last executing test programs: 2m21.976310311s ago: executing program 4 (id=2544): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r1, 0x29, 0x33, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x48, r4, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf}}]}]}, 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003cc0)=""/4096, 0x94}, {0x0}], 0x2}, 0x3}], 0x1, 0x40000000, 0x0) 2m20.980727556s ago: executing program 4 (id=2552): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r0, 0x40049409, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7338}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m20.760913861s ago: executing program 4 (id=2557): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) 2m20.59804251s ago: executing program 4 (id=2560): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xffff}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) write$cgroup_subtree(r0, 0x0, 0x4d) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000080)={0x80000000000000c, &(0x7f0000000280)=[{}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) 2m20.372006178s ago: executing program 4 (id=2562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r3, 0x0, &(0x7f0000000100)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r4, &(0x7f0000000700)="b068aa", 0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r7, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000001600)=""/4103, 0x1007}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x4004845}, 0x0) 2m20.147802187s ago: executing program 4 (id=2565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e310000002400320040"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) getsockopt(r1, 0x400, 0x0, &(0x7f0000000380)=""/170, &(0x7f0000000440)=0xaa) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r2, 0x1, {0x1, 0xf0, 0x1}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xe, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 2m5.068862455s ago: executing program 32 (id=2565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e310000002400320040"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) getsockopt(r1, 0x400, 0x0, &(0x7f0000000380)=""/170, &(0x7f0000000440)=0xaa) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r2, 0x1, {0x1, 0xf0, 0x1}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xe, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 3.5125095s ago: executing program 1 (id=3899): r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x427a7000) write$cgroup_devices(r3, 0x0, 0x6) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0xd8}, 0x14) sendmsg$nl_route_sched_retired(r6, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=@delqdisc={0x11c, 0x25, 0x318, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x10, 0x6}, {0x9, 0x4}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x35a2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2f}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe40c}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000020}, 0x4000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="0200000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055490100000000009500000000000000bf91"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendto$inet6(r0, 0x0, 0x0, 0x10018, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @loopback, 0x346e5ae5}, 0x1c) 3.272662724s ago: executing program 2 (id=3904): sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x2, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}]}, 0x84}, 0x1, 0x0, 0x0, 0x90}, 0x40001) 3.192549504s ago: executing program 2 (id=3906): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x7}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x700f, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.032638206s ago: executing program 2 (id=3910): r0 = socket$igmp6(0xa, 0x3, 0x2) socket(0x2a, 0x80802, 0x9) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000140), 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x8, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}], {0x14, 0x10}}, 0x98}}, 0x0) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/cgroup\x00') ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f0000000200)={0xdb56, 0x2, 0xfffffffe, 0xb, 0x7, 0x10, 0x7fff, 0x6b}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r9], 0xc4}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="48ebff00100001002cbd70f0ca00000000000000", @ANYRES32=r6, @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.868516143s ago: executing program 0 (id=3912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x12, 0x29, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000180), &(0x7f0000000100)=r6}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000040)=@id, 0x10) shutdown(r9, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000000)="f3d0bbe4b09ba7f1e8800cdb6199f25bf36e7d052f0ea3340591c8dcea48db259275840afe31966e4cb38387c235e5edd7630bc548f71be422a518b74e889d402e45deaaa5b99ff8dd3599e01e", 0x4d, 0xc0, &(0x7f0000000100)={0x11, 0x10, r10, 0x1, 0x8, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@newtaction={0x150, 0x30, 0x48b, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_skbedit={0xe4, 0x1a, 0x0, 0x0, {{0xc}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfaa, 0x100, 0x2, 0x3, 0x951c}}, @TCA_SKBEDIT_PARMS={0xfffffffffffffd76, 0x2, {0xb, 0x9, 0x6, 0x55dd, 0xff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x8, 0xffffffffffffffff, 0x3, 0x40}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x6, 0x2, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x25, 0x6, "70ccad783344287ad266435a98a3bdfe3817f13ac4b80db51759d0655b2453545b"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x54, 0x3ffe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x4}, @broadcast, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x150}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRESHEX=r0], 0x4c}, 0x1, 0x0, 0x0, 0x48841}, 0x4040) 2.483768368s ago: executing program 3 (id=3914): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0xffffffffffffff18) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x294, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x5, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x0, 0x2, [0x6, 0x6]}}, {{0x0, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3}}, {0x0, 0x2, [0x5fd]}}, {{0x0, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x0, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0x2}}, @TCA_RATE={0x0, 0x5, {0x10, 0x2}}]}, 0x2c4}}, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380), 0x3) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x800, 0x6, 0x40, 0x4b, 0x7, 0x8, 0x2, 0x2, 0x3, [0xe8, 0x101, 0x6, 0x1, 0x4, 0x800, 0xa193, 0x5], [0x5]}}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES8=r5, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x44091}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) sendto$x25(r10, &(0x7f0000000300)="80f5c5133123cdd3236c3f", 0xb, 0x8010, &(0x7f0000000340), 0x12) 2.431848355s ago: executing program 0 (id=3915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) unshare(0x22020400) r2 = socket(0x1d, 0x2, 0x6) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd1f, 0x7, 0x6, 0x1, 0x0, 0x9, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) (async) r7 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async, rerun: 64) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) (rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) 2.410604199s ago: executing program 5 (id=3916): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x28, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x5c}, {0x6}]}, 0x10) 2.276153754s ago: executing program 1 (id=3917): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}, 0x1c) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84"], 0x84}}, 0x0) (rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/173, 0xad, 0x1, &(0x7f00000003c0)=""/64, 0x40}, &(0x7f0000000440)=0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000002c0), 0x4) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.163993382s ago: executing program 5 (id=3918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_NEW_STATION(r3, 0x0, 0x40000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x80, 0x1e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3ef}]}, 0x24}, 0x1, 0x0, 0x0, 0x480760e207e11f8b}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r10, 0x25, 0x0, @void}, 0x10) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000780)='hybla', 0x5) shutdown(r11, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket(0x10, 0x2, 0x0) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r14, 0x1}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r12, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r14, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x94976d2b6fadff48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 2.094081232s ago: executing program 3 (id=3919): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180)='%](@{-!\x00', 0x40182, &(0x7f00000001c0)={@align=0xb4a, {0xfff8, 0x9, 0x401, 0x8}}, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x35}) ioctl(r0, 0x3, &(0x7f00000002c0)="ecfd43ee6306935b3ce6fc1179732718fbb4773ef4b376e743749ec6db97cda30a6dfd36939cad13c9f96b7db4feae24861de468916e67170b5831cf35eec0576dab21e25aabb5ed0c6e3d57abf9f6a3c72ec4a539c7e4a280153d840983d2a053742d77cf0c7eec5833779c41f43134e07d5803") unshare(0x38030900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1, 0x2, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000000c0)="33a8787a22f11fdb4e", &(0x7f0000000100)=@buf="563b8600c80c399bb407c89b3543f3210900ccbd9db3485fb68fd0fae1b6449dc29b626d33fc8fcdf8", 0x4}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f0000000400)=0xc) write$cgroup_pid(r0, &(0x7f0000000440)=r5, 0x12) 2.064242124s ago: executing program 0 (id=3920): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$rds(0x15, 0x5, 0x0) close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000280001002abd70000060c49da9bab80c", @ANYRES32=0x1, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) syz_emit_ethernet(0x246, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021002103a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d00001100fe800000000000000000000000000001800000000000000000000000000000008700051968000000003a000000000000050200000106000000000000009da17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa37105020000008c65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e00338b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe000100015908f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1cea2b483cc5fa05f"], 0x0) close(0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x5a0}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xd4, 0x0, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) r7 = socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000180)=0x2d4a, 0x4) sendto$inet(r7, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x31, "2acf5af43a484692e1ba99a0e07bc816585e45335dffb5d9d2c65c11edb065b0b7f33889d5aa27348d25074952b7a22f74"}, &(0x7f00000000c0)=0x39) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000100)={0x9, 0xcdd2, 0x200, 0x6, 0x8, 0x4, 0x1, 0xffffffff, r8}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x7, @local, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="000425bd7000ffdb00050014000700000008021725", @ANYRES32, @ANYBLOB="050005000000000008001900000000000500070002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044890}, 0x4000010) 1.847767519s ago: executing program 3 (id=3921): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x0, 0x96a7, 0x3, 0xd0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10100, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000100)={r1}) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x33, 0x0, &(0x7f0000000080)) 1.847470389s ago: executing program 5 (id=3922): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001800010027bd7000fbdbdf2580200006fc01c80b0003000006001d004e20000008001000070000000600dafc64e11a014dbf0880feed0c847f39c7105012bf68e222bbc8d47c4576d051d0ec12ea6883db16f5c6026db807efc2748a1cf19bb684af42fb"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) writev(r1, &(0x7f00000008c0), 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 1.737378334s ago: executing program 1 (id=3923): unshare(0x4000400) (async) unshare(0x4000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) close(r1) socket$inet(0x10, 0x3, 0x0) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r9, 0x1, 0xd8}, 0x14) (async) sendto$packet(r10, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r9, 0x1, 0xd8}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYRES64=r12], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@RTM_GETMDB={0x18, 0x56, 0x20, 0x70bd26, 0x25dfdbfb, {0x7, r9}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@dellinkprop={0x58, 0x6d, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x280a, 0x18200}, [@IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'ipvlan0\x00'}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x40008c0) 1.683600056s ago: executing program 2 (id=3924): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x21b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000f00)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000002340)=ANY=[@ANYRES64=r7], 0x9) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r9, 0x0, 0x2}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r10, 0x40106183, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x84) 1.599830839s ago: executing program 0 (id=3925): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="7334ca", 0x3}], 0x1}}, {{&(0x7f0000000840)=@phonet={0x23, 0xfd, 0xc0, 0x80}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)="2705d5", 0x3}], 0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x12a0}}], 0x2, 0x4000041) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) 1.429888267s ago: executing program 5 (id=3926): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000007c0)={0xffffffffffff0000, 0x4, 0x3, 0x402, 0x4, 0x0, [{0x3ff, 0x6, 0x80000000}, {0x6, 0x7, 0x7498, '\x00', 0x8}, {0x8, 0x8, 0xfffffffffffffe01, '\x00', 0x2381}, {0x6, 0xd2, 0x4, '\x00', 0x4}]}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}}, 0x7, 0xfffa}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000500)={r6, @in={{0x2, 0x4e24, @multicast2}}, 0x6, 0xfffe, 0x80000001, 0x40, 0x40, 0x2, 0x2}, 0x9c) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f0000000200)={&(0x7f00000006c0)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x3e, 0x3, 0x0, 0x0, "740e9fd02c168cc5c63016bff8bb72f80a42971e1eb003bf509f11a692cca5c24438477668a77276dad73055267706ff6a1ec319671d0322b601cd974bcfd2e6"}, 0x48}, 0x1, 0x0, 0x0, 0x20040844}, 0x20000041) r8 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xe}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.390459585s ago: executing program 1 (id=3927): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030b0000000000000000130000002c000980080002000000000008000200000000102c0001000000000008000100000000007afd010000000000409cd9986470701a1b7733b47e5499d4f81370dddbf9737961861bed71d686f9aa67c53a0af368739b583a113378f88998b1599a2af03bb2f5cd1c430d5788474c77c93818deb6d5c0f2cec1a2a9ebf25b13d9"], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=r2, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRES64=r2], 0x48) unshare(0x2040400) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0002000000000000b7080000000000007b8af8c5ff00000000bc82000000000000a6020000f8ffffff0008000000cd0300000000000085000000330000009500"/77], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000080), 0x4) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000004100070127bd7000fefdffff047c000008004280040008000c00018006000600800a00001800028014000c00200100000000000000000000000000000b989019"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0xc0d4) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0xaf) r10 = accept$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000680)=0x1c) bind$inet6(r10, &(0x7f00000006c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="940a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) getpeername$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f0000000500)=0x1c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000005c0)={@ll={0x11, 0x8, r11, 0x1, 0x9, 0x6, @random="9a61d08d260b"}, {&(0x7f00000003c0)=""/202, 0xca}, &(0x7f00000004c0), 0x10}, 0xa0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.051893259s ago: executing program 0 (id=3928): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000076c6650ee2e5c5b3fd1c32c64145000000000000000000000071100600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0xe}, 0x94) 1.040523257s ago: executing program 5 (id=3929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000003c0)={'wlan0\x00', 0x500}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@sco, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000002c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xd}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e6174002c000000060a010400000000000000000400000008000b4000000000040004800900010073797a3000000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000000}]}, 0x2c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = socket$inet(0xa, 0x801, 0x84) connect$inet(r13, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r13, 0x8) 1.004231203s ago: executing program 1 (id=3930): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x64, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004d230056006500008006907864010100ac1414aa44147e81ac14140f00000006ac1414aa0000000900014408e990fffffff500000000000000000000000008000000000400004e2200004e2000"/100], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10000008ebc, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)="b4", 0x1) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x31, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x81, 0x0, 0x1, 0x20000006, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000009e2d368b7c7f339170000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10ff0000f500e9060000000000010700000a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x4048010) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(r9, r11, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000008c0)={r2, &(0x7f00000007c0)='\xaa\xaa\xaa\xaa\xaa', 0x400, &(0x7f0000000800)={@align=0x1e1, {0x6, 0x1, 0x0, 0x7f}}, 0x80, &(0x7f0000000840), &(0x7f0000000880)=0x7}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x14, 0x4, 0xff, 0x72, 0x4000, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xd, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x5, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x2, 0xe, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f0000000980)=[r4, r8, r4, r11, r4, r3, r3, r12, r13], &(0x7f00000009c0)=[{0x4, 0x2, 0xf, 0xa}], 0x10, 0x2}, 0x94) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r14, 0x84, 0x1, &(0x7f0000000180)="0100203200"/20, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 820.070466ms ago: executing program 3 (id=3931): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3ff0000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x200}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6011010000641100fe8000000000000000000000000000bbfe8000640000000000000000000000aa4e220e22"], 0x0) 819.691078ms ago: executing program 5 (id=3932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="820d45e2da124a02040003000000000a00000000000000fc0100001a000000000000000000000000000000000000000200010000000000000000000000000005000500001200000a00000000000000fc0100"/112], 0x70}, 0x1, 0x7}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18120000d2d62d86a6158c44ae6e9f89e6cefbe6b42363f44464de1f", @ANYRES32, @ANYBLOB="0000000000000000b7030000180000006703000020000000bfa400000000000007040000f8ffffffb705"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) unshare(0x22020600) write$nci(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 742.848046ms ago: executing program 0 (id=3933): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2440, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00000000000000000000000000007a52eb8a90ee35490ae666cfd69424dd3cdf5150b839b0cab52f2f84bff3eeacf2bd3a44941df3066cbe5166bf2a3b92f080f496e243ba0cd7862c11d35b3f644c658ad9bd36e04999757613a891405666b4d75f6ea630018a1d5ff8b8fe4c"], 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES16=r6, @ANYBLOB="0c0000000000000000003900000008001300", @ANYRES32=r7, @ANYBLOB="04005a80"], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r9 = socket$tipc(0x1e, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000f40)="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", 0x1000, 0x20000840, &(0x7f0000001f40)={0x2, 0x4e20, @multicast2}, 0x10) bind$tipc(r9, &(0x7f00000004c0)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0xffffffff}}, 0x10) r10 = socket$inet(0x2, 0xf, 0x80004) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r10, 0x0, 0x0, 0x371daf00999c2bb4, &(0x7f0000000840)={0x2, 0x4e22, @empty}, 0x10) r11 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r11, 0x6a, 0x4, 0x20000000, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYRESOCT], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x3a, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x56, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @multicast1}, {0x0, @broadcast}, 0x2, {0x2, 0x4e20, @remote}, 'veth1_to_bond\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r13, &(0x7f0000000100)='!-:[\x00', 0x400000, &(0x7f0000000140)={@align=0x7fff, {0x0, 0x6, 0x10000, 0x3}}, 0x80000000, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000240)=0xfffff878}) connect$bt_rfcomm(r14, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x57}, 0xa) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 732.641248ms ago: executing program 3 (id=3934): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x5e, 0x2e, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x3, 0xf5, "33cbeeec2ebe32161c97de86236bbc1855655c53073f3fd46e8c8dd7d463ae06066aac83d26e396d176475d89aee17418096362c767a76f9e709d464421d3d41c00c0771383c6ab49fcfd56b74cc7151a7e7cb907f0ac5abb62ef5bba2ee35f270bcfd0b749fbcc5a7d77c984a3bc9d511a660450bd82794159fd4ddb3993a5d18f4d5dddff1fd99d3b3d50fd20d881387fb0c7cbc44367a60006d82ed576667a3fcb70fc4870086d62561561701bc0c20c6568e3960eb297ee57df576862eae85281c12fe11dd35d0ed5e30f31c083171f01ff9a6afe9676c9388f63426d36511c16497f725d57e921ffa335e676745d450347c21"}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x58, {0x1, 0x14, 0x1d, 0xc, [0xffff, 0x2, 0x100000000, 0x4ad8dcca, 0x5723, 0x7, 0x1, 0x9, 0x7, 0x7fff]}}, @ra={0x5, 0x2, 0x26ff}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x180) 676.46762ms ago: executing program 2 (id=3935): recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x2}, 0x2a45}], 0x1, 0x40000041, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4880) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000041000701feffffff0000000001010000000042802c00018010000400cab1893a20b8d2a93521800a18001c8014f20200fe80000000000000000000000000003204000280"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES64=r10], 0xb8}}, 0x40014) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000"], 0xb8}}, 0x4000) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r5, @ANYRES32=r8, @ANYBLOB="00030000057a0300"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000000a0040000000000000000000000000004f9f6a51039fe4a5a2c01522fa0b01c071e9a3301792426a511d599a8130f346f353a84ed13042870f882f12bc97000c934b26ff182f5c757ed39b98ad99d877aaea5b68e876d56476d32d40ec1da19782a3bee1306cc6fcc1c74a30e1457e5beb83f86d34a501db50840166436e3fdad13a8dbc8d7c2d590fcddea7ce8edd3bf087286474558d26ae6eabdbbc39a7f185bbfcbb87c39c0d5d452145373dfdbc787914175ecd8f5a30e5d9b0d4330cf8c132a1dc41220a53eef4aaf71abd455e94b659d6", @ANYRES32=r8, @ANYBLOB="0500000014000100fc020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc2) 601.783078ms ago: executing program 3 (id=3936): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) read(r2, &(0x7f0000000140)=""/88, 0x58) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) 594.700184ms ago: executing program 2 (id=3937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000fedb372506000000cffb0300", @ANYRES32=r4, @ANYBLOB="08000500040000000500530000000000"], 0x2c}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001340)={{r2, &(0x7f0000000000)='nl80211\x00', 0x56b102, &(0x7f0000000040)={@align=0xff, {0x1, 0x6, 0x8, 0xfffffffffffffff9}}, 0x8614, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1865}, 0x1, &(0x7f0000001300)=[{0x1, 0x5cc7b4b2, &(0x7f0000000200)=':\x00', &(0x7f0000000300)="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", 0x1000, 0x2}]}) sendmsg$nl_netfilter(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB="7c0000000e0401022abd7000fbdbdf250500000a090031004028264000000000938d096f78ea698239483659fe5e60fcede015675d8d1fe9ab1f2a71cfe28ef462a21269b69b35fd0eaac59f751afb88e57242ac13c2d78f9102c8cb08bc738970f2943d9eb90fba0bcff82ef2529b0adf65c6717d03a0bfa1003fa9f176f75c448f4912af000000"], 0x7c}}, 0xc000) 0s ago: executing program 1 (id=3938): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000040)='veth0_vlan\x00', 0x10100, &(0x7f0000000180)={@align=0xcc, {0x8, 0x5, 0x40, 0x8}}, 0x100, &(0x7f00000001c0), &(0x7f0000000200)=0x5}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'wg1\x00', 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = epoll_create1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x20) kernel console output (not intermixed with test programs): sing attributes in process `syz.2.2029'. [ 246.399823][T12882] netlink: 'syz.2.2029': attribute type 2 has an invalid length. [ 246.443026][T12878] syzkaller0: entered promiscuous mode [ 246.448736][T12878] syzkaller0: entered allmulticast mode [ 248.396858][T12922] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2041'. [ 248.419040][T12922] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2041'. [ 248.447608][T12922] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2041'. [ 248.574506][T12933] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 248.604468][T12934] netlink: 'syz.2.2045': attribute type 1 has an invalid length. [ 248.667753][T12936] netlink: 'syz.3.2046': attribute type 2 has an invalid length. [ 248.704597][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2046'. [ 248.826011][T12950] bridge0: port 4(30ªî{X¹¦) entered blocking state [ 248.855632][T12950] bridge0: port 4(30ªî{X¹¦) entered disabled state [ 248.915222][T12950] 0ªî{X¹¦: entered promiscuous mode [ 248.937842][T12950] bridge0: port 4(30ªî{X¹¦) entered blocking state [ 248.946152][T12950] bridge0: port 4(30ªî{X¹¦) entered forwarding state [ 248.985158][T12958] gretap0: entered promiscuous mode [ 249.001876][T12958] vlan2: entered promiscuous mode [ 249.513541][T12984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.590133][T12990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2062'. [ 249.705864][T12994] netlink: 'syz.1.2063': attribute type 1 has an invalid length. [ 249.870824][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 249.881147][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 250.097456][T13018] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 250.123569][T13018] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 250.387518][T13034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2076'. [ 250.452031][T13036] syzkaller0: entered promiscuous mode [ 250.468104][T13036] syzkaller0: entered allmulticast mode [ 250.901733][T13061] syzkaller0: left promiscuous mode [ 250.911905][T13061] syzkaller0: left allmulticast mode [ 251.097477][T13075] __nla_validate_parse: 3 callbacks suppressed [ 251.097496][T13075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2087'. [ 251.157050][T13080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2089'. [ 251.439794][T13093] netlink: 'syz.1.2092': attribute type 2 has an invalid length. [ 251.481645][T13094] netlink: 'syz.1.2092': attribute type 2 has an invalid length. [ 251.635425][T13098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2095'. [ 251.696392][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 251.714922][T13098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2095'. [ 251.936269][T13109] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2098'. [ 251.957507][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 251.967438][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 251.983946][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 252.028382][T13116] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2100'. [ 252.167713][T13115] hsr_slave_1 (unregistering): left promiscuous mode [ 252.504567][T13138] sctp: [Deprecated]: syz.2.2108 (pid 13138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.504567][T13138] Use struct sctp_sack_info instead [ 252.843840][T13162] ip_tables: iptables: counters copy to user failed while replacing table [ 254.009124][T13221] tc_dump_action: action bad kind [ 254.650131][T13250] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.991692][T13270] netlink: 'syz.0.2144': attribute type 21 has an invalid length. [ 255.283401][T13281] veth7: entered allmulticast mode [ 255.300973][T13281] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.342129][T13283] No such timeout policy "s" [ 255.348328][T13283] netlink: Failed to associated timeout policy 's' [ 255.379963][T13281] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.450232][T13281] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.487177][T13285] veth0_macvtap: left promiscuous mode [ 255.546402][T13281] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.792104][T13289] netlink: 'syz.1.2152': attribute type 1 has an invalid length. [ 255.807690][T13289] netlink: 'syz.1.2152': attribute type 2 has an invalid length. [ 255.825376][T13297] x_tables: duplicate underflow at hook 1 [ 255.833348][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.840100][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.119909][ T1151] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.143740][ T1151] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.239668][ T6966] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.276967][ T6966] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.291445][T13321] __nla_validate_parse: 18 callbacks suppressed [ 256.291468][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 256.416473][T13326] veth1_to_bond: entered allmulticast mode [ 256.428552][T13326] veth1_to_bond: entered promiscuous mode [ 256.445041][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 256.475793][T13326] veth1_to_bond (unregistering): left allmulticast mode [ 256.483997][T13326] veth1_to_bond (unregistering): left promiscuous mode [ 256.525228][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2163'. [ 256.558741][T13326] bond0: (slave bond_slave_1): Releasing backup interface [ 256.568506][T13327] block nbd0: Unsupported socket: should be TCP or UNIX. [ 256.602723][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 256.617239][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 256.669099][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 256.682232][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 257.170444][T13359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2174'. [ 257.232825][T13363] SET target dimension over the limit! [ 258.094095][T13413] Cannot find set identified by id 4 to match [ 258.362849][T13433] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2195'. [ 258.406072][T13432] netlink: 'syz.1.2193': attribute type 3 has an invalid length. [ 258.561510][T13442] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 258.588172][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2201'. [ 258.625240][T13447] syz_tun: left allmulticast mode [ 258.642151][T13447] syz_tun: left promiscuous mode [ 258.664983][T13447] bridge0: port 1(syz_tun) entered disabled state [ 258.757486][T13460] ip_tables: iptables: counters copy to user failed while replacing table [ 258.869276][T13463] openvswitch: netlink: IPv4 tunnel dst address is zero [ 258.885941][T13463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.275943][T13488] tap0: tun_chr_ioctl cmd 1074025676 [ 259.281510][T13488] tap0: owner set to 0 [ 259.769678][T13511] ipt_REJECT: ECHOREPLY no longer supported. [ 259.923412][T13519] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 259.931897][T13519] netlink: 'syz.1.2224': attribute type 2 has an invalid length. [ 260.410380][T13539] netlink: 'syz.2.2232': attribute type 10 has an invalid length. [ 260.437246][T13539] team0: entered allmulticast mode [ 260.452851][T13539] team_slave_0: entered allmulticast mode [ 260.467262][T13539] team_slave_1: entered allmulticast mode [ 260.500760][T13539] bridge0: port 5(team0) entered blocking state [ 260.517630][T13539] bridge0: port 5(team0) entered disabled state [ 260.534953][T13542] sctp: [Deprecated]: syz.3.2231 (pid 13542) Use of int in maxseg socket option. [ 260.534953][T13542] Use struct sctp_assoc_value instead [ 260.564580][T13539] team0: entered promiscuous mode [ 260.570319][T13539] team_slave_0: entered promiscuous mode [ 260.576416][T13539] team_slave_1: entered promiscuous mode [ 260.596097][T13539] bridge0: port 5(team0) entered blocking state [ 260.602608][T13539] bridge0: port 5(team0) entered forwarding state [ 260.628088][T13542] lo: entered promiscuous mode [ 260.650300][T13542] tunl0: entered promiscuous mode [ 260.725923][T13542] gre0: entered promiscuous mode [ 260.822562][T13542] erspan0: entered promiscuous mode [ 260.884441][T13542] ip_vti0: entered promiscuous mode [ 260.922486][T13563] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 260.982338][T13563] syzkaller0: entered promiscuous mode [ 260.987891][T13563] syzkaller0: entered allmulticast mode [ 261.915678][T13619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.192053][T13628] IPVS: Error connecting to the multicast addr [ 262.248113][T13632] __nla_validate_parse: 13 callbacks suppressed [ 262.248134][T13632] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2258'. [ 262.306472][T13634] netlink: 'syz.1.2258': attribute type 1 has an invalid length. [ 262.334068][T13634] netlink: 'syz.1.2258': attribute type 4 has an invalid length. [ 262.343735][T13634] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2258'. [ 262.356865][T13634] netlink: 'syz.1.2258': attribute type 1 has an invalid length. [ 262.366460][T13634] netlink: 'syz.1.2258': attribute type 4 has an invalid length. [ 262.375645][T13634] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2258'. [ 262.389205][T13632] vlan3 (unregistering): left allmulticast mode [ 262.396435][T13632] dummy0 (unregistering): left allmulticast mode [ 262.403524][T13632] vlan3 (unregistering): left promiscuous mode [ 262.410226][T13632] dummy0 (unregistering): left promiscuous mode [ 262.418394][T13637] netlink: 420 bytes leftover after parsing attributes in process `syz.2.2260'. [ 262.433878][T13632] bridge0: port 1(vlan3) entered disabled state [ 262.571949][T13645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.087726][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079f70c00: rx timeout, send abort [ 263.096644][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079f70c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.274381][T13681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2274'. [ 263.313540][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2272'. [ 263.437294][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2276'. [ 263.493897][T13688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2276'. [ 263.505400][T13692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'. [ 263.517504][T13688] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2276'. [ 263.748521][T13698] sctp: [Deprecated]: syz.2.2279 (pid 13698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.748521][T13698] Use struct sctp_sack_info instead [ 264.661012][T13739] netlink: 'syz.3.2293': attribute type 2 has an invalid length. [ 264.695318][T13739] syzkaller0: entered promiscuous mode [ 264.713434][T13739] syzkaller0: entered allmulticast mode [ 264.743503][T13739] tipc: Enabled bearer , priority 0 [ 264.784994][T13737] tipc: Resetting bearer [ 264.846859][T13751] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 264.893332][T13737] tipc: Disabling bearer [ 265.127514][T13766] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 265.221286][T13763] 8021q: adding VLAN 0 to HW filter on device bond9 [ 265.701470][T13798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.766655][T13802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.829056][T13798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.385705][T13867] IPVS: Unknown mcast interface: dvmrp0 [ 267.391865][T13873] netlink: 'syz.2.2333': attribute type 12 has an invalid length. [ 267.447320][T13873] bond7: option primary_reselect: invalid value (255) [ 267.457277][T13876] __nla_validate_parse: 11 callbacks suppressed [ 267.457296][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2332'. [ 267.457530][T13873] bond7 (unregistering): Released all slaves [ 267.508930][T13870] sctp: [Deprecated]: syz.0.2332 (pid 13870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.508930][T13870] Use struct sctp_sack_info instead [ 267.735271][T13886] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2337'. [ 267.755561][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 267.776036][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 267.876091][T13892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.988992][T13892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.041251][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 268.420585][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 268.491575][T13906] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 269.239231][T13960] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2357'. [ 269.270777][T13960] nbd: illegal input index 65508 [ 269.472982][T13975] syz_tun: entered allmulticast mode [ 269.556063][T13975] syz_tun: left allmulticast mode [ 269.603771][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 269.751554][T13982] syzkaller0: entered promiscuous mode [ 269.790053][T13982] syzkaller0: entered allmulticast mode [ 269.860967][T13987] team0 (unregistering): Port device gtp3 removed [ 270.123456][T13995] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2365'. [ 270.226060][T14011] netlink: 'syz.1.2370': attribute type 62 has an invalid length. [ 270.571381][T14029] openvswitch: netlink: Multiple metadata blocks provided [ 271.095118][T14041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2375'. [ 272.548541][T14055] openvswitch: netlink: Multiple metadata blocks provided [ 272.587282][T14057] __nla_validate_parse: 1 callbacks suppressed [ 272.587303][T14057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2381'. [ 272.743544][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 272.794835][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2385'. [ 272.812957][T14070] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 273.018499][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 273.072845][T14087] netlink: 'syz.4.2392': attribute type 39 has an invalid length. [ 273.100462][T14089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2390'. [ 273.434483][T14103] sctp: [Deprecated]: syz.4.2396 (pid 14103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.434483][T14103] Use struct sctp_sack_info instead [ 273.679209][T14115] tipc: New replicast peer: 172.20.20.187 [ 273.739140][T14115] tipc: Enabled bearer , priority 10 [ 273.874543][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2401'. [ 273.923198][T14131] Cannot find add_set index 4 as target [ 274.560486][T14171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.836689][T14183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2415'. [ 274.849579][ T5832] tipc: Node number set to 2035774871 [ 274.866119][T14183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.873486][T14183] IPv6: NLM_F_CREATE should be set when creating new route [ 274.894688][T14183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2415'. [ 274.936451][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 275.013583][T14191] netlink: 'syz.2.2418': attribute type 33 has an invalid length. [ 275.059186][T14190] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 275.068518][T14190] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 275.240264][T14202] sctp: [Deprecated]: syz.4.2421 (pid 14202) Use of int in max_burst socket option. [ 275.240264][T14202] Use struct sctp_assoc_value instead [ 275.267377][T14203] Cannot find set identified by id 65534 to match [ 275.280570][T14204] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2419'. [ 275.290387][T14203] batman_adv: batadv0: Interface deactivated: dummy0 [ 275.526511][T14212] veth1_macvtap: left promiscuous mode [ 275.544111][T14212] macsec0: entered promiscuous mode [ 275.693957][ T1151] nci: nci_rx_work: unknown MT 0x1 [ 275.784528][ T5818] IPVS: starting estimator thread 0... [ 275.850578][T14237] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 275.869910][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 275.889841][T14231] IPVS: using max 27 ests per chain, 64800 per kthread [ 276.226328][T14257] netlink: 'syz.1.2436': attribute type 1 has an invalid length. [ 276.308186][T14212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.328139][T14230] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 276.340920][T14230] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 276.578129][T14275] netlink: 'syz.2.2441': attribute type 11 has an invalid length. [ 276.626966][T14276] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 277.367870][T14330] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.634565][T14349] __nla_validate_parse: 6 callbacks suppressed [ 277.634584][T14349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2457'. [ 277.720521][T14349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2457'. [ 277.868509][T14359] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 278.128627][T14379] netlink: 'syz.2.2468': attribute type 10 has an invalid length. [ 278.197901][T14379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.221261][T14384] netlink: 'syz.4.2469': attribute type 1 has an invalid length. [ 278.241240][T14379] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 278.257535][T14384] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2469'. [ 278.281239][T14384] netlink: 'syz.4.2469': attribute type 1 has an invalid length. [ 278.300131][T14384] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.2469'. [ 278.337539][T14394] netlink: 516 bytes leftover after parsing attributes in process `syz.4.2469'. [ 278.723602][T14425] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2480'. [ 278.736209][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 278.799681][T14428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2481'. [ 278.818393][T14428] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2481'. [ 278.828783][T14428] netlink: 'syz.3.2481': attribute type 5 has an invalid length. [ 278.837879][T14428] netlink: 'syz.3.2481': attribute type 6 has an invalid length. [ 278.846132][T14428] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2481'. [ 279.168505][T14451] netlink: 'syz.1.2487': attribute type 34 has an invalid length. [ 279.222161][T14454] netlink: 'syz.1.2487': attribute type 29 has an invalid length. [ 279.816533][T14483] syzkaller0: entered promiscuous mode [ 279.832148][T14483] syzkaller0: entered allmulticast mode [ 280.598147][T14536] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.611345][T14536] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:512) [ 280.738466][T14536] wg0 speed is unknown, defaulting to 1000 [ 280.773240][T14536] wg0 speed is unknown, defaulting to 1000 [ 280.797668][T14536] wg0 speed is unknown, defaulting to 1000 [ 280.809329][T14536] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 280.827303][T14536] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 280.845172][T14536] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 280.861465][T14536] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 280.881662][T14536] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 280.969628][T14536] wg0 speed is unknown, defaulting to 1000 [ 280.974412][T14549] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 281.007718][T14536] wg0 speed is unknown, defaulting to 1000 [ 281.048746][T14536] wg0 speed is unknown, defaulting to 1000 [ 281.072679][T14536] wg0 speed is unknown, defaulting to 1000 [ 281.102708][T14555] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 281.106059][T14536] wg0 speed is unknown, defaulting to 1000 [ 281.128899][T14554] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 281.538722][T14571] netlink: 'syz.0.2525': attribute type 2 has an invalid length. [ 282.045976][T14600] FAULT_INJECTION: forcing a failure. [ 282.045976][T14600] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 282.070120][T14600] CPU: 1 UID: 0 PID: 14600 Comm: syz.2.2533 Not tainted syzkaller #0 PREEMPT(full) [ 282.070166][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.070198][T14600] Call Trace: [ 282.070207][T14600] [ 282.070217][T14600] dump_stack_lvl+0xe8/0x150 [ 282.070255][T14600] should_fail_ex+0x40c/0x560 [ 282.070290][T14600] _copy_to_user+0x31/0xb0 [ 282.070328][T14600] simple_read_from_buffer+0xe1/0x170 [ 282.070364][T14600] proc_fail_nth_read+0x1bb/0x230 [ 282.070401][T14600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.070436][T14600] ? rw_verify_area+0x24a/0x4c0 [ 282.070471][T14600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.070504][T14600] vfs_read+0x213/0xa80 [ 282.070542][T14600] ? __pfx___mutex_lock+0x10/0x10 [ 282.070570][T14600] ? __pfx_vfs_read+0x10/0x10 [ 282.070606][T14600] ? __fget_files+0x2a/0x420 [ 282.070641][T14600] ? __fget_files+0x3a2/0x420 [ 282.070669][T14600] ? __fget_files+0x2a/0x420 [ 282.070709][T14600] ksys_read+0x150/0x270 [ 282.070745][T14600] ? __pfx_ksys_read+0x10/0x10 [ 282.070790][T14600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.070816][T14600] do_syscall_64+0x174/0x580 [ 282.070840][T14600] ? trace_irq_disable+0x3b/0x140 [ 282.070890][T14600] ? clear_bhb_loop+0x70/0xc0 [ 282.070922][T14600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.070946][T14600] RIP: 0033:0x7f3c3b35e90e [ 282.070967][T14600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 282.070986][T14600] RSP: 002b:00007f3c3c1a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.071011][T14600] RAX: ffffffffffffffda RBX: 00007f3c3c1a16c0 RCX: 00007f3c3b35e90e [ 282.071029][T14600] RDX: 000000000000000f RSI: 00007f3c3c1a10a0 RDI: 0000000000000003 [ 282.071042][T14600] RBP: 00007f3c3c1a1090 R08: 0000000000000000 R09: 0000000000000000 [ 282.071057][T14600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.071070][T14600] R13: 00007f3c3b626038 R14: 00007f3c3b625fa0 R15: 00007ffda39a3e88 [ 282.071108][T14600] [ 282.735281][T14633] xt_hashlimit: size too large, truncated to 1048576 [ 282.790941][T14640] __nla_validate_parse: 9 callbacks suppressed [ 282.790991][T14640] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2541'. [ 282.948583][T14646] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 283.101304][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2547'. [ 283.944810][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'. [ 283.980844][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'. [ 284.168490][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2558'. [ 284.196635][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2558'. [ 284.238236][T14689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2558'. [ 284.243051][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2558'. [ 284.498419][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2562'. [ 284.650874][T14709] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2565'. [ 284.751192][T14714] x_tables: unsorted underflow at hook 4 [ 284.960630][T14729] validate_nla: 4 callbacks suppressed [ 284.960650][T14729] netlink: 'syz.1.2570': attribute type 10 has an invalid length. [ 285.397256][T14749] vxcan1: entered allmulticast mode [ 286.134403][T14786] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.399765][T14791] IPVS: Scheduler module ip_vs_sip not found [ 286.874232][T14809] netlink: 'syz.1.2593': attribute type 21 has an invalid length. [ 286.894518][T14809] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.052002][T14816] Bluetooth: MGMT ver 1.23 [ 287.857777][T14856] __nla_validate_parse: 6 callbacks suppressed [ 287.857798][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 287.891647][T14856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2608'. [ 288.131908][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2606'. [ 288.229107][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 288.244716][T14881] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2614'. [ 288.271439][T14881] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2614'. [ 288.308929][T14871] ip_tables: iptables: counters copy to user failed while replacing table [ 288.403667][T14886] tipc: Enabling of bearer rejected, failed to enable media [ 288.913771][T14913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2624'. [ 288.923325][T14913] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 289.085714][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2626'. [ 289.527643][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'. [ 289.549320][T14938] macsec1: entered promiscuous mode [ 289.555522][T14938] bridge0: entered promiscuous mode [ 289.563236][T14938] macsec1: entered allmulticast mode [ 289.568692][T14938] bridge0: entered allmulticast mode [ 289.575868][T14938] bridge0: port 3(macsec1) entered blocking state [ 289.584642][T14938] bridge0: port 3(macsec1) entered disabled state [ 289.604874][T14938] bridge0: left allmulticast mode [ 289.617261][T14938] bridge0: left promiscuous mode [ 289.719589][T14943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2633'. [ 289.817387][T14947] netlink: 'syz.2.2634': attribute type 83 has an invalid length. [ 289.840624][T14949] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 289.982528][T14958] sctp: [Deprecated]: syz.2.2637 (pid 14958) Use of int in maxseg socket option. [ 289.982528][T14958] Use struct sctp_assoc_value instead [ 290.421686][T14980] netlink: 'syz.2.2644': attribute type 9 has an invalid length. [ 290.594627][T14986] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.662765][T14991] netlink: 'syz.0.2649': attribute type 11 has an invalid length. [ 290.855879][T15002] syzkaller0: entered promiscuous mode [ 290.863776][T15002] syzkaller0: entered allmulticast mode [ 291.712602][T15047] openvswitch: netlink: Message has 4 unknown bytes. [ 291.745805][ T5624] block nbd0: Receive control failed (result -32) [ 292.002678][T15065] netlink: 'syz.2.2676': attribute type 4 has an invalid length. [ 292.586234][T15094] netlink: 'syz.0.2685': attribute type 1 has an invalid length. [ 292.635969][T15094] bond13: entered promiscuous mode [ 292.642206][T15094] 8021q: adding VLAN 0 to HW filter on device bond13 [ 292.695471][T15094] 8021q: adding VLAN 0 to HW filter on device bond13 [ 292.735845][T15101] sctp: [Deprecated]: syz.3.2686 (pid 15101) Use of int in max_burst socket option. [ 292.735845][T15101] Use struct sctp_assoc_value instead [ 292.747667][T15094] bond13: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 292.762408][T15094] bond13: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 292.779299][T15094] bond13: (slave ip6gre1): making interface the new active one [ 292.787538][T15094] ip6gre1: entered promiscuous mode [ 292.797700][T15094] bond13: (slave ip6gre1): Enslaving as an active interface with an up link [ 293.007686][T15107] __nla_validate_parse: 5 callbacks suppressed [ 293.007707][T15107] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2688'. [ 293.036311][T15107] ip_tables: iptables: counters copy to user failed while replacing table [ 293.067547][T15113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.142568][T15122] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2691'. [ 293.172136][T15113] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 293.320143][T15131] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 293.533677][T15147] openvswitch: netlink: Duplicate or invalid key (type 0). [ 293.665594][T15153] syzkaller0: entered allmulticast mode [ 293.755056][T15158] netlink: 'syz.3.2703': attribute type 2 has an invalid length. [ 293.959408][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2705'. [ 294.094981][T15175] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2708'. [ 294.103985][T15172] sctp: [Deprecated]: syz.1.2707 (pid 15172) Use of int in max_burst socket option deprecated. [ 294.103985][T15172] Use struct sctp_assoc_value instead [ 294.152275][T15176] openvswitch: netlink: Unknown key attributes 1 [ 294.508482][T15191] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2712'. [ 294.905578][T15204] netlink: 'syz.1.2717': attribute type 39 has an invalid length. [ 295.014841][T15208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2719'. [ 295.465826][T15227] netlink: 'syz.1.2725': attribute type 21 has an invalid length. [ 295.857372][T15244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2732'. [ 295.877573][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2732'. [ 296.036835][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2735'. [ 296.139692][T15257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2736'. [ 296.562588][T15281] netlink: 'syz.2.2743': attribute type 1 has an invalid length. [ 296.581080][T15284] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.784489][T15293] ip_tables: iptables: counters copy to user failed while replacing table [ 297.011766][T15308] xt_hashlimit: size too large, truncated to 1048576 [ 297.045104][ T30] audit: type=1804 audit(1787019208.374:12): pid=15306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2751" name="/newroot/561/cgroup.controllers" dev="tmpfs" ino=2875 res=1 errno=0 [ 297.087201][T15310] veth1_to_bond: entered allmulticast mode [ 297.096790][ T30] audit: type=1800 audit(1787019208.374:13): pid=15306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2751" name="cgroup.controllers" dev="tmpfs" ino=2875 res=0 errno=0 [ 297.125290][T15311] veth1_to_bond: entered promiscuous mode [ 297.379738][T15311] veth1_to_bond: left promiscuous mode [ 297.401389][T15311] veth1_to_bond: left allmulticast mode [ 297.688876][T15350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.899232][T15362] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.327290][T15380] __nla_validate_parse: 4 callbacks suppressed [ 298.327311][T15380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2773'. [ 298.397807][T15384] netlink: 'syz.0.2774': attribute type 49 has an invalid length. [ 298.531883][T15384] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 298.547554][T15384] ip6gretap0: entered promiscuous mode [ 298.554722][T15384] ip6gretap0: entered allmulticast mode [ 298.600806][T15393] syzkaller0: entered promiscuous mode [ 298.612618][T15393] syzkaller0: entered allmulticast mode [ 299.275070][T15429] netlink: 'syz.0.2787': attribute type 1 has an invalid length. [ 299.309719][T15429] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2787'. [ 299.883422][T15450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2792'. [ 300.099153][T15457] IPVS: set_ctl: invalid protocol: 0 172.20.20.54:20003 [ 300.176289][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.195244][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.203918][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.213132][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.223007][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.328326][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.337379][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.349872][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.361813][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.374672][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.781238][T15489] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 300.820840][T15489] netlink: 'syz.0.2801': attribute type 2 has an invalid length. [ 300.869988][T15490] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 300.881650][T15490] netlink: 'syz.0.2801': attribute type 2 has an invalid length. [ 301.208290][T15510] netlink: 'syz.0.2806': attribute type 10 has an invalid length. [ 301.226564][T15510] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 301.439061][T15518] macsec0: left promiscuous mode [ 301.456513][T15518] macsec0: entered allmulticast mode [ 301.488075][T15458] wg0 speed is unknown, defaulting to 1000 [ 301.596266][T15523] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 301.608718][T15523] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 301.947785][T15538] netlink: 'syz.0.2815': attribute type 6 has an invalid length. [ 302.143047][T15547] syzkaller1: entered promiscuous mode [ 302.148624][T15547] syzkaller1: entered allmulticast mode [ 302.171270][T15547] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 302.185113][T15547] syzkaller1: Linktype set failed because interface is up [ 302.317974][T15555] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2818'. [ 302.417240][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2818'. [ 302.470587][ T50] Bluetooth: hci5: command tx timeout [ 302.569981][T15564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2820'. [ 303.368151][ T5276] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.558107][T15458] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.586857][T15458] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.605652][T15458] bridge_slave_0: entered allmulticast mode [ 303.614586][T15458] bridge_slave_0: entered promiscuous mode [ 303.628882][T15596] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2825'. [ 303.640173][T15596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.671360][T15458] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.679119][T15458] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.696320][T15458] bridge_slave_1: entered allmulticast mode [ 303.720866][T15458] bridge_slave_1: entered promiscuous mode [ 303.805708][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2826'. [ 303.924642][T15458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.985290][T15458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.086679][T15458] team0: Port device team_slave_0 added [ 304.126839][T15458] team0: Port device team_slave_1 added [ 304.293939][T15458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.334978][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.412698][T15458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.434246][T15458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.461657][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.497988][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'. [ 304.535355][T15458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.547831][T15629] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2832'. [ 304.561946][ T50] Bluetooth: hci5: command tx timeout [ 304.578655][T15629] tipc: Invalid UDP bearer configuration [ 304.578718][T15629] tipc: Enabling of bearer rejected, failed to enable media [ 304.817168][T15636] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2374497901/2374497903 [ 304.830291][T15636] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2374497901/2374497903 [ 304.862812][T15458] hsr_slave_0: entered promiscuous mode [ 304.899000][T15458] hsr_slave_1: entered promiscuous mode [ 304.916264][T15458] debugfs: 'hsr0' already exists in 'hsr' [ 304.924831][T15458] Cannot create hsr debugfs directory [ 305.013580][T15655] netlink: 336 bytes leftover after parsing attributes in process `syz.2.2837'. [ 305.210023][T15663] xt_l2tp: v2 doesn't support IP mode [ 305.225304][T15663] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2840'. [ 305.630020][T15677] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2844'. [ 305.634769][T15679] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2844'. [ 305.689026][T15682] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 305.755568][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'. [ 305.789303][T15682] bond11: entered promiscuous mode [ 305.795219][T15682] 8021q: adding VLAN 0 to HW filter on device bond11 [ 305.902536][T15685] bond11: (slave bridge4): making interface the new active one [ 305.912605][T15685] bridge4: entered promiscuous mode [ 305.934217][T15685] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 306.036189][T15687] bond14: entered promiscuous mode [ 306.042607][T15687] 8021q: adding VLAN 0 to HW filter on device bond14 [ 306.087268][T15458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.116234][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.126883][T15458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.139610][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.194475][T15696] 8021q: adding VLAN 0 to HW filter on device bond14 [ 306.212360][T15696] bond14: (slave sit2): The slave device specified does not support setting the MAC address [ 306.245396][T15696] bond14: (slave sit2): Error -95 calling set_mac_address [ 306.300608][T15458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.313024][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.323031][T15458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.333276][T15711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2853'. [ 306.346010][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.413502][T15719] netlink: 'syz.1.2852': attribute type 13 has an invalid length. [ 306.629861][ T50] Bluetooth: hci5: command tx timeout [ 306.689274][T15720] xfrm0: Caught tx_queue_len zero misconfig [ 306.745099][T15729] syzkaller0: entered promiscuous mode [ 306.771992][T15729] syzkaller0: entered allmulticast mode [ 306.842988][T15742] netlink: 'syz.3.2858': attribute type 2 has an invalid length. [ 306.957308][T15458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.018393][T15458] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.055608][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.062899][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.121995][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.129242][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.233357][T15755] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.257616][T15756] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 307.602451][T15766] netlink: 'syz.0.2867': attribute type 9 has an invalid length. [ 307.815260][T15777] openvswitch: netlink: Message has 4 unknown bytes. [ 308.062961][T15793] openvswitch: netlink: Flow key attr not present in new flow. [ 308.389586][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.635946][T15821] __nla_validate_parse: 8 callbacks suppressed [ 308.635966][T15821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2880'. [ 308.711347][ T50] Bluetooth: hci5: command tx timeout [ 308.753771][T15827] netlink: 'syz.2.2881': attribute type 2 has an invalid length. [ 308.795764][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'. [ 308.807467][T15827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2881'. [ 308.827589][T15827] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 308.841078][T15458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.380171][T15861] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 309.821523][T15868] veth5: entered allmulticast mode [ 309.836719][T15458] veth0_vlan: entered promiscuous mode [ 309.887844][T15458] veth1_vlan: entered promiscuous mode [ 309.986786][T15458] veth0_macvtap: entered promiscuous mode [ 310.022843][T15879] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2892'. [ 310.035486][T15458] veth1_macvtap: entered promiscuous mode [ 310.162050][T15458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.193122][T15883] Unsupported ieee802154 address type: 0 [ 310.204011][T15458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.250611][ T6964] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.277331][ T6964] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.329940][ T6961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.496363][T10810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.663013][T15916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2899'. [ 310.748164][T15914] xt_hashlimit: size too large, truncated to 1048576 [ 310.781678][T10810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.815925][T10810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.004873][T10810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.043273][T10810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.084638][T15930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2905'. [ 311.130835][T15929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2905'. [ 311.399131][T15941] openvswitch: netlink: Duplicate or invalid key (type 0). [ 311.606447][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.618590][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.627332][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.642032][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.651020][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.690616][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2793'. [ 311.700789][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2793'. [ 311.886873][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 311.980249][T15961] veth11: entered allmulticast mode [ 312.066034][T15966] syzkaller0: entered promiscuous mode [ 312.092087][T15966] syzkaller0: entered allmulticast mode [ 312.254277][T15975] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 312.254277][T15975] Please contact the netfilter-devel mailing list or update your nftables rules. [ 312.317796][T15975] hsr0: entered allmulticast mode [ 312.344054][T15975] hsr_slave_0: entered allmulticast mode [ 312.367855][T15975] hsr_slave_1: entered allmulticast mode [ 312.679910][T15979] netlink: 'syz.5.2919': attribute type 1 has an invalid length. [ 312.932038][T15951] wg0 speed is unknown, defaulting to 1000 [ 313.377876][T16010] netlink: 'syz.1.2926': attribute type 13 has an invalid length. [ 313.424342][T16010] gretap0: refused to change device tx_queue_len [ 313.431715][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 313.458571][T16010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.488455][T16014] netlink: 'syz.5.2927': attribute type 1 has an invalid length. [ 313.658841][T16022] __nla_validate_parse: 3 callbacks suppressed [ 313.658860][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'. [ 313.688837][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2930'. [ 313.698196][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2930'. [ 313.751421][ T50] Bluetooth: hci6: command tx timeout [ 313.787631][T16022] bond15: option xmit_hash_policy: invalid value (64) [ 313.814235][T16022] bond15 (unregistering): Released all slaves [ 313.895722][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 314.050717][T16038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2933'. [ 314.253099][T15951] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.274384][T15951] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.302182][T15951] bridge_slave_0: entered allmulticast mode [ 314.327848][T15951] bridge_slave_0: entered promiscuous mode [ 314.351185][T15951] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.370473][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.386351][T15951] bridge_slave_1: entered allmulticast mode [ 314.410282][T15951] bridge_slave_1: entered promiscuous mode [ 314.544581][T15951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.567682][T15951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.647453][T16070] syzkaller0: entered promiscuous mode [ 314.666959][T16070] syzkaller0: entered allmulticast mode [ 314.799174][T15951] team0: Port device team_slave_0 added [ 314.924899][T15951] team0: Port device team_slave_1 added [ 314.986511][T16083] netlink: 'syz.5.2944': attribute type 6 has an invalid length. [ 315.072113][T15951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.085609][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.113243][T15951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.144174][T15951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.164405][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.192011][T15951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.342778][T15951] hsr_slave_0: entered promiscuous mode [ 315.361809][T15951] hsr_slave_1: entered promiscuous mode [ 315.368512][T15951] debugfs: 'hsr0' already exists in 'hsr' [ 315.375102][T15951] Cannot create hsr debugfs directory [ 315.683504][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 315.698205][T16122] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 315.710596][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 315.717986][T16122] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 315.726059][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 315.832564][ T50] Bluetooth: hci6: command tx timeout [ 315.852232][T16128] tipc: Failed to obtain node identity [ 315.858004][T16128] tipc: Enabling of bearer rejected, failed to enable media [ 316.097557][T15951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.130684][T15951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.223519][T16141] xt_hashlimit: size too large, truncated to 1048576 [ 316.232964][T16139] netlink: 'syz.5.2962': attribute type 2 has an invalid length. [ 316.246673][T16141] xt_hashlimit: max too large, truncated to 1048576 [ 316.261237][T16141] xt_hashlimit: overflow, rate too high: 0 [ 316.536801][T15951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.568008][T15951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.781322][T15951] bond0: (slave netdevsim1): Releasing backup interface [ 316.796231][T15951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.808955][T15951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.834820][T16166] syzkaller1: entered promiscuous mode [ 316.840590][T16166] syzkaller1: entered allmulticast mode [ 316.952353][T16174] netlink: 'syz.0.2973': attribute type 3 has an invalid length. [ 316.961152][T16174] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2973'. [ 316.974920][T16176] netlink: 'syz.0.2973': attribute type 3 has an invalid length. [ 316.983461][T16176] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2973'. [ 317.275864][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.284215][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.291722][ T1308] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 317.378721][T16195] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2976'. [ 317.464140][T16197] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.665077][ T5739] IPVS: starting estimator thread 0... [ 317.779609][T16209] IPVS: using max 27 ests per chain, 64800 per kthread [ 317.790660][T16212] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2981'. [ 317.815464][T15951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.852264][T15951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.871595][T15951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.907045][T15951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.920348][ T50] Bluetooth: hci6: command tx timeout [ 317.942312][T15951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.974776][T15951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.985088][T15951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.003906][T15951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.274792][T15951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.302547][T15951] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.325678][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.332992][T10810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.355272][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.362585][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.469587][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 318.755646][T16256] netlink: 'syz.1.2990': attribute type 47 has an invalid length. [ 318.772228][T16256] __nla_validate_parse: 1 callbacks suppressed [ 318.772246][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'. [ 319.006282][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 319.567124][T16295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2996'. [ 319.598366][T16295] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2996'. [ 319.619887][T16295] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2996'. [ 319.644510][T15951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.661464][T16295] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2996'. [ 319.740247][T16301] openvswitch: netlink: Multiple metadata blocks provided [ 319.752243][T15951] veth0_vlan: entered promiscuous mode [ 319.773089][T15951] veth1_vlan: entered promiscuous mode [ 319.823464][T15951] veth0_macvtap: entered promiscuous mode [ 319.845597][T15951] veth1_macvtap: entered promiscuous mode [ 319.871425][T15951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.887746][T15951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.962581][T10810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.991153][ T50] Bluetooth: hci6: command tx timeout [ 320.001774][T10810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.035283][T10810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.044872][T10810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.234762][T16279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.371918][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.411837][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.513016][ T6961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.533902][ T6961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.539015][T16321] netlink: 'syz.3.3004': attribute type 1 has an invalid length. [ 322.607343][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3006'. [ 322.706963][T16335] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 322.740825][T16334] openvswitch: netlink: Duplicate or invalid key (type 0). [ 322.764228][T16334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3007'. [ 323.191506][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.206082][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.216532][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.233010][T16356] netlink: 'syz.2.3012': attribute type 23 has an invalid length. [ 323.241708][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.256915][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.355948][T16364] ip_tables: iptables: counters copy to user failed while replacing table [ 323.509824][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 323.512319][ T30] audit: type=1800 audit(1787019234.834:14): pid=16371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3016" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3201 res=0 errno=0 [ 323.646232][T16374] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 324.123318][T16393] netlink: 'syz.2.3020': attribute type 6 has an invalid length. [ 324.529320][T16360] wg0 speed is unknown, defaulting to 1000 [ 324.636497][T16410] netlink: 'syz.3.3025': attribute type 1 has an invalid length. [ 325.349773][ T5624] Bluetooth: hci2: command tx timeout [ 327.429758][ T5624] Bluetooth: hci2: command tx timeout [ 327.748621][T16444] SET target dimension over the limit! [ 327.802069][T16444] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3032'. [ 327.843510][T16452] netlink: 'syz.3.3034': attribute type 11 has an invalid length. [ 328.173474][T16360] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.208466][T16360] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.238381][T16360] bridge_slave_0: entered allmulticast mode [ 328.257428][T16360] bridge_slave_0: entered promiscuous mode [ 328.272995][T16360] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.280494][T16360] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.287874][T16360] bridge_slave_1: entered allmulticast mode [ 328.297699][T16360] bridge_slave_1: entered promiscuous mode [ 328.341226][T16476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3041'. [ 328.414143][T16360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.416387][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'. [ 328.444373][T16360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.527470][T16484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3040'. [ 328.540870][T16476] hsr_slave_0: left promiscuous mode [ 328.551223][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 328.563254][T16484] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3040'. [ 328.574861][T16476] hsr_slave_1: left promiscuous mode [ 328.687570][T16491] netlink: 'syz.5.3045': attribute type 12 has an invalid length. [ 328.719406][T16491] netlink: 'syz.5.3045': attribute type 29 has an invalid length. [ 328.731284][T16491] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3045'. [ 328.741427][T16491] netlink: 'syz.5.3045': attribute type 3 has an invalid length. [ 328.750627][T16491] netlink: 'syz.5.3045': attribute type 2 has an invalid length. [ 328.758523][T16491] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3045'. [ 328.785876][T16360] team0: Port device team_slave_0 added [ 328.821340][T16360] team0: Port device team_slave_1 added [ 328.984813][T16360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.992182][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.018515][T16360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.043883][T16505] macvtap1: entered promiscuous mode [ 329.049395][T16505] macvtap1: entered allmulticast mode [ 329.055112][T16505] veth1_vlan: entered allmulticast mode [ 329.064042][T16360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.072152][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.110631][T16360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.291812][T16514] syzkaller0: entered promiscuous mode [ 329.298040][T16514] syzkaller0: entered allmulticast mode [ 329.314532][T16360] hsr_slave_0: entered promiscuous mode [ 329.332180][T16360] hsr_slave_1: entered promiscuous mode [ 329.527199][ T5624] Bluetooth: hci2: command tx timeout [ 330.005011][T16360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.021688][T16360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.021730][T16542] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3060'. [ 330.044781][T16360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 330.073410][T16540] bond0: Error: Cannot enslave bond to itself. [ 330.188185][T16548] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3063'. [ 330.228500][T16550] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3063'. [ 330.267192][T16360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.284269][T16360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.310960][T16360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 330.429170][T16560] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20002 [ 330.646766][T16360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.662251][T16360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.677528][T16360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 330.783487][T16570] bond15: option fail_over_mac: invalid value (16) [ 330.794513][T16570] bond15 (unregistering): Released all slaves [ 330.908635][T16360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.921416][T16360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.948706][T16360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 331.526226][T16360] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.564657][T16360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.593024][ T5624] Bluetooth: hci2: command tx timeout [ 331.608700][T16360] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.648134][T16360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.667743][T16360] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.697553][T16360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.706759][T16360] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.723096][T16360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.781787][T16617] 0: reclassify loop, rule prio 0, protocol 03 [ 332.134990][T16360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.206063][T16642] tipc: Enabled bearer , priority 10 [ 332.254306][T16360] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.303790][T16641] tipc: Resetting bearer [ 332.318920][T16652] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 332.371115][T16641] tipc: Disabling bearer [ 332.411197][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.418471][ T6966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.427523][T16656] netlink: 'syz.5.3093': attribute type 1 has an invalid length. [ 332.621822][T16654] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 332.691644][T16663] veth3: entered promiscuous mode [ 332.717753][T16663] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 332.756958][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.764223][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.161479][T16678] sit1: entered promiscuous mode [ 333.176267][T16678] sit1: entered allmulticast mode [ 333.194364][T16684] __nla_validate_parse: 11 callbacks suppressed [ 333.194382][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 333.274163][T16688] netlink: 'syz.3.3102': attribute type 1 has an invalid length. [ 333.315683][T16688] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3102'. [ 333.361926][T16688] netlink: 'syz.3.3102': attribute type 2 has an invalid length. [ 333.415847][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3102'. [ 333.589785][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 333.691527][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3106'. [ 333.732863][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'. [ 334.136021][T16360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.198947][T16360] veth0_vlan: entered promiscuous mode [ 334.223007][T16360] veth1_vlan: entered promiscuous mode [ 334.284124][T16360] veth0_macvtap: entered promiscuous mode [ 334.312542][T16360] veth1_macvtap: entered promiscuous mode [ 334.349314][T16360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.376705][T16360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.447054][T16745] syzkaller0: entered promiscuous mode [ 334.454762][T16745] syzkaller0: entered allmulticast mode [ 334.525115][T10810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.546647][T10810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.570201][T10810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.582277][T10810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.474330][T16699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.624495][ T6961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.657741][ T6961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.803320][T16775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3124'. [ 336.832922][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.841379][T16768] syzkaller0: entered promiscuous mode [ 336.857008][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.858232][T16768] syzkaller0: entered allmulticast mode [ 337.031882][T16780] bond15: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 337.052140][T16780] bond15 (unregistering): Released all slaves [ 337.100971][T16785] xt_time: unknown flags 0xf4 [ 337.122002][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3127'. [ 337.295055][T16796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3128'. [ 337.343679][T16796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3128'. [ 337.358118][T16802] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 337.595747][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.598886][T16812] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3133'. [ 337.631463][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.642536][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.655572][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.668680][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.917629][T16825] xt_cgroup: invalid path, errno=-2 [ 338.401858][T16839] syzkaller0: entered promiscuous mode [ 338.416275][T16839] syzkaller0: entered allmulticast mode [ 338.550499][ T5614] team0: Port device syz_tun removed [ 338.630021][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.833052][ T1151] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.996217][T16860] __nla_validate_parse: 2 callbacks suppressed [ 338.996236][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3145'. [ 339.089256][ T1151] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.202441][T16811] wg0 speed is unknown, defaulting to 1000 [ 339.259320][ T1151] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.392664][ T1151] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.441052][T16876] geneve0: entered promiscuous mode [ 339.751130][ T5624] Bluetooth: hci3: command tx timeout [ 339.763493][ T1151] bridge_slave_1: left allmulticast mode [ 339.769646][ T1151] bridge_slave_1: left promiscuous mode [ 339.778551][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.806819][ T1151] bridge_slave_0: left allmulticast mode [ 339.813565][ T1151] bridge_slave_0: left promiscuous mode [ 339.821416][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.917390][ T1151] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 339.978514][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'. [ 340.071349][ T1151] bond13 (unregistering): (slave ip6gre1): Releasing backup interface [ 340.079944][ T1151] ip6gre1 (unregistering): left promiscuous mode [ 340.336711][ T1151] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 340.345182][ T1151] bridge5 (unregistering): left promiscuous mode [ 340.407893][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.425141][ T1151] bond0 (unregistering): Released all slaves [ 340.438358][ T1151] bond1 (unregistering): Released all slaves [ 340.454782][ T1151] bond2 (unregistering): Released all slaves [ 340.472603][ T1151] bond3 (unregistering): Released all slaves [ 340.497221][ T1151] bond4 (unregistering): Released all slaves [ 340.533818][ T1151] bond5 (unregistering): Released all slaves [ 340.556605][ T1151] bond6 (unregistering): Released all slaves [ 340.574909][ T1151] bond7 (unregistering): Released all slaves [ 340.597053][ T1151] bond8 (unregistering): Released all slaves [ 340.613583][ T1151] bond9 (unregistering): Released all slaves [ 340.637688][ T1151] bond10 (unregistering): Released all slaves [ 340.655189][ T1151] bond11 (unregistering): Released all slaves [ 340.677592][ T1151] bond12 (unregistering): Released all slaves [ 340.695396][ T1151] bond13 (unregistering): Released all slaves [ 340.718894][ T1151] bond14 (unregistering): Released all slaves [ 340.780681][T16887] team0: Port device team_slave_0 removed [ 340.962305][ T1151] tipc: Disabling bearer [ 340.975943][ T1151] tipc: Left network mode [ 341.017595][ T1151] IPVS: stopping master sync thread 6215 ... [ 341.037852][ T1151] IPVS: stopping backup sync thread 11180 ... [ 341.096915][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.104529][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.113334][T16811] bridge_slave_0: entered allmulticast mode [ 341.122028][T16811] bridge_slave_0: entered promiscuous mode [ 341.150399][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.166247][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.174392][T16811] bridge_slave_1: entered allmulticast mode [ 341.182490][T16811] bridge_slave_1: entered promiscuous mode [ 341.222571][T16811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.298635][T16811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.407263][T16811] team0: Port device team_slave_0 added [ 341.417262][T16811] team0: Port device team_slave_1 added [ 341.508192][T16811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.517661][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.544413][T16811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.558924][T16811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.566964][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.596692][T16811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.710991][T16811] hsr_slave_0: entered promiscuous mode [ 341.717991][T16811] hsr_slave_1: entered promiscuous mode [ 341.724473][T16811] debugfs: 'hsr0' already exists in 'hsr' [ 341.730909][T16811] Cannot create hsr debugfs directory [ 341.733329][T16858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.821969][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.831185][ T5624] Bluetooth: hci3: command tx timeout [ 341.852948][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.963626][ T1151] veth1_vlan: left allmulticast mode [ 341.980233][ T1151] veth0_macvtap: left promiscuous mode [ 341.994659][T16910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3157'. [ 342.007415][ T1151] veth1_vlan: left promiscuous mode [ 342.271759][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 342.517087][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 342.545075][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 342.728360][T16931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3161'. [ 343.011266][T16941] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3164'. [ 343.107223][T16941] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3164'. [ 343.379127][T16959] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3168'. [ 343.415969][T16956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.513180][ T1151] IPVS: stop unused estimator thread 0... [ 343.863062][T16976] netlink: 'syz.1.3171': attribute type 21 has an invalid length. [ 343.882852][T16976] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.910258][ T5624] Bluetooth: hci3: command tx timeout [ 343.915861][T16976] netlink: 'syz.1.3171': attribute type 1 has an invalid length. [ 344.120963][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 344.139562][T16985] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 344.430518][T16993] netlink: 'syz.1.3176': attribute type 11 has an invalid length. [ 344.452358][T16994] syzkaller0: entered promiscuous mode [ 344.460294][T16993] netlink: 'syz.1.3176': attribute type 4 has an invalid length. [ 344.470826][T16994] syzkaller0: entered allmulticast mode [ 344.483874][T16993] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3176'. [ 344.827392][T17014] bond2: option mode: invalid value (10) [ 344.847212][T17014] bond2 (unregistering): Released all slaves [ 345.097962][T17027] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3184'. [ 345.269114][T16811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.276965][T17033] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 345.328653][T16811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.356832][T16811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.380863][T16811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.391127][T17039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3187'. [ 345.416736][T16811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.429052][T16811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.462605][T16811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.500555][T16811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.814692][T16811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.986509][T16811] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.999763][ T5624] Bluetooth: hci3: command tx timeout [ 346.089283][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.096620][ T6961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.156652][T17073] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3194'. [ 346.166730][T17075] ip_tables: iptables: counters copy to user failed while replacing table [ 346.212142][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.219369][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.334484][T17079] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 346.444267][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 346.713767][T17098] syzkaller0: entered promiscuous mode [ 346.750473][T17098] syzkaller0: entered allmulticast mode [ 346.818242][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 346.892083][T17108] netlink: 'syz.2.3202': attribute type 8 has an invalid length. [ 346.926909][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3204'. [ 347.314456][T17130] netlink: NAT attribute has 5 unknown bytes [ 347.338747][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3207'. [ 347.358970][T17130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.384476][T17135] netlink: 'syz.2.3209': attribute type 1 has an invalid length. [ 347.555997][T17135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.629968][T17142] bond1: (slave gretap1): making interface the new active one [ 347.647241][T17142] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 347.684818][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.777405][T17149] bridge_slave_1 (unregistering): left allmulticast mode [ 347.803281][T17149] bridge_slave_1 (unregistering): left promiscuous mode [ 347.831634][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.001821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 348.075323][T17175] gretap0: entered promiscuous mode [ 348.088421][T17175] vlan2: entered promiscuous mode [ 348.740226][T17205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3221'. [ 348.843277][T17212] netlink: 'syz.5.3224': attribute type 24 has an invalid length. [ 349.157123][T16811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.458154][T16811] veth0_vlan: entered promiscuous mode [ 349.493123][T17237] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3230'. [ 349.531954][T17240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3230'. [ 349.605427][T16811] veth1_vlan: entered promiscuous mode [ 349.782422][T16811] veth0_macvtap: entered promiscuous mode [ 349.812538][T16811] veth1_macvtap: entered promiscuous mode [ 349.902997][T16811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.947301][T16811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.022488][ T6964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.111834][ T1151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.211401][ T1151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.248841][T17267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3234'. [ 350.281589][ T6964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.419115][ T6964] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 350.503299][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3238'. [ 350.860782][T17305] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3242'. [ 351.036140][T17314] ip6t_srh: unknown srh invflags 4000 [ 351.053826][T17314] syzkaller0: entered promiscuous mode [ 351.059570][T17314] syzkaller0: entered allmulticast mode [ 353.083849][T17265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.181088][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.221307][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.408579][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.428693][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.474775][T17380] Cannot find set identified by id 4 to match [ 353.613426][T17381] wg0 speed is unknown, defaulting to 1000 [ 353.631512][T17382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3248'. [ 353.718133][T17388] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 353.730846][T17388] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3131'. [ 353.741369][T17388] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 353.756970][T17388] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3131'. [ 353.782739][T17388] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3131'. [ 353.978497][T17395] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3252'. [ 354.240483][T17401] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 354.256084][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.268023][T17400] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 354.277997][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.289307][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.299301][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.312646][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.531609][T17400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.642351][T17417] __nla_validate_parse: 1 callbacks suppressed [ 354.642367][T17417] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3256'. [ 355.193923][T17441] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 355.214824][T17441] bond3 (unregistering): Released all slaves [ 355.256211][T17449] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 355.518891][T17464] netlink: 'syz.2.3266': attribute type 3 has an invalid length. [ 355.659286][T17406] wg0 speed is unknown, defaulting to 1000 [ 355.704499][T17479] ref_ctr_offset mismatch. inode: 0x15e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 355.737264][T17481] vlan2: entered promiscuous mode [ 355.743163][T17481] bridge0: entered promiscuous mode [ 355.750429][T17481] vlan2: entered allmulticast mode [ 355.755933][T17481] bridge0: entered allmulticast mode [ 355.868920][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3270'. [ 355.963150][T17485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.974326][T17485] bond0: (slave bond1): Enslaving as an active interface with an up link [ 356.372045][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.380155][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.387424][T17469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.396557][ T5624] Bluetooth: hci1: command tx timeout [ 356.414344][T17406] bridge_slave_0: entered allmulticast mode [ 356.423407][T17406] bridge_slave_0: entered promiscuous mode [ 356.435798][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.443358][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.451365][T17406] bridge_slave_1: entered allmulticast mode [ 356.461978][T17406] bridge_slave_1: entered promiscuous mode [ 356.606576][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.645465][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.877503][T17406] team0: Port device team_slave_0 added [ 356.914408][T17406] team0: Port device team_slave_1 added [ 356.938388][T17533] netlink: 'syz.5.3281': attribute type 5 has an invalid length. [ 357.064198][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.094347][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.156042][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.175801][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.183627][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.243498][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.638568][T17562] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 357.693433][T17406] hsr_slave_0: entered promiscuous mode [ 357.706321][T17562] xt_hashlimit: size too large, truncated to 1048576 [ 357.714640][T17406] hsr_slave_1: entered promiscuous mode [ 357.721635][T17406] debugfs: 'hsr0' already exists in 'hsr' [ 357.733821][T17406] Cannot create hsr debugfs directory [ 358.283866][T17580] tap0: tun_chr_ioctl cmd 2148553947 [ 358.355599][T17590] netlink: 'syz.2.3294': attribute type 4 has an invalid length. [ 358.456810][T17586] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3296'. [ 358.470212][ T5624] Bluetooth: hci1: command tx timeout [ 358.507923][T17406] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.518784][T17406] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.677589][T17406] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.701915][T17406] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.842394][T17406] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.884599][T17406] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.979978][T17406] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.001203][T17406] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.036397][ T30] audit: type=1804 audit(1787019270.364:15): pid=17585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3295" name="/newroot/42/cgroup.controllers" dev="tmpfs" ino=235 res=1 errno=0 [ 359.105508][ T30] audit: type=1800 audit(1787019270.364:16): pid=17585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3295" name="cgroup.controllers" dev="tmpfs" ino=235 res=0 errno=0 [ 359.576090][T17406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.584003][T17636] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 359.597528][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.627321][T17406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.651191][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.677000][T17637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3307'. [ 359.686849][T17406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.712313][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.720477][T17406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.731099][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3308'. [ 359.742100][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.755748][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 359.926166][T17652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.188994][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.305036][T17406] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.343176][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.350422][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.390875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.398080][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.460106][T17670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.561248][ T5624] Bluetooth: hci1: command tx timeout [ 360.586551][T17677] netlink: 'syz.1.3316': attribute type 23 has an invalid length. [ 360.597401][T17676] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 360.728129][T17681] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3319'. [ 360.794287][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 360.831283][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 361.041239][T17693] 8021q: VLANs not supported on sit0 [ 361.167619][T17700] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3323'. [ 361.198268][T17700] openvswitch: netlink: Message has 4 unknown bytes. [ 361.458666][T17713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3327'. [ 361.492440][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'. [ 361.686509][T17724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 361.796854][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.911084][T17732] netlink: 'syz.1.3335': attribute type 15 has an invalid length. [ 361.925535][T17730] netlink: 'syz.2.3333': attribute type 2 has an invalid length. [ 361.943833][T17730] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3333'. [ 361.982697][T17734] bridge_slave_0: left allmulticast mode [ 361.988780][T17732] netlink: 'syz.1.3335': attribute type 15 has an invalid length. [ 361.998174][T17734] bridge_slave_0: left promiscuous mode [ 362.004901][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.099786][ T1151] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 362.132201][ T1151] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 362.299599][ T1151] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 362.328568][ T1151] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 362.410546][T17406] veth0_vlan: entered promiscuous mode [ 362.448453][T17406] veth1_vlan: entered promiscuous mode [ 362.590292][T17406] veth0_macvtap: entered promiscuous mode [ 362.622246][T17406] veth1_macvtap: entered promiscuous mode [ 362.630648][ T5624] Bluetooth: hci1: command tx timeout [ 362.767740][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.810357][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.865424][T17768] tipc: Enabling of bearer rejected, media not registered [ 362.924667][T17768] netlink: 'syz.2.3346': attribute type 4 has an invalid length. [ 362.949990][ T1098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.001001][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.072742][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.119654][ T1151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.276778][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.322868][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.405138][T10810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.426556][T10810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.443585][T17838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.731437][T17853] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 364.824619][T17857] xt_hashlimit: size too large, truncated to 1048576 [ 364.944016][T17862] __nla_validate_parse: 5 callbacks suppressed [ 364.944036][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 364.993197][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 365.038435][ T30] audit: type=1800 audit(1787019276.364:17): pid=17864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3375" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=197 res=0 errno=0 [ 365.042568][T17870] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.163931][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3378'. [ 365.275647][T17884] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'. [ 365.376395][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3382'. [ 365.412835][T17889] tipc: Invalid UDP bearer configuration [ 365.412895][T17889] tipc: Enabling of bearer rejected, failed to enable media [ 365.434768][T17891] bridge0: port 3(gretap0) entered blocking state [ 365.445159][T17891] bridge0: port 3(gretap0) entered disabled state [ 365.452386][T17891] gretap0: entered allmulticast mode [ 365.479784][T17891] gretap0: entered promiscuous mode [ 365.489139][T17891] bridge0: port 3(gretap0) entered blocking state [ 365.495782][T17891] bridge0: port 3(gretap0) entered forwarding state [ 365.641381][T17901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3386'. [ 365.698705][T17905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3386'. [ 365.710520][T17904] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3387'. [ 365.757337][T17901] macvlan0: entered promiscuous mode [ 365.868169][T17913] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 365.982303][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 365.998382][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 366.195670][T17932] Only authenc() type AEADs are supported by ESSIV [ 366.329873][T17937] netlink: 'syz.3.3396': attribute type 5 has an invalid length. [ 366.364522][T17937] geneve2: entered promiscuous mode [ 366.370336][T17937] geneve2: entered allmulticast mode [ 366.400316][ T1151] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 366.436526][ T1151] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 366.448979][ T1151] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 366.481280][ T1151] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 366.591508][T17946] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 366.703824][T17957] openvswitch: netlink: Key type 518 is out of range max 32 [ 366.742961][T17957] IPv6: sit1: Disabled Multicast RS [ 366.836073][T17959] openvswitch: netlink: IP tunnel dst address not specified [ 366.850013][T17959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.886563][T17959] openvswitch: netlink: Duplicate or invalid key (type 0). [ 368.962975][T18064] sctp: [Deprecated]: syz.2.3438 (pid 18064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.962975][T18064] Use struct sctp_sack_info instead [ 369.443356][T18094] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 369.737645][T18109] netlink: 'syz.0.3451': attribute type 1 has an invalid length. [ 369.939884][T18109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.977209][T18114] bridge1: entered promiscuous mode [ 369.997364][T18114] bridge1: entered allmulticast mode [ 370.101004][T18126] netlink: 'syz.0.3457': attribute type 11 has an invalid length. [ 370.109356][T18126] __nla_validate_parse: 15 callbacks suppressed [ 370.109374][T18126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3457'. [ 370.422974][T18134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'. [ 370.538327][T18143] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.627706][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 370.891269][T18164] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 370.912161][T18164] syzkaller1: group set to 0 [ 371.022788][T18164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.104181][T18164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.153746][T18164] bond0 (unregistering): Released all slaves [ 371.431376][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3475'. [ 371.635094][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3480'. [ 371.806225][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3482'. [ 371.829799][ T5624] Bluetooth: hci1: command tx timeout [ 371.905270][T18219] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 372.110079][T18230] IPv6: Can't replace route, no match found [ 372.164184][T18233] netlink: 'syz.2.3491': attribute type 7 has an invalid length. [ 372.175544][T18234] IPv6: Can't replace route, no match found [ 372.323537][T18242] netlink: 'syz.2.3494': attribute type 23 has an invalid length. [ 372.623561][T18253] netlink: 'syz.1.3499': attribute type 5 has an invalid length. [ 373.103562][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3504'. [ 373.118822][T18272] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3504'. [ 373.155852][T18274] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.531349][T18290] netlink: 'syz.1.3511': attribute type 16 has an invalid length. [ 373.546388][T18290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3511'. [ 373.582962][T18288] tipc: Started in network mode [ 373.588111][T18288] tipc: Node identity ac14142f, cluster identity 4711 [ 373.631939][T18288] tipc: New replicast peer: 0.0.0.0 [ 373.645271][T18288] tipc: Enabled bearer , priority 10 [ 373.715999][ T1151] team0: left promiscuous mode [ 373.744911][ T1151] team_slave_0: left promiscuous mode [ 373.767485][ T1151] team_slave_1: left promiscuous mode [ 373.796936][ T1151] bridge0: port 5(team0) entered disabled state [ 373.825545][ T1151] 0ªî{X¹¦: left promiscuous mode [ 373.831627][ T1151] bridge0: port 4(30ªî{X¹¦) entered disabled state [ 373.843127][ T1151] vlan4: left allmulticast mode [ 373.852840][ T1151] geneve0: left allmulticast mode [ 373.858046][ T1151] vlan4: left promiscuous mode [ 373.863229][ T1151] geneve0: left promiscuous mode [ 373.869218][ T1151] bridge0: port 3(vlan4) entered disabled state [ 373.886976][ T1151] bridge_slave_1: left promiscuous mode [ 373.899928][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.931916][ T1151] bridge_slave_0: left allmulticast mode [ 373.944380][ T1151] bridge_slave_0: left promiscuous mode [ 373.969664][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.092392][T18318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3517'. [ 374.354511][ T1151] bond2 (unregistering): (slave geneve2): Releasing active interface [ 374.443238][ T1151] bond3 (unregistering): (slave bridge1): Releasing active interface [ 374.489796][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.513789][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.526621][ T1151] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 374.539880][ T1151] bond0 (unregistering): Released all slaves [ 374.553843][ T1151] bond1 (unregistering): Released all slaves [ 374.574027][ T1151] bond2 (unregistering): Released all slaves [ 374.592151][ T1151] bond3 (unregistering): Released all slaves [ 374.612861][ T1151] bond4 (unregistering): Released all slaves [ 374.636741][ T1151] bond5 (unregistering): Released all slaves [ 374.657670][ T1151] bond6 (unregistering): Released all slaves [ 374.962631][ T5618] tipc: Node number set to 2886997039 [ 375.043819][ T1151] : left promiscuous mode [ 375.236165][ T9] wg0 speed is unknown, defaulting to 1000 [ 375.265743][T18339] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 375.283602][ T9] syz0: Port: 1 Link DOWN [ 375.291338][T18339] bond2: (slave lo): Enslaving as an active interface with an up link [ 375.331205][T18339] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 375.356252][T18351] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3525'. [ 375.401399][T18337] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.420650][ T1151] tipc: Left network mode [ 375.625974][T18357] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3526'. [ 375.656440][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 375.681823][T18363] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3526'. [ 376.241572][T18381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3532'. [ 376.464532][T18383] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3533'. [ 376.490803][T18383] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3533'. [ 378.380007][T18405] netlink: 'syz.5.3540': attribute type 1 has an invalid length. [ 378.409670][T18405] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3540'. [ 378.437258][T18408] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3541'. [ 378.470946][T18393] syzkaller0: entered promiscuous mode [ 378.483260][T18393] syzkaller0: entered allmulticast mode [ 378.543423][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'. [ 378.731075][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.138097][T18457] __nla_validate_parse: 1 callbacks suppressed [ 381.138117][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3550'. [ 381.318581][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 381.337692][ T1151] hsr_slave_0: left promiscuous mode [ 381.344404][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.354062][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.368688][ T1151] batman_adv: batadv0: Removing interface: dummy0 [ 381.394353][ T1151] batman_adv: batadv0: Interface deactivated: veth0 [ 381.422787][ T1151] batman_adv: batadv0: Removing interface: veth0 [ 381.445559][ T1151] veth1_vlan: left promiscuous mode [ 381.566153][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f2a6800: rx timeout, send abort [ 381.779234][ T1151] team_slave_1 (unregistering): left allmulticast mode [ 381.788749][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 381.817301][ T1151] team_slave_0 (unregistering): left allmulticast mode [ 381.825377][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 382.004111][ T6964] smbdirect: ib_dev[syz0] removed [ 382.066382][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f2a6c00: rx timeout, send abort [ 382.075244][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f2a6800: abort rx timeout. Force session deactivation [ 382.392890][T18485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 382.510319][T18491] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3561'. [ 382.530958][T18493] netlink: zone id is out of range [ 382.584357][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3563'. [ 382.633767][T18493] netlink: zone id is out of range [ 382.703963][ T1151] IPVS: stop unused estimator thread 0... [ 383.028914][T18517] sctp: [Deprecated]: syz.0.3569 (pid 18517) Use of int in max_burst socket option deprecated. [ 383.028914][T18517] Use struct sctp_assoc_value instead [ 383.296733][T18523] netlink: 'syz.0.3572': attribute type 1 has an invalid length. [ 383.305017][T18523] netlink: 'syz.0.3572': attribute type 3 has an invalid length. [ 383.322344][T18523] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3572'. [ 383.524245][T18537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3577'. [ 383.601652][T18537] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3577'. [ 383.867520][T18559] ieee802154 phy0 wpan0: encryption failed: -90 [ 383.913503][T18559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.928646][T18559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.950790][T18559] bond0 (unregistering): Released all slaves [ 384.095330][T18562] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 384.103238][T18562] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 384.300003][T18530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.567372][T18577] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 384.578495][T18576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 384.733624][T18576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 384.744128][ T1164] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.766215][ T1164] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.822749][ T1164] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.840872][ T1164] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.941902][T18586] tipc: Enabling of bearer rejected, failed to enable media [ 385.041930][T18589] tipc: Enabling of bearer rejected, failed to enable media [ 385.368871][T18615] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 385.613566][T18627] xt_l2tp: wrong L2TP version: 0 [ 385.851075][T18644] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 386.226461][T18663] syzkaller0: entered promiscuous mode [ 386.236394][T18663] syzkaller0: entered allmulticast mode [ 388.754117][T18637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.151502][T18702] __nla_validate_parse: 5 callbacks suppressed [ 389.151521][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 389.190253][T18702] netlink: 'syz.0.3627': attribute type 3 has an invalid length. [ 389.284648][T18700] ip_tables: iptables: counters copy to user failed while replacing table [ 389.458518][T18710] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3632'. [ 389.913222][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'. [ 389.971264][T18742] syz_tun: refused to change device tx_queue_len [ 390.177443][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 390.363210][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3649'. [ 390.660711][T18788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3656'. [ 390.674625][T18791] ip6t_REJECT: ECHOREPLY is not supported [ 390.698767][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'. [ 390.733671][T18788] gre0: entered promiscuous mode [ 390.744991][T18788] gre0: entered allmulticast mode [ 390.953193][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'. [ 391.498284][T18847] veth0: entered promiscuous mode [ 391.504038][T18844] netlink: 'syz.5.3673': attribute type 2 has an invalid length. [ 391.533221][T18847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3671'. [ 391.544969][T18844] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3673'. [ 391.791688][T18837] veth0: left promiscuous mode [ 391.899020][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.996100][T18873] bond0: option lp_interval: invalid value (0) [ 392.010153][T18873] bond0: option lp_interval: allowed values 1 - 2147483647 [ 392.070794][T18873] bond0 (unregistering): Released all slaves [ 392.235681][T18878] syzkaller0: entered promiscuous mode [ 392.243723][T18878] syzkaller0: entered allmulticast mode [ 392.334951][T18890] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 392.553322][T18899] bridge3: entered promiscuous mode [ 392.563833][T18899] bridge3: entered allmulticast mode [ 392.598177][T18906] Cannot find add_set index 0 as target [ 392.801541][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.332657][T18899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.483745][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.494325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.523067][ T5618] IPVS: starting estimator thread 0... [ 393.584338][T18946] IPVS: sh: FWM 3 0x00000003 - no destination available [ 393.621152][T18948] IPVS: using max 27 ests per chain, 64800 per kthread [ 393.833945][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.076940][T18977] bridge4: entered promiscuous mode [ 394.099644][T18977] bridge4: entered allmulticast mode [ 394.733496][T19007] __nla_validate_parse: 10 callbacks suppressed [ 394.733516][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 394.750462][T19004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.760205][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 394.769118][T19005] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3721'. [ 394.816797][T19012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3723'. [ 394.847519][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3723'. [ 394.889981][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.924803][T19017] macvtap2: entered promiscuous mode [ 394.936393][T19017] dummy0: entered promiscuous mode [ 395.042068][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.053191][ T29] dummy0: left promiscuous mode [ 395.911617][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.993265][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.709693][T19002] Bluetooth: hci1: command 0x0405 tx timeout [ 396.952589][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.990211][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.070052][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.032624][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.070054][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.110060][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.118248][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.126479][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.150324][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.189978][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.150148][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.229939][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.270591][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.309967][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.870940][ T6964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.191782][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.349945][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.390740][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.417698][T19026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3728'. [ 409.436079][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.447315][T19026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3728'. [ 409.467610][T19026] netlink: 'syz.0.3728': attribute type 13 has an invalid length. [ 409.486628][T19028] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3729'. [ 409.500394][T19026] netlink: 'syz.0.3728': attribute type 58 has an invalid length. [ 409.515636][T19035] netlink: 'syz.5.3732': attribute type 1 has an invalid length. [ 409.515664][T19026] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3728'. [ 409.533259][T19035] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3732'. [ 409.563227][T19034] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.719080][T19034] bridge_slave_1 (unregistering): left allmulticast mode [ 409.751824][T19034] bridge_slave_1 (unregistering): left promiscuous mode [ 409.773270][T19034] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.987556][T19062] tipc: Started in network mode [ 410.012214][T19062] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 410.042739][T19062] tipc: Enabled bearer , priority 10 [ 410.070290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.090068][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.230406][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.413855][T19087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3744'. [ 410.435951][T19087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3744'. [ 410.471028][ T24] net_ratelimit: 2 callbacks suppressed [ 410.471048][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.713126][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.770282][T19107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3749'. [ 410.789905][T19107] netlink: 'syz.1.3749': attribute type 1 has an invalid length. [ 410.803901][T19107] netlink: 'syz.1.3749': attribute type 2 has an invalid length. [ 410.819916][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 410.871628][T19114] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3750'. [ 411.026730][T19119] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 411.048323][ T5725] tipc: Node number set to 10136234 [ 411.272341][T19134] netlink: 'syz.1.3757': attribute type 9 has an invalid length. [ 411.379340][T19140] syzkaller0: entered promiscuous mode [ 411.404866][T19140] syzkaller0: entered allmulticast mode [ 411.478613][T19147] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 411.519861][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.563906][T19152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.198012][T19184] sctp: [Deprecated]: syz.3.3770 (pid 19184) Use of int in max_burst socket option. [ 412.198012][T19184] Use struct sctp_assoc_value instead [ 412.551083][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.643502][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.870809][T19206] netlink: 'syz.3.3776': attribute type 2 has an invalid length. [ 413.112161][T19222] tipc: Started in network mode [ 413.121677][T19224] xt_cgroup: invalid path, errno=-2 [ 413.131495][T19222] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 413.145438][T19222] tipc: Enabled bearer , priority 10 [ 413.204620][T19221] bridge2: entered promiscuous mode [ 413.237320][T19221] bridge2: entered allmulticast mode [ 413.315231][T19234] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 413.337708][T19234] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 413.418177][T19240] netlink: 'syz.1.3787': attribute type 21 has an invalid length. [ 413.442933][T19240] netlink: 'syz.1.3787': attribute type 6 has an invalid length. [ 413.459079][T19242] openvswitch: netlink: EtherType 2 is less than min 600 [ 413.475507][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.492445][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.669092][T19251] ip6gre0: Master is either lo or non-ether device [ 414.115887][T19267] xt_bpf: check failed: parse error [ 414.131877][T19273] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.207381][T19273] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.214878][T19273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.227685][T19273] bridge0: entered promiscuous mode [ 414.234732][T19273] bridge0: entered allmulticast mode [ 414.270039][ T5725] tipc: Node number set to 10136234 [ 414.488076][T19293] __nla_validate_parse: 11 callbacks suppressed [ 414.488095][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3802'. [ 414.571360][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3802'. [ 414.640699][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3804'. [ 414.674435][T19301] macvlan0: entered promiscuous mode [ 414.697138][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3803'. [ 414.799278][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'. [ 415.277668][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3809'. [ 415.305267][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3809'. [ 415.318237][T19324] netlink: 'syz.0.3808': attribute type 29 has an invalid length. [ 415.328298][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3809'. [ 415.449765][T19330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3810'. [ 415.521387][T19334] netlink: 'syz.5.3811': attribute type 6 has an invalid length. [ 415.670390][ T5818] net_ratelimit: 13 callbacks suppressed [ 415.670409][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.003212][T19360] 8021q: VLANs not supported on ip6gre0 [ 416.034332][T19360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3819'. [ 416.292483][T19378] gretap0: entered promiscuous mode [ 416.611143][T19390] netlink: NAT attribute has 8 unknown bytes [ 416.617600][T19390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.644171][T19388] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 416.675536][T19388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.702608][T19393] netlink: 'syz.0.3831': attribute type 21 has an invalid length. [ 416.711016][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.790550][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.123897][T19407] netlink: 'syz.5.3838': attribute type 10 has an invalid length. [ 417.151036][T19407] geneve2: entered promiscuous mode [ 417.156465][T19407] geneve2: entered allmulticast mode [ 417.373793][T19416] syzkaller0: entered promiscuous mode [ 417.375303][T19418] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.396135][T19416] syzkaller0: entered allmulticast mode [ 417.600127][T19432] Bluetooth: MGMT ver 1.23 [ 417.643529][T19433] netlink: 'syz.2.3848': attribute type 29 has an invalid length. [ 417.740372][ T6964] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.760895][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.779825][ T6964] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.796791][ T6964] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.815775][ T6964] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.394474][ T6964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.603609][T19472] netlink: 'syz.5.3863': attribute type 10 has an invalid length. [ 418.645959][T19472] team0: Device veth0_macvtap failed to register rx_handler [ 418.792105][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.182178][T19504] netlink: 'syz.1.3865': attribute type 10 has an invalid length. [ 419.282621][T19504] syz_tun: entered promiscuous mode [ 419.361543][T19504] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 419.498541][T19517] __nla_validate_parse: 13 callbacks suppressed [ 419.498560][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3870'. [ 419.582584][T19517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3870'. [ 419.673325][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3870'. [ 419.690287][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.713075][T19517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3870'. [ 419.747315][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.859874][ T1164] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.885939][ T1164] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.176174][T19552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3880'. [ 420.235917][T19556] netlink: 'syz.3.3884': attribute type 2 has an invalid length. [ 420.250907][T19553] ipt_REJECT: TCP_RESET invalid for non-tcp [ 420.374959][T19564] netlink: 'syz.1.3886': attribute type 83 has an invalid length. [ 420.460275][T19564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3886'. [ 420.636364][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'. [ 420.646807][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'. [ 420.817500][T19592] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 420.869874][ T29] net_ratelimit: 39 callbacks suppressed [ 420.869893][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.878206][T19596] xt_hashlimit: size too large, truncated to 1048576 [ 420.909381][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'. [ 420.945014][T19592] bond0: entered promiscuous mode [ 420.955405][T19592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.962892][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.101817][T19597] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 421.113688][T19592] bond0: (slave bridge3): making interface the new active one [ 421.132804][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3898'. [ 421.142222][T19592] bridge3: entered promiscuous mode [ 421.151412][T19604] openvswitch: netlink: IP tunnel TTL not specified. [ 421.160855][T19604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.174972][T19592] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 421.358221][T19608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.576815][T19623] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 421.911480][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.967061][T19645] netlink: 'syz.3.3911': attribute type 3 has an invalid length. [ 422.021359][T19646] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 422.038311][T19646] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 422.078394][T19610] syzkaller1: entered promiscuous mode [ 422.097575][T19610] syzkaller1: entered allmulticast mode [ 422.686389][T19672] xt_hashlimit: size too large, truncated to 1048576 [ 422.898514][T19681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.965093][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.978495][T19681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.502019][T19705] hsr_slave_0: left promiscuous mode [ 423.533741][T19705] hsr_slave_1: left promiscuous mode [ 424.227557][ T6966] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xff [ 424.885448][T19725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.929928][T14709] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3 [ 424.958279][T14709] ref_tracker: netdev@ffff888076fe0700 has 1/2 users at [ 424.958279][T14709] j1939_ecu_create_locked+0x1c9/0x400 [ 424.958279][T14709] j1939_local_ecu_get+0xeb/0x220 [ 424.958279][T14709] j1939_sk_bind+0x70a/0xc60 [ 424.958279][T14709] __sys_bind+0x2e3/0x410 [ 424.958279][T14709] __x64_sys_bind+0x7a/0x90 [ 424.958279][T14709] do_syscall_64+0x174/0x580 [ 424.958279][T14709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.958279][T14709] [ 425.003697][T14709] ref_tracker: netdev@ffff888076fe0700 has 1/2 users at [ 425.003697][T14709] j1939_netdev_start+0x387/0xb20 [ 425.003697][T14709] j1939_sk_bind+0x946/0xc60 [ 425.003697][T14709] __sys_bind+0x2e3/0x410 [ 425.003697][T14709] __x64_sys_bind+0x7a/0x90 [ 425.003697][T14709] do_syscall_64+0x174/0x580 [ 425.003697][T14709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.003697][T14709] [ 426.070295][ T24] net_ratelimit: 7 callbacks suppressed [ 426.070316][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.879950][T19002] Bluetooth: hci5: command 0x0406 tx timeout [ 427.032375][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.109837][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.150484][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.189865][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.272069][ T6966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.280707][ T6966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.069853][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.231827][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.270452][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.310009][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.110211][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.349840][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.391699][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog