attribute type 2 has an invalid length. [ 458.396952][T23190] : entered promiscuous mode [ 458.543514][T23199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4744'. [ 458.568746][T23199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4744'. [ 458.916030][T23211] wg1 speed is unknown, defaulting to 1000 [ 458.941371][T23212] wg1 speed is unknown, defaulting to 1000 [ 459.354962][T23228] netlink: 'syz.3.4752': attribute type 1 has an invalid length. [ 459.363581][T23229] netlink: 'syz.3.4752': attribute type 1 has an invalid length. [ 459.486219][T23229] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 459.487166][T23228] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 459.692241][T23250] syzkaller0: entered promiscuous mode [ 459.710697][T23250] syzkaller0: entered allmulticast mode [ 459.991940][T23262] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4758'. [ 460.031247][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4758'. [ 460.373532][T23279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.459650][T23276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4762'. [ 460.689628][T23288] syzkaller0: entered promiscuous mode [ 460.696882][T23288] syzkaller0: entered allmulticast mode [ 461.067843][T23305] lo: Caught tx_queue_len zero misconfig [ 461.210320][T23305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4769'. [ 461.483078][T23315] tipc: Enabling of bearer rejected, failed to enable media [ 461.784758][T23330] netlink: 'syz.3.4775': attribute type 1 has an invalid length. [ 461.827794][T23330] bond4: entered promiscuous mode [ 461.834812][T23330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.468237][T23364] __nla_validate_parse: 3 callbacks suppressed [ 462.468258][T23364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4785'. [ 462.507000][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4785'. [ 462.573891][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 462.674931][T23375] netlink: 'syz.1.4786': attribute type 10 has an invalid length. [ 462.684177][T23375] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 462.711431][T23376] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4787'. [ 462.931164][T23385] xt_policy: output policy not valid in PREROUTING and INPUT [ 462.991594][T23376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4787'. [ 463.274093][T23393] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4791'. [ 463.310863][T23393] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4791'. [ 463.656146][T23413] netlink: 'syz.1.4796': attribute type 10 has an invalid length. [ 463.730362][T23417] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4798'. [ 463.756973][T23413] veth1_macvtap: left promiscuous mode [ 463.763836][T23417] nbd: illegal input index -8454144 [ 463.776646][T23413] team0: Device veth1_macvtap failed to register rx_handler [ 463.980079][T23410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.013499][T23410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.248588][T23410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.303143][T23445] sctp: [Deprecated]: syz.1.4806 (pid 23445) Use of int in max_burst socket option. [ 464.303143][T23445] Use struct sctp_assoc_value instead [ 464.303373][T23410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.401283][T23436] bond_slave_1: entered promiscuous mode [ 464.424874][T23448] sctp: [Deprecated]: syz.4.4807 (pid 23448) Use of int in maxseg socket option. [ 464.424874][T23448] Use struct sctp_assoc_value instead [ 464.505363][T23410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.518868][T23410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.616638][T23410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.654601][T23410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.710924][T23458] netlink: 'syz.1.4811': attribute type 11 has an invalid length. [ 464.734804][T23460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.755858][T23458] netlink: 'syz.1.4811': attribute type 11 has an invalid length. [ 464.766350][T23458] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4811'. [ 464.858446][T23462] pim6reg: entered allmulticast mode [ 464.996998][ T1112] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.006217][ T1112] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.090370][ T1112] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.122461][ T1112] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.147539][ T1112] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.163866][ T1112] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.183385][T23471] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4816'. [ 465.200254][T23471] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 465.225410][T23480] netlink: 'syz.0.4818': attribute type 2 has an invalid length. [ 465.237515][T23480] netlink: 'syz.0.4818': attribute type 3 has an invalid length. [ 465.249051][T17765] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.257888][T17765] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.481992][T23486] netlink: 'syz.4.4819': attribute type 11 has an invalid length. [ 465.632187][T23493] netlink: 'syz.0.4822': attribute type 1 has an invalid length. [ 466.051413][T23520] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4828'. [ 466.287047][T23529] gretap0: entered promiscuous mode [ 466.309826][T23529] gretap0: left promiscuous mode [ 467.106388][T23566] IPv6: NLM_F_CREATE should be specified when creating new route [ 467.422484][T23585] wg1 speed is unknown, defaulting to 1000 [ 467.637540][T23600] ip6tnl0: Caught tx_queue_len zero misconfig [ 468.076582][T23625] netlink: 'syz.3.4854': attribute type 1 has an invalid length. [ 468.120563][T23625] __nla_validate_parse: 7 callbacks suppressed [ 468.120583][T23625] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4854'. [ 468.172690][T23625] netlink: 'syz.3.4854': attribute type 1 has an invalid length. [ 468.189702][T23625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4854'. [ 468.437744][T23636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4858'. [ 468.447603][T23636] block nbd1: Unsupported socket: should be TCP or UNIX. [ 468.529717][T23640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4859'. [ 468.586196][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'. [ 468.622882][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4861'. [ 468.635921][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'. [ 468.859776][T23662] batadv_slave_0: Caught tx_queue_len zero misconfig [ 469.033817][T23668] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4866'. [ 469.137749][T23675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4868'. [ 469.270973][T23675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.350825][T23689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 469.528229][T23698] xt_addrtype: ipv6 does not support BROADCAST matching [ 469.575860][T23699] netlink: 'syz.4.4873': attribute type 5 has an invalid length. [ 469.696777][T23703] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 469.709315][T23703] bond4 (unregistering): Released all slaves [ 470.294090][T23735] syzkaller0: entered promiscuous mode [ 470.299853][T23735] syzkaller0: entered allmulticast mode [ 470.344367][T23735] macsec1: entered promiscuous mode [ 470.349696][T23735] bridge0: entered promiscuous mode [ 470.362961][T23735] macsec1: entered allmulticast mode [ 470.368314][T23735] bridge0: entered allmulticast mode [ 470.386284][T23735] bridge0: port 3(macsec1) entered blocking state [ 470.403041][T23735] bridge0: port 3(macsec1) entered disabled state [ 470.477649][T23735] bridge0: left allmulticast mode [ 470.482976][T23735] bridge0: left promiscuous mode [ 470.515391][T23741] netlink: 'syz.2.4888': attribute type 10 has an invalid length. [ 471.196433][T23770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.246692][T23774] netlink: 'syz.3.4897': attribute type 1 has an invalid length. [ 471.338623][T23777] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 471.345215][T23777] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 471.837682][T23810] veth0: entered promiscuous mode [ 471.854186][T23810] veth0: left promiscuous mode [ 472.088509][T23824] netlink: 'syz.2.4910': attribute type 1 has an invalid length. [ 472.169117][T23824] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 472.633922][T23840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.971384][T23857] syzkaller1: entered promiscuous mode [ 472.978446][T23857] syzkaller1: entered allmulticast mode [ 474.477099][T23786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.689643][T23867] __nla_validate_parse: 8 callbacks suppressed [ 474.689664][T23867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4921'. [ 474.739194][T23867] veth0_to_team: entered promiscuous mode [ 474.851857][T23867] veth0_to_team: left promiscuous mode [ 474.909429][T23882] netlink: 'syz.3.4926': attribute type 18 has an invalid length. [ 474.922964][T23882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4926'. [ 474.972912][T23882] netlink: 'syz.3.4926': attribute type 18 has an invalid length. [ 474.980781][T23882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4926'. [ 475.561867][T23922] netlink: 'syz.1.4938': attribute type 29 has an invalid length. [ 475.575647][T23922] netlink: 'syz.1.4938': attribute type 29 has an invalid length. [ 475.585393][T23922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4938'. [ 475.625563][T23921] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4939'. [ 476.105429][T23959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4946'. [ 476.134885][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4946'. [ 476.227666][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4950'. [ 476.290079][T23972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4951'. [ 476.301195][T23972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4951'. [ 476.924808][T24015] netlink: 'syz.1.4961': attribute type 1 has an invalid length. [ 477.333095][T24039] netlink: 'syz.0.4968': attribute type 3 has an invalid length. [ 477.374798][T24000] infiniband : set down [ 477.389620][T24000] infiniband : added ipvlan0 [ 477.516797][T24000] RDS/IB: : added [ 477.523394][T24000] smc: adding ib device  with port count 1 [ 477.529821][T24000] smc: ib device  port 1 has no pnetid [ 477.758498][T24059] syzkaller0: entered promiscuous mode [ 477.775872][T24059] syzkaller0: entered allmulticast mode [ 479.619681][T24096] netlink: 'syz.1.4981': attribute type 11 has an invalid length. [ 479.996527][T24117] lo: Caught tx_queue_len zero misconfig [ 480.002242][T24117] netem: change failed [ 480.034715][T24111] block nbd1: server does not support multiple connections per device. [ 480.053850][T24111] block nbd1: shutting down sockets [ 480.155873][T24112] block nbd1: server does not support multiple connections per device. [ 480.165687][T24112] block nbd1: shutting down sockets [ 480.421388][T24131] __nla_validate_parse: 6 callbacks suppressed [ 480.421408][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'. [ 480.514930][T24133] ip6tnl0: entered promiscuous mode [ 480.521866][T24139] netlink: 'syz.0.4992': attribute type 50 has an invalid length. [ 480.556510][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4992'. [ 480.612330][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4992'. [ 480.653351][T24133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4992'. [ 480.736219][T24149] Cannot find add_set index 4 as target [ 482.314150][T24224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5014'. [ 482.430253][T24223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.474185][T24230] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5016'. [ 482.654916][T24243] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5019'. [ 482.674205][T24243] netlink: 660 bytes leftover after parsing attributes in process `syz.3.5019'. [ 482.785444][T24251] syzkaller1: entered promiscuous mode [ 482.790979][T24251] syzkaller1: entered allmulticast mode [ 482.934789][T24257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5025'. [ 482.955534][T24261] netlink: 7722 bytes leftover after parsing attributes in process `syz.4.5026'. [ 483.007309][T24255] wg1 speed is unknown, defaulting to 1000 [ 483.048654][T24264] netlink: 'syz.4.5027': attribute type 1 has an invalid length. [ 483.091718][T24266] delete_channel: no stack [ 483.139538][T24266] syzkaller1: entered promiscuous mode [ 483.157377][T24266] syzkaller1: entered allmulticast mode [ 483.422214][T24276] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 483.468757][T24276] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 483.488847][T24276] gretap3: entered promiscuous mode [ 483.498379][T24276] gretap3: entered allmulticast mode [ 484.166892][T24315] netlink: zone id is out of range [ 484.198273][T24318] netlink: zone id is out of range [ 484.214664][T24315] netlink: zone id is out of range [ 484.232534][T24318] netlink: zone id is out of range [ 484.259599][T24315] netlink: zone id is out of range [ 484.269440][T24317] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 484.283499][T24317] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 484.297972][T24318] netlink: zone id is out of range [ 484.304752][T24315] netlink: zone id is out of range [ 484.316256][T24318] netlink: zone id is out of range [ 484.339370][T24315] netlink: zone id is out of range [ 484.358226][T24329] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 484.883821][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 484.974178][T24361] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 485.005083][T24361] bond6 (unregistering): Released all slaves [ 485.137901][T24372] wg1 speed is unknown, defaulting to 1000 [ 485.735386][T24401] tipc: Enabled bearer , priority 0 [ 485.757518][T24398] tipc: Enabling of bearer rejected, already enabled [ 485.770228][T24401] syzkaller0: entered promiscuous mode [ 485.776454][T24401] syzkaller0: entered allmulticast mode [ 485.784879][T24402] syzkaller0: entered promiscuous mode [ 485.790622][T24402] syzkaller0: entered allmulticast mode [ 485.797509][T24407] __nla_validate_parse: 3 callbacks suppressed [ 485.797526][T24407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5066'. [ 485.856969][T24401] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 485.892458][T24398] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 485.949319][T24398] tipc: Resetting bearer [ 485.979684][T24394] tipc: Resetting bearer [ 486.022025][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5070'. [ 486.055349][T24394] tipc: Disabling bearer [ 486.259645][T24424] netlink: 'syz.3.5073': attribute type 2 has an invalid length. [ 486.286117][T24424] netlink: 'syz.3.5073': attribute type 1 has an invalid length. [ 486.587804][T24440] netlink: 'syz.1.5077': attribute type 1 has an invalid length. [ 486.629077][T24440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 486.645982][T24440] sctp: [Deprecated]: syz.1.5077 (pid 24440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.645982][T24440] Use struct sctp_sack_info instead [ 486.674340][T24444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5078'. [ 486.811096][T24444] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 486.875493][T24444] bond5: entered promiscuous mode [ 486.888849][T24444] bond5: entered allmulticast mode [ 486.906156][T24444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.128052][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5085'. [ 487.223607][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5085'. [ 487.450327][T24485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5089'. [ 487.549396][T24485] macvtap1: entered promiscuous mode [ 487.556080][T24485] vlan0: entered promiscuous mode [ 487.562403][T24485] macvtap1: entered allmulticast mode [ 487.568587][T24485] vlan0: entered allmulticast mode [ 487.575043][T24485] veth0_vlan: entered allmulticast mode [ 487.621824][T24487] netlink: 'syz.4.5090': attribute type 1 has an invalid length. [ 487.640956][T24487] netlink: 'syz.4.5090': attribute type 4 has an invalid length. [ 487.665683][T24487] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.5090'. [ 488.072390][T24508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5096'. [ 488.075862][T24511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5095'. [ 488.300597][T24526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5100'. [ 488.332123][T24525] net_ratelimit: 7 callbacks suppressed [ 488.332143][T24525] openvswitch: netlink: IP tunnel dst address not specified [ 488.374240][T24529] netlink: 'syz.3.5100': attribute type 1 has an invalid length. [ 488.507026][T24534] netlink: 'syz.1.5105': attribute type 64 has an invalid length. [ 488.806811][T24557] netlink: 'syz.2.5111': attribute type 3 has an invalid length. [ 488.876738][T24557] xt_policy: too many policy elements [ 488.967061][T24568] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 489.053342][T24577] netlink: 'syz.2.5119': attribute type 3 has an invalid length. [ 489.101706][T24577] veth1_to_team: Caught tx_queue_len zero misconfig [ 489.868246][T24637] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 489.879469][T24637] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 489.888912][T24637] gretap2: entered promiscuous mode [ 489.894581][T24637] gretap2: entered allmulticast mode [ 489.946715][T24641] bridge_slave_1: left allmulticast mode [ 489.954590][T24641] bridge_slave_1: left promiscuous mode [ 489.961415][T24641] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.976361][T24641] bridge_slave_0: left allmulticast mode [ 489.987804][T24641] bridge_slave_0: left promiscuous mode [ 490.001689][T24641] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.430762][T24662] macvtap1: entered promiscuous mode [ 490.445764][T24662] vlan0: entered promiscuous mode [ 490.451365][T24662] macvtap1: entered allmulticast mode [ 490.457144][T24662] vlan0: entered allmulticast mode [ 490.462445][T24662] veth0_vlan: entered allmulticast mode [ 490.822127][T24697] __nla_validate_parse: 16 callbacks suppressed [ 490.822150][T24697] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5153'. [ 490.863970][T24700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.871283][T24700] IPv6: NLM_F_CREATE should be set when creating new route [ 490.878616][T24700] IPv6: NLM_F_CREATE should be set when creating new route [ 490.885909][T24700] IPv6: NLM_F_CREATE should be set when creating new route [ 490.995284][T24701] syzkaller0: entered promiscuous mode [ 491.001338][T24701] syzkaller0: entered allmulticast mode [ 491.043024][T24704] netlink: 8064 bytes leftover after parsing attributes in process `syz.1.5155'. [ 491.159551][T24714] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5158'. [ 491.896429][T24726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.570474][T24704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.580359][T24704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.266844][T24768] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 493.296601][T24768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5167'. [ 493.349911][T24768] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 493.392835][T24780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5172'. [ 493.484534][T24780] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5172'. [ 493.694645][T17752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.704219][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.715070][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.770414][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.894393][T24804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5178'. [ 494.143333][T24816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.358806][T24824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.370452][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5180'. [ 494.405722][T24821] netlink: 'syz.2.5180': attribute type 13 has an invalid length. [ 494.713054][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5185'. [ 494.722238][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5185'. [ 494.803571][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.837408][T24807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.843762][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.323768][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.883421][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.005194][T24808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.023293][T24838] netlink: 412 bytes leftover after parsing attributes in process `syz.0.5185'. [ 497.193256][T24851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.216059][T24857] netlink: 'syz.4.5188': attribute type 13 has an invalid length. [ 497.329079][T24861] netlink: 'syz.1.5191': attribute type 13 has an invalid length. [ 497.489444][ T7535] wg1 speed is unknown, defaulting to 1000 [ 497.489658][T24866] tipc: Enabled bearer , priority 0 [ 497.557289][T24857] syzkaller0: entered promiscuous mode [ 497.573124][T24857] syzkaller0: entered allmulticast mode [ 497.598493][T24857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5188'. [ 497.610396][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.621947][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5197'. [ 497.663661][T24852] tipc: Resetting bearer [ 497.704641][T24852] tipc: Disabling bearer [ 497.966660][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'. [ 497.979689][T24908] xt_cgroup: xt_cgroup: no path or classid specified [ 498.069338][T24911] syzkaller1: entered promiscuous mode [ 498.097405][T24911] syzkaller1: entered allmulticast mode [ 498.180681][T24908] wg1 speed is unknown, defaulting to 1000 [ 498.250989][T24920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5205'. [ 498.263694][T24921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5205'. [ 498.338381][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5208'. [ 498.483819][T24923] macvtap2: entered promiscuous mode [ 498.512963][T24923] macvtap2: entered allmulticast mode [ 498.815760][T24952] netlink: 'syz.4.5210': attribute type 23 has an invalid length. [ 498.829075][T24944] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5210'. [ 498.839521][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5211'. [ 498.967736][T10010] net_ratelimit: 3 callbacks suppressed [ 498.967755][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.998866][T24957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5213'. [ 499.223772][T24976] netlink: 'syz.3.5217': attribute type 1 has an invalid length. [ 499.370744][T24977] bond6: (slave gretap1): making interface the new active one [ 499.397759][T24977] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 499.528130][T17755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.538084][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.547585][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.626577][T24993] erspan0: entered promiscuous mode [ 499.800351][T25006] netlink: 'syz.4.5228': attribute type 1 has an invalid length. [ 499.869843][T25006] netlink: 'syz.4.5228': attribute type 2 has an invalid length. [ 500.308302][T25034] netlink: 'syz.1.5234': attribute type 4 has an invalid length. [ 500.563492][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.646154][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.109967][T25072] wg1 speed is unknown, defaulting to 1000 [ 501.607638][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.036662][T25129] __nla_validate_parse: 7 callbacks suppressed [ 502.036676][T25129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5261'. [ 502.086836][T25129] lo: Caught tx_queue_len zero misconfig [ 502.273926][T25134] sctp: [Deprecated]: syz.4.5263 (pid 25134) Use of int in max_burst socket option deprecated. [ 502.273926][T25134] Use struct sctp_assoc_value instead [ 502.293482][T25134] sctp: [Deprecated]: syz.4.5263 (pid 25134) Use of int in max_burst socket option deprecated. [ 502.293482][T25134] Use struct sctp_assoc_value instead [ 502.317418][T25136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5264'. [ 502.335731][T25136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5264'. [ 502.451575][T25142] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 502.550183][T25146] bond4: option all_slaves_active: invalid value (222) [ 502.565498][T25149] netlink: 'syz.1.5266': attribute type 10 has an invalid length. [ 502.575917][T25146] bond4 (unregistering): Released all slaves [ 502.610242][T25149] team0: Port device dummy0 added [ 502.645016][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.779141][T25163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5272'. [ 502.897336][T25157] bond6: option miimon: invalid value (18446744073709551585) [ 502.933382][T25157] bond6: option miimon: allowed values 0 - 2147483647 [ 503.183747][T25157] bond6 (unregistering): Released all slaves [ 503.311219][T25176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.376001][T25190] x_tables: duplicate underflow at hook 1 [ 503.893441][T25208] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5285'. [ 504.111881][T25218] syzkaller1: entered promiscuous mode [ 504.135928][T25218] syzkaller1: entered allmulticast mode [ 504.222541][T25229] netlink: 'syz.0.5291': attribute type 15 has an invalid length. [ 504.311954][T25231] netlink: 'syz.2.5290': attribute type 2 has an invalid length. [ 504.353621][T25239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5293'. [ 504.369050][T25239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5293'. [ 504.379174][T25231] netlink: 'syz.2.5290': attribute type 2 has an invalid length. [ 504.388401][T25239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5293'. [ 504.424888][T25246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5295'. [ 504.723196][T10010] net_ratelimit: 5 callbacks suppressed [ 504.723214][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.013934][T25274] team0: Port device dummy0 removed [ 505.050219][T25274] bridge_slave_0: left allmulticast mode [ 505.065961][T25274] bridge_slave_0: left promiscuous mode [ 505.078539][T25274] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.106757][T25274] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.134101][T25274] bond0: (slave bond_slave_0): Releasing backup interface [ 505.167866][T25274] bond0: (slave bond_slave_1): Releasing backup interface [ 505.195176][T25274] team0: Port device team_slave_0 removed [ 505.214310][T25274] team0: Port device team_slave_1 removed [ 505.220637][T25274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 505.250740][T25284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5305'. [ 505.394887][T25290] syzkaller0: entered promiscuous mode [ 505.402476][T25290] syzkaller0: entered allmulticast mode [ 505.415868][T25292] netlink: 'syz.0.5308': attribute type 21 has an invalid length. [ 505.439112][T25292] netlink: 'syz.0.5308': attribute type 1 has an invalid length. [ 505.764896][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.027615][T25326] netlink: 'syz.3.5318': attribute type 8 has an invalid length. [ 506.406719][T17752] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.409836][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.438102][T17752] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.463497][T17752] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.505949][T17752] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.529367][T17752] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.555668][T17752] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.591448][T17752] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.627727][T17752] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.806547][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.027220][T25379] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 507.111031][T25385] sctp: [Deprecated]: syz.3.5336 (pid 25385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.111031][T25385] Use struct sctp_sack_info instead [ 507.112055][T25383] __nla_validate_parse: 13 callbacks suppressed [ 507.112099][T25383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5336'. [ 507.415072][T25411] xt_hashlimit: invalid interval [ 507.434915][T25409] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5340'. [ 507.448660][T25411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5343'. [ 507.624995][T25421] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5346'. [ 507.625981][T25422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5346'. [ 507.843878][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.904883][T25438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 507.941751][ T5954] udevd[5954]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 508.008826][T25438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 508.031800][ T5954] udevd[5954]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 508.132118][T25443] netlink: 'syz.1.5348': attribute type 1 has an invalid length. [ 508.449820][T25461] wg1 speed is unknown, defaulting to 1000 [ 508.475626][T25470] netlink: 'syz.0.5356': attribute type 15 has an invalid length. [ 508.499536][T25470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5356'. [ 508.670684][T25481] netlink: 'syz.3.5358': attribute type 1 has an invalid length. [ 508.682327][T25482] netlink: 296 bytes leftover after parsing attributes in process `syz.2.5359'. [ 508.883888][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.984442][T25495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5363'. [ 509.024551][T25492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.453784][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.813726][T25529] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 509.933877][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.978364][T25549] netlink: 'syz.3.5380': attribute type 1 has an invalid length. [ 510.340712][T25569] netlink: 'syz.3.5385': attribute type 8 has an invalid length. [ 510.552052][T25578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.596745][T25582] netlink: 'syz.4.5390': attribute type 11 has an invalid length. [ 510.733980][T25591] netlink: 'syz.1.5393': attribute type 1 has an invalid length. [ 510.965019][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.095900][T25618] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.115243][T25613] syzkaller0: entered promiscuous mode [ 511.134290][T25613] syzkaller0: entered allmulticast mode [ 511.431685][T25639] netlink: 'syz.4.5406': attribute type 2 has an invalid length. [ 511.907424][T25665] netlink: 'syz.1.5413': attribute type 8 has an invalid length. [ 511.918678][T25665] netlink: 'syz.1.5413': attribute type 2 has an invalid length. [ 512.005039][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.024670][T25667] syzkaller1: entered promiscuous mode [ 512.045588][T25667] syzkaller1: entered allmulticast mode [ 512.077437][T25669] sctp: [Deprecated]: syz.3.5415 (pid 25669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.077437][T25669] Use struct sctp_sack_info instead [ 512.168532][T25676] __nla_validate_parse: 19 callbacks suppressed [ 512.168554][T25676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5417'. [ 512.199607][T25676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5417'. [ 512.382799][T25688] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5420'. [ 512.483714][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.557570][T25694] sctp: [Deprecated]: syz.4.5422 (pid 25694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.557570][T25694] Use struct sctp_sack_info instead [ 512.615835][T25696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5423'. [ 512.634761][T25696] openvswitch: netlink: Flow key attr not present in new flow. [ 512.790584][T25709] netlink: 'syz.4.5425': attribute type 10 has an invalid length. [ 512.930022][T25705] netlink: 'syz.3.5427': attribute type 13 has an invalid length. [ 513.044062][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.067529][T25720] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5430'. [ 513.357551][T25739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5436'. [ 513.560071][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'. [ 513.646063][T25758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5442'. [ 513.661268][T25761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5442'. [ 513.817511][T25772] netlink: 'syz.1.5446': attribute type 3 has an invalid length. [ 513.907140][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5448'. [ 514.084560][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.110779][T25786] netlink: 'syz.3.5451': attribute type 10 has an invalid length. [ 514.134772][T25786] netlink: 'syz.3.5451': attribute type 10 has an invalid length. [ 514.254943][T25800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.554544][T25821] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 514.660005][T25824] bond6: ARP target 1.0.0.0 is already present [ 514.702102][T25824] bond6: option arp_ip_target: invalid value (1) [ 514.731350][T25824] bond6 (unregistering): Released all slaves [ 515.123414][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.478263][T25873] bond7: (slave bridge4): making interface the new active one [ 515.487646][T25873] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 515.533783][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.164051][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.203917][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.669997][T25832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.917729][T25890] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 518.185919][T25909] x_tables: unsorted entry at hook 2 [ 518.194670][T25905] __nla_validate_parse: 6 callbacks suppressed [ 518.194688][T25905] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5489'. [ 518.254269][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.563333][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.691901][T25932] syzkaller0: entered promiscuous mode [ 518.697649][T25932] syzkaller0: entered allmulticast mode [ 518.914071][T25949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5501'. [ 519.021038][T25949] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.087663][T25958] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.098444][T25958] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 519.111513][T25958] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 519.163380][T25966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.201632][T25949] veth9: entered promiscuous mode [ 519.211601][T25949] bond8: (slave veth9): Enslaving as an active interface with an up link [ 519.251614][T25964] vlan2: entered allmulticast mode [ 519.275429][T25964] bond8: entered allmulticast mode [ 519.286740][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.296772][T25964] veth9: entered allmulticast mode [ 519.478413][T25969] syzkaller0: entered promiscuous mode [ 519.488349][T25969] syzkaller0: entered allmulticast mode [ 519.758332][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5516'. [ 519.872445][T26008] validate_nla: 5 callbacks suppressed [ 519.872467][T26008] netlink: 'syz.0.5515': attribute type 13 has an invalid length. [ 519.886551][T26008] netlink: 'syz.0.5515': attribute type 17 has an invalid length. [ 520.001700][T26005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5515'. [ 520.323845][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.364072][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.408323][T26008] ip6tnl0: left promiscuous mode [ 521.478599][T26008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.587437][T26030] syzkaller0: entered promiscuous mode [ 521.593895][T26030] syzkaller0: entered allmulticast mode [ 521.604654][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.631044][T26034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 521.750023][T26045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5524'. [ 521.976285][T26057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5526'. [ 521.991513][T26057] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 522.159331][T26067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5534'. [ 522.228672][T26074] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5535'. [ 522.347304][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5538'. [ 522.356483][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5538'. [ 522.404159][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.707295][ T30] audit: type=1800 audit(1771367739.774:8): pid=26094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5541" name="memory.events" dev="tmpfs" ino=2467 res=0 errno=0 [ 522.905015][T26107] ip6t_srh: unknown srh invflags 4000 [ 522.911378][T26107] netlink: 'syz.0.5545': attribute type 21 has an invalid length. [ 522.921746][T26107] netlink: 'syz.0.5545': attribute type 4 has an invalid length. [ 522.930135][T26107] netlink: 'syz.0.5545': attribute type 5 has an invalid length. [ 523.444376][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.704368][T26139] __nla_validate_parse: 4 callbacks suppressed [ 523.704390][T26139] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5555'. [ 523.796871][T26139] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5555'. [ 523.834458][T26139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5555'. [ 523.885572][T26145] wg1 speed is unknown, defaulting to 1000 [ 524.030045][T26153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5559'. [ 524.167013][T26163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5563'. [ 524.317574][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5564'. [ 524.338670][T26171] pimreg: entered allmulticast mode [ 524.363037][T26168] IPVS: Unknown mcast interface: vcan0 [ 524.369978][T26170] pimreg: left allmulticast mode [ 524.389152][T26168] netem: change failed [ 524.484863][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.521037][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5567'. [ 524.644987][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.994315][T26207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5575'. [ 525.147341][T26216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5577'. [ 525.213634][T26220] netlink: 'syz.2.5578': attribute type 8 has an invalid length. [ 525.339466][T26223] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 525.357281][T26224] x_tables: duplicate underflow at hook 2 [ 525.523574][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.587682][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5582'. [ 525.893679][T26255] netlink: 'syz.2.5585': attribute type 3 has an invalid length. [ 526.035263][T26263] : renamed from hsr0 [ 526.183851][T26272] netlink: zone id is out of range [ 526.189033][T26272] netlink: zone id is out of range [ 526.205975][T26272] netlink: zone id is out of range [ 526.211338][T26272] netlink: zone id is out of range [ 526.235829][T26272] netlink: zone id is out of range [ 526.248944][T26272] netlink: zone id is out of range [ 526.262862][T26272] netlink: zone id is out of range [ 526.273583][T26272] netlink: zone id is out of range [ 526.281489][T26272] netlink: zone id is out of range [ 526.388320][T26279] sch_fq: defrate 0 ignored. [ 526.796201][T26302] bond4: entered promiscuous mode [ 526.876950][T26303] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 526.910916][T26303] bond6 (unregistering): Released all slaves [ 526.966325][ T51] Bluetooth: hci1: link tx timeout [ 526.972543][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.018736][T26325] macvlan2: entered promiscuous mode [ 527.025579][T26325] macvlan2: entered allmulticast mode [ 527.033600][T26325] bond4: (slave macvlan2): Opening slave failed [ 527.157624][T26331] Bluetooth: hci1: too big key_count value 32778 [ 527.179849][T26331] tipc: Enabled bearer , priority 0 [ 527.366193][T26331] syzkaller0: entered promiscuous mode [ 527.384144][T26331] syzkaller0: entered allmulticast mode [ 527.403623][T26331] tipc: Resetting bearer [ 527.454807][T26330] tipc: Resetting bearer [ 528.009805][T26368] tipc: Failed to remove unknown binding: 66,1,1/0:26288422/26288424 [ 528.019428][T26368] tipc: Failed to remove unknown binding: 66,1,1/0:26288422/26288424 [ 528.122223][T26373] netlink: 'syz.3.5615': attribute type 1 has an invalid length. [ 528.134780][T26373] netlink: 'syz.3.5615': attribute type 1 has an invalid length. [ 529.047443][ T5829] Bluetooth: hci1: command 0x0405 tx timeout [ 529.210816][T26330] tipc: Disabling bearer [ 529.230459][T26357] netlink: 'syz.1.5612': attribute type 3 has an invalid length. [ 529.242891][T26374] netlink: 'syz.3.5615': attribute type 1 has an invalid length. [ 529.259625][T26374] __nla_validate_parse: 10 callbacks suppressed [ 529.259645][T26374] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5615'. [ 529.312885][T26374] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5615'. [ 529.321804][T26374] netlink: 'syz.3.5615': attribute type 1 has an invalid length. [ 529.366943][T26374] netlink: 634 bytes leftover after parsing attributes in process `syz.3.5615'. [ 529.388178][T26378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5616'. [ 529.530692][T26395] ip6tnl0: Caught tx_queue_len zero misconfig [ 530.089976][T26413] xt_l2tp: unknown flags: 10 [ 530.170229][T26421] block nbd2: not configured, cannot reconfigure [ 530.231166][T26421] netlink: 'syz.2.5628': attribute type 10 has an invalid length. [ 530.286167][T26421] veth0_macvtap: left promiscuous mode [ 530.293755][T26421] team0: Device veth0_macvtap failed to register rx_handler [ 530.395421][T26427] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5630'. [ 530.436833][T26427] netlink: 'syz.1.5630': attribute type 5 has an invalid length. [ 530.471755][T26427] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5630'. [ 530.595707][T26440] netlink: 'syz.1.5634': attribute type 9 has an invalid length. [ 530.724690][ T7536] net_ratelimit: 142 callbacks suppressed [ 530.724711][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.738648][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.945092][T26454] syzkaller0: entered promiscuous mode [ 530.950688][T26454] syzkaller0: entered allmulticast mode [ 531.040115][T26460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5640'. [ 531.053309][T26460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5640'. [ 531.649665][T26498] nbd: couldn't find a device at index 0 [ 531.765069][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.910926][T26515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5653'. [ 532.149406][T26526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.190368][T26530] netlink: 'syz.0.5656': attribute type 11 has an invalid length. [ 532.250626][T26537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5659'. [ 532.728705][T26578] gre0: entered promiscuous mode [ 532.734240][T26578] gre0: entered allmulticast mode [ 532.805024][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.951224][T26588] nft_compat: unsupported protocol 0 [ 532.958272][T26588] netlink: 'syz.4.5669': attribute type 21 has an invalid length. [ 532.967169][T26588] netlink: 'syz.4.5669': attribute type 5 has an invalid length. [ 533.217383][T26592] netlink: 'syz.4.5671': attribute type 7 has an invalid length. [ 533.225569][T26592] netlink: 'syz.4.5671': attribute type 8 has an invalid length. [ 533.763070][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.843584][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.883471][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.179783][T26538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.380166][T26600] __nla_validate_parse: 5 callbacks suppressed [ 535.380186][T26600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5674'. [ 535.386570][T26599] netlink: 'syz.0.5672': attribute type 28 has an invalid length. [ 535.386595][T26599] netlink: 'syz.0.5672': attribute type 3 has an invalid length. [ 535.386610][T26599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5672'. [ 535.434930][T26597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.504042][T26600] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.560524][T26612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5678'. [ 535.570719][T26612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5678'. [ 535.649838][T26617] netlink: 'syz.1.5678': attribute type 10 has an invalid length. [ 535.675744][T26617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5678'. [ 535.702449][T26623] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5678'. [ 535.749394][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5680'. [ 535.829241][T26626] team0: Port device team_slave_0 removed [ 535.885678][T26633] netlink: 'syz.2.5681': attribute type 4 has an invalid length. [ 535.906168][T26633] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5681'. [ 535.924101][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.042230][T26637] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5682'. [ 536.187075][T26650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5686'. [ 536.406525][T26665] netlink: 'syz.4.5690': attribute type 4 has an invalid length. [ 536.446107][T26665] netlink: 'syz.4.5690': attribute type 4 has an invalid length. [ 536.531013][T26670] vlan0: left allmulticast mode [ 536.537451][T26670] veth0_vlan: left allmulticast mode [ 536.544855][T26670] vlan0: left promiscuous mode [ 536.561454][ T1159] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.571118][ T1159] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.580619][ T1159] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.603542][ T1159] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.743686][T26676] mac80211_hwsim hwsim37 wlan0: Caught tx_queue_len zero misconfig [ 536.802927][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.963238][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.046082][T26682] netem: invalid attributes len -24 [ 537.051383][T26682] netem: change failed [ 537.153980][T26659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.164374][T26687] xt_ecn: cannot match TCP bits for non-tcp packets [ 538.003812][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.044038][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.317764][T26660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.517177][T26701] bond0: entered promiscuous mode [ 539.523694][T26696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.528129][T26701] gretap1: entered promiscuous mode [ 539.545592][T26701] batadv0: entered promiscuous mode [ 539.554464][T26701] debugfs: 'hsr1' already exists in 'hsr' [ 539.562482][T26701] Cannot create hsr debugfs directory [ 539.570063][T26701] hsr1: entered promiscuous mode [ 539.577530][T26701] hsr1: entered allmulticast mode [ 539.593052][T26701] bond0: entered allmulticast mode [ 539.603945][T26701] gretap1: entered allmulticast mode [ 539.619534][T26701] batadv0: entered allmulticast mode [ 539.637368][T26701] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 539.656167][T26701] bond0: left promiscuous mode [ 539.661003][T26701] gretap1: left promiscuous mode [ 539.674549][T26701] batadv0: left promiscuous mode [ 539.825885][T26719] netlink: 'syz.0.5705': attribute type 1 has an invalid length. [ 539.838458][T26719] netlink: 'syz.0.5705': attribute type 2 has an invalid length. [ 539.854599][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.083359][T26736] xt_NFQUEUE: number of total queues is 0 [ 540.084146][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.238225][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 540.251209][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 540.264755][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.274413][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.282123][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 540.341066][T26738] wg1 speed is unknown, defaulting to 1000 [ 540.580505][T26751] vlan2: entered allmulticast mode [ 540.593599][T26751] bridge_slave_0: entered allmulticast mode [ 540.723527][T26758] __nla_validate_parse: 4 callbacks suppressed [ 540.723547][T26758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5717'. [ 540.817568][T26762] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 540.916675][T26762] bond6 (unregistering): Released all slaves [ 541.132377][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.157866][ T1159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.192415][ T1159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.224656][ T1159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 541.492520][ T1159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.521214][ T1159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.550153][ T1159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 541.757344][T26805] netlink: 'syz.2.5724': attribute type 7 has an invalid length. [ 541.810033][ T1159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.822247][ T1159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.834341][ T1159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 541.861516][T26803] netlink: 'syz.3.5723': attribute type 1 has an invalid length. [ 541.899730][T26811] dvmrp1: entered allmulticast mode [ 541.997850][ T1159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.028220][ T1159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.040195][T26822] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5727'. [ 542.067788][ T1159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 542.164119][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.267546][T26826] siw: device registration error -23 [ 542.297282][T26832] netlink: 'syz.3.5731': attribute type 3 has an invalid length. [ 542.323332][ T5829] Bluetooth: hci4: command tx timeout [ 542.335507][T26834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5730'. [ 542.361467][T26826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.436526][T26832] tipc: Enabled bearer , priority 0 [ 542.474626][T26842] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5732'. [ 542.544055][T26832] syzkaller0: entered promiscuous mode [ 542.566890][T26832] syzkaller0: entered allmulticast mode [ 542.638217][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5733'. [ 542.675287][T26738] chnl_net:caif_netlink_parms(): no params data found [ 542.730483][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5734'. [ 542.826206][T26832] tipc: Resetting bearer [ 542.869679][T26831] tipc: Resetting bearer [ 542.901406][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.914721][T26831] tipc: Disabling bearer [ 542.968159][T26868] netlink: 'syz.4.5737': attribute type 1 has an invalid length. [ 542.982793][T26868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.121744][T26738] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.130367][T26738] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.138932][T26738] bridge_slave_0: entered allmulticast mode [ 543.156347][T26738] bridge_slave_0: entered promiscuous mode [ 543.166227][ T1159] bridge_slave_1: left allmulticast mode [ 543.174244][T26875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.198215][ T1159] bridge_slave_1: left promiscuous mode [ 543.204225][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.243756][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.368453][ T1159] bridge_slave_0: left allmulticast mode [ 543.383334][ T1159] bridge_slave_0: left promiscuous mode [ 543.389158][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.416739][T26885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5741'. [ 543.427253][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5741'. [ 543.461615][ T1159] veth5: left allmulticast mode [ 543.473234][ T1159] veth5: left promiscuous mode [ 543.478259][ T1159] bridge2: port 1(veth5) entered disabled state [ 543.515031][ T1159] veth0_to_bond: left allmulticast mode [ 543.533232][ T1159] veth0_to_bond: left promiscuous mode [ 543.552299][ T1159] bridge5: port 2(veth0_to_bond) entered disabled state [ 543.576163][ T1159] veth7: left allmulticast mode [ 543.585785][ T1159] veth7: left promiscuous mode [ 543.598250][ T1159] bridge5: port 1(veth7) entered disabled state [ 543.832501][ T1159] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 543.989407][ T1159] bond3 (unregistering): (slave geneve3): Releasing active interface [ 544.246839][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.304782][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.319639][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.331764][ T1159] bond0 (unregistering): Released all slaves [ 544.352151][ T1159] bond1 (unregistering): (slave lo): Releasing backup interface [ 544.361851][ T1159] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 544.375124][ T1159] bond1 (unregistering): Released all slaves [ 544.391033][ T1159] bond2 (unregistering): Released all slaves [ 544.407102][ T1159] bond3 (unregistering): Released all slaves [ 544.414211][ T5829] Bluetooth: hci4: command tx timeout [ 544.428888][ T1159] bond4 (unregistering): Released all slaves [ 544.447346][ T1159] bond5 (unregistering): Released all slaves [ 544.464569][T26738] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.471841][T26738] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.484104][T26738] bridge_slave_1: entered allmulticast mode [ 544.505288][T26738] bridge_slave_1: entered promiscuous mode [ 544.516526][T26890] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5741'. [ 544.542360][T26890] ip6tnl0: Caught tx_queue_len zero misconfig [ 544.635103][ T1159] : left promiscuous mode [ 544.728106][T26904] netlink: 'syz.4.5745': attribute type 1 has an invalid length. [ 544.766034][T26904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5745'. [ 544.776417][T26738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.809355][ T1159] tipc: Disabling bearer [ 544.836235][ T1159] tipc: Left network mode [ 544.846718][T26738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.907983][ T1159] IPVS: stopping master sync thread 24329 ... [ 544.986984][T26919] FAULT_INJECTION: forcing a failure. [ 544.986984][T26919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.011026][T26919] CPU: 1 UID: 0 PID: 26919 Comm: syz.1.5749 Not tainted syzkaller #0 PREEMPT(full) [ 545.011055][T26919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.011077][T26919] Call Trace: [ 545.011085][T26919] [ 545.011095][T26919] dump_stack_lvl+0xe8/0x150 [ 545.011130][T26919] should_fail_ex+0x412/0x560 [ 545.011167][T26919] _copy_from_user+0x2d/0xb0 [ 545.011189][T26919] __sys_connect+0x156/0x450 [ 545.011217][T26919] ? __pfx___sys_connect+0x10/0x10 [ 545.011253][T26919] ? __pfx_ksys_write+0x10/0x10 [ 545.011288][T26919] __x64_sys_connect+0x7a/0x90 [ 545.011313][T26919] do_syscall_64+0x14d/0xf80 [ 545.011341][T26919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.011361][T26919] ? trace_irq_disable+0x37/0x100 [ 545.011385][T26919] ? clear_bhb_loop+0x40/0x90 [ 545.011410][T26919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.011436][T26919] RIP: 0033:0x7ff5a5b9c629 [ 545.011456][T26919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.011474][T26919] RSP: 002b:00007ff5a6a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 545.011497][T26919] RAX: ffffffffffffffda RBX: 00007ff5a5e15fa0 RCX: 00007ff5a5b9c629 [ 545.011512][T26919] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000004 [ 545.011525][T26919] RBP: 00007ff5a6a17090 R08: 0000000000000000 R09: 0000000000000000 [ 545.011539][T26919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.011550][T26919] R13: 00007ff5a5e16038 R14: 00007ff5a5e15fa0 R15: 00007ffc76e16dc8 [ 545.011584][T26919] [ 545.286048][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.476301][T26738] team0: Port device team_slave_0 added [ 545.520419][T26738] team0: Port device team_slave_1 added [ 545.590244][T26941] xt_hashlimit: overflow, try lower: 3/0 [ 545.855919][T26738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.880607][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.924256][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.967531][T26738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.012163][T26738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.037528][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.123897][T26738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.324880][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.356568][T26738] hsr_slave_0: entered promiscuous mode [ 546.412422][T26738] hsr_slave_1: entered promiscuous mode [ 546.420413][T26979] __nla_validate_parse: 2 callbacks suppressed [ 546.420432][T26979] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5760'. [ 546.446957][T26738] debugfs: 'hsr0' already exists in 'hsr' [ 546.469528][T26738] Cannot create hsr debugfs directory [ 546.486933][ T5829] Bluetooth: hci4: command tx timeout [ 546.917004][ T1159] hsr_slave_0: left promiscuous mode [ 546.952791][ T1159] hsr_slave_1: left promiscuous mode [ 546.978245][ T1159] veth1_macvtap: left promiscuous mode [ 546.984200][ T1159] veth1_vlan: left promiscuous mode [ 546.993312][ T1159] veth0_vlan: left promiscuous mode [ 547.155018][ T1159] pim6reg (unregistering): left allmulticast mode [ 547.363702][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.394123][T27017] delete_channel: no stack [ 547.427524][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 547.443880][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 547.549431][ T1159] team0 (unregistering): Port device dummy0 removed [ 547.650735][T27012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.822429][T27024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5770'. [ 547.848520][T27021] syzkaller1: entered promiscuous mode [ 547.855976][T27021] syzkaller1: entered allmulticast mode [ 548.058385][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5774'. [ 548.068790][T27034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5774'. [ 548.296477][T27045] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5777'. [ 548.391031][T27050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5776'. [ 548.405647][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.450075][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5776'. [ 548.502075][T27055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5780'. [ 548.516830][T27047] bond5: (slave veth7): Enslaving as an active interface with a down link [ 548.565149][ T5829] Bluetooth: hci4: command tx timeout [ 548.639900][ T1159] IPVS: stop unused estimator thread 0... [ 548.786743][T27067] Cannot find set identified by id 65534 to match [ 548.801451][T27065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5781'. [ 548.908685][T27073] netlink: 'syz.1.5784': attribute type 9 has an invalid length. [ 548.924498][T27067] netlink: 'syz.4.5783': attribute type 1 has an invalid length. [ 548.939878][T27067] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5783'. [ 548.969911][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.338258][T26738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.390244][T26738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.441167][T26738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 549.449656][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.498889][T26738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 549.577778][T27088] syz.4.5788: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 549.599516][T27088] CPU: 1 UID: 0 PID: 27088 Comm: syz.4.5788 Not tainted syzkaller #0 PREEMPT(full) [ 549.599546][T27088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.599562][T27088] Call Trace: [ 549.599570][T27088] [ 549.599580][T27088] dump_stack_lvl+0xe8/0x150 [ 549.599615][T27088] warn_alloc+0x249/0x340 [ 549.599648][T27088] ? stack_trace_save+0xa9/0x100 [ 549.599683][T27088] ? __pfx_warn_alloc+0x10/0x10 [ 549.599721][T27088] ? kasan_save_track+0x4f/0x80 [ 549.599746][T27088] ? kasan_save_track+0x3e/0x80 [ 549.599769][T27088] ? __kasan_kmalloc+0x93/0xb0 [ 549.599795][T27088] ? __kmalloc_cache_noprof+0x31c/0x660 [ 549.599821][T27088] ? xskq_create+0x56/0x170 [ 549.599845][T27088] ? xsk_setsockopt+0x54c/0x990 [ 549.599865][T27088] ? do_sock_setsockopt+0x17c/0x1b0 [ 549.599889][T27088] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 549.599913][T27088] ? do_syscall_64+0x14d/0xf80 [ 549.599946][T27088] __vmalloc_node_range_noprof+0x132/0x1730 [ 549.600011][T27088] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 549.600048][T27088] ? __kasan_kmalloc+0x93/0xb0 [ 549.600083][T27088] vmalloc_user_noprof+0xad/0xe0 [ 549.600111][T27088] ? xskq_create+0xbf/0x170 [ 549.600137][T27088] xskq_create+0xbf/0x170 [ 549.600165][T27088] xsk_init_queue+0xad/0x110 [ 549.600192][T27088] xsk_setsockopt+0x54c/0x990 [ 549.600219][T27088] ? __pfx_xsk_setsockopt+0x10/0x10 [ 549.600242][T27088] ? __pfx_aa_sk_perm+0x10/0x10 [ 549.600276][T27088] ? aa_sock_opt_perm+0xff/0x1a0 [ 549.600309][T27088] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 549.600338][T27088] ? __pfx_xsk_setsockopt+0x10/0x10 [ 549.600363][T27088] do_sock_setsockopt+0x17c/0x1b0 [ 549.600396][T27088] __x64_sys_setsockopt+0x13d/0x1b0 [ 549.600428][T27088] do_syscall_64+0x14d/0xf80 [ 549.600465][T27088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.600486][T27088] ? trace_irq_disable+0x37/0x100 [ 549.600510][T27088] ? clear_bhb_loop+0x40/0x90 [ 549.600537][T27088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.600557][T27088] RIP: 0033:0x7f57de79c629 [ 549.600577][T27088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.600595][T27088] RSP: 002b:00007f57df5ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 549.600618][T27088] RAX: ffffffffffffffda RBX: 00007f57dea15fa0 RCX: 00007f57de79c629 [ 549.600633][T27088] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 549.600645][T27088] RBP: 00007f57de832b39 R08: 0000000000000004 R09: 0000000000000000 [ 549.600659][T27088] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.600673][T27088] R13: 00007f57dea16038 R14: 00007f57dea15fa0 R15: 00007fff337e4358 [ 549.600708][T27088] [ 549.600728][T27088] Mem-Info: [ 549.924307][T27088] active_anon:9508 inactive_anon:0 isolated_anon:0 [ 549.924307][T27088] active_file:3084 inactive_file:40539 isolated_file:0 [ 549.924307][T27088] unevictable:768 dirty:41 writeback:0 [ 549.924307][T27088] slab_reclaimable:12594 slab_unreclaimable:109047 [ 549.924307][T27088] mapped:29962 shmem:1653 pagetables:3851 [ 549.924307][T27088] sec_pagetables:0 bounce:0 [ 549.924307][T27088] kernel_misc_reclaimable:0 [ 549.924307][T27088] free:1307341 free_pcp:9360 free_cma:0 [ 550.053913][T27088] Node 0 active_anon:39732kB inactive_anon:0kB active_file:12336kB inactive_file:161956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121348kB dirty:164kB writeback:0kB shmem:6476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14496kB pagetables:15292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 550.095680][T27088] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 550.207966][T27088] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 550.268131][T27088] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 550.303525][T27088] Node 0 DMA32 free:1256948kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42232kB inactive_anon:0kB active_file:12336kB inactive_file:161956kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2554008kB mlocked:0kB bounce:0kB free_pcp:37264kB local_pcp:17636kB free_cma:0kB [ 550.365193][T27088] lowmem_reserve[]: 0 0 0 0 0 [ 550.369998][T27088] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:920kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 550.433295][T27088] lowmem_reserve[]: 0 0 0 0 0 [ 550.439374][T27088] Node 1 Normal free:3953056kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 550.508959][T27088] lowmem_reserve[]: 0 0 0 0 0 [ 550.519112][T27088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 550.549021][T27088] Node 0 DMA32: 8159*4kB (UE) 6434*8kB (UME) 3674*16kB (UME) 567*32kB (UME) 212*64kB (UME) 832*128kB (UME) 599*256kB (UME) 231*512kB (UM) 198*1024kB (UM) 31*2048kB (UME) 106*4096kB (UM) = 1253132kB [ 550.554928][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.615397][T27088] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 550.640914][T27088] Node 1 Normal: 0*4kB 12*8kB (UME) 18*16kB (UME) 17*32kB (UME) 14*64kB (UME) 9*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 962*4096kB (M) = 3953056kB [ 550.679162][T27088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.692124][T27088] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 550.704787][T27088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.714935][T27088] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 550.730659][T27088] 47847 total pagecache pages [ 550.735940][T27088] 0 pages in swap cache [ 550.740254][T27088] Free swap = 124996kB [ 550.769493][T27088] Total swap = 124996kB [ 550.792808][T27088] 2097051 pages RAM [ 550.812432][T27088] 0 pages HighMem/MovableOnly [ 550.829237][T27088] 426704 pages reserved [ 550.834708][T27088] 0 pages cma reserved [ 550.894644][T27128] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 550.900808][T27128] syzkaller1: linktype set to 823 [ 550.919975][T26738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.091333][T26738] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.118809][T27146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.157460][T27149] netlink: 'syz.4.5798': attribute type 24 has an invalid length. [ 551.190070][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.197312][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.266757][T17765] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.273991][T17765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.403502][T27156] lo: Caught tx_queue_len zero misconfig [ 551.603739][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.860313][T27181] __nla_validate_parse: 1 callbacks suppressed [ 551.860332][T27181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5803'. [ 552.010639][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.326230][T27180] vxcan1: entered promiscuous mode [ 552.454442][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5805'. [ 552.539131][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5805'. [ 552.648784][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.727282][T26738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.880385][T26738] veth0_vlan: entered promiscuous mode [ 552.926931][T26738] veth1_vlan: entered promiscuous mode [ 552.986221][T27212] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 552.998867][T27212] bond6 (unregistering): Released all slaves [ 553.090650][T27219] syzkaller0: entered promiscuous mode [ 553.103220][T27219] syzkaller0: entered allmulticast mode [ 553.153694][T26738] veth0_macvtap: entered promiscuous mode [ 553.179304][T26738] veth1_macvtap: entered promiscuous mode [ 553.251945][T26738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.276335][T26738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.305254][ T1112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.335570][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.378539][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.404626][ T1112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.581004][T27234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5817'. [ 553.667514][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.684192][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.691734][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.709375][T27237] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5818'. [ 553.736175][T27237] syzkaller0: entered promiscuous mode [ 553.744512][T27237] syzkaller0: entered allmulticast mode [ 553.760180][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.792186][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.317429][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5824'. [ 554.724147][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.807094][T27283] netlink: 'syz.4.5830': attribute type 4 has an invalid length. [ 554.842786][T27283] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5830'. [ 554.897513][T27286] block nbd2: not configured, cannot reconfigure [ 555.044294][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.044490][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5833'. [ 555.093801][T27298] batadv_slave_0: Caught tx_queue_len zero misconfig [ 555.186760][T27294] netlink: 'syz.4.5833': attribute type 1 has an invalid length. [ 555.229531][T27294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5833'. [ 555.764750][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.189778][T27341] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 556.213772][T27341] bond10 (unregistering): Released all slaves [ 556.664370][T27366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5856'. [ 556.741387][T27370] syzkaller0: entered promiscuous mode [ 556.755060][T27370] syzkaller0: entered allmulticast mode [ 556.789572][T27372] netlink: 'syz.1.5857': attribute type 1 has an invalid length. [ 556.823248][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.201442][T27394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5862'. [ 557.338002][T27403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5862'. [ 557.372467][T27403] nbd: nbd64 already in use [ 557.726856][ T5875] udevd[5875]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 557.843229][T10010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.865319][ T1112] bridge_slave_1: left allmulticast mode [ 557.871029][ T1112] bridge_slave_1: left promiscuous mode [ 557.904550][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.929432][ T1112] bridge_slave_0: left allmulticast mode [ 557.936644][ T1112] bridge_slave_0: left promiscuous mode [ 557.942470][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.095039][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.138295][ T1112] tipc: Disabling bearer [ 558.478593][ T1112] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 558.620006][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.631349][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.641600][ T1112] bond0 (unregistering): Released all slaves [ 558.655664][ T1112] bond1 (unregistering): Released all slaves [ 558.672471][ T1112] bond2 (unregistering): Released all slaves [ 558.687671][ T1112] bond3 (unregistering): Released all slaves [ 558.704486][ T1112] bond4 (unregistering): Released all slaves [ 558.762507][T27441] tipc: Enabling of bearer rejected, failed to enable media [ 558.894649][ T9477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.916968][ T1112] tipc: Disabling bearer [ 558.922120][ T1112] tipc: Left network mode [ 559.127622][ T1112] IPVS: stopping backup sync thread 6356 ... [ 559.407909][T27488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.417750][T27488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.449606][T27488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.483023][T27488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.607451][T27484] wg1 speed is unknown, defaulting to 1000 [ 559.618163][T27492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5883'. [ 559.644648][T27492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5883'. [ 559.907517][T27509] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5885'. [ 560.197035][T27515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5887'. [ 560.349972][T27527] netlink: 'syz.0.5889': attribute type 9 has an invalid length. [ 560.456949][T27534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5891'. [ 560.501488][T27535] netlink: 'syz.0.5889': attribute type 16 has an invalid length. [ 560.520523][T27535] netlink: 'syz.0.5889': attribute type 17 has an invalid length. [ 560.566775][T27540] netlink: 'syz.3.5892': attribute type 13 has an invalid length. [ 560.671508][T27532] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.688808][T27532] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.888392][T27535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.148157][T27556] netlink: 'syz.0.5894': attribute type 16 has an invalid length. [ 561.163220][T27556] netlink: 'syz.0.5894': attribute type 17 has an invalid length. [ 561.519219][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5898'. [ 562.214907][T27588] "syz.2.5900" (27588) uses obsolete ecb(arc4) skcipher [ 563.029878][T27584] geneve2: entered promiscuous mode [ 563.048214][T27598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5902'. [ 563.064917][T27584] geneve2: entered allmulticast mode [ 563.073090][T17783] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.090931][T17783] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.136580][T17783] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.166474][T17783] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.180965][T27604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5904'. [ 563.237900][T17783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.243950][T27605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5903'. [ 563.281872][T17783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.291691][T17783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.353219][T17783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.667690][T27627] netlink: 'syz.0.5910': attribute type 5 has an invalid length. [ 563.690166][T27627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5910'. [ 563.724386][T27626] ip6tnl0: Caught tx_queue_len zero misconfig [ 563.908289][T27638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5913'. [ 563.933452][T27635] syzkaller0: entered promiscuous mode [ 563.939085][T27635] syzkaller0: entered allmulticast mode [ 564.018048][ T1112] hsr_slave_0: left promiscuous mode [ 564.053987][ T1112] hsr_slave_1: left promiscuous mode [ 564.106898][T27646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5915'. [ 564.462587][T27635] tipc: Enabled bearer , priority 0 [ 564.478170][T27655] netlink: 'syz.4.5914': attribute type 1 has an invalid length. [ 564.479174][T27657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5914'. [ 564.487223][T27655] netlink: 'syz.4.5914': attribute type 2 has an invalid length. [ 564.533053][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 564.604228][T27634] tipc: Resetting bearer [ 564.643632][T27634] tipc: Disabling bearer [ 565.003500][ T1112] IPVS: stop unused estimator thread 0... [ 565.021584][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5922'. [ 565.079311][T27685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5922'. [ 565.317414][T27696] syzkaller1: entered promiscuous mode [ 565.334495][T27696] syzkaller1: entered allmulticast mode [ 565.367505][T27696] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 565.806420][T27718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 566.323805][T27754] bond6: Unable to set up delay as MII monitoring is disabled [ 566.337607][T27754] bond6 (unregistering): Released all slaves [ 566.594082][T27773] netlink: 'syz.2.5946': attribute type 2 has an invalid length. [ 567.165508][T27808] syzkaller1: entered promiscuous mode [ 567.171045][T27808] syzkaller1: entered allmulticast mode [ 567.206896][T27803] syzkaller1: left promiscuous mode [ 567.220658][T27803] syzkaller1: left allmulticast mode [ 567.244806][T27809] syzkaller0: entered promiscuous mode [ 567.250499][T27809] syzkaller0: entered allmulticast mode [ 567.327317][T27813] IPVS: Error connecting to the multicast addr [ 567.338227][T27813] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 567.447664][T27821] netlink: 'syz.2.5961': attribute type 83 has an invalid length. [ 567.546027][T27826] syzkaller0: entered promiscuous mode [ 567.552329][T27826] syzkaller0: entered allmulticast mode [ 567.866300][T27840] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 567.888446][T27840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.444758][T27878] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 568.485748][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.494994][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.813943][T27898] __nla_validate_parse: 4 callbacks suppressed [ 568.813963][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5986'. [ 568.915077][T27905] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 568.935971][T27904] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 569.000029][T27905] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 569.021360][T27904] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 569.045244][T27905] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 569.068925][T27904] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 569.099078][T27904] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 569.137092][T27905] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 569.147439][T27904] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5988'. [ 569.462977][T27931] syzkaller0: entered promiscuous mode [ 569.468502][T27931] syzkaller0: entered allmulticast mode [ 569.891763][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.904150][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.921916][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.966451][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.984791][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.156091][T27951] wg1 speed is unknown, defaulting to 1000 [ 570.604306][T27986] netlink: 'syz.3.6011': attribute type 1 has an invalid length. [ 570.612098][T27986] netlink: 'syz.3.6011': attribute type 1 has an invalid length. [ 570.633196][T27986] netlink: 'syz.3.6011': attribute type 2 has an invalid length. [ 570.682126][T27979] bond10: option miimon: invalid value (18446744073709551585) [ 570.697757][T27979] bond10: option miimon: allowed values 0 - 2147483647 [ 570.708185][T27979] bond10 (unregistering): Released all slaves [ 570.733728][T27980] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 570.754802][T17760] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.780257][T17760] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 570.823401][T17760] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 570.940359][T17760] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.950691][T17760] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 570.971183][T17760] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 571.018245][T28002] gretap0: entered promiscuous mode [ 571.030119][T28001] gretap0: left promiscuous mode [ 571.049536][T28001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.083532][T28001] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.099104][T28001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.155686][T17760] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.166424][T17760] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 571.178307][T17760] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 571.230709][T27589] wg1 speed is unknown, defaulting to 1000 [ 571.239127][T27589] syz2: Port: 1 Link DOWN [ 571.332245][T17760] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.343901][T17760] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 571.354938][T17760] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 571.523314][T28025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.655535][T28035] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 572.084727][ T5829] Bluetooth: hci5: command tx timeout [ 572.118150][T28054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.398871][T28075] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 572.477200][T17760] bond0 (unregistering): (slave gretap1): Releasing active interface [ 572.488584][T17760] gretap1 (unregistering): left allmulticast mode [ 572.847462][T17760] bond0 (unregistering): Released all slaves [ 572.862944][T17760] bond1 (unregistering): Released all slaves [ 572.878717][T17760] bond2 (unregistering): Released all slaves [ 572.901419][T17760] bond3 (unregistering): Released all slaves [ 572.917390][T17760] bond4 (unregistering): Released all slaves [ 572.934291][T17760] bond5 (unregistering): Released all slaves [ 572.958045][T27951] chnl_net:caif_netlink_parms(): no params data found [ 573.161182][T17760] tipc: Disabling bearer [ 573.174302][T17760] tipc: Left network mode [ 573.265931][T28076] wg1 speed is unknown, defaulting to 1000 [ 573.687823][T27951] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.696982][T27951] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.715907][T27951] bridge_slave_0: entered allmulticast mode [ 573.765949][T27951] bridge_slave_0: entered promiscuous mode [ 573.901757][T27951] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.943133][T27951] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.951164][T27951] bridge_slave_1: entered allmulticast mode [ 573.972317][T27951] bridge_slave_1: entered promiscuous mode [ 574.116412][T28130] netlink: 'syz.1.6042': attribute type 4 has an invalid length. [ 574.139900][T27951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.168029][T28139] netlink: 'syz.1.6042': attribute type 4 has an invalid length. [ 574.173664][ T5829] Bluetooth: hci5: command tx timeout [ 574.195748][T27951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.325263][T28145] __nla_validate_parse: 70 callbacks suppressed [ 574.325283][T28145] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6045'. [ 574.340903][T28145] openvswitch: netlink: Flow key attr not present in new flow. [ 574.524209][T28155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6047'. [ 574.549819][T27951] team0: Port device team_slave_0 added [ 574.559294][T27951] team0: Port device team_slave_1 added [ 574.675882][T28159] netlink: 'syz.0.6048': attribute type 15 has an invalid length. [ 574.685304][T28155] syzkaller0: entered promiscuous mode [ 574.691002][T28155] syzkaller0: entered allmulticast mode [ 574.753329][T27951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.760348][T27951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.787128][T27951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.801340][T27951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.809640][T27951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.836566][T27951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.257535][T28176] netlink: 'syz.3.6054': attribute type 1 has an invalid length. [ 575.265709][T28176] netlink: 'syz.3.6054': attribute type 3 has an invalid length. [ 575.270380][T27951] hsr_slave_0: entered promiscuous mode [ 575.295078][T27951] hsr_slave_1: entered promiscuous mode [ 575.303307][T28176] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6054'. [ 575.312890][T27951] debugfs: 'hsr0' already exists in 'hsr' [ 575.312915][T27951] Cannot create hsr debugfs directory [ 575.481320][T28180] netlink: 'syz.1.6055': attribute type 1 has an invalid length. [ 575.521237][T28180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6055'. [ 575.607335][T28186] syzkaller0: entered promiscuous mode [ 575.613552][T28186] syzkaller0: entered allmulticast mode [ 576.242754][ T5829] Bluetooth: hci5: command tx timeout [ 576.244071][T17760] hsr_slave_0: left promiscuous mode [ 576.258456][T17760] hsr_slave_1: left promiscuous mode [ 576.265059][T17760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.272482][T17760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.288407][T17760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.307238][T17760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.317839][T28225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6062'. [ 576.338556][T17760] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 576.346849][T17760] batman_adv: batadv0: Removing interface: ipvlan2 [ 576.395769][T17760] vlan0: left allmulticast mode [ 576.410953][T17760] veth0_vlan: left allmulticast mode [ 576.431647][T17760] vlan0: left promiscuous mode [ 576.438837][T17760] veth1_macvtap: left promiscuous mode [ 576.445500][T17760] veth1_vlan: left promiscuous mode [ 576.450877][T17760] veth0_vlan: left promiscuous mode [ 577.625551][T28235] tc_dump_action: action bad kind [ 577.724662][T28257] ip6gre1: entered allmulticast mode [ 577.789746][T28259] netlink: 'syz.2.6070': attribute type 2 has an invalid length. [ 577.844087][T28261] netlink: 'syz.3.6071': attribute type 1 has an invalid length. [ 578.019084][T28261] IPv6: sit2: Disabled Multicast RS [ 578.047107][T28261] sit2: entered allmulticast mode [ 578.207795][T28271] ipvlan3: entered promiscuous mode [ 578.221391][T28277] netlink: 'syz.0.6077': attribute type 2 has an invalid length. [ 578.322909][ T5829] Bluetooth: hci5: command tx timeout [ 578.477912][T17760] IPVS: stop unused estimator thread 0... [ 578.699370][T28309] netlink: 'syz.1.6085': attribute type 1 has an invalid length. [ 578.723120][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6085'. [ 578.763185][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6085'. [ 578.838081][T28313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6086'. [ 578.960410][T28313] ip6erspan1: entered promiscuous mode [ 579.020676][T28316] batadv_slave_0: Caught tx_queue_len zero misconfig [ 579.149819][T27951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 579.232331][T27951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.256758][T27951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.306538][T27951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 579.571756][T28358] tipc: Enabled bearer , priority 0 [ 579.691920][T28361] syzkaller0: entered promiscuous mode [ 579.697971][T28361] syzkaller0: entered allmulticast mode [ 579.704583][T28361] tipc: Resetting bearer [ 579.733319][T28361] tipc: Resetting bearer [ 579.820837][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6098'. [ 579.830008][T28374] openvswitch: netlink: Flow actions attr not present in new flow. [ 579.873687][T28374] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 581.163914][T28361] tipc: Disabling bearer [ 581.177651][T28379] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 581.324805][T28392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6101'. [ 581.337019][T28390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6100'. [ 581.561433][T27951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.577215][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6104'. [ 581.624855][T27951] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.625302][T28403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6104'. [ 581.665976][T17752] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.673191][T17752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.699537][T17752] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.706765][T17752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.855729][T28403] syzkaller0: entered promiscuous mode [ 581.861339][T28403] syzkaller0: entered allmulticast mode [ 583.759340][T28466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6111'. [ 583.888341][T28476] tipc: Enabling of bearer rejected, failed to enable media [ 583.974334][T28482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6112'. [ 584.104350][T28484] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6113'. [ 584.240171][T28500] netlink: 'syz.1.6117': attribute type 1 has an invalid length. [ 584.275720][T27951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.298914][T28500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6117'. [ 584.517649][T28515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6120'. [ 584.601877][T28515] bond10: option arp_all_targets: invalid value (18446744073709551613) [ 584.634268][T28515] bond10 (unregistering): Released all slaves [ 584.970497][T28535] 8021q: VLANs not supported on lo [ 584.979454][T28535] __nla_validate_parse: 1 callbacks suppressed [ 584.979472][T28535] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6123'. [ 585.027285][T28543] netlink: 'syz.2.6126': attribute type 1 has an invalid length. [ 585.083113][T28543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6126'. [ 585.146376][T27951] veth0_vlan: entered promiscuous mode [ 585.189924][T27951] veth1_vlan: entered promiscuous mode [ 585.257911][T28558] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6128'. [ 585.312380][T27951] veth0_macvtap: entered promiscuous mode [ 585.340113][T27951] veth1_macvtap: entered promiscuous mode [ 585.435908][T27951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.468003][T27951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.522602][T17769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.542470][T17769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.562481][T17769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.589947][T17769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.650638][T28570] netlink: 'syz.3.6131': attribute type 1 has an invalid length. [ 585.741598][T28570] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 585.752133][T28576] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6133'. [ 585.786683][T17765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.808094][T17765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.897525][T17769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.915270][T17769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.045132][T28594] tipc: Enabled bearer , priority 11 [ 586.052050][T28591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.061050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.109426][T28591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.121995][ T9477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.139587][T28596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6137'. [ 586.170834][T28596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6137'. [ 586.179952][ T9477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.189683][T28596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6137'. [ 586.201966][T28587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.213593][ T9477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.240196][T28587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.280308][T28604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5999'. [ 586.289056][T28587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.493356][T28611] lo: entered promiscuous mode [ 586.498361][T28611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.624749][T28616] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6141'. [ 586.826742][T28628] netlink: 'syz.0.6144': attribute type 3 has an invalid length. [ 586.930577][T28631] bond_slave_1: entered promiscuous mode [ 586.984048][T28631] bond_slave_1: left promiscuous mode [ 587.037221][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.049833][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.069844][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.080779][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.100297][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.129631][T28643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6147'. [ 587.254675][T28646] netlink: 'syz.1.6148': attribute type 7 has an invalid length. [ 587.304899][T28646] netlink: 'syz.1.6148': attribute type 7 has an invalid length. [ 587.548617][T28663] netlink: 'syz.1.6151': attribute type 5 has an invalid length. [ 587.577622][T28666] netlink: 'syz.1.6151': attribute type 5 has an invalid length. [ 587.627891][T17765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.758313][ T1112] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.792923][ T1112] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.801820][ T1112] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.862035][ T1112] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.968546][T17765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.193609][T17765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.321958][T28701] netlink: 'syz.0.6156': attribute type 13 has an invalid length. [ 588.396574][T28705] bond0: entered promiscuous mode [ 588.410291][T28705] bond_slave_0: entered promiscuous mode [ 588.418738][T28705] bond_slave_1: entered promiscuous mode [ 588.427118][T28705] gretap0: entered promiscuous mode [ 588.434455][T28705] debugfs: 'hsr1' already exists in 'hsr' [ 588.440366][T28705] Cannot create hsr debugfs directory [ 588.446837][T28705] hsr1: entered promiscuous mode [ 588.463386][T17765] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.492229][T28697] pimreg3: entered allmulticast mode [ 588.499257][T28695] syzkaller0: entered promiscuous mode [ 588.529987][T28695] syzkaller0: entered allmulticast mode [ 588.608201][T28708] gre0: entered promiscuous mode [ 588.619098][T28708] gre0: entered allmulticast mode [ 588.689242][T28710] netlink: 'syz.3.6160': attribute type 1 has an invalid length. [ 588.740500][T28713] syz_tun: entered allmulticast mode [ 588.821299][T28716] SET target dimension over the limit! [ 589.128231][ T51] Bluetooth: hci0: command tx timeout [ 589.350513][T17765] tipc: Disabling bearer [ 589.408115][T17765] gretap0 (unregistering): left promiscuous mode [ 589.905741][T17765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.914818][T17765] bond_slave_0: left allmulticast mode [ 589.921449][T17765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.931004][T17765] bond_slave_1: left allmulticast mode [ 589.937030][T17765] bond0 (unregistering): Released all slaves [ 589.947983][T17765] bond1 (unregistering): Released all slaves [ 589.964736][T17765] bond2 (unregistering): Released all slaves [ 589.979089][T17765] bond3 (unregistering): Released all slaves [ 589.996589][T17765] bond4 (unregistering): Released all slaves [ 590.012854][T17765] bond5 (unregistering): (slave veth7): Releasing active interface [ 590.022434][T17765] bond5 (unregistering): Released all slaves [ 590.092707][T28711] syz_tun: left allmulticast mode [ 590.252780][T17765] tipc: Left network mode [ 590.278318][T28639] chnl_net:caif_netlink_parms(): no params data found [ 590.304679][T17765] IPVS: stopping backup sync thread 22670 ... [ 590.664354][T28639] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.671748][T28639] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.687007][T28639] bridge_slave_0: entered allmulticast mode [ 590.703648][T28639] bridge_slave_0: entered promiscuous mode [ 590.737594][T28639] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.762862][T28639] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.780378][T28639] bridge_slave_1: entered allmulticast mode [ 590.787449][T28779] __nla_validate_parse: 13 callbacks suppressed [ 590.787469][T28779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6173'. [ 590.808435][T28639] bridge_slave_1: entered promiscuous mode [ 590.855406][T28779] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6173'. [ 590.876707][T28790] netlink: 'syz.0.6174': attribute type 17 has an invalid length. [ 590.899659][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6174'. [ 590.941432][T28790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6174'. [ 590.958958][T28639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.031724][T28639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.203401][ T51] Bluetooth: hci0: command tx timeout [ 591.356657][T28639] team0: Port device team_slave_0 added [ 591.476758][T28639] team0: Port device team_slave_1 added [ 591.840541][ T12] smc: removing ib device  [ 591.938237][T17765] team0 (unregistering): Port device team_slave_1 removed [ 591.961307][T17765] team0 (unregistering): Port device team_slave_0 removed [ 592.061366][T17765] team0 (unregistering): Port device dummy0 removed [ 592.199980][T28639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.239704][T28639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.279233][T28639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.300964][T28639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.310417][T28639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.392246][T28639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.667830][T28860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6189'. [ 592.715717][T28851] syzkaller0: entered promiscuous mode [ 592.721257][T28851] syzkaller0: entered allmulticast mode [ 592.792904][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6189'. [ 592.966724][T28860] netlink: 'syz.0.6189': attribute type 10 has an invalid length. [ 592.985549][T28639] hsr_slave_0: entered promiscuous mode [ 593.008755][T28639] hsr_slave_1: entered promiscuous mode [ 593.017713][T28639] debugfs: 'hsr0' already exists in 'hsr' [ 593.038070][T28639] Cannot create hsr debugfs directory [ 593.048976][T28862] bond0: Caught tx_queue_len zero misconfig [ 593.248425][T28873] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6191'. [ 593.284326][ T51] Bluetooth: hci0: command tx timeout [ 593.295927][T28870] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6191'. [ 593.903807][T28904] netlink: 'syz.4.6198': attribute type 29 has an invalid length. [ 593.915159][T28911] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6200'. [ 593.926968][T28908] netlink: 'syz.4.6198': attribute type 29 has an invalid length. [ 593.970750][T28906] lo: Caught tx_queue_len zero misconfig [ 594.024734][T28916] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001 [ 594.165055][T28921] netlink: 'syz.3.6202': attribute type 1 has an invalid length. [ 594.650575][T28939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6207'. [ 594.798454][T28939] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 594.832449][T28939] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 594.842866][T28939] team0: Failed to send options change via netlink (err -105) [ 594.850482][T28939] team0: Port device batadv1 added [ 595.011436][T17765] IPVS: stop unused estimator thread 0... [ 595.029515][T28946] netlink: 'syz.0.6209': attribute type 2 has an invalid length. [ 595.363356][ T51] Bluetooth: hci0: command tx timeout [ 595.447672][T28978] netlink: 'syz.3.6215': attribute type 10 has an invalid length. [ 595.463994][T28639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 595.489789][T28978] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 595.524586][T28978] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 595.542423][T28639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 595.611248][T28639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 595.668981][T28639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 595.879768][T28639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.928716][T28639] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.949332][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.956574][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.991456][T29011] netlink: 'syz.0.6223': attribute type 4 has an invalid length. [ 596.016830][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.024062][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.540227][T28639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.701581][T28639] veth0_vlan: entered promiscuous mode [ 596.722013][T28639] veth1_vlan: entered promiscuous mode [ 596.848501][T28639] veth0_macvtap: entered promiscuous mode [ 596.861728][T28639] veth1_macvtap: entered promiscuous mode [ 596.915676][T29056] __nla_validate_parse: 4 callbacks suppressed [ 596.915697][T29056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6233'. [ 596.964224][T29056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6233'. [ 597.024873][T28639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.070879][T28639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.147176][T17783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.169445][T17783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.207095][T17783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.249076][T17783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.379978][T17760] [ 597.382380][T17760] ============================================ [ 597.388557][T17760] WARNING: possible recursive locking detected [ 597.394744][T17760] syzkaller #0 Not tainted [ 597.399180][T17760] -------------------------------------------- [ 597.405350][T17760] kworker/u8:17/17760 is trying to acquire lock: [ 597.411701][T17760] ffff888031cf44a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 597.421070][T17760] [ 597.421070][T17760] but task is already holding lock: [ 597.428458][T17760] ffff888031cf44a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 597.438077][T17760] [ 597.438077][T17760] other info that might help us debug this: [ 597.446163][T17760] Possible unsafe locking scenario: [ 597.446163][T17760] [ 597.453727][T17760] CPU0 [ 597.457029][T17760] ---- [ 597.460345][T17760] lock(k-sk_lock-AF_INET6); [ 597.465053][T17760] lock(k-sk_lock-AF_INET6); [ 597.469762][T17760] [ 597.469762][T17760] *** DEADLOCK *** [ 597.469762][T17760] [ 597.477922][T17760] May be due to missing lock nesting notation [ 597.477922][T17760] [ 597.486466][T17760] 4 locks held by kworker/u8:17/17760: [ 597.491953][T17760] #0: ffff88802a656148 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 597.503667][T17760] #1: ffffc900035f7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 597.516509][T17760] #2: ffff888031cf44a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 597.526586][T17760] #3: ffff888031cf4648 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 597.536647][T17760] [ 597.536647][T17760] stack backtrace: [ 597.542562][T17760] CPU: 1 UID: 0 PID: 17760 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 597.542594][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.542609][T17760] Workqueue: krds_cp_wq#3/0 rds_send_worker [ 597.542639][T17760] Call Trace: [ 597.542646][T17760] [ 597.542654][T17760] dump_stack_lvl+0xe8/0x150 [ 597.542682][T17760] print_deadlock_bug+0x279/0x290 [ 597.542709][T17760] __lock_acquire+0x253f/0x2cf0 [ 597.542732][T17760] ? unwind_next_frame+0xa5/0x23c0 [ 597.542757][T17760] ? lock_acquire+0x106/0x330 [ 597.542779][T17760] ? unwind_next_frame+0xa5/0x23c0 [ 597.542803][T17760] ? lock_acquire+0x106/0x330 [ 597.542823][T17760] ? unwind_next_frame+0xa5/0x23c0 [ 597.542849][T17760] ? inet6_getname+0x15d/0x650 [ 597.542878][T17760] lock_acquire+0x106/0x330 [ 597.542896][T17760] ? inet6_getname+0x15d/0x650 [ 597.542925][T17760] ? unwind_next_frame+0xa5/0x23c0 [ 597.542950][T17760] ? unwind_next_frame+0x1aaf/0x23c0 [ 597.542979][T17760] lock_sock_nested+0x48/0x100 [ 597.542997][T17760] ? inet6_getname+0x15d/0x650 [ 597.543027][T17760] inet6_getname+0x15d/0x650 [ 597.543062][T17760] rds_tcp_conn_slots_available+0x288/0x470 [ 597.543095][T17760] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 597.543134][T17760] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.543158][T17760] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 597.543191][T17760] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 597.543211][T17760] ? process_scheduled_works+0xaec/0x17a0 [ 597.543232][T17760] ? worker_thread+0xa50/0xfc0 [ 597.543252][T17760] ? kthread+0x388/0x470 [ 597.543283][T17760] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 597.543310][T17760] rds_recv_incoming+0x9f6/0x12d0 [ 597.543335][T17760] ? __pfx_rds_recv_incoming+0x10/0x10 [ 597.543357][T17760] ? skb_copy_bits+0x7e5/0x8f0 [ 597.543384][T17760] rds_tcp_data_recv+0x7f1/0xa40 [ 597.543413][T17760] __tcp_read_sock+0x196/0x970 [ 597.543445][T17760] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 597.543466][T17760] rds_tcp_data_ready+0x369/0x950 [ 597.543484][T17760] ? lockdep_hardirqs_on+0x7a/0x110 [ 597.543510][T17760] ? __pfx_sock_def_readable+0x10/0x10 [ 597.543540][T17760] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 597.543566][T17760] tcp_rcv_established+0x19e9/0x2670 [ 597.543608][T17760] ? __pfx_tcp_rcv_established+0x10/0x10 [ 597.543634][T17760] ? ip6_dst_check+0x60/0x7e0 [ 597.543657][T17760] ? ip6_dst_check+0xe2/0x7e0 [ 597.543676][T17760] ? ip6_dst_check+0x5e3/0x7e0 [ 597.543696][T17760] ? __pfx_ip6_dst_check+0x10/0x10 [ 597.543717][T17760] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 597.543751][T17760] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 597.543779][T17760] __release_sock+0x1b8/0x3a0 [ 597.543810][T17760] release_sock+0x5f/0x1f0 [ 597.543829][T17760] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 597.543851][T17760] rds_send_xmit+0x207e/0x28d0 [ 597.543891][T17760] ? __pfx_rds_send_xmit+0x10/0x10 [ 597.543912][T17760] ? process_scheduled_works+0xa0f/0x17a0 [ 597.543937][T17760] rds_send_worker+0x7d/0x2e0 [ 597.543961][T17760] ? process_scheduled_works+0xa0f/0x17a0 [ 597.543983][T17760] process_scheduled_works+0xaec/0x17a0 [ 597.544017][T17760] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.544042][T17760] ? assign_work+0x3d5/0x5e0 [ 597.544065][T17760] worker_thread+0xa50/0xfc0 [ 597.544100][T17760] kthread+0x388/0x470 [ 597.544126][T17760] ? __pfx_worker_thread+0x10/0x10 [ 597.544147][T17760] ? __pfx_kthread+0x10/0x10 [ 597.544173][T17760] ret_from_fork+0x51e/0xb90 [ 597.544197][T17760] ? __pfx_ret_from_fork+0x10/0x10 [ 597.544219][T17760] ? __switch_to+0xc7d/0x1400 [ 597.544238][T17760] ? __pfx_kthread+0x10/0x10 [ 597.544263][T17760] ret_from_fork_asm+0x1a/0x30 [ 597.544300][T17760] [ 597.897877][T17760] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 597.906684][T17760] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17760, name: kworker/u8:17 [ 597.916115][T17760] preempt_count: 201, expected: 0 [ 597.921166][T17760] RCU nest depth: 0, expected: 0 [ 597.926152][T17760] INFO: lockdep is turned off. [ 597.930942][T17760] Preemption disabled at: [ 597.930954][T17760] [<0000000000000000>] 0x0 [ 597.939760][T17760] CPU: 1 UID: 0 PID: 17760 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 597.939787][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.939801][T17760] Workqueue: krds_cp_wq#3/0 rds_send_worker [ 597.939832][T17760] Call Trace: [ 597.939840][T17760] [ 597.939847][T17760] dump_stack_lvl+0xe8/0x150 [ 597.939874][T17760] __might_resched+0x378/0x4d0 [ 597.939901][T17760] lock_sock_nested+0x5d/0x100 [ 597.939922][T17760] inet6_getname+0x15d/0x650 [ 597.939957][T17760] rds_tcp_conn_slots_available+0x288/0x470 [ 597.939989][T17760] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 597.940029][T17760] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.940053][T17760] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 597.940085][T17760] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 597.940105][T17760] ? process_scheduled_works+0xaec/0x17a0 [ 597.940126][T17760] ? worker_thread+0xa50/0xfc0 [ 597.940147][T17760] ? kthread+0x388/0x470 [ 597.940177][T17760] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 597.940204][T17760] rds_recv_incoming+0x9f6/0x12d0 [ 597.940230][T17760] ? __pfx_rds_recv_incoming+0x10/0x10 [ 597.940251][T17760] ? skb_copy_bits+0x7e5/0x8f0 [ 597.940279][T17760] rds_tcp_data_recv+0x7f1/0xa40 [ 597.940307][T17760] __tcp_read_sock+0x196/0x970 [ 597.940339][T17760] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 597.940360][T17760] rds_tcp_data_ready+0x369/0x950 [ 597.940378][T17760] ? lockdep_hardirqs_on+0x7a/0x110 [ 597.940403][T17760] ? __pfx_sock_def_readable+0x10/0x10 [ 597.940435][T17760] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 597.940461][T17760] tcp_rcv_established+0x19e9/0x2670 [ 597.940503][T17760] ? __pfx_tcp_rcv_established+0x10/0x10 [ 597.940530][T17760] ? ip6_dst_check+0x60/0x7e0 [ 597.940552][T17760] ? ip6_dst_check+0xe2/0x7e0 [ 597.940572][T17760] ? ip6_dst_check+0x5e3/0x7e0 [ 597.940591][T17760] ? __pfx_ip6_dst_check+0x10/0x10 [ 597.940613][T17760] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 597.940647][T17760] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 597.940676][T17760] __release_sock+0x1b8/0x3a0 [ 597.940706][T17760] release_sock+0x5f/0x1f0 [ 597.940724][T17760] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 597.940746][T17760] rds_send_xmit+0x207e/0x28d0 [ 597.940785][T17760] ? __pfx_rds_send_xmit+0x10/0x10 [ 597.940804][T17760] ? process_scheduled_works+0xa0f/0x17a0 [ 597.940825][T17760] rds_send_worker+0x7d/0x2e0 [ 597.940844][T17760] ? process_scheduled_works+0xa0f/0x17a0 [ 597.940861][T17760] process_scheduled_works+0xaec/0x17a0 [ 597.940889][T17760] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.940909][T17760] ? assign_work+0x3d5/0x5e0 [ 597.940927][T17760] worker_thread+0xa50/0xfc0 [ 597.940955][T17760] kthread+0x388/0x470 [ 597.940977][T17760] ? __pfx_worker_thread+0x10/0x10 [ 597.940993][T17760] ? __pfx_kthread+0x10/0x10 [ 597.941015][T17760] ret_from_fork+0x51e/0xb90 [ 597.941035][T17760] ? __pfx_ret_from_fork+0x10/0x10 [ 597.941052][T17760] ? __switch_to+0xc7d/0x1400 [ 597.941068][T17760] ? __pfx_kthread+0x10/0x10 [ 597.941090][T17760] ret_from_fork_asm+0x1a/0x30 [ 597.941119][T17760] [ 597.941134][T17760] BUG: scheduling while atomic: kworker/u8:17/17760/0x00000202 [ 598.244656][T17760] INFO: lockdep is turned off. [ 598.249459][T17760] Modules linked in: [ 598.253418][T17760] Preemption disabled at: [ 598.253431][T17760] [<0000000000000000>] 0x0 [ 598.262234][T17760] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 598.271027][T17760] CPU: 1 UID: 0 PID: 17760 Comm: kworker/u8:17 Tainted: G W syzkaller #0 PREEMPT(full) [ 598.282259][T17760] Tainted: [W]=WARN [ 598.286090][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.296181][T17760] Workqueue: krds_cp_wq#3/0 rds_send_worker [ 598.302129][T17760] Call Trace: [ 598.305435][T17760] [ 598.308400][T17760] vpanic+0x1e0/0x670 [ 598.312462][T17760] panic+0xc5/0xd0 [ 598.316225][T17760] ? __pfx_panic+0x10/0x10 [ 598.320681][T17760] ? __pfx__printk+0x10/0x10 [ 598.325311][T17760] ? vprintk_emit+0x4eb/0x560 [ 598.330028][T17760] ? __pfx_vprintk_emit+0x10/0x10 [ 598.335091][T17760] ? __irq_work_queue_local+0x1f2/0x540 [ 598.340674][T17760] check_panic_on_warn+0x89/0xb0 [ 598.345656][T17760] __schedule_bug+0xf6/0x150 [ 598.350292][T17760] __schedule+0x168c/0x5290 [ 598.354847][T17760] ? __wake_up_klogd+0xe6/0x120 [ 598.359742][T17760] ? vprintk_emit+0x4eb/0x560 [ 598.364465][T17760] ? rcu_is_watching+0x15/0xb0 [ 598.369265][T17760] ? __pfx_vprintk_emit+0x10/0x10 [ 598.374328][T17760] ? unwind_next_frame+0xa5/0x23c0 [ 598.379504][T17760] ? do_raw_spin_lock+0x12b/0x2f0 [ 598.384575][T17760] ? prepare_to_wait_exclusive+0x45/0x240 [ 598.390347][T17760] ? __pfx___schedule+0x10/0x10 [ 598.395242][T17760] ? schedule+0x90/0x360 [ 598.399524][T17760] ? rcu_is_watching+0x15/0xb0 [ 598.404330][T17760] ? rcu_is_watching+0x15/0xb0 [ 598.409130][T17760] ? lock_release+0x4b/0x3a0 [ 598.413756][T17760] ? schedule+0x90/0x360 [ 598.418035][T17760] ? wq_worker_sleeping+0x63/0x250 [ 598.423191][T17760] schedule+0x164/0x360 [ 598.427384][T17760] __lock_sock+0x161/0x2c0 [ 598.431885][T17760] ? __pfx___lock_sock+0x10/0x10 [ 598.436870][T17760] ? do_raw_spin_lock+0x12b/0x2f0 [ 598.441937][T17760] ? __pfx_autoremove_wake_function+0x10/0x10 [ 598.448047][T17760] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 598.453472][T17760] ? lock_sock_nested+0x6a/0x100 [ 598.458449][T17760] lock_sock_nested+0x9f/0x100 [ 598.463335][T17760] inet6_getname+0x15d/0x650 [ 598.467973][T17760] rds_tcp_conn_slots_available+0x288/0x470 [ 598.473913][T17760] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 598.480381][T17760] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.486241][T17760] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 598.492702][T17760] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 598.497868][T17760] ? process_scheduled_works+0xaec/0x17a0 [ 598.503627][T17760] ? worker_thread+0xa50/0xfc0 [ 598.508459][T17760] ? kthread+0x388/0x470 [ 598.512748][T17760] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 598.518431][T17760] rds_recv_incoming+0x9f6/0x12d0 [ 598.523495][T17760] ? __pfx_rds_recv_incoming+0x10/0x10 [ 598.528993][T17760] ? skb_copy_bits+0x7e5/0x8f0 [ 598.533793][T17760] rds_tcp_data_recv+0x7f1/0xa40 [ 598.538774][T17760] __tcp_read_sock+0x196/0x970 [ 598.543584][T17760] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 598.549077][T17760] rds_tcp_data_ready+0x369/0x950 [ 598.554137][T17760] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.559370][T17760] ? __pfx_sock_def_readable+0x10/0x10 [ 598.564874][T17760] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 598.570468][T17760] tcp_rcv_established+0x19e9/0x2670 [ 598.575810][T17760] ? __pfx_tcp_rcv_established+0x10/0x10 [ 598.581480][T17760] ? ip6_dst_check+0x60/0x7e0 [ 598.586199][T17760] ? ip6_dst_check+0xe2/0x7e0 [ 598.590904][T17760] ? ip6_dst_check+0x5e3/0x7e0 [ 598.595700][T17760] ? __pfx_ip6_dst_check+0x10/0x10 [ 598.600842][T17760] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 598.605566][T17760] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 598.610715][T17760] __release_sock+0x1b8/0x3a0 [ 598.615444][T17760] release_sock+0x5f/0x1f0 [ 598.619891][T17760] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 598.626162][T17760] rds_send_xmit+0x207e/0x28d0 [ 598.630980][T17760] ? __pfx_rds_send_xmit+0x10/0x10 [ 598.636129][T17760] ? process_scheduled_works+0xa0f/0x17a0 [ 598.641885][T17760] rds_send_worker+0x7d/0x2e0 [ 598.646598][T17760] ? process_scheduled_works+0xa0f/0x17a0 [ 598.652352][T17760] process_scheduled_works+0xaec/0x17a0 [ 598.657956][T17760] ? __pfx_process_scheduled_works+0x10/0x10 [ 598.663975][T17760] ? assign_work+0x3d5/0x5e0 [ 598.668606][T17760] worker_thread+0xa50/0xfc0 [ 598.673253][T17760] kthread+0x388/0x470 [ 598.677371][T17760] ? __pfx_worker_thread+0x10/0x10 [ 598.682520][T17760] ? __pfx_kthread+0x10/0x10 [ 598.687148][T17760] ret_from_fork+0x51e/0xb90 [ 598.691774][T17760] ? __pfx_ret_from_fork+0x10/0x10 [ 598.696922][T17760] ? __switch_to+0xc7d/0x1400 [ 598.701636][T17760] ? __pfx_kthread+0x10/0x10 [ 598.706268][T17760] ret_from_fork_asm+0x1a/0x30 [ 598.711084][T17760] [ 598.714302][T17760] Kernel Offset: disabled [ 598.718676][T17760] Rebooting in 86400 seconds..