last executing test programs: 8.635984192s ago: executing program 3 (id=3370): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f00000001c0)=0x40, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000247, 0x0) (async, rerun: 32) close(r2) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000006800010000000000000000000a000000000000000c00088008000300ac1e000108000600f200000008000500", @ANYRES32, @ANYBLOB="060007"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xd4}}, 0x0) 7.59815001s ago: executing program 3 (id=3383): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000000140), 0x4000095, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001640)={0xffffffffffffffff, &(0x7f0000000600)="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", &(0x7f0000001600)=""/5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) 7.115041866s ago: executing program 0 (id=3388): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x39, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000004c0), 0x56) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bind$unix(r0, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r10, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r10, 0xd1383000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r11, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r11, 0x1000) 6.786868466s ago: executing program 2 (id=3389): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wg0\x00', &(0x7f0000000140)=@ethtool_rx_ntuple={0x35, {0xe, @esp_ip4_spec={@rand_addr=0x64010101, @broadcast, 0x7925, 0xe}, @sctp_ip4_spec={@broadcast, @rand_addr=0x64010101, 0x4e20, 0x4e22, 0x45}, 0x7, 0x3022, 0x400, 0xa, 0xfffffffffffffffe}}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wg0\x00', &(0x7f0000000140)=@ethtool_rx_ntuple={0x35, {0xe, @esp_ip4_spec={@rand_addr=0x64010101, @broadcast, 0x7925, 0xe}, @sctp_ip4_spec={@broadcast, @rand_addr=0x64010101, 0x4e20, 0x4e22, 0x45}, 0x7, 0x3022, 0x400, 0xa, 0xfffffffffffffffe}}}) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x43) (async) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x43) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/9, 0x9, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0x8, 0xc}, {0x6, 0xff}]}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x6, [{0x10, 0x4, 0x3}, {0x0, 0x5, 0x8}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x30, 0x61, 0x0, 0x30, 0x0]}}, &(0x7f00000019c0)=""/162, 0x6b, 0xa2, 0x0, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r4, 0x4, 0x2, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0xf, 0x3}, {0x7}]}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x9}, {0xf, 0x2}]}, @enum={0x9, 0x6, 0x0, 0x6, 0x4, [{0xc, 0x7}, {0x8}, {0x9, 0x2}, {0x1, 0x6}, {0x0, 0x428}, {0x9, 0xff}]}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x1, [{0x5, 0x3, 0x203}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x5}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0xa}]}}, &(0x7f0000000380)=""/97, 0xce, 0x61, 0x0, 0x6, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, r5, 0x5, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.731801275s ago: executing program 4 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x20000880) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 6.548817016s ago: executing program 4 (id=3392): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x10, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000a80)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r6, &(0x7f0000000b80), &(0x7f0000000bc0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000c00), 0x400, 0x41) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x100}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$nl_route_sched(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c00)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002bc0)=@newtfilter={0x88c, 0x2c, 0x10, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r9, {0xb, 0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x23e, 0x0, 0x4570, 0x0, 0x10001, 0xfffffeff, 0x1ff, 0xfffff801, 0x7fff, 0x200, 0xf, 0x2, 0x3, 0x3, 0x200, 0x0, 0x2, 0x80000000, 0x5, 0x3, 0x0, 0x9021, 0x3, 0xa3e, 0x5, 0x7ff, 0xe, 0x5, 0x3, 0x1da, 0x2, 0x5, 0x1, 0x80000000, 0x4f, 0x9, 0xfffffff9, 0x2, 0x2, 0xffff8001, 0xfffffff8, 0x7ff, 0x1ff, 0xf, 0x80000000, 0x218, 0x2, 0x8, 0x8, 0x9, 0x96e5, 0x1b36, 0x8, 0x40, 0x5, 0xb, 0x8001, 0xd461, 0x0, 0x2, 0x6000000, 0x6, 0xf510, 0x4, 0x3e, 0xfffffffe, 0x46, 0x4, 0x40, 0xffffffe5, 0xfffffffe, 0xffffff7f, 0x0, 0x7, 0xce8d, 0x42c, 0x8000, 0x3, 0x5, 0x2, 0x6, 0xb, 0x40, 0x96, 0x7, 0x0, 0x0, 0x10000, 0x4, 0x6, 0x0, 0x8, 0x9, 0xffff, 0x5, 0x8b6, 0x5, 0x0, 0x4, 0x1, 0x8, 0x3, 0x40, 0xc6, 0x1707, 0x8, 0x3, 0xd, 0xd, 0x3, 0x5, 0xfffffffe, 0x81, 0x3, 0x108, 0x6, 0x80000001, 0x7, 0x10000, 0x8, 0x2, 0x0, 0x38dc, 0x3, 0x7ff, 0x7, 0x10, 0x0, 0xad07, 0x3, 0x6b, 0x800, 0xfa, 0x3ff, 0x9, 0x0, 0x8, 0x9, 0xffffffff, 0xff, 0x3, 0x8001, 0xfffffff2, 0x7, 0xffff33c5, 0x2, 0x7, 0x74, 0x1, 0x88, 0x1, 0x7, 0x87, 0x7, 0x3, 0x4, 0x5, 0x4, 0x3ff, 0x7fffffff, 0xffff8000, 0x7, 0x400, 0x4, 0x0, 0x180000, 0x2, 0x8, 0x4, 0x6, 0x1, 0x162, 0x6, 0x1, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x8000, 0x6, 0x3, 0x0, 0x9, 0x8, 0xb5f, 0x0, 0x7fffffff, 0x1, 0xfffff96c, 0xaac, 0x89cf, 0x2, 0x9, 0x1, 0x2, 0x3, 0x2, 0x80000001, 0x6, 0x0, 0xac, 0x100, 0x8, 0x1eb, 0x2, 0x5, 0x9, 0xff, 0xc, 0x0, 0x1ff, 0x6, 0x3, 0x70000, 0xc967, 0xf, 0x5, 0x1, 0x40000000, 0x100, 0x2, 0x6, 0xe, 0x4, 0x10, 0x9, 0x6ec5, 0x8f8, 0x6, 0x80000001, 0x8f, 0x5, 0x0, 0x100, 0xa, 0xa4d9, 0x7, 0x3, 0x3c, 0xcff7, 0x4e2d, 0x7, 0x7, 0x8, 0xc, 0xb, 0x0, 0x71c2, 0xf911, 0xc401, 0x9, 0x80000000, 0xb, 0x1, 0x5f, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x5, 0x7, 0xe, {0x8, 0x1, 0x3, 0xc, 0x1000, 0x1}, {0x4, 0x1, 0x2, 0x7, 0x2, 0x2}, 0xfff, 0xa3b4, 0xfff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xa3, 0x6, 0x5, 0x0, 0x5, 0x2, 0x80, 0x1, 0x619e, 0x5, 0xc8, 0x4, 0xbd, 0x60a1bb9d, 0x0, 0x581, 0x2, 0x6, 0x9, 0x46, 0x9, 0xd452, 0xf, 0x7ff, 0xfffff441, 0xffffffff, 0x1, 0xfffffff9, 0xfff, 0x40, 0x4, 0x6, 0x8, 0x7, 0x7, 0x0, 0x7, 0x6, 0xffffffff, 0x0, 0x10001, 0xd, 0x0, 0x8876, 0xfffffff9, 0x1, 0xc6, 0x1, 0x0, 0x2, 0x4, 0xe, 0x2fea, 0xfffffffa, 0x0, 0xff, 0x6c2d, 0x6, 0x8, 0xe, 0xfff, 0x2, 0x1, 0x7, 0x3ff, 0x400, 0x6, 0x9, 0xffff, 0x1, 0x8, 0x4, 0x19, 0xb, 0x8, 0x7, 0xe, 0x0, 0x1, 0x2, 0x8, 0x4000, 0x2, 0x5, 0x5, 0xd7, 0x7, 0x7f, 0x6, 0x5, 0x9, 0x3, 0x3, 0xa36, 0x6, 0xe, 0x8ccf, 0x0, 0x0, 0x0, 0x5, 0xf1c, 0x2, 0x0, 0x8, 0x22d, 0x7, 0x7, 0x2, 0x1, 0x1, 0x9, 0x4, 0x3, 0x80, 0x0, 0x47b02ef0, 0xfffffffc, 0xffffffff, 0x997c, 0x8, 0x5, 0xfffffff4, 0x2, 0xfffffffa, 0x94, 0x80000000, 0x6, 0xc27, 0x100, 0xf2944168, 0x3, 0x3, 0x3, 0x3, 0x4, 0x7ff, 0x0, 0x2, 0x400, 0x88f, 0x9, 0x80000001, 0x3ff, 0x99fd, 0x1, 0x7, 0x6, 0x5, 0x0, 0x3, 0x10, 0xae6, 0x10, 0x401, 0x0, 0x9, 0x7f, 0x0, 0xbba, 0x1, 0x9, 0x10, 0x7f, 0xbf, 0x2, 0x7, 0xb, 0xffff, 0x2, 0x4, 0x4, 0x6, 0x9, 0x5b2, 0x4, 0xeb, 0xba61, 0x6, 0xfffffff9, 0xfff, 0xf7cf, 0x370, 0x7, 0x2, 0x8, 0x40, 0x1, 0xc7d6, 0x1ff, 0x5, 0x4e94, 0x9, 0x6, 0x2e, 0x5, 0x6f7, 0x24bc, 0x7, 0xd, 0x7, 0x1, 0x3, 0x5, 0x1, 0x4, 0x5, 0x4, 0x3, 0x0, 0x3ff, 0x5, 0x279, 0x7f, 0xbdf, 0x0, 0x5, 0x3, 0x8, 0x9, 0xcd, 0x4, 0x7fffffff, 0xc216, 0x9ca3, 0x5, 0x23, 0x0, 0x8, 0x4, 0xc09, 0x100, 0x0, 0x0, 0x2, 0x1, 0x80000001, 0x80, 0x2, 0x2626, 0x1ff, 0x1, 0x26, 0x5, 0x7, 0x7, 0x8, 0x8, 0x8, 0x71a, 0x4, 0x8, 0x59bf, 0x2]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0xffffffffffffffd2}, 0x48) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000003480)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f00000034c0), 0x56) 6.450986051s ago: executing program 3 (id=3393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000180)) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x11a02}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 6.224264809s ago: executing program 2 (id=3395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040801) 6.205902582s ago: executing program 1 (id=3396): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000980)=@phonet, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000a40)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000000000000010000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000380)=""/222}, 0x78) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)=']\x00', 0x14400, &(0x7f0000000040)={@align=0x1, {0x8001, 0x5, 0xffffffff, 0x2}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00'}, 0x48) socket$inet6(0xa, 0xa, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000007c0)=r4, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)={0x24, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x72}, @nested={0x8, 0xbc, 0x0, 0x1, [@nested={0x4, 0xc3}]}, @nested={0x4, 0x44}]}, 0x24}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) bind$netlink(r3, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendto$inet6(r1, &(0x7f0000000900)='s', 0x1, 0x800, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x2, 0x4, 0x6}, &(0x7f0000000940)=0x8) 6.126715825s ago: executing program 0 (id=3397): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.968937024s ago: executing program 0 (id=3398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000007c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r4, 0x0, 0x0, 0x3, &(0x7f0000000880)=[0x0], 0x1, 0x0, &(0x7f00000008c0), 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r4, r6, 0x25, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r7}}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000e218015400000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123415000280080001007f000001080002"], 0xb0}, 0x1, 0x0, 0x0, 0x4044091}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000b80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@fallback=r8, r3, 0x1e, 0x20, 0x0, @void, @void, @void, @value=r9, r7}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x24}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x6, 0x1000, 0x10}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0xfffffffffffffd1d}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 5.816864834s ago: executing program 2 (id=3399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x1c, r4, 0x601, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040844) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000780)=[{&(0x7f0000000bc0)='\r', 0x1}, {&(0x7f0000000c00)="89", 0x1}, {&(0x7f0000000c40)="a6", 0x1}, {&(0x7f0000000c80)='F', 0x1}], 0x4, 0x6) (async) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0) (async) close(r7) (async) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000940)={'syzkaller0\x00'}) readv(r6, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/197, 0xc5}], 0x1) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r10, {0xeffe068f8514295, 0x6}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f00000004c0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000500)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB="2bbf69dce2a68850b06d61b9734bf43e8f41a53abec5addc942b784ed77b9729e9a09e7d48c624a038da22a10a5a53b6cbbd8d8da0d200"/64, @ANYRES64=0x0], 0xa) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000", @ANYRES32, @ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x2, 0x95, &(0x7f0000000800)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="11"], 0xa) (async) r13 = socket(0x2, 0x80805, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000007111770000d900000010000002000000850000000500000095000000000000009500102b12d7b3881e9b6a8d68b8b268ba79f8cb403dba9b6d11c25099c2b2e0323c5b71af18f3987a298423598da362aa0c92eb39f34f95eb0bc3006c590f253665269f314bee"], &(0x7f0000000380)='GPL\x00', 0x5, 0x29e, &(0x7f0000001500)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 5.30194416s ago: executing program 1 (id=3400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0xc800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40440d0}, 0x10) 1.814642232s ago: executing program 4 (id=3401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcffffff320000001800018014000200"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbb3172ddf2500", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040001800000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.763881863s ago: executing program 3 (id=3402): r0 = socket(0x10, 0x803, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000cc0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x20000003}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@delnexthop={0x16, 0x69, 0xb}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0xffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x400004}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c02000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ffffffff00000000000000000000000006000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000010000000000000028bd7000000a000040000000000000000005000000050000000c000f00ff01000000000000080028000000000008000c001eca0000b60003006465666c61fb7ae4dbbbf27d0e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000700300003c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8a1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c277bf00759bbab180f703934cf67200971c0ba64d04de8e88d450888000014000d00ac1e0001000000000000000000000000ac00070020010000000000000000000000000002640101010000000000000000000000004e2000ff000900010a00a0c000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000000000000010000000000000000400000000000000050000000000000007000000000000000100000000000000c300000000000000810000000000000002000000000000000100000001000000ff0100000000000000000000060000000100000300000000"], 0x28c}, 0x1, 0x0, 0x0, 0x81}, 0x4004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="3800000019183f6cf38dac7c02000000000000000c000340000000000000000408000b400000000108000a400000000108000b40fffffffe"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x8004) socket$inet_smc(0x2b, 0x1, 0x0) syz_80211_join_ibss(&(0x7f00000011c0)='wlan0\x00', &(0x7f0000001200)=@default_ibss_ssid, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001240)={'wg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000001300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000001380)=""/4094, 0xffe}, 0x1) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000023c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x8000, 0x0, 0x0, 0x9, 0x8000, 0x7ff]}}, 0x5c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000002440)={0x0, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, 0x0) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000002540)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000025c0)={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x2, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000002640)=0x6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e0000002080007400000000010000580"], 0x74}}, 0x0) 1.763073655s ago: executing program 1 (id=3403): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES64=r2], 0x20, 0x6044}, 0x4007) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffef3, 0x0, 0x0, &(0x7f0000000300)}, 0x40002101) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4008000) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000340)={0x0, 0xffffffffffffffff, r1, 0x8, 0x2, '\x00', {0x8, 0x6, 0x100, 0x1, 0xffffffff, 0xfffff79d, 0x2, 0x800, {0x4, 0x5}, {0xdd, 0x8}, {0x10001, 0x5f}, 0x8, 0x3000000, 0x3, 0x1, 0x10000, 0x3, 0x4, 0x5, 0x1, 0x4, '\x00', 0x1000, 0x1, 0xf, 0x5}}) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f00000002c0)=0x3, 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0xff08, 0x0) 1.718971624s ago: executing program 2 (id=3404): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x0, 0x10, &(0x7f0000001140), 0x45}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f900000080004"], 0xbc}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.676570602s ago: executing program 4 (id=3405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0x0, 0x10, &(0x7f0000000f40), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001000)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008400)=ANY=[@ANYBLOB="5c00000010000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="3c002b80370008"], 0x5c}], 0x1}, 0x2004c000) 1.603911148s ago: executing program 0 (id=3406): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x3e1140, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xffffffd9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}]}, 0x80}, 0x1, 0x7}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x7ff}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000200)={0xfe55, 0xfffffffffffffffc}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x3e1140, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xffffffd9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}]}, 0x80}, 0x1, 0x7}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x7ff}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000200)={0xfe55, 0xfffffffffffffffc}) (async) 1.290679042s ago: executing program 1 (id=3407): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffde2, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x40}}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x400, 0x70bd2c, 0x700, {0x0, 0x0, 0x0, 0x0, 0x21558, 0x3806}}, 0x20}}, 0x44) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5202) 1.155177658s ago: executing program 3 (id=3408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0xcc040}, 0x26048040) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2122) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x208, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0xd, 0xff, 0x1ff, 'pptp\x00', 'syz0\x00', {0xc7d1}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x40, 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) unshare(0x30040e00) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000280007800c00018008000140000000001800028014000240fc00000000000000000000000000000005000500020000ccdfe0770006000000"], 0x74}}, 0x0) 1.051781552s ago: executing program 2 (id=3409): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000680)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x2, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000007c0)={0x2, 0x4e1c, @multicast1}, 0x10) bind$inet(r1, &(0x7f0000000800)={0x2, 0x4e25, @multicast1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r3, 0x0, 0xffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000060a010400000000000000000a0000010900010073797a31000000000900020073795a3200000000100004800c0001800700010063740000140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r6}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004804}, 0x20000000) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newqdisc={0xb0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7fffffffffffffff}]}}]}, 0xb0}}, 0x0) 951.254885ms ago: executing program 3 (id=3410): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) recvfrom$inet(r0, &(0x7f00000000c0)=""/25, 0x19, 0x43, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/163, 0xa3}], 0x2) (async) write$cgroup_int(r2, &(0x7f00000018c0), 0xfffffdef) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x0, 0x3, 0x30, r3, 0x80000000) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000c000280080013008b5a3b3443", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) (async) listen(r4, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000019c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r7, &(0x7f0000001a00)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000001a40)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000001a80)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) sendmmsg(r7, &(0x7f0000001b80), 0x2e9, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x10}}, 0x0) connect$inet6(r7, &(0x7f0000001c40)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, 0x0, 0x0) (async) writev(r9, 0x0, 0x0) (async) r10 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d80)=""/120, 0x78}, {&(0x7f0000001e00)=""/40, 0x28}, {&(0x7f0000001e40)=""/107, 0x6b}], 0x3}}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001fc0)=""/159, 0x9f}, {&(0x7f0000002080)=""/34, 0x22}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/127, 0x7f}, {&(0x7f0000003140)=""/27, 0x1b}], 0x5, &(0x7f0000003180)=""/236, 0xec}, 0x1}, {{&(0x7f0000003280)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000003300)=""/124, 0x7c}, 0x419}], 0x3, 0x2, 0x0) 727.00207ms ago: executing program 1 (id=3411): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64=0x0], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000130001010000000000000000fe880000000000000000000000000101640101020000000000000000000000004e20000d040000090a00000000001a6c57ddc86dd12a0e27430000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000060000000000000003000000000000000500000000000000080000000000000000000000000000000100000000000000000000000000000000010000000000000800000000000000000000000000000084000500ac141441000000000000000000000000000004d42b0000000a000000fe8000000000000000000000000000bb0000000005020300000000000200000006000000e0000002000000000000000000000000000004d72b0000000a000000640101000000000000000000000000000000000001000300f9ffffffff030108d7000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000840)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 715.72593ms ago: executing program 4 (id=3412): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xd}, {0x2b}, {0xb, 0x4}, {0x1, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f00000009c0), &(0x7f0000000a00)=r3}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000ac0)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x5, 0xb7b, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x10, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000780)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) 697.463183ms ago: executing program 0 (id=3413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r0, &(0x7f0000000100)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000011c0)=0x9f8, 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) getpeername(r2, 0x0, 0x0) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80800) listen(r3, 0x4) 471.071435ms ago: executing program 0 (id=3414): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x31, 0x9, 0x70bd29, 0x0, {0x4}, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}]}, 0x28}, 0x1, 0x0, 0x0, 0x30046051}, 0x4080040) write(r0, &(0x7f0000000340)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 324.982386ms ago: executing program 4 (id=3415): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYBLOB="ac141411e000000100000000280000000000000000000000070000008904"], 0x48}, 0x4104) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x103000, 0x800, 0x9}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f00000005c0)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000600)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) unshare(0x20400) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r9, @ANYBLOB="12030000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40042) bind$xdp(r0, &(0x7f0000000280)={0x2c, 0x2, r6, 0x1, 0x0}, 0x10) 55.185448ms ago: executing program 1 (id=3416): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000000c0)=""/77, 0x4d}], 0x2}, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000efff0f00010a0000000c0002006e6c383032313100"/32], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000290000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000400)=0x100000001, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f00000004c0), 0x0}, 0x20) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x7fffffffffffffff) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd31, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x2, 0xff, 0xa, 0x2400}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x89, 0x0, 0x4, 0x0, 0xff, 0x20, 0x4}}, [@rand_addr=' \x01\x00']}}}]}, 0x54}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000800)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r9, 0x0, 0x0) (async) write(r9, &(0x7f0000000840)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) (async) socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) 0s ago: executing program 2 (id=3417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000400)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000440)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) recvmmsg(r7, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES32=r10], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a91ee184a8397a989d25b8df8d"}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x14, 0x4, "82210705944902f6734fa6fa5505496e"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "116d37140fe882d963e6f91ebb"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x12, 0x4, "5e4e93e6a5a773336529bb8225dd"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x8193}}, {{0xa, 0x4e08, 0x6, @remote, 0x4f0}}}, 0x108) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) close(0x3) kernel console output (not intermixed with test programs): miscuous mode [ 331.867787][T16820] bond3: left promiscuous mode [ 331.868555][T16820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.887464][T16820] geneve0: entered promiscuous mode [ 331.888460][T16820] macvtap1: left promiscuous mode [ 331.902839][T16820] ip6tnl2: left promiscuous mode [ 331.907237][T16820] ip6tnl2: left allmulticast mode [ 331.913976][T16820] sit1: left promiscuous mode [ 331.955785][T16820] veth2: left promiscuous mode [ 331.956715][T16820] veth3: left promiscuous mode [ 332.012893][T16820] ip6erspan1: left promiscuous mode [ 332.017291][T16820] bridge2: left promiscuous mode [ 332.032701][T16820] ip6gretap2: left promiscuous mode [ 332.037312][T16820] ip6erspan2: left promiscuous mode [ 332.037348][T16820] ip6erspan2: left allmulticast mode [ 332.056043][T16820] veth4: left promiscuous mode [ 332.056914][T16820] veth5: left promiscuous mode [ 332.057707][T16820] batadv1: left promiscuous mode [ 332.058138][T16820] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 332.081944][T16820] batadv2: left promiscuous mode [ 332.082301][T16820] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 332.084610][T16820] ip6tnl3: left promiscuous mode [ 332.086268][T16820] bridge3: left promiscuous mode [ 332.088247][T16820] mac80211_hwsim hwsim15 wlan2: left promiscuous mode [ 332.121362][T16820] bridge4: left promiscuous mode [ 332.135424][T16820] bridge5: left promiscuous mode [ 332.144434][T16820] erspan0: entered promiscuous mode [ 332.144807][T16820] macsec1: left promiscuous mode [ 332.149793][T16820] bond4: left promiscuous mode [ 332.149844][T16820] bond0: left promiscuous mode [ 332.149857][T16820] bond_slave_0: left promiscuous mode [ 332.150534][T16820] bond_slave_1: left promiscuous mode [ 332.150868][T16820] syz_tun: left promiscuous mode [ 332.157268][T16820] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.163092][T16820] bond5: left promiscuous mode [ 332.163750][T16820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 332.166331][T16820] bridge6: left promiscuous mode [ 332.177153][T16820] vxlan0: left promiscuous mode [ 332.185758][T16820] syztnl0: left promiscuous mode [ 332.192449][T16820] nl80211: left promiscuous mode [ 332.198605][T16820] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.204473][T16820] vlan2: left promiscuous mode [ 332.204511][T16820] bond6: left promiscuous mode [ 332.208642][T16820] sit2: left promiscuous mode [ 332.226441][T16820] bridge7: left promiscuous mode [ 332.250132][T16820] gtp0: left promiscuous mode [ 332.257040][T16820] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 332.257302][T16820] macvlan2: left promiscuous mode [ 332.258516][T16820] batman_adv: batadv0: Interface activated: macvlan2 [ 332.266215][T16820] bridge8: left promiscuous mode [ 332.276340][T16820] bond7: left promiscuous mode [ 332.277417][T16820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 332.283096][T16820] veth6: left promiscuous mode [ 332.285422][T16820] veth7: left promiscuous mode [ 332.290984][T16820] ip6tnl4: left promiscuous mode [ 332.294819][T16820] ip6tnl5: left promiscuous mode [ 332.298487][T16820] : left promiscuous mode [ 332.304907][T16820] dummy1: left promiscuous mode [ 332.312295][T16820] erspan1: left promiscuous mode [ 332.312421][T16820] erspan1: left allmulticast mode [ 332.347378][T16041] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.347488][T16041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.365601][T16041] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.365706][T16041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.488086][T16839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.501566][T16040] bond7: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 332.533481][T16040] bond7: (slave veth7): making interface the new active one [ 332.595680][T16040] bond7: active interface up! [ 332.705458][T16846] ipip2: entered promiscuous mode [ 333.155818][T16863] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2642'. [ 333.570817][T16876] netlink: 'syz.3.2644': attribute type 8 has an invalid length. [ 333.638352][T16858] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 333.660249][T16862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2643'. [ 333.734425][T16886] netlink: 'syz.3.2644': attribute type 8 has an invalid length. [ 333.787839][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 334.018048][T16044] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 334.018601][T16044] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 334.040255][ T5729] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 334.041766][ T5729] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 334.043799][T16042] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 334.044350][T16042] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 334.103864][ T5729] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 334.113991][ T5729] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 334.193942][ T5751] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 334.207774][T16908] syzkaller1: entered promiscuous mode [ 334.207796][T16908] syzkaller1: entered allmulticast mode [ 334.247192][T16042] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 334.323322][T16912] netlink: 'syz.1.2650': attribute type 2 has an invalid length. [ 334.401311][T16918] syzkaller1: entered promiscuous mode [ 334.401338][T16918] syzkaller1: entered allmulticast mode [ 334.501670][T16922] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 334.615726][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'. [ 334.692372][T16932] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 334.708195][T16927] ip6gretap0: entered allmulticast mode [ 334.855101][T16931] ip6gretap0: entered allmulticast mode [ 335.113162][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'. [ 335.687877][T16966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 335.775440][ T30] audit: type=1800 audit(1793090969.235:6): pid=16964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2660" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2684 res=0 errno=-22 [ 335.886176][T16964] Cannot find add_set index 0 as target [ 335.900301][T16974] IPVS: Error joining to the multicast group [ 336.193566][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2670'. [ 336.193594][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2670'. [ 336.193610][T16992] netlink: 'syz.4.2670': attribute type 4 has an invalid length. [ 336.295756][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2670'. [ 337.029288][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 337.052120][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2674'. [ 337.127439][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 337.183460][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 337.183502][T17015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 337.345409][T17020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2680'. [ 337.660469][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.660492][T17035] netlink: 'syz.3.2685': attribute type 9 has an invalid length. [ 337.660505][T17035] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2685'. [ 337.660736][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.660750][T17035] netlink: 'syz.3.2685': attribute type 9 has an invalid length. [ 337.660761][T17035] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2685'. [ 337.660901][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.660913][T17035] netlink: 'syz.3.2685': attribute type 9 has an invalid length. [ 337.660924][T17035] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2685'. [ 337.661066][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.661078][T17035] netlink: 'syz.3.2685': attribute type 9 has an invalid length. [ 337.661089][T17035] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2685'. [ 337.662391][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.662410][T17035] netlink: 'syz.3.2685': attribute type 9 has an invalid length. [ 337.662563][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.662577][T17035] netlink: 'syz.3.2685': attribute type 9 has an invalid length. [ 337.662726][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.662739][T17035] netlink: 'syz.3.2685': attribute type 9 has an invalid length. [ 337.662887][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.662899][T17035] netlink: 'syz.3.2685': attribute type 9 has an invalid length. [ 337.665966][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 337.666112][T17035] netlink: 'syz.3.2685': attribute type 11 has an invalid length. [ 338.974177][T17080] IPv6: sit3: Disabled Multicast RS [ 339.376707][T17090] validate_nla: 58 callbacks suppressed [ 339.376730][T17090] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 339.377299][T17090] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 339.799375][ C1] ip6_tnl_xmit_ctl: 10 callbacks suppressed [ 339.799397][ C1] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 340.021655][T17118] hsr0: entered allmulticast mode [ 340.021679][T17118] hsr_slave_0: entered allmulticast mode [ 340.021695][T17118] hsr_slave_1: entered allmulticast mode [ 340.205521][T17119] hsr_slave_0: left promiscuous mode [ 340.218960][T17119] hsr_slave_1: left promiscuous mode [ 340.243800][T17119] hsr0 (unregistering): left allmulticast mode [ 341.131664][T16038] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.131699][T16038] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.166506][T17128] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 341.269174][T16042] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.269208][T16042] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.372963][T17145] tipc: Enabling of bearer rejected, failed to enable media [ 341.388541][T16038] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.388603][T16038] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.389594][T16038] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.389655][T16038] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.540759][T17154] ifb0: entered allmulticast mode [ 342.193322][T17182] netlink: 'syz.3.2727': attribute type 1 has an invalid length. [ 342.345245][T17182] bond17: entered promiscuous mode [ 342.356344][T17182] 8021q: adding VLAN 0 to HW filter on device bond17 [ 342.387873][T17182] macvtap0: entered allmulticast mode [ 342.558377][T17213] bridge10: entered promiscuous mode [ 342.558398][T17213] bridge10: entered allmulticast mode [ 342.571618][T17213] team0: Port device bridge10 added [ 342.585735][T17213] bridge11: entered promiscuous mode [ 342.585755][T17213] bridge11: entered allmulticast mode [ 342.593213][T17213] team0: Port device bridge11 added [ 342.604861][T17213] bridge12: entered promiscuous mode [ 342.604881][T17213] bridge12: entered allmulticast mode [ 342.611106][T17213] team0: Port device bridge12 added [ 342.633075][T17218] __nla_validate_parse: 74 callbacks suppressed [ 342.633094][T17218] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2729'. [ 342.633110][T17218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2729'. [ 342.642631][T17213] bridge13: entered promiscuous mode [ 342.642651][T17213] bridge13: entered allmulticast mode [ 342.646867][T17213] team0: Port device bridge13 added [ 342.655332][T17213] bridge14: entered promiscuous mode [ 342.655351][T17213] bridge14: entered allmulticast mode [ 342.662035][T17213] team0: Port device bridge14 added [ 342.687681][T17213] bridge15: entered promiscuous mode [ 342.687701][T17213] bridge15: entered allmulticast mode [ 342.698459][T17213] team0: Port device bridge15 added [ 342.712434][T17213] bridge16: entered promiscuous mode [ 342.712455][T17213] bridge16: entered allmulticast mode [ 342.726083][T17213] team0: Port device bridge16 added [ 342.756081][T17213] bridge17: entered promiscuous mode [ 342.774015][T17213] bridge17: entered allmulticast mode [ 342.786873][T17213] team0: Port device bridge17 added [ 342.816980][T17213] bridge18: entered promiscuous mode [ 342.817003][T17213] bridge18: entered allmulticast mode [ 342.826407][T17213] team0: Port device bridge18 added [ 342.851211][T17213] bridge19: entered promiscuous mode [ 342.851233][T17213] bridge19: entered allmulticast mode [ 342.862184][T17213] team0: Port device bridge19 added [ 342.884618][T17213] bridge20: entered promiscuous mode [ 342.884640][T17213] bridge20: entered allmulticast mode [ 342.893765][T17213] team0: Port device bridge20 added [ 342.923851][T17213] bridge21: entered promiscuous mode [ 342.923876][T17213] bridge21: entered allmulticast mode [ 342.939170][T17213] team0: Port device bridge21 added [ 342.958682][T17213] bridge22: entered promiscuous mode [ 342.958705][T17213] bridge22: entered allmulticast mode [ 342.963508][T17213] team0: Port device bridge22 added [ 342.972617][T17213] bridge23: entered promiscuous mode [ 342.972803][T17213] bridge23: entered allmulticast mode [ 342.976965][T17213] team0: Port device bridge23 added [ 342.986354][T17213] bridge24: entered promiscuous mode [ 342.986372][T17213] bridge24: entered allmulticast mode [ 342.994465][T17213] team0: Port device bridge24 added [ 343.010179][T17213] bridge25: entered promiscuous mode [ 343.010200][T17213] bridge25: entered allmulticast mode [ 343.015355][T17213] team0: Port device bridge25 added [ 343.036933][T17213] bridge26: entered promiscuous mode [ 343.036955][T17213] bridge26: entered allmulticast mode [ 343.044360][T17213] team0: Port device bridge26 added [ 343.070517][T17220] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20002 [ 343.084121][T17213] bridge27: entered promiscuous mode [ 343.084141][T17213] bridge27: entered allmulticast mode [ 343.091619][T17213] team0: Port device bridge27 added [ 343.117439][T17213] bridge28: entered promiscuous mode [ 343.117460][T17213] bridge28: entered allmulticast mode [ 343.138049][T17213] team0: Port device bridge28 added [ 343.161867][T17213] bridge29: entered promiscuous mode [ 343.161891][T17213] bridge29: entered allmulticast mode [ 343.166214][T17213] team0: Port device bridge29 added [ 343.209754][T17221] dvmrp1: entered allmulticast mode [ 343.243392][T17213] bridge30: entered promiscuous mode [ 343.243414][T17213] bridge30: entered allmulticast mode [ 343.247654][T17213] team0: Port device bridge30 added [ 343.275293][T17204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.336681][T17213] bridge31: entered promiscuous mode [ 343.336703][T17213] bridge31: entered allmulticast mode [ 343.365298][T17213] team0: Port device bridge31 added [ 343.410368][T17213] bridge32: entered promiscuous mode [ 343.410421][T17213] bridge32: entered allmulticast mode [ 343.444802][T17213] team0: Port device bridge32 added [ 343.585174][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2734'. [ 343.848248][T17238] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 343.964336][T17255] ip_tables: iptables: counters copy to user failed while replacing table [ 344.064669][T17240] batman_adv: batadv0: Interface deactivated: macvlan2 [ 344.085189][T17240] batman_adv: batadv0: Removing interface: macvlan2 [ 344.473009][T17271] x_tables: duplicate underflow at hook 1 [ 345.239554][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 345.547375][T17326] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2753'. [ 346.490266][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2760'. [ 346.520820][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 347.053325][T17352] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 347.163686][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 347.169500][ C1] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 347.499586][T17383] netlink: 'syz.4.2764': attribute type 1 has an invalid length. [ 347.508811][T17380] batadv_slave_1: entered promiscuous mode [ 347.882443][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2766'. [ 347.882474][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2766'. [ 348.195165][T17411] xt_hashlimit: size too large, truncated to 1048576 [ 348.795447][T17426] syzkaller1: entered promiscuous mode [ 348.795480][T17426] syzkaller1: entered allmulticast mode [ 348.814202][T17426] 0: reclassify loop, rule prio 0, protocol 03 [ 348.893870][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 348.941575][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2775'. [ 349.176262][T17439] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2777'. [ 349.176927][T17439] netlink: 'syz.2.2777': attribute type 2 has an invalid length. [ 349.223660][T17439] !;: entered promiscuous mode [ 349.355189][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2782'. [ 349.357575][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2782'. [ 349.594299][T17459] netlink: 'syz.2.2784': attribute type 6 has an invalid length. [ 349.616619][T17456] ip6t_srh: unknown srh match flags 4000 [ 350.580189][T17491] netlink: 'syz.3.2796': attribute type 1 has an invalid length. [ 350.620244][T17494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.657589][T17491] 8021q: adding VLAN 0 to HW filter on device bond18 [ 350.834652][T17491] bond18: (slave geneve4): making interface the new active one [ 350.867336][T17494] xt_CT: No such helper "syz0" [ 350.877208][T17491] bond18: (slave geneve4): Enslaving as an active interface with an up link [ 350.892677][T17494] netlink: 'syz.4.2797': attribute type 12 has an invalid length. [ 350.924679][T17504] nbd: must specify at least one socket [ 351.420253][T17525] ip_tables: iptables: counters copy to user failed while replacing table [ 351.455141][T17524] ÿ: renamed from bond_slave_0 (while UP) [ 351.554416][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 351.572028][T17528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.709345][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 351.732315][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2803'. [ 351.886837][T17531] netlink: 'syz.0.2793': attribute type 13 has an invalid length. [ 353.234302][T17591] __nla_validate_parse: 3 callbacks suppressed [ 353.234320][T17591] netlink: 1136 bytes leftover after parsing attributes in process `syz.2.2815'. [ 353.944831][T17610] netlink: 'syz.4.2820': attribute type 1 has an invalid length. [ 353.944847][T17610] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2820'. [ 354.181091][T17617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.206311][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2819'. [ 354.248833][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'. [ 354.248872][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2822'. [ 354.533832][T17634] xt_hashlimit: size too large, truncated to 1048576 [ 354.836220][T17643] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 354.952718][T17643] bond10: entered promiscuous mode [ 354.953673][T17643] 8021q: adding VLAN 0 to HW filter on device bond10 [ 354.956176][T17645] tipc: Enabling of bearer rejected, failed to enable media [ 354.995906][T17643] bridge3: entered promiscuous mode [ 354.998228][T17643] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 355.014684][T17643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2829'. [ 355.037100][T17643] ip6gre1: entered promiscuous mode [ 355.051836][T17645] tipc: New replicast peer: 127.0.0.1 [ 355.052409][T17645] tipc: Enabled bearer , priority 10 [ 355.355401][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'. [ 355.377926][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'. [ 355.445197][T17672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2837'. [ 355.685497][T17677] syzkaller0: left promiscuous mode [ 355.685537][T17677] syzkaller0: left allmulticast mode [ 355.898477][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2841'. [ 356.279742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.312000][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.371026][T17715] syzkaller0: entered promiscuous mode [ 356.371064][T17715] syzkaller0: entered allmulticast mode [ 356.603690][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.663743][ T7720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.762963][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.033514][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.100837][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.205166][T17752] syzkaller1: entered promiscuous mode [ 357.205223][T17752] syzkaller1: entered allmulticast mode [ 357.332919][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.351798][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.774430][T17811] __nla_validate_parse: 5 callbacks suppressed [ 358.774467][T17811] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2869'. [ 358.927928][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 359.217504][T17821] net_ratelimit: 4 callbacks suppressed [ 359.217533][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.218254][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.319738][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 359.426570][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.533036][T17832] netlink: ct family unspecified [ 359.544717][T17831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 359.682354][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.691058][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.706445][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.716625][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.717731][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.868525][T17843] netlink: 'syz.1.2879': attribute type 3 has an invalid length. [ 359.973475][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.114683][ T5627] bond0: (slave syz_tun): Releasing backup interface [ 360.199390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.199956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.359301][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.452604][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.502500][T17862] pimreg: entered allmulticast mode [ 360.506170][T17862] pimreg: left allmulticast mode [ 360.538086][T17864] netlink: 'syz.4.2885': attribute type 1 has an invalid length. [ 360.614289][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 360.765408][T17868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2885'. [ 360.929668][T17876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'. [ 360.973877][T17836] wg0 speed is unknown, defaulting to 1000 [ 361.091211][T17881] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2890'. [ 361.091238][T17881] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2890'. [ 361.097712][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2888'. [ 361.192247][T15069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.239428][ C1] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 361.485381][T17836] lo speed is unknown, defaulting to 1000 [ 361.799730][ T4950] Bluetooth: hci5: command tx timeout [ 361.879139][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 361.923632][T17901] netlink: 'syz.4.2895': attribute type 15 has an invalid length. [ 361.924690][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2895'. [ 362.037239][T17900] 8021q: adding VLAN 0 to HW filter on device bond18 [ 362.137808][T17901] bond18: (slave geneve5): Enslaving as an active interface with an up link [ 362.192110][T17902] bond18 (unregistering): (slave geneve5): Releasing backup interface [ 362.197127][T17902] bond18 (unregistering): Released all slaves [ 362.467595][T17919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 362.699986][T17932] ovs-dp0: entered promiscuous mode [ 362.701142][T17836] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.701430][T17836] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.701904][T17836] bridge_slave_0: entered allmulticast mode [ 362.705932][T17836] bridge_slave_0: entered promiscuous mode [ 362.757532][T17836] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.757935][T17836] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.758234][T17836] bridge_slave_1: entered allmulticast mode [ 362.789847][T17836] bridge_slave_1: entered promiscuous mode [ 362.846483][T17836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.853164][T17836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.912920][T17836] team0: Port device team_slave_0 added [ 362.916744][T17836] team0: Port device team_slave_1 added [ 362.960895][T17940] lo: entered promiscuous mode [ 362.961070][T17940] tunl0: entered promiscuous mode [ 362.961250][T17940] gre0: entered promiscuous mode [ 362.961368][T17940] gretap0: entered promiscuous mode [ 362.961479][T17940] erspan0: entered promiscuous mode [ 362.961593][T17940] ip_vti0: entered promiscuous mode [ 362.961769][T17940] ip6_vti0: entered promiscuous mode [ 362.963683][T17940] sit0: entered promiscuous mode [ 362.963821][T17940] ip6tnl0: entered promiscuous mode [ 362.963931][T17940] ip6gre0: entered promiscuous mode [ 362.964068][T17940] syz_tun: entered promiscuous mode [ 362.965037][T17940] vcan0: entered promiscuous mode [ 362.965181][T17940] bond0: entered promiscuous mode [ 362.965388][T17940] team0: entered promiscuous mode [ 362.965402][T17940] veth1_to_hsr: entered promiscuous mode [ 362.965733][T17940] nlmon0: entered promiscuous mode [ 362.965879][T17940] batadv0: entered promiscuous mode [ 362.966015][T17940] vxcan0: entered promiscuous mode [ 362.966182][T17940] vxcan1: entered promiscuous mode [ 362.966408][T17940] veth0: entered promiscuous mode [ 362.966551][T17940] veth1: entered promiscuous mode [ 362.966685][T17940] wg0: entered promiscuous mode [ 362.966866][T17940] wg1: entered promiscuous mode [ 362.967002][T17940] wg2: entered promiscuous mode [ 362.967137][T17940] veth0_to_bridge: entered promiscuous mode [ 362.967273][T17940] bridge_slave_0: entered promiscuous mode [ 362.967525][T17940] veth1_to_bridge: entered promiscuous mode [ 362.967673][T17940] bridge_slave_1: entered promiscuous mode [ 362.967829][T17940] veth0_to_bond: entered promiscuous mode [ 362.967977][T17940] bond_slave_0: entered promiscuous mode [ 362.968142][T17940] veth1_to_bond: entered promiscuous mode [ 362.968276][T17940] bond_slave_1: entered promiscuous mode [ 362.968499][T17940] veth0_to_team: entered promiscuous mode [ 362.968728][T17940] team_slave_0: entered promiscuous mode [ 362.969866][T17940] veth1_to_team: entered promiscuous mode [ 362.970005][T17940] team_slave_1: entered promiscuous mode [ 362.970150][T17940] veth0_to_batadv: entered promiscuous mode [ 362.970288][T17940] batadv_slave_0: entered promiscuous mode [ 362.970427][T17940] veth0_to_hsr: entered promiscuous mode [ 362.970579][T17940] hsr_slave_0: entered promiscuous mode [ 362.971792][T17940] hsr_slave_1: entered promiscuous mode [ 362.972425][T17940] veth1_virt_wifi: entered promiscuous mode [ 362.972568][T17940] veth0_virt_wifi: entered promiscuous mode [ 362.972703][T17940] virt_wifi0: entered promiscuous mode [ 362.973127][T17940] macvtap0: entered promiscuous mode [ 362.974904][T17940] macsec0: entered promiscuous mode [ 362.975048][T17940] geneve0: entered promiscuous mode [ 362.975651][T17940] geneve1: entered promiscuous mode [ 362.975820][T17940] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 362.975966][T17940] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 362.976102][T17940] vlan2: entered promiscuous mode [ 362.976389][T17940] bond1: entered promiscuous mode [ 362.976576][T17940] veth2: entered promiscuous mode [ 362.976776][T17940] veth3: entered promiscuous mode [ 362.976924][T17940] bond2: entered promiscuous mode [ 362.977034][T17940] bond3: entered promiscuous mode [ 362.977142][T17940] : entered promiscuous mode [ 362.977353][T17940] gretap1: entered promiscuous mode [ 362.977462][T17940] vxlan0: entered promiscuous mode [ 362.977581][T17940] bridge1: entered promiscuous mode [ 362.977829][T17940] bridge2: entered promiscuous mode [ 362.978036][T17940] gretap2: entered promiscuous mode [ 362.978150][T17940] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 362.978384][T17940] bond5: entered promiscuous mode [ 362.982860][T17940] macvlan0: entered promiscuous mode [ 362.983022][T17940] sit1: entered promiscuous mode [ 362.983164][T17940] veth4: entered promiscuous mode [ 362.983677][T17940] veth5: entered promiscuous mode [ 362.983829][T17940] bridge3: entered promiscuous mode [ 362.983950][T17940] bridge4: entered promiscuous mode [ 362.984064][T17940] bond6: entered promiscuous mode [ 362.984183][T17940] >: entered promiscuous mode [ 362.984295][T17940] dvmrp0: entered promiscuous mode [ 362.984590][T17940] gretap3: entered promiscuous mode [ 363.035788][T17940] syzkaller0: entered promiscuous mode [ 363.045218][T17940] bridge6: entered promiscuous mode [ 363.045424][T17940] netdevsim netdevsim4 eth0: entered promiscuous mode [ 363.045557][T17940] netdevsim netdevsim4 eth1: entered promiscuous mode [ 363.045677][T17940] netdevsim netdevsim4 eth2: entered promiscuous mode [ 363.045792][T17940] netdevsim netdevsim4 eth3: entered promiscuous mode [ 363.048261][T17940] bond8: entered promiscuous mode [ 363.048280][T17940] geneve4: entered promiscuous mode [ 363.048725][T17940] bridge0: entered promiscuous mode [ 363.050423][T17940] macvlan1: entered promiscuous mode [ 363.051468][T17940] bond9: entered promiscuous mode [ 363.054009][T17940] bond10: entered promiscuous mode [ 363.054027][T17940] bridge8: entered promiscuous mode [ 363.055098][T17940] syztnl1: entered promiscuous mode [ 363.056897][T17940] ip6gretap0: entered promiscuous mode [ 363.057017][T17940] bond11: entered promiscuous mode [ 363.057133][T17940] bond12: entered promiscuous mode [ 363.057251][T17940] bond13: entered promiscuous mode [ 363.057264][T17940] bond14: entered promiscuous mode [ 363.060336][T17940] bond15: entered promiscuous mode [ 363.060461][T17940] gretap4: entered promiscuous mode [ 363.060571][T17940] ipip0: entered promiscuous mode [ 363.060713][T17940] macvlan2: entered promiscuous mode [ 363.060921][T17940] macvlan3: entered promiscuous mode [ 363.061068][T17940] bareudp0: entered promiscuous mode [ 363.061210][T17940] mac80211_hwsim hwsim21 wlan3: entered promiscuous mode [ 363.064583][T17940] gre2: entered promiscuous mode [ 363.064701][T17940] bond17: entered promiscuous mode [ 363.064854][T17940] geneve5: entered promiscuous mode [ 363.067164][T17836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.067177][T17836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.067200][T17836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.083441][T17836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.083458][T17836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.083483][T17836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.276135][T17836] hsr_slave_0: entered promiscuous mode [ 363.278043][T17836] hsr_slave_1: entered promiscuous mode [ 363.337248][T17946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.800219][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 363.879742][ T4950] Bluetooth: hci5: command tx timeout [ 363.970696][T17966] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 364.136211][T17836] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.136246][T17836] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.136271][T17836] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 364.266422][T17836] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.266489][T17836] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.266548][T17836] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 364.294889][T17974] __nla_validate_parse: 5 callbacks suppressed [ 364.294913][T17974] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2915'. [ 364.358922][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.462151][T17836] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.462222][T17836] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.462277][T17836] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 364.559786][T16037] net_ratelimit: 6 callbacks suppressed [ 364.559808][T16037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.590509][T17836] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.590574][T17836] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.590631][T17836] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 364.599820][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.625343][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 364.686295][T17980] gre3: entered allmulticast mode [ 365.399165][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.645050][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.661074][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.959499][ T4950] Bluetooth: hci5: command tx timeout [ 366.279484][T17950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.299717][T17836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.351664][T17836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.352564][T17836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.362853][T17836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.368298][T17836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.440977][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.453056][T17836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.453966][T17836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.491082][T17836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.702060][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.784977][ T7720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.957265][T17836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.046699][T17836] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.082527][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.082646][T16044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.093453][T18023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.093604][T18023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.093676][T18023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.133741][T15069] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.133846][T15069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.356674][T18030] 8021q: adding VLAN 0 to HW filter on device bond11 [ 367.430933][T18037] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2931'. [ 367.616428][T18043] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 367.736998][T18043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.773253][T18053] netlink: 'syz.1.2934': attribute type 1 has an invalid length. [ 367.818550][T18046] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 368.041237][ T4950] Bluetooth: hci5: command tx timeout [ 368.996268][T18090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.998144][T18090] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.998658][T18090] tipc: Resetting bearer [ 369.006987][T18090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.100113][T18090] tipc: Resetting bearer [ 369.102967][T18090] tipc: Resetting bearer [ 369.210455][ T8829] wg0 speed is unknown, defaulting to 1000 [ 369.210505][ T8829] syz1: Port: 1 Link ACTIVE [ 369.210572][ T8829] wg0 speed is unknown, defaulting to 1000 [ 369.238182][T18098] batman_adv: batadv0: Adding interface: syzkaller0 [ 369.238200][T18098] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.238232][T18098] batman_adv: batadv0: Interface activated: syzkaller0 [ 369.475187][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'. [ 369.475351][T18104] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 369.475381][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2945'. [ 369.828149][ T8825] net_ratelimit: 10 callbacks suppressed [ 369.828168][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.861628][T18096] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 369.911897][T18096] batman_adv: batadv0: Removing interface: syzkaller0 [ 369.966716][T17836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.144171][T17836] veth0_vlan: entered promiscuous mode [ 370.165921][T17836] veth1_vlan: entered promiscuous mode [ 370.206431][T17836] veth0_macvtap: entered promiscuous mode [ 370.261817][T17836] veth1_macvtap: entered promiscuous mode [ 370.418708][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 370.603291][ T7720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.605519][T17836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.657940][T17836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.679842][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.720107][ T7720] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.722464][T10640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.811344][ T7720] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.813105][ T7720] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.866316][ T8838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.071956][T10640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.071978][T10640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.334158][T16037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.334180][T16037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.537005][T18165] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2958'. [ 371.537042][T18165] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 371.703122][ T7720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.796830][T18178] tipc: New replicast peer: 255.255.255.255 [ 371.797582][T18178] tipc: Enabled bearer , priority 10 [ 371.852701][T18181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.874600][T18182] syzkaller0: left promiscuous mode [ 371.893819][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.977198][T18183] sctp: [Deprecated]: syz.3.2874 (pid 18183) Use of int in maxseg socket option. [ 371.977198][T18183] Use struct sctp_assoc_value instead [ 372.237281][T18196] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.237468][T18196] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.237634][T18196] bridge_slave_0: entered allmulticast mode [ 372.267829][T18196] bridge_slave_0: entered promiscuous mode [ 372.276240][T18196] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.276361][T18196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.800423][T15069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.909211][ T5751] tipc: Node number set to 4227989505 [ 372.932721][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.301553][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'. [ 373.576553][T18214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.754386][T18267] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 373.826558][T18270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2974'. [ 374.057111][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 374.283506][T18281] netlink: 'syz.0.2979': attribute type 4 has an invalid length. [ 374.426804][T18282] xt_CT: No such helper "syz0" [ 374.635394][T18300] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2981'. [ 374.800791][T18307] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 374.801310][T18307] team0: Device ipvlan2 is already an upper device of the team interface [ 375.013240][ T8829] net_ratelimit: 4 callbacks suppressed [ 375.013262][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.025247][ T7720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.575958][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.588419][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.598109][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.613418][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.616780][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.766618][T18341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2990'. [ 375.773939][T18341] sch_tbf: burst 88 is lower than device veth0_to_bond mtu (1514) ! [ 376.057190][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.136072][T16037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.184207][T18350] netlink: 'syz.3.2991': attribute type 1 has an invalid length. [ 376.184232][T18350] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2991'. [ 376.191999][T18350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2991'. [ 376.480148][T10640] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.480195][T10640] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.480227][T10640] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.490186][T10640] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.760385][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.911769][T18333] wg0 speed is unknown, defaulting to 1000 [ 377.044608][T18367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.080844][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.231176][ T7720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.358684][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 377.378680][T18333] lo speed is unknown, defaulting to 1000 [ 377.476034][T18376] can: request_module (can-proto-0) failed. [ 377.719044][ T4950] Bluetooth: hci1: command tx timeout [ 377.910105][T18333] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.910294][T18333] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.910704][T18333] bridge_slave_0: entered allmulticast mode [ 377.912462][T18333] bridge_slave_0: entered promiscuous mode [ 377.915418][T18333] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.915581][T18333] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.915709][T18333] bridge_slave_1: entered allmulticast mode [ 377.917312][T18333] bridge_slave_1: entered promiscuous mode [ 377.968487][T18333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.975840][T18333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.015889][T18333] team0: Port device team_slave_0 added [ 378.019707][T18333] team0: Port device team_slave_1 added [ 378.047995][T18333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.048014][T18333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.048038][T18333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.050951][T18333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.050965][T18333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.050996][T18333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.117955][T18333] hsr_slave_0: entered promiscuous mode [ 378.120519][T18333] hsr_slave_1: entered promiscuous mode [ 378.123536][T18333] debugfs: 'hsr0' already exists in 'hsr' [ 378.123557][T18333] Cannot create hsr debugfs directory [ 378.155059][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.337553][T18323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.356724][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.484732][T18333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.484792][T18333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.624970][T18397] syzkaller0: entered promiscuous mode [ 378.624994][T18397] syzkaller0: entered allmulticast mode [ 379.033610][T18333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.033669][T18333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.210396][T18333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.210461][T18333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.396378][T18432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3011'. [ 379.413925][T18333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.413960][T18333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.683996][T18447] geneve1: entered promiscuous mode [ 379.803226][ T4950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 379.807910][ T5629] Bluetooth: hci1: command tx timeout [ 379.823101][T18426] tunl0: left promiscuous mode [ 379.823568][T18426] gre0: left promiscuous mode [ 379.823925][T18426] gretap0: left promiscuous mode [ 379.825515][T18426] erspan0: left promiscuous mode [ 379.825893][T18426] ip_vti0: left promiscuous mode [ 379.826274][T18426] ip6_vti0: left promiscuous mode [ 379.826641][T18426] sit0: left promiscuous mode [ 379.826948][T18426] ip6tnl0: left promiscuous mode [ 379.844248][T18426] ip6gre0: left promiscuous mode [ 379.845194][T18426] syz_tun: left promiscuous mode [ 379.848214][T18426] bond0: left promiscuous mode [ 379.850210][T18426] team0: left promiscuous mode [ 379.856984][T18426] nlmon0: left promiscuous mode [ 379.857849][T18426] batadv0: left promiscuous mode [ 379.860428][T18426] vxcan0: left promiscuous mode [ 379.864755][T18426] vxcan1: left promiscuous mode [ 379.865647][T18426] veth0: left promiscuous mode [ 379.866434][T18426] veth1: left promiscuous mode [ 379.875239][T18426] wg0: left promiscuous mode [ 379.876162][T18426] wg1: left promiscuous mode [ 379.880720][T18426] wg2: left promiscuous mode [ 379.881675][T18426] veth0_to_bridge: left promiscuous mode [ 379.887923][T18426] bridge_slave_0: left promiscuous mode [ 379.888720][T18426] veth1_to_bridge: left promiscuous mode [ 379.898180][T18426] bridge_slave_1: left promiscuous mode [ 379.906175][T18426] bond_slave_0: left promiscuous mode [ 379.907005][T18426] veth1_to_bond: left promiscuous mode [ 379.913657][T18426] bond_slave_1: left promiscuous mode [ 379.914473][T18426] veth0_to_team: left promiscuous mode [ 379.918005][T18426] team_slave_0: left promiscuous mode [ 379.923971][T18426] veth1_to_team: left promiscuous mode [ 379.926041][T18426] team_slave_1: left promiscuous mode [ 379.926882][T18426] veth0_to_batadv: left promiscuous mode [ 379.944098][T18426] batadv_slave_0: left promiscuous mode [ 379.945181][T18426] veth0_to_hsr: left promiscuous mode [ 379.956701][T18426] hsr_slave_0: left promiscuous mode [ 379.960376][T18426] veth1_to_hsr: left promiscuous mode [ 379.967907][T18426] hsr_slave_1: left promiscuous mode [ 379.977294][T18426] veth1_virt_wifi: left promiscuous mode [ 379.982233][T18426] veth0_virt_wifi: left promiscuous mode [ 379.982988][T18426] virt_wifi0: left promiscuous mode [ 379.988685][T18426] veth1_macvtap: left promiscuous mode [ 380.006718][T18426] macvtap0: left promiscuous mode [ 380.021388][T18426] veth1_macvtap: entered promiscuous mode [ 380.021884][T18426] macsec0: left promiscuous mode [ 380.080668][T18426] geneve1: left promiscuous mode [ 380.107335][T18426] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 380.114849][T18426] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 380.125466][T18426] vlan2: left promiscuous mode [ 380.125492][T18426] geneve0: left promiscuous mode [ 380.140996][T18426] bond1: left promiscuous mode [ 380.156003][T18426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.156860][T18426] veth2: left promiscuous mode [ 380.170785][T18426] veth3: left promiscuous mode [ 380.182811][T18426] bond2: left promiscuous mode [ 380.183340][T18426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.184281][T18426] bond3: left promiscuous mode [ 380.186280][T18426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.186946][T18426] : left promiscuous mode [ 380.202934][ T8838] net_ratelimit: 4 callbacks suppressed [ 380.202957][ T8838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.211656][T18426] bond4: left promiscuous mode [ 380.247425][T18426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.248334][T18426] ip6gre1: left promiscuous mode [ 380.264578][T18426] gretap1: left promiscuous mode [ 380.266871][T18426] batman_adv: batadv0: Interface activated: gretap1 [ 380.267259][T18426] vxlan0: left promiscuous mode [ 380.268693][T18426] geneve2: left promiscuous mode [ 380.297242][T18426] bridge1: left promiscuous mode [ 380.305535][T18426] bridge2: left promiscuous mode [ 380.318433][T18426] geneve3: left promiscuous mode [ 380.324803][T18426] gretap2: left promiscuous mode [ 380.326584][T18426] mac80211_hwsim hwsim14 wlan2: left promiscuous mode [ 380.327402][T18426] gre1: left promiscuous mode [ 380.348138][T18426] bond5: left promiscuous mode [ 380.348162][T18426] lo: left promiscuous mode [ 380.362344][T18426] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.363238][T18426] bond0: entered promiscuous mode [ 380.363497][T18426] macvlan0: left promiscuous mode [ 380.363510][T18426] bond0: left promiscuous mode [ 380.364106][T18426] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 380.364994][T18426] sit1: left promiscuous mode [ 380.374550][T18438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.497996][T18426] veth4: left promiscuous mode [ 380.499030][T18426] veth5: left promiscuous mode [ 380.516492][T18426] bridge3: left promiscuous mode [ 380.527261][T18426] bridge4: left promiscuous mode [ 380.536825][T18426] bond6: left promiscuous mode [ 380.537807][T18426] 8021q: adding VLAN 0 to HW filter on device bond6 [ 380.544133][T18426] >: left promiscuous mode [ 380.580756][T18426] dvmrp0: left promiscuous mode [ 380.589510][T18426] bond7: left promiscuous mode [ 380.594888][T15069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.604410][T18426] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.605874][T18426] bridge5: left promiscuous mode [ 380.617005][T18426] gretap3: left promiscuous mode [ 380.638037][T18426] bridge6: left promiscuous mode [ 380.654461][T18426] netdevsim netdevsim4 eth0: left promiscuous mode [ 380.658485][T18426] 8021q: adding VLAN 0 to HW filter on device eth0 [ 380.665801][T18426] netdevsim netdevsim4 eth1: left promiscuous mode [ 380.687430][T18426] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.693559][T18426] netdevsim netdevsim4 eth2: left promiscuous mode [ 380.705802][T18426] 8021q: adding VLAN 0 to HW filter on device eth2 [ 380.715314][T18426] netdevsim netdevsim4 eth3: left promiscuous mode [ 380.722383][T18426] 8021q: adding VLAN 0 to HW filter on device eth3 [ 380.733929][T18426] bond8: left promiscuous mode [ 380.746901][T18426] 8021q: adding VLAN 0 to HW filter on device bond8 [ 380.757190][T18426] geneve4: left promiscuous mode [ 380.774266][T18426] macsec1: left promiscuous mode [ 380.775798][T18473] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 380.777891][T18469] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 380.786382][T18426] bridge0: left promiscuous mode [ 380.794050][T18426] veth0_to_team: entered promiscuous mode [ 380.794675][T18426] macvlan1: left promiscuous mode [ 380.815982][T18426] bond9: left promiscuous mode [ 380.816041][T18426] veth0_to_bond: left promiscuous mode [ 380.837965][T18426] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.847189][T18426] bridge7: left promiscuous mode [ 380.848561][T18426] bond10: left promiscuous mode [ 380.862251][T18426] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.871997][T18426] bridge8: left promiscuous mode [ 380.873038][T18426] gtp0: left promiscuous mode [ 380.874617][T18426] syztnl1: left promiscuous mode [ 380.876265][T18426] ip6gretap0: left promiscuous mode [ 380.878598][T18426] bond11: left promiscuous mode [ 380.901228][T18426] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.916091][T18426] bond12: left promiscuous mode [ 380.916566][T18426] 8021q: adding VLAN 0 to HW filter on device bond12 [ 380.918174][T18426] bond13: left promiscuous mode [ 380.932312][T18426] 8021q: adding VLAN 0 to HW filter on device bond13 [ 380.946158][T18426] bond14: left promiscuous mode [ 380.946612][T18426] 8021q: adding VLAN 0 to HW filter on device bond14 [ 380.947218][T18426] bond15: left promiscuous mode [ 380.947560][T18426] 8021q: adding VLAN 0 to HW filter on device bond15 [ 380.948154][T18426] gretap4: left promiscuous mode [ 380.981388][T18426] ipip0: left promiscuous mode [ 380.983054][T18426] team0: entered promiscuous mode [ 380.983071][T18426] veth1_to_hsr: entered promiscuous mode [ 380.983601][T18426] macvlan2: left promiscuous mode [ 380.983617][T18426] team0: left promiscuous mode [ 380.985317][T18426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 380.986228][T18426] team0: entered promiscuous mode [ 380.986699][T18426] macvlan3: left promiscuous mode [ 380.986713][T18426] team0: left promiscuous mode [ 380.988340][T18426] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 381.049546][T18426] 8021q: adding VLAN 0 to HW filter on device bond16 [ 381.050697][T18426] bareudp0: left promiscuous mode [ 381.052651][T18426] mac80211_hwsim hwsim21 wlan3: left promiscuous mode [ 381.053504][T18426] gre2: left promiscuous mode [ 381.113467][T18426] bond17: left promiscuous mode [ 381.113854][T18426] 8021q: adding VLAN 0 to HW filter on device bond17 [ 381.114597][T18426] geneve5: left promiscuous mode [ 381.116972][T18426] 8021q: adding VLAN 0 to HW filter on device bond18 [ 381.144788][T18426] 8021q: adding VLAN 0 to HW filter on device bond19 [ 381.240560][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.561839][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.600933][T15069] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 381.601420][T15069] bond1: (slave veth3): making interface the new active one [ 381.682702][T15069] bond1: active interface up! [ 381.692410][T18333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 381.705974][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.712413][T18494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3020'. [ 381.750516][T18333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.847945][T18333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 381.880081][T18452] Bluetooth: hci1: command tx timeout [ 381.894560][T18333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.911650][T18500] lo speed is unknown, defaulting to 1000 [ 381.913040][T18500] lo speed is unknown, defaulting to 1000 [ 381.913116][T18333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 381.962077][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3023'. [ 381.963252][T18333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.966255][T18500] lo speed is unknown, defaulting to 1000 [ 381.979665][T10640] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.979733][T10640] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 44188 - 0 [ 382.025276][T18333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 382.061621][T18333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.214274][ T7720] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.214329][ T7720] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 44188 - 0 [ 382.214423][ T7720] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.214494][ T7720] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 44188 - 0 [ 382.214583][ T7720] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.214625][ T7720] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 44188 - 0 [ 382.280962][ T8838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.473782][T18500] infiniband syz0: set down [ 382.473861][T18500] infiniband syz0: added lo [ 382.476951][ T8838] lo speed is unknown, defaulting to 1000 [ 382.575915][T18500] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 382.576012][T18500] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 382.576062][T18500] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 382.717063][T18500] RDS/IB: syz0: added [ 382.727752][T18500] smc: adding ib device syz0 with port count 1 [ 382.727780][T18500] smc: ib device syz0 port 1 has no pnetid [ 382.754113][ T8838] lo speed is unknown, defaulting to 1000 [ 382.795125][T18500] lo speed is unknown, defaulting to 1000 [ 382.811280][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.971054][T18333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.077636][T18333] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.117397][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.117508][T16044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.158269][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.158398][T16044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.322723][ T8838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.356523][T18500] lo speed is unknown, defaulting to 1000 [ 383.667797][T18544] pim6reg: entered allmulticast mode [ 383.745005][T18500] lo speed is unknown, defaulting to 1000 [ 383.962457][T18452] Bluetooth: hci1: command tx timeout [ 384.012226][T18550] pim6reg: left allmulticast mode [ 384.075529][T18552] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3031'. [ 384.267198][T18500] lo speed is unknown, defaulting to 1000 [ 384.734476][T18500] lo speed is unknown, defaulting to 1000 [ 384.966560][T18333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.028016][T18500] lo speed is unknown, defaulting to 1000 [ 385.196206][T18333] veth0_vlan: entered promiscuous mode [ 385.237795][T18333] veth1_vlan: entered promiscuous mode [ 385.300894][T18500] lo speed is unknown, defaulting to 1000 [ 385.402765][ T5770] net_ratelimit: 4 callbacks suppressed [ 385.402787][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.447964][T18333] veth0_macvtap: entered promiscuous mode [ 385.484285][T18333] veth1_macvtap: entered promiscuous mode [ 385.617453][T18333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.651291][T18333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.705185][T10640] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.721431][T10640] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.722771][T10640] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.801612][T16042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.804617][T18524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.128137][T16042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.128158][T16042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.159438][T15075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.278203][T10640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.278240][T10640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.444116][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.481916][T18594] netlink: 4516 bytes leftover after parsing attributes in process `syz.0.3035'. [ 386.497980][T18594] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3035'. [ 386.498035][T18594] netlink: 'syz.0.3035': attribute type 9 has an invalid length. [ 386.498049][T18594] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3035'. [ 386.498072][T18594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3035'. [ 387.260166][ T7720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.483309][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.640537][T18580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.773386][ T5628] bond0: (slave syz_tun): Releasing backup interface [ 387.861928][T18631] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 387.874012][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 387.907933][T18336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.923152][T18336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.924707][T18336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.927735][T18336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.944766][T18336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.038001][T18640] sit0: left promiscuous mode [ 388.081492][T18644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3051'. [ 388.104684][T18645] ip_tables: iptables: counters copy to user failed while replacing table [ 388.119443][ C1] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 388.137360][T18644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3051'. [ 388.252781][T18640] bond1: left promiscuous mode [ 388.306959][T18640] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 388.322633][T18640] bond3: left promiscuous mode [ 388.324297][T18640] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 388.327323][T18640] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 388.355962][T18640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.374763][T18640] bond6: left promiscuous mode [ 388.377212][T18640] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.380707][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.417177][T18640] 8021q: adding VLAN 0 to HW filter on device bond9 [ 388.428069][T18640] ip6gre1: left promiscuous mode [ 388.444939][T18640] 8021q: adding VLAN 0 to HW filter on device eth0 [ 388.447394][T18640] 8021q: adding VLAN 0 to HW filter on device eth1 [ 388.465856][T18640] 8021q: adding VLAN 0 to HW filter on device eth2 [ 388.468227][T18640] 8021q: adding VLAN 0 to HW filter on device eth3 [ 388.487712][T18640] 8021q: adding VLAN 0 to HW filter on device bond10 [ 388.488515][T18640] ipip2: left promiscuous mode [ 388.508359][ T8838] lo speed is unknown, defaulting to 1000 [ 388.508400][ T8838] syz0: Port: 1 Link ACTIVE [ 388.508468][ T8838] lo speed is unknown, defaulting to 1000 [ 388.521116][ T8838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.691659][ T7720] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.691695][ T7720] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.759344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.760889][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 388.950001][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 388.950027][T18665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3053'. [ 389.187407][T18665] veth7: entered allmulticast mode [ 389.363735][ T7720] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.363770][ T7720] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.433310][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.433513][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.434307][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.435377][T15069] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 389.504998][T18674] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 389.505067][T18674] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 389.505128][T18674] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 389.718132][ T7720] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.718202][ T7720] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.871220][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.902039][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.909634][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.983734][ T7720] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.983793][ T7720] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.024472][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.026940][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.040610][T18452] Bluetooth: hci0: command tx timeout [ 390.082629][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.084468][T18674] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.590175][ T6596] net_ratelimit: 3 callbacks suppressed [ 390.590210][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.600436][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.762394][ T7720] bridge_slave_1: left allmulticast mode [ 390.762447][ T7720] bridge_slave_1: left promiscuous mode [ 390.764111][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.818383][ T7720] bridge_slave_0: left allmulticast mode [ 390.818412][ T7720] bridge_slave_0: left promiscuous mode [ 390.818653][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.917519][ T7720] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 391.020874][T18716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3064'. [ 391.077425][ T6596] IPVS: starting estimator thread 0... [ 391.159768][T18721] IPVS: using max 27 ests per chain, 64800 per kthread [ 391.645399][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.694991][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.802731][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.119673][T18452] Bluetooth: hci0: command tx timeout [ 392.680205][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.799804][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.639536][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 393.729398][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.923008][T15075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.208512][T18452] Bluetooth: hci0: command tx timeout [ 394.603900][ T7720] batman_adv: batadv0: Removing interface: ip6gretap1 [ 394.765899][ T8838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.154398][ T7720] bond4 (unregistering): (slave bond0): Releasing active interface [ 395.173353][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.176426][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.178125][ T7720] bond0 (unregistering): Released all slaves [ 395.199781][ T7720] bond1 (unregistering): Released all slaves [ 395.218348][ T7720] bond2 (unregistering): Released all slaves [ 395.247182][ T7720] bond3 (unregistering): Released all slaves [ 395.271551][ T7720] bond4 (unregistering): Released all slaves [ 395.285796][ T7720] bond5 (unregistering): Released all slaves [ 395.318322][ T7720] bond6 (unregistering): Released all slaves [ 395.333763][ T7720] bond7 (unregistering): (slave veth7): Releasing active interface [ 395.335486][ T7720] bond7 (unregistering): Released all slaves [ 395.366656][ T7720] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 395.368378][ T7720] bond8 (unregistering): Released all slaves [ 395.412464][T18707] kthread_run failed with err -4 [ 395.459816][T18715] syzkaller0: entered promiscuous mode [ 395.459857][T18715] syzkaller0: entered allmulticast mode [ 395.489817][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 395.512789][T18639] wg0 speed is unknown, defaulting to 1000 [ 395.761977][ T7720] !;: left promiscuous mode [ 395.806425][ T8825] net_ratelimit: 2 callbacks suppressed [ 395.806444][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.888948][T18742] netlink: 'syz.1.3068': attribute type 1 has an invalid length. [ 396.000185][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3068'. [ 396.193477][T16040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.282866][T18452] Bluetooth: hci0: command tx timeout [ 396.376085][T18742] bond12: entered promiscuous mode [ 396.378036][T18742] 8021q: adding VLAN 0 to HW filter on device bond12 [ 396.384937][T18744] bond12: entered allmulticast mode [ 396.432367][ T7720] tipc: Disabling bearer [ 396.436396][ T7720] tipc: Disabling bearer [ 396.436733][ T7720] tipc: Left network mode [ 396.444723][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 396.536800][T18765] bond12: (slave bridge9): making interface the new active one [ 396.536841][T18765] bridge9: entered promiscuous mode [ 396.537234][T18765] bridge9: entered allmulticast mode [ 396.566104][T18765] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 396.787092][T18639] lo speed is unknown, defaulting to 1000 [ 396.799776][T18639] lo speed is unknown, defaulting to 1000 [ 396.840387][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.249650][T18789] Cannot find add_set index 0 as target [ 397.250466][T18789] netlink: 'syz.2.3078': attribute type 19 has an invalid length. [ 397.277841][T18792] bond0: (slave erspan0): Opening slave failed [ 397.329791][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.663099][T18787] syzkaller1: entered promiscuous mode [ 397.663125][T18787] syzkaller1: entered allmulticast mode [ 397.880132][T18580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.881050][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.035139][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.035364][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.035556][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.035749][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.035961][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.036161][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.036371][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.036570][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.051455][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 398.217105][T18639] virt_wifi0 speed is unknown, defaulting to 1000 [ 398.226717][T18811] netlink: 'syz.4.3081': attribute type 4 has an invalid length. [ 398.282732][T16038] bond5: (slave lo): link status definitely down, disabling slave [ 398.392772][T16038] bond5: now running without any active interface! [ 398.443249][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.542631][T18825] sctp: [Deprecated]: syz.1.3084 (pid 18825) Use of int in max_burst socket option deprecated. [ 398.542631][T18825] Use struct sctp_assoc_value instead [ 398.742135][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 398.931338][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.088543][T18837] netlink: 'syz.4.3087': attribute type 1 has an invalid length. [ 399.510819][T16044] bond5: (slave lo): link status definitely up, 0 Mbps full duplex [ 399.511092][T16044] bond5: active interface up! [ 399.565376][T16041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.898304][T18846] macsec1: entered promiscuous mode [ 399.966471][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.161412][T18860] netlink: 'syz.4.3092': attribute type 10 has an invalid length. [ 400.352273][T18865] x_tables: unsorted entry at hook 2 [ 400.385775][T18867] ip6t_hbh: Not strict - not implemented [ 400.427143][T18866] veth0_to_bridge: entered promiscuous mode [ 400.427946][T18866] macvtap1: entered allmulticast mode [ 400.427963][T18866] veth0_to_bridge: entered allmulticast mode [ 400.458460][T18866] veth0_to_bridge: left allmulticast mode [ 400.458488][T18866] veth0_to_bridge: left promiscuous mode [ 400.624339][T18871] veth0_to_bridge: entered promiscuous mode [ 400.624810][T18871] macvtap1: entered allmulticast mode [ 400.624843][T18871] veth0_to_bridge: entered allmulticast mode [ 400.653178][T18871] veth0_to_bridge: left allmulticast mode [ 400.653240][T18871] veth0_to_bridge: left promiscuous mode [ 400.728576][T18869] netlink: 'syz.3.3094': attribute type 2 has an invalid length. [ 400.753645][T18876] netlink: 'syz.3.3094': attribute type 2 has an invalid length. [ 400.817776][ T7720] hsr_slave_0: left promiscuous mode [ 400.831756][ T7720] hsr_slave_1: left promiscuous mode [ 400.834606][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.834630][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.842942][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.842966][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.923725][ T5743] net_ratelimit: 1 callbacks suppressed [ 400.923760][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.996898][ T7720] veth1_vlan: left promiscuous mode [ 400.996992][ T7720] veth0_vlan: left promiscuous mode [ 401.000308][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.137997][T18892] Cannot find set identified by id 0 to match [ 401.528274][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 401.751433][ T7720] team0 (unregistering): Port device dummy0 removed [ 401.822217][ T6597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.909978][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 402.042471][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.199937][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 402.317394][T18907] __nla_validate_parse: 29 callbacks suppressed [ 402.317448][T18907] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3099'. [ 402.317480][T18907] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 402.527927][T18639] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.528197][T18639] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.528490][T18639] bridge_slave_0: entered allmulticast mode [ 402.568457][T18639] bridge_slave_0: entered promiscuous mode [ 402.603043][T18920] netlink: ct family unspecified [ 402.616493][T18922] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 402.655630][T18639] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.655957][T18639] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.656316][T18639] bridge_slave_1: entered allmulticast mode [ 402.687149][T18639] bridge_slave_1: entered promiscuous mode [ 402.691112][T18921] syzkaller0: entered promiscuous mode [ 402.691132][T18921] syzkaller0: entered allmulticast mode [ 402.798163][T18925] xt_CT: No such helper "snmp_trap" [ 402.859324][T18922] bond13: option mode: invalid value (7) [ 402.882949][T18922] bond13 (unregistering): Released all slaves [ 402.884062][T18938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3104'. [ 402.965707][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.064942][ T7720] IPVS: stop unused estimator thread 0... [ 403.091975][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.093454][T18934] tipc: Started in network mode [ 403.093482][T18934] tipc: Node identity ae56a5a4da21, cluster identity 4711 [ 403.094230][T18934] tipc: Enabled bearer , priority 0 [ 403.175761][T18913] tipc: Resetting bearer [ 403.239903][T18950] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.263758][T18913] tipc: Disabling bearer [ 403.316453][T18952] netlink: 'syz.2.3107': attribute type 1 has an invalid length. [ 403.328997][T18952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3107'. [ 403.331073][T18639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.378202][T18639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.635890][ T7720] dvmrp1: left allmulticast mode [ 403.698802][ T7720] ÿ: left promiscuous mode [ 403.699282][ T7720] bond_slave_1: left promiscuous mode [ 404.055388][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3113'. [ 404.107155][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3113'. [ 404.137681][T18977] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3113'. [ 404.243686][T18981] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3113'. [ 404.243810][T18981] netlink: 'syz.2.3113': attribute type 9 has an invalid length. [ 404.243839][T18981] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3113'. [ 404.244266][T18981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3113'. [ 404.711378][ T7720] bond3 (unregistering): (slave geneve2): Releasing active interface [ 404.798553][ T7720] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 404.826942][ T7720] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 404.827540][ T7720] bridge3 (unregistering): left promiscuous mode [ 404.867382][ T7720] bond0 (unregistering): left allmulticast mode [ 404.867406][ T7720] ÿ: left allmulticast mode [ 404.867439][ T7720] bond_slave_1: left allmulticast mode [ 404.882422][ T7720] bond4 (unregistering): (slave macvlan2): Removing an active aggregator [ 404.884450][ T7720] bond4 (unregistering): (slave macvlan2): Releasing backup interface [ 404.906275][ T7720] macvlan2 (unregistering): left allmulticast mode [ 404.917193][ T7720] bond0 (unregistering): (slave 17ÿ): Releasing backup interface [ 404.930509][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.933393][ T7720] bond0 (unregistering): Released all slaves [ 404.946121][ T7720] bond1 (unregistering): Released all slaves [ 404.969619][ T7720] bond2 (unregistering): Released all slaves [ 404.987377][ T7720] bond3 (unregistering): Released all slaves [ 405.023252][ T7720] bond4 (unregistering): Released all slaves [ 405.042597][ T7720] bond5 (unregistering): Released all slaves [ 405.062312][ T7720] bond6 (unregistering): (slave veth5): Releasing backup interface [ 405.065171][ T7720] bond6 (unregistering): Released all slaves [ 405.093373][ T7720] bond7 (unregistering): Released all slaves [ 405.116889][ T7720] bond8 (unregistering): Released all slaves [ 405.137664][ T7720] bond9 (unregistering): Released all slaves [ 405.164613][ T7720] bond10 (unregistering): Released all slaves [ 405.184072][T18639] team0: Port device team_slave_0 added [ 405.187063][T18639] team0: Port device team_slave_1 added [ 405.336812][T18977] 0·: renamed from hsr0 (while UP) [ 405.352685][T18977] 0·: entered allmulticast mode [ 405.352712][T18977] hsr_slave_0: entered allmulticast mode [ 405.352722][T18977] hsr_slave_1: entered allmulticast mode [ 405.353165][T18977] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 405.355242][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 405.442567][T18639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.442585][T18639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.442608][T18639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.447547][T18639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.447564][T18639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.447587][T18639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.532000][T18986] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3115'. [ 405.619840][T18639] hsr_slave_0: entered promiscuous mode [ 405.620854][T18639] hsr_slave_1: entered promiscuous mode [ 405.621537][T18639] debugfs: 'hsr0' already exists in 'hsr' [ 405.621555][T18639] Cannot create hsr debugfs directory [ 405.876372][ T7720] !: left promiscuous mode [ 406.057041][ T7720] !;: left promiscuous mode [ 406.247222][ T7720] tipc: Disabling bearer [ 406.247371][ T7720] tipc: Left network mode [ 406.312289][ T7720] IPVS: stopping backup sync thread 11307 ... [ 406.734008][T19025] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 406.865341][T19025] 8021q: adding VLAN 0 to HW filter on device bond13 [ 406.917874][T19031] Bluetooth: MGMT ver 1.23 [ 406.947594][T19026] bond13: (slave veth15): Enslaving as an active interface with a down link [ 407.089907][T19030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.106800][T19030] bond13: (slave batadv0): making interface the new active one [ 407.115332][T19030] batadv0: entered promiscuous mode [ 407.123093][T19030] bond13: (slave batadv0): Enslaving as an active interface with an up link [ 407.149892][T19033] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.656516][T19067] xt_hashlimit: size too large, truncated to 1048576 [ 407.692396][T19056] tipc: New replicast peer: 255.255.255.255 [ 407.696514][T19056] tipc: Enabled bearer , priority 10 [ 407.698464][T19058] syzkaller1: entered promiscuous mode [ 407.698486][T19058] syzkaller1: entered allmulticast mode [ 407.752299][T19068] __nla_validate_parse: 71 callbacks suppressed [ 407.752321][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 407.752347][T19068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3131'. [ 408.087238][T19068] geneve2: entered promiscuous mode [ 408.087263][T19068] geneve2: entered allmulticast mode [ 408.288786][T19082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3134'. [ 408.787367][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 408.834488][T19105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3139'. [ 409.132588][T19100] syzkaller0: entered promiscuous mode [ 409.132612][T19100] syzkaller0: entered allmulticast mode [ 409.432800][T19100] tipc: Started in network mode [ 409.432832][T19100] tipc: Node identity 1a3700483c28, cluster identity 4711 [ 409.433025][T19100] tipc: Enabled bearer , priority 0 [ 409.547522][T19100] tipc: Resetting bearer [ 409.664752][T19096] tipc: Resetting bearer [ 409.668233][T19130] openvswitch: netlink: IP tunnel dst address not specified [ 409.806119][T19096] tipc: Disabling bearer [ 409.939648][T19136] Bluetooth: MGMT ver 1.23 [ 410.364184][T18639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.404419][T18639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.417462][T18639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.458432][T18639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.473903][T18639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.552948][T18639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.562792][T18639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.596042][T18639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.809112][T19159] netlink: 'syz.2.3145': attribute type 6 has an invalid length. [ 410.941668][T19159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3145'. [ 411.041238][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3147'. [ 411.126386][T19163] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 411.126409][T19163] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3147'. [ 411.227409][T18639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.456538][ T7720] batadv_slave_1: left promiscuous mode [ 411.471234][ T7720] veth0_macvtap: left promiscuous mode [ 411.756951][T19190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3153'. [ 412.095800][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 412.111384][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 412.760082][T18336] Bluetooth: hci0: command 0x0405 tx timeout [ 412.909743][T18639] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.937650][T16037] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.937755][T16037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.976815][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.977042][ T6597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.095902][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'. [ 413.758714][ T7720] IPVS: stop unused estimator thread 0... [ 414.359045][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 414.669950][T19258] FAULT_INJECTION: forcing a failure. [ 414.669950][T19258] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 414.670046][T19258] CPU: 0 UID: 0 PID: 19258 Comm: syz.2.3163 Not tainted syzkaller #0 PREEMPT(full) [ 414.670066][T19258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 414.670089][T19258] Call Trace: [ 414.670096][T19258] [ 414.670104][T19258] dump_stack_lvl+0xe8/0x150 [ 414.670135][T19258] should_fail_ex+0x410/0x560 [ 414.670167][T19258] _copy_from_iter+0x1d3/0x1660 [ 414.670193][T19258] ? __alloc_skb+0x27a/0x7a0 [ 414.670219][T19258] ? __alloc_skb+0x27a/0x7a0 [ 414.670246][T19258] ? __alloc_skb+0x27a/0x7a0 [ 414.670271][T19258] ? __pfx__copy_from_iter+0x10/0x10 [ 414.670293][T19258] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 414.670315][T19258] ? __alloc_skb+0x27a/0x7a0 [ 414.670338][T19258] ? __alloc_skb+0x27a/0x7a0 [ 414.670370][T19258] ? netlink_sendmsg+0x64f/0xb20 [ 414.670392][T19258] ? skb_put+0x112/0x210 [ 414.670420][T19258] netlink_sendmsg+0x6bb/0xb20 [ 414.670447][T19258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.670474][T19258] ? aa_sock_msg_perm+0x144/0x210 [ 414.670501][T19258] ? apparmor_socket_sendmsg+0x98/0x360 [ 414.670523][T19258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.670542][T19258] sock_sendmsg_nosec+0x14e/0x190 [ 414.670567][T19258] ____sys_sendmsg+0x54e/0x850 [ 414.670599][T19258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.670644][T19258] ? import_iovec+0x73/0xa0 [ 414.670675][T19258] ___sys_sendmsg+0x2a5/0x360 [ 414.670700][T19258] ? __lock_acquire+0x747/0x2de0 [ 414.670723][T19258] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.670786][T19258] ? __fget_files+0x3a2/0x420 [ 414.670806][T19258] ? __fget_files+0x2a/0x420 [ 414.670836][T19258] __x64_sys_sendmsg+0x1b1/0x290 [ 414.670857][T19258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.670909][T19258] do_syscall_64+0x166/0x520 [ 414.670926][T19258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.670945][T19258] ? clear_bhb_loop+0x70/0xc0 [ 414.670968][T19258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.670987][T19258] RIP: 0033:0x7f93dc39f559 [ 414.671014][T19258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.671030][T19258] RSP: 002b:00007f93dd2c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.671052][T19258] RAX: ffffffffffffffda RBX: 00007f93dc625fa0 RCX: 00007f93dc39f559 [ 414.671066][T19258] RDX: 0000000000000000 RSI: 00002000000021c0 RDI: 0000000000000003 [ 414.671078][T19258] RBP: 00007f93dd2c8090 R08: 0000000000000000 R09: 0000000000000000 [ 414.671089][T19258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.671101][T19258] R13: 00007f93dc626038 R14: 00007f93dc625fa0 R15: 00007ffef70a5428 [ 414.671131][T19258] [ 414.997351][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 415.220606][T19272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.232514][T18639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.403814][T18639] veth0_vlan: entered promiscuous mode [ 415.424527][T18639] veth1_vlan: entered promiscuous mode [ 415.516642][T18639] veth0_macvtap: entered promiscuous mode [ 415.544006][T18639] veth1_macvtap: entered promiscuous mode [ 415.585587][T18639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.618375][T18639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.702148][ T7720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.704796][ T6597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.704874][ T6597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.709885][ T7720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.076006][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.076053][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.312186][ T6597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.312278][ T6597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.443191][T19306] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3172'. [ 417.333844][T19330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3177'. [ 417.364845][T19334] netlink: 'syz.0.3047': attribute type 1 has an invalid length. [ 417.501390][T19337] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3178'. [ 417.508507][T19334] erspan0: entered promiscuous mode [ 418.166939][ T1180] batadv0: left promiscuous mode [ 418.320291][T18452] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 418.329944][T18452] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 418.350314][T18452] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 418.354666][T18452] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 418.356501][T18452] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.603173][T19366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3182'. [ 418.815069][ T5637] syz_tun (unregistering): left allmulticast mode [ 418.839706][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 418.930664][T19370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3183'. [ 419.295618][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3186'. [ 419.352397][T19402] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3187'. [ 420.022944][T19424] netlink: 'syz.0.3191': attribute type 10 has an invalid length. [ 420.032700][T19423] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3189'. [ 420.069267][T19428] netlink: 'syz.0.3191': attribute type 10 has an invalid length. [ 420.072677][T19425] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 420.134125][T19420] xt_hashlimit: size too large, truncated to 1048576 [ 420.441131][T18452] Bluetooth: hci3: command tx timeout [ 420.587532][T19358] wg0 speed is unknown, defaulting to 1000 [ 421.235626][T19358] lo speed is unknown, defaulting to 1000 [ 421.249378][T19358] lo speed is unknown, defaulting to 1000 [ 421.854063][T19463] sctp: [Deprecated]: syz.3.3197 (pid 19463) Use of int in max_burst socket option. [ 421.854063][T19463] Use struct sctp_assoc_value instead [ 421.907151][T19358] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.030708][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 422.146932][T19470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.415617][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 422.519834][T18452] Bluetooth: hci3: command tx timeout [ 423.264049][T19476] ip6t_rpfilter: unknown options [ 423.273980][T19511] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20004 [ 423.283098][T19476] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3203'. [ 423.546479][T19358] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.546656][T19358] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.546790][T19358] bridge_slave_0: entered allmulticast mode [ 423.548517][T19358] bridge_slave_0: entered promiscuous mode [ 423.582941][T19358] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.583286][T19358] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.583427][T19358] bridge_slave_1: entered allmulticast mode [ 423.585136][T19358] bridge_slave_1: entered promiscuous mode [ 423.650653][T19358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.653546][T19358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.745967][T19527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3208'. [ 423.814387][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 423.852166][T19519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3207'. [ 423.913790][T19527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3208'. [ 423.914024][T19531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3209'. [ 423.917065][T19358] team0: Port device team_slave_0 added [ 423.945986][T19358] team0: Port device team_slave_1 added [ 423.989537][T19358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.989556][T19358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.989578][T19358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.991663][T19358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.991678][T19358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.991702][T19358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.262220][T19358] hsr_slave_0: entered promiscuous mode [ 424.263277][T19358] hsr_slave_1: entered promiscuous mode [ 424.263994][T19358] debugfs: 'hsr0' already exists in 'hsr' [ 424.264013][T19358] Cannot create hsr debugfs directory [ 424.604716][T18452] Bluetooth: hci3: command tx timeout [ 424.704646][T19540] can: request_module (can-proto-0) failed. [ 424.801475][T19550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3215'. [ 424.912751][T19358] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.912786][T19358] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.966043][T19555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3215'. [ 424.966070][T19555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3215'. [ 425.031615][T19553] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 425.565454][T19574] udevd[19574]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 425.595816][T19574] udevd[19574]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 425.655113][T19559] syzkaller0: entered promiscuous mode [ 425.655173][T19559] syzkaller0: entered allmulticast mode [ 425.734347][T19358] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.734415][T19358] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.831486][T19586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3219'. [ 426.687734][T18452] Bluetooth: hci3: command tx timeout [ 429.613524][T19561] tipc: Resetting bearer [ 429.803972][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3222'. [ 429.803998][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'. [ 429.867441][T19358] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.867477][T19358] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.916787][T19619] nla_validate_range_unsigned: 56 callbacks suppressed [ 429.916823][T19619] netlink: 'syz.2.3223': attribute type 11 has an invalid length. [ 430.038110][T19358] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.038145][T19358] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.134595][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 430.134647][T19629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3225'. [ 430.587189][T19644] netlink: 'syz.3.3232': attribute type 11 has an invalid length. [ 430.900177][T19660] sctp: [Deprecated]: syz.4.3235 (pid 19660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.900177][T19660] Use struct sctp_sack_info instead [ 430.907237][T19655] syzkaller0: entered promiscuous mode [ 430.907259][T19655] syzkaller0: entered allmulticast mode [ 431.049587][T19358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.096584][T19358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.097908][T19358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.136091][T19358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.151397][T19358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.174436][T19358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.175629][T19358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.271644][T19358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.582024][T19682] netlink: 'syz.0.3238': attribute type 1 has an invalid length. [ 431.664322][T19682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.895964][T19682] bond1: (slave geneve2): making interface the new active one [ 431.912348][T19682] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 431.956863][T19686] netlink: 'syz.4.3239': attribute type 1 has an invalid length. [ 431.956885][T19686] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3239'. [ 432.013513][T19659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3236'. [ 432.246372][T19358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.478101][T19358] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.545207][T15075] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.545420][T15075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.713480][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.713655][ T6597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.832639][T19574] udevd[19574]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 433.180113][T19763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 433.660147][T19778] netlink: 'syz.4.3245': attribute type 1 has an invalid length. [ 433.821846][T19778] 8021q: adding VLAN 0 to HW filter on device bond20 [ 433.995148][T19797] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3248'. [ 434.614113][T19803] veth0_to_bridge: entered promiscuous mode [ 434.635485][T19803] macvtap1: entered allmulticast mode [ 434.635526][T19803] veth0_to_bridge: entered allmulticast mode [ 434.666058][T19803] veth0_to_bridge: left allmulticast mode [ 434.666119][T19803] veth0_to_bridge: left promiscuous mode [ 435.522175][T19832] tipc: Started in network mode [ 435.522222][T19832] tipc: Node identity 86542d2eb238, cluster identity 4711 [ 435.553941][T19832] tipc: Enabled bearer , priority 0 [ 435.582977][T19833] tipc: Resetting bearer [ 435.667029][T19358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.744077][T19830] tipc: Disabling bearer [ 435.888213][T19358] veth0_vlan: entered promiscuous mode [ 435.919702][T19358] veth1_vlan: entered promiscuous mode [ 435.984850][T19358] veth0_macvtap: entered promiscuous mode [ 436.037174][T19358] veth1_macvtap: entered promiscuous mode [ 436.095210][T19358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.133435][T19358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.191335][T16037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.192612][T16037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.192655][T16037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.192689][T16037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.374498][T19857] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.3262'. [ 436.377522][T19857] netlink: 'syz.3.3262': attribute type 34 has an invalid length. [ 436.377542][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 436.542179][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 436.555892][T19857] bond2: option lacp_strict: invalid value (100) [ 436.574551][T19857] bond2 (unregistering): Released all slaves [ 436.803684][T19882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3266'. [ 436.804950][T19881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3266'. [ 437.152193][ T6597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.152216][ T6597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.164301][T19891] ip_tables: iptables: counters copy to user failed while replacing table [ 437.315310][T16037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.315332][T16037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.744269][T19908] netlink: 'syz.0.3272': attribute type 1 has an invalid length. [ 437.744291][T19908] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3272'. [ 437.744311][T19908] nbd: couldn't find device at index 767 [ 437.764204][T19908] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.3272'. [ 440.463420][T19908] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 440.482642][T19908] 0ªX¹¦Dö»: entered allmulticast mode [ 441.181304][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3280'. [ 441.250439][T18336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.255618][T18336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.269715][T18336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.291066][T18336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.294483][T18336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.392517][T19957] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3281'. [ 441.943044][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 442.222967][T19990] FAULT_INJECTION: forcing a failure. [ 442.222967][T19990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.222996][T19990] CPU: 1 UID: 0 PID: 19990 Comm: syz.1.3288 Not tainted syzkaller #0 PREEMPT(full) [ 442.223018][T19990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 442.223030][T19990] Call Trace: [ 442.223037][T19990] [ 442.223045][T19990] dump_stack_lvl+0xe8/0x150 [ 442.223078][T19990] should_fail_ex+0x410/0x560 [ 442.223110][T19990] _copy_from_user+0x2d/0xb0 [ 442.223138][T19990] __sys_bind+0x1c6/0x410 [ 442.223163][T19990] ? __pfx___sys_bind+0x10/0x10 [ 442.223198][T19990] ? __pfx_ksys_write+0x10/0x10 [ 442.223227][T19990] __x64_sys_bind+0x7a/0x90 [ 442.223251][T19990] do_syscall_64+0x166/0x520 [ 442.223267][T19990] ? trace_irq_disable+0x3b/0x140 [ 442.223287][T19990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.223306][T19990] ? clear_bhb_loop+0x70/0xc0 [ 442.223326][T19990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.223344][T19990] RIP: 0033:0x7f585399f559 [ 442.223361][T19990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.223376][T19990] RSP: 002b:00007f585489d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 442.223396][T19990] RAX: ffffffffffffffda RBX: 00007f5853c25fa0 RCX: 00007f585399f559 [ 442.223410][T19990] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000003 [ 442.223421][T19990] RBP: 00007f585489d090 R08: 0000000000000000 R09: 0000000000000000 [ 442.223432][T19990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.223443][T19990] R13: 00007f5853c26038 R14: 00007f5853c25fa0 R15: 00007ffe26f563f8 [ 442.223482][T19990] [ 442.239236][T19988] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 442.612182][T19953] wg0 speed is unknown, defaulting to 1000 [ 442.827050][T20003] x_tables: duplicate underflow at hook 2 [ 442.951790][T19999] syzkaller0: entered promiscuous mode [ 442.951816][T19999] syzkaller0: entered allmulticast mode [ 442.980178][T19953] lo speed is unknown, defaulting to 1000 [ 443.054523][T19953] lo speed is unknown, defaulting to 1000 [ 443.201466][T20012] netlink: 400 bytes leftover after parsing attributes in process `syz.2.3294'. [ 443.347297][T20012] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3294'. [ 443.399591][T18452] Bluetooth: hci2: command tx timeout [ 443.510877][T20028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3295'. [ 443.511190][T20028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3295'. [ 443.511430][T20028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3295'. [ 443.511669][T20028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3295'. [ 443.513749][T20028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3295'. [ 443.516242][T20028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3295'. [ 443.584386][T19953] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.169294][T20049] Bluetooth: hci0: unsupported parameter 5135 [ 444.169335][T20049] Bluetooth: hci0: unsupported parameter 8192 [ 444.169366][T20049] Bluetooth: hci0: unsupported parameter 5135 [ 444.169395][T20049] Bluetooth: hci0: unsupported parameter 8192 [ 444.350509][T20055] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 444.887123][T20079] x_tables: duplicate underflow at hook 1 [ 445.205941][T19953] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.206297][T19953] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.206638][T19953] bridge_slave_0: entered allmulticast mode [ 445.212558][T19953] bridge_slave_0: entered promiscuous mode [ 445.222652][T19953] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.222880][T19953] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.226595][T19953] bridge_slave_1: entered allmulticast mode [ 445.232289][T19953] bridge_slave_1: entered promiscuous mode [ 445.339913][T20086] sock: sock_timestamping_bind_phc: sock not bind to device [ 445.343234][T19953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.346306][T19953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.408060][T19953] team0: Port device team_slave_0 added [ 445.420605][T19953] team0: Port device team_slave_1 added [ 445.454794][T19953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.454812][T19953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.454836][T19953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.456881][T19953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.456898][T19953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.456922][T19953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.495320][T18452] Bluetooth: hci2: command tx timeout [ 445.863265][T19953] hsr_slave_0: entered promiscuous mode [ 445.865756][T19953] hsr_slave_1: entered promiscuous mode [ 445.869163][T19953] debugfs: 'hsr0' already exists in 'hsr' [ 445.869223][T19953] Cannot create hsr debugfs directory [ 446.341450][T20099] veth0_to_bridge: entered promiscuous mode [ 446.341880][T20099] macvtap1: entered allmulticast mode [ 446.341896][T20099] veth0_to_bridge: entered allmulticast mode [ 446.403168][T20099] veth0_to_bridge: left allmulticast mode [ 446.403232][T20099] veth0_to_bridge: left promiscuous mode [ 446.568449][T20109] __nla_validate_parse: 61 callbacks suppressed [ 446.568487][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'. [ 446.763030][T20114] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 446.921000][T20116] xt_REDIRECT: bad MAP_IPS. [ 447.129912][T20122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3318'. [ 447.542004][T20137] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3322'. [ 447.559627][T18452] Bluetooth: hci2: command tx timeout [ 447.578555][T19953] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.578620][T19953] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.578673][T19953] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 44188 - 0 [ 447.890159][T19953] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.890195][T19953] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.890219][T19953] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 44188 - 0 [ 447.956547][T20148] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3325'. [ 448.074318][T19953] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.074362][T19953] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.074386][T19953] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 44188 - 0 [ 448.295461][T19953] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.295497][T19953] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.296065][T19953] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 44188 - 0 [ 448.345801][T20152] netlink: 'syz.1.3327': attribute type 1 has an invalid length. [ 448.345828][T20152] netlink: 'syz.1.3327': attribute type 1 has an invalid length. [ 448.354661][T20154] nbd: must specify at least one socket [ 448.386295][T20156] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 448.397940][T20156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3328'. [ 448.656583][ T30] audit: type=1800 audit(1793091082.115:7): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3334" name=B702 dev="tmpfs" ino=512 res=0 errno=-22 [ 448.812703][T19953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.817486][T19953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.818520][T19953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.870323][T19953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.886994][T19953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.913566][T19953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.916121][T19953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 448.947270][T19953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.191305][T20185] xt_IDLETIMER: timeout value is zero [ 449.235575][T19953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.273514][T19953] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.308133][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.308331][ T6597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.381863][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.382088][ T6597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.454543][T20195] netlink: 'syz.0.3341': attribute type 1 has an invalid length. [ 449.454566][T20195] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3341'. [ 449.534898][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'. [ 449.639815][T18452] Bluetooth: hci2: command tx timeout [ 450.498945][T20233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3348'. [ 450.512320][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3347'. [ 450.839533][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 451.345444][T20233] macsec1: left promiscuous mode [ 451.355981][T20233] geneve2: left promiscuous mode [ 451.840189][T19953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.925730][T20263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3353'. [ 452.761499][T19953] veth0_vlan: entered promiscuous mode [ 452.792499][T19953] veth1_vlan: entered promiscuous mode [ 452.863051][T20296] netlink: 'syz.3.3360': attribute type 11 has an invalid length. [ 452.967110][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.012340][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.055525][T19953] veth0_macvtap: entered promiscuous mode [ 453.078347][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.112126][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.135040][T19953] veth1_macvtap: entered promiscuous mode [ 453.137509][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.161558][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.183377][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.203955][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.234179][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 453.314302][T19953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.335615][T20314] siw: device registration error -23 [ 453.435356][T19953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.435520][T20318] @0Ù: renamed from bond_slave_1 (while UP) [ 453.601394][T16038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.601441][T16038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.601472][T16038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.601503][T16038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.067539][T16041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.067594][T16041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.322716][ T6597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.322739][ T6597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.905959][T20343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.206788][T20357] ip6t_srh: unknown srh match flags 4000 [ 456.029731][T20389] nbd: must specify at least one socket [ 456.622899][T20401] veth0_to_bridge: entered promiscuous mode [ 456.624339][T20401] macvtap1: entered allmulticast mode [ 456.624357][T20401] veth0_to_bridge: entered allmulticast mode [ 456.653383][T20401] veth0_to_bridge: left allmulticast mode [ 456.653412][T20401] veth0_to_bridge: left promiscuous mode [ 456.788275][T20405] syzkaller0: entered promiscuous mode [ 456.788315][T20405] syzkaller0: entered allmulticast mode [ 456.969359][T20424] __nla_validate_parse: 28 callbacks suppressed [ 456.971891][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3393'. [ 457.100090][T20416] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 457.159918][T20416] syzkaller0: entered promiscuous mode [ 457.159944][T20416] syzkaller0: entered allmulticast mode [ 457.236652][T20431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3397'. [ 457.236916][T20431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3397'. [ 457.253113][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 457.658004][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3398'. [ 457.658066][T20450] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3398'. [ 457.751748][T20443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3399'. [ 457.848687][T20444] block nbd3: Unsupported socket: should be TCP or UNIX. [ 461.397639][T20450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3398'. [ 461.397666][T20450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3398'. [ 461.695062][T20466] netlink: 'syz.4.3405': attribute type 8 has an invalid length. [ 461.717071][T20467] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3402'. [ 461.803384][T20473] IPv6: NLM_F_REPLACE set, but no existing node found! [ 461.863859][T20478] IPv6: NLM_F_REPLACE set, but no existing node found! [ 462.155265][T20480] __nla_validate_parse: 3 callbacks suppressed [ 462.155298][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 462.272585][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 462.277246][T20480] bond1: entered promiscuous mode [ 462.281313][T20480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.577204][T20494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3411'. [ 462.640606][T20494] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3411'. [ 462.640633][T20494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3411'. [ 462.640651][T20494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3411'. [ 462.640665][T20494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3411'. [ 462.790744][T20506] netlink: 'syz.0.3414': attribute type 12 has an invalid length. [ 462.841865][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 462.950469][T20509] bridge_slave_1: left allmulticast mode [ 462.950496][T20509] bridge_slave_1: left promiscuous mode [ 462.950772][T20509] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.994801][T20509] bridge_slave_0: left allmulticast mode [ 462.994830][T20509] bridge_slave_0: left promiscuous mode [ 462.995166][T20509] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.362615][ C1] ================================================================== [ 463.362635][ C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 463.362675][ C1] Free of addr ffff88804163fe00 by task syz.4.3415/20515 [ 463.362691][ C1] [ 463.362703][ C1] CPU: 1 UID: 0 PID: 20515 Comm: syz.4.3415 Not tainted syzkaller #0 PREEMPT(full) [ 463.362729][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 463.362744][ C1] Call Trace: [ 463.362752][ C1] [ 463.362762][ C1] dump_stack_lvl+0xe8/0x150 [ 463.362795][ C1] print_address_description+0x55/0x1e0 [ 463.362828][ C1] print_report+0x58/0x70 [ 463.362856][ C1] ? rcu_free_sheaf+0x31/0x200 [ 463.362882][ C1] kasan_report_invalid_free+0xea/0x110 [ 463.362913][ C1] ? rcu_free_sheaf+0x31/0x200 [ 463.362947][ C1] ? rcu_free_sheaf+0x31/0x200 [ 463.362970][ C1] __kasan_slab_pre_free+0x104/0x120 [ 463.362999][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 463.363037][ C1] ? rcu_core+0x8b0/0x1230 [ 463.363071][ C1] rcu_free_sheaf+0x31/0x200 [ 463.363113][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 463.363146][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 463.363173][ C1] ? rcu_core+0x8b0/0x1230 [ 463.363197][ C1] rcu_core+0x92e/0x1230 [ 463.363230][ C1] ? __pfx_rcu_core+0x10/0x10 [ 463.363256][ C1] ? clockevents_program_event+0x491/0x630 [ 463.363295][ C1] handle_softirqs+0x265/0x8d0 [ 463.363329][ C1] __irq_exit_rcu+0xc6/0x220 [ 463.363355][ C1] irq_exit_rcu+0x9/0x30 [ 463.363380][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 463.363414][ C1] [ 463.363421][ C1] [ 463.363430][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 463.363454][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0xb0 [ 463.363482][ C1] Code: c3 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d d8 e4 d2 12 65 48 8b 15 d8 e4 d2 12 f7 c2 00 01 00 ff [ 463.363501][ C1] RSP: 0018:ffffc900026c7598 EFLAGS: 00000246 [ 463.363521][ C1] RAX: ffffffff82454930 RBX: 0000000000071e84 RCX: 0000000000080000 [ 463.363537][ C1] RDX: ffffc900113eb000 RSI: 0000000000000001 RDI: 0000000000000000 [ 463.363551][ C1] RBP: 0000000000000001 R08: ffffffff8245587a R09: 0000000000000000 [ 463.363564][ C1] R10: dffffc0000000000 R11: fffffbfff3754580 R12: ffff88805c0968d0 [ 463.363581][ C1] R13: ffff88804229f9f8 R14: 0000000000000001 R15: 0000000071e84867 [ 463.363601][ C1] ? pfn_valid+0xba/0x490 [ 463.363631][ C1] ? page_table_check_set+0x30/0x530 [ 463.363666][ C1] page_table_check_set+0x30/0x530 [ 463.363700][ C1] map_anon_folio_pte_nopf+0x5d5/0x5e0 [ 463.363727][ C1] map_anon_folio_pte_pf+0xbe/0x260 [ 463.363756][ C1] do_pte_missing+0x2d5a/0x34b0 [ 463.363793][ C1] handle_mm_fault+0x1a53/0x3750 [ 463.363821][ C1] ? handle_mm_fault+0xf1/0x3750 [ 463.363848][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 463.363870][ C1] ? follow_page_pte+0x748/0xf10 [ 463.363897][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 463.363924][ C1] __get_user_pages+0x1670/0x2750 [ 463.363974][ C1] __gup_longterm_locked+0x3e2/0x16f0 [ 463.363997][ C1] ? lock_acquire+0x115/0x350 [ 463.364030][ C1] pin_user_pages+0x9d/0xd0 [ 463.364052][ C1] xdp_umem_pin_pages+0x11b/0x340 [ 463.364097][ C1] xdp_umem_create+0x63d/0x8b0 [ 463.364133][ C1] xsk_setsockopt+0x82f/0x960 [ 463.364162][ C1] ? __pfx_xsk_setsockopt+0x10/0x10 [ 463.364194][ C1] ? aa_sock_opt_perm+0x142/0x1e0 [ 463.364221][ C1] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 463.364238][ C1] ? __pfx_xsk_setsockopt+0x10/0x10 [ 463.364269][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 463.364305][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 463.364339][ C1] do_syscall_64+0x166/0x520 [ 463.364359][ C1] ? trace_irq_disable+0x3b/0x140 [ 463.364383][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.364403][ C1] ? clear_bhb_loop+0x70/0xc0 [ 463.364427][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.364447][ C1] RIP: 0033:0x7f5c7099f559 [ 463.364465][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.364483][ C1] RSP: 002b:00007f5c71855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 463.364502][ C1] RAX: ffffffffffffffda RBX: 00007f5c70c26090 RCX: 00007f5c7099f559 [ 463.364520][ C1] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 463.364532][ C1] RBP: 00007f5c70a36b20 R08: 0000000000000020 R09: 0000000000000000 [ 463.364546][ C1] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 463.364560][ C1] R13: 00007f5c70c26128 R14: 00007f5c70c26090 R15: 00007ffe9b848ab8 [ 463.364580][ C1] [ 463.364587][ C1] [ 463.364601][ C1] Allocated by task 16037: [ 463.364616][ C1] kasan_save_track+0x3e/0x80 [ 463.364643][ C1] __kasan_kmalloc+0x93/0xb0 [ 463.364668][ C1] __kmalloc_cache_noprof+0x31c/0x600 [ 463.364693][ C1] hwsim_update_pib+0x7e/0x400 [ 463.364719][ C1] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 463.364740][ C1] drv_set_promiscuous_mode+0x154/0x2d0 [ 463.364767][ C1] drv_start+0x4db/0x1000 [ 463.364793][ C1] mac802154_scan_worker+0x8e6/0xe60 [ 463.364820][ C1] process_scheduled_works+0xc3d/0x1630 [ 463.364846][ C1] worker_thread+0xa47/0xfb0 [ 463.364871][ C1] kthread+0x38b/0x480 [ 463.364886][ C1] ret_from_fork+0x514/0xb70 [ 463.364903][ C1] ret_from_fork_asm+0x1a/0x30 [ 463.364920][ C1] [ 463.364925][ C1] Freed by task 20515: [ 463.364935][ C1] kasan_save_track+0x3e/0x80 [ 463.364959][ C1] kasan_save_free_info+0x40/0x50 [ 463.364981][ C1] __kasan_slab_free+0x5c/0x80 [ 463.365008][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 463.365039][ C1] rcu_free_sheaf+0x31/0x200 [ 463.365080][ C1] rcu_core+0x92e/0x1230 [ 463.365103][ C1] handle_softirqs+0x265/0x8d0 [ 463.365123][ C1] __irq_exit_rcu+0xc6/0x220 [ 463.365145][ C1] irq_exit_rcu+0x9/0x30 [ 463.365166][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 463.365197][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 463.365215][ C1] [ 463.365220][ C1] The buggy address belongs to the object at ffff88804163fe00 [ 463.365220][ C1] which belongs to the cache kmalloc-64 of size 64 [ 463.365238][ C1] The buggy address is located 0 bytes inside of [ 463.365238][ C1] 64-byte region [ffff88804163fe00, ffff88804163fe40) [ 463.365260][ C1] [ 463.365266][ C1] The buggy address belongs to the physical page: [ 463.365287][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804163fa00 pfn:0x4163f [ 463.365308][ C1] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 463.365334][ C1] page_type: f5(slab) [ 463.365353][ C1] raw: 00fff00000000200 ffff88801c0418c0 ffffea0001efc990 ffffea0000a77290 [ 463.365373][ C1] raw: ffff88804163fa00 0000000000200014 00000000f5000000 0000000000000000 [ 463.365384][ C1] page dumped because: kasan: bad access detected [ 463.365399][ C1] page_owner tracks the page as allocated [ 463.365407][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14767, tgid 14767 (udevd), ts 276563440183 [ 463.365439][ C1] post_alloc_hook+0x1f9/0x250 [ 463.365462][ C1] get_page_from_freelist+0x2209/0x2280 [ 463.365489][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 463.365516][ C1] allocate_slab+0x7d/0x620 [ 463.365533][ C1] refill_objects+0x2d5/0x350 [ 463.365551][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 463.365580][ C1] __kmalloc_noprof+0x476/0x710 [ 463.365603][ C1] tomoyo_encode+0x2ad/0x570 [ 463.365628][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 463.365653][ C1] tomoyo_check_open_permission+0x229/0x470 [ 463.365675][ C1] security_file_open+0xa9/0x240 [ 463.365693][ C1] do_dentry_open+0x495/0x1360 [ 463.365722][ C1] vfs_open_consume+0x4a/0x350 [ 463.365751][ C1] path_openat+0x16fc/0x20f0 [ 463.365775][ C1] do_file_open+0x23e/0x4a0 [ 463.365798][ C1] do_sys_openat2+0x115/0x200 [ 463.365827][ C1] page last free pid 14728 tgid 14728 ts 276561173546 stack trace: [ 463.365842][ C1] __free_frozen_pages+0xc93/0xd90 [ 463.365866][ C1] tlb_remove_table_rcu+0x85/0x100 [ 463.365891][ C1] rcu_core+0x92e/0x1230 [ 463.365914][ C1] handle_softirqs+0x265/0x8d0 [ 463.365937][ C1] __irq_exit_rcu+0xc6/0x220 [ 463.365959][ C1] irq_exit_rcu+0x9/0x30 [ 463.365980][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 463.366010][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 463.366033][ C1] [ 463.366037][ C1] Memory state around the buggy address: [ 463.366048][ C1] ffff88804163fd00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 463.366070][ C1] ffff88804163fd80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 463.366085][ C1] >ffff88804163fe00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 463.366096][ C1] ^ [ 463.366106][ C1] ffff88804163fe80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 463.366121][ C1] ffff88804163ff00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 463.366132][ C1] ================================================================== [ 463.366175][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 464.260419][ C1] CPU: 1 UID: 0 PID: 20515 Comm: syz.4.3415 Not tainted syzkaller #0 PREEMPT(full) [ 464.269797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 464.280306][ C1] Call Trace: [ 464.283601][ C1] [ 464.286457][ C1] vpanic+0x56d/0xa60 [ 464.290461][ C1] ? rcu_is_watching+0x16/0xb0 [ 464.295233][ C1] ? __pfx_vpanic+0x10/0x10 [ 464.299749][ C1] panic+0xc5/0xd0 [ 464.303479][ C1] ? __pfx_panic+0x10/0x10 [ 464.307911][ C1] check_panic_on_warn+0x89/0xb0 [ 464.312969][ C1] end_report+0x73/0x170 [ 464.317254][ C1] ? rcu_free_sheaf+0x31/0x200 [ 464.322118][ C1] kasan_report_invalid_free+0xfa/0x110 [ 464.327677][ C1] ? rcu_free_sheaf+0x31/0x200 [ 464.332454][ C1] ? rcu_free_sheaf+0x31/0x200 [ 464.337225][ C1] __kasan_slab_pre_free+0x104/0x120 [ 464.342524][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 464.348091][ C1] ? rcu_core+0x8b0/0x1230 [ 464.352517][ C1] rcu_free_sheaf+0x31/0x200 [ 464.357135][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 464.362967][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 464.368200][ C1] ? rcu_core+0x8b0/0x1230 [ 464.372643][ C1] rcu_core+0x92e/0x1230 [ 464.376997][ C1] ? __pfx_rcu_core+0x10/0x10 [ 464.381871][ C1] ? clockevents_program_event+0x491/0x630 [ 464.387698][ C1] handle_softirqs+0x265/0x8d0 [ 464.392489][ C1] __irq_exit_rcu+0xc6/0x220 [ 464.397089][ C1] irq_exit_rcu+0x9/0x30 [ 464.401336][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 464.406993][ C1] [ 464.409921][ C1] [ 464.412847][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 464.418864][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0xb0 [ 464.425640][ C1] Code: c3 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d d8 e4 d2 12 65 48 8b 15 d8 e4 d2 12 f7 c2 00 01 00 ff [ 464.445249][ C1] RSP: 0018:ffffc900026c7598 EFLAGS: 00000246 [ 464.451333][ C1] RAX: ffffffff82454930 RBX: 0000000000071e84 RCX: 0000000000080000 [ 464.459321][ C1] RDX: ffffc900113eb000 RSI: 0000000000000001 RDI: 0000000000000000 [ 464.467379][ C1] RBP: 0000000000000001 R08: ffffffff8245587a R09: 0000000000000000 [ 464.475368][ C1] R10: dffffc0000000000 R11: fffffbfff3754580 R12: ffff88805c0968d0 [ 464.483343][ C1] R13: ffff88804229f9f8 R14: 0000000000000001 R15: 0000000071e84867 [ 464.491325][ C1] ? pfn_valid+0xba/0x490 [ 464.495666][ C1] ? page_table_check_set+0x30/0x530 [ 464.500966][ C1] page_table_check_set+0x30/0x530 [ 464.506091][ C1] map_anon_folio_pte_nopf+0x5d5/0x5e0 [ 464.511553][ C1] map_anon_folio_pte_pf+0xbe/0x260 [ 464.516814][ C1] do_pte_missing+0x2d5a/0x34b0 [ 464.521687][ C1] handle_mm_fault+0x1a53/0x3750 [ 464.526637][ C1] ? handle_mm_fault+0xf1/0x3750 [ 464.531576][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 464.536863][ C1] ? follow_page_pte+0x748/0xf10 [ 464.541802][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 464.547093][ C1] __get_user_pages+0x1670/0x2750 [ 464.552233][ C1] __gup_longterm_locked+0x3e2/0x16f0 [ 464.557696][ C1] ? lock_acquire+0x115/0x350 [ 464.562466][ C1] pin_user_pages+0x9d/0xd0 [ 464.566976][ C1] xdp_umem_pin_pages+0x11b/0x340 [ 464.572020][ C1] xdp_umem_create+0x63d/0x8b0 [ 464.576821][ C1] xsk_setsockopt+0x82f/0x960 [ 464.581514][ C1] ? __pfx_xsk_setsockopt+0x10/0x10 [ 464.586738][ C1] ? aa_sock_opt_perm+0x142/0x1e0 [ 464.591774][ C1] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 464.597371][ C1] ? __pfx_xsk_setsockopt+0x10/0x10 [ 464.602609][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 464.607663][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 464.612883][ C1] do_syscall_64+0x166/0x520 [ 464.617494][ C1] ? trace_irq_disable+0x3b/0x140 [ 464.622541][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.628719][ C1] ? clear_bhb_loop+0x70/0xc0 [ 464.633416][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.639328][ C1] RIP: 0033:0x7f5c7099f559 [ 464.643753][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.663796][ C1] RSP: 002b:00007f5c71855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 464.672249][ C1] RAX: ffffffffffffffda RBX: 00007f5c70c26090 RCX: 00007f5c7099f559 [ 464.680226][ C1] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 464.688199][ C1] RBP: 00007f5c70a36b20 R08: 0000000000000020 R09: 0000000000000000 [ 464.696175][ C1] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 464.704148][ C1] R13: 00007f5c70c26128 R14: 00007f5c70c26090 R15: 00007ffe9b848ab8 [ 464.712134][ C1] [ 464.715487][ C1] Kernel Offset: disabled [ 464.720029][ C1] Rebooting in 86400 seconds..