last executing test programs: 4.035509259s ago: executing program 3 (id=4412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150025bd7000fbdbdf252800000005002b000000000008000200", @ANYRES32=r2, @ANYBLOB="08002c000700000091aa6b63139bb2b857d59911216af9394a90343a6332126383d2ef59795ebe0f61fadf8fa84e3957b1491467b11285e21495ef4d37942db25db4478201b7690ac85e7b25e55d1b193df1982b822740bc61367429ba33e19d1c90b5edeefa8157960e36989ded3890bb8a77735924ea22a6e411a78f18592696ee"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x80800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x1, 0x7, 0x4, 0x7fffffff, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x66, 0x0, 0xd1, 0x4, 0x0, @rand_addr=0xb, @loopback, {[@lsrr={0x83, 0x1b, 0x64, [@local, @local, @local, @loopback, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x13, 0x9c, [@empty, @multicast1, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0x24, 0xc7, 0x1, 0x4, [{@rand_addr=0x64010100, 0x2e}, {@multicast2, 0xbbcf}, {@rand_addr=0x64010101, 0xe}, {@broadcast, 0x2}]}, @rr={0x7, 0x1b, 0x3f, [@broadcast, @remote, @multicast2, @rand_addr=0x64010101, @empty, @multicast2]}, @rr={0x7, 0x7, 0xef, [@empty]}]}}}}}) sendto$packet(r4, &(0x7f0000000600)="535e2fdf53a97ccedb5cca9178c3a4999825f85e139354f000af7db9b7bdf75927a88ce6e5654980562f926d05f79973637deae3ffdd0f28c38b19fb34fe0298779083cd766aca37c5deb726d6188a494ab6a3d09e5b811779729b398fe9f100b41a1a4b4b8ecd1e42f2792a1ba66139e6829551063c8a63ae31a74546a2552713c6ad7117a6f89649c11f8ebbade9a5b66a8a638b7d47f75488d7dfde717ba49fa3d747273f64d97c405e8e4a65b33b916ac26883cbba80ec1abf9567545e2cc6", 0xc1, 0x44000, &(0x7f0000000740)={0x11, 0xd, r5, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090127bd7000ffdbdf250600000008000d000000000008000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)={0x148, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_LLC_SDP={0x12c, 0x13, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [{0x7, 0x1, ',{\xa3'}, {0x5, 0x1, '^'}, {0xe, 0x1, 'syzkaller\x00'}, {0xa, 0x1, '/^:],\xcd'}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, '+@]$:%&+'}]}, {0x18, 0x0, 0x0, 0x1, [{0x7, 0x1, '#!#'}, {0xffffffffffffffbf, 0x1, '\\'}, {0x4}]}, {0x3c, 0x0, 0x0, 0x1, [{0xd, 0x1, '!{+!]}(\x8bf'}, {0x6, 0x1, '\x92,'}, {0x7, 0x1, '-@\x1b'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x7, 0x1, '^\'P'}]}, {0x40, 0x0, 0x0, 0x1, [{0x9, 0x1, '*[^@/'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, ':'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x4, 0x1, '\xf2\x06\x940\xec[N\xde\xdb\x94;\x83\x00h\xe3\xf2(\x04\x8d\x03\xd6\x05E\xfe\xb9&r\xd2\xe0fX\xe3\x96\xab/\xc3\x12\n`\xe3\x9b\xda\x84F\n\x04i\x14\x06\x96:\x91ZR\x00\x00&\xfcF\n\v\xa6\xbd\xb6\xd6\x19\xc3b\x112\xda=~]\x16\xd7b\xe9\xeb\xc0\x86\xbec\xda!\xdd\x16A\x99\xdf|\x98\x85A\xa6Ab\xb8n\xfc\xd0BR%|4\x1d\xb9z\xe1\x89\x8c\x82j\x93\xd1\xf33K\xc5\x96S\x19\x84\xd5\x80\x82W\xcfM\x18\x83l\xcd\xd6\x9d0\xf4u\\\\\xe3\xf3J&%\xdc\xc6\xd7\x1b\x9b\xcf$G\t\xd5\xca2\xeb\x8b\x90\x81\xd8\xfe\xbe\xbd\xa3 \xb6\xb4ja\x10\xde\'\xa8H\xc1YY0\x93\x92\a\xbco\x0f\x1d\xcd\xc4g\x18>\xb2h\x0f\x97\'\xee0M?\x7f\\R\xb2/\xa8j\x01\x00O\x84\xd4Q0@A\x1e+\x83\xfa\x01E0\v\x7f&\xadF\x05'}, {0x5, 0x1, '\x00'}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}]}]}, 0x148}}, 0x4000000) 3.996714991s ago: executing program 1 (id=4415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x23000, 0x1000, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2, r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x37, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 3.865624851s ago: executing program 1 (id=4419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 3.756605018s ago: executing program 1 (id=4421): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1203}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1203}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) 3.545561129s ago: executing program 2 (id=4424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x0, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 1.660810688s ago: executing program 2 (id=4425): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0040020000000000000020000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.599757992s ago: executing program 2 (id=4427): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x7c, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, @llc={0x1a, 0x337, 0x8, 0x2, 0xff, 0x2, @local}, @llc={0x1a, 0x10e, 0x0, 0x24, 0x9, 0x1, @local}, 0xc, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x631b, 0xbe}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0xc, 0xbc3}, 0x10) socket$kcm(0x2, 0x2, 0x73) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000200000f0300000002000000140000000300000000000000000000000000000044942decb400000000000200000000000000000100000f010000000000000000000000000000008400002e"], 0x0, 0x69, 0x0, 0x1}, 0x28) r8 = socket$kcm(0x2, 0x2, 0x73) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r12) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES64=r12, @ANYRES16=r10, @ANYRES64=r0, @ANYRESDEC=r7], 0x60}, 0x1, 0x2}, 0x4005) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @local}, &(0x7f0000000080)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x4, 0x8, {{0xc, 0x4, 0x2, 0x36, 0x30, 0x65, 0x0, 0x10, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0xe, "7a763408968d0c9d80c1b7bc"}, @noop, @rr={0x7, 0xb, 0xdf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}}}}) 1.250803664s ago: executing program 4 (id=4431): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000010000000000000f02000000f841000000000200000f020000001ba40000f31883c3d5abc08a277656eeef6f651cb7e3b3dd0359e2f730164cb600262b4189d2353b6f13db66d274d0ac14974a8b9c7ed9f7ae3d5132128d"], 0x0, 0x36, 0x0, 0x1}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x428, 0x3f3, 0x400, 0x70bd28, 0x25dfdbfd, {0x1, 0x1, 0x31, [0x1800, 0x1, 0x7, 0x0, 0xf, 0x9, 0x3, 0x7, 0x2, 0x7fffffff, 0x7, 0x7, 0x18, 0x7, 0x8, 0x79f, 0x9, 0x6, 0x533, 0x0, 0xfa0e, 0xae, 0x9, 0x0, 0x3, 0x10000, 0x51d0, 0x1, 0x101, 0x150, 0x9, 0xffff, 0xee5, 0x6, 0xe, 0x1, 0x1, 0x200, 0xfffffffb, 0x200, 0x10, 0x4, 0x57, 0x5, 0x5, 0xc, 0x9, 0x1, 0x8, 0x2, 0x9, 0x7fff, 0x3ff, 0xfffffffd, 0xa6, 0x4, 0x520, 0x0, 0x8001, 0x1, 0x2, 0x6, 0x1, 0x101], [0x1, 0x6, 0x6, 0xf, 0x2a157707, 0x0, 0x1000, 0x9, 0x2, 0x8, 0x1a, 0xffffff7f, 0x8, 0x9970, 0x2, 0x0, 0x5, 0xc3, 0x1ff, 0x5ef, 0x6, 0x3b00611b, 0x80000000, 0x8, 0x7f, 0x3, 0x0, 0x4, 0x2, 0x7, 0x3ff, 0x10, 0x1800, 0x8, 0xf, 0xcc, 0x2, 0x9, 0x200, 0x4000, 0xde4b83f9, 0x6, 0x6, 0x7, 0x6, 0x9, 0xcd, 0x3, 0x5, 0xd, 0xa, 0x2, 0x4, 0x2, 0x8, 0xd, 0xff, 0x7, 0x9, 0xae, 0x40, 0x8, 0x3, 0x1c02], [0x2, 0x7, 0xfff, 0x7c06, 0x7, 0x5, 0x2, 0x1, 0xfffffffe, 0x20, 0x19b7, 0xb, 0x7, 0x6, 0xfffffff7, 0xf8, 0x4, 0x0, 0x5f2, 0x3, 0x200, 0x5, 0x0, 0x7, 0x7, 0x0, 0x9, 0x8, 0x5, 0x3, 0x0, 0xf3, 0x3, 0xf, 0xfff, 0x6, 0x9, 0x100, 0x9, 0xfffffffa, 0x8, 0x6f3, 0x2b1c50f8, 0x10000, 0xeeef, 0x7f, 0x6, 0x10, 0x3, 0x10000, 0xfff, 0x0, 0x0, 0x800, 0x6, 0xfffffff8, 0x0, 0x5, 0x963, 0x0, 0x5, 0xe3, 0x81, 0x7], [0x2, 0x1000, 0x5, 0x5, 0xb, 0x6, 0x7, 0x6, 0xe, 0x4, 0x8ff, 0x8, 0x10, 0x13a6, 0x5, 0x7fff, 0x3, 0x7fff, 0x9, 0xb, 0x80000001, 0x2, 0x9, 0x1, 0x3, 0x2cb, 0x0, 0x6, 0x4, 0x80000000, 0xe45, 0x9, 0x1, 0x33, 0x7fffffff, 0x8, 0x5c, 0x101, 0x7ff, 0x2, 0x6, 0x5e, 0x8, 0x0, 0x7f, 0xe, 0x1ff, 0x432a, 0x10001, 0x8, 0x7, 0x7ff, 0x101, 0xfffffffd, 0x80000000, 0x800, 0x4, 0x7, 0x5, 0x716, 0x5e, 0x8, 0x9f5, 0xe9], 0x8, ['g[^/\'*+\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x10}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x24b5, 0x100009, 0x400}, 0x48) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r9, 0x6, 0x6, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000340)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x10000000, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 950.207072ms ago: executing program 3 (id=4432): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x197ac0a9bf2a1ad3}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0xe0, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x72}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x5d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a02651cf6813b10dc10f66ada6ff3b39b52b26748eaae58b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40c4}, 0x20000800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r4, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x9) accept$ax25(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = accept4$x25(r0, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x80800) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, &(0x7f0000000480)={@null, 0x3, 'hsr0\x00'}) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x200c00de) 857.377737ms ago: executing program 1 (id=4433): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(r0) 856.465999ms ago: executing program 4 (id=4434): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000940)={{r0}, "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"}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 855.201613ms ago: executing program 0 (id=4435): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x20005, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 771.645657ms ago: executing program 3 (id=4436): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1000000010, 0x80802, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x4) socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x3d}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x12, 0x1}, {0xb}, {0x48, 0x1}, {0xb}, {0x1b, 0x1}, {0x60, 0x1}, {0x55, 0x1}, {0x1b}, {0x1}, {0x9}, {0x1}, {0x60}, {0xc}, {0x24}, {0x6}, {0x9, 0x1}, {0x48, 0x1}, {0x2, 0x1}, {0x6c}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000000) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 771.264781ms ago: executing program 1 (id=4437): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e00090027bd70000004000004000000080018000dac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0x8000, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 767.145602ms ago: executing program 0 (id=4438): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0xa, 0xfffffffffffffffd, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) 757.760286ms ago: executing program 4 (id=4439): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f00000017c0)={'tunl0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 631.543941ms ago: executing program 2 (id=4440): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x9, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r5, {0x10, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x3}, {0x5c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe1, 0x5, 0xd, 0xb1e, 0x100, 0x9c04}, {0x4, 0x1, 0x700, 0xf14, 0xffff, 0x805}, 0x1, 0xffff, 0x1236}}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x8000, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendto$packet(r8, &(0x7f0000000440)="bad330752181510000316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0xd8, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000080)=0xd, 0x4) 630.019139ms ago: executing program 0 (id=4441): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() sendmsg$unix(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30, 0x1}, 0x0) close(r0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/140, 0x8c}, {&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000180)=""/34, 0x22}], 0x4, &(0x7f0000000200)=""/97, 0x61}, 0x3) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e22, 0x8, @remote, 0x8}, {0xa, 0x4e24, 0x4, @private0, 0x4}, 0x1, {[0x9, 0x6, 0x6, 0xfffffffd, 0x0, 0x6, 0x2, 0x1]}}, 0x5c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) 629.504248ms ago: executing program 4 (id=4442): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16], 0x0, 0x26, 0x0, 0x0, 0x1004}, 0x28) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x5, 0xc3, &(0x7f0000000680)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x4}, 0x10, 0xffffffffffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x1) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="fcffddff00000000000000000000000000001500", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000010000000500"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB="29000000130000003ed4b7e65501b5", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000007b113000000000008510000002000000850000007600000095000000000000009500a50500000000a41614770e1e9d353e36b5bc55f032d2dc695f31b2eb255c8235112aa676d26a53515754b64179e09298a788cf625d83565ac8df97ee05d593098f8fe03ac686e51e8113f52aaf82283fd1c99aea72a925c1d53bdb1654663d28f9323647b58518f48f254bb177c6f1a975292f1d4a8eb1434bb3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4dda7fa1}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$inet6(0xa, 0x2, 0x0) 602.399454ms ago: executing program 3 (id=4443): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x401, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf3a2700000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_ext={0x1c, 0x22, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @generic={0x0, 0x1, 0xf, 0x6, 0xb7b}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_fd={0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001300)='GPL\x00', 0x8, 0x52, &(0x7f0000001340)=""/82, 0x40f00, 0x39, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0x1, 0xfffffff8, 0xfffffff1}, 0x10, 0x2d40f, r8, 0x7, &(0x7f0000001400)=[r8, r8, r8, r3, 0x1, r8], &(0x7f0000001440)=[{0x1, 0x4, 0xc, 0xa}, {0x1, 0x5, 0xc, 0x5}, {0x1, 0x3, 0xe, 0x2}, {0x3, 0x4, 0x8, 0x7}, {0x2, 0x4, 0xc, 0xa}, {0x0, 0x3, 0xe, 0x4}, {0x1, 0x2, 0xc, 0xb}], 0x10, 0x1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001580)={r6, r10}) getsockopt$bt_hci(r9, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x1, 0xc, 0x8, 0x353a109f, 0x6], 0x2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) 550.672724ms ago: executing program 4 (id=4444): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="0b65df84f884", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @broadcast, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="35cb00000017000003000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f00000003c0)="c89305b6c34b1bae9a0302465932fc6a36d0730717e494854ab66eb30ad2cd564e7b7e76b983a5335b7a3ee595616010476b5af0a4291da4f73f8d5b61848395fc9d38bcba89c1bb47591fd97bcfcfdcf91a66a464d3ec494bef5c046124be0a17c18a8cc95b44b4dde301374ef8698191bf4f97a57dbef2c000448592393c2f686881f280dc", &(0x7f0000000480)=@tcp=r5, 0x2}, 0x20) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000240), &(0x7f0000000300)=r6}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 539.480073ms ago: executing program 1 (id=4445): r0 = socket(0x840000000002, 0x3, 0x100) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) unshare(0x20000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x2, 0x5, 0x17, @mcast2, @empty, 0x87, 0x20, 0x8, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20504}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8004) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70b52a, 0x2001, {0x0, 0x0, 0x0, r10, {0x7}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a40)={0x1a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b70800005be900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000001a00000000b70500000800000085000000a5000000"], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f8000000400000032bbd7000000000001a7c000004009c8006000980f8e60000586fb4894868d5cfe91701cdf524bd44bc24fe5587f72af607dd1dad968a5e10e3d4892620e4640a7a24e443bec58bd9b6ead000b56e5cc0cef888fddc093234024d5b86039bdd1c5cc6c65f159b03dfe88db201a1eacde01a84b27d70bccb75ff2be770a3a75057ac1374b235586ba92acad55492530ae060641a4d2795c58d45a41d443a06f4594d03f952b48bdb5266b728b5dbeb73918bf73fb82e7ec5f48d43df3535d74c61fe86fd86375e40f753863e1fe23627e2f11342449d084195b84e439c63137dc18228476271ada930df14090a8838c700"], 0xf8}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) 459.548919ms ago: executing program 0 (id=4446): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x30, r3, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 454.6263ms ago: executing program 3 (id=4447): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "fd3b4ee24a32da283eea9a09eaae5a6118814e2cfb098da38114e1311254c84c", "f110c663918ee28a8f4e62974216f93241c3d4abf4f133e8219f51887ab4c08d", "dc636b438a28f1a1ea50af2527fac18e8546c2d485dc7a1ea8d771da071fbbbd", "fbbbc8333d53a4f11305fb89659d9536e44b179fb55b64d6e4a117d6b6d7ef1b", "fd17b6c66fd5fc5468af58fb764adcd23a32d471f169acbe5d320c943e03135a", "52bc370363f509f589d310c5", 0x8, 0x0, 0x0, 0x8000, 0x9}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$FIOCLEX(r0, 0x5451) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "fd3b4ee24a32da283eea9a09eaae5a6118814e2cfb098da38114e1311254c84c", "f110c663918ee28a8f4e62974216f93241c3d4abf4f133e8219f51887ab4c08d", "dc636b438a28f1a1ea50af2527fac18e8546c2d485dc7a1ea8d771da071fbbbd", "fbbbc8333d53a4f11305fb89659d9536e44b179fb55b64d6e4a117d6b6d7ef1b", "fd17b6c66fd5fc5468af58fb764adcd23a32d471f169acbe5d320c943e03135a", "52bc370363f509f589d310c5", 0x8, 0x0, 0x0, 0x8000, 0x9}}) (async) 441.692463ms ago: executing program 2 (id=4448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 311.837931ms ago: executing program 3 (id=4449): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11, 0xfffffffd}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b, 0x0, 0x1}, 0x28) sendmsg$key(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000200)={0x2, 0x2, 0x5, 0x2, 0x10, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_ident={0x2, 0xa, 0x4, 0x0, 0xffffffffffffff86}, @sadb_lifetime={0x4, 0x2, 0x6ee, 0x5e, 0x254, 0xffffffff}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bbd, 0x10000, {0x6, 0x33, 0x4, 0x3, 0x0, 0x3, 0x0, @in=@loopback, @in6=@mcast1}}]}, 0x80}}, 0x40c0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=@newtaction={0x5c0, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}, {0x53c, 0x1, [@m_ctinfo={0x190, 0x1d, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffe, 0xa, 0x8, 0xffff22d0, 0x7}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xff, 0x2, 0x10, 0x8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xff16}, @TCA_CTINFO_ACT={0x18, 0x3, {0x40, 0x5, 0x1, 0x7, 0xc8dc}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x1, 0x3, 0x1000, 0x9}}]}, {0xd1, 0x6, "9a545c04cfd906132eb2e3072ed0f9256f5ae47f70880553c063498280e9b4e37594e7c494c60e4e4bfbb4a4f99add4af3e8bc7b302220fc32deb39762b85970d2e0ee0ca3d8d3e1fb4bd14fda109d9ac5ba19bc296e082c3f4520dc79d2839239047f78aa04be76ba8313c912c871c82398f5011e88c5e8274aa29870f5bce22f79278ac554aa9f60950df302802b4a45fe346c5c56a473d204b5cc3bb46ae0307475972f67c728d8476a4bd1debbd1cfd3d1bf3918ccbc97303e0557c082925c769a6d3ae89432968fb9ab88"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1e0, 0x1e, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x3, 0x6dd, 0x80}, @remote, @dev={0xac, 0x14, 0x14, 0x10}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xa3, 0x10000000, 0x80, 0x4}, @multicast2, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe000000, 0x5, 0x7, 0x401, 0xa2}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x2, 0xc2, 0x1}, @broadcast, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x43c, 0x0, 0x4, 0x285, 0xf}, @broadcast, @private=0xa010100, 0xffffff00, 0x1}}]}, {0xed, 0x6, "e41976436e2b136117786d5cb372d3d5c400a6ae9221c570eb5a67b21e7d51f359ba1cc57a41fd598fddab674661e0edfe3cfa3ed40ee69895e356037aeafe6b7dfa8a77a1b4aad80f67d2811c3d6f1dba2fefb6614e79040be783eab8887245fcfb1013b03bb9a2bf6feecfe8e70252a1691a59ca8616057e8b93123d9ff603d5ce36a5f28b44a75fd924ecf2ce513e02869c0c50cff7bedffd7648fbc8a97f2fa2211eea5de6402a872251cffbaa97c0ffe35ca482853947104c12d798d4fe14387ded35de7ed4df5ba752e75bf13cb74f3d503b76f5c0e7e8a26fcc555968d17228fb486c11cc7c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x1c8, 0x15, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8, 0x6, 0xc3, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x1, 0x80000000, 0x5b}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x4, 0x0, 0xffffffa7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3ff, 0x0, 0x401, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x20000000, 0x800, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xfffffffe, 0x7, 0x0, 0x8}, 0x3}}]}, {0xd9, 0x6, "7f22c958be1597f7f1d586eff67bf438a179498fdeff908479f39a987f0169fee475befd71803277452fdba00d4c08ec61d2ece1e2038416912e2aa71d7dd5d2eb47d2c7107b851d53ad81170159ca82946a76d9003f7ce650ed27deba8f3354bf02720a2cc2469ebffe11f1b203eb3f2104a6be3187e400f9d77f4772bdc70a6bc74cf880f4ff2541d51a8e27405744e164f6977316ceb0f525e7b3666bda9534a1b3fa3869eb12f50b5345f545bc9129ef86f8e5d77ac9a892a730044d9834676e525cbf0b0749f47e0cad264f81c247c37c654d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x5c0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000280)={r9, 0x11, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000380)={r9, 0x11, 0x6, @local}, 0x10) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000340)=0x10000, 0x4) shutdown(r12, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r7, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', r7, r1, 0x5, 0x3, 0x4}, 0x50) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x20}) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000021d20478d780e2a68dc400030000000a00100088"], 0x5c}}, 0x0) 291.605852ms ago: executing program 4 (id=4450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x3a) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x2, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000000)=0xfd, 0x4) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000000000000000100800010001000000234168ef8e75e4f2ae7137a18965113be90cab3244e4101d01e2f1b39d58e0d4712bae676a26ca8edcb0d3d9757b4d6331f7730c2760ad3d85efede0dbd439ed2745883e3354892cb3bd0dd9a14725c43c8dd0f2197f06a3268bdf5cceda205a591d705ca0095dd069aec9e6670ad43c7c288fb498b12b77d00d3dab8581e9fed2a66cf5c4b3a37f5c230a414dd51dfeeb035a31ac"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000020b69c97553002677b00000c"], 0x2c}}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0x96, 0x6}, 0x20) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x35}, @in6=@private2, {0x0, 0x0, 0x7cc98682, 0x2}, {0x0, 0x800000000}, {0x3}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x408c4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) (async) r10 = getuid() sendmsg$nl_xfrm(r9, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=@getsa={0x230, 0x12, 0x300, 0x70bd2c, 0x25dfdbfe, {@in6=@empty, 0x4d4, 0xa, 0x33}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @lastused={0xc, 0xf, 0x401}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x4e24, 0xfbbc, 0x4e22, 0x9, 0x2, 0x20, 0x20, 0x1d, 0x0, r10}, {@in=@broadcast, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x140000, 0x7f6ec89c, 0x7, 0x5, 0xfffffffffffffff7, 0x10001, 0x3, 0xc}, {0xc14, 0xde6, 0x86cf, 0x3ff}, {0x36, 0x9, 0x80000001}, 0x70bd27, 0x3500, 0xa, 0x2, 0xde, 0x8}}, @tfcpad={0x8, 0x16, 0x6}, @replay_thresh={0x8, 0xb, 0x6}, @lastused={0xc, 0xf, 0x8}, @algo_auth={0xe6, 0x1, {{'sha256-ce\x00'}, 0x4f0, "5f749875d024b70e388b97fcf3db95d2d981866c5cf48bd8f177677190f48d6e99d7f810e599f962a43286298ecf91a5bc628479b70161ea96b82148d643af136813521adf77d724d4e53c1701d3c3450d3e826db9105315e2e9e4eea1ccdc49a3ae16d3def72d2bdf3e49d4d61c1c840e797fe1535a5df07fbbf00e4cc0030a2b1470753e6caecdd7d180cf58d4d0629068a8f4542044866f5d0ee209a0"}}, @mark={0xc, 0x15, {0x350759, 0x4}}]}, 0x230}, 0x1, 0x0, 0x0, 0x20044850}, 0x20000005) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x3c, r11, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x6}, @device_b}}]}, 0x3c}}, 0x0) 181.149327ms ago: executing program 2 (id=4451): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @loopback, 0x1a}, 0x1c) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x8c56}], 0x1, 0x10020, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@generic="751144fc31378a632d5ed97771491f6b1b36bd97c4a48974ed84"]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 95.697985ms ago: executing program 0 (id=4452): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4000000000000006114a0000000000005000000000000009500000000000000c524f1895e54f525ae9c820d0d3951888af48441e7a9a147dae4ccc329ad71a980aba7c15eb3a662ef79975e99b9d3d4cb7a98ba086568899986fa7b56e8ad63a414e89f86fed9b35737248add7796be52d52cb15d8f2e26aaa2feee66ba5a6673817f432b235fb5cb9267e1e0e0fab8d19542719d7c34d75fd6d69cf452564b202a153375cad56b5a1147563be1af840d23e29739b35ec31384dd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x93, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000100)="8571012b082fcde281a4364aec287564a9bb42b4dc9bd896f7d7e48033aef2a5cfa36cd89768a11afe052b7b072a21bc172af76d26356178a7a553c2cee439365c10a5172abb6ee0618960302c94589ac2ee1d423327f8e805f3c36cdb33ec74cbae03b58dcb7961a3a8b95cc3d69edef7ae76d0b120b6d7b78a45c5594e959c7e3001108ade974423c5d1d7a3df0738d0877c261b8eac5c720057169d617c2866916a8d6eea2d718e0540ccf991538e5ac10ba627059448", &(0x7f00000001c0)=""/157, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4000000000000006114a0000000000005000000000000009500000000000000c524f1895e54f525ae9c820d0d3951888af48441e7a9a147dae4ccc329ad71a980aba7c15eb3a662ef79975e99b9d3d4cb7a98ba086568899986fa7b56e8ad63a414e89f86fed9b35737248add7796be52d52cb15d8f2e26aaa2feee66ba5a6673817f432b235fb5cb9267e1e0e0fab8d19542719d7c34d75fd6d69cf452564b202a153375cad56b5a1147563be1af840d23e29739b35ec31384dd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x93, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000100)="8571012b082fcde281a4364aec287564a9bb42b4dc9bd896f7d7e48033aef2a5cfa36cd89768a11afe052b7b072a21bc172af76d26356178a7a553c2cee439365c10a5172abb6ee0618960302c94589ac2ee1d423327f8e805f3c36cdb33ec74cbae03b58dcb7961a3a8b95cc3d69edef7ae76d0b120b6d7b78a45c5594e959c7e3001108ade974423c5d1d7a3df0738d0877c261b8eac5c720057169d617c2866916a8d6eea2d718e0540ccf991538e5ac10ba627059448", &(0x7f00000001c0)=""/157, 0x4}, 0x20) (async) 0s ago: executing program 0 (id=4453): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x5, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000140), 0x0}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6d10, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000019600)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0xc, 0x4, 0x3f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, 0x0, 0x700, 0x1, 0x4}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019780)={0x18, 0x1c, &(0x7f0000000440)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x691e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x6c, &(0x7f0000019580)=""/108, 0x40f00, 0x1a, '\x00', r5, 0x0, r2, 0x8, &(0x7f0000019680)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000196c0)={0x2, 0xa, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000019700)=[r7], &(0x7f0000019740)=[{0x1, 0x5, 0x1, 0x7}], 0x10, 0xff}, 0x94) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r9, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r11, 0x400454de, 0x0) ioctl$SIOCGSKNS(r11, 0x894c, &(0x7f0000019840)={'rose0\x00', 0x600}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r9, &(0x7f0000000300), 0x0}, 0x20) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000198c0), r12) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000019a00)={&(0x7f0000019880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000199c0)={&(0x7f0000019900)={0x90, r13, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000018}, 0x20008040) getsockopt(r2, 0x80000000, 0x6, &(0x7f0000000380)=""/186, &(0x7f0000000040)=0xba) socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 317.730365][T16357] xt_ecn: cannot match TCP bits for non-tcp packets [ 317.918800][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.968252][T16367] syzkaller1: entered promiscuous mode [ 317.973772][T16367] syzkaller1: entered allmulticast mode [ 318.004005][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.418328][T16389] netlink: 'syz.2.2880': attribute type 3 has an invalid length. [ 318.698862][T16418] 8021q: adding VLAN 0 to HW filter on device bond13 [ 318.778964][T16433] __nla_validate_parse: 28 callbacks suppressed [ 318.778984][T16433] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2891'. [ 318.798542][T16433] netlink: 'syz.4.2891': attribute type 1 has an invalid length. [ 318.807383][T16433] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2891'. [ 318.817578][T16433] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2891'. [ 318.880391][T16436] netlink: 'syz.2.2894': attribute type 39 has an invalid length. [ 318.958526][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.014428][T16445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2897'. [ 319.523898][T16466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.537991][T16466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.551657][T16466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45743 - 0 [ 319.815215][T16466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.841495][T16466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.861257][T16493] ipt_REJECT: TCP_RESET invalid for non-tcp [ 319.882609][T16466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45743 - 0 [ 319.908334][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.924648][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.933503][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.944259][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.954062][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.998907][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.038766][T16503] syzkaller0: entered promiscuous mode [ 320.088743][T16503] syzkaller0: entered allmulticast mode [ 320.259759][T16466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.273693][T16466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.286856][T16466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45743 - 0 [ 320.414912][T16500] syzkaller0: entered promiscuous mode [ 320.421012][T16500] syzkaller0: entered allmulticast mode [ 320.491475][T16519] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2915'. [ 320.506333][T16466] bond0: (slave netdevsim0): Releasing backup interface [ 320.519149][T16466] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.530148][T16466] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.541390][T16466] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45743 - 0 [ 320.546477][T16521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2916'. [ 320.564822][T16521] IPv6: Can't replace route, no match found [ 320.599427][T16521] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2916'. [ 320.610906][T16521] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2916'. [ 320.667574][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 321.043685][ T6159] net_ratelimit: 1 callbacks suppressed [ 321.043699][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.064494][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.012421][ T52] Bluetooth: hci5: command tx timeout [ 322.088122][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.325711][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.345277][T16525] validate_nla: 1 callbacks suppressed [ 322.345296][T16525] netlink: 'syz.1.2918': attribute type 21 has an invalid length. [ 322.366109][T16527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2919'. [ 322.398879][T16530] netlink: 'syz.1.2918': attribute type 21 has an invalid length. [ 322.452198][T11631] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.478625][T11631] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 45743 - 0 [ 322.487011][T11631] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.546062][ T3553] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.555615][ T3553] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 45743 - 0 [ 322.578667][ T3553] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.628029][T16497] lo speed is unknown, defaulting to 1000 [ 322.628046][ T3553] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.655182][ T3553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 45743 - 0 [ 322.673494][ T3553] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.734149][T16544] openvswitch: netlink: IP tunnel dst address not specified [ 322.762944][T11631] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.771658][T16549] openvswitch: netlink: IP tunnel dst address not specified [ 322.779143][T11631] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 45743 - 0 [ 322.779176][T11631] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.124543][T16565] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 323.134228][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.561729][T16589] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 323.666979][T11632] erspan0 (unregistering): left promiscuous mode [ 323.703381][T11632] gretap0 (unregistering): left promiscuous mode [ 323.716681][T16605] netlink: 'syz.2.2943': attribute type 1 has an invalid length. [ 323.744448][T11632] bond2 (unregistering): (slave gretap1): Releasing active interface [ 323.817537][T11632] dvmrp6 (unregistering): left allmulticast mode [ 323.861173][T11632] bond6 (unregistering): (slave geneve2): Releasing active interface [ 324.017826][T11632] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 324.025946][T11632] bridge3 (unregistering): left promiscuous mode [ 324.078008][ T5835] Bluetooth: hci5: command tx timeout [ 324.158359][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.379911][T11632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.390532][T11632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.400633][T11632] bond0 (unregistering): Released all slaves [ 324.511599][T11632] bond1 (unregistering): Released all slaves [ 324.523538][T11632] bond2 (unregistering): Released all slaves [ 324.629763][T11632] bond3 (unregistering): Released all slaves [ 324.737068][T11632] bond4 (unregistering): Released all slaves [ 324.840314][T11632] bond5 (unregistering): Released all slaves [ 324.934553][T11632] bond6 (unregistering): Released all slaves [ 325.033586][T11632] bond7 (unregistering): Released all slaves [ 325.045623][T11632] bond8 (unregistering): Released all slaves [ 325.065890][T16589] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.075097][T16589] `: (slave team0): Enslaving as an active interface with an up link [ 325.131751][T16497] chnl_net:caif_netlink_parms(): no params data found [ 325.202922][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.242419][T16617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.266496][T11632] : left promiscuous mode [ 325.591194][T16620] syzkaller0: entered promiscuous mode [ 325.596799][T16620] syzkaller0: entered allmulticast mode [ 325.663594][T11632] tipc: Left network mode [ 325.903652][T16497] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.925467][T16497] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.933858][T16497] bridge_slave_0: entered allmulticast mode [ 325.942304][T16497] bridge_slave_0: entered promiscuous mode [ 325.968754][T16497] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.976214][T16497] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.985543][T16497] bridge_slave_1: entered allmulticast mode [ 325.994745][T16497] bridge_slave_1: entered promiscuous mode [ 326.160891][ T5835] Bluetooth: hci5: command 0x040f tx timeout [ 326.238097][ T6163] net_ratelimit: 2 callbacks suppressed [ 326.238121][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.596423][T16611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.811167][T16648] __nla_validate_parse: 7 callbacks suppressed [ 326.811188][T16648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2954'. [ 326.911135][T16655] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2956'. [ 326.922958][T16655] netlink: 'syz.4.2956': attribute type 25 has an invalid length. [ 326.942184][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2956'. [ 326.964919][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2956'. [ 326.992514][T16658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2954'. [ 327.282781][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.027359][T16497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.050290][T16676] netlink: 'syz.1.2961': attribute type 13 has an invalid length. [ 328.112665][T16682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2961'. [ 328.159462][T16497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.238213][ T52] Bluetooth: hci5: command 0x040f tx timeout [ 328.277507][T16676] macvtap0: entered allmulticast mode [ 328.294103][T16676] macvtap0: refused to change device tx_queue_len [ 328.328757][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.404482][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.762176][T16497] team0: Port device team_slave_0 added [ 328.823641][T16708] netlink: 'syz.4.2965': attribute type 1 has an invalid length. [ 328.859808][T16497] team0: Port device team_slave_1 added [ 328.956479][T16703] 8021q: adding VLAN 0 to HW filter on device bond14 [ 329.170749][T11632] hsr_slave_0: left promiscuous mode [ 329.177219][T11632] hsr_slave_1: left promiscuous mode [ 329.183556][T11632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.194738][T11632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.219606][T11632] pim6reg (unregistering): left allmulticast mode [ 329.358302][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.910805][T16705] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 329.918535][T16705] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 329.928930][T16710] tipc: Enabling of bearer rejected, already enabled [ 329.940429][T16497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.950132][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.977041][T16497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.032292][T16739] macvtap2: entered allmulticast mode [ 330.038920][T16739] veth0_macvtap: entered allmulticast mode [ 330.056550][T16497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.092586][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.128964][T16497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.206552][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 330.277492][T11631] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.287130][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 330.318709][ T52] Bluetooth: hci5: command 0x040f tx timeout [ 330.365582][T11631] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.382144][T11631] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.393776][T16757] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2977'. [ 330.398704][T16497] hsr_slave_0: entered promiscuous mode [ 330.416850][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.426816][T16497] hsr_slave_1: entered promiscuous mode [ 330.445671][T16757] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2977'. [ 330.448696][T16497] debugfs: 'hsr0' already exists in 'hsr' [ 330.476994][T16497] Cannot create hsr debugfs directory [ 330.517526][T11631] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.859518][T16780] syzkaller0: entered promiscuous mode [ 330.870892][T16780] syzkaller0: entered allmulticast mode [ 330.970004][T16788] pimreg3: entered allmulticast mode [ 331.016168][T11632] IPVS: stop unused estimator thread 0... [ 331.288511][T16798] bond15: option xmit_hash_policy: invalid value (64) [ 331.342136][T16798] bond15 (unregistering): Released all slaves [ 331.403370][T16802] bond15: option xmit_hash_policy: invalid value (64) [ 331.419568][T16802] bond15 (unregistering): Released all slaves [ 331.438035][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.447753][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.056713][T16847] __nla_validate_parse: 8 callbacks suppressed [ 332.056732][T16847] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2995'. [ 332.253184][T16860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2998'. [ 332.338385][T16860] team0: Caught tx_queue_len zero misconfig [ 332.478548][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.508592][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3000'. [ 332.530696][T16497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.561176][T16497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.566669][ T95] block nbd2: Possible stuck request ffff888025440000: control (read@0,1024B). Runtime 60 seconds [ 332.568729][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.579129][ T95] block nbd2: Possible stuck request ffff888025440200: control (read@1024,1024B). Runtime 60 seconds [ 332.598248][ T95] block nbd2: Possible stuck request ffff888025440400: control (read@2048,1024B). Runtime 60 seconds [ 332.609278][ T95] block nbd2: Possible stuck request ffff888025440600: control (read@3072,1024B). Runtime 60 seconds [ 332.670272][T16497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.709540][T16497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.772484][T16879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3002'. [ 332.990874][T16497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.053863][T16497] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.082213][T11632] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.089432][T11632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.136102][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.143296][T11632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.221210][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3007'. [ 333.235587][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3006'. [ 333.276912][T16909] bridge_slave_1: left allmulticast mode [ 333.308137][T16909] bridge_slave_1: left promiscuous mode [ 333.322634][T16909] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.403042][T16909] bridge_slave_0: left allmulticast mode [ 333.430686][T16909] bridge_slave_0: left promiscuous mode [ 333.436531][T16909] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.520387][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.648380][T16924] tipc: Enabling of bearer rejected, failed to enable media [ 333.673126][T16918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 333.853432][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3011'. [ 333.865288][T16497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.931847][T16497] veth0_vlan: entered promiscuous mode [ 333.959708][T16497] veth1_vlan: entered promiscuous mode [ 334.044982][T16948] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3013'. [ 334.068099][T16497] veth0_macvtap: entered promiscuous mode [ 334.099233][T16497] veth1_macvtap: entered promiscuous mode [ 334.136504][T16497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.187224][T16497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.293636][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.315778][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.375517][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.410664][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.559423][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.668008][T11631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.675869][T11631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.741369][T16981] netlink: 'syz.3.3021': attribute type 25 has an invalid length. [ 334.749390][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 334.765841][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.766461][T16981] netlink: 'syz.3.3021': attribute type 25 has an invalid length. [ 334.790658][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.839486][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 334.864711][T16986] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 334.973994][T16992] bond15: (slave gretap1): making interface the new active one [ 335.061790][T16992] bond15: (slave gretap1): Enslaving as an active interface with an up link [ 335.466118][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.477124][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.485987][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.495528][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.507593][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.598410][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.680534][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.769283][T17046] syzkaller1: entered promiscuous mode [ 335.774820][T17046] syzkaller1: entered allmulticast mode [ 335.978827][T17062] netlink: 'syz.3.3040': attribute type 1 has an invalid length. [ 336.639141][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.759047][T17032] lo speed is unknown, defaulting to 1000 [ 337.201306][T17128] __nla_validate_parse: 10 callbacks suppressed [ 337.201326][T17128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3057'. [ 337.277574][T17032] chnl_net:caif_netlink_parms(): no params data found [ 337.565570][T17032] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.583486][T17032] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.607898][ T5835] Bluetooth: hci0: command tx timeout [ 337.608605][T17032] bridge_slave_0: entered allmulticast mode [ 337.643181][T17032] bridge_slave_0: entered promiscuous mode [ 337.670840][T17032] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.681134][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.686425][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.698118][T17032] bridge_slave_1: entered allmulticast mode [ 337.705711][T17032] bridge_slave_1: entered promiscuous mode [ 337.732389][T17159] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3065'. [ 337.781934][T17032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.802236][T17161] netlink: 'syz.0.3067': attribute type 9 has an invalid length. [ 337.881238][T17032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.894952][T17167] netlink: 'syz.3.3068': attribute type 1 has an invalid length. [ 337.963338][T17167] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address [ 337.974340][T17167] bond10: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 337.990356][T17167] bond10: (slave xfrm1): making interface the new active one [ 338.001148][T17167] bond10: (slave xfrm1): Enslaving as an active interface with an up link [ 338.011810][T17032] team0: Port device team_slave_0 added [ 338.022226][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 338.046925][T17171] bond10 (unregistering): (slave xfrm1): Releasing backup interface [ 338.061013][T17171] bond10 (unregistering): Released all slaves [ 338.084850][T17032] team0: Port device team_slave_1 added [ 338.178324][T17179] veth1_muc€ÿap: renamed from veth0_macvtap (while UP) [ 338.228454][T17032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.257774][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.335858][T17032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.360212][T17191] xt_cgroup: invalid path, errno=-2 [ 338.378281][T17032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.386290][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.419134][T17032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.524927][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 338.561862][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3077'. [ 338.578215][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 338.605346][T17032] hsr_slave_0: entered promiscuous mode [ 338.629974][T17032] hsr_slave_1: entered promiscuous mode [ 338.634361][T17203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3079'. [ 338.636503][T17032] debugfs: 'hsr0' already exists in 'hsr' [ 338.653201][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 338.653575][T17032] Cannot create hsr debugfs directory [ 338.718666][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.726870][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.822650][T17221] netlink: 'syz.3.3082': attribute type 2 has an invalid length. [ 338.919630][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3081'. [ 339.122811][T17239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3085'. [ 339.439043][T17262] netlink: 'syz.2.3090': attribute type 2 has an invalid length. [ 339.457298][T17032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.471869][T17032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.559025][T17032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.569583][T17032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.645025][T17032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.655798][T17032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.677735][ T52] Bluetooth: hci0: command tx timeout [ 339.710706][T17032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.721148][T17032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.758692][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.141227][T17280] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 340.152477][T17280] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 340.161457][T17280] gretap1: entered promiscuous mode [ 340.166679][T17280] gretap1: entered allmulticast mode [ 340.226735][T17283] openvswitch: netlink: Missing key (keys=40, expected=80) [ 340.520247][T17299] netlink: 'syz.0.3101': attribute type 19 has an invalid length. [ 340.798352][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.758024][ T52] Bluetooth: hci0: command tx timeout [ 341.758142][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.838550][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.358067][T17258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.370359][T17274] __nla_validate_parse: 8 callbacks suppressed [ 342.370377][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3093'. [ 342.449282][T17032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.528777][T17032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.564401][T17032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.637409][T17032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.878163][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.912113][T17340] veth0: entered promiscuous mode [ 342.970636][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.991341][T17342] netlink: 'syz.3.3112': attribute type 10 has an invalid length. [ 343.010722][T17032] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.046441][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.053663][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.063549][T17346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.115339][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.122568][T11632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.144987][T17350] netlink: 'syz.3.3116': attribute type 1 has an invalid length. [ 343.202996][T17350] bond10: entered promiscuous mode [ 343.209628][T17350] 8021q: adding VLAN 0 to HW filter on device bond10 [ 343.258852][T17348] veth0: entered promiscuous mode [ 343.275079][T17350] bond10: (slave bridge10): making interface the new active one [ 343.284813][T17350] bridge10: entered promiscuous mode [ 343.293220][T17350] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 343.436552][T17347] veth0: left promiscuous mode [ 343.634056][T17032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.721780][T17374] team0: Device gtp0 is up. Set it down before adding it as a team port [ 343.762368][T17340] veth0: left promiscuous mode [ 343.838671][ T52] Bluetooth: hci0: command tx timeout [ 343.899181][T17383] Bluetooth: MGMT ver 1.23 [ 343.918167][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.955949][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 343.971829][T17384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3123'. [ 344.070338][T17032] veth0_vlan: entered promiscuous mode [ 344.106438][T17032] veth1_vlan: entered promiscuous mode [ 344.132012][T17391] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.182687][T17391] bond11: Removing last arp target with arp_interval on [ 344.192467][T17394] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3128'. [ 344.235662][T17032] veth0_macvtap: entered promiscuous mode [ 344.261646][T17398] syzkaller1: entered promiscuous mode [ 344.267208][T17398] syzkaller1: entered allmulticast mode [ 344.305958][T17401] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 344.340993][T17032] veth1_macvtap: entered promiscuous mode [ 344.405731][T17405] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 344.414767][T17408] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 344.433515][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 344.468623][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 344.473799][T17032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.502443][T17032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.545572][T11629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.572596][T11629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.608610][T11629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.617508][T11629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.672818][T17420] veth0: entered promiscuous mode [ 344.694633][T17420] veth0: left promiscuous mode [ 344.735718][T17429] netlink: 'syz.3.3139': attribute type 1 has an invalid length. [ 344.798241][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.811179][T17429] bond12: entered promiscuous mode [ 344.816725][T17429] 8021q: adding VLAN 0 to HW filter on device bond12 [ 344.816815][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3139'. [ 344.928359][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.937705][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.945554][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.955380][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3139'. [ 344.958711][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.982538][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.017173][T17429] bond12: (slave bridge11): making interface the new active one [ 345.026123][T17429] bridge11: entered promiscuous mode [ 345.033560][T17429] bond12: (slave bridge11): Enslaving as an active interface with an up link [ 345.654490][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 345.680595][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 345.704647][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.721828][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.731189][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.749780][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.757829][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.000242][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.355064][T17495] team0: Port device team_slave_0 removed [ 346.429951][T17508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.452009][T17508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.489100][T17508] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 346.525195][T17518] netlink: 'syz.0.3165': attribute type 9 has an invalid length. [ 346.536640][T17518] netlink: 'syz.0.3165': attribute type 11 has an invalid length. [ 346.545032][T17518] netlink: 'syz.0.3165': attribute type 12 has an invalid length. [ 346.547448][T17508] bond0 (unregistering): Released all slaves [ 346.601022][ T6163] syz1: Port: 1 Link DOWN [ 346.832312][T17540] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 346.881800][T17540] tipc: MTU too low for tipc bearer [ 346.921759][T17486] lo speed is unknown, defaulting to 1000 [ 347.040076][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.194419][T17561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.264958][T17567] openvswitch: netlink: Missing key (keys=40, expected=80) [ 347.300579][T17567] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 347.322992][T17486] chnl_net:caif_netlink_parms(): no params data found [ 347.496340][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.507987][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.524149][T17583] __nla_validate_parse: 10 callbacks suppressed [ 347.524169][T17583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3182'. [ 347.541234][T17486] bridge_slave_0: entered allmulticast mode [ 347.559134][T17486] bridge_slave_0: entered promiscuous mode [ 347.570781][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.580034][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.588389][T17486] bridge_slave_1: entered allmulticast mode [ 347.596532][T17486] bridge_slave_1: entered promiscuous mode [ 347.636288][T17588] netlink: 'syz.2.3183': attribute type 83 has an invalid length. [ 347.647047][T17589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3183'. [ 347.672362][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.697903][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.779074][T17486] team0: Port device team_slave_0 added [ 347.789042][T17486] team0: Port device team_slave_1 added [ 347.838196][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.846647][ T52] Bluetooth: hci1: command tx timeout [ 347.856861][T17596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3185'. [ 347.869883][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.886238][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.912445][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.933092][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.940304][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.966901][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.080720][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.121304][T17486] hsr_slave_0: entered promiscuous mode [ 348.139017][T17486] hsr_slave_1: entered promiscuous mode [ 348.151731][T17486] debugfs: 'hsr0' already exists in 'hsr' [ 348.157507][T17486] Cannot create hsr debugfs directory [ 348.296205][T17619] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 348.434274][T17486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.467917][T17486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 59060 - 0 [ 348.622434][T17486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.649794][T17486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 59060 - 0 [ 348.681809][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 348.755343][T17486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.766731][T17486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 59060 - 0 [ 348.895532][T17486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.912482][T17486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 59060 - 0 [ 349.084274][T17665] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 349.122301][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.280588][T17673] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 349.305596][T17673] bond1 (unregistering): Released all slaves [ 349.325526][T17486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.347723][T17486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.362518][T17486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.403621][T17486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.473300][T17689] IPVS: length: 73 != 8 [ 349.631666][T17486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.649408][T17650] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 349.693002][T17706] xt_TCPMSS: Only works on TCP SYN packets [ 349.716760][T17486] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.791841][T11631] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.799102][T11631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.841418][T11631] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.848775][T11631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.918705][ T52] Bluetooth: hci1: command tx timeout [ 349.952899][T17706] Bluetooth: MGMT ver 1.23 [ 350.038804][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3220'. [ 350.081938][T17721] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 350.159858][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.301903][T17745] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3226'. [ 350.429794][T17486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.516573][T17755] xt_CONNSECMARK: invalid mode: 0 [ 350.526457][T17757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3230'. [ 350.530955][T17486] veth0_vlan: entered promiscuous mode [ 350.597485][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'. [ 350.614621][T17486] veth1_vlan: entered promiscuous mode [ 350.684223][T17755] macvtap1: entered promiscuous mode [ 350.691013][T17755] vlan0: entered promiscuous mode [ 350.699113][T17755] macvtap1: entered allmulticast mode [ 350.704699][T17755] vlan0: entered allmulticast mode [ 350.710333][T17755] veth0_vlan: entered allmulticast mode [ 350.860710][T17486] veth0_macvtap: entered promiscuous mode [ 350.888862][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.916937][T17486] veth1_macvtap: entered promiscuous mode [ 350.985057][T17779] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3237'. [ 350.986377][T17486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.029913][T17486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.063002][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.067473][T17783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3238'. [ 351.075371][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.094852][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.106729][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.142461][T17787] geneve2: entered promiscuous mode [ 351.152233][ T3553] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 49204 - 0 [ 351.164042][ T3553] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 49204 - 0 [ 351.197131][ T3553] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 49204 - 0 [ 351.208889][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.239879][ T3553] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 49204 - 0 [ 351.337518][T11632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.347529][T11632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.403286][T11632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.414548][T11632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.459470][T17795] netlink: 'syz.0.3241': attribute type 4 has an invalid length. [ 351.880439][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.890698][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.901795][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.910107][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.949913][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.973541][T17822] netlink: 'syz.3.3247': attribute type 4 has an invalid length. [ 351.997829][ T5835] Bluetooth: hci1: command tx timeout [ 352.113936][T17807] netlink: 'syz.1.3148': attribute type 5 has an invalid length. [ 352.181061][T17827] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 352.245819][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.448747][T17839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.540958][T17846] __nla_validate_parse: 10 callbacks suppressed [ 352.540978][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'. [ 352.595150][T17848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 353.056164][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3265'. [ 353.071279][T17878] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3262'. [ 353.086755][T17881] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3266'. [ 353.088749][T17876] vlan2: entered allmulticast mode [ 353.096317][T17879] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3262'. [ 353.138896][T17876] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 353.278187][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.387070][T17819] lo speed is unknown, defaulting to 1000 [ 353.579951][T17907] Bluetooth: MGMT ver 1.23 [ 353.630302][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 353.659808][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3278'. [ 353.662616][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 353.684947][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 353.696525][T17916] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3278'. [ 353.866934][T17819] chnl_net:caif_netlink_parms(): no params data found [ 353.928458][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.969084][T17924] syzkaller0: entered promiscuous mode [ 353.975882][T17924] syzkaller0: entered allmulticast mode [ 353.998727][ T5835] Bluetooth: hci2: command tx timeout [ 354.077938][ T5835] Bluetooth: hci1: command tx timeout [ 354.080213][T17935] netlink: 'syz.1.3284': attribute type 83 has an invalid length. [ 354.265960][T17819] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.286227][T17819] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.302233][T17819] bridge_slave_0: entered allmulticast mode [ 354.321299][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.339018][T17819] bridge_slave_0: entered promiscuous mode [ 354.368576][T17819] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.382243][T17819] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.396416][T17819] bridge_slave_1: entered allmulticast mode [ 354.412749][T17819] bridge_slave_1: entered promiscuous mode [ 354.451459][T17952] macsec1: entered promiscuous mode [ 354.460723][T17957] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 354.493827][T17819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.508341][T17819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.541250][T17960] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.550436][T17960] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.630265][T17819] team0: Port device team_slave_0 added [ 354.639695][T17971] netlink: 'syz.1.3293': attribute type 2 has an invalid length. [ 354.667558][T17819] team0: Port device team_slave_1 added [ 354.759005][T17819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.776247][T17819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.822628][T17819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.856339][T17819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.874655][T17819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.912644][T17819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.025696][T17819] hsr_slave_0: entered promiscuous mode [ 355.032192][T17819] hsr_slave_1: entered promiscuous mode [ 355.039517][T17819] debugfs: 'hsr0' already exists in 'hsr' [ 355.045277][T17819] Cannot create hsr debugfs directory [ 355.272261][T17819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.289445][T17819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.361766][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.433756][T17819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.448715][T18012] ip6t_srh: unknown srh match flags 4000 [ 355.452201][T17819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.593694][T17819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.606481][T17819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.650992][T18028] ip6t_srh: unknown srh match flags 5F3C [ 355.733302][T18033] netlink: 'syz.1.3315': attribute type 9 has an invalid length. [ 355.777072][T17819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.788208][T17819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.934197][T18042] netlink: 'syz.3.3316': attribute type 12 has an invalid length. [ 356.095626][ T52] Bluetooth: hci2: command tx timeout [ 356.102789][T17819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.174418][T18056] xt_hashlimit: size too large, truncated to 1048576 [ 356.178674][T17819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.206547][T17819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.220176][T17819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.250610][T18057] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 356.259372][T18057] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.398455][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.410395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aea8400: rx timeout, send abort [ 356.471497][T17819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.620178][T17819] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.643266][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.650592][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.701549][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.708825][T11632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.910773][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aea8800: rx timeout, send abort [ 356.919161][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aea8400: abort rx timeout. Force session deactivation [ 356.958942][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.192471][T18105] openvswitch: netlink: Flow actions attr not present in new flow. [ 357.252402][T17819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.296270][T18069] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 357.317829][T18069] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 357.419150][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aea8800: abort rx timeout. Force session deactivation [ 357.439835][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.478200][T17819] veth0_vlan: entered promiscuous mode [ 357.576045][T18115] __nla_validate_parse: 12 callbacks suppressed [ 357.576064][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'. [ 357.596553][T17819] veth1_vlan: entered promiscuous mode [ 357.660220][T18069] tipc: Resetting bearer [ 358.039171][T18069] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 358.045136][T18069] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 358.100624][T17819] veth0_macvtap: entered promiscuous mode [ 358.161102][ T52] Bluetooth: hci2: command 0x040f tx timeout [ 358.280340][T18069] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.286304][T18069] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 358.333646][T17819] veth1_macvtap: entered promiscuous mode [ 358.431188][T18069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.458409][T18069] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 358.471402][T17819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.499815][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.523087][T17819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.562866][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.583695][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.612006][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.673552][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.784019][T18174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3341'. [ 358.785547][T18069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.820793][T18139] wireguard0: entered promiscuous mode [ 358.826361][T18069] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 358.834393][T18139] wireguard0: entered allmulticast mode [ 359.280862][T18199] netlink: 'syz.4.3346': attribute type 33 has an invalid length. [ 359.303962][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.318076][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.387031][T18199] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 359.425921][T18199] bond2 (unregistering): Released all slaves [ 359.526203][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.540951][T18207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.563763][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.592066][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.961046][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'. [ 359.991737][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3244'. [ 360.001030][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.269088][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.279579][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.290564][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.316483][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.325806][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.446809][T18242] bond2: Removing last arp target with arp_interval on [ 360.560526][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.575176][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 360.672425][T18257] batadv_slave_0: entered promiscuous mode [ 360.961228][T18256] batadv_slave_0: left promiscuous mode [ 361.266720][T18290] veth0_to_bond: entered allmulticast mode [ 361.299965][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 361.313693][T18294] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3367'. [ 361.324821][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3366'. [ 361.391805][T18300] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 361.485259][T18307] Dead loop on virtual device ip6_vti0, fix it urgently! [ 361.506114][T18308] netlink: 'syz.4.3372': attribute type 7 has an invalid length. [ 361.581042][ T3569] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.590563][T18308] netlink: 'syz.4.3372': attribute type 7 has an invalid length. [ 361.598623][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.598822][ T3569] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.620702][ T3569] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.683250][ T3569] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.720051][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 361.730880][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 361.986123][T18234] lo speed is unknown, defaulting to 1000 [ 362.054510][T18342] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 362.100154][T18342] netlink: 'syz.1.3382': attribute type 11 has an invalid length. [ 362.352600][T18360] Cannot find add_set index 65532 as target [ 362.385997][T18367] veth0: entered promiscuous mode [ 362.397991][ T5835] Bluetooth: hci3: command tx timeout [ 362.649795][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.652669][ T95] block nbd2: Possible stuck request ffff888025440000: control (read@0,1024B). Runtime 90 seconds [ 362.668788][ T95] block nbd2: Possible stuck request ffff888025440200: control (read@1024,1024B). Runtime 90 seconds [ 362.680241][ T95] block nbd2: Possible stuck request ffff888025440400: control (read@2048,1024B). Runtime 90 seconds [ 362.692213][ T95] block nbd2: Possible stuck request ffff888025440600: control (read@3072,1024B). Runtime 90 seconds [ 362.696824][T18388] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.757072][T18392] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 362.759646][T18376] __nla_validate_parse: 2 callbacks suppressed [ 362.759666][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3389'. [ 362.793184][T18234] chnl_net:caif_netlink_parms(): no params data found [ 362.795356][T18388] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3391'. [ 363.048415][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.068677][T18405] netlink: 'syz.1.3394': attribute type 1 has an invalid length. [ 363.180199][T18405] bond1: entered promiscuous mode [ 363.208926][T18405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.318839][T18423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.338944][T18423] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 363.350141][T18432] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3398'. [ 363.366188][T18423] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 363.394578][T18423] bond1: (slave vti0): making interface the new active one [ 363.407248][T18423] vti0: entered promiscuous mode [ 363.415443][T18423] bond1: (slave vti0): Enslaving as an active interface with an up link [ 363.451919][T18234] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.467998][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.489177][T18234] bridge_slave_0: entered allmulticast mode [ 363.509307][T18234] bridge_slave_0: entered promiscuous mode [ 363.553799][T18234] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.587936][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.595858][T18234] bridge_slave_1: entered allmulticast mode [ 363.629532][T18234] bridge_slave_1: entered promiscuous mode [ 363.678814][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.800258][T18234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.851638][T18234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.988989][T18234] team0: Port device team_slave_0 added [ 364.005710][T18234] team0: Port device team_slave_1 added [ 364.090729][T18480] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.098075][T18480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.105652][T18480] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.112860][T18480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.158931][T18480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.189430][T18234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.196432][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.247120][T18234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.276291][T18485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.335680][T18234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.361364][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.419491][T18234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.479054][ T5835] Bluetooth: hci3: command tx timeout [ 364.509602][T18234] hsr_slave_0: entered promiscuous mode [ 364.516363][T18234] hsr_slave_1: entered promiscuous mode [ 364.524019][T18234] debugfs: 'hsr0' already exists in 'hsr' [ 364.530834][T18234] Cannot create hsr debugfs directory [ 364.722099][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.943640][T18525] netlink: 'syz.2.3420': attribute type 29 has an invalid length. [ 364.965257][T18525] netlink: 'syz.2.3420': attribute type 29 has an invalid length. [ 364.975509][T18525] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3420'. [ 365.011152][T18234] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.022454][T18234] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45743 - 0 [ 365.055376][ T5196] udevd[5196]: worker [5827] /devices/virtual/block/nbd2 is taking a long time [ 365.057690][T18234] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.175549][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'. [ 365.213874][T18533] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3423'. [ 365.256903][T18234] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.307764][T18234] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45743 - 0 [ 365.339433][T18234] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.378307][T18548] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3426'. [ 365.457547][T18234] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.477905][T18234] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45743 - 0 [ 365.490306][T18552] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3425'. [ 365.547861][T18234] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.564465][T18561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.670998][T18234] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.691030][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'. [ 365.721244][T18234] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45743 - 0 [ 365.742161][T18234] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.758824][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.800996][T18572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3431'. [ 366.083990][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.153422][T18234] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.186303][T18234] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.215256][T18234] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.243869][T18234] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.371268][T18596] syzkaller0: entered promiscuous mode [ 366.376875][T18596] syzkaller0: entered allmulticast mode [ 366.388611][T18607] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 366.451222][T18612] bond1: entered promiscuous mode [ 366.497244][T18625] sctp: [Deprecated]: syz.1.3444 (pid 18625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.497244][T18625] Use struct sctp_sack_info instead [ 366.568418][ T5835] Bluetooth: hci3: command tx timeout [ 366.804425][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.839759][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.157523][T18631] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.165281][T18631] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.233162][T18638] __nla_validate_parse: 6 callbacks suppressed [ 368.233182][T18638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3449'. [ 368.255061][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 368.337329][T18642] netlink: 'syz.1.3450': attribute type 9 has an invalid length. [ 368.397191][T18234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.404606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.474913][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 368.498654][T18234] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.500048][T18650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3453'. [ 368.510626][T18642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.526558][T18642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.563726][T18642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.586866][T18642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.637758][ T5835] Bluetooth: hci3: command tx timeout [ 368.639683][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.650391][T11630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.662429][T18657] netlink: 'syz.4.3456': attribute type 18 has an invalid length. [ 368.677342][T18658] netlink: 'syz.4.3456': attribute type 18 has an invalid length. [ 368.680092][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.692359][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.805098][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 368.822101][T18663] bridge_slave_1: left allmulticast mode [ 368.838440][T18663] bridge_slave_1: left promiscuous mode [ 368.846127][T18663] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.856271][T18663] bridge_slave_0: left allmulticast mode [ 368.862121][T18663] bridge_slave_0: left promiscuous mode [ 368.868251][T18663] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.879307][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.911499][T18668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3459'. [ 369.096134][T18674] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:20004 [ 369.120647][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.221670][T18682] bond2: option all_slaves_active: invalid value (222) [ 369.273075][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3464'. [ 369.506066][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3464'. [ 369.918162][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.964754][T18682] bond2 (unregistering): Released all slaves [ 370.000284][T18679] bond2: option all_slaves_active: invalid value (222) [ 370.019154][T18679] bond2 (unregistering): Released all slaves [ 370.126100][T18701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3466'. [ 370.145429][T18703] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3466'. [ 370.171721][T18234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.214184][T18707] netlink: 'syz.0.3467': attribute type 1 has an invalid length. [ 370.351016][T18718] netlink: 'syz.2.3471': attribute type 24 has an invalid length. [ 370.370185][T18234] veth0_vlan: entered promiscuous mode [ 370.385798][T18234] veth1_vlan: entered promiscuous mode [ 370.423340][T18720] syzkaller1: entered promiscuous mode [ 370.443292][T18720] syzkaller1: entered allmulticast mode [ 370.459850][T18720] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 370.536571][T18234] veth0_macvtap: entered promiscuous mode [ 370.574334][T18234] veth1_macvtap: entered promiscuous mode [ 370.666806][T18234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.766287][T18234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.803431][ T3553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.851225][ T3553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.880969][ T3553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.897935][ T3553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.968859][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.131396][T11629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.155934][T11629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.266973][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.296731][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.547951][T18792] netlink: 'syz.0.3491': attribute type 12 has an invalid length. [ 371.999585][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.006611][T18819] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 372.158659][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.489829][T18844] syzkaller0: entered promiscuous mode [ 372.497000][T18844] syzkaller0: entered allmulticast mode [ 372.531372][T18849] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 372.544122][ T30] audit: type=1107 audit(1770513625.834:5): pid=18854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 372.630202][T18861] netlink: 'syz.4.3514': attribute type 39 has an invalid length. [ 372.943924][T18871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.038258][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.083120][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.569916][T18879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.859338][T18898] netem: change failed [ 374.942290][T18907] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.950003][T18907] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.000205][T18909] netlink: 'syz.0.3530': attribute type 12 has an invalid length. [ 375.038704][T18909] netlink: 'syz.0.3530': attribute type 29 has an invalid length. [ 375.051465][T18909] __nla_validate_parse: 39 callbacks suppressed [ 375.051480][T18909] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3530'. [ 375.057189][T18913] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3532'. [ 375.065962][T18909] netlink: 'syz.0.3530': attribute type 2 has an invalid length. [ 375.089541][T18909] netlink: 'syz.0.3530': attribute type 3 has an invalid length. [ 375.097457][T18909] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3530'. [ 375.107025][T18846] lo speed is unknown, defaulting to 1000 [ 375.115758][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3532'. [ 375.119229][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.202624][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.159141][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.198422][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.230158][T18925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.241260][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.251096][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.443674][T18978] º: renamed from vxcan1 (while UP) [ 378.465036][T18977] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3546'. [ 378.572413][T18985] netlink: 'syz.2.3551': attribute type 4 has an invalid length. [ 378.598479][T18985] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3551'. [ 378.624491][T18990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.643484][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.653680][T18992] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3554'. [ 378.676767][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3555'. [ 378.687356][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3555'. [ 378.701755][T18990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'. [ 378.865840][T19005] netlink: 'syz.2.3557': attribute type 61 has an invalid length. [ 379.251584][T19036] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 379.294363][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.363190][T19040] openvswitch: netlink: Message has 4 unknown bytes. [ 379.519675][T19052] netlink: 'syz.3.3573': attribute type 11 has an invalid length. [ 379.764050][T19070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.771392][T19070] IPv6: NLM_F_CREATE should be set when creating new route [ 379.778697][T19070] IPv6: NLM_F_CREATE should be set when creating new route [ 379.817955][T19070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.268157][T19107] __nla_validate_parse: 7 callbacks suppressed [ 380.268177][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3586'. [ 380.323362][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.385694][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 380.420972][T19107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3586'. [ 380.602704][T19132] delete_channel: no stack [ 380.699486][T19136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3592'. [ 380.711098][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 380.727347][T19139] openvswitch: netlink: EtherType 50a is less than min 600 [ 380.741230][T19143] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3595'. [ 380.774965][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'. [ 380.831118][T19150] netlink: 'syz.0.3596': attribute type 1 has an invalid length. [ 380.856065][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3597'. [ 380.941430][T19150] bond1: entered promiscuous mode [ 380.950278][T19150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.983567][T19167] netlink: 'syz.2.3601': attribute type 3 has an invalid length. [ 381.012872][T19167] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3601'. [ 381.033615][T19173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3599'. [ 381.049474][T19164] bond1: (slave bridge1): making interface the new active one [ 381.057014][T19164] bridge1: entered promiscuous mode [ 381.075567][T19164] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 381.095026][T19176] erspan0: entered promiscuous mode [ 381.185128][T19181] bond2: option min_links: invalid value (18446744073709551614) [ 381.196106][T19186] netlink: 'syz.2.3605': attribute type 6 has an invalid length. [ 381.212430][T19181] bond2: option min_links: allowed values 0 - 2147483647 [ 381.223231][T19181] bond2 (unregistering): Released all slaves [ 381.242422][T19187] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.249737][T19187] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.288599][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.358922][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.398183][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.438813][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.318761][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.478692][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.518232][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.559697][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.357991][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.600308][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.638703][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.678766][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.398849][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.719285][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.758433][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.720099][ T95] block nbd2: Possible stuck request ffff888025440000: control (read@0,1024B). Runtime 120 seconds [ 392.730877][ T95] block nbd2: Possible stuck request ffff888025440200: control (read@1024,1024B). Runtime 120 seconds [ 392.741911][ T95] block nbd2: Possible stuck request ffff888025440400: control (read@2048,1024B). Runtime 120 seconds [ 392.753049][ T95] block nbd2: Possible stuck request ffff888025440600: control (read@3072,1024B). Runtime 120 seconds [ 392.799586][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.448079][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.839006][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.879115][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.919372][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.478526][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.958111][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.998878][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.040043][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.528321][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.078105][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.118721][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.159289][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.558557][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.198774][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.242943][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.381104][T19193] bond0: entered promiscuous mode [ 404.407211][T19193] bond_slave_0: entered promiscuous mode [ 404.438937][T19193] bond_slave_1: entered promiscuous mode [ 404.448373][T19204] __nla_validate_parse: 4 callbacks suppressed [ 404.448390][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3613'. [ 404.485019][T19201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3610'. [ 404.542344][T19207] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3614'. [ 404.700812][T19213] netlink: 'syz.1.3617': attribute type 1 has an invalid length. [ 404.713989][T19213] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3617'. [ 404.727046][T19215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.807327][T19220] netlink: 'syz.0.3620': attribute type 83 has an invalid length. [ 404.898141][T19225] x_tables: duplicate entry at hook 2 [ 405.065734][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3626'. [ 405.277998][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.412924][T19270] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 405.416662][T19268] netlink: 'syz.4.3633': attribute type 10 has an invalid length. [ 405.428234][T19268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3633'. [ 405.431277][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 405.439883][T19268] dummy0: entered promiscuous mode [ 405.453105][T19268] bridge0: port 3(dummy0) entered blocking state [ 405.460032][T19268] bridge0: port 3(dummy0) entered disabled state [ 405.466766][T19268] dummy0: entered allmulticast mode [ 405.480259][T19268] dummy0: left allmulticast mode [ 405.485913][T19268] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 405.585792][T19278] netlink: 'syz.2.3635': attribute type 1 has an invalid length. [ 405.601958][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.688268][T19282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.697017][T19282] bond2: (slave bond3): making interface the new active one [ 405.705715][T19282] bond2: (slave bond3): Enslaving as an active interface with an up link [ 405.727573][T19280] 8021q: VLANs not supported on xfrm0 [ 405.921254][T19293] wireguard: wg1: Could not create IPv4 socket [ 406.253561][T19310] netlink: 'syz.1.3646': attribute type 1 has an invalid length. [ 406.314893][T19316] netlink: 'syz.4.3644': attribute type 1 has an invalid length. [ 406.323570][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.347471][T19320] netlink: 'syz.4.3644': attribute type 1 has an invalid length. [ 406.360927][T19310] bond3: (slave veth3): Enslaving as an active interface with a down link [ 406.426159][T19310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3646'. [ 406.444024][T19316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.491629][T19310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.586339][T19336] netlink: 'syz.0.3652': attribute type 4 has an invalid length. [ 406.594294][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3651'. [ 406.666033][T19344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3654'. [ 406.676123][T19345] syzkaller1: entered promiscuous mode [ 406.676145][T19345] syzkaller1: entered allmulticast mode [ 406.833565][T19355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.927345][T19317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.263578][T19383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.267037][T19359] vlan0 (unregistering): left allmulticast mode [ 407.280381][T19359] veth0_vlan (unregistering): left allmulticast mode [ 407.287227][T19359] vlan0 (unregistering): left promiscuous mode [ 407.358989][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.874873][T19397] Cannot find del_set index 0 as target [ 408.405655][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.640303][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.690703][T19456] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 409.461301][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.534229][T19520] __nla_validate_parse: 4 callbacks suppressed [ 409.534250][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3713'. [ 409.562272][T19523] lo: entered promiscuous mode [ 409.585721][T19523] netlink: 'syz.3.3714': attribute type 2 has an invalid length. [ 409.606560][T19523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.813940][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3718'. [ 409.834659][T19540] syzkaller1: entered promiscuous mode [ 409.844052][T19540] syzkaller1: entered allmulticast mode [ 409.854943][T19540] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3718'. [ 410.122320][T19563] syzkaller0: entered promiscuous mode [ 410.172014][T19563] syzkaller0: entered allmulticast mode [ 410.474288][T19578] bond0: (slave bond_slave_0): Releasing backup interface [ 410.483238][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.494727][T19578] bond_slave_0: left promiscuous mode [ 410.507094][T19578] bond0: (slave bond_slave_1): Releasing backup interface [ 410.523402][T19578] bond_slave_1: left promiscuous mode [ 410.541800][T19578] team0: Port device team_slave_0 removed [ 410.582495][T19578] team0: Port device team_slave_1 removed [ 410.602852][T19578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.628587][T19578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.645204][T19578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.655416][T19578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.665652][T19578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 410.941273][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 411.000201][T19630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3742'. [ 411.030447][T19623] bridge0: entered promiscuous mode [ 411.037233][T19623] macsec1: entered promiscuous mode [ 411.063740][T19623] macsec1: entered allmulticast mode [ 411.078936][T19623] bridge0: entered allmulticast mode [ 411.099203][T19623] bridge0: port 3(macsec1) entered blocking state [ 411.115076][T19623] bridge0: port 3(macsec1) entered disabled state [ 411.189393][T19623] bridge0: left allmulticast mode [ 411.202221][T19623] bridge0: left promiscuous mode [ 411.391352][T19653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.423014][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3750'. [ 411.459253][T19656] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3751'. [ 411.498828][T19661] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3752'. [ 411.524925][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.666025][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 411.679868][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.695997][T19675] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3756'. [ 412.024494][T19704] Cannot find add_set index 2 as target [ 412.263720][T19720] xt_hashlimit: size too large, truncated to 1048576 [ 412.561749][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.913397][T19752] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 413.035567][T19749] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.042875][T19749] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.430854][T19780] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 413.517212][T19782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.599111][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.614204][T19782] netlink: 'syz.3.3791': attribute type 29 has an invalid length. [ 413.744649][T19797] bond0: (slave gre0): Error: Device type is different from other slaves [ 413.746356][T19799] netlink: 'syz.1.3798': attribute type 1 has an invalid length. [ 413.770063][T19799] netlink: 'syz.1.3798': attribute type 2 has an invalid length. [ 413.805555][T19797] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 413.942845][T19814] xt_cluster: node mask cannot exceed total number of nodes [ 414.111563][T19817] erspan0: entered promiscuous mode [ 414.122091][T19817] erspan0: entered allmulticast mode [ 414.172950][T19827] netlink: 'syz.3.3805': attribute type 2 has an invalid length. [ 414.199166][T19827] netlink: 'syz.3.3805': attribute type 2 has an invalid length. [ 414.207111][T19827] netlink: 'syz.3.3805': attribute type 2 has an invalid length. [ 414.224214][T19827] netlink: 'syz.3.3805': attribute type 2 has an invalid length. [ 414.251241][T19827] netlink: 'syz.3.3805': attribute type 1 has an invalid length. [ 414.639619][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.714444][T19855] __nla_validate_parse: 20 callbacks suppressed [ 414.714463][T19855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3813'. [ 414.735590][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.744339][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'. [ 414.765028][T19856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3812'. [ 414.861689][T19862] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3817'. [ 415.196021][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 415.242726][T19897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3826'. [ 415.316040][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3829'. [ 415.321162][T19907] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3830'. [ 415.356544][T19911] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3830'. [ 415.380587][T19907] sctp: [Deprecated]: syz.3.3830 (pid 19907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.380587][T19907] Use struct sctp_sack_info instead [ 415.401051][T19902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3828'. [ 415.461673][T19908] geneve3: entered promiscuous mode [ 415.477866][T19908] geneve3: entered allmulticast mode [ 415.524286][T19921] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 415.677989][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.078173][T19948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.144636][T19948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.149133][T19960] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 416.188032][T19948] bond0 (unregistering): Released all slaves [ 416.203923][T19968] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 416.353443][T19978] vlan3: entered promiscuous mode [ 416.385826][T19978] vlan3: entered allmulticast mode [ 416.415601][T19978] hsr_slave_1: entered allmulticast mode [ 416.470607][T19997] sctp: [Deprecated]: syz.0.3848 (pid 19997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.470607][T19997] Use struct sctp_sack_info instead [ 416.643153][ T6162] IPVS: starting estimator thread 0... [ 416.655584][T20000] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 416.718130][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.729965][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.738399][T20007] IPVS: using max 31 ests per chain, 74400 per kthread [ 416.739546][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.948618][T20019] syzkaller0: entered promiscuous mode [ 416.954143][T20019] syzkaller0: entered allmulticast mode [ 416.979459][ T5491] veth0_vlan: left promiscuous mode [ 417.027539][ T5491] veth0_vlan: entered promiscuous mode [ 417.610479][T20065] tipc: Started in network mode [ 417.617139][T20065] tipc: Node identity 0000000000000000ffff, cluster identity 4711 [ 417.922595][T20081] validate_nla: 5 callbacks suppressed [ 417.922616][T20081] netlink: 'syz.4.3873': attribute type 29 has an invalid length. [ 418.176499][T20101] netlink: 'syz.3.3881': attribute type 7 has an invalid length. [ 418.365071][T20119] netlink: 'syz.1.3885': attribute type 1 has an invalid length. [ 419.844730][T20218] syzkaller0: entered promiscuous mode [ 419.862407][T20218] syzkaller0: entered allmulticast mode [ 419.921425][T13161] net_ratelimit: 5 callbacks suppressed [ 419.921442][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.982127][T20221] __nla_validate_parse: 24 callbacks suppressed [ 419.982148][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'. [ 420.005718][T20160] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 420.005912][T20221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3910'. [ 420.111094][T20229] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3912'. [ 420.127306][T20229] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3912'. [ 420.141067][T20229] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3912'. [ 420.150635][T20232] : renamed from bridge_slave_1 (while UP) [ 420.187980][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3913'. [ 420.329706][T20235] netlink: 'syz.1.3915': attribute type 2 has an invalid length. [ 420.345511][T20235] netlink: 'syz.1.3915': attribute type 4 has an invalid length. [ 420.478562][ T5835] Bluetooth: hci3: command tx timeout [ 420.504264][T20245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3917'. [ 420.803042][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.847980][T20223] lo speed is unknown, defaulting to 1000 [ 420.960018][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.219579][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 421.256636][T20282] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3928'. [ 421.286677][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 421.355325][T20288] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 421.997924][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.120494][T20338] netlink: 'syz.1.3942': attribute type 6 has an invalid length. [ 422.144526][T20333] netlink: 'syz.4.3941': attribute type 1 has an invalid length. [ 422.159169][ T6958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.168210][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.179579][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.404816][T20356] netlink: 'syz.3.3948': attribute type 1 has an invalid length. [ 422.496198][T20367] vlan5: entered promiscuous mode [ 422.516760][T20367] geneve1: entered promiscuous mode [ 422.525566][T20367] vlan5: entered allmulticast mode [ 422.532152][T20367] geneve1: entered allmulticast mode [ 422.629695][T20378] Bluetooth: MGMT ver 1.23 [ 422.805607][ T95] block nbd2: Possible stuck request ffff888025440000: control (read@0,1024B). Runtime 150 seconds [ 422.811552][T20389] sctp: [Deprecated]: syz.0.3957 (pid 20389) Use of int in max_burst socket option. [ 422.811552][T20389] Use struct sctp_assoc_value instead [ 422.816733][ T95] block nbd2: Possible stuck request ffff888025440200: control (read@1024,1024B). Runtime 150 seconds [ 422.842345][ T95] block nbd2: Possible stuck request ffff888025440400: control (read@2048,1024B). Runtime 150 seconds [ 422.853758][ T95] block nbd2: Possible stuck request ffff888025440600: control (read@3072,1024B). Runtime 150 seconds [ 423.000675][T20400] netlink: 'syz.3.3961': attribute type 30 has an invalid length. [ 423.101964][T20407] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 423.203152][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.504546][T20437] netlink: 'syz.4.3969': attribute type 12 has an invalid length. [ 423.601596][T20439] syzkaller0: entered promiscuous mode [ 423.610145][T20439] syzkaller0: entered allmulticast mode [ 423.626726][T20442] netlink: 'syz.1.3970': attribute type 10 has an invalid length. [ 423.657300][T20444] netlink: 'syz.2.3971': attribute type 1 has an invalid length. [ 423.666540][T20444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.673841][T20444] IPv6: NLM_F_CREATE should be set when creating new route [ 423.755904][T20447] bridge0: entered allmulticast mode [ 423.839732][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.940084][T20459] tipc: Enabling of bearer rejected, failed to enable media [ 424.641615][T20476] pim6reg1: entered promiscuous mode [ 424.656282][T20476] pim6reg1: entered allmulticast mode [ 424.859200][T20491] netlink: 'syz.1.3987': attribute type 3 has an invalid length. [ 424.935494][T20491] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 424.944105][T20491] bond4: option packets_per_slave: allowed values 0 - 65535 [ 424.971259][T20491] bond4 (unregistering): Released all slaves [ 425.126637][T20503] __nla_validate_parse: 17 callbacks suppressed [ 425.126654][T20503] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3990'. [ 425.161487][T20502] net_ratelimit: 1 callbacks suppressed [ 425.161505][T20502] openvswitch: netlink: Missing valid actions attribute. [ 425.175563][T20503] openvswitch: netlink: Missing valid actions attribute. [ 425.184704][T20502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.193748][T20503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.281514][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.311387][T20514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3994'. [ 425.496499][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3998'. [ 425.764056][T20542] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 425.849964][T20552] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 425.954548][T20553] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.4004'. [ 425.955235][T20555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4006'. [ 425.978279][T20553] netlink: Conntrack attr has 4 unknown bytes [ 425.984708][T20555] netlink: 'syz.0.4006': attribute type 1 has an invalid length. [ 425.995855][T20555] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4006'. [ 426.006653][T20555] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4006'. [ 426.016277][T20555] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4006'. [ 426.045568][T20553] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4004'. [ 426.194350][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4008'. [ 426.319610][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.512606][T20582] netlink: 'syz.0.4013': attribute type 29 has an invalid length. [ 426.540521][T20582] netlink: 'syz.0.4013': attribute type 29 has an invalid length. [ 426.571605][T20587] netlink: 'syz.4.4015': attribute type 9 has an invalid length. [ 426.647140][T20590] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 426.680197][T20590] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 426.701885][T20590] gretap1: entered promiscuous mode [ 426.707496][T20590] gretap1: entered allmulticast mode [ 426.878062][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.920415][T20602] netlink: 'syz.4.4020': attribute type 10 has an invalid length. [ 426.928532][T20602] bridge0: port 3(team0) entered blocking state [ 426.934902][T20602] bridge0: port 3(team0) entered disabled state [ 426.942520][T20602] team0: entered allmulticast mode [ 426.955354][T20602] team_slave_0: entered allmulticast mode [ 426.973256][T20602] team_slave_1: entered allmulticast mode [ 427.002344][T20602] team0: entered promiscuous mode [ 427.017818][T20602] team_slave_0: entered promiscuous mode [ 427.032156][T20602] team_slave_1: entered promiscuous mode [ 427.279862][T20134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.316166][T20686] validate_nla: 7 callbacks suppressed [ 428.316185][T20686] netlink: 'syz.4.4043': attribute type 29 has an invalid length. [ 428.363196][T20684] netlink: 'syz.4.4043': attribute type 29 has an invalid length. [ 428.381174][T20686] netlink: 'syz.4.4043': attribute type 29 has an invalid length. [ 428.555184][T20657] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 428.686414][T20703] netlink: 'syz.4.4050': attribute type 12 has an invalid length. [ 428.730393][T20703] netlink: 'syz.4.4050': attribute type 11 has an invalid length. [ 428.937200][T20723] netlink: 'syz.4.4057': attribute type 10 has an invalid length. [ 429.662161][T20770] Bluetooth: MGMT ver 1.23 [ 429.694443][T20771] netlink: 'syz.4.4068': attribute type 16 has an invalid length. [ 430.093284][T13161] hid-generic 0005:4C4A:5508.0003: item fetching failed at offset 0/1 [ 430.120409][T20790] ipt_REJECT: TCP_RESET invalid for non-tcp [ 430.134664][T13161] hid-generic 0005:4C4A:5508.0003: probe with driver hid-generic failed with error -22 [ 430.276438][T20798] bond4: ARP target 1.0.0.0 is already present [ 430.333198][T20798] bond4: option arp_ip_target: invalid value (1) [ 430.382356][T20798] bond4 (unregistering): Released all slaves [ 430.398928][T13161] net_ratelimit: 8 callbacks suppressed [ 430.398944][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.474733][T20805] __nla_validate_parse: 27 callbacks suppressed [ 430.474752][T20805] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4078'. [ 430.626536][T20810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4079'. [ 430.889383][T20816] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 430.899888][T20816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4080'. [ 431.052153][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4084'. [ 431.273807][T20846] xt_addrtype: ipv6 does not support BROADCAST matching [ 431.308840][T20846] syzkaller0: entered allmulticast mode [ 431.441656][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.904976][T20882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4097'. [ 432.016663][T20890] netlink: 516 bytes leftover after parsing attributes in process `syz.4.4100'. [ 432.050572][T20889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4099'. [ 432.480336][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.579496][T20921] netlink: 'syz.1.4108': attribute type 10 has an invalid length. [ 432.590314][T20921] bridge0: port 2() entered disabled state [ 432.597096][T20921] : left allmulticast mode [ 432.607923][T20920] netlink: 'syz.0.4109': attribute type 3 has an invalid length. [ 432.623849][T20921] : left promiscuous mode [ 432.648060][T20921] bridge0: port 2() entered disabled state [ 432.689006][T20921] bond0: (slave ): Enslaving as an active interface with an up link [ 432.822497][T20925] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 432.831959][T20925] IPVS: nq: FWM 3 0x00000003 - no destination available [ 432.958064][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.977342][T20922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.987071][T20938] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 432.989674][T20939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4113'. [ 433.038716][ T2912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.049420][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.065506][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4114'. [ 433.090403][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.200002][T20948] vlan6: entered allmulticast mode [ 433.205176][T20948] hsr0: entered allmulticast mode [ 433.245741][T20948] hsr_slave_0: entered allmulticast mode [ 433.627550][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4121'. [ 433.663014][T20968] netlink: 'syz.1.4123': attribute type 1 has an invalid length. [ 433.994357][T20982] netlink: 'syz.3.4127': attribute type 11 has an invalid length. [ 434.153351][T20977] team_slave_0 (unregistering): left promiscuous mode [ 434.158956][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 434.167348][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.167634][T20977] team_slave_0 (unregistering): left allmulticast mode [ 434.217560][T20977] team0: Port device team_slave_0 removed [ 434.289812][T20980] bond5: Unable to set up delay as MII monitoring is disabled [ 434.343559][T20980] bond5 (unregistering): Released all slaves [ 434.492017][T20983] gretap0: entered promiscuous mode [ 434.944624][T21026] netlink: 'syz.2.4137': attribute type 10 has an invalid length. [ 435.002602][T21026] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.032227][T21026] team0: entered promiscuous mode [ 435.048539][T21026] bond0: (slave team0): Enslaving as an active interface with an up link [ 435.202586][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.211734][T21037] netlink: 'syz.1.4141': attribute type 1 has an invalid length. [ 435.332173][T21037] bond4: entered promiscuous mode [ 435.359188][T21037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 435.660381][T21056] __nla_validate_parse: 5 callbacks suppressed [ 435.660399][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4148'. [ 435.888760][T21074] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 435.910054][T21074] bond5: option packets_per_slave: allowed values 0 - 65535 [ 435.932676][T21074] bond5 (unregistering): Released all slaves [ 435.999963][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.076007][T21097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4158'. [ 436.240050][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.395346][T21111] smc: removing ib device syz0 [ 436.450950][T21114] netlink: 'syz.0.4166': attribute type 1 has an invalid length. [ 436.461110][T21114] netlink: 'syz.0.4166': attribute type 21 has an invalid length. [ 436.477722][T21114] netlink: 'syz.0.4166': attribute type 1 has an invalid length. [ 436.489478][T21116] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4165'. [ 437.300505][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.318727][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.039496][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.359908][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.083230][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.399612][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.438750][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.077966][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.478961][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.519260][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.558863][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.117935][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.597983][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.639498][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.678908][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.159051][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.717964][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.758059][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.798726][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.198026][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.839026][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.882733][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.887699][ T95] block nbd2: Possible stuck request ffff888025440000: control (read@0,1024B). Runtime 180 seconds [ 452.902241][ T95] block nbd2: Possible stuck request ffff888025440200: control (read@1024,1024B). Runtime 180 seconds [ 452.913286][ T95] block nbd2: Possible stuck request ffff888025440400: control (read@2048,1024B). Runtime 180 seconds [ 452.924310][ T95] block nbd2: Possible stuck request ffff888025440600: control (read@3072,1024B). Runtime 180 seconds [ 453.378911][ T5196] udevd[5196]: worker [5827] /devices/virtual/block/nbd2 timeout; kill it [ 453.389271][ T5196] udevd[5196]: seq 18197 '/devices/virtual/block/nbd2' killed [ 453.918943][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.241466][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.958875][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.999002][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.591588][T21123] bond5 (unregistering): Released all slaves [ 456.956999][T21160] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 456.983671][T21158] syzkaller0: entered promiscuous mode [ 456.990439][T21158] syzkaller0: entered allmulticast mode [ 457.037954][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.278158][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.705583][T21195] xt_CT: No such helper "syz1" [ 457.841037][T21209] openvswitch: netlink: Key type 31 is not supported [ 457.896331][T21213] siw: device registration error -23 [ 457.906505][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4187'. [ 458.078792][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.096736][T21227] netlink: 'syz.3.4188': attribute type 3 has an invalid length. [ 458.116381][T21227] netlink: 'syz.3.4188': attribute type 1 has an invalid length. [ 458.153239][T21216] netlink: 'syz.3.4188': attribute type 1 has an invalid length. [ 458.161870][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4189'. [ 458.397502][T21223] lo speed is unknown, defaulting to 1000 [ 458.591010][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4199'. [ 458.626546][T21247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4197'. [ 458.849491][T21259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4202'. [ 458.934108][T21263] syzkaller1: entered promiscuous mode [ 458.940968][T21263] syzkaller1: entered allmulticast mode [ 458.954104][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4203'. [ 458.966746][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4203'. [ 458.976389][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4203'. [ 458.987162][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4203'. [ 459.003767][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4203'. [ 459.095790][T21271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.131854][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.703552][T21323] vxcan4: entered allmulticast mode [ 459.833002][T21330] tipc: Started in network mode [ 459.838937][T21330] tipc: Node identity 7206126feb53, cluster identity 4711 [ 459.846503][T21330] tipc: Enabled bearer , priority 0 [ 459.933405][T21330] syzkaller0: entered promiscuous mode [ 459.949295][T21330] syzkaller0: entered allmulticast mode [ 459.960972][T21330] tipc: Resetting bearer [ 460.117363][T21328] tipc: Resetting bearer [ 460.169401][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.202047][T21345] netlink: 'syz.0.4228': attribute type 3 has an invalid length. [ 460.321063][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.201462][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.990545][T21328] tipc: Disabling bearer [ 462.025941][T21348] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 462.048994][ T6160] tipc: Node number set to 2572489327 [ 462.213536][T21363] netlink: 'syz.2.4235': attribute type 2 has an invalid length. [ 462.238901][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.341695][T21372] bond2: (slave ip6tnl0): Device is not bonding slave [ 462.354531][T21372] bond2: option active_slave: invalid value (ip6tnl0) [ 462.364123][T21372] bond2 (unregistering): Released all slaves [ 462.410619][T21377] IPVS: nq: FWM 3 0x00000003 - no destination available [ 462.763824][T21402] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 462.779557][T21402] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 462.922324][T21413] netlink: zone id is out of range [ 462.927906][T21413] netlink: zone id is out of range [ 462.933196][T21413] netlink: zone id is out of range [ 462.941381][T21413] netlink: zone id is out of range [ 462.946935][T21413] netlink: zone id is out of range [ 462.952700][T21413] netlink: zone id is out of range [ 462.958685][T21413] netlink: zone id is out of range [ 462.963954][T21413] netlink: zone id is out of range [ 463.236517][T21425] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 463.303676][T21434] __nla_validate_parse: 71 callbacks suppressed [ 463.303696][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4253'. [ 463.711288][T21451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4259'. [ 463.722862][T21451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4259'. [ 463.735457][T21451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4259'. [ 463.746665][T21451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4259'. [ 463.757169][T21451] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4259'. [ 463.922634][T21466] netlink: 'syz.0.4265': attribute type 1 has an invalid length. [ 463.941309][T21466] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4265'. [ 463.991315][T21464] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 464.091919][T21481] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 1, id = 0 [ 464.111963][T21477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4271'. [ 464.115096][T21480] sch_fq: defrate 0 ignored. [ 464.172002][T21477] netlink: 'syz.4.4271': attribute type 1 has an invalid length. [ 464.182588][T21477] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 464.295548][T21501] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4274'. [ 464.325180][T21498] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4275'. [ 464.510022][T21511] syzkaller0: entered promiscuous mode [ 464.516842][T21511] syzkaller0: entered allmulticast mode [ 464.745172][T21524] syzkaller0: entered promiscuous mode [ 464.751380][T21524] syzkaller0: entered allmulticast mode [ 465.082456][T21553] Cannot find add_set index 65532 as target [ 465.308441][T21542] lo speed is unknown, defaulting to 1000 [ 467.270537][T21565] net_ratelimit: 57 callbacks suppressed [ 467.270552][T21565] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 467.435553][T21587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.449908][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.807189][T21605] syzkaller0: entered promiscuous mode [ 467.825924][T21605] syzkaller0: entered allmulticast mode [ 468.051621][T21620] gretap0: entered promiscuous mode [ 468.060567][T21617] netlink: 'syz.0.4309': attribute type 39 has an invalid length. [ 468.195920][T21632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.334426][T21638] netlink: 'syz.2.4316': attribute type 10 has an invalid length. [ 468.375490][T21638] dummy0: entered promiscuous mode [ 468.384535][T21638] team0: Port device dummy0 added [ 468.420743][T21638] xt_hashlimit: size too large, truncated to 1048576 [ 468.503940][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.692670][T21669] x_tables: duplicate underflow at hook 2 [ 468.697533][T21672] __nla_validate_parse: 17 callbacks suppressed [ 468.699762][T21672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4327'. [ 468.720962][T21669] x_tables: duplicate underflow at hook 1 [ 468.728784][T21669] netlink: 'syz.3.4325': attribute type 4 has an invalid length. [ 468.751673][T21669] netlink: 'syz.3.4325': attribute type 4 has an invalid length. [ 469.269872][T21710] gre1: entered promiscuous mode [ 469.277542][T21710] gre1: entered allmulticast mode [ 469.420621][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4342'. [ 469.439925][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.461781][T21727] netlink: 'syz.4.4342': attribute type 11 has an invalid length. [ 469.508375][T21727] openvswitch: netlink: Missing key (keys=40, expected=80) [ 469.519719][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.623790][T21742] delete_channel: no stack [ 469.826136][T21753] netlink: 'syz.4.4349': attribute type 10 has an invalid length. [ 470.015064][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4351'. [ 470.565964][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.596402][T21799] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4363'. [ 470.869038][T21813] gretap0: entered allmulticast mode [ 471.065651][T21823] syzkaller1: entered promiscuous mode [ 471.076631][T21823] syzkaller1: entered allmulticast mode [ 471.119792][T21827] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4372'. [ 471.134962][T21821] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 471.167392][T21821] team0: Port device batadv1 added [ 471.406555][T21840] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4379'. [ 471.431858][T21844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.436715][T21845] netlink: 'syz.1.4382': attribute type 11 has an invalid length. [ 471.503883][T21845] netlink: 'syz.1.4382': attribute type 11 has an invalid length. [ 471.525436][T21853] syzkaller0: entered promiscuous mode [ 471.533040][T21845] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4382'. [ 471.535137][T21857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'. [ 471.542690][T21853] syzkaller0: entered allmulticast mode [ 471.563548][T21845] tipc: Started in network mode [ 471.568950][T21845] tipc: Node identity 96f6d6aa430d, cluster identity 4711 [ 471.576234][T21845] tipc: Enabled bearer , priority 0 [ 471.599419][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.653348][T21845] syzkaller0: entered promiscuous mode [ 471.659855][T21845] syzkaller0: entered allmulticast mode [ 471.665976][T21845] tipc: Resetting bearer [ 471.762532][T21864] xt_TCPMSS: Only works on TCP SYN packets [ 471.781977][T21853] team0 (unregistering): Port device team_slave_0 removed [ 471.783117][T21864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4387'. [ 471.799603][T21864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4387'. [ 471.815766][T21853] team0 (unregistering): Port device team_slave_1 removed [ 471.839993][T21853] team0 (unregistering): Port device batadv1 removed [ 471.936886][ T2912] tipc: Resetting bearer [ 472.253352][T21897] netlink: 'syz.4.4394': attribute type 10 has an invalid length. [ 472.270545][T21843] tipc: Resetting bearer [ 472.483116][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.649783][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.683718][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.181895][T21843] tipc: Disabling bearer [ 474.196558][T21897] team0: left allmulticast mode [ 474.207716][T21897] team_slave_1: left allmulticast mode [ 474.213224][T21897] team0: left promiscuous mode [ 474.218832][T21897] team_slave_1: left promiscuous mode [ 474.224573][T21897] bridge0: port 3(team0) entered disabled state [ 474.239029][T21907] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 474.244158][ T6160] tipc: Node number set to 3590051498 [ 474.434943][T21939] netlink: 'syz.0.4405': attribute type 4 has an invalid length. [ 474.450712][T21942] __nla_validate_parse: 3 callbacks suppressed [ 474.450731][T21942] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.4404'. [ 474.496529][T21943] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4406'. [ 474.636216][T21952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.718727][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.951235][T21983] netlink: 'syz.4.4418': attribute type 29 has an invalid length. [ 474.964175][T21983] netlink: 'syz.4.4418': attribute type 29 has an invalid length. [ 474.974711][T21983] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4418'. [ 475.273049][T22001] netlink: 'syz.0.4423': attribute type 1 has an invalid length. [ 475.283987][ T6162] IPVS: starting estimator thread 0... [ 475.378049][T22004] IPVS: using max 55 ests per chain, 132000 per kthread [ 475.524591][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.764089][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.809164][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.047013][T22001] bond2: entered promiscuous mode [ 477.052892][T22001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.064708][T22003] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4424'. [ 477.093309][T22006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.101818][T22006] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 477.112308][T22006] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 477.139732][T22006] bond2: (slave vti0): making interface the new active one [ 477.157338][T22006] vti0: entered promiscuous mode [ 477.184386][T22006] bond2: (slave vti0): Enslaving as an active interface with an up link [ 477.212546][T22018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4427'. [ 477.223945][T22018] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4427'. [ 477.251413][T22015] xt_hashlimit: size too large, truncated to 1048576 [ 477.548916][T22033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4431'. [ 477.569549][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4431'. [ 477.634386][T22034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4431'. [ 477.773251][T21965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.845050][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.921561][T22039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4434'. [ 477.941762][T22041] netlink: 'syz.1.4433': attribute type 4 has an invalid length. [ 478.043066][T22045] netlink: 'syz.3.4436': attribute type 7 has an invalid length. [ 478.077167][T22045] netlink: 'syz.3.4436': attribute type 8 has an invalid length. [ 478.327169][T22067] netlink: 'syz.4.4444': attribute type 1 has an invalid length. [ 478.379786][T22067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.437361][T22073] bond5: (slave geneve2): making interface the new active one [ 478.449724][T22073] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 478.706952][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.795174][T22089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.817747][T22089] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 478.820122][T22095] macvtap1: entered allmulticast mode [ 478.831849][T22095] veth0_macvtap: entered allmulticast mode [ 478.846910][T22085] bridge_slave_0: left allmulticast mode [ 478.852972][T22085] bridge_slave_0: left promiscuous mode [ 478.859265][T22085] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.872980][T22085] bridge_slave_1: left allmulticast mode [ 478.879551][T22085] bridge_slave_1: left promiscuous mode [ 478.886212][T22085] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.893706][ T6168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.914514][T22085] bond0: (slave bond_slave_0): Releasing backup interface [ 478.930508][T22085] bond0: (slave bond_slave_1): Releasing backup interface [ 478.951372][T22085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.960466][T22085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.973833][T22085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.981862][T22085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.990897][T22085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 479.012682][T22104] ================================================================== [ 479.020783][T22104] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x16b/0x6b0 [ 479.028945][T22104] Read of size 8 at addr ffff88803ba98d48 by task syz.2.4451/22104 [ 479.036838][T22104] [ 479.039172][T22104] CPU: 0 UID: 0 PID: 22104 Comm: syz.2.4451 Not tainted syzkaller #0 PREEMPT(full) [ 479.039186][T22104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 479.039200][T22104] Call Trace: [ 479.039206][T22104] [ 479.039213][T22104] dump_stack_lvl+0xe8/0x150 [ 479.039231][T22104] print_report+0xba/0x230 [ 479.039243][T22104] ? cfusbl_device_notify+0x16b/0x6b0 [ 479.039257][T22104] kasan_report+0x117/0x150 [ 479.039269][T22104] ? net_generic+0x1e/0x240 [ 479.039283][T22104] ? cfusbl_device_notify+0x16b/0x6b0 [ 479.039299][T22104] cfusbl_device_notify+0x16b/0x6b0 [ 479.039312][T22104] ? net_generic+0x1e/0x240 [ 479.039325][T22104] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 479.039338][T22104] ? caif_device_notify+0x250/0xfc0 [ 479.039354][T22104] notifier_call_chain+0x19d/0x3a0 [ 479.039367][T22104] register_netdevice+0x1248/0x1cd0 [ 479.039381][T22104] ? __mutex_lock+0x5ac/0x1300 [ 479.039396][T22104] ? __pfx_register_netdevice+0x10/0x10 [ 479.039410][T22104] ? dev_addr_check+0x20/0x230 [ 479.039425][T22104] ? dev_addr_mod+0x354/0x520 [ 479.039439][T22104] register_netdev+0x40/0x60 [ 479.039458][T22104] bnep_add_connection+0x6e5/0xca0 [ 479.039476][T22104] ? __pfx_bnep_add_connection+0x10/0x10 [ 479.039489][T22104] ? __fget_files+0x3a0/0x420 [ 479.039508][T22104] do_bnep_sock_ioctl+0x40b/0x650 [ 479.039525][T22104] ? kasan_quarantine_put+0xbb/0x1f0 [ 479.039541][T22104] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 479.039556][T22104] ? tomoyo_path_number_perm+0x219/0x630 [ 479.039573][T22104] sock_do_ioctl+0x101/0x320 [ 479.039584][T22104] ? __pfx_sock_do_ioctl+0x10/0x10 [ 479.039592][T22104] ? do_futex+0x395/0x420 [ 479.039609][T22104] sock_ioctl+0x5c6/0x7f0 [ 479.039627][T22104] ? __pfx_sock_ioctl+0x10/0x10 [ 479.039641][T22104] ? __fget_files+0x2a/0x420 [ 479.039652][T22104] ? __fget_files+0x3a0/0x420 [ 479.039662][T22104] ? __fget_files+0x2a/0x420 [ 479.039672][T22104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 479.039685][T22104] ? __pfx_sock_ioctl+0x10/0x10 [ 479.039698][T22104] __se_sys_ioctl+0xfc/0x170 [ 479.039712][T22104] do_syscall_64+0xe2/0xf80 [ 479.039723][T22104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.039732][T22104] ? trace_irq_disable+0x37/0x100 [ 479.039742][T22104] ? clear_bhb_loop+0x60/0xb0 [ 479.039753][T22104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.039766][T22104] RIP: 0033:0x7fe9fe99aeb9 [ 479.039777][T22104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.039786][T22104] RSP: 002b:00007fe9ff781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.039798][T22104] RAX: ffffffffffffffda RBX: 00007fe9fec16090 RCX: 00007fe9fe99aeb9 [ 479.039806][T22104] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 0000000000000005 [ 479.039813][T22104] RBP: 00007fe9fea08c1f R08: 0000000000000000 R09: 0000000000000000 [ 479.039820][T22104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.039826][T22104] R13: 00007fe9fec16128 R14: 00007fe9fec16090 R15: 00007ffdd260c208 [ 479.039838][T22104] [ 479.039842][T22104] [ 479.340606][T22104] Allocated by task 5835: [ 479.344921][T22104] kasan_save_track+0x3e/0x80 [ 479.349629][T22104] __kasan_kmalloc+0x93/0xb0 [ 479.354377][T22104] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 479.359807][T22104] __hci_conn_add+0x3c5/0x1b30 [ 479.364595][T22104] hci_conn_request_evt+0x5b1/0xc40 [ 479.369786][T22104] hci_event_packet+0x805/0x12c0 [ 479.374746][T22104] hci_rx_work+0x3ee/0x1030 [ 479.379239][T22104] process_scheduled_works+0xaec/0x17a0 [ 479.384779][T22104] worker_thread+0xda6/0x1360 [ 479.389448][T22104] kthread+0x726/0x8b0 [ 479.393518][T22104] ret_from_fork+0x51b/0xa40 [ 479.398094][T22104] ret_from_fork_asm+0x1a/0x30 [ 479.402865][T22104] [ 479.405175][T22104] Freed by task 22089: [ 479.409221][T22104] kasan_save_track+0x3e/0x80 [ 479.413885][T22104] kasan_save_free_info+0x46/0x50 [ 479.418910][T22104] __kasan_slab_free+0x5c/0x80 [ 479.423677][T22104] kfree+0x1be/0x650 [ 479.427564][T22104] device_release+0x9e/0x1d0 [ 479.432154][T22104] kobject_put+0x228/0x560 [ 479.436557][T22104] hci_conn_del+0xc36/0x1230 [ 479.441137][T22104] hci_conn_hash_flush+0x191/0x260 [ 479.446254][T22104] hci_dev_close_sync+0x821/0x10e0 [ 479.451354][T22104] hci_dev_do_close+0x30/0xc0 [ 479.456018][T22104] hci_rfkill_set_block+0x1f4/0x290 [ 479.461205][T22104] rfkill_set_block+0x1d2/0x440 [ 479.466041][T22104] rfkill_fop_write+0x461/0x5a0 [ 479.470881][T22104] vfs_write+0x29a/0xb90 [ 479.475123][T22104] ksys_write+0x150/0x270 [ 479.479445][T22104] do_syscall_64+0xe2/0xf80 [ 479.483940][T22104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.489833][T22104] [ 479.492143][T22104] Last potentially related work creation: [ 479.497840][T22104] kasan_save_stack+0x3e/0x60 [ 479.502502][T22104] kasan_record_aux_stack+0xbd/0xd0 [ 479.507704][T22104] insert_work+0x3d/0x330 [ 479.512026][T22104] __queue_work+0xccf/0xf90 [ 479.516524][T22104] queue_delayed_work_on+0x11a/0x1e0 [ 479.521813][T22104] l2cap_chan_del+0x285/0x610 [ 479.526502][T22104] l2cap_conn_del+0x326/0x5b0 [ 479.531181][T22104] hci_conn_hash_flush+0x10d/0x260 [ 479.536370][T22104] hci_dev_close_sync+0x821/0x10e0 [ 479.541469][T22104] hci_dev_do_close+0x30/0xc0 [ 479.546131][T22104] hci_rfkill_set_block+0x1f4/0x290 [ 479.551316][T22104] rfkill_set_block+0x1d2/0x440 [ 479.556158][T22104] rfkill_fop_write+0x461/0x5a0 [ 479.560998][T22104] vfs_write+0x29a/0xb90 [ 479.565236][T22104] ksys_write+0x150/0x270 [ 479.569561][T22104] do_syscall_64+0xe2/0xf80 [ 479.574056][T22104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.579944][T22104] [ 479.582342][T22104] The buggy address belongs to the object at ffff88803ba98000 [ 479.582342][T22104] which belongs to the cache kmalloc-8k of size 8192 [ 479.596389][T22104] The buggy address is located 3400 bytes inside of [ 479.596389][T22104] freed 8192-byte region [ffff88803ba98000, ffff88803ba9a000) [ 479.610346][T22104] [ 479.612657][T22104] The buggy address belongs to the physical page: [ 479.619082][T22104] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ba98 [ 479.627845][T22104] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 479.636339][T22104] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 479.643888][T22104] page_type: f5(slab) [ 479.647864][T22104] raw: 00fff00000000040 ffff88813fe27280 dead000000000122 0000000000000000 [ 479.656519][T22104] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 479.665112][T22104] head: 00fff00000000040 ffff88813fe27280 dead000000000122 0000000000000000 [ 479.673790][T22104] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 479.682450][T22104] head: 00fff00000000003 ffffea0000eea601 00000000ffffffff 00000000ffffffff [ 479.691119][T22104] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 479.699789][T22104] page dumped because: kasan: bad access detected [ 479.706200][T22104] page_owner tracks the page as allocated [ 479.711913][T22104] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (kworker/u9:4), ts 360337494360, free_ts 360169984144 [ 479.733449][T22104] post_alloc_hook+0x228/0x280 [ 479.738223][T22104] get_page_from_freelist+0x24dc/0x2580 [ 479.743767][T22104] __alloc_frozen_pages_noprof+0x18d/0x380 [ 479.749563][T22104] alloc_pages_mpol+0x232/0x4a0 [ 479.754402][T22104] allocate_slab+0x86/0x3a0 [ 479.758897][T22104] ___slab_alloc+0xd82/0x1760 [ 479.763564][T22104] __slab_alloc+0x65/0x100 [ 479.767984][T22104] __kmalloc_cache_noprof+0x40d/0x6e0 [ 479.773400][T22104] __hci_conn_add+0x3c5/0x1b30 [ 479.778185][T22104] hci_conn_request_evt+0x5b1/0xc40 [ 479.783382][T22104] hci_event_packet+0x805/0x12c0 [ 479.788400][T22104] hci_rx_work+0x3ee/0x1030 [ 479.792895][T22104] process_scheduled_works+0xaec/0x17a0 [ 479.798434][T22104] worker_thread+0xda6/0x1360 [ 479.803198][T22104] kthread+0x726/0x8b0 [ 479.807258][T22104] ret_from_fork+0x51b/0xa40 [ 479.811833][T22104] page last free pid 18225 tgid 18224 stack trace: [ 479.818322][T22104] __free_frozen_pages+0xbf8/0xd70 [ 479.823435][T22104] __folio_put+0x414/0x4f0 [ 479.827851][T22104] do_exit+0x1843/0x2310 [ 479.832134][T22104] do_group_exit+0x21b/0x2d0 [ 479.836744][T22104] get_signal+0x1284/0x1330 [ 479.841245][T22104] arch_do_signal_or_restart+0xbc/0x830 [ 479.846795][T22104] exit_to_user_mode_loop+0x86/0x480 [ 479.852174][T22104] do_syscall_64+0x2b7/0xf80 [ 479.856846][T22104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.862734][T22104] [ 479.865050][T22104] Memory state around the buggy address: [ 479.870677][T22104] ffff88803ba98c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.878734][T22104] ffff88803ba98c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.886874][T22104] >ffff88803ba98d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.894929][T22104] ^ [ 479.901328][T22104] ffff88803ba98d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.909389][T22104] ffff88803ba98e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.917445][T22104] ================================================================== [ 479.927715][ T6168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.936327][T22104] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 479.943552][T22104] CPU: 1 UID: 0 PID: 22104 Comm: syz.2.4451 Not tainted syzkaller #0 PREEMPT(full) [ 479.952942][T22104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 479.963095][T22104] Call Trace: [ 479.966367][T22104] [ 479.969377][T22104] vpanic+0x1e0/0x670 [ 479.973370][T22104] panic+0xc5/0xd0 [ 479.977196][T22104] ? __pfx_panic+0x10/0x10 [ 479.981630][T22104] ? preempt_schedule_thunk+0x16/0x30 [ 479.987019][T22104] ? cfusbl_device_notify+0x16b/0x6b0 [ 479.992393][T22104] check_panic_on_warn+0x89/0xb0 [ 479.997335][T22104] ? cfusbl_device_notify+0x16b/0x6b0 [ 480.002719][T22104] end_report+0x6f/0x140 [ 480.006978][T22104] kasan_report+0x128/0x150 [ 480.011487][T22104] ? net_generic+0x1e/0x240 [ 480.016004][T22104] ? cfusbl_device_notify+0x16b/0x6b0 [ 480.021397][T22104] cfusbl_device_notify+0x16b/0x6b0 [ 480.026621][T22104] ? net_generic+0x1e/0x240 [ 480.031154][T22104] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 480.036891][T22104] ? caif_device_notify+0x250/0xfc0 [ 480.042098][T22104] notifier_call_chain+0x19d/0x3a0 [ 480.047237][T22104] register_netdevice+0x1248/0x1cd0 [ 480.052433][T22104] ? __mutex_lock+0x5ac/0x1300 [ 480.057195][T22104] ? __pfx_register_netdevice+0x10/0x10 [ 480.062740][T22104] ? dev_addr_check+0x20/0x230 [ 480.067511][T22104] ? dev_addr_mod+0x354/0x520 [ 480.072183][T22104] register_netdev+0x40/0x60 [ 480.076775][T22104] bnep_add_connection+0x6e5/0xca0 [ 480.081909][T22104] ? __pfx_bnep_add_connection+0x10/0x10 [ 480.087555][T22104] ? __fget_files+0x3a0/0x420 [ 480.092236][T22104] do_bnep_sock_ioctl+0x40b/0x650 [ 480.097260][T22104] ? kasan_quarantine_put+0xbb/0x1f0 [ 480.102547][T22104] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 480.108098][T22104] ? tomoyo_path_number_perm+0x219/0x630 [ 480.113825][T22104] sock_do_ioctl+0x101/0x320 [ 480.118415][T22104] ? __pfx_sock_do_ioctl+0x10/0x10 [ 480.123614][T22104] ? do_futex+0x395/0x420 [ 480.127948][T22104] sock_ioctl+0x5c6/0x7f0 [ 480.132280][T22104] ? __pfx_sock_ioctl+0x10/0x10 [ 480.137237][T22104] ? __fget_files+0x2a/0x420 [ 480.141827][T22104] ? __fget_files+0x3a0/0x420 [ 480.146536][T22104] ? __fget_files+0x2a/0x420 [ 480.151122][T22104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 480.156055][T22104] ? __pfx_sock_ioctl+0x10/0x10 [ 480.160921][T22104] __se_sys_ioctl+0xfc/0x170 [ 480.165542][T22104] do_syscall_64+0xe2/0xf80 [ 480.170044][T22104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.176106][T22104] ? trace_irq_disable+0x37/0x100 [ 480.181128][T22104] ? clear_bhb_loop+0x60/0xb0 [ 480.185799][T22104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.191684][T22104] RIP: 0033:0x7fe9fe99aeb9 [ 480.196131][T22104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.215829][T22104] RSP: 002b:00007fe9ff781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.224329][T22104] RAX: ffffffffffffffda RBX: 00007fe9fec16090 RCX: 00007fe9fe99aeb9 [ 480.232294][T22104] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 0000000000000005 [ 480.240261][T22104] RBP: 00007fe9fea08c1f R08: 0000000000000000 R09: 0000000000000000 [ 480.248230][T22104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.256196][T22104] R13: 00007fe9fec16128 R14: 00007fe9fec16090 R15: 00007ffdd260c208 [ 480.264264][T22104] [ 480.267700][T22104] Kernel Offset: disabled [ 480.272011][T22104] Rebooting in 86400 seconds..