last executing test programs: 3m6.321916413s ago: executing program 4 (id=5836): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) (async) sendmsg(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="304340919bc044", 0x7}], 0x1, &(0x7f0000000e40)=ANY=[], 0x1010}, 0x4000004) 3m2.147435457s ago: executing program 4 (id=5841): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) 2m59.952146023s ago: executing program 4 (id=5844): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x2030}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x9, 0x0, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x370, 0x280, 0x1b0, 0x280, 0x280, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010101, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x7, 0x8, 0xdb1, 0x3, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 2m58.192077551s ago: executing program 2 (id=5846): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000958e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd60d3ffff00403a00fe880000000000000000000000000001ff0200000000000069207327db44d64c000000000000000102009078000000000000000000000000fc010000000000000000000000000000fe8000000000000000000000000000bb3a000000000000000c00040009200200"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000040000701fcffffff00000100037c0000040042800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x24000080) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 2m58.152527041s ago: executing program 4 (id=5847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840011000000000002000f116b61979e090001006c3274700000000008000240000000000900010073797a3000ffec000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x7c}}, 0x800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840011000000000002000f116b61979e090001006c3274700000000008000240000000000900010073797a3000ffec000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 2m57.353580559s ago: executing program 0 (id=5848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0x7, 0xfff, 0x10000, 0xffffffffffffffff, 0x115a, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xc}, 0x50) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x8, 0x2, 0x0, 0x0, "cf7175876853d309"}, 0x10}, 0x1, 0x0, 0x0, 0x20008814}, 0x4805) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r3 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 64) sendmmsg$alg(r3, &(0x7f0000004340)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001540)="9555d9cc111d987d25750612e1b624c3abbff3793c9103a60a5d88e9422491145a1002c5297a2fea7de02f1c19acb3b3", 0x30}], 0x1, &(0x7f0000001780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x2000891) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) 2m56.533378949s ago: executing program 0 (id=5850): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000003c0)) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m56.528040987s ago: executing program 4 (id=5852): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 2m53.3827544s ago: executing program 4 (id=5854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x1f}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16ddf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmsg$netlink(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) 2m52.517443241s ago: executing program 0 (id=5855): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1d, 0x4, 0xb4e4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012fff1000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x0, 0xff, r6, 0x401}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001e000100fdffffff0000000002000000010000070000000014000900766c616e300000000000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) 2m50.519623429s ago: executing program 2 (id=5858): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x200000004bc0, 0x0, 0x0, 0x200000004dbe, 0x200000005172], 0x0, 0x0, &(0x7f0000004bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xe) 2m49.116991182s ago: executing program 2 (id=5860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={r4, 0xffffffffffffffff, 0x0, r2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010700000000000000000700"], 0x18}], 0x1}, 0x0) ioctl$XFS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000040)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00082cbd74e328dbdf251d00000000002b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2m40.453343098s ago: executing program 0 (id=5872): socket$netlink(0x10, 0x3, 0x4) 2m40.421154275s ago: executing program 0 (id=5874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e000000000070000000000004000000082018000cac8f00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x98, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x31}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @broadcast}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000010000305000000000000000000001000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=r2], 0x80}}, 0x4) 2m39.737266248s ago: executing program 0 (id=5875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) close(r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m37.661347028s ago: executing program 32 (id=5854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x1f}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16ddf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmsg$netlink(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) 2m34.997100566s ago: executing program 2 (id=5879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) (async) ppoll(&(0x7f0000000140)=[{r2, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0) (async) 2m30.289779709s ago: executing program 2 (id=5882): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m27.68748668s ago: executing program 2 (id=5883): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket(0x8, 0x3, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async) socket(0x8, 0x3, 0x3) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) (async) 2m21.659307256s ago: executing program 33 (id=5875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) close(r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m15.221619169s ago: executing program 3 (id=5888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x50}}, 0x4000850) (async) ppoll(&(0x7f0000000000)=[{r0, 0x1a60}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) 2m13.938057144s ago: executing program 3 (id=5889): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x204}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004044}, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x200, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x13}]}]}]}, 0x38}}, 0x4000) 2m12.536998107s ago: executing program 3 (id=5891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572ad50372615d30b1c00000000000000000000000000000000000004"], 0x68) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000100)="2abea2da371ad51d8766f5ec304063fdc499a1c79442dc8a0d8e487bf15e21c3a8d87e843797cce19fceb0910d6d030defec946fc56c3e1827af46379c1f2b99cfab77ee1fcbb7f251bcb7b399772512f1e44ac487c4f6b2e747d664eb4de83f933883944058806a61d9076cf2a61ea9c7ac14f21642c2ede83a42395ca458fc") setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x7}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40890) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x3b4, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8824}, 0x48000) 2m12.464233207s ago: executing program 34 (id=5883): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket(0x8, 0x3, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async) socket(0x8, 0x3, 0x3) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) (async) 2m4.060409257s ago: executing program 3 (id=5893): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x5, 0x17e3, 0x6, 0x4, 0x3, 0x22, 0xa, "82befa4adaac8af9a5f04536c52e8916542c5d0d", "d67265c8edc0daa7b3f16caee9a79f9507785bc2"}) 1m58.372173132s ago: executing program 3 (id=5895): syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800000000e000000100000000001090780200000000000000a4e08bbe0bd4714632ffb8dbce8269b4fafb002510dd8e5af9"], 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140d, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4050) (async, rerun: 64) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000240)=0xc000000, 0x4) (rerun: 64) r3 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000180)={0x29364ddd, 0x30, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (rerun: 64) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r7, r6, 0x25, 0x0, @void}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, 0x7c}}, 0x24000800) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@can_newroute={0x94, 0x18, 0x800, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "44830ef0e29b4022"}, 0x6}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "0cd27b5223a31a8c"}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "5959a9df7b29c9e3"}}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x0, 0x1}, {0x1, 0x1}}}, @CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffffffffff9, 0x7}}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}, @CGW_CS_XOR={0x8, 0x5, {0x4, 0x0, 0x0, 0x2}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1m54.764827181s ago: executing program 3 (id=5896): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x6) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000140), 0x4) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1m39.756942803s ago: executing program 1 (id=5901): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x175, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x13f, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x2, 0x6, "c673f5", 0x0, 0x62, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, [@routing={0x9, 0xc, 0x2, 0x9a, 0x0, [@empty, @mcast2, @loopback, @loopback, @private0, @private2]}, @hopopts={0x73, 0x0, '\x00', [@pad1]}, @dstopts={0x0, 0x0, '\x00', [@ra]}, @srh={0x67, 0x2, 0x4, 0x1, 0x2, 0x58, 0xb, [@mcast2]}], "77c98dc58c61af486dcb82a1fcd2079d908e63014cecb927bec86c7d20899fb526ccf6742a8ed23245ef6a8fa8cb3bbaf2c0abb1724c2b9447d9bc84ee1331617214c96fecc608f06c857a5f3db3b495ac97afc8aa29b54e4930cebff80d6d04a3ca3edd6c289b581f07392ff4f5aa"}}}}}}}, 0x0) 1m36.890248275s ago: executing program 35 (id=5896): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x6) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000140), 0x4) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1m35.122320863s ago: executing program 1 (id=5903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xa4}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x0) accept4$tipc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80800) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a82100810015000800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000000780000edc755934ce9af861c66a68acdd055e0689218a2ac46ef0ccd82a91f40f8f467de765b86cee77b0c390a6fde3b1ba8e137fdbdc76bfc5c81c3150535d0fa46d220391bcdfd1cd745b52cccf69a7f0bd2cdbb31bdf4a296b4ee457d93be23509065cd09cb89cce836d0be00caa2750ca63f7cf4c3f28bfc7e1b77e290735e7689d9c9dd15450883c3d1e9f3408be63b50171113d2efcc9aa8593d05aa0c9d51aec2f63411ce3f96cbf4e23ed5dd3bf050e68abfac79aa35f2567b85ddbf4e4ff520bf6efe3f9c796c90102792f5ed6924f571497802bf9b14b0e54f2498593b6a0f4ea816"], 0x0) 1m28.609464417s ago: executing program 1 (id=5904): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x1c}}, 0x40005) (async) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000140)={{0x3c, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x10, 0x0, 0x50}, {@broadcast, 0x4e20, 0x0, 0x9, 0x0, 0x545021af}}, 0x44) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fffffff}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x174, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7828}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff4fa}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x2404c023}, 0x4840) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xc0, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff7ee}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) (async) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@loopback, @multicast2}, &(0x7f0000000780)=0xc) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x800) r6 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000008c0), 0x4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000044) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r8, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000e80)={{r6, &(0x7f0000000c80)='\'}&]]#\x00', 0x420200, &(0x7f0000000cc0)={@_ha_fsid={[0x0, 0x7]}, {0x6, 0x101, 0x39000000, 0xf61}}, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)}, {[0x10, 0x10, 0x6, 0x3]}, 0x6, 0xe7, &(0x7f0000000d80)=""/231}) ioctl$PPPIOCCONNECT(r9, 0x4004743a, &(0x7f0000000f00)=0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x8fe64000) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f80), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x808002}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x5c, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) recvmsg$unix(r9, &(0x7f0000002280)={&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001140)=""/95, 0x5f}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/42, 0x2a}], 0x4}, 0x101) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r11, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x20, r12, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x4000) 1m26.524195161s ago: executing program 1 (id=5905): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m15.187313314s ago: executing program 1 (id=5906): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x200, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1m13.737528358s ago: executing program 1 (id=5907): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0xd, &(0x7f00000002c0)=@raw=[@snprintf], 0x0, 0x1ff00, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3500000048a4989086370b481c2d0f18730cbda6c1e01d9b374996e6cbc535f4a3924aac78c2e10c0a5f53aa57c4dc8f1f17faea94e9cac1e4e3d8d4dfbf665dbe905b67c41571bbf2bc7cc192b0162b3bb2b4df3d4d1a485b9fabe0a81187e5173b2e99cd3e2af7a2f2ced5578d86985db159e4073257e0bd699bf97b8bf8f5eb803646e352ad75a0e6c8e36d0e29bd95a0e6d4a1289f9d234175f6aabfe16ea4e0de063e68e9c4d78c95c2ba04094e6e353a374f0bbdbbba810eb8817e2f6fa71b4626f074e01abbfdcf9bd2b8b395fae8e945d60939758f00ce944e005b27fa1f9500"/239, @ANYRES16=0x0, @ANYBLOB="020000200000020010000200000008000c018500000008003f000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000a00000300", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140019173400", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf2574000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r4, &(0x7f0000003880)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "0f3ced", 0x1161, 0x2f, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x43}, {[@hopopts={0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, @hopopts={0x0, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf, 0x0, [0x9], "11eaaec44760dcdf88264b230091c8"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xa31c], "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"/4096}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa], "f76d97a036a07038cbb496dee49747058cb598195b8a45f59ffd49f3bb8176f869f3e789e2738e2e81b1aa1f6d1abcb2943eaa954d4d99"}, {0x8, 0x88be, 0x4, {{0x4, 0x1, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x1, {0xfffff812}}}, {0x8, 0x22eb, 0x2, {{0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}, 0x2, {0x0, 0x7, 0x3, 0x7, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "5c30086cfc74af3458b975e54e07ca3f3c4087a1781798c570258038ada2c1de778982a846428c4210e9328c6714256a03c360fc1e332ce79365dca506fd5e4d809eff75d9f52005a3fd1d63a5bb5b34faa22aa15745fb8f2248c69c78a3d4dbdddda7f697630c3b42c7af09c69b1fe967ef0c246f2210b1d9ceedeffd8daae4670e4c0c99ee64fb9bc5566eaaf51786cea9c9903ab2b71182e7c1480ab3a6234e"}}}}}}, 0x1197) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r3}, 0xfffffd36) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x13, 0x12, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000060000000000000001000000852000000300000085100000fbffffff18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000005525e0ff010000001800000004000000000000007e04000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000b7daa4d43f091e14e81dbc6f64867d479edb345671c3e244c4ef628c2e22b7d05232c17b589d96a0a4a71b05a091999f4bba3ad7c0eb39c3b3b36201dd732d84f1c2fe3e37cf5f337c450e4804e39e131cf0080af569594b06881a2ae387cae2b5099d05c3b13d646229f99c2604cd01417a647f476672701b6d1959584fe7c33f6d7fe89ad3ed86a9a6aa61c5617f2170b50fb6beac8847c18b8cfb193971355226b335aa"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x60, &(0x7f0000000700)=""/96, 0x40f00, 0x2, '\x00', r12, @fallback=0x1f, r13, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10, 0x7, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000840)=[{0x2, 0x2, 0xf, 0xa}], 0x10, 0xfffffffe}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) r14 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r14, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0xdac}], 0x1, 0x0, 0x0) 55.42995097s ago: executing program 36 (id=5907): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0xd, &(0x7f00000002c0)=@raw=[@snprintf], 0x0, 0x1ff00, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3500000048a4989086370b481c2d0f18730cbda6c1e01d9b374996e6cbc535f4a3924aac78c2e10c0a5f53aa57c4dc8f1f17faea94e9cac1e4e3d8d4dfbf665dbe905b67c41571bbf2bc7cc192b0162b3bb2b4df3d4d1a485b9fabe0a81187e5173b2e99cd3e2af7a2f2ced5578d86985db159e4073257e0bd699bf97b8bf8f5eb803646e352ad75a0e6c8e36d0e29bd95a0e6d4a1289f9d234175f6aabfe16ea4e0de063e68e9c4d78c95c2ba04094e6e353a374f0bbdbbba810eb8817e2f6fa71b4626f074e01abbfdcf9bd2b8b395fae8e945d60939758f00ce944e005b27fa1f9500"/239, @ANYRES16=0x0, @ANYBLOB="020000200000020010000200000008000c018500000008003f000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000a00000300", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140019173400", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf2574000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r4, &(0x7f0000003880)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "0f3ced", 0x1161, 0x2f, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x43}, {[@hopopts={0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, @hopopts={0x0, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf, 0x0, [0x9], "11eaaec44760dcdf88264b230091c8"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xa31c], "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"/4096}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa], "f76d97a036a07038cbb496dee49747058cb598195b8a45f59ffd49f3bb8176f869f3e789e2738e2e81b1aa1f6d1abcb2943eaa954d4d99"}, {0x8, 0x88be, 0x4, {{0x4, 0x1, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x1, {0xfffff812}}}, {0x8, 0x22eb, 0x2, {{0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}, 0x2, {0x0, 0x7, 0x3, 0x7, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "5c30086cfc74af3458b975e54e07ca3f3c4087a1781798c570258038ada2c1de778982a846428c4210e9328c6714256a03c360fc1e332ce79365dca506fd5e4d809eff75d9f52005a3fd1d63a5bb5b34faa22aa15745fb8f2248c69c78a3d4dbdddda7f697630c3b42c7af09c69b1fe967ef0c246f2210b1d9ceedeffd8daae4670e4c0c99ee64fb9bc5566eaaf51786cea9c9903ab2b71182e7c1480ab3a6234e"}}}}}}, 0x1197) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r3}, 0xfffffd36) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x13, 0x12, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000060000000000000001000000852000000300000085100000fbffffff18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000005525e0ff010000001800000004000000000000007e04000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000b7daa4d43f091e14e81dbc6f64867d479edb345671c3e244c4ef628c2e22b7d05232c17b589d96a0a4a71b05a091999f4bba3ad7c0eb39c3b3b36201dd732d84f1c2fe3e37cf5f337c450e4804e39e131cf0080af569594b06881a2ae387cae2b5099d05c3b13d646229f99c2604cd01417a647f476672701b6d1959584fe7c33f6d7fe89ad3ed86a9a6aa61c5617f2170b50fb6beac8847c18b8cfb193971355226b335aa"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x60, &(0x7f0000000700)=""/96, 0x40f00, 0x2, '\x00', r12, @fallback=0x1f, r13, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10, 0x7, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000840)=[{0x2, 0x2, 0xf, 0xa}], 0x10, 0xfffffffe}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) r14 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r14, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0xdac}], 0x1, 0x0, 0x0) 0s ago: executing program 8 (id=5902): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000"], 0x18, 0x5}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x128, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendto$packet(r0, &(0x7f0000000640)="e8b7", 0x2, 0x40, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): syz.2.4327'. [ 533.506208][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'. [ 533.538026][T22135] gtp1: entered promiscuous mode [ 533.548907][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4333'. [ 533.553359][T22135] gtp1: entered allmulticast mode [ 533.606877][T22138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4333'. [ 533.739648][T22138] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.911349][T22151] xt_TCPMSS: Only works on TCP SYN packets [ 533.999867][T22154] Cannot find add_set index 4 as target [ 534.203617][T22168] syzkaller1: entered promiscuous mode [ 534.225885][T22168] syzkaller1: entered allmulticast mode [ 534.324027][T22172] macvtap0: entered allmulticast mode [ 534.354580][T22172] veth0_macvtap: entered allmulticast mode [ 534.759902][T22197] netlink: 'syz.3.4349': attribute type 1 has an invalid length. [ 534.829580][T22197] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4349'. [ 534.868768][T22197] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4349'. [ 534.939219][T22197] bond3: (slave geneve3): making interface the new active one [ 534.948184][T22197] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 535.003564][T18941] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 535.031159][T18941] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 535.066462][T18941] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 535.090681][T18941] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 535.227343][T22220] sctp: [Deprecated]: syz.0.4358 (pid 22220) Use of int in maxseg socket option. [ 535.227343][T22220] Use struct sctp_assoc_value instead [ 535.686651][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'. [ 535.695884][T22249] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4367'. [ 535.706444][T22249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4367'. [ 535.882182][T22259] netlink: 'syz.1.4370': attribute type 1 has an invalid length. [ 535.989111][T22274] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4370'. [ 536.055502][T22259] bond4: entered promiscuous mode [ 536.071618][T22259] 8021q: adding VLAN 0 to HW filter on device bond4 [ 536.089141][T22268] netlink: 'syz.2.4374': attribute type 12 has an invalid length. [ 536.111378][T22268] netlink: 'syz.2.4374': attribute type 29 has an invalid length. [ 536.242043][T22280] netlink: 'syz.0.4376': attribute type 1 has an invalid length. [ 536.355446][T22280] netlink: 'syz.0.4376': attribute type 16 has an invalid length. [ 536.365606][T22280] netlink: 'syz.0.4376': attribute type 17 has an invalid length. [ 536.415891][T22287] bond7: (slave bridge3): making interface the new active one [ 536.425089][T22287] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 536.445214][T22280] erspan0: left promiscuous mode [ 536.450829][T22280] erspan0: left allmulticast mode [ 536.460621][T22280] ip_vti0: left promiscuous mode [ 536.478144][T22280] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.485461][T22280] bridge0: port 2(bridge_slave_1) entered listening state [ 536.493015][T22280] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.500246][T22280] bridge0: port 1(bridge_slave_0) entered listening state [ 536.526715][T22295] ip6t_srh: unknown srh invflags 4000 [ 536.590090][T22280] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 536.599597][T22280] batman_adv: batadv0: Interface activated: wlan0 [ 536.614029][T22280] gtp0: left promiscuous mode [ 536.618782][T22280] gtp0: left allmulticast mode [ 536.626326][T22280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.641687][T22280] bond3: left promiscuous mode [ 536.646682][T22280] bond3: left allmulticast mode [ 536.651917][T22280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 536.673899][T22280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.685240][T22280] bond6: left promiscuous mode [ 536.694463][T22280] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.892975][ T13] wlan1: Trigger new scan to find an IBSS to join [ 541.932957][ T9330] wlan1: Trigger new scan to find an IBSS to join [ 544.572651][T17620] Bluetooth: hci4: command 0x0406 tx timeout [ 544.893368][ T9330] wlan1: Trigger new scan to find an IBSS to join [ 545.773494][ T9349] wlan1: Creating new IBSS network, BSSID fa:19:d7:42:9b:e1 [ 559.870011][T22308] __nla_validate_parse: 2 callbacks suppressed [ 559.870033][T22308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4384'. [ 559.891819][T22304] netlink: 'syz.1.4383': attribute type 1 has an invalid length. [ 559.935682][T17620] Bluetooth: hci3: command 0x0406 tx timeout [ 560.045140][T22320] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 560.805327][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4396'. [ 560.833722][T22354] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 561.136395][T22372] IPVS: set_ctl: invalid protocol: 108 172.20.20.52:20003 [ 561.137285][T22369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4400'. [ 561.279048][T22382] xt_hashlimit: invalid rate [ 561.436032][T22389] bond0: entered promiscuous mode [ 561.459220][T22389] bond_slave_0: entered promiscuous mode [ 561.472903][T22389] bond_slave_1: entered promiscuous mode [ 561.485634][T22389] batadv0: entered promiscuous mode [ 561.508859][T22389] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 561.524746][T22389] bond0: left promiscuous mode [ 561.529803][T22389] bond_slave_0: left promiscuous mode [ 561.543793][T22389] bond_slave_1: left promiscuous mode [ 561.561042][T22389] batadv0: left promiscuous mode [ 561.916148][T22410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4412'. [ 561.961848][T22410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4412'. [ 562.265030][T22427] netlink: 'syz.4.4418': attribute type 21 has an invalid length. [ 562.327779][T22430] netlink: 'syz.2.4419': attribute type 21 has an invalid length. [ 562.357087][T22430] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4419'. [ 562.388479][T22430] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4419'. [ 562.480428][T22442] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4422'. [ 562.636439][T22446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4423'. [ 562.651544][T22442] syzkaller0: entered promiscuous mode [ 562.662225][T22442] syzkaller0: entered allmulticast mode [ 562.791328][T22450] netlink: 'syz.0.4425': attribute type 30 has an invalid length. [ 562.958207][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4428'. [ 562.984152][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.987981][T22461] netlink: 'syz.4.4428': attribute type 1 has an invalid length. [ 562.999515][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 565.631801][T22450] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 565.825489][T22474] __nla_validate_parse: 1 callbacks suppressed [ 565.825510][T22474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4431'. [ 565.891980][T22478] netlink: 'syz.3.4434': attribute type 1 has an invalid length. [ 566.005822][T22478] bond4: entered promiscuous mode [ 566.027389][T22478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 566.067354][T22492] netlink: 'syz.0.4438': attribute type 4 has an invalid length. [ 566.387761][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4442'. [ 566.411837][T22507] sit2: entered promiscuous mode [ 566.418906][T22507] sit2: entered allmulticast mode [ 566.496587][T22519] bond4: entered allmulticast mode [ 566.535024][T22525] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4444'. [ 566.578460][T22525] openvswitch: netlink: Flow actions attr not present in new flow. [ 566.606975][T22519] bond4: left allmulticast mode [ 566.815585][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 566.825172][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 566.866842][T22539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4449'. [ 566.999406][T22539] IPv6: NLM_F_CREATE should be specified when creating new route [ 567.066454][T22547] syzkaller0: entered promiscuous mode [ 567.085831][T22547] syzkaller0: entered allmulticast mode [ 567.303366][T22553] bond7 (unregistering): Released all slaves [ 567.408929][T22562] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4460'. [ 567.420618][T22562] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4460'. [ 567.600102][T22572] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4463'. [ 567.698014][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4461'. [ 567.742808][T22575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4461'. [ 567.860767][T22590] netlink: 'syz.4.4468': attribute type 9 has an invalid length. [ 567.890972][T22590] netlink: 211600 bytes leftover after parsing attributes in process `syz.4.4468'. [ 568.163211][T22608] netlink: 'syz.0.4471': attribute type 2 has an invalid length. [ 568.855888][T22623] tipc: Enabling of bearer rejected, failed to enable media [ 570.840152][T22668] __nla_validate_parse: 2 callbacks suppressed [ 570.840174][T22668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4492'. [ 572.215093][T22689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4497'. [ 573.343159][T22713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4504'. [ 573.625454][T22716] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 573.635295][T22717] IPVS: stopping master sync thread 22716 ... [ 574.026664][T22720] syzkaller0: entered promiscuous mode [ 574.032498][T22720] syzkaller0: entered allmulticast mode [ 574.216316][T22729] netlink: 'syz.1.4511': attribute type 1 has an invalid length. [ 574.250042][T22729] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.291503][T22729] bond5: (slave geneve3): making interface the new active one [ 574.301661][T22729] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 574.848694][T22736] sctp: [Deprecated]: syz.0.4515 (pid 22736) Use of int in max_burst socket option deprecated. [ 574.848694][T22736] Use struct sctp_assoc_value instead [ 575.090129][T22738] netlink: 'syz.2.4514': attribute type 49 has an invalid length. [ 575.353217][T22748] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4517'. [ 575.362445][T22748] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 575.380915][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4519'. [ 576.281863][T22768] netlink: 'syz.3.4524': attribute type 23 has an invalid length. [ 576.828711][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4526'. [ 577.345192][T22787] lo: entered allmulticast mode [ 577.583475][T22794] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 577.645446][T22792] netlink: 'syz.4.4533': attribute type 10 has an invalid length. [ 577.660394][T22792] syz_tun: entered promiscuous mode [ 577.842476][T22792] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 578.155543][T22808] syzkaller0: entered promiscuous mode [ 578.161488][T22808] syzkaller0: entered allmulticast mode [ 578.393359][ T1545] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 579.675943][T22837] veth0_to_bridge: entered promiscuous mode [ 579.682898][T22837] veth0_to_bridge: left promiscuous mode [ 579.884780][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4545'. [ 579.895930][T22839] veth1_macvtap: left promiscuous mode [ 580.220820][T22844] can: request_module (can-proto-3) failed. [ 580.559496][T22851] bond0: (slave syz_tun): Releasing backup interface [ 580.748056][T22852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4550'. [ 580.775551][T22851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 582.858940][T22892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4562'. [ 582.939435][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 582.951806][T22892] netlink: 'syz.0.4562': attribute type 4 has an invalid length. [ 583.206206][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4561'. [ 583.463015][T22889] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 583.592726][T22909] syzkaller1: entered promiscuous mode [ 583.598282][T22909] syzkaller1: entered allmulticast mode [ 584.418115][T22926] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 584.427324][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4569'. [ 584.436248][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4569'. [ 584.700396][T22933] macvlan0: entered promiscuous mode [ 585.063128][ T5633] Bluetooth: hci0: command 0x0405 tx timeout [ 585.624023][T22950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4574'. [ 585.679480][ T9343] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 585.689972][ T9343] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 585.702536][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 586.350205][T22970] syzkaller0: entered promiscuous mode [ 586.354302][T22973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4580'. [ 586.372701][T22970] syzkaller0: entered allmulticast mode [ 586.631739][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 586.650211][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 587.918415][T22997] tipc: Resetting bearer [ 587.961632][T22997] tipc: Disabling bearer [ 589.104440][T23034] netlink: 'syz.2.4591': attribute type 9 has an invalid length. [ 589.342807][T23041] Cannot find add_set index 4 as target [ 589.369907][T23040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4593'. [ 589.577754][T23045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4593'. [ 589.602115][T23030] netlink: 'syz.2.4591': attribute type 2 has an invalid length. [ 589.831802][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 589.862618][T23040] xfrm1: entered promiscuous mode [ 589.867986][T23040] xfrm1: entered allmulticast mode [ 590.909882][T23077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.415759][T18941] nci: nci_ntf_packet: unsupported ntf opcode 0xf11 [ 591.958864][T23104] syzkaller0: entered promiscuous mode [ 591.965626][T23104] syzkaller0: entered allmulticast mode [ 591.983105][T23104] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 591.990191][T23107] No such timeout policy "syz0" [ 592.624340][T23119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4612'. [ 593.138654][T23130] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4616'. [ 594.316190][T23082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.917718][T23142] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4619'. [ 595.890117][T23182] pimreg3: entered allmulticast mode [ 596.114587][T23191] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4631'. [ 596.160872][T23186] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 596.440956][T23193] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 596.816172][T23208] netlink: 'syz.3.4637': attribute type 1 has an invalid length. [ 596.847001][T23212] netlink: 'syz.1.4639': attribute type 3 has an invalid length. [ 596.854794][T23212] netlink: 'syz.1.4639': attribute type 1 has an invalid length. [ 597.056200][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.063578][ C0] bridge0: topology change detected, propagating [ 597.070161][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.070380][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.085782][ C0] bridge0: topology change detected, propagating [ 597.096002][T23208] bond5: (slave bridge1): Enslaving as a backup interface with an up link [ 597.156616][T23208] macvlan0: entered promiscuous mode [ 597.177190][T23208] macvlan0: entered allmulticast mode [ 597.198722][T23208] bond5: entered promiscuous mode [ 597.446242][T23220] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4642'. [ 597.652046][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 597.681062][T23208] bridge1: entered promiscuous mode [ 597.687545][T23208] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 597.692063][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.724542][T23223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4641'. [ 597.735001][T23223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4641'. [ 597.746417][T23208] bond5: left promiscuous mode [ 597.961297][T23208] bridge1: left promiscuous mode [ 597.987734][T23223] dvmrp0: entered allmulticast mode [ 598.251287][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.267469][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.298647][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.784522][T23245] netlink: 'syz.4.4651': attribute type 10 has an invalid length. [ 598.801047][T23245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4651'. [ 598.923539][T23245] team0: Port device geneve1 added [ 598.952647][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4653'. [ 599.134455][T23257] netlink: 'syz.2.4653': attribute type 7 has an invalid length. [ 599.142298][T23257] netlink: 'syz.2.4653': attribute type 8 has an invalid length. [ 599.150059][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'. [ 599.451493][T23270] netlink: 'syz.4.4657': attribute type 10 has an invalid length. [ 599.460497][T23270] veth1_macvtap: left promiscuous mode [ 599.467936][T23270] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 599.560028][T23275] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4656'. [ 599.574416][T23266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4655'. [ 600.011602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.020387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.062211][T23275] netlink: 'syz.1.4656': attribute type 1 has an invalid length. [ 600.094755][T23286] syzkaller0: entered promiscuous mode [ 600.100295][T23286] syzkaller0: entered allmulticast mode [ 600.111644][T23285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4658'. [ 600.347824][T23285] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4658'. [ 600.356843][T23285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4658'. [ 601.443989][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.772774][T23309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 601.793923][T23309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 602.972359][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.485590][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.901043][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4666'. [ 604.102393][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.137825][T23331] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4668'. [ 604.150765][T23331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4668'. [ 604.166895][T16469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.183799][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.477966][T23334] netlink: 'syz.1.4670': attribute type 21 has an invalid length. [ 604.521421][T23338] netlink: 'syz.4.4672': attribute type 2 has an invalid length. [ 604.859833][T23354] xt_NFQUEUE: number of total queues is 0 [ 605.157468][T23355] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4671'. [ 605.193035][T23364] tc_dump_action: action bad kind [ 605.221619][T23364] tc_dump_action: action bad kind [ 605.454268][T23364] tc_dump_action: action bad kind [ 605.459573][T23364] tc_dump_action: action bad kind [ 605.464826][T23364] tc_dump_action: action bad kind [ 605.470250][T23364] tc_dump_action: action bad kind [ 605.475956][T23364] tc_dump_action: action bad kind [ 605.481215][T23364] tc_dump_action: action bad kind [ 605.486528][T23364] tc_dump_action: action bad kind [ 605.491834][T23364] tc_dump_action: action bad kind [ 605.503879][T23364] tc_dump_action: action bad kind [ 605.510499][T23364] tc_dump_action: action bad kind [ 605.515825][T23364] tc_dump_action: action bad kind [ 605.521129][T23364] tc_dump_action: action bad kind [ 605.742314][T23364] tc_dump_action: action bad kind [ 605.751431][T23364] tc_dump_action: action bad kind [ 605.756746][T23364] tc_dump_action: action bad kind [ 605.762076][T23364] tc_dump_action: action bad kind [ 605.767399][T23364] tc_dump_action: action bad kind [ 605.772728][T23364] tc_dump_action: action bad kind [ 605.778025][T23364] tc_dump_action: action bad kind [ 605.783346][T23364] tc_dump_action: action bad kind [ 605.788861][T23364] tc_dump_action: action bad kind [ 605.794140][T23364] tc_dump_action: action bad kind [ 605.799417][T23364] tc_dump_action: action bad kind [ 605.804764][T23364] tc_dump_action: action bad kind [ 605.810053][T23364] tc_dump_action: action bad kind [ 605.815366][T23364] tc_dump_action: action bad kind [ 605.820654][T23364] tc_dump_action: action bad kind [ 605.825952][T23364] tc_dump_action: action bad kind [ 605.831247][T23364] tc_dump_action: action bad kind [ 605.836574][T23364] tc_dump_action: action bad kind [ 606.117021][T23377] openvswitch: netlink: Unknown key attributes 2 [ 606.630022][T23390] IPv6: NLM_F_CREATE should be specified when creating new route [ 607.145365][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.462175][T23415] syz_tun: refused to change device tx_queue_len [ 607.695213][T23417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4691'. [ 608.194359][T23434] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4695'. [ 608.205212][T23439] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4695'. [ 608.224499][T23434] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4695'. [ 608.284844][T23439] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4695'. [ 608.308551][T12732] hid-generic 0005:15C2:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 608.513218][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.527229][T23450] openvswitch: netlink: IP tunnel dst address not specified [ 608.607237][T23450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'. [ 609.155746][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.596896][T23466] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4701'. [ 610.454763][T23491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4710'. [ 610.465154][T23491] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 610.481278][T23496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4709'. [ 611.168221][T23515] syz_tun: entered allmulticast mode [ 611.174714][T23515] netlink: 'syz.3.4716': attribute type 29 has an invalid length. [ 611.187434][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4716'. [ 611.404900][T23515] pim6reg: entered allmulticast mode [ 611.424258][T23517] netlink: 'syz.2.4718': attribute type 1 has an invalid length. [ 611.479615][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4718'. [ 611.679537][T23517] 8021q: adding VLAN 0 to HW filter on device bond9 [ 612.255721][T18941] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 612.449898][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 612.746596][T23547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4726'. [ 612.827817][T23544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4726'. [ 612.893754][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.505675][T23565] "syz.3.4730" (23565) uses obsolete ecb(arc4) skcipher [ 613.726225][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.743952][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.755633][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4731'. [ 613.768116][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4731'. [ 613.816290][T23576] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 614.592127][T23601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4741'. [ 614.748592][T23609] netlink: 'syz.4.4747': attribute type 21 has an invalid length. [ 614.756894][T23609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4747'. [ 614.822797][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.017431][T23614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.058520][T23614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.069439][T23614] bond0 (unregistering): Released all slaves [ 616.208329][T23643] ip6gre2: entered allmulticast mode [ 617.804912][T23686] __nla_validate_parse: 5 callbacks suppressed [ 617.804930][T23686] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4765'. [ 618.066478][T23689] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4765'. [ 618.068576][T23686] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.082876][T23686] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.099769][T23689] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.107097][T23689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.114785][T23689] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.121988][T23689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.296241][T23689] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4765'. [ 618.305850][T23689] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.313210][T23689] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.653782][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.915878][T23709] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4771'. [ 619.438707][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.072168][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.581661][T23736] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 620.957933][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4779'. [ 621.273221][T23757] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 621.552772][T23746] syzkaller0: entered promiscuous mode [ 621.558606][T23746] syzkaller0: entered allmulticast mode [ 621.591283][T23759] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 621.794136][T23759] bond0 (unregistering): Released all slaves [ 623.133658][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.187407][T23786] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4789'. [ 623.678467][T23797] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4793'. [ 623.691323][T23795] netlink: 'syz.1.4795': attribute type 10 has an invalid length. [ 623.773880][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.978169][T23804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4800'. [ 623.999760][T23804] openvswitch: netlink: Flow key attr not present in new flow. [ 624.030633][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4799'. [ 624.053103][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4799'. [ 624.078564][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4799'. [ 624.113936][T23802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.157495][T23812] netem: change failed [ 624.348799][T23810] netem: change failed [ 624.361795][T23814] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4802'. [ 624.413769][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.423995][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.679618][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.687030][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.761582][T23830] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4804'. [ 625.004859][T23830] bond6 (unregistering): Released all slaves [ 625.055626][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.083227][T23834] netlink: 'syz.0.4806': attribute type 1 has an invalid length. [ 625.298937][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.629817][T23849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4808'. [ 625.639478][T23849] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4808'. [ 626.890882][T23887] batadv_slave_1: entered promiscuous mode [ 626.900113][T23886] batadv_slave_1: left promiscuous mode [ 627.350832][T23821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.926744][T23905] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 627.939843][T23905] bond7: option packets_per_slave: allowed values 0 - 65535 [ 627.959031][T23905] bond7 (unregistering): Released all slaves [ 628.341283][T23906] bond10: Removing last arp target with arp_interval on [ 628.359487][T23915] dvmrp0: entered allmulticast mode [ 628.688337][T23917] tipc: Enabling of bearer rejected, failed to enable media [ 628.698203][T23917] syzkaller0: entered promiscuous mode [ 628.704630][T23917] syzkaller0: entered allmulticast mode [ 628.716970][T23917] tipc: Failed to remove unknown binding: 66,0,0/0:3447739093/3447739095 [ 628.725523][T23917] tipc: Failed to remove unknown binding: 66,0,0/0:3447739093/3447739094 [ 628.735411][T23917] tipc: Failed to remove unknown binding: 66,0,0/0:3447739093/3447739095 [ 628.746177][T23917] tipc: Failed to remove unknown binding: 66,0,0/0:3447739093/3447739094 [ 629.625367][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.813558][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.821938][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.013421][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.655330][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.999454][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.738279][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.056191][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 641.787440][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.334881][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.324832][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.336501][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.342668][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.468613][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.126327][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.420059][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.572924][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.780492][T23922] __nla_validate_parse: 7 callbacks suppressed [ 653.780515][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4831'. [ 654.000197][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.009940][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.025545][T23922] netlink: 'syz.0.4831': attribute type 1 has an invalid length. [ 654.033401][T23922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4831'. [ 654.052455][T23929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.062329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.073135][T23927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.085945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.363188][T23928] pimreg1 (unregistering): Released all slaves [ 655.005191][T23948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.134377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.242431][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.892802][T23959] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4846'. [ 655.902694][T23959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 656.280923][T23973] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4849'. [ 656.501917][T23973] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4849'. [ 656.557408][T23978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4851'. [ 656.900439][T23980] vcan0: entered promiscuous mode [ 656.905929][T23980] vcan0: entered allmulticast mode [ 657.619013][T23990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4855'. [ 657.649964][ T9338] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.658961][ T9338] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.670552][ T9338] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.680145][T23990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4855'. [ 657.689368][ T9338] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.700008][ T9349] net_ratelimit: 1 callbacks suppressed [ 657.700026][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.628405][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.927320][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4863'. [ 660.914996][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.957362][T24028] netlink: 'syz.0.4865': attribute type 1 has an invalid length. [ 661.228749][T24030] FAULT_INJECTION: forcing a failure. [ 661.228749][T24030] name failslab, interval 1, probability 0, space 0, times 0 [ 661.241439][T24030] CPU: 0 UID: 0 PID: 24030 Comm: syz.0.4865 Not tainted syzkaller #0 PREEMPT(full) [ 661.241474][T24030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.241488][T24030] Call Trace: [ 661.241496][T24030] [ 661.241505][T24030] dump_stack_lvl+0xe8/0x150 [ 661.241533][T24030] should_fail_ex+0x412/0x560 [ 661.241562][T24030] should_failslab+0xa8/0x100 [ 661.241588][T24030] __kmalloc_cache_noprof+0x88/0x660 [ 661.241618][T24030] ? __pfx_stack_trace_save+0x10/0x10 [ 661.241652][T24030] ? rtnl_newlink+0x136/0x1bb0 [ 661.241699][T24030] rtnl_newlink+0x136/0x1bb0 [ 661.241731][T24030] ? kasan_save_track+0x3e/0x80 [ 661.241760][T24030] ? kasan_save_free_info+0x46/0x50 [ 661.241785][T24030] ? __kasan_slab_free+0x5c/0x80 [ 661.241817][T24030] ? dev_hard_start_xmit+0x2cd/0x830 [ 661.241838][T24030] ? __dev_queue_xmit+0x14d9/0x3950 [ 661.241861][T24030] ? __netlink_deliver_tap+0x5ad/0x850 [ 661.241894][T24030] ? netlink_deliver_tap+0x19c/0x1b0 [ 661.241926][T24030] ? netlink_unicast+0x730/0x8e0 [ 661.241954][T24030] ? netlink_sendmsg+0x813/0xb40 [ 661.241989][T24030] ? __pfx_rtnl_newlink+0x10/0x10 [ 661.242018][T24030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.242088][T24030] ? kasan_quarantine_put+0xbb/0x1f0 [ 661.242120][T24030] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.242148][T24030] ? nlmon_xmit+0xb0/0x100 [ 661.242169][T24030] ? kmem_cache_free+0x182/0x650 [ 661.242214][T24030] ? __lock_acquire+0x6b5/0x2cf0 [ 661.242242][T24030] ? __dev_queue_xmit+0x2b6/0x3950 [ 661.242269][T24030] ? __local_bh_enable_ip+0xd0/0x130 [ 661.242292][T24030] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.242313][T24030] ? __dev_queue_xmit+0x2b6/0x3950 [ 661.242335][T24030] ? __local_bh_enable_ip+0xd0/0x130 [ 661.242356][T24030] ? __dev_queue_xmit+0x2b6/0x3950 [ 661.242389][T24030] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 661.242439][T24030] ? __pfx_rtnl_newlink+0x10/0x10 [ 661.242470][T24030] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 661.242507][T24030] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 661.242538][T24030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.242568][T24030] ? ref_tracker_free+0x693/0x840 [ 661.242598][T24030] ? __pfx_ref_tracker_free+0x10/0x10 [ 661.242638][T24030] netlink_rcv_skb+0x232/0x4b0 [ 661.242683][T24030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.242719][T24030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.242768][T24030] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.242802][T24030] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.242842][T24030] netlink_unicast+0x75c/0x8e0 [ 661.242886][T24030] netlink_sendmsg+0x813/0xb40 [ 661.242938][T24030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.242978][T24030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 661.243014][T24030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.243050][T24030] ____sys_sendmsg+0x972/0x9f0 [ 661.243072][T24030] ? __might_fault+0xaf/0x130 [ 661.243110][T24030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.243145][T24030] ? import_iovec+0x73/0xa0 [ 661.243179][T24030] ___sys_sendmsg+0x2a5/0x360 [ 661.243200][T24030] ? __lock_acquire+0x6b5/0x2cf0 [ 661.243230][T24030] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.243298][T24030] ? __fget_files+0x2a/0x420 [ 661.243325][T24030] ? __fget_files+0x3a0/0x420 [ 661.243366][T24030] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.243393][T24030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.243428][T24030] ? __pfx_ksys_write+0x10/0x10 [ 661.243473][T24030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.243498][T24030] do_syscall_64+0x174/0x580 [ 661.243520][T24030] ? trace_irq_disable+0x3b/0x140 [ 661.243553][T24030] ? clear_bhb_loop+0x40/0x90 [ 661.243582][T24030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.243605][T24030] RIP: 0033:0x7f85f939ce59 [ 661.243628][T24030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.243647][T24030] RSP: 002b:00007f85f75f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.243679][T24030] RAX: ffffffffffffffda RBX: 00007f85f9616090 RCX: 00007f85f939ce59 [ 661.243695][T24030] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004 [ 661.243709][T24030] RBP: 00007f85f75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.243723][T24030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.243736][T24030] R13: 00007f85f9616128 R14: 00007f85f9616090 R15: 00007ffc8d3afbf8 [ 661.243774][T24030] [ 661.331219][T24035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 662.579227][T24038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4867'. [ 663.455182][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.667813][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.677043][T24062] x_tables: duplicate underflow at hook 3 [ 664.248557][T24073] netlink: 'syz.0.4877': attribute type 13 has an invalid length. [ 664.483171][T24077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.559054][T24078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4877'. [ 664.739287][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.823587][T24074] syz_tun: entered allmulticast mode [ 665.156146][T24085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4881'. [ 665.347012][T23964] Set syz1 is full, maxelem 65536 reached [ 666.024201][T24107] pimreg3: entered allmulticast mode [ 666.268396][T24103] dvmrp0: entered allmulticast mode [ 666.498414][T24113] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4890'. [ 666.585728][T24120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.770628][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.053113][T24124] bridge4: entered promiscuous mode [ 667.058609][T24124] bridge4: entered allmulticast mode [ 667.076767][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4896'. [ 667.089693][T24134] lo: entered promiscuous mode [ 667.129852][T24134] tunl0: entered promiscuous mode [ 667.340866][T24134] gre0: entered promiscuous mode [ 667.358354][T24134] gretap0: entered promiscuous mode [ 667.418457][T24134] erspan0: entered promiscuous mode [ 667.691292][T24134] ip_vti0: entered promiscuous mode [ 667.701379][T24146] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 667.714646][T24151] netlink: 'syz.0.4901': attribute type 1 has an invalid length. [ 668.206600][T24151] 8021q: adding VLAN 0 to HW filter on device bond9 [ 668.276698][T24151] bond9: (slave gretap1): making interface the new active one [ 668.288255][T24151] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 668.591366][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'. [ 668.839387][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.874364][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4908'. [ 669.421495][T24173] veth1_macvtap: entered promiscuous mode [ 669.430517][T24173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 669.441995][T24173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.451577][ T29] gretap1: entered promiscuous mode [ 669.811367][T24193] netlink: 'syz.4.4917': attribute type 1 has an invalid length. [ 670.705623][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.716876][T24208] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4921'. [ 671.018962][T24215] syzkaller1: entered promiscuous mode [ 671.034075][T24215] syzkaller1: entered allmulticast mode [ 671.662154][T24212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4923'. [ 671.923497][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.287557][T24239] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4932'. [ 672.834892][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 672.843479][T24247] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4934'. [ 672.863750][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 673.049061][T24247] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4934'. [ 673.066410][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 673.078374][T24247] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4934'. [ 673.080969][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.089327][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 673.089348][T24247] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4934'. [ 673.089470][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 673.089483][T24247] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4934'. [ 673.089585][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 673.089597][T24247] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4934'. [ 673.089711][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 673.089723][T24247] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4934'. [ 673.089828][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 673.089979][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 673.090087][T24247] netlink: 'syz.2.4934': attribute type 1 has an invalid length. [ 674.468163][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.740392][T24276] NCSI netlink: No device for ifindex 131092 [ 675.070108][T24289] bond8 (unregistering): Released all slaves [ 675.580886][T24302] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 675.591032][T24302] IPVS: set_ctl: invalid protocol: 46 172.30.1.3:20003 [ 676.286103][T24306] __nla_validate_parse: 62 callbacks suppressed [ 676.286123][T24306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4951'. [ 676.313675][T24306] lo: Caught tx_queue_len zero misconfig [ 676.509254][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.097237][T24329] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.105079][T24329] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.368003][T24329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.556943][ T1545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.585034][T24329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.851982][T24321] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 677.856485][T24331] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 677.913214][T24331] bond0: (slave lo): Error: Device can not be enslaved while up [ 678.105915][T24336] mac80211_hwsim hwsim31 ÿ: renamed from wlan1 [ 678.176250][ T1545] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.185215][ T1545] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.194163][ T1545] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.436302][ T1545] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.445349][ T1545] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.454701][ T1545] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.482186][ T1545] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.491308][ T1545] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.726818][T24354] x_tables: duplicate underflow at hook 1 [ 679.048567][T24364] validate_nla: 62 callbacks suppressed [ 679.048586][T24364] netlink: 'syz.0.4968': attribute type 1 has an invalid length. [ 679.075167][T24365] netlink: 'syz.0.4968': attribute type 1 has an invalid length. [ 679.908303][T24385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4973'. [ 680.137483][ T9343] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 680.149953][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.492063][T24393] syzkaller0: entered promiscuous mode [ 680.525879][T24393] syzkaller0: entered allmulticast mode [ 680.545889][T24399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4974'. [ 680.860586][T24397] batman_adv: batadv0: Interface deactivated: wlan0 [ 681.086081][T24414] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4980'. [ 681.119265][T24412] netlink: 'syz.3.4979': attribute type 3 has an invalid length. [ 681.586011][T24422] netlink: 'syz.0.4981': attribute type 1 has an invalid length. [ 681.885900][T24422] 8021q: adding VLAN 0 to HW filter on device bond10 [ 682.143004][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.472859][T24440] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4986'. [ 682.693666][T24445] SET target dimension over the limit! [ 682.704723][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.718977][T24448] netlink: 'syz.1.4987': attribute type 9 has an invalid length. [ 683.306247][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.927992][T24476] Bluetooth: MGMT ver 1.23 [ 684.184334][T24478] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 684.459783][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4994'. [ 684.716852][T24498] netlink: 'syz.1.4998': attribute type 1 has an invalid length. [ 685.005823][T24501] openvswitch: netlink: IP tunnel dst address not specified [ 685.283555][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.574697][T24519] netlink: 'syz.1.5001': attribute type 4 has an invalid length. [ 685.782594][T24528] netlink: 'syz.2.5005': attribute type 21 has an invalid length. [ 685.817235][T24515] netlink: 'syz.1.5001': attribute type 4 has an invalid length. [ 686.041721][T24533] netlink: 'syz.0.5003': attribute type 64 has an invalid length. [ 686.049650][T24533] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5003'. [ 686.625006][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.656617][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 687.113160][T24546] veth0: entered promiscuous mode [ 687.119216][T24546] veth0: left promiscuous mode [ 687.141572][T24549] netlink: 'syz.4.5011': attribute type 1 has an invalid length. [ 687.470197][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5013'. [ 687.479163][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5013'. [ 687.802731][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.053967][ T1545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.246264][T24578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5016'. [ 689.322262][T24605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5021'. [ 689.678441][T24621] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5023'. [ 690.172126][T24630] tipc: Started in network mode [ 690.192013][T24630] tipc: Node identity e0000001, cluster identity 4711 [ 690.228649][T24630] tipc: Enabling of bearer rejected, failed to enable media [ 690.464651][ T30] audit: type=1107 audit(1780378809.911:19): pid=24629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5à< CIÁl8Úž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/' [ 690.514644][T24638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'. [ 690.746369][T24638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'. [ 690.757380][T24650] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 690.974990][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.330735][T24665] netlink: 'syz.3.5035': attribute type 1 has an invalid length. [ 692.084683][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5041'. [ 692.256242][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.572964][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5041'. [ 692.588742][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5042'. [ 692.625418][T24703] x_tables: duplicate underflow at hook 1 [ 692.635153][T24686] bond11: entered promiscuous mode [ 692.651405][T24686] bond11: entered allmulticast mode [ 692.798245][T24708] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5047'. [ 692.906257][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.636795][T24731] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.429971][T24745] xt_hashlimit: overflow, rate too high: 0 [ 694.726105][T24719] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 694.813284][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.048102][T24760] bridge_slave_0: left allmulticast mode [ 695.054393][T24760] bridge_slave_0: left promiscuous mode [ 695.062008][T24760] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.309443][ T5633] Bluetooth: hci0: command 0x0405 tx timeout [ 695.344632][T24756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5060'. [ 695.477437][T24768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.488927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.500118][T24768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.668414][T24772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.691128][T24760] bridge_slave_1: left allmulticast mode [ 695.746870][T24760] bridge_slave_1: left promiscuous mode [ 695.758760][T24775] netlink: 'syz.4.5065': attribute type 1 has an invalid length. [ 695.778514][T24760] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.040457][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.377498][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 696.393613][T24764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.408641][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.431390][T24764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.460443][T24764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.675903][T24760] bond0: (slave bond_slave_0): Releasing backup interface [ 696.684923][T24760] bond_slave_0: left promiscuous mode [ 696.693239][T24760] bond0: (slave bond_slave_1): Releasing backup interface [ 696.703259][T24760] bond_slave_1: left promiscuous mode [ 696.711342][T24760] team0: Port device team_slave_0 removed [ 696.720459][T24760] team0: Port device team_slave_1 removed [ 696.727477][T24760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.738590][T24760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.748133][T24760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 696.931949][T24759] netem: unknown loss type 8 [ 696.936999][T24759] netem: change failed [ 697.018105][T24775] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 697.021308][T24772] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 697.322678][T24788] netlink: 'syz.1.5066': attribute type 1 has an invalid length. [ 697.595354][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5070'. [ 697.657257][T24793] macvlan3: entered promiscuous mode [ 697.847500][T24793] macvlan3: entered allmulticast mode [ 697.854312][T24793] bond8: entered promiscuous mode [ 697.860187][T24793] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 697.937295][T24793] bond8: left promiscuous mode [ 698.987204][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.564402][T24817] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5077'. [ 700.439984][T24836] netlink: 'syz.1.5080': attribute type 3 has an invalid length. [ 700.676525][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.025554][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5083'. [ 701.126458][T24819] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5078'. [ 701.360630][T24854] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5085'. [ 701.864974][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.124963][T12746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.212168][T24862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5088'. [ 702.237128][T24862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5088'. [ 702.415769][T24862] netlink: 'syz.4.5088': attribute type 3 has an invalid length. [ 702.491346][T24869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.055471][T24879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5093'. [ 703.576960][T24891] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5096'. [ 704.415509][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.776361][T24902] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 704.783200][T24902] syzkaller1: group set to 0 [ 704.788376][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5100'. [ 705.048820][T24904] xt_l2tp: missing protocol rule (udp|l2tpip) [ 705.057781][T24886] udevd[24886]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 705.294812][T24916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.320283][T24918] kthread_run failed with err -4 [ 705.597106][T24930] syzkaller1: entered promiscuous mode [ 705.602657][T24930] syzkaller1: entered allmulticast mode [ 705.870408][T24933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5105'. [ 705.938662][T24937] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 706.170080][T24937] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 706.243361][T24944] netlink: 'syz.0.5105': attribute type 10 has an invalid length. [ 706.251267][T24944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5105'. [ 706.445428][ T9343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.734326][T24951] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 706.796587][T24955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5114'. [ 706.800188][T24957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5116'. [ 707.024198][T24955] netlink: 'syz.4.5114': attribute type 1 has an invalid length. [ 707.273857][T24959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5115'. [ 707.319005][T24969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.763859][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.896080][T25029] netlink: 'syz.1.5129': attribute type 1 has an invalid length. [ 710.669999][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5135'. [ 710.678971][T25054] netlink: 'syz.4.5135': attribute type 1 has an invalid length. [ 710.686747][T25054] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5135'. [ 711.486205][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.496837][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.509585][T25084] netlink: 'syz.1.5142': attribute type 6 has an invalid length. [ 711.538042][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.575526][T25088] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 711.600288][T25089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5144'. [ 711.623876][T25088] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.5144'. [ 711.815897][T25091] xt_hashlimit: overflow, rate too high: 0 [ 711.833982][T25093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'. [ 712.423093][T25109] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5152'. [ 712.763936][T25120] xt_hashlimit: size too large, truncated to 1048576 [ 713.035884][T25129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5158'. [ 713.074585][T25130] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.357003][T25130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5157'. [ 713.391741][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.423318][T25133] netlink: 'syz.1.5161': attribute type 8 has an invalid length. [ 713.818406][T25142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5163'. [ 714.391063][T25157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5164'. [ 714.400182][T25157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5164'. [ 714.411904][T25141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5163'. [ 714.423109][T25141] nbd: nbd64 already in use [ 714.701006][T25157] gretap1: entered promiscuous mode [ 714.706295][T25157] gretap1: entered allmulticast mode [ 714.939627][T25150] udevd[25150]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 714.957448][T25160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.841931][T25211] __nla_validate_parse: 5 callbacks suppressed [ 716.842035][T25211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5181'. [ 717.334647][ T1545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.344521][ T1545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.417795][T25227] netlink: 'syz.1.5185': attribute type 1 has an invalid length. [ 717.637779][T25227] netlink: 'syz.1.5185': attribute type 2 has an invalid length. [ 717.730618][T25237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5184'. [ 719.159487][T25274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5196'. [ 719.395150][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.098170][T25279] pim6reg: entered allmulticast mode [ 720.404809][T25301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5203'. [ 721.101708][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.477281][T25314] sctp: [Deprecated]: syz.1.5206 (pid 25314) Use of int in maxseg socket option. [ 721.477281][T25314] Use struct sctp_assoc_value instead [ 721.844337][T25316] netlink: 'syz.4.5207': attribute type 13 has an invalid length. [ 722.070452][T25328] netlink: 'syz.2.5210': attribute type 1 has an invalid length. [ 722.087869][T25328] netlink: 'syz.2.5210': attribute type 3 has an invalid length. [ 722.294820][T25328] netlink: 'syz.2.5210': attribute type 7 has an invalid length. [ 722.308821][T25328] netlink: 'syz.2.5210': attribute type 8 has an invalid length. [ 722.328244][T25328] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5210'. [ 722.355460][T25328] NCSI netlink: No device for ifindex 131092 [ 722.384854][T25333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5207'. [ 722.864133][T25333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5207'. [ 723.109061][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.124425][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.159934][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.648323][T25352] xt_l2tp: missing protocol rule (udp|l2tpip) [ 724.061018][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.720661][ T5632] hid-generic 0005:0B57:0004.0003: item 0 1 0 8 parsing failed [ 724.734975][ T5632] hid-generic 0005:0B57:0004.0003: probe with driver hid-generic failed with error -22 [ 724.746864][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5216'. [ 725.066472][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.501469][T25373] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5219'. [ 725.540883][T25370] netlink: 'syz.4.5218': attribute type 18 has an invalid length. [ 725.656300][T25377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5219'. [ 725.665836][T25377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5219'. [ 725.855407][T25380] netlink: 'syz.2.5220': attribute type 1 has an invalid length. [ 725.865454][T25373] bond10 (unregistering): Released all slaves [ 726.139001][T25380] 8021q: adding VLAN 0 to HW filter on device bond11 [ 726.409982][T25382] bond11: (slave gretap1): making interface the new active one [ 726.607155][T25382] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 726.658255][ T9349] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 726.675083][ T9349] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.729050][ T9349] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.751387][ T9349] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.928379][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5221'. [ 726.959267][T25388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5221'. [ 727.898516][T25413] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20002 [ 728.692454][T25439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5239'. [ 728.732955][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.911128][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.007589][T25449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5241'. [ 729.228733][T25441] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 729.234565][T25454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5242'. [ 729.250965][T25454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5242'. [ 729.263314][T25454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5242'. [ 729.272950][T25454] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.280324][T25454] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.293829][T25454] xt_bpf: check failed: parse error [ 729.745660][T25463] sctp: [Deprecated]: syz.4.5245 (pid 25463) Use of int in maxseg socket option. [ 729.745660][T25463] Use struct sctp_assoc_value instead [ 730.049798][T25476] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5249'. [ 730.331210][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5252'. [ 730.526524][T25486] netlink: 'syz.3.5252': attribute type 1 has an invalid length. [ 730.535706][T25482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5252'. [ 730.829164][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.837389][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.131447][T25502] netlink: 'syz.3.5258': attribute type 1 has an invalid length. [ 731.517180][T25510] syzkaller0: entered promiscuous mode [ 731.689533][T25510] syzkaller0: entered allmulticast mode [ 731.720637][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5266'. [ 731.911746][T25516] netlink: 'syz.3.5266': attribute type 1 has an invalid length. [ 731.923492][T25514] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5263'. [ 731.939184][T25516] netlink: 'syz.3.5266': attribute type 1 has an invalid length. [ 731.991726][T25516] netlink: 'syz.3.5266': attribute type 2 has an invalid length. [ 733.049572][T25532] syzkaller0: entered promiscuous mode [ 733.055423][T25532] syzkaller0: entered allmulticast mode [ 734.493749][ T1545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.502818][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.606343][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.212945][T25568] netlink: 'syz.0.5276': attribute type 12 has an invalid length. [ 739.220820][T25568] netlink: 'syz.0.5276': attribute type 29 has an invalid length. [ 739.229120][T25568] __nla_validate_parse: 2 callbacks suppressed [ 739.229137][T25568] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5276'. [ 739.668246][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.685542][T25583] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 739.742854][T25585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5281'. [ 739.990458][T25585] bond12: option xmit_hash_policy: invalid value (64) [ 740.174682][T25585] bond12 (unregistering): Released all slaves [ 740.237273][T25602] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.5284'. [ 740.254432][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.263840][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.524959][T25641] netlink: 'syz.0.5296': attribute type 1 has an invalid length. [ 741.745867][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.759878][T25641] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5296'. [ 741.768979][T25641] NCSI netlink: No device for ifindex 0 [ 742.280208][T25662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5302'. [ 742.295275][T25662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.398234][T25635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.409049][T25642] netlink: 'syz.0.5296': attribute type 1 has an invalid length. [ 744.418644][T25642] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5296'. [ 744.429085][T25642] NCSI netlink: No device for ifindex 0 [ 745.271478][T25682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5309'. [ 745.293351][T14868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.303516][T25691] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 745.397973][T25682] bond6: peer notification delay (25) is not a multiple of miimon (773), value rounded to 0 ms [ 745.426175][T25682] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 745.619137][T14868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.636225][T25682] bond6 (unregistering): Released all slaves [ 745.689029][T25700] netlink: zone id is out of range [ 745.694540][T25700] netlink: zone id is out of range [ 745.699758][T25700] netlink: zone id is out of range [ 745.705164][T25700] netlink: zone id is out of range [ 745.710341][T25700] netlink: zone id is out of range [ 745.716138][T25700] netlink: zone id is out of range [ 745.724595][T25700] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5313'. [ 745.964458][T25700] bond12 (unregistering): Released all slaves [ 746.315335][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5315'. [ 746.333684][T25708] macvlan3: entered allmulticast mode [ 746.339137][T25708] dummy0: entered allmulticast mode [ 746.542391][T25708] dummy0: entered promiscuous mode [ 746.813153][T14868] net_ratelimit: 823 callbacks suppressed [ 746.813259][T14868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.389775][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.397908][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 748.259991][T25735] l2tp_ppp: sess 2/0: no socket in recv [ 748.463283][T25739] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 748.473283][T25739] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5323'. [ 748.551502][T25746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5326'. [ 749.253736][T25754] erspan0: entered promiscuous mode [ 749.274854][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5329'. [ 749.514161][T25763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.874769][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.267817][T25780] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 751.157355][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.171653][ T1545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.402494][T25800] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5340'. [ 751.423514][T25800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5340'. [ 751.432904][T25800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5340'. [ 751.459997][T25805] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5342'. [ 751.563412][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5335'. [ 752.552279][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.913703][T25831] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5349'. [ 753.952365][T25850] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 753.959564][T25850] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 754.881261][T25867] netlink: 'syz.0.5361': attribute type 83 has an invalid length. [ 755.130710][T25867] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5361'. [ 755.161390][T25872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5362'. [ 755.968568][T25898] netlink: 'syz.2.5371': attribute type 1 has an invalid length. [ 756.151402][T25900] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 756.162138][T25900] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 756.196742][T25898] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 756.457786][T25915] lo speed is unknown, defaulting to 1000 [ 756.473312][T25915] lo speed is unknown, defaulting to 1000 [ 756.480415][T25915] lo speed is unknown, defaulting to 1000 [ 756.487377][T25915] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 756.501600][T25915] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 756.574326][T25920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5374'. [ 756.844671][T25915] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 756.895997][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.162118][T25922] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 757.177429][T25915] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 757.206843][T25920] macvlan2: entered promiscuous mode [ 757.212208][T25920] macvlan2: entered allmulticast mode [ 757.218088][T25920] bond12: (slave macvlan2): Error -98 calling set_mac_address [ 757.539063][T25915] lo speed is unknown, defaulting to 1000 [ 757.563929][T25915] lo speed is unknown, defaulting to 1000 [ 757.573867][T25915] lo speed is unknown, defaulting to 1000 [ 757.599231][T25915] lo speed is unknown, defaulting to 1000 [ 757.802578][T25915] lo speed is unknown, defaulting to 1000 [ 757.810288][T25915] lo speed is unknown, defaulting to 1000 [ 757.818103][T25915] lo speed is unknown, defaulting to 1000 [ 758.126904][T25938] netlink: 'syz.2.5380': attribute type 7 has an invalid length. [ 758.365220][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.026535][T25964] bridge0: port 3(syz_tun) entered blocking state [ 759.082245][T25964] bridge0: port 3(syz_tun) entered disabled state [ 759.091164][T25964] syz_tun: entered promiscuous mode [ 759.297355][T25964] bridge0: port 3(syz_tun) entered blocking state [ 759.304091][T25964] bridge0: port 3(syz_tun) entered listening state [ 759.373105][T25976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'. [ 759.383691][T25976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'. [ 759.396986][T25964] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5390'. [ 759.581661][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.608180][T25964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5390'. [ 760.140649][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'. [ 760.152003][ T30] audit: type=1107 audit(1780378879.621:20): pid=25988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' 8µ.æOPx¤) ïÓß=h>ûÁn¾&B¾Ñý‰ðµbÉ÷›T€0åÝ«-#.7»œè@$­Èg¥ñ@vƳ“ð^<ƒý îÿjL6Æ8JÓ¸×"Jp,êmQú ÿ;º Qb'Ó¢ÎÐéÜæ^g±P ¨X ¬ˆ$TNrì˜ÄJîœíHvëïèM2Ê XÍÇ D' [ 760.159066][T25989] xt_nat: multiple ranges no longer supported [ 760.186978][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'. [ 760.812995][ T5632] IPVS: starting estimator thread 0... [ 760.903096][T26014] IPVS: using max 24 ests per chain, 57600 per kthread [ 761.062913][T26015] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 762.335671][T26046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5414'. [ 762.345716][T26046] : renamed from bond0 [ 762.373515][T26046] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 762.383547][T26050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5415'. [ 762.394829][T26050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5415'. [ 762.653657][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.664184][T26050] erspan0: entered promiscuous mode [ 762.670693][T26050] gretap0: entered promiscuous mode [ 762.956070][T26054] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5416'. [ 763.946992][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5419'. [ 763.976251][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.039287][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5423'. [ 764.083141][T26072] openvswitch: netlink: Flow actions attr not present in new flow. [ 764.104831][T26072] netlink: 'syz.1.5423': attribute type 39 has an invalid length. [ 764.129366][T26070] syzkaller0: entered promiscuous mode [ 764.306757][T26070] syzkaller0: entered allmulticast mode [ 764.334478][T26077] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5424'. [ 764.706073][T26070] tipc: Started in network mode [ 764.711223][T26070] tipc: Node identity 66f6354f2d73, cluster identity 4711 [ 764.736340][T26070] tipc: Enabled bearer , priority 0 [ 764.989127][T26068] tipc: Resetting bearer [ 765.018873][T26068] tipc: Disabling bearer [ 765.248696][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.560099][T26103] netlink: 'syz.0.5431': attribute type 11 has an invalid length. [ 765.568021][T26103] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5431'. [ 765.593548][T26103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5431'. [ 766.326766][T26123] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5436'. [ 767.539847][T26153] netlink: 'syz.1.5443': attribute type 2 has an invalid length. [ 767.722900][T26153] netlink: 'syz.1.5443': attribute type 1 has an invalid length. [ 768.014911][T26161] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5448'. [ 768.718793][T26195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5450'. [ 768.772992][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.185295][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.217948][T12746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.306920][T26198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.317886][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.541704][T12746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.815400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.824252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.171727][T26206] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 770.459227][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.483772][T26220] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5459'. [ 771.410236][T26240] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.5466'. [ 772.337830][T26271] syzkaller1: entered promiscuous mode [ 772.351401][T26271] syzkaller1: entered allmulticast mode [ 772.930239][T26286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5476'. [ 774.134188][T26319] netlink: 'syz.0.5484': attribute type 1 has an invalid length. [ 774.172812][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.181964][T26321] netlink: 'syz.2.5485': attribute type 1 has an invalid length. [ 774.235438][T26322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5484'. [ 774.303652][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.461656][T26321] 8021q: adding VLAN 0 to HW filter on device bond12 [ 774.531379][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5485'. [ 774.540808][T26321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 775.014992][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5488'. [ 775.024243][T26335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.237232][T26335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.142676][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.225454][T26371] netlink: 'syz.1.5500': attribute type 1 has an invalid length. [ 776.234022][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5500'. [ 776.433924][T26371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5500'. [ 776.718460][T26373] syzkaller0: entered promiscuous mode [ 776.724014][T26373] syzkaller0: entered allmulticast mode [ 776.754398][T26375] erspan0: entered allmulticast mode [ 778.033997][T26418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5510'. [ 779.047617][T26437] sock: sock_timestamping_bind_phc: sock not bind to device [ 779.834189][T26460] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5524'. [ 780.001015][T18941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.104104][T26467] lo: Caught tx_queue_len zero misconfig [ 780.655580][T26475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5531'. [ 780.991226][T26483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5530'. [ 782.967668][T26525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5545'. [ 783.056148][T26525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.147983][T26523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5547'. [ 783.835715][T26565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5556'. [ 784.037192][T26565] netlink: 'syz.0.5556': attribute type 3 has an invalid length. [ 784.045519][T26565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5556'. [ 784.054721][T26565] netlink: 'syz.0.5556': attribute type 3 has an invalid length. [ 784.091627][T26562] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 784.116467][T26572] IPv6: addrconf: prefix option has invalid lifetime [ 784.348589][T26562] bond0: entered promiscuous mode [ 784.354093][T26562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.361555][T26562] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 784.369499][T26562] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 784.377460][T26562] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 784.385456][T26562] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 784.393404][T26562] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 784.588710][T26562] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 784.597607][T26562] netlink: 'syz.1.5555': attribute type 1 has an invalid length. [ 786.594622][T26624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.841534][T26626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5569'. [ 787.104448][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5572'. [ 787.426584][T26654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5575'. [ 787.452736][T26653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5575'. [ 787.465548][T26651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5576'. [ 787.499316][T26651] tc_dump_action: action bad kind [ 787.689990][T26192] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 787.698268][T26192] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 787.717412][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 788.026302][T26661] tipc: Enabling of bearer rejected, failed to enable media [ 788.037348][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 788.083083][T26662] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 788.115992][T26661] syzkaller0: entered promiscuous mode [ 788.396855][T26661] syzkaller0: entered allmulticast mode [ 788.655326][T12746] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 789.276733][T26689] syzkaller0: entered promiscuous mode [ 789.293485][T26689] syzkaller0: entered allmulticast mode [ 789.312886][T26689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5587'. [ 789.533948][ C1] bridge0: port 3(syz_tun) entered learning state [ 789.607595][T26702] IPVS: stopping master sync thread 26703 ... [ 790.109851][T26710] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5592'. [ 790.118928][T26710] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5592'. [ 790.127907][T26710] validate_nla: 59 callbacks suppressed [ 790.128008][T26710] netlink: 'syz.1.5592': attribute type 5 has an invalid length. [ 790.141336][T26710] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5592'. [ 790.662783][T26715] netlink: 'syz.0.5594': attribute type 2 has an invalid length. [ 790.943028][T26731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5597'. [ 790.959312][T26733] mac80211_hwsim hwsim28 wlan1: Caught tx_queue_len zero misconfig [ 791.372513][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 791.666858][T26743] syzkaller1: entered promiscuous mode [ 791.800709][T26743] syzkaller1: entered allmulticast mode [ 791.852028][T26747] __nla_validate_parse: 2 callbacks suppressed [ 791.852050][T26747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5603'. [ 791.867176][T26747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.126424][T26750] netlink: 'syz.1.5604': attribute type 3 has an invalid length. [ 792.352061][T26753] Cannot find del_set index 2 as target [ 792.411588][T26758] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5608'. [ 792.606727][T26758] netlink: 320 bytes leftover after parsing attributes in process `syz.2.5608'. [ 792.707506][T26765] netlink: zone id is out of range [ 792.920078][T26766] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 792.939502][T26765] netlink: zone id is out of range [ 792.944687][T26765] netlink: zone id is out of range [ 792.949830][T26765] netlink: zone id is out of range [ 792.955434][T26765] netlink: zone id is out of range [ 792.960890][T26765] netlink: zone id is out of range [ 792.966031][T26765] netlink: zone id is out of range [ 792.971166][T26765] netlink: set zone limit has 4 unknown bytes [ 792.974128][T26766] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 793.007836][T26766] team0: Failed to send options change via netlink (err -105) [ 793.174086][T26766] team0: Port device batadv1 added [ 793.226353][T26765] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5610'. [ 794.403254][T26797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5619'. [ 794.419522][T26797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5619'. [ 794.701474][T26773] pim6reg1: entered promiscuous mode [ 794.730461][T26773] pim6reg1: entered allmulticast mode [ 795.742861][T26821] netlink: 'syz.3.5625': attribute type 1 has an invalid length. [ 795.994525][T26821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 796.055772][T26821] bond6: (slave veth0_to_bond): making interface the new active one [ 796.067020][T26821] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 796.327034][T26821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 796.336590][T26821] bond6: (slave bond7): Enslaving as an active interface with a down link [ 796.361419][T26834] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5629'. [ 796.385714][T26834] netlink: 'syz.0.5629': attribute type 1 has an invalid length. [ 796.394764][T26834] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5629'. [ 797.441826][T26855] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 797.728425][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5637'. [ 797.754765][T26861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5637'. [ 798.136522][T26883] netlink: 'syz.2.5647': attribute type 12 has an invalid length. [ 798.529606][T26883] bond13: option primary_reselect: invalid value (255) [ 798.783625][T26883] bond13 (unregistering): Released all slaves [ 798.790067][T26885] netlink: 'syz.3.5646': attribute type 142 has an invalid length. [ 799.132404][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 799.699445][T26915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5658'. [ 799.976705][T26921] bond4: entered allmulticast mode [ 800.008737][T26920] bond4: left allmulticast mode [ 800.234101][T26928] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 800.241913][T26928] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 800.289230][T26933] C: renamed from lo (while UP) [ 800.486183][T26933] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 800.513363][T26938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5666'. [ 800.575273][T26935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5665'. [ 802.002429][T26970] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5676'. [ 802.547600][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5678'. [ 802.588799][T26986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.632027][T26984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.809674][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.819886][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.830438][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.840493][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.850496][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.872889][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.895006][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.908527][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.933007][T26986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5677'. [ 802.948691][T26989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5681'. [ 803.806785][T27008] veth0: entered promiscuous mode [ 803.814147][T27008] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 803.874868][T27007] veth0: left promiscuous mode [ 804.724399][T27036] netlink: 'syz.0.5695': attribute type 1 has an invalid length. [ 804.758027][T27036] 8021q: adding VLAN 0 to HW filter on device bond13 [ 805.239002][T27037] bond13: (slave veth3): Enslaving as an active interface with a down link [ 805.292218][T27036] macvlan0: entered promiscuous mode [ 805.324856][T27038] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 805.332012][T27038] bond13: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 805.662051][T27058] gtp2: entered allmulticast mode [ 805.671165][T27058] team0: Port device gtp2 added [ 806.832318][T27089] block nbd0: reconnected socket [ 806.839364][ T5633] block nbd0: Receive control failed (result -32) [ 808.004350][T27111] __nla_validate_parse: 62 callbacks suppressed [ 808.004385][T27111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5717'. [ 808.579860][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 808.612026][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 808.651354][T27123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5721'. [ 808.677342][T27123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5721'. [ 808.952016][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 808.956902][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.966926][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 809.041930][T27123] gretap2: entered promiscuous mode [ 809.277867][T27123] gretap2: entered allmulticast mode [ 809.380747][T27140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5726'. [ 809.394062][T27140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5726'. [ 809.674435][T27146] netlink: 'syz.0.5729': attribute type 29 has an invalid length. [ 809.683555][T27146] netlink: 'syz.0.5729': attribute type 29 has an invalid length. [ 810.718678][T27166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5735'. [ 810.759943][T27166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5735'. [ 810.772325][T27166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5735'. [ 810.806037][T27167] 8021q: VLANs not supported on wg0 [ 811.050063][T27173] x_tables: unsorted underflow at hook 2 [ 811.903163][T27207] netlink: 'syz.2.5745': attribute type 1 has an invalid length. [ 812.397958][T27213] netlink: 'syz.0.5747': attribute type 21 has an invalid length. [ 813.042368][T27225] team0: Port device team_slave_0 removed [ 813.303024][T27242] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 813.310596][T27242] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 813.324889][T27242] __nla_validate_parse: 5 callbacks suppressed [ 813.324909][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5756'. [ 813.587184][T27244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5758'. [ 813.832649][T27250] netlink: 'syz.0.5758': attribute type 3 has an invalid length. [ 813.859075][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 813.898114][T27254] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 815.548854][T27287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5768'. [ 815.572467][T27293] pim6reg1: entered promiscuous mode [ 815.573586][T27298] netlink: 'syz.1.5769': attribute type 1 has an invalid length. [ 815.586144][T27293] pim6reg1: entered allmulticast mode [ 815.599242][T27298] netlink: 'syz.1.5769': attribute type 1 has an invalid length. [ 815.607074][T27298] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5769'. [ 817.352086][T27335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5781'. [ 817.362360][T27335] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5781'. [ 817.371435][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 817.955555][T27351] netlink: 'syz.3.5786': attribute type 64 has an invalid length. [ 817.963680][T27351] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5786'. [ 817.978308][T27351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5786'. [ 818.241539][T27354] netlink: 'syz.1.5783': attribute type 3 has an invalid length. [ 818.259454][T27354] netlink: 'syz.1.5783': attribute type 1 has an invalid length. [ 818.267798][T27354] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5783'. [ 818.594404][T27362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.898989][T27368] netlink: 'syz.4.5791': attribute type 21 has an invalid length. [ 818.906874][T27368] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5791'. [ 818.915986][T27368] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5791'. [ 819.439156][T27382] netlink: 'syz.3.5795': attribute type 1 has an invalid length. [ 819.446989][T27382] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5795'. [ 819.460906][T27382] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5795'. [ 819.612369][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 819.619059][ C1] bridge0: topology change detected, propagating [ 819.804392][T27390] netlink: 'syz.1.5798': attribute type 3 has an invalid length. [ 820.839862][T27413] veth0_vlan: left promiscuous mode [ 820.847872][T27413] veth0_vlan: entered promiscuous mode [ 820.853949][T27413] veth0_vlan: entered allmulticast mode [ 821.871185][T27436] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 821.879791][T27436] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 831.741570][T27473] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5822'. [ 836.751972][T27485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5826'. [ 838.309110][T27490] netlink: 'syz.0.5827': attribute type 1 has an invalid length. [ 838.316944][T27490] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5827'. [ 842.422905][T27507] lo: entered allmulticast mode [ 843.971949][T27521] netlink: 'syz.4.5836': attribute type 20 has an invalid length. [ 843.979859][T27521] IPv6: NLM_F_CREATE should be specified when creating new route [ 843.989462][T27514] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 844.746419][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 848.109313][T27537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5840'. [ 852.063260][T27543] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5842'. [ 852.838413][T27554] xt_hashlimit: size too large, truncated to 1048576 [ 855.269264][T27575] netlink: 'syz.4.5852': attribute type 21 has an invalid length. [ 855.277192][T27575] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5852'. [ 855.288715][T27576] netlink: 'syz.4.5852': attribute type 21 has an invalid length. [ 855.296629][T27576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5852'. [ 856.948505][T27580] syzkaller0: entered promiscuous mode [ 856.954042][T27580] syzkaller0: entered allmulticast mode [ 860.362300][T27583] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 861.286556][T27598] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5859'. [ 861.305232][T27600] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5859'. [ 862.001553][T27605] netlink: 'syz.2.5860': attribute type 17 has an invalid length. [ 862.010400][T27605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5860'. [ 862.019760][T27605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5860'. [ 862.754621][T27594] netlink: 'syz.0.5855': attribute type 9 has an invalid length. [ 863.464674][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5863'. [ 864.136603][T27622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5865'. [ 866.823668][T27630] : entered promiscuous mode [ 867.315412][T27632] netlink: 1024 bytes leftover after parsing attributes in process `syz.3.5869'. [ 867.317572][T27633] netlink: 1024 bytes leftover after parsing attributes in process `syz.3.5869'. [ 867.876454][T27635] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 869.836563][T27650] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5874'. [ 870.515974][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.522992][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 870.556283][T27654] syzkaller0: entered promiscuous mode [ 870.561818][T27654] syzkaller0: entered allmulticast mode [ 871.924064][T27655] tipc: Started in network mode [ 871.929017][T27655] tipc: Node identity 6e46d51dddb5, cluster identity 4711 [ 871.936723][T27655] tipc: Enabled bearer , priority 0 [ 873.563462][T27651] tipc: Resetting bearer [ 877.159166][T17620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.170445][T17620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.178810][T17620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.187087][T17620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.196979][T17620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.021796][T27651] tipc: Disabling bearer [ 879.190370][T27667] Bluetooth: hci2: command tx timeout [ 879.214457][ T5632] tipc: Node number set to 3019101469 [ 879.951616][T27680] veth1_macvtap: left promiscuous mode [ 881.825629][T27682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5881'. [ 883.216697][T27667] Bluetooth: hci2: command tx timeout [ 887.398610][T17620] Bluetooth: hci2: command tx timeout [ 889.849358][T27701] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5885'. [ 891.374014][T17620] Bluetooth: hci2: command tx timeout [ 891.985189][T27659] C speed is unknown, defaulting to 1000 [ 894.626233][T27667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 897.029950][T27720] netlink: 'syz.1.5890': attribute type 1 has an invalid length. [ 897.692587][T27721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5890'. [ 897.704983][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 897.729271][T27667] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 897.738318][T27667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 897.746153][T27667] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 900.997097][T27667] Bluetooth: hci6: command tx timeout [ 901.097900][T17620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 901.110079][T17620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 901.118433][T17620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 901.126434][T17620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 901.134194][T17620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 904.611762][ T5633] Bluetooth: hci6: command tx timeout [ 904.617243][ T5633] Bluetooth: hci7: command tx timeout [ 906.172188][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 906.937596][T27667] Bluetooth: hci7: command tx timeout [ 906.943089][T27667] Bluetooth: hci6: command tx timeout [ 906.995827][T18295] bridge0: port 3(syz_tun) entered disabled state [ 909.306426][T18295] syz_tun (unregistering): left promiscuous mode [ 909.312929][T18295] bridge0: port 3(syz_tun) entered disabled state [ 909.330972][ T5633] Bluetooth: hci6: command tx timeout [ 909.336443][ T5633] Bluetooth: hci7: command tx timeout [ 913.324684][T27667] Bluetooth: hci7: command tx timeout [ 918.725144][T27659] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.732351][T27659] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.739644][T27659] bridge_slave_0: entered allmulticast mode [ 918.747575][T27659] bridge_slave_0: entered promiscuous mode [ 918.756100][T27659] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.763266][T27659] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.770616][T27659] bridge_slave_1: entered allmulticast mode [ 918.778540][T27659] bridge_slave_1: entered promiscuous mode [ 919.060969][T27766] netlink: 'syz.3.5896': attribute type 1 has an invalid length. [ 919.068767][T27766] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5896'. [ 919.077919][T27766] netlink: 'syz.3.5896': attribute type 1 has an invalid length. [ 919.085674][T27766] netlink: 'syz.3.5896': attribute type 8 has an invalid length. [ 919.093425][T27766] netlink: 606 bytes leftover after parsing attributes in process `syz.3.5896'. [ 922.549007][T27756] lo speed is unknown, defaulting to 1000 [ 922.557505][T27704] C speed is unknown, defaulting to 1000 [ 923.816060][T27659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.829004][T27659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.870516][T27659] team0: Port device team_slave_0 added [ 923.879477][T27659] team0: Port device team_slave_1 added [ 926.535163][T27756] lo speed is unknown, defaulting to 1000 [ 926.542135][T27756] lo speed is unknown, defaulting to 1000 [ 927.966616][T27756] infiniband sz1: set active [ 927.973760][T27756] infiniband sz1: added lo [ 927.984084][T27756] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 927.988565][T27756] infiniband sz1: Couldn't open port 1 [ 928.003038][T27756] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 928.018105][T27756] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 928.727817][T27756] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 929.902333][T27729] C speed is unknown, defaulting to 1000 [ 932.180239][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.187260][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 932.585100][T27756] RDS/IB: sz1: added [ 932.589815][T27756] smc: adding ib device sz1 with port count 1 [ 932.596187][T27756] smc: ib device sz1 port 1 has no pnetid [ 933.356772][T14868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.367278][T14868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.006341][T27659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.013347][T27659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.039247][T27659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.052096][T27659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.059074][T27659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.089341][T27659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.013461][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.025184][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.033508][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.900175][T26400] lo speed is unknown, defaulting to 1000 [ 938.921824][T27729] lo speed is unknown, defaulting to 1000 [ 938.930162][ T5911] lo speed is unknown, defaulting to 1000 [ 939.791774][T17620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 939.799563][T17620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 940.898210][ C0] sched: DL replenish lagged too much [ 941.625347][T17620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 942.827630][T17620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 943.817926][T17620] Bluetooth: hci1: command tx timeout [ 945.964459][T27756] lo speed is unknown, defaulting to 1000 [ 947.758867][T17620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 947.765940][T17620] Bluetooth: hci1: command tx timeout [ 947.954041][T17620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 947.961766][T17620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 952.884266][T17620] Bluetooth: hci1: command tx timeout [ 955.043447][T27667] Bluetooth: hci3: command tx timeout [ 955.049902][T27667] Bluetooth: hci1: command tx timeout [ 955.092399][T27814] netlink: 'syz.1.5906': attribute type 32 has an invalid length. [ 957.161490][T17620] Bluetooth: hci3: command tx timeout [ 957.977800][T17620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 957.988326][T17620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 957.996479][T17620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 958.004473][T17620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 958.012171][T17620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 959.543686][T17620] Bluetooth: hci3: command tx timeout [ 960.401919][T27667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 960.413634][T27667] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 960.422171][T27667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 960.430416][T27667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 960.438077][T27667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 961.246242][T27667] Bluetooth: hci2: command tx timeout [ 962.079196][T14868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.089518][T14868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.109081][T27667] Bluetooth: hci3: command tx timeout [ 962.996558][T27756] lo speed is unknown, defaulting to 1000 [ 964.691916][T27667] Bluetooth: hci2: command tx timeout [ 966.605757][T27667] Bluetooth: hci5: command tx timeout [ 966.612201][T27667] Bluetooth: hci2: command tx timeout [ 968.870341][ T5633] Bluetooth: hci2: command tx timeout [ 968.875806][ T5633] Bluetooth: hci5: command tx timeout [ 971.140436][T27756] lo speed is unknown, defaulting to 1000 [ 971.202375][T27667] Bluetooth: hci5: command tx timeout [ 973.756892][T27667] Bluetooth: hci5: command tx timeout [ 977.027531][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 977.039960][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 977.048466][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 977.056444][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 977.064179][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 978.906579][T14868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.916916][T14868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.694702][ T5633] Bluetooth: hci7: command tx timeout [ 982.369063][ T5633] Bluetooth: hci7: command tx timeout [ 984.736947][ T5633] Bluetooth: hci7: command tx timeout [ 985.468015][T27756] lo speed is unknown, defaulting to 1000 [ 986.018397][T27785] C speed is unknown, defaulting to 1000 [ 987.120294][ T5633] Bluetooth: hci7: command tx timeout [ 990.438567][T27818] C speed is unknown, defaulting to 1000 [ 990.700117][T27756] lo speed is unknown, defaulting to 1000 [ 992.961656][T14868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.972017][T14868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.734582][T27827] C speed is unknown, defaulting to 1000 [ 994.557643][T27851] C speed is unknown, defaulting to 1000 [ 994.801354][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.808331][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 994.818586][T27785] lo speed is unknown, defaulting to 1000 [ 996.618863][T27789] C speed is unknown, defaulting to 1000 [ 998.267231][T27818] lo speed is unknown, defaulting to 1000 [ 1002.799199][T27788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1002.811062][T27788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1002.819412][T27788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1002.828831][T27788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1002.836727][T27788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1003.754850][T27827] lo speed is unknown, defaulting to 1000 [ 1004.748994][ T5633] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1005.643193][ T5633] Bluetooth: hci6: command tx timeout [ 1005.672745][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1008.669314][T27879] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1009.621679][ T5633] Bluetooth: hci6: command tx timeout [ 1011.495218][T17620] Bluetooth: hci6: command tx timeout [ 1014.182552][T27756] lo speed is unknown, defaulting to 1000 [ 1015.544012][T17620] Bluetooth: hci6: command tx timeout [ 1028.294715][T27788] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1029.284987][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1029.788874][ T5633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1029.830532][T27788] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1030.663586][T27667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1030.675654][T27667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1030.683883][T27788] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1030.691317][T27788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1030.699344][T27788] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1030.707426][T27667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1030.729709][T17620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1032.566842][T17620] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1033.572511][ T5633] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1034.428813][ T5633] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1034.436041][ T5633] Bluetooth: hci8: command tx timeout [ 1034.482244][ T5633] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1034.493772][T14868] bridge_slave_1: left allmulticast mode [ 1034.499478][T14868] bridge_slave_1: left promiscuous mode [ 1034.505305][T14868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.515080][ T5633] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1035.199502][ T5633] Bluetooth: hci4: command tx timeout [ 1036.645759][T17620] Bluetooth: hci8: command tx timeout [ 1038.546000][T14868] bridge_slave_0: left allmulticast mode [ 1038.551807][T14868] bridge_slave_0: left promiscuous mode [ 1038.557613][T14868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.567409][T27788] Bluetooth: hci4: command tx timeout [ 1038.572889][T27788] Bluetooth: hci9: command tx timeout [ 1039.843687][T17620] Bluetooth: hci8: command tx timeout [ 1041.229183][T17620] Bluetooth: hci9: command tx timeout [ 1041.234825][T17620] Bluetooth: hci4: command tx timeout [ 1042.724918][T14868] dvmrp0: left allmulticast mode [ 1042.756259][T17620] Bluetooth: hci8: command tx timeout [ 1042.764433][ T5633] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1042.790002][ T5633] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1042.798927][ T5633] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1042.807059][ T5633] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1042.814784][ T5633] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1043.541927][T27788] Bluetooth: hci4: command tx timeout [ 1043.547393][T27788] Bluetooth: hci9: command tx timeout [ 1044.682593][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1045.600950][ T5633] Bluetooth: hci10: command tx timeout [ 1045.608155][ T5633] Bluetooth: hci9: command tx timeout [ 1047.799446][T17620] Bluetooth: hci10: command tx timeout [ 1048.999159][T14868] bond9 (unregistering): (slave gretap1): Releasing active interface [ 1049.982330][ T5633] Bluetooth: hci10: command tx timeout [ 1052.399392][ T5633] Bluetooth: hci10: command tx timeout [ 1052.966812][T14868] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1054.696968][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.703978][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1058.514797][T14868] bond7 (unregistering): (slave bridge3): Releasing active interface [ 1061.109963][T17620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1061.121942][T17620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1061.130956][T17620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1061.139914][T17620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1061.147561][T17620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1063.141503][T17620] Bluetooth: hci2: command tx timeout [ 1065.298773][ T5633] Bluetooth: hci2: command tx timeout [ 1067.144771][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 1067.570165][T17620] Bluetooth: hci2: command tx timeout [ 1068.693073][T14868] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 1069.643661][ T5633] Bluetooth: hci2: command tx timeout [ 1070.584258][T14868] bond1 (unregistering): Released all slaves [ 1070.602326][T14868] bond2 (unregistering): Released all slaves [ 1070.622654][T14868] bond3 (unregistering): Released all slaves [ 1071.124616][T14868] bond4 (unregistering): (slave batadv1): Releasing active interface [ 1071.134765][T14868] bond4 (unregistering): Released all slaves [ 1072.515587][T27788] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.595720][T14868] bond5 (unregistering): (slave lo): Releasing backup interface [ 1072.605348][T14868] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1073.686087][T14868] bond5 (unregistering): Released all slaves [ 1073.707048][T14868] bond6 (unregistering): Released all slaves [ 1073.727275][T14868] bond7 (unregistering): Released all slaves [ 1074.349437][T14868] bond8 (unregistering): Released all slaves [ 1074.371513][T14868] bond0 (unregistering): Released all slaves [ 1075.645718][T14868] bond9 (unregistering): Released all slaves [ 1075.662685][T14868] bond10 (unregistering): Released all slaves [ 1075.677904][T14868] bond11 (unregistering): Released all slaves [ 1075.693136][T14868] bond12 (unregistering): Released all slaves [ 1075.709427][T14868] bond13 (unregistering): (slave veth3): Releasing active interface [ 1075.720669][T14868] bond13 (unregistering): Released all slaves [ 1075.737360][T27851] lo speed is unknown, defaulting to 1000 [ 1089.988284][T17620] Bluetooth: hci5: command 0x0406 tx timeout [ 1091.706732][T27667] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1092.700262][T27667] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1092.989689][T17620] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1093.740586][T17620] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1093.764445][T17620] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1097.868459][T17620] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1098.141075][T27667] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1098.149773][T27667] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1098.157989][T27667] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1098.165735][T27667] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1099.622573][T17620] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1100.410260][ T5633] Bluetooth: hci11: command tx timeout [ 1102.277545][T27788] Bluetooth: hci12: command tx timeout [ 1102.302105][T17620] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1103.767902][T27789] lo speed is unknown, defaulting to 1000 [ 1105.477720][T17620] Bluetooth: hci11: command tx timeout [ 1105.483685][T17620] Bluetooth: hci7: command 0x0406 tx timeout [ 1105.489759][T17620] Bluetooth: hci12: command tx timeout [ 1107.003482][T27667] Bluetooth: hci13: Opcode 0x1001 failed: -110 [ 1107.010931][T27788] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1108.573145][T17620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1108.582143][T17620] Bluetooth: hci12: command tx timeout [ 1108.587690][T17620] Bluetooth: hci11: command tx timeout [ 1109.311826][T27788] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1109.343989][T17620] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1109.397748][T17620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1109.405860][T17620] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1110.154542][T27788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1110.162990][T17620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1110.170668][T17620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1111.105237][T17620] Bluetooth: hci11: command tx timeout [ 1111.110796][T17620] Bluetooth: hci12: command tx timeout [ 1111.972040][T17620] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1112.995910][T17620] Bluetooth: hci6: command tx timeout [ 1113.062029][T17620] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1115.899622][T17620] Bluetooth: hci6: command tx timeout [ 1115.905112][T17620] Bluetooth: hci13: command tx timeout [ 1116.827640][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.834747][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1117.866477][T27756] lo speed is unknown, defaulting to 1000 [ 1118.958443][ T5633] Bluetooth: hci13: command tx timeout [ 1118.964007][ T5633] Bluetooth: hci6: command tx timeout [ 1123.470593][ T5633] Bluetooth: hci13: command tx timeout [ 1123.476237][T17620] Bluetooth: hci6: command tx timeout [ 1124.481472][T27756] lo speed is unknown, defaulting to 1000 [ 1131.205613][T17620] Bluetooth: hci13: command tx timeout [ 1133.166209][T17620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1134.010788][T27756] lo speed is unknown, defaulting to 1000 [ 1135.896475][ T5633] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1135.957452][T17620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1135.968271][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1136.970301][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1136.977653][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1136.985661][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1136.993284][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1143.529705][ T5633] Bluetooth: hci4: command tx timeout [ 1143.583772][T27756] lo speed is unknown, defaulting to 1000 [ 1145.888475][ T5633] Bluetooth: hci4: command tx timeout [ 1146.639012][T14868] tipc: Left network mode [ 1149.985942][ T5633] Bluetooth: hci4: command tx timeout [ 1151.633265][T27756] lo speed is unknown, defaulting to 1000 [ 1152.720597][ T5633] Bluetooth: hci4: command tx timeout [ 1157.767587][T27756] lo speed is unknown, defaulting to 1000 [ 1159.612477][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1167.520818][T27788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1167.578790][T27788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1167.597828][T27788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1168.285872][T17620] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1168.293153][T27756] lo speed is unknown, defaulting to 1000 [ 1169.123793][T17620] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1169.131720][T17620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1169.139469][T17620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1171.193338][ T5633] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1172.332698][T28042] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1174.146646][T27788] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 1175.080350][ T31] INFO: task syz-executor:27785 blocked for more than 146 seconds. [ 1175.088326][ T31] Not tainted syzkaller #0 [ 1175.093295][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1175.101994][ T31] task:syz-executor state:D stack:26232 pid:27785 tgid:27785 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1175.113960][ T31] Call Trace: [ 1175.117356][ T31] [ 1175.120388][ T31] __schedule+0x1821/0x5740 [ 1175.125009][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1175.130028][ T31] ? __pfx___schedule+0x10/0x10 [ 1175.134935][ T31] ? schedule+0x90/0x360 [ 1175.139228][ T31] schedule+0x164/0x360 [ 1175.143454][ T31] schedule_preempt_disabled+0x13/0x30 [ 1175.148958][ T31] rwsem_down_write_slowpath+0x883/0x1080 [ 1175.154724][ T31] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 1175.160663][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1175.166873][ T31] ? rdma_dev_exit_net+0x92/0x350 [ 1176.068093][ T31] down_write+0x1bc/0x200 [ 1176.072518][ T31] ? __pfx_down_write+0x10/0x10 [ 1176.077425][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1176.083146][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1176.090451][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 1176.095889][ T31] rdma_dev_exit_net+0x92/0x350 [ 1176.100914][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1176.106624][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1176.112145][ T31] ? rtnl_is_locked+0x15/0x20 [ 1176.116869][ T31] ops_undo_list+0x49f/0x940 [ 1176.121512][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1176.126665][ T31] ? ops_init+0x469/0x5c0 [ 1176.131058][ T31] setup_net+0x2f0/0x340 [ 1176.135352][ T31] ? __pfx_setup_net+0x10/0x10 [ 1176.140166][ T31] ? preinit_net+0x492/0x7b0 [ 1176.144804][ T31] copy_net_ns+0x50e/0x730 [ 1176.149266][ T31] create_new_namespaces+0x3e7/0x6a0 [ 1176.154594][ T31] ? security_capable+0x7e/0x2c0 [ 1176.159605][ T31] unshare_nsproxy_namespaces+0x149/0x190 [ 1176.165388][ T31] ksys_unshare+0x57d/0x9f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1177.866546][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.873571][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1179.446629][T27756] lo speed is unknown, defaulting to 1000 [ 1179.527925][ T5633] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1179.537885][ T5633] Bluetooth: hci2: command tx timeout [ 1181.723398][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1181.728536][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.734660][ T31] __x64_sys_unshare+0x38/0x50 [ 1181.739464][ T31] do_syscall_64+0x174/0x580 [ 1181.744090][ T31] ? trace_irq_disable+0x3b/0x140 [ 1181.749176][ T31] ? clear_bhb_loop+0x40/0x90 [ 1181.753901][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.759839][ T31] RIP: 0033:0x7fcdb3d9e127 [ 1181.764379][ T31] RSP: 002b:00007ffe8f707098 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1181.772847][ T31] RAX: ffffffffffffffda RBX: 00007fcdb4015f40 RCX: 00007fcdb3d9e127 [ 1181.780857][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1181.788874][ T31] RBP: 00007fcdb40167b8 R08: 0000000000000000 R09: 0000000000000000 [ 1181.796894][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1181.804914][ T31] R13: 0000000000000003 R14: 00007ffe8f7072d8 R15: 0000000000000000 [ 1181.812964][ T31] [ 1181.816109][ T31] [ 1181.816109][ T31] Showing all locks held in the system: [ 1182.538985][T27788] Bluetooth: hci2: command tx timeout [ 1182.545351][T27788] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1182.573436][ T31] 1 lock held by pool_workqueue_/3: [ 1182.578704][ T31] 1 lock held by khungtaskd/31: [ 1182.583581][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1183.266647][ T31] 2 locks held by getty/5390: [ 1183.271548][ T31] #0: ffff8880371200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1183.281396][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1183.291675][ T31] 2 locks held by kworker/u8:24/9349: [ 1183.297468][T27788] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1183.305822][ T31] #0: ffff8880b863aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1183.966210][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1183.975207][ T31] 3 locks held by kworker/u8:25/14868: [ 1183.980695][ T31] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1183.991815][ T31] #1: ffffc9000d3dfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1184.002485][ T31] #2: ffffffff8fdb91a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1184.011887][ T31] 6 locks held by syz.3.5896/27756: [ 1184.017112][ T31] 2 locks held by syz-executor/27785: [ 1184.022509][ T31] #0: ffffffff8fdb91a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1184.031968][ T31] #1: ffffffff8fb1a148 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x92/0x350 [ 1184.041893][ T31] 2 locks held by syz-executor/27789: [ 1184.047297][ T31] #0: ffffffff8fdb91a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1184.696816][T27788] Bluetooth: hci2: command tx timeout [ 1184.702522][T27788] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1184.710774][ T31] #1: ffffffff8fb1a148 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x92/0x350 [ 1184.720612][ T31] 2 locks held by syz-executor/27827: [ 1184.726011][ T31] #0: ffffffff8fdb91a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1184.735473][ T31] #1: ffffffff8fb1a148 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x92/0x350 [ 1184.745279][ T31] 2 locks held by syz-executor/27851: [ 1184.750673][ T31] #0: ffffffff8fdb91a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1184.760129][ T31] #1: ffffffff8fb1a148 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x92/0x350 [ 1184.769925][ T31] 3 locks held by syz-executor/27947: [ 1184.775321][ T31] #0: ffffffff8fdb91a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1184.784783][ T31] #1: ffffffff8fb19f88 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0