last executing test programs: 7.311366185s ago: executing program 2 (id=2756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x6000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.307292003s ago: executing program 2 (id=2759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001c0001"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a000300cb3987190240000000050900010073797a300000000028000000000a010400000000000000000300000a0900010073797a30000000000800024000000007140000ff1000010000000000000000000100000a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) getsockopt$inet_int(r2, 0x0, 0x7, 0x0, &(0x7f0000000240)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3d, 0x6, 0xfffffffd, 0x389, 0x8, 0x7f, 0x4, 0x6, 0x0, 0x6, 0x5, 0x7ff, 0xfffb, 0x8, 0xfb, 0x3, [0xe, 0xff]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 7.137884314s ago: executing program 2 (id=2763): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 6.870576334s ago: executing program 2 (id=2768): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "d93da44346e195f86cc1f2deea0a31e6"}) r1 = socket(0x6, 0x0, 0x6) close(r1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x10, 0x40, 0x822e, 0x4, {{0x18, 0x4, 0x1, 0x33, 0x60, 0x68, 0x0, 0x5, 0x0, 0x0, @rand_addr=0x64010100, @multicast2, {[@ssrr={0x89, 0xb, 0x1e, [@dev={0xac, 0x14, 0x14, 0x22}, @local]}, @cipso={0x86, 0x1c, 0x3, [{0x0, 0x9, "652bb67c59c606"}, {0x1, 0xd, "a7a1f604467687ef041d05"}]}, @timestamp_prespec={0x44, 0x24, 0x7a, 0x3, 0xb, [{@remote, 0xfad0}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xfff}, {@multicast2, 0xda}, {@remote}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000440)={{r4}, "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"}) r5 = socket$netlink(0x10, 0x3, 0x8) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000001440)=0x1, &(0x7f0000001480)=0x4) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f00000014c0)={{r4}, "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"}) getsockopt$SO_NETNS_COOKIE(r1, 0x1, 0x47, &(0x7f00000024c0), &(0x7f0000002500)=0x8) bind$l2tp6(r0, &(0x7f0000002540)={0xa, 0x0, 0x0, @local, 0x100}, 0x20) getsockname$l2tp6(r1, &(0x7f0000002580)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000025c0)=0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x28, r7, 0x308, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x27}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x14008010) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x38, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0x80) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002940)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}}}, &(0x7f0000002a00)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002a40)={0x7, 0x8, 0x208, 0x2, 0x6, 0xb, 0x8, 0x7fff, r8}, 0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000002a80)=@assoc_id=r8, &(0x7f0000002ac0)=0x4) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, r7, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400a0) recvmsg$can_raw(r1, &(0x7f0000005080)={&(0x7f0000002c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/202, 0xca}, {&(0x7f0000004d80)=""/62, 0x3e}, {&(0x7f0000004dc0)=""/187, 0xbb}, {&(0x7f0000004e80)=""/67, 0x43}], 0x6, &(0x7f0000004f80)=""/249, 0xf9}, 0x40012041) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000005100), r5) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000051c0)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005180)={&(0x7f0000005140)={0x3c, r9, 0x63e981cc8737456f, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc06}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000005380)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005340)={&(0x7f0000005280)={0x8c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.670360463s ago: executing program 2 (id=2774): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000002c0)=0x6d, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}]}, 0x70}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a000100000000000000000000000000000000000000ffff00000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0200001000004d33c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088"], 0x104}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x4c, r6, 0xcaa5e4fc7d282d37, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x20, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x13}]}]}]}]}, 0x4c}}, 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5202) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r11) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r5, &(0x7f0000000340)='ethtool\x00', 0x4000, &(0x7f0000000380)={@_ha_fsid={[0x6, 0x8]}, {0x5, 0xe, 0xfffffff7}}, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x9}) write$rfkill(r12, &(0x7f0000000480)={0x3, 0x0, 0x1}, 0x8) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1ff, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040100}, 0x800) r13 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r13, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) 6.387390781s ago: executing program 2 (id=2777): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}}, 0x14}}, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) 3.408149444s ago: executing program 3 (id=2809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0xfc, 0x15, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x8f, 0x8, "9b866fe89f797e3a160c1eec92338b710e186ad38c229dadb5a9be0f26058b890b6c2681ec515050f28c9dbccafc450d607b3119623b81d2f7eee5e9f6efe8430c58633296311926c39c50b1f0b4d1bfb4a843f34e18cb68bf79c1699d666e8b08f8ad85fca097cf0def96db802505ac5c351c09c4bf794b2484392ef573c8fb1b60127d5f0651148979a7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x19, 0x8, "886743e92354849bfcdcecba07a993d24b03cf7fef"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048804}, 0x4048001) 3.238193738s ago: executing program 3 (id=2812): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000180), 0x4) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000007a0000000000009500000000000000fa0c36f052616ea3a1327657ef01640bf9fd1cc86e6ce6ad4b754caeb21ebd75660f039bb069ae234bb9aa6b391129c450042370854134"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000200)={0x2b, 0x2}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001380)={0x2, 0x2}) 2.947751906s ago: executing program 0 (id=2814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {0x2}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x8000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xf}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x400000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "e1a4df85181bfbc4c1e30aea57856a20f95d4816d6d1909e36294d4a26e48196", "a94afd3c6761d8c189ba4416c20619af33da236f32d8105fc4e83a55b1ae83a7", "242cceda0f7f52455782629808ab8ff69bb175ff217581adfa4970ae915218c7", "84cd7ab832dd393ed9251dd2bba1c90b16802468174a3c4fd13e05a54af5d9be", "81c4839450d41c9be76ff19b07440169751edb23b7fa5b57ffa540780d73a3c7", "5565cecf39917b652fce7f75", 0x50, 0x8, 0x6, 0xccae, 0x1}}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x70, 0x6001}, @void, @eth={@broadcast, @random="8cfb7fafe188", @void, {@mpls_mc={0x8848, {[], @ipv4=@udp={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x65, 0x0, 0x20, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @local}, {0x4e21, 0x4e22, 0x8}}}}}}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00&'], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r8, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x3f5, 0x10, 0x70bd27, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x148}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x140f, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x16000015}, 0x41) 2.927610219s ago: executing program 3 (id=2815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x2, 0x180000, {{0x1a, 0x4, 0x2, 0xf, 0x68, 0x64, 0x0, 0x9e, 0x2f, 0x0, @remote, @empty, {[@lsrr={0x83, 0xf, 0x9b, [@private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_addr={0x44, 0x44, 0x12, 0x1, 0x6, [{@local}, {@remote, 0x1}, {@empty}, {@remote, 0x8}, {@empty, 0x80000001}, {@private=0xa010101, 0x3}, {@multicast1, 0x3}, {@loopback, 0x8}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x60, 0x4a, 0x10, 0x70bd2b, 0x25dfdc03, {0xa, 0x0, 0x1f, 0x0, r2, 0x15f3}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x60}}, 0x0) 2.659324279s ago: executing program 4 (id=2816): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x64, r1, 0x208, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x39}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x40) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x6}, 0x8) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 2.344940485s ago: executing program 4 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYRES8=r0], 0x74}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYBLOB="0001020000a9750208004f0000657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600110002000000d31687c71174a4506efe4809d6eaf7e139955535550172"], 0x4c}}, 0x20000011) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x28, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x18, 0xf2, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a01"], 0xcc}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r11, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r12, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, r11, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r7, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x7) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80a}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r13, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0xc0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1.519017977s ago: executing program 3 (id=2818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x403, 0xffffffff, 0x4, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xf6}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) 1.456943749s ago: executing program 1 (id=2819): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0xa8401, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x3]}, {0x952b, 0x1, 0x4}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0xb45}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x4, 0x1, 0x33, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex=r4, r1, 0x22, 0x3, r1, @void, @value=r1, @void, @void, r3}, 0x20) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x1000}, 0x4) read$nci(r1, &(0x7f0000000380)=""/126, 0x7e) write(r2, &(0x7f0000000400)="7e691a0275468ae1e4ca645b71e0a45109098ae0965e9070d09b44ef2781f58999f5a17d68b65d09233c817811e3b3d682e4d9f062686de99c483c2909402f3b224490787c65051d7d3703049e53315b30e679c769717016807feeb691280d00932e5ce21a2008780cebb715321f6918a6d7e56c3ca9e7df70c34135267c713cf678f905af7ae549ed0b951a82ec30759581549c40cdf716178fd53b", 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24050040) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000c40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000700)={0x4f8, 0x0, 0x16, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x224, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '!-@\x9f^-+,^%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{().\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^#!(\\(\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\')${-]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '0}{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e5d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdf}]}]}, @ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "d58a54967747bb07ee99dae9c9b6e13a82bce361d527886184157652b9dc37d143b7d44cf714811d657b3ad7edd90c939b91f1caba13e5ffd8838e01b3a855fc10487797b5d684e082e490bd580b499eadb41795d9d05e3b448126d22fe8bb37180ea57564a7669b8cc686752bd88cba0e673f7148913559"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x39, 0x4, "5e4fede888b37a8d163cc96b4ea2139c7bb2fe10bb2426c9ba1b3646004f96f89dc18f5968848ba350507bdba22725fdd12c6d95ec"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "3a10f23d2f7c012f260b84c406012e9ade1a754e09982cdd734c79146ae357b3984263a4fca814abcf124218a91a43cc92263d5f36e7e90f83e16cf98c08449ea9cdb798f2d8a4b88aaa6bfd88c828d32cd5e4baa5d2fe99f91004836eaabf5180f427ec11bd6d4f59d790a6f580b8f8e5d08b5b7735025c4610c581c91b73140705ec897a755a63a94de0dfcfb2416746f2a170f4320bc9e61a385f011b1774de50673e1133718e40743f23a18181e080e59ce12be5f4e3791958d731d3c4f5d8f923bf182517ba7875cba4b16343cec869091b88d8fe"}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x490}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '$(,]&&\xf2}+!,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "38d254d9328febc939101342232b8aa105df005f2edfe80eaf02fc77a47acdd1072e2d73e1d44652a43b6cb549014fffaef921949ce6be4b1b510fa882ab77efee2abc42c0c186318ec6972d9e1054eb45da3788c04107fcbcb86dbea875c777e6ad332c3ed7095753f68ca178bb286d8e522e4c50853348d48c207452ba368d15fbf41ffeefe98a3f892373fce2e4445b4ee9130d8b99bbbb8e47d9c2d89fbd99bced97feda01b43ab79a7caf8a381fa9f44c5ed2b92ae944e690895fc0204fcc814fbba5f4c139ac867c57a8c4e373ddee4859b6ee"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000c80)={{0xa9, 0x6}, 0x100, './file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e40)={r2, &(0x7f0000000dc0)="9177f135c94e55a910e8fe2f3fb06b", &(0x7f0000000e00)=@udp=r2, 0x4}, 0x20) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000e80)='ns/uts\x00') ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f0000000ec0)=0x10457fe9) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000010c0)={r2, &(0x7f0000000f00)="c5ff73303454211a065d6890f1628430547284d08e0db58e0d793ca02a2805a7cd8236b314c4c9d29ef68c33db5994d4a2f3981fc0f11035fdf9b2adf0ac1238bf866a1c220361ae0e792d37c72823de7bbcf84a943965ab223f3746922d4da4628d46bb427d94990fff224439c97614ca340d909934e87fef7c42599f74ae56b877b5c954", &(0x7f0000000fc0)=""/236, 0x4}, 0x20) close(r7) pselect6(0x40, &(0x7f0000001100)={0x9f3, 0x1, 0x4, 0x704a, 0x0, 0x0, 0x1, 0x1ea}, &(0x7f0000001140)={0x3, 0x2, 0x26, 0x9, 0x10, 0x9d, 0x9b, 0x7}, &(0x7f0000001180)={0x0, 0xa1, 0xfffffffffffffffe, 0x5, 0x1a7, 0x7, 0x8000000000000001, 0x400}, &(0x7f00000011c0), &(0x7f0000001240)={&(0x7f0000001200)={[0x147d82bc]}, 0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x94040000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8010) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000014c0)=0x80, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3df, '\x00', r4, r1, 0x4, 0x2, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001580)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000015c0), 0x529580, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040804}, 0x854) 1.29596725s ago: executing program 4 (id=2820): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e0000002000010000000000000000000002b0000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000a00002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000040105"], 0x254}}, 0x0) 1.285942522s ago: executing program 4 (id=2821): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={0x0, 0x1b5250e2, 0x3cea59d4, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x1a, 0x2, {0x5, @usage=0x9, 0x0, 0x1, 0x1, 0xfffffffffffffffd, 0x80000001, 0x4, 0x41a, @struct={0x3, 0x7}, 0x0, 0x100, [0x9, 0xb, 0x4, 0x7, 0xd, 0x9]}, {0x7fff, @usage=0x1, 0x0, 0x8, 0x70000000000000, 0x8, 0x3fe000000000000, 0x7, 0x8b2, @usage=0x800, 0x80000000, 0x7, [0x6, 0x2, 0x5, 0x800, 0x386f, 0x90]}, {0x4, @usage=0x2, 0x0, 0x1, 0x9, 0x4, 0x9, 0x7ff, 0x4, @usage=0x6, 0x0, 0x0, [0x7, 0x1, 0x3c, 0x0, 0x100000001, 0x31]}, {0x33fbab93, 0x18e, 0x800}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000cc0)={0x8, 0x2, {0x7, @usage=0x7fffffffffffffff, r1, 0x401, 0x6, 0x4fb, 0x3, 0x7, 0x4, @struct={0x7, 0x7}, 0x8001, 0x3, [0x80000000, 0x380, 0x6, 0x91aa, 0x1, 0xff]}, {0x10000, @struct={0x8, 0x5}, r2, 0x80, 0x8, 0x100000001, 0x8000000000000001, 0x8, 0x401, @struct={0xb6, 0x2}, 0x7, 0x6, [0x8, 0x0, 0x2, 0xf8a, 0x1, 0x200]}, {0xe1, @usage=0x3, r3, 0x7, 0x80, 0x6, 0xcf03, 0x25, 0x4c0, @struct={0xc, 0x9}, 0xffffffff, 0x3ff, [0xfffffffffffffffd, 0x1, 0x3, 0x10000000000, 0x57b6, 0x3]}, {0x3, 0x7, 0x43b}}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000010c0), &(0x7f0000001100)=0x4) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000002140)={r6, r4, 0x2, 0x1000, &(0x7f0000001140)="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", 0x1, 0x4, 0x81, 0x0, 0xdd, 0x2, 0x7, 'syz0\x00'}) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002240)=0x1c, 0x40800) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000022c0)={r4, r7, 0xd, 0x32, &(0x7f0000002280)="9aa4a70a680f417d32cd136633422a2628147bc2715bbdee2f8a5da373964a59661011b26be66725a8f6ab9d8f94ce448700", 0x2, 0x8, 0xd, 0x0, 0xfffa, 0x2, 0xfffffff7, 'syz0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002380)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002580)={{r8, 0x5, 0x0, 0x1, 0xa1, 0x80000001, 0x0, 0xf81d, 0x4, 0x253, 0x80, 0x3, 0x0, 0x38, 0x7ff}}) ioctl$FIONCLEX(r4, 0x5450) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000003580)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000035c0)={0x0, 0x2}, &(0x7f0000003600)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000003640)={0x3, 0x4, 0xb, 0x2, r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003680)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r10, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000036c0)={r9, 0xfffc, 0xc}, 0x8) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000003700), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003780)={'gre0\x00', &(0x7f0000003740)={'sit0\x00', 0x0, 0x20, 0x7800, 0x80, 0x6, {{0x7, 0x4, 0x2, 0x13, 0x1c, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x8, 0xda, 0x0, 0xd, [0x7]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000037c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r0, 0x5, '\x00', r11, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003880), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r12, &(0x7f00000039c0)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003980)={&(0x7f00000038c0)={0x84, r13, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x46}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc050}, 0x8010) r14 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000003a00)) connect$phonet_pipe(r14, &(0x7f0000003a40)={0x23, 0x2, 0x5, 0x80}, 0x10) openat$cgroup_ro(r6, &(0x7f0000003a80)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 1.219849008s ago: executing program 4 (id=2822): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000200)=0x3ff) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100736974000c00028008000300e000000108000a00", @ANYRES32=r3, @ANYBLOB="2db491ffebca014e694861dc67d3b85ce167edbe4d249753a04e7202827ab578f859b55a05bcf449b73a6c5c2679865f7931386c81155f44cdd33efc4f49326df0e2a988ca0b78366e40450eaf"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'bridge_slave_0\x00', 0x400}) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 1.055060098s ago: executing program 0 (id=2823): socket$can_j1939(0x1d, 0x2, 0x7) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_flags=0x4000}) 1.053729363s ago: executing program 1 (id=2824): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r1}, 0x2, 0x8, 0x4}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) close(r6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r8}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x1000, 0x10000000, 0xffffff0c, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) close(0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000580)={{r5, &(0x7f0000000180)='memory.events\x00', 0x402, &(0x7f00000001c0)={@_ha_fsid={[0x7d, 0xb]}, {0x3, 0x8, 0x7fff, 0x8}}, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x8001}, {[0xf7, 0x1, 0x4, 0x5]}, 0x9, 0x7e, &(0x7f0000000500)=""/126}) pwrite64(r11, &(0x7f0000000600), 0x0, 0x81) write(r0, &(0x7f0000000000)="01f9040b019acec80fac6919ccf03369cc713f7b4635e97a040000000000000062481c4d", 0x24) 1.051570471s ago: executing program 3 (id=2825): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x8c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5a54dd4e, 0x3d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0xc1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r3, 0xfffff000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069004f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r0) 887.405714ms ago: executing program 0 (id=2826): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r5, 0x4}, &(0x7f0000000180)=0x8) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x4, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}]}}) 839.748994ms ago: executing program 3 (id=2827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x20080084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42006}, 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x30, 0xc, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40855}, 0x800) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100050000000001feffffff07000000e9b1675e8046037e467e89f0d168b27e0401bc9f44a5b5f35408d0aaafb44ad76bb57d125bb05c6a0a9917b32421a44a30d271814b5dfd58e41e375279bced449a0ac1ce1b9a9dfccbb7c4c83b65368386ec907fcef790af7256fd6cc07e7b96d54783bddf6fbde38d17320c030b38f61f691ec9e7e592416407679eb88a811d550ae9358452b9e5be49", @ANYRES32=r7, @ANYBLOB="1a20060000010000"], 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) write(r1, &(0x7f0000000800)="ffffffffffff0011223344554305000f32000300000030112233445500112233445500ff0000", 0x26) 715.383849ms ago: executing program 1 (id=2828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="001c08000004000480"], 0x18}}, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=0xa9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x84, 0x6c, 0x2, 0x2cd214673cdd0137, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x0, 0x3, 0x9}}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delqdisc={0x24, 0x26, 0x309, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffe0, 0xb}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000d0) 715.011323ms ago: executing program 0 (id=2829): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33ed0bffece0b42a9ecbee5de6cc49d65435897cc4126989dfbfa33a43eef25409d50dd456659e25b78aee4389927d5d66d6bf7a74f6701ce9afb4b97350727e35f587494dccb5a47b576e8e7da26c415c409b88cf08ab1dc1efaf12aceabab297cc292c6e66487bf64f64e2a21a42174f800ed02679b6bd38efefa71943b65e3d1722dd247745c697f49631620889faaf78979cac549d992dbab38b0e8a82ea55ebceb47ba07112e1110d7f69a108e2297a9572e58a76c8205dea75555fee86e796ce846cc225d12a09e28ace9505535bc7b2a0e7e6a4a200000000a7fb92a9331c9e1fd22baff32ae5465acdf9febb26d1ae0334b06e006edde0d66c9f59ed422ac4c0", 0x1c2}, {&(0x7f0000000080)="f9f53a22b213e51d01d66c615f9cab77539f218a4e00706a34d1f320ad0025826c331712ef8d91694faebe69ef603d65896c09f4ae0a6954708346cee755c42ba4ffd85aec97564c3ec7f5cd38107d5c0b666510d3a169c9b016d1990487029a7e81a17d4230c1f3676393c5a79c780d1eb780e2f4cba854eaff7a7d876e0d72d9e6fd8e4864d55bd649c1", 0x8b}, {&(0x7f0000000040)="096ad9ddde8528470ae25043d8b1dfe7bb1e080225335b58a298cb70505a1a54bea4c8daf855bc6bde1e8c61546c980cf55d5595037e0343910936f044979328", 0x40}], 0x3}, 0x800) 613.942159ms ago: executing program 1 (id=2830): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000320000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000a00002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000040105"], 0x254}}, 0x0) 587.164306ms ago: executing program 4 (id=2831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)}, 0x20) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)={r1, r0, 0x5, 0x4, &(0x7f0000000000)="ce1fdf43", 0xc, 0xd, 0xf, 0x4, 0x101, 0x1, 0x5, 'syz1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 483.18174ms ago: executing program 1 (id=2832): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@bridge_getneigh={0x184, 0x1e, 0x2, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x800, 0xa128}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5fda}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x177e4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0xa}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}, @IFLA_VF_PORTS={0x110, 0x18, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '[%[}\x00'}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bb3072902516a37954db821800b628c7"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b334fee1b67386f529a92c23164278cc"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "832202ff24fefeaddf4970d3d1d5136d"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c67dc3b58a0358eef5422ca0cd9467ab"}, @IFLA_PORT_PROFILE={0xa, 0x2, 'vcan0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xdd}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8b123cf0838cf96ddf0a8d69a7b76bee"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "75790bd4117f94fee644c7d2046efd74"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_PROFILE={0xa, 0x2, 'vcan0\x00'}]}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000600)=[{0x1, 0x2, {0x2, 0xfe, 0x1}, {0x1}, 0xfe, 0x2}, {0x0, 0x1, {0x1, 0x0, 0x3}, {0x1, 0xf0}, 0xfd, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 439.812957ms ago: executing program 0 (id=2833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000034001a80060000000200000004000580"], 0x54}}, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r2 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) (async, rerun: 32) r3 = socket(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf25ce00000000000000030000000500000600280019cc364908002b000c000000060028000400002b000f00000005002e000000000008003b00040000000800340001010000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c144}, 0x48000) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x4, 0xd6, 0x3, 0x33, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x20, 0x40, 0x57a3, 0x9}}) (rerun: 32) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000500)}, 0x2400c050) (async) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604a00a600100000fc000000000000db8d690857f07d0300fe8000000000000000000000000000bb0001000000000000050200003102000066405cdb07aadedd4e"], 0x0) 294.265117ms ago: executing program 1 (id=2834): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff54, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x20080000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100001042abd8d000000000000000000", @ANYRES32=0x0, @ANYBLOB="cc81000000000000300012800b000100697036746e6c00002000028006000f000000000014000200fe8000000000000000000000000000171400030068"], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001100)={r2, @in={{0x2, 0x4e24, @private=0xa010101}}}, &(0x7f00000011c0)=0x84) (async) getsockopt$bt_hci(r1, 0x84, 0x2, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000003640)=[{{&(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000001280)="7bd8715a3bf584d3f9de362876f041c192bd1ef490f88fd4501bd8357a228b0ceb9045d6ac348b7253386045be568d39263ac392e3e9ec3855643e62f17c3b9b38c3c0b22d37a40c5542822967edf00e02d99025b1f806bbfd0577fddce3f86ec0b786b2908c35d2480ef7f4952b92774f56fb9aee0a3c095962553e1af861bc15c1b330f60760aa33d57d35c63bb1b1212699dedb3fe77fa43463a6ae8a2ea67cf0ca4a1d5343a0a324ca27fdbec3f1001008c46e18c20339c1479b2a0a603afb1def159ee13e77b96930925b615ad93728a469b28ea3b2b6f60ed1764b5b12b7f893cdd172da0b83d2fc90ac494cee4d7c592364eca3aaa5109140445c10c3e33963783b9b377f5f9bc9d10e0c3b306097073d7b660d509b4f97da2f1a6ba37bf7404e96dd8c620d3ad2753ea0ae1d30b7cb9e04329a1340b42400095a6aa28f210b2ed531ace7a1fe17bfab2a2dd1996603b8cff91fae193a28dbf933806b79c6bc717067110e3c47c0e6a08ace739413b2511857637e15af70ab753f9741243241c911a6241e1b80be3ee65fbabd408904cb65e8b109ed7148b090afb6a460c7cbadc656fa8bc54316419a8846f84537473f6d5cd613517b708ee8a38e0b943d15e3d605b9bd198e7cc69578e873263664775c14250717b3ceae7fe4d173b4817cdd7626a1aa61ed9521c63195b71ec97e976480229072771793ee275193ea03f9224e584b5c318ec4b6a78ff002319bbcbcea949dd41730c0b495ad30c6e972199d2a13907ab43aeff890a82a73f73ac47aa2e6af636eb92f8accd9d77afad7496559e0ce894a5ecac5445d3a018672b2a16b65d682d3713a3a37782fa9a90ac03fad54cd188c50639fcb3bf4132897bb4d69003c6129157d3a092c96ba04daea5f86a3cab7b676f52f020278be7be8c524b2fedf7a8259e2afba22fbf380013c310209f4074b6f9ab09d81bdb97ef1ec7ca6cd12f8903c40f22492f607b0cbe9d7cba22e1f22496f05ba7b1bdd618fd703ee130e13206ecd96bff734fe34da665a7fbcbe59dc95e895e93096f39a4d60571c5da545dec59443acf4d811a7e8149beba820c6b53d9e1551b11852a4f2c7683a105b851e782aefc007caeb2021b05a9d290b563e47c31c15f08768ee8ddbcc2bcec64770c30c6644ebbae16c8a0896ed7cf133356a4adbd419c825f753fbad51fc8a7399dc9f0e2254211d3aeaeaed3da3e4361e9d42494773a99040b0483ca5bba46968232a93ba37de6f0a68e5522af662499cfc8abcdbb749c772cf78ee9120b70a6cdb76fe8a6da507e086169a565ee580799a188dd9e8f3945983b90b2b21b80d42734b94e31dec36803b625de4b8db4e3f5123e07df2068b1b631c012f2f2044cf93f4e54451bc4010a359e9aa13322993deacb4f67ab4748839a6cc4331c5accb25457944a0d5f7ba65fb26ae17e96b88f5062ecbf3ed1d48ef2781f7c1bc724125cb87b8e0bdad8fb9d69e6df4cd75149a3fc067a97af12284980c6fc330230a0cf54300e7633bea6b6a51f3cc78283406e5d397d9a2d9abea226d160f0d63aa4dfe380325acb228f0754a069c59bb015e92479d125653b8f7a7d582db77fb66df51d8f7773992025a4e724f363658a3571cba3be4aad5aacfe38838da59d102cb865795b332439fbb34d2ce5faa026936a1ba5cc46e2c79922882ff2de1b9f1b4d5500509929c9e1ac3675ff93a445da61317cfd73115ce3b88cc5e20190564bd8c2c0d14ac0b6505c2a3a5f9e6d7bbc4c3f6e8bd103828d5c70be7898db582768d67d6f16e3576c46aa8d63839111b66d5e3fb025954e8a7e2a2f4c00f7aa8c9e72ac1c1fa9ee832c7f32326e1dfbbb12a8502d4bd1e3c66bcc5b17c08ede3e131ffb89ba8aecc89de18c92d1d0db9f3a2df7396dafe894ac387af991157edc84991c86feb4ac1bf850d1537d5c2a148624fea1b7750a4f059b05a622277342c4d534e68fe7774695244fe8e32b64329fb67c87ee0281fde277940157da71cb0bd61a6f6c61760b265d104290d8f3b4ca75b705dd829979a6886ce58d244de0944c30f7ee2a91764806625e463005634fd1cc3ae99d24de65669230362a2688839cd4eae473c7eb38db2c2c16ab601ee7967e456db1edadef353c45d0452b232c34d638dc4f0bf3f701e6acd0a064f9b036750c985c7b930cf96ca8e467b8467fab901e739d98f4a05c75acf0f4fcbcbaa651dc84d15020534f623446bb072b0966fd7bf14cec2954f67d8e3a69ccb9096287a6d1030e8725622498fdae832ff6ce67f498d94638471719e99049a4cf3f71585b68d343ae9407dcfd2a916e76ccf1b2fa7c8070a7b8fc6a528d7361274ecb4fdc85921fb0c75c1082fb23cc3396cfb4e2cbaca9389301a46b83db2ad0183553b48cf7101831f7be0118db7dc3a85aa811d10001a0ce56f232714d4a27150e2d666d19ba0be3a03419ddfc9dfa80cf494fd409c2d9b58a69f595c06f9854275b2f984f10b613cc68c1b926d8188450f1a179a7ad90fb0c2b36e5f6d8853ed2012d2b93e83e8c16f4b4c86fcbb25eb0970e26624e17c972f9005d2a421987eca9032fc0715171663e873d5730c58f7b779c9d3b21bc4a8daf00a1b267535a77e2ce7f73da389a137f16699291259f86c1ae8a286f5531b2c5a82a0f54e08e267e9d99e753c46266532ae13ac63341eb9d67f54756601dc63a4b0b164c712f2d1f0edc6056dc6404042ad16bb184473a550a67726abda253fef253c6b2f6518e092282a43145611e0b3580f2b7bf6934bc426939030879135b2b6d42eff3f896fc6f86eb5f173bd3fd1459f4900f0c59e4ad4dd4604f3033892735323f3da0fd5737425607b541598bb1d0079b7b7e6e86b7910e5a3713340ef9aaaceba29e3b66df241311542967f1b85b23e77cd17fc9ff57bd1a3044ee753af4cdd30b841afb80ab5b40a38e5ba33f2a73b2c5b66cc79d86e7abba2cad9245229d76286bfdc0d54e8ae900f186c37f45cce5838830a0cf1d8b77c13a80c05fb6de8c416c048369faf5cb7c4e9e6baa0fe255c49c1e34f22b32dc0410d803541fddf770d993b812495567a9bf800a70f6124155e81c99104bb889bbd2e1924e849e24bae6cee1260d75f9801fc6ecec90d6f6b9c4c982a20bd8ec886c8af79b7f25c1e720b1801525bcd7a700560085cccbb9bcf5bb9168fff7830803a6268a97cb1bdeda4c267a4f5d8527ab40b6844b0165c60d65d022d3eb9e9ab6f5b51f9cfad7a3a0c21313aea1268c3ec13527d5187083fd365d47df35b3efab2b9a7305a55afc7afed6270901b8fdd08908533782b853dadd6acf9a7e25063de85148ff8a1c06fd018c5fdc979dcf76957f4b6bfab60a896daf3a7cfc1bd41d1ccdb9762e522455996dcc6305b9f3e83f3588bf7280db01f312a9dc491d94ff479eb8d4420bddb1452164c29c845d7a4f6f40bb50a376fc4120454d6b01b2375e80ac336d759bcddaeb089415f123df41f7fbd115c3b441a87d6b4e7ccb3b42d57f16ebf5c784d043572c896fad4efecfa5e8c6456903c2be29856c7c2cf57d4a911b9c194cd8da14ba7dc946d3f70c17c107f6494f53192f568dfcaa0b278b9a430a4b0df7c754168862c71530ffa8c23b361244aa40e86d147c4cb1b9af9f99fc926ab51c792af995d4232e5cffb3a83ff46795b457466f9c13fb6950e92169a04d9566c059413204ad259223765fb9aa21409af59a6583b91d6e36dea0f3858f19f8479d4445e03cd34d9e40454c0ec528dd5d9b33942f88b5897d360ee26d7a2a56828e04f5fd83ce051cecabe0a276c93c8717b23a78e2b84c7e46b10b0c8481ee21791f74bd267ec0266bf3490addc66918e10ddc7e9a08940be73ba49f91aeca6d672fc8c512786109f909c9ae7f7ef941ca63a31535725f6563be270213b5b6cdb632a77ac062ead425dc7577cb873ddd6f34f5632506365302a6d89e6655961b042621fa4563f3f63a2afe6886d3e131b7bc80e6b8944bb3adad8aa05daa6bd43bdaf268823a392458c9f5a01fc96e24720224cc5285dba6266095ea32c7bf83748ea37ce9eb718090fc39e7edfb4f0b2ccdcf2154e898b42cea6c04d9472c283ea65c889767ce84c30d7238bd643278db9a7a93280c09017dfb60d671dace284a16227a4691c7326b1687fab0b1bd0ee668e250cd1e3c2a131a8441eb7653489e04c3c6d8cf4fea3dcd468a57f08c942bf27d13f7a36aec0a791006b443e4cb3d46974a4afd0e4e0fcf7ada2851214b486922eb7eeeb17eaee851685743c1051f7bb8c47a081ed3c2ee0d8642cf166a44b283d7c01dddfc966d3af613fee4a3792d0fd07bb91c2776e1f8d09a477b69df45de9f6593e0cf217cf06d8f62c9b8c6980fe80341f3e9029c6d208923ffc4d7fe992bfdfeb65619d60486cbbbd2bb0d4c16df3a2bdcbfad327866e229110ee69dbdfa0ae6858cb81c967cf2390946c280d447842c0dd9b3d5ac974aeb9bc66927137104e429782462a77ecb18194ee1f68410775b3a66013193a0dae960727f8085ce9e41fb182b9c80383846187d68279ae70de2a06f9072d43e733c0148d2f3888ce446f61e9b3142d5a4504829d861e2a9f74531bb214687e52f91918ffed1661fffc47a445cf22ce5047ee3bf503e66a6a9740b9e2a8f8ac82183dad8b759f49b7cc6766594ddea921830f09f79b97faa46903449ffef6808cc8d07d5a1559ba9e90fc503531b719a8f54a4d289a80af117c6add9d8fb1b7fec78a4942c69bd356a52b767a729ae70e64fe1a5f78f79599ed8d2dc229f4dc01df99931eff2bf4bd5608eef6675c0decc883415351898035e0edcbfa7b6851d50e37ab10353679cebdfdfab773e85fa41a6bfc7a16b8fa5ab3e1882421a02c738394c9b4106b2e6a652f150c6972bc6789a6ce501130d6faa0fd29c1455747e238751454b2758ffdfa696dd4a0c87ad759f543fff3f7c2fe4a2cbb92c0d69f039d6c913b452f51ab60046bfb6922cf9bffdb9eb96214bbca1b6f6d56ad4eced96b18dca18429f23c4e5ae1eb8bed1763e84dc68ed7b20dd5acca0b422db58328294c51c91f6dd675db17c3eb30ff62c5cb158351c389fe6a6e75dc4d2cde5a9fba0affd3bbc9389dfc9454cb22a6362c3bd7dc40fd52e373d79367a45a4bfe14ffcba26688b5739776cc569396d9551bef29d126effd32b04f197f5c16f466b2637e2136b13b7fda74ece0e2ca82404802a9c3159033b6adedfb8d247d45f0f2e316b97c63a978d945184225856a0ce730ae449d767e5ed027302ae933f0e0def89a94372cf1d08563f9c8ab8aad266a72cce23c62f7eed1bed805ab2f6a3c2990165bd5712a081040e2af01bc37c35185315bb1a38737c65e06647f14a32f7e31060396c1befda0eacdf2271eb0d2533bf3ef5f1b329ad0675454e919ced44a23fcdbf6c65f8051440db3be575a0fc82dabead8e74a0c4bc8f7cad754ae525bdfe31571682589fab112bbac6ffb2fa28ef60002ba2533cfddb576fdc4ce294e6ae96352e0470aafda3decb582046c822308c23efd8259dc9aba6b548a17651dec6d84e780a99bc3ac9f4fb014309d5bfcb0a7bcb6604cfc4451896f93828108d34bec89b164895cd9637500be655355f1fe763173f942656673da6c19616bec81c4cc44c86b3cb5d91627914641dca9623aede5c1ac27b0722ff44414dc8234a21edc1772dbc5abcfb98f78938f0e57958d90728e6b85bbf1c807d0a2e8ab46e64ee66b1cd1f19cf67413ce", 0x1000}, {&(0x7f0000002280)="b924005715c698b99e9d", 0xa}, {&(0x7f00000022c0)="7e66930ac84f48a2d4aa30943ad529f4b193a62e3f67fcceee885ecb7d00a07495f75dac35bee7300839f56d4f34f233fa244951377d9d", 0x37}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="5f18fc7d89de82d185f720c9f95267fcdf110a379de3dc6111ed87f9bc935c82d6026d3a8fe47932dd34648bc7aa2d519c7f982a24e69e2a07e383b52768fd5b19397f9404cd93886346db7c2c6988328744bb363a06f0de9a4eb3016693fbdc8a25a381e9", 0x65}, {&(0x7f0000003380)="14f3372bde424ad2a383060a212c9be1177067eaaf1541a05708100e85de687563e771fbe6771867dbc8d74cc5bacd5bb79e188283c3cefa6316e8051bc4caf927acc08c4c", 0x45}, {&(0x7f0000003400)="97f85ee56b99dbec417d1bc543d3ee37b619878d6f9ec2cebc137920d8856269a3e896890d77b44688fefc657815436698c7c68c3a15bfb1e4070509c03df5504d068d70b5258acd574f3f3c3cff118dc10806f86870c86ee153", 0x5a}], 0x7, &(0x7f0000003500)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={r2, 0x2, 0x5, [0x6, 0x3, 0x4, 0x8000, 0x1000]}, 0x12) 0s ago: executing program 0 (id=2835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x0) listen(r1, 0x401) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000060101010101010000080057"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): kaller1: entered allmulticast mode [ 172.550037][ T8847] netlink: 'syz.1.796': attribute type 2 has an invalid length. [ 172.550058][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 172.953763][ T8869] netlink: 'syz.0.802': attribute type 30 has an invalid length. [ 173.083945][ T73] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.084642][ T73] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.085154][ T73] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.085189][ T73] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.173040][ T8877] h: entered promiscuous mode [ 173.465553][ T8890] __nla_validate_parse: 4 callbacks suppressed [ 173.465573][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.465805][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.465990][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.466180][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.466365][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.466563][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.466741][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.466919][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.480231][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.892864][ T8908] netlink: 'syz.3.812': attribute type 11 has an invalid length. [ 174.689680][ T8937] bridge0: port 3(ipvlan4) entered blocking state [ 174.689894][ T8937] bridge0: port 3(ipvlan4) entered disabled state [ 174.690049][ T8937] ipvlan4: entered allmulticast mode [ 174.690068][ T8937] bridge0: entered allmulticast mode [ 174.697110][ T8937] ipvlan4: left allmulticast mode [ 174.697159][ T8937] bridge0: left allmulticast mode [ 174.769904][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 177.572985][ T8938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.993471][ T8981] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.993504][ T8981] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.167671][ T8989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.190775][ T3385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.675298][ T9021] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 178.675319][ T9021] __nla_validate_parse: 4 callbacks suppressed [ 178.675331][ T9021] netlink: 224 bytes leftover after parsing attributes in process `syz.1.839'. [ 178.763389][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.841'. [ 179.098129][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 179.274821][ T9041] netlink: 6028 bytes leftover after parsing attributes in process `syz.1.845'. [ 179.791151][ T9077] netlink: 'syz.1.849': attribute type 29 has an invalid length. [ 179.791173][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 179.821210][ T9064] netlink: 'syz.1.849': attribute type 4 has an invalid length. [ 179.821229][ T9064] netlink: 17 bytes leftover after parsing attributes in process `syz.1.849'. [ 179.822153][ T9064] netlink: 'syz.1.849': attribute type 29 has an invalid length. [ 179.822169][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 180.198050][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.307479][ T9093] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 180.391996][ T9093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.470989][ T9103] ip_tables: iptables: counters copy to user failed while replacing table [ 180.528470][ T9101] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 180.688821][ T9107] block nbd1: server does not support multiple connections per device. [ 180.724388][ T9107] block nbd1: shutting down sockets [ 180.737535][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 181.078575][ T9121] netlink: 32 bytes leftover after parsing attributes in process `syz.3.864'. [ 181.212111][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 181.327549][ T9140] netlink: 'syz.3.869': attribute type 12 has an invalid length. [ 182.940025][ T9223] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 182.940595][ T9223] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 182.941010][ T9223] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 182.947145][ T9223] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 183.063986][ T9226] syzkaller0: entered promiscuous mode [ 183.064010][ T9226] syzkaller0: entered allmulticast mode [ 183.377685][ T9248] ip_tables: iptables: counters copy to user failed while replacing table [ 185.565893][ T9201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.821218][ T9259] __nla_validate_parse: 5 callbacks suppressed [ 185.821237][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 185.836882][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 185.891429][ T9271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.898'. [ 186.019589][ T9278] sock: sock_timestamping_bind_phc: sock not bind to device [ 186.266770][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 186.402049][ T9298] ip_tables: iptables: counters copy to user failed while replacing table [ 186.441917][ T9299] xt_hashlimit: size too large, truncated to 1048576 [ 186.555088][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.600841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.703039][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.703232][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.769439][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.769676][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.789823][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.789983][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.111330][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.912'. [ 188.160459][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.923'. [ 188.369245][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.925'. [ 188.677327][ T9393] xt_CONNSECMARK: invalid mode: 0 [ 189.009909][ T9408] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.932'. [ 189.023470][ T9404] 8021q: VLANs not supported on ip6gre0 [ 189.026161][ T9404] netlink: 572 bytes leftover after parsing attributes in process `syz.3.931'. [ 189.050915][ T73] net_ratelimit: 1228 callbacks suppressed [ 189.050932][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.051091][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.161269][ T1641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.169715][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 189.342355][ T9427] openvswitch: netlink: Key type 30 is not supported [ 189.364212][ T9427] gretap0: entered promiscuous mode [ 189.367698][ T9427] vlan2: entered promiscuous mode [ 189.424476][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.536568][ T9435] 8021q: VLANs not supported on gre0 [ 189.825077][ T9451] SET target dimension over the limit! [ 189.881173][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.926654][ T9458] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.182195][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.182380][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.208162][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.872826][ T9517] validate_nla: 29 callbacks suppressed [ 190.872857][ T9517] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 190.872870][ T9517] netlink: 'syz.0.958': attribute type 2 has an invalid length. [ 190.872882][ T9517] __nla_validate_parse: 8 callbacks suppressed [ 190.872892][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.958'. [ 191.009536][ T9522] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.960'. [ 191.243311][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.243732][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.963'. [ 191.325409][ T9543] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 191.372664][ T9542] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 191.537187][ T9542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.556914][ T9528] netlink: 32 bytes leftover after parsing attributes in process `syz.1.963'. [ 191.620367][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 191.745929][ T5279] veth1_vlan: left promiscuous mode [ 191.926386][ T9566] netlink: 76 bytes leftover after parsing attributes in process `syz.1.969'. [ 192.426712][ T9593] netlink: 576 bytes leftover after parsing attributes in process `syz.0.975'. [ 192.473892][ T9598] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 192.668218][ T9612] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 192.822999][ T9611] tipc: Started in network mode [ 192.823031][ T9611] tipc: Node identity eaa5c3fd759c, cluster identity 4711 [ 192.823243][ T9611] tipc: Enabled bearer , priority 0 [ 193.263086][ T9632] bond4: entered promiscuous mode [ 193.263128][ T9632] bond4: entered allmulticast mode [ 193.263554][ T9632] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.604367][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.987'. [ 193.940675][ T30] tipc: Node number set to 2671363069 [ 193.981623][ T9675] netlink: 52 bytes leftover after parsing attributes in process `syz.1.992'. [ 194.007243][ T9675] netlink: 52 bytes leftover after parsing attributes in process `syz.1.992'. [ 194.090838][ T9671] tunl0: entered promiscuous mode [ 194.096448][ T9671] netlink: 'syz.2.991': attribute type 4 has an invalid length. [ 194.097297][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097312][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097322][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097331][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097340][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097349][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097358][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097367][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097376][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097385][ T9677] tc action pedit offset must be on 32 bit boundaries [ 194.097404][ T9677] net_ratelimit: 11 callbacks suppressed [ 194.097416][ T9677] 0: reclassify loop, rule prio 0, protocol 800 [ 194.293612][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.360962][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.664072][ T9695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.691611][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.691773][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.695523][ T9713] C: entered promiscuous mode [ 194.831404][ T9713] gre0: entered promiscuous mode [ 194.865522][ T9713] gretap0: entered promiscuous mode [ 194.882494][ T9713] erspan0: entered promiscuous mode [ 194.885185][ T9713] ip_vti0: entered promiscuous mode [ 194.895820][ T9713] ip6_vti0: entered promiscuous mode [ 194.916722][ T9713] sit0: entered promiscuous mode [ 194.928682][ T9713] ip6tnl0: entered promiscuous mode [ 194.939620][ T9713] ip6gre0: entered promiscuous mode [ 194.949153][ T9713] syz_tun: entered promiscuous mode [ 194.960713][ T9713] ip6gretap0: entered promiscuous mode [ 194.964155][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.990719][ T9713] vcan0: entered promiscuous mode [ 195.007584][ T9713] bond0: entered promiscuous mode [ 195.007600][ T9713] bond_slave_0: entered promiscuous mode [ 195.007794][ T9713] bond_slave_1: entered promiscuous mode [ 195.032263][ T9713] team0: entered promiscuous mode [ 195.032280][ T9713] team_slave_0: entered promiscuous mode [ 195.032467][ T9713] team_slave_1: entered promiscuous mode [ 195.067997][ T9713] dummy0: entered promiscuous mode [ 195.174550][ T9713] nlmon0: entered promiscuous mode [ 195.178229][ T9713] batadv0: entered promiscuous mode [ 195.225265][ T9713] veth0: entered promiscuous mode [ 195.250647][ T9713] veth1: entered promiscuous mode [ 195.282702][ T9713] wg0: entered promiscuous mode [ 195.301073][ T9713] wg1: entered promiscuous mode [ 195.323857][ T9713] wg2: entered promiscuous mode [ 195.341087][ T9713] veth1_to_bridge: entered promiscuous mode [ 195.379955][ T9713] veth0_to_bond: entered promiscuous mode [ 195.420949][ T9713] veth1_to_bond: entered promiscuous mode [ 195.422929][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.444057][ T9713] veth0_to_team: entered promiscuous mode [ 195.460426][ T9713] veth1_to_team: entered promiscuous mode [ 195.483409][ T9713] veth0_to_batadv: entered promiscuous mode [ 195.487478][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.487523][ T9713] batadv_slave_0: entered promiscuous mode [ 195.511920][ T9713] veth1_to_batadv: entered promiscuous mode [ 195.515288][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.515336][ T9713] batadv_slave_1: entered promiscuous mode [ 195.517683][ T9713] xfrm0: entered promiscuous mode [ 195.547128][ T9713] veth0_to_hsr: entered promiscuous mode [ 195.578601][ T9713] veth1_to_hsr: entered promiscuous mode [ 195.588306][ T9713] hsr0: entered promiscuous mode [ 195.596590][ T9713] veth1_virt_wifi: entered promiscuous mode [ 195.600069][ T9713] veth0_virt_wifi: entered promiscuous mode [ 195.612978][ T9713] €Â: entered promiscuous mode [ 195.631996][ T9713] vlan0: entered promiscuous mode [ 195.634573][ T9713] vlan1: entered promiscuous mode [ 195.638393][ T9713] macvlan0: entered promiscuous mode [ 195.727451][ T9713] ipvlan0: entered promiscuous mode [ 195.737799][ T9713] ipvlan1: entered promiscuous mode [ 195.751171][ T9713] macvtap0: entered promiscuous mode [ 195.754506][ T9713] macsec0: entered promiscuous mode [ 195.757782][ T9713] geneve0: entered promiscuous mode [ 195.766570][ T9713] geneve1: entered promiscuous mode [ 195.785664][ T9713] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 195.788516][ T9713] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 195.807801][ T9713] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 195.819797][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.819969][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.844793][ T9713] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 195.864449][ T9713] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 195.884344][ T9713] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 195.887878][ T9713] macvlan2: entered promiscuous mode [ 195.898307][ T9713] gtp0: entered promiscuous mode [ 195.905502][ T9713] sit1: entered promiscuous mode [ 195.936829][ T9713] syztnl0: entered promiscuous mode [ 195.962370][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.974184][ T9713] syztnl1: entered promiscuous mode [ 195.977862][ T9713] gre1: entered promiscuous mode [ 195.989505][ T9713] bond2: entered promiscuous mode [ 195.995943][ T9713] bond3: entered promiscuous mode [ 195.996721][ T9713] ip6tnl2: entered promiscuous mode [ 195.996882][ T9713] tipc: Resetting bearer [ 195.997038][ T9713] syzkaller0: entered promiscuous mode [ 195.998281][ T9713] bridge2: entered promiscuous mode [ 196.100915][ T267] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.101529][ T267] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.101571][ T267] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.101607][ T267] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.442938][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.622540][ T9763] __nla_validate_parse: 5 callbacks suppressed [ 196.622562][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 196.832274][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 196.832307][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 196.868997][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 196.869032][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 196.894298][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 196.894321][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 196.894824][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 196.894841][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 196.895351][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 198.693918][ T9874] gretap2: entered promiscuous mode [ 198.693945][ T9874] gretap2: entered allmulticast mode [ 198.994763][ T9885] syzkaller0: left promiscuous mode [ 199.125885][ T9879] net_ratelimit: 9 callbacks suppressed [ 199.125905][ T9879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.145288][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.145521][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.502403][ T9911] netlink: 'syz.3.1035': attribute type 16 has an invalid length. [ 199.502425][ T9911] netlink: 'syz.3.1035': attribute type 2 has an invalid length. [ 199.878703][ T9916] netlink: 'syz.2.1041': attribute type 9 has an invalid length. [ 199.960807][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.240632][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.240815][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.347993][ T9934] netlink: 'syz.2.1046': attribute type 29 has an invalid length. [ 200.384502][ T9935] netlink: 'syz.2.1046': attribute type 29 has an invalid length. [ 200.411937][ T9940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.902632][ T9924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.001513][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.341807][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.341979][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.484457][ T4933] Bluetooth: hci0: unexpected cc 0x2003 length: 118 > 9 [ 201.484844][ T4933] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 201.599377][ T13] IPVS: starting estimator thread 0... [ 201.619455][ T9999] syzkaller0: entered promiscuous mode [ 201.619475][ T9999] syzkaller0: entered allmulticast mode [ 201.675159][T10000] __nla_validate_parse: 203 callbacks suppressed [ 201.675177][T10000] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1054'. [ 201.721385][ T9997] IPVS: using max 29 ests per chain, 69600 per kthread [ 201.738460][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 201.927573][T10018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1059'. [ 202.060816][T10023] vlan3: entered allmulticast mode [ 202.060836][T10023] veth0_to_batadv: entered allmulticast mode [ 202.360799][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 202.438729][T10037] netlink: 'syz.2.1065': attribute type 12 has an invalid length. [ 204.671104][ T13] net_ratelimit: 25 callbacks suppressed [ 204.671126][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.671301][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.090495][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.163080][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.561857][ T4933] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 205.561930][ T4933] Bluetooth: hci0: Injecting HCI hardware error event [ 205.563880][ T4933] Bluetooth: hci0: hardware error 0x00 [ 205.770943][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.771135][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.200766][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.442394][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.871346][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.871550][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.642454][ T4933] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 210.181291][ T38] net_ratelimit: 8 callbacks suppressed [ 210.181311][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.181464][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.362163][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.160855][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.290967][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.291146][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.400629][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.722491][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 211.722924][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 211.723139][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 212.400561][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.400777][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.440834][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.570415][ T5350] net_ratelimit: 9 callbacks suppressed [ 215.570450][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.700535][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.701341][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.600880][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.800665][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.800801][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.641871][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.802250][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.900536][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.900668][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.771983][ T9733] net_ratelimit: 8 callbacks suppressed [ 220.772011][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.840782][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.211027][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.211204][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.801253][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.310435][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.310618][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.840885][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.420809][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.421049][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.960521][ T5717] net_ratelimit: 11 callbacks suppressed [ 225.960543][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.720390][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.720588][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.000646][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.254902][T10088] pim6reg: entered allmulticast mode [ 227.261384][T10088] team0: entered allmulticast mode [ 227.261404][T10088] team_slave_0: entered allmulticast mode [ 227.261422][T10088] team_slave_1: entered allmulticast mode [ 227.263948][T10088] team0: left allmulticast mode [ 227.264005][T10088] team_slave_0: left allmulticast mode [ 227.264050][T10088] team_slave_1: left allmulticast mode [ 227.264959][T10088] pim6reg: left allmulticast mode [ 227.413619][T10099] netlink: 'syz.2.1072': attribute type 1 has an invalid length. [ 227.552979][T10099] bond3: entered promiscuous mode [ 227.555887][T10099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.604313][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1072'. [ 227.765717][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 227.823362][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.823610][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.040527][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.041110][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.629749][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 228.733148][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'. [ 228.798895][T10173] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 228.931425][ T6501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.993325][T10183] tc_dump_action: action bad kind [ 229.641794][T10219] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 229.641837][T10219] bond4: option packets_per_slave: allowed values 0 - 65535 [ 229.645482][T10219] bond4 (unregistering): Released all slaves [ 229.739330][T10226] netlink: 'syz.2.1107': attribute type 21 has an invalid length. [ 229.739358][T10226] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.739445][T10226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.739456][T10226] IPv6: NLM_F_CREATE should be set when creating new route [ 229.739498][T10226] IPv6: NLM_F_CREATE should be set when creating new route [ 229.739522][T10226] IPv6: NLM_F_CREATE should be set when creating new route [ 229.868439][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 229.868569][T10230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.934343][T10230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.025255][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 230.061747][T10239] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1112'. [ 230.151862][T10239] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 230.158867][T10239] bond4 (unregistering): Released all slaves [ 230.216994][T10245] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1114'. [ 230.309069][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 230.908051][T10278] netlink: 'syz.3.1122': attribute type 276 has an invalid length. [ 230.914000][T10278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.080854][ T9727] net_ratelimit: 15 callbacks suppressed [ 231.080876][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.161172][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.207189][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 231.220661][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.220848][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.937673][T10321] batman_adv: batadv0: Adding interface: wlan1 [ 231.937694][T10321] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.937730][T10321] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 232.019610][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019610][T10328] Use struct sctp_assoc_value instead [ 232.019667][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019667][T10328] Use struct sctp_assoc_value instead [ 232.019710][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019710][T10328] Use struct sctp_assoc_value instead [ 232.019752][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019752][T10328] Use struct sctp_assoc_value instead [ 232.019793][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019793][T10328] Use struct sctp_assoc_value instead [ 232.019846][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019846][T10328] Use struct sctp_assoc_value instead [ 232.019888][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019888][T10328] Use struct sctp_assoc_value instead [ 232.019930][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019930][T10328] Use struct sctp_assoc_value instead [ 232.019971][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.019971][T10328] Use struct sctp_assoc_value instead [ 232.020013][T10328] sctp: [Deprecated]: syz.4.1138 (pid 10328) Use of int in max_burst socket option deprecated. [ 232.020013][T10328] Use struct sctp_assoc_value instead [ 232.212091][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.259984][T10335] netlink: 'syz.2.1139': attribute type 11 has an invalid length. [ 232.279712][T10335] netlink: 'syz.2.1139': attribute type 11 has an invalid length. [ 232.280023][T10335] netlink: 'syz.2.1139': attribute type 11 has an invalid length. [ 232.280587][T10335] netlink: 'syz.2.1139': attribute type 11 has an invalid length. [ 232.280851][T10335] netlink: 'syz.2.1139': attribute type 11 has an invalid length. [ 232.281132][T10335] netlink: 'syz.2.1139': attribute type 11 has an invalid length. [ 232.281378][T10335] netlink: 'syz.2.1139': attribute type 11 has an invalid length. [ 232.395394][ T267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.395590][ T267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.418537][ C1] vcan0: j1939_session_tx_dat: 0xffff888056527000: queue data error: -100 [ 232.465829][T10344] nft_compat: unsupported protocol 0 [ 232.483647][T10337] SET target dimension over the limit! [ 232.847965][T10369] __nla_validate_parse: 73 callbacks suppressed [ 232.847999][T10369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1148'. [ 232.870579][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 233.031930][T10373] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 233.189434][T10386] validate_nla: 58 callbacks suppressed [ 233.189456][T10386] netlink: 'syz.4.1149': attribute type 8 has an invalid length. [ 233.189470][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 233.252953][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.501404][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.501575][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.819239][T10386] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.821698][T10386] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.019669][T10394] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1154'. [ 234.213203][T10404] block nbd1: Unsupported socket: should be TCP or UNIX. [ 234.276640][T10404] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1157'. [ 234.523163][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1162'. [ 234.609162][T10433] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 234.794348][T10433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.825928][T10438] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 234.827773][T10438] bond5 (unregistering): Released all slaves [ 234.928869][T10441] bond4: (slave geneve2): making interface the new active one [ 234.940293][T10441] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 234.951228][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.951412][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.951467][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.951512][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.552896][T10468] bond5: Unable to set up delay as MII monitoring is disabled [ 235.557408][T10468] bond5 (unregistering): Released all slaves [ 235.794067][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 235.798670][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 235.832314][T10476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.167145][T10489] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1181'. [ 236.167360][T10489] 0·: renamed from hsr0 (while UP) [ 236.190239][T10489] 0·: entered allmulticast mode [ 236.190261][T10489] hsr_slave_0: entered allmulticast mode [ 236.190286][T10489] hsr_slave_1: entered allmulticast mode [ 236.193635][T10489] net_ratelimit: 15 callbacks suppressed [ 236.193652][T10489] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 236.286285][T10493] netlink: 'syz.2.1183': attribute type 1 has an invalid length. [ 236.286310][T10493] netlink: 'syz.2.1183': attribute type 2 has an invalid length. [ 236.362374][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.568360][T10509] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1187'. [ 236.764735][T10521] x_tables: duplicate underflow at hook 2 [ 236.764909][T10520] x_tables: duplicate underflow at hook 2 [ 236.863701][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.863857][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.966206][T10525] Cannot find add_set index 0 as target [ 237.161429][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.186671][T10532] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 237.210731][ T5717] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 237.401872][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.540768][ T5350] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 237.639187][T10558] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 237.973288][T10579] netlink: 'syz.0.1207': attribute type 1 has an invalid length. [ 237.973308][T10579] __nla_validate_parse: 4 callbacks suppressed [ 237.973318][T10579] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1207'. [ 238.098933][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1208'. [ 238.813241][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 238.840543][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1220'. [ 238.998083][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998166][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998216][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998258][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998299][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998341][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998381][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998424][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998464][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 238.998499][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 239.173093][T10631] xt_CT: No such helper "netbios-ns" [ 239.237735][T10642] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1224'. [ 239.237758][T10642] veth0_to_bond: default FDB implementation only supports local addresses [ 239.375108][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 239.519803][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 240.231821][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'. [ 240.391149][T10701] netlink: 'syz.2.1242': attribute type 83 has an invalid length. [ 240.499950][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 240.511749][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 240.575139][T10708] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 240.788877][T10727] netlink: 'syz.3.1250': attribute type 5 has an invalid length. [ 241.456744][T10762] sctp: [Deprecated]: syz.0.1262 (pid 10762) Use of int in maxseg socket option. [ 241.456744][T10762] Use struct sctp_assoc_value instead [ 241.898481][T10799] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.555041][T10771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.562366][T10780] netlink: 'syz.4.1265': attribute type 2 has an invalid length. [ 244.568327][T10767] netlink: 'syz.4.1265': attribute type 2 has an invalid length. [ 244.607012][T10766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.969965][T10841] __nla_validate_parse: 11 callbacks suppressed [ 244.969987][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1280'. [ 245.106644][T10868] syzkaller0: entered promiscuous mode [ 245.106670][T10868] syzkaller0: entered allmulticast mode [ 245.195805][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 245.452356][T10886] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1290'. [ 245.481328][ C0] net_ratelimit: 20 callbacks suppressed [ 245.481352][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 245.605948][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'. [ 245.733660][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'. [ 245.932943][T10903] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.881603][T10828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.104761][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 248.126970][T10926] netlink: 198796 bytes leftover after parsing attributes in process `syz.3.1300'. [ 248.127001][T10926] netlink: 'syz.3.1300': attribute type 2 has an invalid length. [ 248.237755][T10927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1302'. [ 248.304959][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 248.364348][T10927] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1302'. [ 248.369584][T10933] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 248.495054][T10945] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 248.495082][T10945] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 249.539792][T10992] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 249.805583][ T6494] IPVS: starting estimator thread 0... [ 249.890232][T11005] IPVS: using max 24 ests per chain, 57600 per kthread [ 250.115461][T11021] __nla_validate_parse: 6 callbacks suppressed [ 250.115483][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 250.215345][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 250.301923][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 250.487793][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 250.534032][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 250.573602][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 250.711823][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 250.890505][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1344'. [ 250.960240][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'. [ 251.326367][T11085] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1354'. [ 251.755535][T11102] netlink: 'syz.0.1361': attribute type 21 has an invalid length. [ 251.755559][T11102] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.868241][T11108] Cannot find map_set index 2 as target [ 252.527202][T11147] IPVS: set_ctl: invalid protocol: 152 172.20.20.170:20002 [ 252.554935][T11147] netlink: 'syz.2.1374': attribute type 2 has an invalid length. [ 252.582392][T11154] netlink: 'syz.2.1374': attribute type 2 has an invalid length. [ 252.593912][T11151] IPVS: set_ctl: invalid protocol: 152 172.20.20.170:20002 [ 253.428707][T11207] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 253.995718][T11252] netlink: 'syz.4.1405': attribute type 2 has an invalid length. [ 254.124653][T11262] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 254.552835][T11280] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 254.829277][T11297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.001825][T11307] netlink: 'syz.0.1423': attribute type 1 has an invalid length. [ 255.001862][T11307] netlink: 'syz.0.1423': attribute type 2 has an invalid length. [ 255.520438][T11329] __nla_validate_parse: 23 callbacks suppressed [ 255.520461][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1430'. [ 255.655647][T11338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1431'. [ 255.724133][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.808511][T11351] syzkaller0: entered promiscuous mode [ 255.808536][T11351] syzkaller0: entered allmulticast mode [ 256.090719][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'. [ 256.312610][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'. [ 256.512515][T11387] openvswitch: netlink: EtherType 2 is less than min 600 [ 256.516745][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 256.741410][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1453'. [ 256.871603][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 256.923873][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'. [ 256.924979][T11417] xt_hashlimit: size too large, truncated to 1048576 [ 256.929309][T11427] xt_hashlimit: size too large, truncated to 1048576 [ 256.962506][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.989564][T11429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1459'. [ 257.140008][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 257.245121][T11446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.273504][T11446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.138512][T11508] tipc: Enabling of bearer rejected, failed to enable media [ 258.245861][T11511] Bluetooth: hci0: unsupported parameter 5134 [ 258.245883][T11511] Bluetooth: hci0: unsupported parameter 8192 [ 258.245897][T11511] Bluetooth: hci0: unsupported parameter 5134 [ 258.245909][T11511] Bluetooth: hci0: unsupported parameter 8192 [ 258.529182][T11528] netlink: 'syz.3.1483': attribute type 9 has an invalid length. [ 258.891533][T11541] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 259.315528][T11572] sctp_setsockopt_maxburst: 55 callbacks suppressed [ 259.318949][T11572] sctp: [Deprecated]: syz.4.1499 (pid 11572) Use of int in max_burst socket option deprecated. [ 259.318949][T11572] Use struct sctp_assoc_value instead [ 259.642520][T11591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.646200][T11591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.650308][T11591] batman_adv: batadv0: Removing interface: wlan1 [ 259.720514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.986600][T11608] xt_recent: Unsupported userspace flags (000000b1) [ 260.200814][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.228201][ T6501] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 260.554542][T11642] netlink: 'syz.0.1521': attribute type 29 has an invalid length. [ 260.576811][T11645] SET target dimension over the limit! [ 260.592151][T11645] __nla_validate_parse: 20 callbacks suppressed [ 260.592169][T11645] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1523'. [ 260.592313][T11645] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1523'. [ 260.592327][T11645] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1523'. [ 260.722920][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 260.760832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.810053][T11659] ip_tables: iptables: counters copy to user failed while replacing table [ 260.959944][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 261.240584][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.482740][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.800278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.282262][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.283741][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.285524][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.014465][T11612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.182520][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 263.343485][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'. [ 263.343713][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'. [ 263.377719][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'. [ 263.378061][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'. [ 263.562318][T11693] netlink: 'syz.3.1534': attribute type 4 has an invalid length. [ 263.702802][T11689] syzkaller0: entered promiscuous mode [ 263.702827][T11689] syzkaller0: entered allmulticast mode [ 263.706539][T11701] tipc: Started in network mode [ 263.706570][T11701] tipc: Node identity e66df88d5a6c, cluster identity 4711 [ 263.734412][T11701] tipc: Enabled bearer , priority 0 [ 263.759594][T11689] tipc: Resetting bearer [ 263.810033][T11688] tipc: Resetting bearer [ 263.862977][T11688] tipc: Disabling bearer [ 264.476354][T11740] netlink: 'syz.0.1550': attribute type 18 has an invalid length. [ 264.491545][T11741] IPv6: Can't replace route, no match found [ 264.555613][T11740] netlink: 'syz.0.1550': attribute type 18 has an invalid length. [ 264.667185][T11753] team0: entered promiscuous mode [ 264.667211][T11753] team_slave_0: entered promiscuous mode [ 264.667399][T11753] team_slave_1: entered promiscuous mode [ 264.670017][T11752] team0: left promiscuous mode [ 264.670036][T11752] team_slave_0: left promiscuous mode [ 264.699073][T11752] team_slave_1: left promiscuous mode [ 264.757444][T11751] bridge0: port 3(vlan3) entered blocking state [ 264.757615][T11751] bridge0: port 3(vlan3) entered disabled state [ 264.757865][T11751] vlan3: entered allmulticast mode [ 264.757882][T11751] geneve0: entered allmulticast mode [ 264.766835][T11751] vlan3: entered promiscuous mode [ 264.766898][T11751] geneve0: entered promiscuous mode [ 264.920257][ C0] net_ratelimit: 7 callbacks suppressed [ 264.920282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.401227][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.419685][T11783] IPVS: length: 8 != 1152 [ 265.632174][T11791] pim6reg: entered allmulticast mode [ 265.706567][T11794] ip6t_rt: too many addresses specified [ 265.866596][T11802] __nla_validate_parse: 54 callbacks suppressed [ 265.866617][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1568'. [ 265.892319][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1568'. [ 265.960201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.440487][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.539306][T11837] netlink: 'syz.2.1577': attribute type 32 has an invalid length. [ 266.539330][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 266.613610][T11837] bond5: option coupled_control: invalid value (109) [ 266.633762][T11847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1579'. [ 266.679422][T11837] bond5 (unregistering): Released all slaves [ 266.800525][T11852] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 266.921987][T11845] bond9: entered promiscuous mode [ 266.922085][T11845] bond9: entered allmulticast mode [ 266.922615][T11845] 8021q: adding VLAN 0 to HW filter on device bond9 [ 267.000508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.106884][T11852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.247579][T11851] bond3: (slave gretap3): making interface the new active one [ 267.265349][T11851] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 267.481598][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.561043][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.802762][T11893] tipc: Resetting bearer [ 267.842131][T11893] tipc: Disabling bearer [ 267.949496][T11897] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1588'. [ 268.040291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.157566][T11910] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1591'. [ 268.167592][T11910] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1591'. [ 268.424618][T11924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1594'. [ 268.525213][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.632577][ T6501] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.632629][ T6501] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.666543][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 268.805196][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 269.090205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.784637][T12003] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 269.784672][T12003] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 269.914175][T12010] xt_hashlimit: size too large, truncated to 1048576 [ 270.120465][ C0] net_ratelimit: 1 callbacks suppressed [ 270.120487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.357337][T12029] netlink: 'syz.3.1623': attribute type 1 has an invalid length. [ 270.539856][T12033] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 270.601422][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.602344][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.838893][T12059] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 270.954657][T12059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.957481][T12066] netlink: 'syz.1.1634': attribute type 9 has an invalid length. [ 270.994708][T12062] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 271.160308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.165141][T12059] bond5: (slave geneve3): making interface the new active one [ 271.258192][T12059] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 271.630386][T12097] __nla_validate_parse: 40 callbacks suppressed [ 271.630411][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 271.630605][T12097] unsupported nla_type 216 [ 271.653665][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.776979][T12099] netlink: 'syz.1.1642': attribute type 12 has an invalid length. [ 271.932677][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 271.939721][T12102] netlink: 'syz.3.1643': attribute type 10 has an invalid length. [ 271.971076][T12102] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 272.068392][T12107] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 272.096778][T12113] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 272.143954][T12118] netlink: 'syz.3.1648': attribute type 12 has an invalid length. [ 272.143976][T12118] netlink: 'syz.3.1648': attribute type 29 has an invalid length. [ 272.143990][T12118] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1648'. [ 272.144009][T12118] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 272.144021][T12118] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 272.144033][T12118] netlink: 'syz.3.1648': attribute type 3 has an invalid length. [ 272.144046][T12118] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1648'. [ 272.188361][T12105] netlink: 'syz.2.1645': attribute type 4 has an invalid length. [ 272.206614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.237127][T12118] netlink: 'syz.3.1648': attribute type 11 has an invalid length. [ 272.264380][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 272.264400][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 272.264424][T12122] netlink: 'syz.0.1649': attribute type 14 has an invalid length. [ 272.346768][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 272.409763][T12129] block nbd1: Unsupported socket: should be TCP or UNIX. [ 272.446571][T12133] block nbd1: Unsupported socket: should be TCP or UNIX. [ 272.681148][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.823078][T12163] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1659'. [ 272.936284][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'. [ 273.018040][T12177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1664'. [ 273.240452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.284258][T12193] 8021q: VLANs not supported on ip_vti0 [ 273.507161][T12198] openvswitch: netlink: Message has 8 unknown bytes. [ 273.507201][T12198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.602659][ T5620] Bluetooth: hci2: command 0x0405 tx timeout [ 274.892935][T12245] bridge0: port 3(macvlan2) entered disabled state [ 274.893947][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.899319][T12245] bridge0: entered allmulticast mode [ 274.914200][T12246] macvlan2: left allmulticast mode [ 274.914219][T12246] syz_tun: left allmulticast mode [ 274.933922][T12246] macvlan2: left promiscuous mode [ 274.937669][T12246] bridge0: port 3(macvlan2) entered disabled state [ 275.020889][T12246] bridge_slave_1: left allmulticast mode [ 275.020930][T12246] bridge_slave_1: left promiscuous mode [ 275.021644][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.055532][T12246] bridge_slave_0: left allmulticast mode [ 275.055556][T12246] bridge_slave_0: left promiscuous mode [ 275.055726][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.068729][T12256] Bluetooth: hci0: unsupported parameter 5135 [ 275.068785][T12256] Bluetooth: hci0: unsupported parameter 8192 [ 275.068826][T12256] Bluetooth: hci0: unsupported parameter 5135 [ 275.068862][T12256] Bluetooth: hci0: unsupported parameter 8192 [ 275.320394][ C0] net_ratelimit: 17 callbacks suppressed [ 275.320414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.647610][T12284] openvswitch: netlink: IP tunnel dst address not specified [ 275.803943][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.259830][T12307] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 276.683026][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.690957][T12326] __nla_validate_parse: 13 callbacks suppressed [ 276.690980][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 276.714704][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 276.859528][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.892045][T12333] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.965301][T12341] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.985797][T12344] validate_nla: 6 callbacks suppressed [ 276.985818][T12344] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 277.051725][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1718'. [ 277.134649][T12351] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.147860][T12351] bond6: (slave bond7): making interface the new active one [ 277.161789][T12351] bond6: (slave bond7): Enslaving as an active interface with an up link [ 277.164914][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1717'. [ 277.192541][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 277.229433][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1717'. [ 277.251936][T12344] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 277.254555][T12351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.255503][T12355] bridge_slave_1: left allmulticast mode [ 277.255524][T12355] bridge_slave_1: left promiscuous mode [ 277.255730][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.305695][T12355] bridge_slave_0: left allmulticast mode [ 277.305721][T12355] bridge_slave_0: left promiscuous mode [ 277.305964][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.493721][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 277.559500][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 277.807808][T12393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1727'. [ 277.881885][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.996665][T12401] sctp: Trying to GSO but underlying device doesn't support it. [ 278.277737][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 278.487134][T12389] infiniband syz2: set down [ 278.487156][T12389] infiniband syz2: added ipvlan1 [ 278.631354][T12389] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 278.631394][T12389] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 278.631434][T12389] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 278.813368][T12389] RDS/IB: syz2: added [ 278.819628][T12389] smc: adding ib device syz2 with port count 1 [ 278.819798][T12389] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 278.921227][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.416271][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b1dac00: rx timeout, send abort [ 279.417713][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b1dac00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 279.721680][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.000576][ T5744] net_ratelimit: 2 callbacks suppressed [ 281.000599][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.040518][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.747465][T12462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.771160][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.888672][T12501] __nla_validate_parse: 5 callbacks suppressed [ 282.888694][T12501] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1756'. [ 283.019513][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1760'. [ 283.041711][T12507] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 283.080570][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.175574][T12507] netlink: 'syz.1.1759': attribute type 21 has an invalid length. [ 283.175628][T12507] netlink: 'syz.1.1759': attribute type 6 has an invalid length. [ 283.175643][T12507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1759'. [ 283.539639][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 283.644582][T12552] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 283.705858][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 283.816346][T12552] bond8: entered promiscuous mode [ 283.818674][T12552] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.870003][T12566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.888641][T12566] bond8: (slave xfrm2): The slave device specified does not support setting the MAC address [ 283.888666][T12566] bond8: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 283.914460][T12552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1770'. [ 283.918861][T12566] bond8: (slave xfrm2): making interface the new active one [ 283.918884][T12566] xfrm2: entered promiscuous mode [ 283.955533][T12566] xfrm2: left promiscuous mode [ 284.028966][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 284.047109][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 284.124893][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.180514][T12584] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 284.346045][T12584] bond9: entered promiscuous mode [ 284.346529][T12584] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.379219][T12599] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1778'. [ 284.537050][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 284.629226][T12611] veth1_to_batadv: mtu less than device minimum [ 284.642559][T12613] veth1_to_batadv: mtu less than device minimum [ 284.868663][T12631] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 284.972156][T12631] bond10: entered promiscuous mode [ 284.972653][T12631] 8021q: adding VLAN 0 to HW filter on device bond10 [ 285.023506][T12639] ipvlan3: entered allmulticast mode [ 285.023539][T12639] bond10: entered allmulticast mode [ 285.023736][T12639] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 285.023758][T12639] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 285.023776][T12639] bond10: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 285.028480][T12639] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 285.162523][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.209796][T12650] Bluetooth: hci0: unsupported parameter 5161 [ 285.209819][T12650] Bluetooth: hci0: unsupported parameter 8192 [ 285.209833][T12650] Bluetooth: hci0: unsupported parameter 5161 [ 285.209848][T12650] Bluetooth: hci0: unsupported parameter 8192 [ 285.702232][T12657] Cannot find set identified by id 65534 to match [ 285.805994][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.200653][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.241535][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.698330][T12621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.975292][T12674] __nla_validate_parse: 2 callbacks suppressed [ 287.975324][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'. [ 288.075923][T12676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1798'. [ 288.282866][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.307956][T12693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1798'. [ 288.376475][T12691] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 288.730518][ T5751] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 288.744638][T12721] tipc: New replicast peer: 172.20.20.187 [ 288.767635][T12721] tipc: Enabled bearer , priority 10 [ 288.840357][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.884036][ T5751] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 289.255366][T12731] syzkaller0: entered promiscuous mode [ 289.255391][T12731] syzkaller0: entered allmulticast mode [ 289.330975][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.602339][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'. [ 289.767749][T12756] x_tables: duplicate underflow at hook 2 [ 289.846593][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1818'. [ 290.071756][T12774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1821'. [ 290.092101][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'. [ 290.152748][T12778] netlink: get zone limit has 8 unknown bytes [ 290.153551][T12778] netlink: 'syz.4.1823': attribute type 1 has an invalid length. [ 290.153570][T12778] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.1823'. [ 290.204445][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 290.204489][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 290.414536][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.665967][T12795] xfrm1: entered allmulticast mode [ 290.809323][T12791] nbd: must specify a device to reconfigure [ 291.422131][T12810] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 291.438909][T12810] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 291.481049][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.893912][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.522297][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.586969][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.900656][T12850] netlink: 'syz.4.1838': attribute type 5 has an invalid length. [ 294.149499][T12900] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 294.149526][T12900] __nla_validate_parse: 3 callbacks suppressed [ 294.149540][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 294.223945][T12913] netlink: 'syz.1.1849': attribute type 21 has an invalid length. [ 294.423587][T12927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1852'. [ 294.600557][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.923671][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.245902][T12930] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1852'. [ 295.532479][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 295.643841][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.020722][ T5751] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 296.187386][T13017] 8021q: VLANs not supported on ip6_vti0 [ 296.319704][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 296.347471][T13027] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1873'. [ 296.581318][ T5744] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 296.598310][T13027] bond4 (unregistering): Released all slaves [ 296.656976][T13045] xt_hashlimit: size too large, truncated to 1048576 [ 296.682470][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.756807][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 297.408067][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 297.523353][T13086] Cannot find del_set index 4 as target [ 297.608618][T13090] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 297.650021][T13090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.662491][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 297.721986][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.837676][T13090] bond5: (slave bridge3): making interface the new active one [ 297.852685][T13090] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 297.960654][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.966223][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'. [ 298.098064][T13097] xt_CT: No such helper "pptp" [ 298.355533][T13079] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 298.401219][T13116] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 298.488675][T13116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.505913][T13116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.528636][T13116] bond0 (unregistering): Released all slaves [ 298.707695][T13132] tls_set_device_offload_rx: netdev not found [ 298.762235][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.805937][T13136] tipc: Enabled bearer , priority 10 [ 299.308516][T13167] vlan5: entered allmulticast mode [ 299.308538][T13167] bond0: entered allmulticast mode [ 299.308552][T13167] bond_slave_0: entered allmulticast mode [ 299.308568][T13167] bond_slave_1: entered allmulticast mode [ 299.385406][T13169] __nla_validate_parse: 2 callbacks suppressed [ 299.385435][T13169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1908'. [ 299.559667][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1910'. [ 299.664023][T13192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.686950][T13190] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1913'. [ 299.691599][T13191] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1912'. [ 299.692354][T13191] xt_policy: neither incoming nor outgoing policy selected [ 299.730925][T13196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.781557][T13192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.787175][T13200] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1913'. [ 299.805951][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.823319][T13203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1914'. [ 299.874667][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 299.984489][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'. [ 300.039001][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'. [ 300.271795][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 300.567194][T13251] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 300.694003][T13256] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 300.775802][T13261] syzkaller1: entered promiscuous mode [ 300.775823][T13261] syzkaller1: entered allmulticast mode [ 300.840873][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.002208][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.214620][ T4933] block nbd1: Receive control failed (result -32) [ 301.392048][T13306] x_tables: duplicate underflow at hook 2 [ 301.763907][T13333] net_ratelimit: 3 callbacks suppressed [ 301.763928][T13333] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 301.784233][ T5751] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 301.789997][T13334] netlink: 'syz.3.1947': attribute type 6 has an invalid length. [ 301.790016][T13334] netlink: 'syz.3.1947': attribute type 5 has an invalid length. [ 301.831637][T13339] netlink: 'syz.4.1949': attribute type 5 has an invalid length. [ 301.852086][T13339] geneve2: entered promiscuous mode [ 301.852105][T13339] geneve2: entered allmulticast mode [ 301.870935][T12439] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 301.872054][ T50] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 301.872113][ T50] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 301.872145][ T50] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 301.903932][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.060629][ T5751] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 302.233977][T13361] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 302.236512][T13361] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.236725][T13361] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 302.517572][T13369] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 302.517663][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 302.517806][T13369] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 302.517874][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 302.636039][T13372] netlink: 'syz.4.1961': attribute type 4 has an invalid length. [ 303.295095][T13408] hsr0 speed is unknown, defaulting to 1000 [ 303.295243][T13408] hsr0 speed is unknown, defaulting to 1000 [ 303.297013][T13408] hsr0 speed is unknown, defaulting to 1000 [ 303.321468][T13408] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 303.321507][T13408] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 303.321551][T13408] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 303.376740][T13408] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 303.410870][T13408] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 303.466374][T13408] hsr0 speed is unknown, defaulting to 1000 [ 303.530458][T13408] hsr0 speed is unknown, defaulting to 1000 [ 303.536531][T13408] hsr0 speed is unknown, defaulting to 1000 [ 303.558702][T13408] hsr0 speed is unknown, defaulting to 1000 [ 303.585184][T13408] hsr0 speed is unknown, defaulting to 1000 [ 303.701854][T13424] pim6reg: left allmulticast mode [ 304.167728][T13407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.167758][T13407] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 304.186347][T13464] netlink: 'syz.3.1985': attribute type 32 has an invalid length. [ 304.218762][T13467] netlink: 'syz.0.1984': attribute type 1 has an invalid length. [ 304.265700][T13464] bond0: Setting coupled_control to on (1) [ 304.293765][T13407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.293788][T13407] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 304.297595][T13469] netlink: 'syz.3.1985': attribute type 32 has an invalid length. [ 304.299575][T13407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.299593][T13407] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 304.339675][T13407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.339694][T13407] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 304.399961][T13469] bond11: option coupled_control: invalid value (120) [ 304.408651][T13469] bond11 (unregistering): Released all slaves [ 304.605199][T13483] __nla_validate_parse: 17 callbacks suppressed [ 304.605219][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'. [ 304.687935][T13486] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1990'. [ 304.745311][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 304.929449][T13501] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1997'. [ 305.015345][T13508] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 305.042173][ T5620] block nbd2: Receive control failed (result -32) [ 305.176665][T13516] netlink: 1992 bytes leftover after parsing attributes in process `syz.4.2002'. [ 305.364310][T13523] netlink: 'syz.3.2004': attribute type 21 has an invalid length. [ 305.364338][T13523] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.364454][T13523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.364478][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 305.364523][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 305.364553][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 305.364969][T13524] netlink: 'syz.3.2004': attribute type 21 has an invalid length. [ 305.365034][T13524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.365800][T13523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.366383][T13523] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 [ 305.498373][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 305.639502][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 305.721991][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 306.103139][T13568] Bluetooth: hci0: unsupported parameter 5135 [ 306.103162][T13568] Bluetooth: hci0: unsupported parameter 8192 [ 306.103188][T13568] Bluetooth: hci0: unsupported parameter 5135 [ 306.103202][T13568] Bluetooth: hci0: unsupported parameter 8192 [ 306.433216][T13579] bond10: invalid ARP target 0.0.0.0 specified for addition [ 306.433245][T13579] bond10: option arp_ip_target: invalid value (0) [ 306.444199][T13579] bond10 (unregistering): Released all slaves [ 306.652971][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2021'. [ 306.749856][T13603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2024'. [ 307.051760][T13634] tipc: Enabled bearer , priority 0 [ 307.216983][T13636] syzkaller0: entered promiscuous mode [ 307.217006][T13636] syzkaller0: entered allmulticast mode [ 307.218283][T13636] tipc: Resetting bearer [ 307.298564][T13632] 8021q: adding VLAN 0 to HW filter on device bond10 [ 307.356247][T13624] tipc: Resetting bearer [ 307.753393][T13663] xt_cgroup: invalid path, errno=-2 [ 308.916580][T13624] tipc: Disabling bearer [ 309.752512][T13734] validate_nla: 2 callbacks suppressed [ 309.752534][T13734] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 310.000821][T13748] __nla_validate_parse: 9 callbacks suppressed [ 310.000842][T13748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2057'. [ 310.390760][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 310.583762][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 310.583889][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 310.583993][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 310.584099][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 310.584248][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 310.584372][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 310.584474][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 310.585293][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 310.648381][T13733] net_ratelimit: 12 callbacks suppressed [ 310.648434][T13733] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 310.679576][T13733] tipc: Enabling of bearer rejected, media not registered [ 311.018379][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.018645][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.024832][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.025466][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.026054][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.027373][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.027953][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.028415][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.028652][T13799] netlink: 'syz.3.2069': attribute type 15 has an invalid length. [ 311.294239][T13810] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.318108][T13813] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 311.596660][T13835] block nbd2: NBD_DISCONNECT [ 311.596689][T13835] block nbd2: Send disconnect failed -32 [ 311.596707][T13835] block nbd2: shutting down sockets [ 311.624780][T13828] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 311.629975][T13828] bond11 (unregistering): Released all slaves [ 311.743339][T13833] tipc: Enabled bearer , priority 0 [ 311.898315][T13833] syzkaller0: entered promiscuous mode [ 311.898341][T13833] syzkaller0: entered allmulticast mode [ 311.899137][T13833] tipc: Resetting bearer [ 311.899519][T13843] batadv_slave_1: entered promiscuous mode [ 311.899721][T13844] tipc: Enabling of bearer rejected, already enabled [ 311.937434][T13829] tipc: Resetting bearer [ 312.152329][ T31] audit: type=1800 audit(1789599307.768:4): pid=13865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2085" name=680B20 dev="tmpfs" ino=2124 res=0 errno=0 [ 313.625863][T13829] tipc: Disabling bearer [ 313.640051][T13842] batadv_slave_1: left promiscuous mode [ 313.785291][ T10] tipc: Node number set to 3154245773 [ 314.087204][T13903] veth0_macvtap: entered allmulticast mode [ 314.389268][T13913] x_tables: duplicate underflow at hook 1 [ 314.826025][T13943] validate_nla: 28 callbacks suppressed [ 314.826047][T13943] netlink: 'syz.4.2104': attribute type 1 has an invalid length. [ 315.120922][T13956] __nla_validate_parse: 95 callbacks suppressed [ 315.120944][T13956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2107'. [ 315.272802][T13971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2111'. [ 315.299430][T13969] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 315.308096][T13958] syzkaller1: entered promiscuous mode [ 315.308116][T13958] syzkaller1: entered allmulticast mode [ 315.337457][T13958] sctp: [Deprecated]: syz.2.2108 (pid 13958) Use of int in max_burst socket option deprecated. [ 315.337457][T13958] Use struct sctp_assoc_value instead [ 315.475489][T13975] pim6reg527: entered allmulticast mode [ 315.489810][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2112'. [ 315.506549][T13975] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 315.685000][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2116'. [ 315.737620][T13995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2118'. [ 315.750301][T13995] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 315.750329][T13995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.902474][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2119'. [ 316.149187][T14017] openvswitch: netlink: Invalid VLAN frame [ 316.149867][T14017] openvswitch: netlink: IP tunnel dst address not specified [ 316.392573][T14026] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2129'. [ 316.399506][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 316.584154][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2134'. [ 316.808937][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 317.504861][T14089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.704870][T14099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.766170][T14100] netlink: 'syz.2.2147': attribute type 61 has an invalid length. [ 317.780747][T14102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.847175][T14102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.036524][T14120] netlink: 'syz.0.2149': attribute type 14 has an invalid length. [ 318.036564][T14120] netlink: 'syz.0.2149': attribute type 13 has an invalid length. [ 318.266016][T14125] openvswitch: netlink: Flow actions attr not present in new flow. [ 318.423212][T14142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.497879][T14145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.558278][T14150] tipc: Enabling not permitted [ 318.558313][T14150] tipc: Enabling of bearer rejected, failed to enable media [ 318.628506][T14150] bridge0: port 4(batadv2) entered blocking state [ 318.633894][T14150] bridge0: port 4(batadv2) entered disabled state [ 318.634056][T14150] batadv2: entered allmulticast mode [ 318.652016][T14150] batadv2: entered promiscuous mode [ 318.817625][T14165] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 319.034504][T14177] netlink: 'syz.1.2170': attribute type 29 has an invalid length. [ 319.034977][T14177] netlink: 'syz.1.2170': attribute type 29 has an invalid length. [ 319.091069][T13701] batman_adv: batadv2: IGMP Querier appeared [ 319.091084][T13701] batman_adv: batadv2: MLD Querier appeared [ 319.311349][T14192] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 319.554453][T14206] tipc: Enabled bearer , priority 20 [ 320.168599][T14240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.345952][T14250] __nla_validate_parse: 15 callbacks suppressed [ 320.345972][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2188'. [ 320.348483][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2188'. [ 320.642660][T14263] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 320.665798][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2194'. [ 321.421935][T14288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2201'. [ 321.559641][T14296] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2203'. [ 321.728357][T14303] netlink: 'syz.0.2205': attribute type 9 has an invalid length. [ 321.754023][T14298] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 321.754959][T14304] batadv_slave_0: entered promiscuous mode [ 321.756586][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 321.756692][T14304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.843882][T14304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.936006][T14306] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2208'. [ 321.979749][T14315] pim6reg: entered allmulticast mode [ 322.017193][T14317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2208'. [ 322.018019][T14317] net_ratelimit: 1 callbacks suppressed [ 322.018036][T14317] ip_tables: iptables: counters copy to user failed while replacing table [ 322.083582][T14318] team0: entered allmulticast mode [ 322.083603][T14318] team_slave_0: entered allmulticast mode [ 322.083621][T14318] team_slave_1: entered allmulticast mode [ 322.160314][T14315] team0: left allmulticast mode [ 322.160338][T14315] team_slave_0: left allmulticast mode [ 322.160356][T14315] team_slave_1: left allmulticast mode [ 322.160623][T14315] pim6reg: left allmulticast mode [ 322.420765][T14326] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2214'. [ 322.423999][T14325] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2214'. [ 322.489275][T14332] --map-set only usable from mangle table [ 322.837367][T14348] openvswitch: netlink: ct_state flags ffffffff unsupported [ 322.860322][T14348] netlink: 'syz.3.2222': attribute type 1 has an invalid length. [ 322.866206][T14349] netlink: 'syz.3.2222': attribute type 1 has an invalid length. [ 322.983373][T14348] bond12: entered promiscuous mode [ 322.985393][T14348] 8021q: adding VLAN 0 to HW filter on device bond12 [ 323.110019][T14354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.123545][T14354] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.188339][T14354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.188365][T14354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.215369][T14354] A link change request failed with some changes committed already. Interface €Â may have been left with an inconsistent configuration, please check. [ 323.218946][T14320] hsr0 speed is unknown, defaulting to 1000 [ 323.270985][T14360] A link change request failed with some changes committed already. Interface €Â may have been left with an inconsistent configuration, please check. [ 323.298252][T13700] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.298330][T13700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.573154][T14377] bond5: entered promiscuous mode [ 323.573212][T14377] bond5: entered allmulticast mode [ 323.573637][T14377] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.755191][T14386] bond6: entered promiscuous mode [ 323.755217][T14386] bond6: entered allmulticast mode [ 323.757459][T14386] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.990457][T14399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.115449][T14459] team0 (unregistering): Port device team_slave_0 removed [ 325.149281][T14474] netlink: 'syz.4.2258': attribute type 12 has an invalid length. [ 325.149580][T14475] netlink: 'syz.4.2258': attribute type 12 has an invalid length. [ 325.155474][T14474] netlink: 'syz.4.2258': attribute type 3 has an invalid length. [ 325.158280][T14459] team0 (unregistering): Port device team_slave_1 removed [ 325.382731][T14480] __nla_validate_parse: 12 callbacks suppressed [ 325.382750][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 325.460045][T14480] team0: Port device team_slave_0 removed [ 325.488811][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2262'. [ 325.616805][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 326.519359][T14520] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2270'. [ 326.565252][T14512] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 326.686389][T14523] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 326.969249][T14539] --map-set only usable from mangle table [ 326.977460][T14538] --map-set only usable from mangle table [ 326.977990][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 326.978009][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2274'. [ 327.135284][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2276'. [ 327.210561][T14545] netlink: 'syz.1.2277': attribute type 2 has an invalid length. [ 327.210584][T14545] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2277'. [ 328.009352][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'. [ 328.442881][T14608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2297'. [ 328.545168][T14620] ip_tables: iptables: counters copy to user failed while replacing table [ 329.394848][T14652] netlink: 'syz.0.2312': attribute type 9 has an invalid length. [ 329.451650][T14656] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 329.612450][T13698] tipc: Subscription rejected, illegal request [ 330.110457][T14696] macsec1: entered promiscuous mode [ 330.111007][T14696] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 330.158093][T14696] vlan3: entered allmulticast mode [ 330.158124][T14696] bond0: entered allmulticast mode [ 330.413520][T14706] openvswitch: netlink: Multiple metadata blocks provided [ 331.059177][T14744] netlink: 'syz.0.2343': attribute type 10 has an invalid length. [ 331.084100][T14744] team0: Device veth0_vlan failed to register rx_handler [ 331.291859][T14761] __nla_validate_parse: 13 callbacks suppressed [ 331.291882][T14761] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2347'. [ 331.333959][T14761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.346644][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2348'. [ 331.433117][T14775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2346'. [ 331.530912][T14777] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 331.648878][T14791] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 331.735020][T14782] bond11: (slave bridge3): making interface the new active one [ 331.735737][T14782] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 331.790944][T14777] bond11: (slave bridge4): Enslaving as an active interface with a down link [ 331.965009][T14805] netlink: 692 bytes leftover after parsing attributes in process `syz.0.2355'. [ 331.965034][T14805] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2355'. [ 332.270560][T14824] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2358'. [ 332.358213][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 332.550401][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2358'. [ 332.809347][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 332.809605][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 333.068243][T14852] netlink: 'syz.2.2361': attribute type 2 has an invalid length. [ 333.068267][T14852] netlink: 'syz.2.2361': attribute type 11 has an invalid length. [ 333.134806][T14846] bond7: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 333.181811][T14846] bond7 (unregistering): Released all slaves [ 333.802041][T14901] netlink: 'syz.0.2374': attribute type 10 has an invalid length. [ 333.857127][T14905] netlink: 'syz.1.2375': attribute type 61 has an invalid length. [ 334.072825][T14901] 0·: left allmulticast mode [ 334.072844][T14901] hsr_slave_0: left allmulticast mode [ 334.072856][T14901] hsr_slave_1: left allmulticast mode [ 334.077233][T14901] 0·: mtu greater than device maximum [ 335.160619][ T9739] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 335.216722][T14982] C: renamed from lo (while UP) [ 335.229054][T14982] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 335.453227][T14988] netlink: 'syz.2.2401': attribute type 3 has an invalid length. [ 335.734439][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 335.792078][T15005] bond0: Error: Cannot enslave bond to itself. [ 335.804002][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 335.873923][T15011] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 335.964662][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 336.025367][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 336.065930][T15023] netlink: 'syz.4.2415': attribute type 21 has an invalid length. [ 336.086977][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 336.137520][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 336.165206][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 336.208443][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 336.288865][T14998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 336.337822][T15034] __nla_validate_parse: 31 callbacks suppressed [ 336.337842][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2419'. [ 336.444816][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2421'. [ 336.468054][T15043] netlink: 'syz.2.2420': attribute type 11 has an invalid length. [ 336.877020][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2431'. [ 336.877427][T15059] Bluetooth: hci0: unsupported parameter 5135 [ 336.877446][T15059] Bluetooth: hci0: unsupported parameter 8192 [ 336.877459][T15059] Bluetooth: hci0: unsupported parameter 5135 [ 336.877471][T15059] Bluetooth: hci0: unsupported parameter 8192 [ 336.966370][T15070] Bluetooth: hci0: unsupported parameter 5135 [ 336.966391][T15070] Bluetooth: hci0: unsupported parameter 8192 [ 336.966404][T15070] Bluetooth: hci0: unsupported parameter 5135 [ 336.966417][T15070] Bluetooth: hci0: unsupported parameter 8192 [ 337.141961][T15079] netlink: 'syz.1.2436': attribute type 9 has an invalid length. [ 337.531903][T15104] wireguard: wg2: Could not create IPv4 socket [ 337.534753][T15104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2443'. [ 337.534807][T15104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2443'. [ 337.675036][T15111] netlink: 'syz.0.2446': attribute type 1 has an invalid length. [ 337.781437][T15115] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2447'. [ 337.787702][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 337.908125][T15123] wg1: entered promiscuous mode [ 337.908149][T15123] wg1: entered allmulticast mode [ 337.968790][T15123] bridge0: port 1(ipvlan4) entered blocking state [ 337.968944][T15123] bridge0: port 1(ipvlan4) entered disabled state [ 337.969112][T15123] ipvlan4: entered allmulticast mode [ 337.969126][T15123] bridge0: entered allmulticast mode [ 337.999251][T15123] ipvlan4: left allmulticast mode [ 337.999269][T15123] bridge0: left allmulticast mode [ 338.309825][T15144] netlink: 'syz.1.2453': attribute type 1 has an invalid length. [ 338.334279][T15151] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 338.736799][T15177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2462'. [ 338.944373][T15193] netlink: ct_mark mask cannot be 0 [ 338.944404][T15193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.011186][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 339.073754][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 339.233959][T15192] team0: Port device team_slave_0 removed [ 339.350334][T15211] netlink: 'syz.1.2469': attribute type 11 has an invalid length. [ 339.758378][T15230] veth9: entered allmulticast mode [ 339.962261][T15243] netlink: 'syz.0.2479': attribute type 22 has an invalid length. [ 340.051514][T15243] netlink: 'syz.0.2479': attribute type 22 has an invalid length. [ 340.380441][T15267] h: entered promiscuous mode [ 340.437429][T15268] netlink: 'syz.4.2484': attribute type 1 has an invalid length. [ 340.498726][T15268] 8021q: adding VLAN 0 to HW filter on device bond7 [ 340.640490][T15268] bond7: (slave geneve3): making interface the new active one [ 340.645988][T15268] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 341.274356][T15314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.421603][T15323] __nla_validate_parse: 7 callbacks suppressed [ 341.421626][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2501'. [ 341.584159][T15333] ipvlan3: entered allmulticast mode [ 341.585311][T15333] virt_wifi0: entered allmulticast mode [ 341.587725][T15333] batman_adv: batadv0: Adding interface: ipvlan3 [ 341.587758][T15333] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.587792][T15333] batman_adv: batadv0: Interface activated: ipvlan3 [ 341.846267][T15336] bond9: option min_links: invalid value (18446744073709551614) [ 341.846297][T15336] bond9: option min_links: allowed values 0 - 2147483647 [ 341.872075][T15336] bond9 (unregistering): Released all slaves [ 342.079853][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2511'. [ 342.079879][T15353] bridge: RTM_NEWNEIGH with invalid ether address [ 342.091225][T15353] xt_IDLETIMER: label is empty or not nul-terminated [ 342.281652][T15368] SET target dimension over the limit! [ 342.404038][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 342.573856][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 342.794849][T15407] syz_tun: entered allmulticast mode [ 342.807560][T15407] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2526'. [ 342.808689][T15407] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2526'. [ 343.029950][T15415] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 343.178476][T15424] netlink: 'syz.4.2532': attribute type 7 has an invalid length. [ 343.178655][T15424] netlink: 'syz.4.2532': attribute type 7 has an invalid length. [ 343.178803][T15424] netlink: 'syz.4.2532': attribute type 7 has an invalid length. [ 343.178947][T15424] netlink: 'syz.4.2532': attribute type 7 has an invalid length. [ 343.325039][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2533'. [ 343.397876][T15428] team0 (unregistering): Port device team_slave_0 removed [ 343.430490][T15428] team0 (unregistering): Port device team_slave_1 removed [ 343.544962][T15425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.555633][T15437] validate_nla: 61 callbacks suppressed [ 343.555685][T15437] netlink: 'syz.2.2535': attribute type 21 has an invalid length. [ 343.681753][T15445] syzkaller1: entered promiscuous mode [ 343.681778][T15445] syzkaller1: entered allmulticast mode [ 343.717317][T15445] netlink: 'syz.3.2537': attribute type 1 has an invalid length. [ 343.907556][T15451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2540'. [ 344.065093][T15454] netlink: 'syz.1.2541': attribute type 2 has an invalid length. [ 344.095770][T15454] pimreg3: entered allmulticast mode [ 344.294693][T15460] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 344.554878][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2550'. [ 344.724272][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 344.858896][T15488] team0: Device macvtap2 is already an upper device of the team interface [ 345.105628][T15508] netlink: 'syz.3.2558': attribute type 10 has an invalid length. [ 345.136934][T15508] bridge0: port 3(batadv0) entered disabled state [ 345.137857][T15508] batadv0: left allmulticast mode [ 345.137879][T15508] batadv0: left promiscuous mode [ 345.153647][T15508] bridge0: port 3(batadv0) entered disabled state [ 345.598386][T15537] syz.3.2562 (15537) used obsolete PPPIOCDETACH ioctl [ 345.731530][T15548] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 345.731560][T15548] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 348.738156][T15559] __nla_validate_parse: 5 callbacks suppressed [ 348.738182][T15559] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2573'. [ 348.759500][T15562] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20003 [ 348.776500][T15555] bridge0: port 1(veth1_to_bridge) entered blocking state [ 348.776736][T15555] bridge0: port 1(veth1_to_bridge) entered disabled state [ 348.777647][T15555] veth1_to_bridge: entered allmulticast mode [ 348.779910][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 348.779985][T15559] netlink: 'syz.3.2573': attribute type 14 has an invalid length. [ 348.780003][T15559] netlink: 'syz.3.2573': attribute type 13 has an invalid length. [ 348.804229][T15555] veth1_to_bridge: entered promiscuous mode [ 348.936169][T15570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2575'. [ 349.106459][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 349.320401][T15595] netlink: 'syz.2.2581': attribute type 9 has an invalid length. [ 349.446496][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'. [ 349.528321][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 349.577145][T15570] wg1: left promiscuous mode [ 349.577169][T15570] wg1: left allmulticast mode [ 349.684722][T15570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.760499][T15570] veth0_macvtap: left allmulticast mode [ 349.814973][T15570] macvlan2: left promiscuous mode [ 349.814997][T15570] macvlan2: left allmulticast mode [ 349.828923][T15570] ip6tnl2: left promiscuous mode [ 349.829000][T15570] ip6tnl2: left allmulticast mode [ 349.915689][T15570] geneve2: left promiscuous mode [ 349.915706][T15570] geneve2: left allmulticast mode [ 349.936401][T15570] bond5: left promiscuous mode [ 349.936424][T15570] bond5: left allmulticast mode [ 349.937723][T15570] bond6: left promiscuous mode [ 349.937742][T15570] bond6: left allmulticast mode [ 350.063596][T15619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.071974][ T59] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.072083][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.072167][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 350.072316][ T59] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.072421][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.072494][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 350.072587][ T59] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.072669][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.072742][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 350.091941][ T59] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.091975][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.092005][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 350.478973][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2591'. [ 350.504456][T15635] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 350.506833][T15635] bond9 (unregistering): Released all slaves [ 350.758291][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 350.783493][T15655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2597'. [ 350.925958][T15661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.944119][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2600'. [ 351.553314][T15694] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 351.553732][T15694] gretap2: entered promiscuous mode [ 351.553752][T15694] gretap2: entered allmulticast mode [ 351.724768][T15701] netlink: 'syz.2.2611': attribute type 11 has an invalid length. [ 351.724793][T15701] netlink: 'syz.2.2611': attribute type 4 has an invalid length. [ 352.183267][T15736] syz_tun: entered allmulticast mode [ 352.399667][T15747] hsr_slave_0: left promiscuous mode [ 352.415361][T15747] hsr_slave_1: left promiscuous mode [ 352.564637][ T9726] hsr0 speed is unknown, defaulting to 1000 [ 352.564717][ T9726] syz1: Port: 1 Link DOWN [ 352.641143][T13698] smbdirect: ib_dev[syz1] removed [ 353.012604][T15773] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 353.038415][T15773] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 353.304078][T15790] tipc: Enabling of bearer rejected, failed to enable media [ 353.417507][T15793] netlink: 'syz.0.2636': attribute type 29 has an invalid length. [ 353.512745][T15779] ip_tables: iptables: counters copy to user failed while replacing table [ 353.614570][T15811] netlink: 'syz.0.2639': attribute type 16 has an invalid length. [ 355.196641][T15862] __nla_validate_parse: 10 callbacks suppressed [ 355.196664][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2650'. [ 355.254230][T15865] netlink: 'syz.4.2649': attribute type 3 has an invalid length. [ 355.254252][T15865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2649'. [ 355.378887][T15870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 355.610900][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 355.709559][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 355.851963][T15899] openvswitch: netlink: Multiple metadata blocks provided [ 356.537161][T15941] IPVS: Unknown mcast interface: vcan0 [ 356.555319][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2667'. [ 356.584359][T15943] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 356.867620][T15953] netlink: 'syz.3.2672': attribute type 10 has an invalid length. [ 357.027747][T15963] netlink: 'syz.4.2674': attribute type 1 has an invalid length. [ 357.046255][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2675'. [ 357.061012][T15964] Bluetooth: hci0: unsupported parameter 5134 [ 357.061035][T15964] Bluetooth: hci0: unsupported parameter 8192 [ 357.061071][T15964] Bluetooth: hci0: unsupported parameter 5134 [ 357.062199][T15964] Bluetooth: hci0: unsupported parameter 8192 [ 357.654836][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 358.061790][T16013] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2687'. [ 358.080966][T16010] trusted_key: syz.0.2687 sent an empty control message without MSG_MORE. [ 358.136858][T16016] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2689'. [ 358.437199][T16023] netlink: 'syz.1.2690': attribute type 1 has an invalid length. [ 358.648425][T16029] syzkaller1: entered promiscuous mode [ 358.648452][T16029] syzkaller1: entered allmulticast mode [ 359.059036][T16054] sit0: Caught tx_queue_len zero misconfig [ 359.153488][T16059] x_tables: duplicate underflow at hook 2 [ 359.728012][T16087] bond13: entered promiscuous mode [ 359.728037][T16087] bond13: entered allmulticast mode [ 359.804367][T16100] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 359.806835][T16098] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 359.806908][T16098] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 359.806961][T16098] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 360.581955][T16121] netlink: 'syz.1.2725': attribute type 2 has an invalid length. [ 360.602732][T16122] __nla_validate_parse: 7 callbacks suppressed [ 360.603144][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2724'. [ 360.830462][T16129] xt_hashlimit: size too large, truncated to 1048576 [ 360.871306][T16136] xt_hashlimit: size too large, truncated to 1048576 [ 360.970555][T16145] nftables ruleset with unbound set [ 361.357014][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 361.399775][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 361.555361][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 362.066966][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 362.109666][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2741'. [ 362.109832][T16203] ipip2: entered promiscuous mode [ 362.213631][T16210] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 362.668865][T16229] netlink: 211728 bytes leftover after parsing attributes in process `syz.4.2748'. [ 362.682041][T16229] netlink: 211728 bytes leftover after parsing attributes in process `syz.4.2748'. [ 362.782528][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 362.835904][T16235] bridge0: port 2(ipvlan4) entered blocking state [ 362.836122][T16235] bridge0: port 2(ipvlan4) entered disabled state [ 362.836272][T16235] ipvlan4: entered allmulticast mode [ 362.836288][T16235] bridge0: entered allmulticast mode [ 362.839093][T16235] ipvlan4: left allmulticast mode [ 362.839110][T16235] bridge0: left allmulticast mode [ 363.284250][T16251] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 363.284284][T16251] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿ [ 363.318412][T16257] siw: device registration error -23 [ 363.377831][T16258] netlink: 'syz.1.2758': attribute type 3 has an invalid length. [ 363.377855][T16258] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2758'. [ 363.561000][T16270] bridge3: entered promiscuous mode [ 363.561069][T16270] bridge3: entered allmulticast mode [ 363.667713][T16274] netlink: 'syz.3.2765': attribute type 3 has an invalid length. [ 363.757374][T16285] block nbd2: Unsupported socket: should be TCP or UNIX. [ 364.513571][T16322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.938922][T16332] 8021q: VLANs not supported on ip6_vti0 [ 364.939728][T16335] IPv6: NLM_F_REPLACE set, but no existing node found! [ 365.079836][ T4933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.101293][ T4933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.114324][ T4933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.129718][ T4933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.139567][ T4933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.253236][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.255213][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.259440][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.276074][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.301286][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.545511][T16353] tipc: Enabling of bearer rejected, failed to enable media [ 365.686637][T16359] __nla_validate_parse: 11 callbacks suppressed [ 365.686659][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 365.730366][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2791'. [ 365.842711][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.842752][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.902170][T16357] veth0_to_bond: entered promiscuous mode [ 365.917658][T16365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2792'. [ 365.917791][T16366] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2792'. [ 366.056767][T16368] bond9: entered promiscuous mode [ 366.056813][T16368] bond9: entered allmulticast mode [ 366.057891][T16368] 8021q: adding VLAN 0 to HW filter on device bond9 [ 366.216332][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.216372][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.238567][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 366.238642][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 366.369831][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.369872][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.405373][T16399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2800'. [ 366.875870][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.875912][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.993271][T16402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 366.994264][T13671] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.994504][T13671] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.030844][ T9726] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.078613][T16425] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 367.082622][ T9726] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.402269][ T5620] Bluetooth: hci5: command tx timeout [ 367.591871][T13671] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.685775][T16445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2810'. [ 367.811175][T13693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.817681][T13673] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.817794][T13673] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.881927][ T9726] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.912479][ T13] batadv2: left allmulticast mode [ 367.912552][ T13] batadv2: left promiscuous mode [ 367.914520][ T13] bridge0: port 4(batadv2) entered disabled state [ 367.978928][ T13] vlan3: left allmulticast mode [ 367.978953][ T13] geneve0: left allmulticast mode [ 368.009600][ T13] vlan3: left promiscuous mode [ 368.009625][ T13] geneve0: left promiscuous mode [ 368.010152][ T13] bridge0: port 3(vlan3) entered disabled state [ 368.044327][ T13] bridge_slave_1: left promiscuous mode [ 368.045400][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.067066][ T13] bridge_slave_0: left allmulticast mode [ 368.067094][ T13] bridge_slave_0: left promiscuous mode [ 368.070106][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.189434][ T13] pimreg: left allmulticast mode [ 368.189573][ T13] dvmrp8: left allmulticast mode [ 368.294124][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'. [ 368.807121][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 368.871718][ T13] bond1 (unregistering): (slave geneve3): Releasing active interface [ 368.938740][ T13] bond5 (unregistering): (slave bridge3): Releasing active interface [ 368.973825][ T13] bond0 (unregistering): Released all slaves [ 368.995164][ T13] bond1 (unregistering): Released all slaves [ 369.020160][ T13] bond2 (unregistering): Released all slaves [ 369.035571][ T13] bond3 (unregistering): Released all slaves [ 369.051671][ T13] bond4 (unregistering): Released all slaves [ 369.083779][ T13] bond5 (unregistering): Released all slaves [ 369.172155][T16486] 0ªî{X¹¦: renamed from gretap0 [ 369.202921][T16486] 0ªî{X¹¦: entered allmulticast mode [ 369.209483][T16486] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 369.275143][T16493] erspan0: entered promiscuous mode [ 369.276992][T16493] gretap0: entered promiscuous mode [ 369.277958][T16493] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 369.277980][T16493] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 369.337158][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 369.484718][ T5620] Bluetooth: hci5: command tx timeout [ 369.523309][ T13] tipc: Disabling bearer [ 369.523603][ T13] tipc: Disabling bearer [ 369.528510][ T13] tipc: Left network mode [ 369.650765][ T13] IPVS: stopping master sync thread 8594 ... [ 369.707525][T16508] bond10: entered promiscuous mode [ 369.707965][T16508] 8021q: adding VLAN 0 to HW filter on device bond10 [ 369.745245][T16513] 8021q: adding VLAN 0 to HW filter on device bond10 [ 369.745547][T16513] bond10: (slave sit2): The slave device specified does not support setting the MAC address [ 369.746842][T16513] bond10: (slave sit2): Error -95 calling set_mac_address [ 370.056109][T16534] netlink: 'syz.0.2829': attribute type 21 has an invalid length. [ 370.171950][T16530] batman_adv: batadv0: Adding interface: syzkaller0 [ 370.171969][T16530] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.172008][T16530] batman_adv: batadv0: Interface activated: syzkaller0 [ 370.470482][T13693] smc: removing ib device syz2 [ 370.583351][T16528] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 370.606694][T16528] batman_adv: batadv0: Removing interface: syzkaller0 [ 370.702489][T16551] h: entered promiscuous mode [ 370.702773][ T9739] ================================================================== [ 370.702788][ T9739] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 370.702821][ T9739] Read of size 1 at addr ffff88807b42ce09 by task kworker/1:16/9739 [ 370.702841][ T9739] [ 370.702857][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 370.702882][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.702897][ T9739] Workqueue: events smc_ib_port_event_work [ 370.702942][ T9739] Call Trace: [ 370.702955][ T9739] [ 370.702964][ T9739] dump_stack_lvl+0xe8/0x150 [ 370.702998][ T9739] print_address_description+0x55/0x1e0 [ 370.703028][ T9739] ? __ethtool_get_link_ksettings+0x230/0x250 [ 370.703056][ T9739] print_report+0x58/0x70 [ 370.703083][ T9739] kasan_report+0x117/0x150 [ 370.703112][ T9739] ? __ethtool_get_link_ksettings+0x230/0x250 [ 370.703141][ T9739] __ethtool_get_link_ksettings+0x230/0x250 [ 370.703168][ T9739] __ethtool_get_link_ksettings+0x11f/0x250 [ 370.703195][ T9739] ib_get_eth_speed+0x180/0x7f0 [ 370.703230][ T9739] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 370.703267][ T9739] ? do_raw_spin_unlock+0xf5/0x200 [ 370.703300][ T9739] ? rxe_query_port+0x6b/0x3d0 [ 370.703335][ T9739] rxe_query_port+0x93/0x3d0 [ 370.703370][ T9739] ib_query_port+0x16e/0x830 [ 370.703406][ T9739] smc_ib_port_event_work+0x147/0x920 [ 370.703444][ T9739] ? rcu_is_watching+0x16/0xb0 [ 370.703471][ T9739] ? process_scheduled_works+0x97a/0x1630 [ 370.703501][ T9739] process_scheduled_works+0xc3d/0x1630 [ 370.703548][ T9739] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.703581][ T9739] ? assign_work+0x3cf/0x5d0 [ 370.703612][ T9739] worker_thread+0xa47/0xfb0 [ 370.703657][ T9739] ? __kthread_parkme+0x71/0x1f0 [ 370.703694][ T9739] kthread+0x38b/0x480 [ 370.703715][ T9739] ? __pfx_worker_thread+0x10/0x10 [ 370.703743][ T9739] ? __pfx_kthread+0x10/0x10 [ 370.703764][ T9739] ret_from_fork+0x514/0xb70 [ 370.703786][ T9739] ? __pfx_ret_from_fork+0x10/0x10 [ 370.703822][ T9739] ? __switch_to+0xc89/0x1420 [ 370.703854][ T9739] ? __pfx_kthread+0x10/0x10 [ 370.703876][ T9739] ret_from_fork_asm+0x1a/0x30 [ 370.703918][ T9739] [ 370.703926][ T9739] [ 370.703931][ T9739] Allocated by task 5623: [ 370.703943][ T9739] kasan_save_track+0x3e/0x80 [ 370.703963][ T9739] __kasan_kmalloc+0x93/0xb0 [ 370.703985][ T9739] __kvmalloc_node_noprof+0x50f/0x820 [ 370.704007][ T9739] alloc_netdev_mqs+0xa9/0x12a0 [ 370.704037][ T9739] rtnl_create_link+0x321/0xd70 [ 370.704068][ T9739] rtnl_newlink_create+0x258/0x7b0 [ 370.704093][ T9739] rtnl_newlink+0x166d/0x1c30 [ 370.704115][ T9739] rtnetlink_rcv_msg+0x802/0xc00 [ 370.704137][ T9739] netlink_rcv_skb+0x226/0x4a0 [ 370.704164][ T9739] netlink_unicast+0x7bd/0x940 [ 370.704189][ T9739] netlink_sendmsg+0x813/0xb40 [ 370.704218][ T9739] sock_sendmsg_nosec+0x13a/0x180 [ 370.704249][ T9739] __sys_sendto+0x408/0x5a0 [ 370.704270][ T9739] __x64_sys_sendto+0xde/0x100 [ 370.704292][ T9739] do_syscall_64+0x166/0x520 [ 370.704313][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.704335][ T9739] [ 370.704340][ T9739] Freed by task 16543: [ 370.704350][ T9739] kasan_save_track+0x3e/0x80 [ 370.704369][ T9739] kasan_save_free_info+0x40/0x50 [ 370.704397][ T9739] __kasan_slab_free+0x5c/0x80 [ 370.704418][ T9739] kfree+0x1c5/0x650 [ 370.704446][ T9739] device_release+0xc4/0x1f0 [ 370.704541][ T9739] kobject_put+0x222/0x550 [ 370.704567][ T9739] netdev_run_todo+0xeee/0x1060 [ 370.704595][ T9739] rtnl_dellink+0x68f/0x810 [ 370.704616][ T9739] rtnetlink_rcv_msg+0x802/0xc00 [ 370.704645][ T9739] netlink_rcv_skb+0x226/0x4a0 [ 370.704672][ T9739] netlink_unicast+0x7bd/0x940 [ 370.704697][ T9739] netlink_sendmsg+0x813/0xb40 [ 370.704726][ T9739] sock_sendmsg_nosec+0x13a/0x180 [ 370.704757][ T9739] ____sys_sendmsg+0x54e/0x850 [ 370.704782][ T9739] ___sys_sendmsg+0x2a5/0x360 [ 370.704806][ T9739] __x64_sys_sendmsg+0x1b1/0x290 [ 370.704832][ T9739] do_syscall_64+0x166/0x520 [ 370.704853][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.704874][ T9739] [ 370.704880][ T9739] The buggy address belongs to the object at ffff88807b42c000 [ 370.704880][ T9739] which belongs to the cache kmalloc-cg-4k of size 4096 [ 370.704899][ T9739] The buggy address is located 3593 bytes inside of [ 370.704899][ T9739] freed 4096-byte region [ffff88807b42c000, ffff88807b42d000) [ 370.704922][ T9739] [ 370.704927][ T9739] The buggy address belongs to the physical page: [ 370.704948][ T9739] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b428 [ 370.704968][ T9739] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 370.704986][ T9739] memcg:ffff88807a28a001 [ 370.704995][ T9739] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 370.705024][ T9739] page_type: f5(slab) [ 370.705045][ T9739] raw: 00fff00000000040 ffff88801b04b500 dead000000000100 dead000000000122 [ 370.705065][ T9739] raw: 0000000000000000 0000000200040004 00000000f5000000 ffff88807a28a001 [ 370.705085][ T9739] head: 00fff00000000040 ffff88801b04b500 dead000000000100 dead000000000122 [ 370.705104][ T9739] head: 0000000000000000 0000000200040004 00000000f5000000 ffff88807a28a001 [ 370.705124][ T9739] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 370.705143][ T9739] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 370.705155][ T9739] page dumped because: kasan: bad access detected [ 370.705171][ T9739] page_owner tracks the page as allocated [ 370.705180][ T9739] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5628, tgid 5628 (syz-executor), ts 91331793314 [ 370.705215][ T9739] post_alloc_hook+0x1f9/0x250 [ 370.705246][ T9739] get_page_from_freelist+0x2209/0x2280 [ 370.705267][ T9739] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.705288][ T9739] allocate_slab+0x7d/0x620 [ 370.705313][ T9739] refill_objects+0x2d5/0x350 [ 370.705339][ T9739] __pcs_replace_empty_main+0x2c8/0x6c0 [ 370.705364][ T9739] __kmalloc_noprof+0x47b/0x720 [ 370.705380][ T9739] __register_sysctl_table+0x6f/0x1370 [ 370.705401][ T9739] __addrconf_sysctl_register+0x31c/0x4b0 [ 370.705424][ T9739] addrconf_sysctl_register+0x168/0x1c0 [ 370.705448][ T9739] ipv6_add_dev+0xd26/0x13a0 [ 370.705478][ T9739] addrconf_notify+0x771/0x1050 [ 370.705500][ T9739] notifier_call_chain+0x1a5/0x3d0 [ 370.705530][ T9739] register_netdevice+0x18a4/0x1eb0 [ 370.705557][ T9739] macvlan_common_newlink+0x12e5/0x1a50 [ 370.705634][ T9739] rtnl_newlink_create+0x305/0x7b0 [ 370.705660][ T9739] page last free pid 5616 tgid 5616 ts 91306169733 stack trace: [ 370.705676][ T9739] __free_frozen_pages+0xc93/0xd90 [ 370.705706][ T9739] __slab_free+0x274/0x2c0 [ 370.705724][ T9739] qlist_free_all+0x99/0x100 [ 370.705743][ T9739] kasan_quarantine_reduce+0x148/0x160 [ 370.705763][ T9739] __kasan_slab_alloc+0x22/0x80 [ 370.705785][ T9739] __kvmalloc_node_noprof+0x49f/0x820 [ 370.705806][ T9739] alloc_netdev_mqs+0x8fb/0x12a0 [ 370.705835][ T9739] rtnl_create_link+0x321/0xd70 [ 370.705866][ T9739] veth_newlink+0x277/0xdd0 [ 370.705925][ T9739] rtnl_newlink_create+0x305/0x7b0 [ 370.705951][ T9739] rtnl_newlink+0x166d/0x1c30 [ 370.705974][ T9739] rtnetlink_rcv_msg+0x802/0xc00 [ 370.705997][ T9739] netlink_rcv_skb+0x226/0x4a0 [ 370.706025][ T9739] netlink_unicast+0x7bd/0x940 [ 370.706050][ T9739] netlink_sendmsg+0x813/0xb40 [ 370.706079][ T9739] sock_sendmsg_nosec+0x13a/0x180 [ 370.706112][ T9739] [ 370.706117][ T9739] Memory state around the buggy address: [ 370.706128][ T9739] ffff88807b42cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 370.706143][ T9739] ffff88807b42cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 370.706158][ T9739] >ffff88807b42ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 370.706169][ T9739] ^ [ 370.706180][ T9739] ffff88807b42ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 370.706195][ T9739] ffff88807b42cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 370.706207][ T9739] ================================================================== [ 370.706498][ T9739] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 371.493788][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 371.503277][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.513349][ T9739] Workqueue: events smc_ib_port_event_work [ 371.519196][ T9739] Call Trace: [ 371.522497][ T9739] [ 371.525452][ T9739] vpanic+0x56d/0xa60 [ 371.529467][ T9739] ? __pfx_vpanic+0x10/0x10 [ 371.534022][ T9739] panic+0xc5/0xd0 [ 371.537773][ T9739] ? __pfx_panic+0x10/0x10 [ 371.542212][ T9739] ? preempt_schedule_thunk+0x16/0x40 [ 371.547620][ T9739] ? __ethtool_get_link_ksettings+0x230/0x250 [ 371.553722][ T9739] ? preempt_schedule_thunk+0x16/0x40 [ 371.559131][ T9739] ? __ethtool_get_link_ksettings+0x230/0x250 [ 371.565230][ T9739] check_panic_on_warn+0x89/0xb0 [ 371.570204][ T9739] ? __ethtool_get_link_ksettings+0x230/0x250 [ 371.576300][ T9739] end_report+0x73/0x170 [ 371.580577][ T9739] ? __ethtool_get_link_ksettings+0x230/0x250 [ 371.586672][ T9739] kasan_report+0x128/0x150 [ 371.591199][ T9739] ? __ethtool_get_link_ksettings+0x230/0x250 [ 371.597293][ T9739] __ethtool_get_link_ksettings+0x230/0x250 [ 371.603210][ T9739] __ethtool_get_link_ksettings+0x11f/0x250 [ 371.609126][ T9739] ib_get_eth_speed+0x180/0x7f0 [ 371.614004][ T9739] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 371.619408][ T9739] ? do_raw_spin_unlock+0xf5/0x200 [ 371.624550][ T9739] ? rxe_query_port+0x6b/0x3d0 [ 371.629349][ T9739] rxe_query_port+0x93/0x3d0 [ 371.634236][ T9739] ib_query_port+0x16e/0x830 [ 371.638859][ T9739] smc_ib_port_event_work+0x147/0x920 [ 371.644290][ T9739] ? rcu_is_watching+0x16/0xb0 [ 371.649077][ T9739] ? process_scheduled_works+0x97a/0x1630 [ 371.654850][ T9739] process_scheduled_works+0xc3d/0x1630 [ 371.660448][ T9739] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.666465][ T9739] ? assign_work+0x3cf/0x5d0 [ 371.671085][ T9739] worker_thread+0xa47/0xfb0 [ 371.675724][ T9739] ? __kthread_parkme+0x71/0x1f0 [ 371.680695][ T9739] kthread+0x38b/0x480 [ 371.684780][ T9739] ? __pfx_worker_thread+0x10/0x10 [ 371.689919][ T9739] ? __pfx_kthread+0x10/0x10 [ 371.694525][ T9739] ret_from_fork+0x514/0xb70 [ 371.699133][ T9739] ? __pfx_ret_from_fork+0x10/0x10 [ 371.704266][ T9739] ? __switch_to+0xc89/0x1420 [ 371.708966][ T9739] ? __pfx_kthread+0x10/0x10 [ 371.713582][ T9739] ret_from_fork_asm+0x1a/0x30 [ 371.718390][ T9739] [ 371.722099][ T9739] Kernel Offset: disabled [ 371.726447][ T9739] Rebooting in 86400 seconds..