last executing test programs: 3.470014669s ago: executing program 0 (id=4134): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x85}]}}}]}, 0x3c}}, 0x40800) 3.23116202s ago: executing program 0 (id=4138): sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40) socket(0xf, 0x6, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040), 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r1, 0x1, 0x1e, 0x0, &(0x7f00000004c0)) socket(0x14, 0x2, 0x4) close(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 3.117382707s ago: executing program 1 (id=4140): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x9, 0x4, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x65, 0x0, 0xe9, 0x29, 0x0, @empty, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x1, 0x8000, 0x6, 0x1c6, {{0x11, 0x4, 0x1, 0x8, 0x44, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @multicast2, {[@noop, @lsrr={0x83, 0xb, 0xa5, [@loopback, @multicast1]}, @cipso={0x86, 0x20, 0x1, [{0x6, 0x2}, {0x6, 0xa, "3fd25c2b54f61ff7"}, {0x0, 0x4, "9413"}, {0x0, 0xa, "5d8837820c189789"}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r2, 0x4, 0x10, 0x96, 0x3, 0x43, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1, 0x1ff, 0x400}}) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x9, 0x4, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x65, 0x0, 0xe9, 0x29, 0x0, @empty, @remote}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x1, 0x8000, 0x6, 0x1c6, {{0x11, 0x4, 0x1, 0x8, 0x44, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @multicast2, {[@noop, @lsrr={0x83, 0xb, 0xa5, [@loopback, @multicast1]}, @cipso={0x86, 0x20, 0x1, [{0x6, 0x2}, {0x6, 0xa, "3fd25c2b54f61ff7"}, {0x0, 0x4, "9413"}, {0x0, 0xa, "5d8837820c189789"}]}, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r2, 0x4, 0x10, 0x96, 0x3, 0x43, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1, 0x1ff, 0x400}}) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) 2.653900291s ago: executing program 1 (id=4144): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040006}, 0x40004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180)=0xfff, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) 2.561390898s ago: executing program 0 (id=4146): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) syz_init_net_socket$ax25(0x3, 0x5, 0x1) 2.411060949s ago: executing program 0 (id=4149): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100013000400000002000000000000118138654e56f18b525f00"], 0x0, 0x2c}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000030c0), 0x2) r1 = socket$isdn(0x22, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}}, &(0x7f0000000480)=0x84) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="aab8ae3bbf175e2c3c34bfcc46c4a065b6c9", 0x12}, {&(0x7f00000001c0)="550e96b7fd4f1129df84df5e97f2b4723e354c5d82aec68790317ab1f6950c07e854265eaff5be39aabd6fc4b9298a780de4efd7486f5c64858161ff93f46d569af1af530a06b738548193652e135db9a2eea46e9984444b60c0c0aea33d7cf33e70d7600e2bd23a63f7cee67e", 0x6d}, {&(0x7f0000000240)="298909745e73d7a86711797357bee5fca75989fcdb2b97605c3553262c04f87b8e29ede573ad9ef77bc84e0cbc6f69c7bda3178282ed12eef742e592cff12b54494118f553e39f91c2c6", 0x4a}, {&(0x7f00000002c0)="c5771f85a8f93b31e4d3e73c84b3456e1334959e6d9935261c2fa6076b7c1199ce1e2eec0218360945fc1b6c0e3b4ce228c6d1e187408345ef2abca0aa09f321766edf3d1529d90aec257b54cc5cc865c697812f3f07d925ab1aae0803f3ceb31d", 0x61}, {&(0x7f0000000340)="fe309abda908dcc8b5112db711a22c6678d7367c98c2149e215eb168a799a4656e1cd6d240fddae10aed0e12726972ad003ab0bbe1467e97c3a0307a752b520c6e6199fc2b3727e4402f472f0cc3ca741a8fc41ca2966561997ef028e7d8f5835d8a76b53d49c39bf9ee2981c1ba224e498f770b7e2fa12f39e71463958437b432d56b78be31ca852c8eed9172aad6d52b8eae56fb9e11db1a3bca2a323b156b962af7fc86a5736fe8125547ccc74818edf0e64cc5", 0xb5}], 0x5, 0x6, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c01"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x590) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r6, &(0x7f0000000a40)=[{&(0x7f00000007c0)='e', 0x1}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x28, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) connect$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104000080000000000000040000", @ANYRES32=0x0, @ANYBLOB="2b03000000840000140035006d6163767461703000000000000000000500270000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000040)={'vlan1\x00', 0x4}) 2.410880447s ago: executing program 1 (id=4150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}]}, 0x30}}, 0x0) 2.252246656s ago: executing program 1 (id=4152): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xffffffffffffffa1}], 0x1, 0x0, 0x0, 0x7400}, 0x0) read(r0, &(0x7f00000000c0)=""/80, 0x50) 2.147950182s ago: executing program 0 (id=4153): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$WPAN_WANTACK(r2, 0x0, 0x300, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0xff0e}, 0x48) 1.964075453s ago: executing program 0 (id=4158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcd}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x145}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdd7a}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x238, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_DESC={0x1f8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x963}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8bc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2a6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c}]}]}, @NFTA_SET_DESC_CONCAT={0xa8, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4ca7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa488}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}]}, @NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8921}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x124}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFT_MSG_DELRULE={0xc0, 0x8, 0xa, 0x328479fe5aad967, 0x0, 0x0, {0x4}, [@NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf66}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xccb}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x448}, 0x1, 0x0, 0x0, 0x8800}, 0x8004) 1.921361403s ago: executing program 4 (id=4160): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0100000001901800000000000000000a00000234000f800800014000000005080001400000af4408000140fffffffc080001400000008108000240000000020800014000000002c8000d80080002000a010101140005002001000000000000000000000000000214000400fe88000000000000000000000000010114000000000000000014000400fe88000000000000000000000000000114000380060001004e220000060002004e24000014000400fe8000000000000000000000000000bb440003800600020000650000060002004e220000060001004e210000060002004e200000060001004e210000060001004e210000060002004e240000060001004e210000080015400000000308001a4000000101060012400002000008000840000040370c00188008000340000000ff00"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@loopback, 0x1800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x40800) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.522264903s ago: executing program 4 (id=4161): syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x40041) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000240)={{'\x00', 0x3}, {0xffffffff}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="d68455335d14900986eedd2c474c8b42b83482136890d1969644161128f504007353fae90ea8548e8a18228ab0930430eb4d06b4396028879689dab673c1b3d5345ec87dfc0bfb96809d19a398e31449e8a0fcc18a3b7b3ece7ebfd502255ca026f64adb0b0a2f54fb68a3013239fa291cbe4764ed6d54e40acdddfb72eb440bc9561173d3ce8da12f80540c631ae1490a6fd138ba10f51f332300049b", 0x9d, 0x0, &(0x7f00000003c0)={0x2, 0x1a5, {0x0, 0xc, 0xab, "f02b55613c7601cb3e7b080fcacc20416c65c97752aa02e0fd474ea292b2bc2564777c53ed84d0b6139f653a4073e1554be18f6058d341b4d7346b3a758c200af25b89e1a55d9335f4bfd5bc78c422974ce2f40e79840c26d510e678a65132515218d0da739f2c53d3949aeeb0e2029997a9bc9433c745272b4087ae916267178b703a75ed033702c17920afe1a0afcf5bf8532ac1458f1abdfc21379d2e870b53f1c2878843f67dae7ebb", 0xed, "bca6375029aad29f7597e4f7b818d92d527cdae7516c8c9f2753ba5aa241e3653f25e8bf27d43a819e15e3b744a0db90a016737cab89af006d89b2e3bb0237c0dbd83576f8259ee6e9d0d833fd76975a80b00b61978c518fae16fb9019655ce719298b9d4221b8d6152bc61fadb787c34e1fbbc4aba0d30490f382bc7ddbd1d493da1da92d24fc9be0245e47890d50eda1d9755d8b33fc7d48845e5bf096aad785cff599a8b39f69fab54d66b19b58aa57897656cfecdd2da9f3e1d79819144dfed6787694e6a38f62a1dec19c6d7fb500a368005bf870b8041acf82c78123d27f97ea5f6c85cfa77a0a88a47e"}, 0x29, "c0d0c824856579d578c14e70bbbca5950e98fee9c7819fdb499892899c4c19922c42ef034ce03231c0"}, 0x1da}) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x40041) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}}, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000240)={{'\x00', 0x3}, {0xffffffff}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="d68455335d14900986eedd2c474c8b42b83482136890d1969644161128f504007353fae90ea8548e8a18228ab0930430eb4d06b4396028879689dab673c1b3d5345ec87dfc0bfb96809d19a398e31449e8a0fcc18a3b7b3ece7ebfd502255ca026f64adb0b0a2f54fb68a3013239fa291cbe4764ed6d54e40acdddfb72eb440bc9561173d3ce8da12f80540c631ae1490a6fd138ba10f51f332300049b", 0x9d, 0x0, &(0x7f00000003c0)={0x2, 0x1a5, {0x0, 0xc, 0xab, "f02b55613c7601cb3e7b080fcacc20416c65c97752aa02e0fd474ea292b2bc2564777c53ed84d0b6139f653a4073e1554be18f6058d341b4d7346b3a758c200af25b89e1a55d9335f4bfd5bc78c422974ce2f40e79840c26d510e678a65132515218d0da739f2c53d3949aeeb0e2029997a9bc9433c745272b4087ae916267178b703a75ed033702c17920afe1a0afcf5bf8532ac1458f1abdfc21379d2e870b53f1c2878843f67dae7ebb", 0xed, "bca6375029aad29f7597e4f7b818d92d527cdae7516c8c9f2753ba5aa241e3653f25e8bf27d43a819e15e3b744a0db90a016737cab89af006d89b2e3bb0237c0dbd83576f8259ee6e9d0d833fd76975a80b00b61978c518fae16fb9019655ce719298b9d4221b8d6152bc61fadb787c34e1fbbc4aba0d30490f382bc7ddbd1d493da1da92d24fc9be0245e47890d50eda1d9755d8b33fc7d48845e5bf096aad785cff599a8b39f69fab54d66b19b58aa57897656cfecdd2da9f3e1d79819144dfed6787694e6a38f62a1dec19c6d7fb500a368005bf870b8041acf82c78123d27f97ea5f6c85cfa77a0a88a47e"}, 0x29, "c0d0c824856579d578c14e70bbbca5950e98fee9c7819fdb499892899c4c19922c42ef034ce03231c0"}, 0x1da}) (async) 1.253687678s ago: executing program 1 (id=4163): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xfffb}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x3}, {0x0, 0xfff1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.212941014s ago: executing program 2 (id=4164): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 1.028044728s ago: executing program 4 (id=4165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000), 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 1.027570387s ago: executing program 3 (id=4166): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000000009300000000000000000007e7596ca457e4b61f282949c84a63d10c7360ea98b721cff58c90286a7665931d4eba4e0c0e959d03b7b0094123319dcbd2db5a9a68d7b7897010733677f1378289fdd36f3d7dc8c433e3376152a51cd542dd37e2016e5b957366deddbd73d8835aa4cb5b8a707771cae0b6f8a1e0c66694076ed6b6b2c3794f237e3c270a0400000000000000c2b938cfb9028b0c30fcffffff6cbc5622f08ec4ab134a7bda52941e90690bc0eca5426e7da895206dfa"], 0x14}}, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="32ff44d5ab37d41bd1661d5f3da3498a25870d9585de095cfa1128d073f4f889ef222db2b8b01b6fcf62d769759ba9143844d97497138887fccffbf8ef263239eb81a8cf02f6aac1101c3ff11924b7f2916c2ff861b27f00e4f8d24aa73fe3bc0dfe2bc1436a809ba8d742f08dc3eaf2004e6b512a47bc5a07daec2864c3122adb35187278ea2d03a44c2bf5739d8d8dabdf6098542dfb6d15cafde047b0e6ec8c9615089e08c17d0b56830fc426922d45920c34f7cceb64f805d4b6eaf0b5bf15c1107d737cf5c2a662e37d1f9617ee26a3bd81fada40959246313fd5b050e6ae5671f5e791bfc0b213d1dfa9d0", 0xee}, {&(0x7f00000003c0)="adcfa01b11f2313cc247002df1d396ded4f255575aecda2bef59ad1ff9199b2b21a7cfc614e90d67399ee3ba6a4a8ddc8eca0aadb3a396243abd7ef850b7991a78db478a509b504bdeae2b5352a0b271df4e63cada66136ae913aaa26130ec92cf9e25f8df2de3d7dfc4aa960b9e27fd7762c69a60bb813b065f72079f430707e4bb461465abdfbd50beb9453a3e704c194757941501962d7954d455a2a91a677d888a78cb6a90d448af68eff32248df03ae2503534553754845d3239cfccb8b21da34b7f2a1f5dc8ca2ebf4f8573fa324fe87eea32232e2d0126a089b7635c69feca418e0978f1f1b34f57afc774018e90bd0bbd3268107", 0xf8}, {&(0x7f00000004c0)="caa55246665a6d29782039e02b4314ed4e4211d93a2eb80c367bd48f1c442b93f98bcc62aca1a18aa7929304ba6c617f3d3b8a0c8c8aacb7d251488c846ab4e2391b81a037dc92e1ca4e96010ff40d877d64c20ea143972980d34204dd42a3e120a9583037b5caefc88d3ba012ede243bbf04f63ebd6a4495dcdfafe49f53e024ee095c4ae0a0de8a5a3bcb69263d7d36700283329359774f730d57a4294b93355ef4f76b4268ede6b1c9dfd65287243fa87db959c104c8b81238c7bac133ac88ca7e6b3b40efc10d88354294c4792ec1206590acab6e31e9f378d4acd1e7c2faedfea588d0e7629cfabfe290dcef8762d1ac6526ade12", 0x15a}, {&(0x7f0000000100)="e43cdc4b10a793088a231f79825ffeb7403b4c04ebdaa7b092dfdd7b630c313a9d4536af53d814e170576c4763afd922e0cc95f0fb1584ae4be124bd1f15069d553a679ee981", 0x46}, {&(0x7f0000000080)="b1af490ca69112e6dbd3b5aa89928a012ff6a9d27a72890f4814e0d3b75775babbbb71e4b23b72057fc6", 0x2a}, {&(0x7f0000000940)="d2f3403705290b214ab568678f6b9b023dd48b7b8593a66a5d46da6237e8d8f96c996d72527815ba9b4839e1f04fe2d0231f9942ab047c21c492802059f0bf0d86f6a1c155028a58b9d23007e779d314a42b746e643a35446bae07645a71bed0d32acee32b17d5967094048f30abba9a8b560e61ee85fdf7844a164b9a8bd8c16aed4f3772d4660a3fd1412ba361a24e19d7342dcff3698b30fad7b9848bb3009bb5506a27ce9e86b2430bb58391d80f76a47c1d01b7b01afed2307ad1d99a47d06c20137b6bce5153fb55c29ca75b03", 0xd0}, {&(0x7f00000006c0)="1181106137f69e2c74559b94647e8d95429bba1ac779b893ede665ac742fe5d1678a64d24b9aac693b8c28ce22fa694ff4e9747e1a2e0f0221c3f2b83c5c9e56edd9a7b3b2b4ddb923d3f0ebd93ec7e11706314a78bca6d25ecdecca1214ee39a54fe55adf09324949d5fed65f35e62d3b86432efcf507965e63fcd1dfb7de26d87620f253e6f47242f5c9bc8e04f48e60450884921265ac515998740db169ef7dee38ff7a3a2d4b97f3077f219ab489379685f9f42759c558df54bf2db0ba64045d00b3d227dccfa65415a59cd5f56dd13e1b7feaafbd7584cdbf543fa78168057923de", 0xe4}, {&(0x7f0000000180)="6c574808fa09", 0x6}, {&(0x7f00000007c0)="46d4e4d550518c1dfd984e094927bac5ad22f2949efc51256291951e891d774d4ff09375f17edada09bf6543286c08b0b5bb1d19187fbaf4e0f2d13f5425c2c5aee3ed70038638f1a0eadf00e2036ac0bc3b4c23573c0edc9812be073deba7807aaaf8bcba4f091721c2bd72012e6878906112d8dc8aa281a51477755d9c151e304e225fcc68197a5d2aa9b52ed5efa1e9ac6af56a6ffa865d82a5cda3d3f8162b0181413c084f5c01ae91ccf963", 0xae}], 0x9}, 0x20000000) 1.025642457s ago: executing program 2 (id=4167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x2000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) 860.782858ms ago: executing program 3 (id=4168): r0 = socket(0x1a, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="08f90000000000000a00000000000000ff"], 0x190) (async) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) 857.56161ms ago: executing program 1 (id=4169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 661.501867ms ago: executing program 3 (id=4170): r0 = socket$kcm(0xa, 0x3, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x20, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/233, @ANYRES32], 0x144}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x98, 0x98, 0x1c8, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x10000000) socket$unix(0x1, 0x5, 0x0) 523.310685ms ago: executing program 2 (id=4171): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="ca7bb7cc30be57409472dbd334a5406ea1444dc22dd409392b003aa36c944be17b0e1316b496769d3f9582", 0x2b}, {&(0x7f0000000080)="46d3e5bf4e48a8362899a312386d1a1eee4f2829e07a74114c8441b58fac32631dc571a6ec21380488eb859694a478759783384b20b95c6fc1f0b0fc46b6efe8a9aa17f38ea2050532fe58df07c866a8866b10c35fc56be7a7a8655743af54d0e185d882fccdcd0c532535e6427d052f00ea159c39fa1fb6", 0x78}], 0x2, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7c5dbb99}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@cipso={0x86, 0x2f, 0x3, [{0x2, 0x10, "e1898bff2e5edf00032956b4c39c"}, {0x2, 0x3, "11"}, {0x1, 0x4, "810a"}, {0x2, 0x12, "ad29d7bba145ddf98f6464dba4031c9f"}]}, @noop, @lsrr={0x83, 0x7, 0x6, [@remote]}, @timestamp_prespec={0x44, 0x34, 0xc4, 0x3, 0x6, [{@loopback, 0x8}, {@empty, 0xffffffff}, {@empty, 0x8}, {@loopback, 0x642}, {@multicast1, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @cipso={0x86, 0x66, 0x1, [{0x5, 0x7, "f042727279"}, {0x6, 0xb, "59a818783c69d26617"}, {0x5, 0xa, "9a4ab9318edfcaad"}, {0x7, 0x10, "6fde8b55d8cdf00f8547d4ad93a7"}, {0x6, 0x6, 'L\ndY'}, {0x0, 0x11, "4b07ba4be006206e21c2236f7dcee0"}, {0x2, 0xd, "247d7b4e7f5aac7ccacdff"}, {0x2, 0xd, "d6679b4290d7f6658b6988"}, {0x7, 0x3, "c9"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xce665200}}], 0x118}, 0x1) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'macvtap0\x00', 0x4000}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x2, 0x8, 0x1ff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1f, 0x18d, 0x0, 0x6, 0x108, r2, 0xd066, '\x00', r3, 0xffffffffffffffff, 0x5}, 0x50) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) (async) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000600)) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000640)) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4040) (async) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r2, r3, 0x25, 0x16, @val=@tcx={@void, @value=r2}}, 0x1c) close(r6) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000800)=0x1, 0x4) sendto$packet(r2, &(0x7f0000000840)="eaaff0bb88f6bc332e8593f29ecb7ac885461f684e82a688947b3395de51229e6f134ef5b98e0c4c5ef29bae8609b87e857b493a0b75232c660f6d6579a7c12b34457997690e25e0330406b7837bd26740ab67cf19666596b20aa0b7c0d73fc241e5322778f3fa25", 0x68, 0x20000000, &(0x7f00000008c0)={0x11, 0x17, r3, 0x1, 0x72, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x41}, @IPSET_ATTR_IFACE={0x14, 0x17, 'team0\x00'}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80090) (async) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x1405, 0x200, 0x70bd2a, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x68080) (async) connect(r7, &(0x7f0000000c40)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000cc0), 0x4) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r8, &(0x7f0000000d00)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}}}, 0xb) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c081}, 0x48800) (async) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000e80)=0x4, 0x4) 507.645472ms ago: executing program 4 (id=4172): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 440.352223ms ago: executing program 3 (id=4173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x40, 0x4) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202de7600000a00060008021100000000000800350005"], 0x44}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x3, 0x8}}]}}]}, 0x3c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r12) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x1000000, 0x0, 0x804}, 0x24000040) sendmsg$NLBL_UNLABEL_C_STATICLIST(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r13, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x28}}, 0x40) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000040af0000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000c4000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 367.672627ms ago: executing program 2 (id=4174): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@loopback, r4}, 0x14) sendto$inet6(r3, &(0x7f00000000c0)="800034ca269bb23c", 0x8, 0x4004084, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c) read(r3, &(0x7f0000000240)=""/38, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003b) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r1, r0, 0x2, 0xc8, &(0x7f00000000c0)="d14c3cefb452ed54cff813aec277f6b4f23ea3976adb04088dfcd3273935ce3edb84d49a6bc08c9a736a615f80c8144d625e6a6a25e9d7254490535d847aa58db19a0481afd4a99d78435ee563becf46dd0ea0aee57ca7669f36ff21ee52b728c30499be744076cdd33c54690e8752abbd419fd62793bbe7eb3835a68cb0fefc4fcb6853d58797408a0f84904eba0c11bb75be6ec6887d30d28adeaf3b9e371ffd66e738d3cd75decb93f60aa48bdf4fcf925f15de7f467cbff58bf1c55ee057047508fb0653a487", 0xf, 0x6, 0x5, 0x8, 0x23b, 0x2, 0x1, 'syz0\x00'}) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) unshare(0x2000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x80040009, 0x0, r9}, 0x48) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x19, &(0x7f0000000340), 0x8) 270.978514ms ago: executing program 4 (id=4175): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc14585c62", 0x6}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18, 0x1000000}, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e27, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)="1a078876e6d6192059", 0x9}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @local}}}], 0x20}, 0x0) 263.42875ms ago: executing program 3 (id=4176): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async) pipe(&(0x7f0000000680)) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000080)=""/120, 0x78) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r3], 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x44}}, 0x0) 148.363936ms ago: executing program 2 (id=4177): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$ax25(r1, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x4, 0x9, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) close(r2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf250800010000000000080015000000000008004f000000000008004b0013000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 139.336247ms ago: executing program 4 (id=4178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x2f, 0x0, "ea1405f7ed3afb477e97815317dd90b0a9f242cdedf08f407b4090210f80a0719e68fabccef0ed7facb62bf4b908fe0781eb04f51226b4e01641b245e500000000000000000000004600"}, 0xd8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x401, 0x0, r1, 0x19, '\x00', r2, r3, 0x4, 0x7f, 0x4}, 0x50) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r5, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r6, 0x5}, 0x8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) 63.007648ms ago: executing program 2 (id=4179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806"], 0xfdef) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300400802c0000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d8000140000001000010000000000000000000000000a00"/232], 0xe8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806"], 0xfdef) (async) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r3) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300400802c0000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d8000140000001000010000000000000000000000000a00"/232], 0xe8}}, 0x0) (async) 0s ago: executing program 3 (id=4180): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) kernel console output (not intermixed with test programs): : 112 bytes leftover after parsing attributes in process `syz.4.2349'. [ 279.167424][T14742] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2353'. [ 279.827710][T14768] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2361'. [ 279.973729][T14775] ip6gre2: entered allmulticast mode [ 279.984868][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2363'. [ 279.995329][T14772] netlink: 'syz.4.2363': attribute type 5 has an invalid length. [ 280.004001][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2363'. [ 280.035815][T14772] geneve2: entered promiscuous mode [ 280.060878][T14772] geneve2: entered allmulticast mode [ 280.067843][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 280.086047][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 280.133866][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 280.156186][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 280.305556][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2366'. [ 280.339377][T14786] bond9: entered promiscuous mode [ 280.345078][T14786] 8021q: adding VLAN 0 to HW filter on device bond9 [ 280.549200][T14808] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 280.806738][T14822] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 280.822400][T14822] netlink: 'syz.0.2376': attribute type 2 has an invalid length. [ 280.878433][T14822] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 280.903165][T14822] netlink: 'syz.0.2376': attribute type 3 has an invalid length. [ 280.986117][T14831] sctp: [Deprecated]: syz.1.2381 (pid 14831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.986117][T14831] Use struct sctp_sack_info instead [ 281.937646][T14891] tipc: Enabling of bearer rejected, failed to enable media [ 282.060167][T14898] bridge5: entered promiscuous mode [ 282.065647][T14898] bridge5: entered allmulticast mode [ 282.092527][T14905] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 282.248011][T14910] pimreg: entered allmulticast mode [ 282.920269][T14954] net_ratelimit: 14 callbacks suppressed [ 282.920291][T14954] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 283.332714][T14958] syzkaller0: entered promiscuous mode [ 283.340003][T14958] syzkaller0: entered allmulticast mode [ 283.416846][T14981] sctp: [Deprecated]: syz.1.2426 (pid 14981) Use of int in maxseg socket option. [ 283.416846][T14981] Use struct sctp_assoc_value instead [ 283.453070][T14983] __nla_validate_parse: 141 callbacks suppressed [ 283.453092][T14983] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2427'. [ 283.552204][T14989] netlink: 'syz.3.2428': attribute type 13 has an invalid length. [ 284.022207][T13763] tipc: Subscription rejected, illegal request [ 284.138367][T14993] @0Ù: renamed from bond_slave_1 [ 284.197222][T15021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2434'. [ 284.238819][T15023] only policy match revision 0 supported [ 284.238842][T15023] unable to load match [ 285.065339][T15061] tipc: Enabled bearer , priority 0 [ 285.185506][T15061] syzkaller0: entered promiscuous mode [ 285.187322][T15076] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2440'. [ 285.192109][T15061] syzkaller0: entered allmulticast mode [ 285.209343][T15061] tipc: Resetting bearer [ 285.300952][T13763] tipc: Resetting bearer [ 285.314456][T15060] tipc: Resetting bearer [ 287.108977][T15060] tipc: Disabling bearer [ 287.154429][ T5931] tipc: Node number set to 2298961617 [ 287.356999][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2454'. [ 287.393205][T15112] pim6reg527: entered allmulticast mode [ 287.413569][T15116] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 287.431907][T15116] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2453'. [ 287.457598][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 287.475934][T15121] netlink: 'syz.4.2455': attribute type 9 has an invalid length. [ 287.739626][T15130] tipc: Enabled bearer , priority 0 [ 287.750840][T15135] ip6t_rpfilter: unknown options [ 287.763220][T15129] tipc: Resetting bearer [ 287.773733][T15128] tipc: Disabling bearer [ 287.879320][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2463'. [ 287.888855][T15143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2463'. [ 287.898100][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2463'. [ 287.907739][T15143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2463'. [ 288.073203][T15151] lo speed is unknown, defaulting to 1000 [ 288.423686][T15151] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.539120][T15169] syzkaller1: entered promiscuous mode [ 288.544665][T15169] syzkaller1: entered allmulticast mode [ 288.754416][T15178] netlink: 'syz.1.2473': attribute type 7 has an invalid length. [ 288.790416][T15178] netlink: 'syz.1.2473': attribute type 8 has an invalid length. [ 288.825892][T15181] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 289.221700][T15208] __nla_validate_parse: 1 callbacks suppressed [ 289.221720][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2482'. [ 289.296425][T15214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2484'. [ 289.865807][T15239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2493'. [ 289.920205][T15243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2494'. [ 290.096767][T15248] netlink: 'syz.3.2496': attribute type 1 has an invalid length. [ 290.202897][T15249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2495'. [ 290.404541][T15269] netlink: 'syz.1.2502': attribute type 11 has an invalid length. [ 290.625261][T15284] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 290.645716][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2507'. [ 290.660223][T15280] netlink: 'syz.0.2507': attribute type 7 has an invalid length. [ 290.668270][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2507'. [ 290.821426][T15291] netlink: 'syz.0.2509': attribute type 7 has an invalid length. [ 290.833009][T15293] netlink: 'syz.0.2509': attribute type 7 has an invalid length. [ 291.456297][T15317] netlink: 'syz.2.2514': attribute type 11 has an invalid length. [ 291.633024][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 291.644238][T15325] lo speed is unknown, defaulting to 1000 [ 291.668396][T15327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2518'. [ 291.691938][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 292.255972][T15325] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.373530][T15416] netlink: 'syz.4.2543': attribute type 7 has an invalid length. [ 293.401163][T15416] netlink: 'syz.4.2543': attribute type 8 has an invalid length. [ 293.487859][T15416] gretap0: entered promiscuous mode [ 293.522185][T15416] batadv_slave_1: entered promiscuous mode [ 293.557971][T15416] gretap0: left promiscuous mode [ 293.581262][T15416] batadv_slave_1: left promiscuous mode [ 293.688969][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.971223][T15445] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 294.304836][T15460] nbd: must specify at least one socket [ 294.336630][T15464] netlink: 'syz.4.2560': attribute type 21 has an invalid length. [ 294.449585][T15464] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 294.507445][T15464] bond10 (unregistering): Released all slaves [ 294.526700][T15482] __nla_validate_parse: 11 callbacks suppressed [ 294.526720][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 294.549126][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'. [ 294.559830][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'. [ 294.574548][T15465] : entered promiscuous mode [ 294.581951][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'. [ 294.721163][T15489] netlink: 'syz.3.2565': attribute type 1 has an invalid length. [ 294.729922][T15480] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2561'. [ 294.746880][T15472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.767894][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 294.851643][T15489] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 294.852975][T15480] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 294.882489][T15480] 0ªî{X¹¦: entered allmulticast mode [ 294.893284][T15480] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 294.912048][T15497] netlink: 'syz.4.2567': attribute type 29 has an invalid length. [ 295.086106][T15073] udevd[15073]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.212658][T15516] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 295.385558][T15521] bond14: (slave bridge13): making interface the new active one [ 295.400745][T15521] bond14: (slave bridge13): Enslaving as an active interface with an up link [ 295.516461][T15534] syzkaller0: entered promiscuous mode [ 295.538442][T15534] syzkaller0: entered allmulticast mode [ 295.626665][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 295.636691][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 295.644190][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'. [ 295.648207][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 296.160210][T15581] netlink: 'syz.4.2585': attribute type 10 has an invalid length. [ 296.462604][T15599] netlink: 'syz.0.2588': attribute type 2 has an invalid length. [ 296.487177][T15602] tipc: New replicast peer: 255.255.255.255 [ 296.500010][T15602] tipc: Enabled bearer , priority 10 [ 296.624833][T15608] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 296.681561][T15608] team0: Port device batadv1 added [ 296.929240][T15633] netlink: 'syz.1.2599': attribute type 24 has an invalid length. [ 297.151126][T15648] netlink: 'syz.0.2602': attribute type 7 has an invalid length. [ 297.344513][T15643] bond10: option resend_igmp: invalid value (32767) [ 297.408525][T15643] bond10: option resend_igmp: allowed values 0 - 255 [ 297.444506][T15643] bond10 (unregistering): Released all slaves [ 297.529045][T15674] bridge5: entered promiscuous mode [ 297.534680][T15674] bridge5: entered allmulticast mode [ 297.708016][T15691] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 297.751866][T15694] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 299.565027][T15809] validate_nla: 2 callbacks suppressed [ 299.565051][T15809] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 299.772701][ T5931] IPVS: starting estimator thread 0... [ 299.872919][T15821] IPVS: using max 25 ests per chain, 60000 per kthread [ 299.913372][T15825] __nla_validate_parse: 27 callbacks suppressed [ 299.913394][T15825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2654'. [ 299.934263][T15825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2654'. [ 299.946943][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2654'. [ 300.047848][T15835] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2656'. [ 300.073425][T15837] netlink: 'syz.0.2656': attribute type 21 has an invalid length. [ 300.107849][T15840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2657'. [ 300.166588][T15837] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 300.225252][T15837] bond9 (unregistering): Released all slaves [ 300.323820][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2659'. [ 300.368951][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2659'. [ 300.521587][T15857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2664'. [ 300.677918][T15872] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 300.729344][T15872] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2667'. [ 300.957962][T15886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.067705][T15890] netlink: 'syz.0.2675': attribute type 1 has an invalid length. [ 301.404121][T15908] netlink: 212152 bytes leftover after parsing attributes in process `syz.2.2680'. [ 302.344721][T15975] netlink: 'syz.0.2698': attribute type 3 has an invalid length. [ 302.357121][T15975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.072915][T16016] Bluetooth: MGMT ver 1.23 [ 303.227216][T16030] can: request_module (can-proto-0) failed. [ 303.274273][T16034] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 303.312772][T16036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.477718][T16046] netlink: 'syz.0.2721': attribute type 4 has an invalid length. [ 303.680241][T16058] netlink: 'syz.1.2724': attribute type 1 has an invalid length. [ 304.202527][T16098] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 304.211490][T16099] IPVS: Unknown mcast interface: pim6reg0 [ 304.506197][T16110] smc: net device team0 applied user defined pnetid SYZ2 [ 304.518800][T16110] smc: net device caif0 applied user defined pnetid SYZ2 [ 304.984261][T16134] 8021q: VLANs not supported on ip6gre0 [ 305.332196][T16160] netlink: 'syz.2.2749': attribute type 11 has an invalid length. [ 305.453431][T16163] macvtap1: entered promiscuous mode [ 305.472706][T16163] macvtap1: entered allmulticast mode [ 305.489744][T16163] veth1_vlan: entered allmulticast mode [ 305.516536][T16168] __nla_validate_parse: 13 callbacks suppressed [ 305.516560][T16168] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2753'. [ 305.785398][T16184] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2758'. [ 305.814174][T16187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2760'. [ 305.876892][T16190] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2759'. [ 306.185676][T16207] netlink: 984 bytes leftover after parsing attributes in process `syz.0.2766'. [ 306.199001][T16207] openvswitch: netlink: Flow key attr not present in new flow. [ 306.261907][T16212] syzkaller0: create flow: hash 1389931867 index 1 [ 306.542754][T16222] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2771'. [ 306.557414][T16207] syzkaller0: delete flow: hash 1389931867 index 1 [ 308.270578][T16220] veth1_macvtap: left promiscuous mode [ 308.276274][T16220] macsec0: entered promiscuous mode [ 308.282864][T16220] macsec0: entered allmulticast mode [ 308.294234][T16223] veth1_macvtap: entered promiscuous mode [ 308.302976][T16223] veth1_macvtap: entered allmulticast mode [ 308.309619][T16223] macsec0: left promiscuous mode [ 308.315106][T16223] macsec0: left allmulticast mode [ 308.320850][T16223] veth1_macvtap: left allmulticast mode [ 308.501337][T16245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2779'. [ 308.516084][T16247] ip6t_srh: unknown srh match flags 5F28 [ 308.555543][T16244] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2776'. [ 308.581610][T16253] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2780'. [ 308.600001][T16253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2780'. [ 308.773967][T16260] netlink: 'syz.4.2781': attribute type 1 has an invalid length. [ 308.877788][T16260] 8021q: adding VLAN 0 to HW filter on device bond10 [ 309.022930][T16275] netlink: 'syz.2.2785': attribute type 10 has an invalid length. [ 309.554617][T16292] lo speed is unknown, defaulting to 1000 [ 309.699702][T16312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.865526][T16319] netlink: 'syz.1.2796': attribute type 9 has an invalid length. [ 309.913969][T16292] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.968652][T16319] netlink: 'syz.1.2796': attribute type 11 has an invalid length. [ 309.976930][T16319] netlink: 'syz.1.2796': attribute type 12 has an invalid length. [ 310.655511][T16362] __nla_validate_parse: 3 callbacks suppressed [ 310.655535][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2807'. [ 310.675015][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'. [ 310.692878][T16363] pim6reg1: entered promiscuous mode [ 310.702135][T16363] pim6reg1: entered allmulticast mode [ 311.086578][T16382] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2814'. [ 311.127245][T16386] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2813'. [ 311.169412][T16386] syzkaller0: entered promiscuous mode [ 311.174949][T16386] syzkaller0: entered allmulticast mode [ 311.793049][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.803517][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.815872][T16420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2824'. [ 311.825909][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.842680][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.852156][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.907728][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.915893][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.923854][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.936798][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.945070][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.188956][T16419] lo speed is unknown, defaulting to 1000 [ 312.394009][T16441] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2828'. [ 312.429688][T16441] netem: invalid attributes len -24 [ 312.434961][T16441] netem: change failed [ 312.602560][T16449] syzkaller0: entered promiscuous mode [ 312.608523][T16449] syzkaller0: entered allmulticast mode [ 312.635095][T16451] veth0_to_bridge: entered promiscuous mode [ 312.646117][T16449] tipc: Enabled bearer , priority 0 [ 312.656094][T16419] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.663806][T16450] veth0_to_bridge: left promiscuous mode [ 312.755098][T16446] tipc: Resetting bearer [ 312.790951][T16446] tipc: Disabling bearer [ 312.843892][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'. [ 312.857813][T16462] netlink: 'syz.1.2834': attribute type 1 has an invalid length. [ 312.874832][T16462] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2834'. [ 313.045393][T16468] syzkaller0: entered promiscuous mode [ 313.065142][T16468] syzkaller0: entered allmulticast mode [ 313.159081][T16471] netlink: 'syz.2.2838': attribute type 1 has an invalid length. [ 313.217803][T16471] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.579096][T16419] chnl_net:caif_netlink_parms(): no params data found [ 313.702985][T16493] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 313.722395][T16493] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 313.789283][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2843'. [ 313.831126][T16419] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.842529][T16419] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.851161][T16419] bridge_slave_0: entered allmulticast mode [ 313.859322][T16419] bridge_slave_0: entered promiscuous mode [ 313.879727][T16419] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.887460][T16419] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.898243][T16419] bridge_slave_1: entered allmulticast mode [ 313.907476][T16419] bridge_slave_1: entered promiscuous mode [ 313.971099][T16419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.983424][T16509] tipc: Enabled bearer , priority 10 [ 313.994519][T16419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.009161][ T5836] Bluetooth: hci5: command tx timeout [ 314.055843][T16419] team0: Port device team_slave_0 added [ 314.065695][T16419] team0: Port device team_slave_1 added [ 314.106272][T16419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.113560][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.140176][T16419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.157672][T16419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.165456][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.195462][T16419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.406178][T16419] hsr_slave_0: entered promiscuous mode [ 314.431332][T16419] hsr_slave_1: entered promiscuous mode [ 314.453659][T16527] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2849'. [ 314.896208][T16419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.913631][T16419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.962868][T16554] netlink: 'syz.1.2857': attribute type 21 has an invalid length. [ 315.050747][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 315.079364][T16419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.097924][T16419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 315.216467][T16419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.227392][T16419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 315.296842][T16569] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 315.333184][T16564] sctp: [Deprecated]: syz.0.2861 (pid 16564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.333184][T16564] Use struct sctp_sack_info instead [ 315.354958][T16419] bond0: (slave netdevsim0): Releasing backup interface [ 315.400844][T16419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.416266][T16419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 315.583407][T16584] netlink: 'syz.3.2866': attribute type 1 has an invalid length. [ 315.611555][T16584] bond15: entered promiscuous mode [ 315.616774][T16584] bond15: entered allmulticast mode [ 315.622929][T16584] 8021q: adding VLAN 0 to HW filter on device bond15 [ 315.655475][T16419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.666582][T16419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.678071][T16419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.693134][T16419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.757023][T16595] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 315.789971][T16595] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 315.843806][T16419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.886602][T16600] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 315.907067][T16419] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.926667][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.934060][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.958597][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.965834][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.088986][ T5839] Bluetooth: hci5: command 0x041b tx timeout [ 316.149830][T16604] syzkaller0: entered promiscuous mode [ 316.155517][T16604] syzkaller0: entered allmulticast mode [ 316.365582][T16613] netlink: 'syz.1.2873': attribute type 24 has an invalid length. [ 316.506624][T16419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.930990][T16651] __nla_validate_parse: 5 callbacks suppressed [ 316.931014][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2882'. [ 317.092675][T16662] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2885'. [ 317.129508][T16659] lo speed is unknown, defaulting to 1000 [ 317.265963][T16419] veth0_vlan: entered promiscuous mode [ 317.281530][T16419] veth1_vlan: entered promiscuous mode [ 317.360278][T16419] veth0_macvtap: entered promiscuous mode [ 317.378736][T16419] veth1_macvtap: entered promiscuous mode [ 317.419690][T16419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.445961][T16672] gtp0: entered promiscuous mode [ 317.461322][T16672] gtp0: entered allmulticast mode [ 317.492361][T16419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.527884][ T6806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.564225][ T6806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.615345][T16659] ip6_vti0 speed is unknown, defaulting to 1000 [ 317.617574][ T6806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.636127][ T6806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.650832][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2891'. [ 317.780518][T13766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.789961][T13766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.868848][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055dec400: rx timeout, send abort [ 317.878219][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888055dec400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.947679][T13766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.956173][T13766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.145651][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 318.168539][ T5839] Bluetooth: hci5: command 0x041b tx timeout [ 318.192240][T16704] gtp0: entered promiscuous mode [ 318.197444][T16704] gtp0: entered allmulticast mode [ 318.579437][T16709] syzkaller0: entered promiscuous mode [ 318.584970][T16709] syzkaller0: entered allmulticast mode [ 318.916648][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.928021][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.936946][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.945804][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.961069][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.080812][T16724] macvtap0: mtu less than device minimum [ 319.336011][T16727] lo speed is unknown, defaulting to 1000 [ 319.511486][ T5830] bond0: (slave syz_tun): Releasing backup interface [ 320.249011][ T52] Bluetooth: hci5: command 0x041b tx timeout [ 320.376384][T16791] xt_ecn: cannot match TCP bits for non-tcp packets [ 320.399035][T16727] ip6_vti0 speed is unknown, defaulting to 1000 [ 320.429335][T16791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2918'. [ 320.439119][T16792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2918'. [ 320.575426][T16798] IPVS: Unknown mcast interface: pim6reg0 [ 320.595892][T16796] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2920'. [ 320.798418][T16809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2926'. [ 321.053275][ T52] Bluetooth: hci1: command tx timeout [ 321.506411][T16861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2939'. [ 321.588014][T16866] xt_l2tp: invalid flags combination: 0 [ 321.599542][T16727] chnl_net:caif_netlink_parms(): no params data found [ 321.662050][T16867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2943'. [ 321.680158][T16866] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 321.700537][T16866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.739197][ T798] lo speed is unknown, defaulting to 1000 [ 321.745101][ T798] syz0: Port: 1 Link DOWN [ 321.781487][ T5931] lo speed is unknown, defaulting to 1000 [ 321.844051][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.852532][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.862241][T16727] bridge_slave_0: entered allmulticast mode [ 321.871243][T16727] bridge_slave_0: entered promiscuous mode [ 321.885955][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.893814][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.902987][T16727] bridge_slave_1: entered allmulticast mode [ 321.911593][T16727] bridge_slave_1: entered promiscuous mode [ 321.986645][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.018909][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.094601][T16727] team0: Port device team_slave_0 added [ 322.103999][T16727] team0: Port device team_slave_1 added [ 322.177323][T16896] __nla_validate_parse: 1 callbacks suppressed [ 322.177344][T16896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2951'. [ 322.195767][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 322.196175][T16896] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2951'. [ 322.218136][T16899] sock: sock_timestamping_bind_phc: sock not bind to device [ 322.239053][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.246947][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.275729][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.332134][ T52] Bluetooth: hci5: command 0x041b tx timeout [ 322.342806][T16901] vlan2: entered allmulticast mode [ 322.348243][T16901] macvlan1: entered allmulticast mode [ 322.358799][T16901] veth1_vlan: entered allmulticast mode [ 322.365544][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.373440][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.400188][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.495098][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.538728][T16727] hsr_slave_0: entered promiscuous mode [ 322.554575][T16727] hsr_slave_1: entered promiscuous mode [ 322.569815][T16727] debugfs: 'hsr0' already exists in 'hsr' [ 322.576119][T16727] Cannot create hsr debugfs directory [ 322.606805][T16910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2954'. [ 322.641693][T16913] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2955'. [ 322.754911][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 322.812314][T16919] netlink: 'syz.0.2957': attribute type 17 has an invalid length. [ 322.823055][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 322.859933][T16919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2957'. [ 323.128766][ T52] Bluetooth: hci1: command tx timeout [ 323.156890][T16937] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2962'. [ 323.350372][T16945] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 323.371696][T16945] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2965'. [ 323.494263][T16950] tipc: Started in network mode [ 323.500183][T16950] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 323.514927][T16950] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 323.539141][T16950] tipc: Enabled bearer , priority 10 [ 323.642573][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.664719][T16957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.690280][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.710144][T16957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.786515][T16962] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 323.963315][T16727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.032778][T16727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.049015][T16727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.069971][T16727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.409476][T16727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.542610][ T5931] tipc: Node number set to 1 [ 324.555566][T17001] netlink: 'syz.1.2983': attribute type 1 has an invalid length. [ 324.590444][T16727] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.618970][T17001] netlink: 'syz.1.2983': attribute type 4 has an invalid length. [ 324.660515][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.667805][T13763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.732031][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.739472][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.845982][T16727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.057462][T17026] veth0_to_bridge: entered promiscuous mode [ 325.211762][ T52] Bluetooth: hci1: command tx timeout [ 325.338232][T17024] veth0_to_bridge: left promiscuous mode [ 325.478944][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.503596][T17040] lo speed is unknown, defaulting to 1000 [ 325.591163][T16727] veth0_vlan: entered promiscuous mode [ 325.613267][T16727] veth1_vlan: entered promiscuous mode [ 325.688019][T16727] veth0_macvtap: entered promiscuous mode [ 325.722181][T16727] veth1_macvtap: entered promiscuous mode [ 325.755173][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.772146][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.820897][T17040] ip6_vti0 speed is unknown, defaulting to 1000 [ 325.835615][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.917649][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.959937][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.979331][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.079320][T17054] netlink: 'syz.1.2998': attribute type 12 has an invalid length. [ 326.089618][T17054] netlink: 'syz.1.2998': attribute type 29 has an invalid length. [ 326.409384][T17068] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 326.441031][ T6806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.470591][ T6806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.619690][T17077] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 326.683191][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.694406][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.966927][T17087] netlink: 'syz.2.2902': attribute type 1 has an invalid length. [ 327.295414][ T52] Bluetooth: hci1: command tx timeout [ 327.620984][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.631102][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.660575][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.684115][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.699577][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.823325][T17113] __nla_validate_parse: 14 callbacks suppressed [ 327.823346][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'. [ 327.858017][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'. [ 327.893401][ T5823] bond0: (slave syz_tun): Releasing backup interface [ 327.983547][T17107] lo speed is unknown, defaulting to 1000 [ 328.194515][ T6806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.207623][ T6806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.266564][T17127] bond0: entered promiscuous mode [ 328.280640][T17127] bond_slave_0: entered promiscuous mode [ 328.298880][T17127] bond_slave_1: entered promiscuous mode [ 328.340319][T17135] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3020'. [ 328.401347][ T6806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.430975][ T6806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.501926][T17107] ip6_vti0 speed is unknown, defaulting to 1000 [ 328.515536][T17140] netlink: 5496 bytes leftover after parsing attributes in process `syz.2.3022'. [ 328.616799][ T6806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.651749][ T6806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.702372][T17154] geneve2: entered promiscuous mode [ 328.780735][ T6806] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 328.845834][ T6806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.862462][ T6806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.923789][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 329.211096][T17176] netlink: 'syz.0.3032': attribute type 1 has an invalid length. [ 329.251435][ T6806] bridge_slave_0: left allmulticast mode [ 329.261070][T17178] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3033'. [ 329.290205][ T6806] bridge_slave_0: left promiscuous mode [ 329.307536][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.491655][T17191] netlink: 'syz.3.3036': attribute type 1 has an invalid length. [ 329.774018][ T5839] Bluetooth: hci4: command tx timeout [ 329.969654][ T6806] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 329.978563][ T6806] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 5a:f8:f5:97:d0:c9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 330.333926][ T6806] dvmrp8 (unregistering): left allmulticast mode [ 330.760956][ T6806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.773039][ T6806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.785650][ T6806] bond0 (unregistering): (slave team0): Releasing backup interface [ 330.797015][ T6806] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 330.808097][ T6806] bond0 (unregistering): Released all slaves [ 330.931422][ T6806] bond1 (unregistering): Released all slaves [ 331.053043][ T6806] bond2 (unregistering): Released all slaves [ 331.067734][ T6806] bond3 (unregistering): Released all slaves [ 331.082588][ T6806] bond4 (unregistering): Released all slaves [ 331.096742][ T6806] bond5 (unregistering): Released all slaves [ 331.115668][ T6806] bond6 (unregistering): (slave veth7): Releasing backup interface [ 331.125739][ T6806] bond6 (unregistering): Released all slaves [ 331.143383][ T6806] bond7 (unregistering): Released all slaves [ 331.170440][ T6806] bond8 (unregistering): Released all slaves [ 331.336976][ T6806] 9: left promiscuous mode [ 331.424031][T17221] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3040'. [ 331.546019][T17231] netlink: 'syz.2.3042': attribute type 11 has an invalid length. [ 331.554674][T17227] netlink: 'syz.3.3039': attribute type 1 has an invalid length. [ 331.652621][ T6806] 9: left promiscuous mode [ 331.747613][T17228] bond17: (slave gretap3): making interface the new active one [ 331.760351][T17228] bond17: (slave gretap3): Enslaving as an active interface with an up link [ 331.851495][ T5839] Bluetooth: hci4: command tx timeout [ 331.897376][T17247] syzkaller0: entered promiscuous mode [ 331.911138][T17247] syzkaller0: entered allmulticast mode [ 332.148726][T17107] chnl_net:caif_netlink_parms(): no params data found [ 332.157571][T17247] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3043'. [ 332.372764][T17264] gtp0: entered promiscuous mode [ 332.379367][T17264] gtp0: entered allmulticast mode [ 332.512658][T17278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3049'. [ 332.529306][T17278] netlink: 'syz.4.3049': attribute type 7 has an invalid length. [ 332.550830][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3049'. [ 332.764613][T17280] syzkaller0: entered promiscuous mode [ 332.785505][T17280] syzkaller0: entered allmulticast mode [ 332.806544][T17107] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.827290][T17107] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.839339][T17107] bridge_slave_0: entered allmulticast mode [ 332.847877][T17107] bridge_slave_0: entered promiscuous mode [ 332.881652][T17287] bridge0: port 2(ipvlan0) entered blocking state [ 332.893654][T17287] bridge0: port 2(ipvlan0) entered disabled state [ 332.902253][T17287] ipvlan0: entered allmulticast mode [ 332.912021][T17287] bridge0: entered allmulticast mode [ 332.921542][T17287] ipvlan0: left allmulticast mode [ 332.927504][T17287] bridge0: left allmulticast mode [ 332.961205][T17107] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.976864][T17107] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.993342][T17107] bridge_slave_1: entered allmulticast mode [ 333.002208][T17107] bridge_slave_1: entered promiscuous mode [ 333.185151][T17107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.233209][T17107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.405148][T17107] team0: Port device team_slave_0 added [ 333.411279][T17308] __nla_validate_parse: 2 callbacks suppressed [ 333.411299][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 333.460811][T17107] team0: Port device team_slave_1 added [ 333.703997][T17107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.731020][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.841918][T17107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.880582][T17107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.887589][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.930555][ T5839] Bluetooth: hci4: command tx timeout [ 333.986575][T17107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.052001][ T6806] hsr_slave_0: left promiscuous mode [ 334.071916][ T6806] hsr_slave_1: left promiscuous mode [ 334.080475][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.119781][ T6806] batadv0: mtu less than device minimum [ 334.127107][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.139524][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.151555][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.163511][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.175450][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.187397][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.199449][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.211440][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.223667][ T6806] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.282622][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.296520][ T6806] batman_adv: batadv0: Interface deactivated: dummy0 [ 334.306705][ T6806] batman_adv: batadv0: Removing interface: dummy0 [ 334.370046][ T6806] veth1_vlan: left allmulticast mode [ 334.382755][ T6806] veth1_macvtap: left promiscuous mode [ 334.395677][T17341] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 334.408091][T17341] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3062'. [ 334.429027][ T6806] veth0_macvtap: left promiscuous mode [ 334.436108][ T6806] veth1_vlan: left promiscuous mode [ 334.438116][T17341] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 334.479978][ T6806] veth0_vlan: left promiscuous mode [ 334.729954][ T6806] team0 (unregistering): Port device batadv1 removed [ 335.283101][ T6806] team0 (unregistering): Port device team_slave_1 removed [ 335.815442][ T6027] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.850576][ T6027] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.926219][T17107] hsr_slave_0: entered promiscuous mode [ 335.938959][T17107] hsr_slave_1: entered promiscuous mode [ 335.951323][T17107] debugfs: 'hsr0' already exists in 'hsr' [ 335.962195][T17107] Cannot create hsr debugfs directory [ 335.980864][ T6027] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.994448][ T6027] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.009779][ T5839] Bluetooth: hci4: command tx timeout [ 336.106256][T17374] tc_dump_action: action bad kind [ 336.495226][T17387] tipc: New replicast peer: 255.255.255.255 [ 336.513672][ T6806] IPVS: stop unused estimator thread 0... [ 336.523004][T17387] tipc: Enabled bearer , priority 10 [ 336.537041][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3074'. [ 336.992890][T17409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3078'. [ 337.642195][ T5833] tipc: Node number set to 2357953753 [ 337.654521][T17438] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3086'. [ 337.685193][T17438] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3086'. [ 337.712642][T17440] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 337.761596][T17444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3087'. [ 338.023806][T17107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.108086][T17107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.242246][T17107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.334875][T17467] : entered promiscuous mode [ 338.352114][T17107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.634372][T17489] netlink: 'syz.2.3094': attribute type 21 has an invalid length. [ 338.793271][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3096'. [ 338.903327][T17107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.976606][T17107] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.054540][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.061841][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.117982][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.125319][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.215362][T17514] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3099'. [ 339.548964][T17491] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3095'. [ 339.704929][T17531] netlink: 'syz.0.3104': attribute type 10 has an invalid length. [ 339.731527][T17531] netlink: 'syz.0.3104': attribute type 10 has an invalid length. [ 339.767368][T17533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3105'. [ 339.827020][T17531] team0: Port device bond0 added [ 339.935398][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 340.000362][T17107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.086739][T17536] team0: Port device bond0 removed [ 340.129726][T17536] bridge_slave_0: left allmulticast mode [ 340.137543][T17536] bridge_slave_0: left promiscuous mode [ 340.149521][T17536] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.258903][T17561] Bluetooth: MGMT ver 1.23 [ 340.273048][T17536] bond0: (slave bridge_slave_1): Releasing backup interface [ 340.314869][T17536] bond0: (slave bond_slave_0): Releasing backup interface [ 340.327418][T17536] bond0: (slave bond_slave_1): Releasing backup interface [ 340.375642][T17536] team0: Port device team_slave_1 removed [ 340.386514][T17536] net_ratelimit: 10 callbacks suppressed [ 340.386535][T17536] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 340.532550][T17569] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3111'. [ 340.620745][T17107] veth0_vlan: entered promiscuous mode [ 340.700943][T17107] veth1_vlan: entered promiscuous mode [ 340.856450][T17107] veth0_macvtap: entered promiscuous mode [ 340.895549][T17588] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3115'. [ 340.923613][T17107] veth1_macvtap: entered promiscuous mode [ 340.929554][T17589] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3115'. [ 340.994699][T17107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.032989][T17107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.105873][ T6027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.118199][ T6027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.167908][ T6027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.202539][ T6027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.245217][T17602] tipc: Enabling of bearer rejected, failed to enable media [ 341.276018][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'. [ 341.562104][ T6816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.598927][ T6816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.696876][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3121'. [ 341.713542][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.744722][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.884376][T17623] geneve2: entered promiscuous mode [ 342.124561][T17644] netlink: ct family unspecified [ 342.594413][T17666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.966085][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.999161][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.008841][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.030986][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.040676][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.069824][T17685] netlink: 'syz.0.3135': attribute type 58 has an invalid length. [ 343.261124][T17681] lo speed is unknown, defaulting to 1000 [ 343.691786][T17708] netlink: 'syz.4.3142': attribute type 11 has an invalid length. [ 343.837753][T17681] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.907065][T17721] __nla_validate_parse: 6 callbacks suppressed [ 343.907087][T17721] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3145'. [ 344.019438][T17727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3146'. [ 344.128098][T17730] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 344.173719][T17736] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3147'. [ 344.189329][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3150'. [ 344.219304][T17735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3150'. [ 344.241391][T17741] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3147'. [ 344.479538][T17756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3153'. [ 344.677715][T17761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3155'. [ 344.839514][T17763] macvlan0: entered promiscuous mode [ 344.844890][T17763] macvlan0: entered allmulticast mode [ 344.863424][T17763] bond0: (slave macvlan0): Opening slave failed [ 344.986754][T17772] bond1 (unregistering): Released all slaves [ 345.016121][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3158'. [ 345.128787][ T52] Bluetooth: hci2: command tx timeout [ 345.157881][T17775] lo speed is unknown, defaulting to 1000 [ 345.283561][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 345.372876][T17681] chnl_net:caif_netlink_parms(): no params data found [ 345.683484][T17775] ip6_vti0 speed is unknown, defaulting to 1000 [ 345.811496][T17681] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.819049][T17681] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.826594][T17681] bridge_slave_0: entered allmulticast mode [ 345.863888][T17681] bridge_slave_0: entered promiscuous mode [ 345.883937][T17681] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.901947][T17681] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.919728][T17681] bridge_slave_1: entered allmulticast mode [ 345.931396][T17681] bridge_slave_1: entered promiscuous mode [ 346.043131][T17810] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 346.052582][T17810] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 346.104818][T17681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.134689][T17681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.287297][T17681] team0: Port device team_slave_0 added [ 346.310664][T17681] team0: Port device team_slave_1 added [ 346.450956][T17681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.472694][T17681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.530633][T17681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.647358][T17681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.669257][T17681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.734547][T17681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.166337][T17681] hsr_slave_0: entered promiscuous mode [ 347.176233][T17681] hsr_slave_1: entered promiscuous mode [ 347.184442][T17681] debugfs: 'hsr0' already exists in 'hsr' [ 347.202337][T17681] Cannot create hsr debugfs directory [ 347.208987][ T52] Bluetooth: hci2: command tx timeout [ 347.237573][T17844] openvswitch: netlink: Flow key attr not present in new flow. [ 347.521852][T17858] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 347.536792][T17858] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 347.877549][T17681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.910144][T17681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.194557][T17681] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.217408][T17681] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.347703][T17681] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.371853][T17681] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.516072][T17681] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.558459][T17681] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.639079][T17902] netlink: 'syz.4.3192': attribute type 3 has an invalid length. [ 348.955041][T17918] __nla_validate_parse: 15 callbacks suppressed [ 348.955063][T17918] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3195'. [ 348.981339][T17681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.044110][T17924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3198'. [ 349.070326][T17681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.100432][T17926] netlink: 'syz.4.3198': attribute type 29 has an invalid length. [ 349.120200][T17681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.156690][T17681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.190203][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3199'. [ 349.290903][ T52] Bluetooth: hci2: command tx timeout [ 349.367844][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 349.574336][T17681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.619590][T17681] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.645698][T17958] IPVS: Error joining to the multicast group [ 349.684477][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.691939][ T6806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.752010][T17962] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 349.776325][T17962] bond2 (unregistering): Released all slaves [ 349.868190][T17967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3206'. [ 349.930256][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.937539][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.163159][T17985] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 350.216377][T17984] syzkaller1: entered promiscuous mode [ 350.251412][T17984] syzkaller1: entered allmulticast mode [ 350.446543][T17995] netlink: 'syz.1.3213': attribute type 1 has an invalid length. [ 350.454519][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 350.650756][T17681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.673162][T18006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3217'. [ 350.791436][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3219'. [ 350.859976][T18018] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3220'. [ 350.885610][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'. [ 350.908516][T18016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.927974][T17681] veth0_vlan: entered promiscuous mode [ 350.961460][T18022] netlink: 'syz.1.3221': attribute type 1 has an invalid length. [ 351.000499][T17681] veth1_vlan: entered promiscuous mode [ 351.061562][T18027] netlink: 'syz.2.3223': attribute type 10 has an invalid length. [ 351.087975][T18027] team0: Device ipvlan1 failed to register rx_handler [ 351.133670][T17681] veth0_macvtap: entered promiscuous mode [ 351.153549][T17681] veth1_macvtap: entered promiscuous mode [ 351.213605][T17681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.259882][T17681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.324265][T18042] netlink: 'syz.0.3227': attribute type 16 has an invalid length. [ 351.332458][T18042] netlink: 'syz.0.3227': attribute type 17 has an invalid length. [ 351.369646][ T52] Bluetooth: hci2: command tx timeout [ 351.422438][T18042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.455338][T18042] vlan1: entered allmulticast mode [ 351.461524][T18042] bridge_slave_0: entered allmulticast mode [ 351.484621][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.511378][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.552001][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.608102][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.793396][ T6806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.827671][ T6806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.952009][ T6806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.988533][ T6806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.065762][T18071] atomic_op ffff8880555f6198 conn xmit_atomic 0000000000000000 [ 352.138020][T18072] lo speed is unknown, defaulting to 1000 [ 352.148932][T18075] netlink: 'syz.1.3236': attribute type 3 has an invalid length. [ 352.229634][T18078] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 352.360678][T18083] netlink: 'syz.3.3130': attribute type 1 has an invalid length. [ 352.390970][T18083] netlink: 'syz.3.3130': attribute type 1 has an invalid length. [ 352.554561][T18072] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.253965][T18124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.550067][T18136] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 354.037761][T18159] __nla_validate_parse: 14 callbacks suppressed [ 354.037782][T18159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3261'. [ 354.196151][T18164] tipc: Started in network mode [ 354.201522][T18164] tipc: Node identity 1, cluster identity 4711 [ 354.229920][T18164] tipc: Node number set to 1 [ 354.261476][T18162] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3262'. [ 354.610461][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.638586][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.652544][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.663530][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.675949][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.777800][T18178] lo speed is unknown, defaulting to 1000 [ 354.797532][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 354.884930][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 355.126160][T13766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.160784][T13766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.359453][T13766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.398492][T13766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.480945][T18178] ip6_vti0 speed is unknown, defaulting to 1000 [ 355.696010][T18219] validate_nla: 1 callbacks suppressed [ 355.696031][T18219] netlink: 'syz.4.3279': attribute type 6 has an invalid length. [ 355.713462][T13766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.728497][T13766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.085027][T13766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.124042][T13766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.360727][T18254] netlink: 'syz.3.3285': attribute type 8 has an invalid length. [ 356.457303][T18254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3285'. [ 356.571404][T18259] bond1: Unable to set down delay as MII monitoring is disabled [ 356.585511][T18259] bond1 (unregistering): Released all slaves [ 356.708155][T18269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3291'. [ 356.729322][ T52] Bluetooth: hci3: command tx timeout [ 357.348751][T13766] batadv1: left allmulticast mode [ 357.353963][T13766] batadv1: left promiscuous mode [ 357.416452][T18308] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 357.442286][T13766] bridge0: port 3(batadv1) entered disabled state [ 358.445420][T13766] bond0 (unregistering): Released all slaves [ 358.455979][T13766] bond1 (unregistering): Released all slaves [ 358.565313][T13766] bond2 (unregistering): Released all slaves [ 358.582710][T13766] bond3 (unregistering): (slave bond4): Releasing backup interface [ 358.593774][T13766] bond3 (unregistering): Released all slaves [ 358.715094][T13766] bond4 (unregistering): Released all slaves [ 358.729532][T13766] bond5 (unregistering): Released all slaves [ 358.743800][T13766] bond6 (unregistering): Released all slaves [ 358.812236][ T52] Bluetooth: hci3: command tx timeout [ 358.868018][T13766] bond7 (unregistering): (slave veth9): Releasing active interface [ 358.878058][T13766] bond7 (unregistering): Released all slaves [ 358.894578][T13766] bond8 (unregistering): Released all slaves [ 358.928108][T18325] tipc: Started in network mode [ 358.945343][T18325] tipc: Node identity eefb37f520ec, cluster identity 4711 [ 358.958893][T18325] tipc: Enabled bearer , priority 0 [ 359.007014][T18178] chnl_net:caif_netlink_parms(): no params data found [ 359.029093][T18334] netlink: 'syz.2.3300': attribute type 1 has an invalid length. [ 359.085656][T18334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.193547][T18334] bond1: (slave geneve2): making interface the new active one [ 359.235404][T18334] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 359.256271][T18343] netlink: 'syz.4.3302': attribute type 1 has an invalid length. [ 359.267020][T18343] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3302'. [ 359.277117][T18343] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3302'. [ 359.297425][T18343] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3302'. [ 359.340273][T18325] tipc: Disabling bearer [ 359.367505][T13766] : left promiscuous mode [ 359.427726][T18353] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3305'. [ 359.445148][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 359.454446][T18353] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3305'. [ 359.464695][T18349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.469380][T18353] netlink: 'syz.3.3305': attribute type 3 has an invalid length. [ 359.487996][T18353] netlink: 'syz.3.3305': attribute type 2 has an invalid length. [ 359.496145][T18353] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3305'. [ 359.571370][T13766] tipc: Disabling bearer [ 359.578189][T13766] tipc: Left network mode [ 359.788000][T18178] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.803539][T18178] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.818662][T18178] bridge_slave_0: entered allmulticast mode [ 359.861880][T18178] bridge_slave_0: entered promiscuous mode [ 359.882887][ T936] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 359.899873][ T936] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 359.909211][ T936] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 359.910611][T18178] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.916702][ T936] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 359.935224][ T936] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 359.946629][ T936] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106 [ 359.956069][ T936] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 359.970188][T18178] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.977625][T18178] bridge_slave_1: entered allmulticast mode [ 359.985941][T18178] bridge_slave_1: entered promiscuous mode [ 360.041341][T18377] netlink: 'syz.2.3310': attribute type 1 has an invalid length. [ 360.071949][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 360.198062][T18178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.326685][T18178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.436913][T18398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3314'. [ 360.476667][T18398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3314'. [ 360.506927][T18178] team0: Port device team_slave_0 added [ 360.595960][T18178] team0: Port device team_slave_1 added [ 360.606802][T18401] syzkaller0: entered promiscuous mode [ 360.615468][T18401] syzkaller0: entered allmulticast mode [ 360.829391][T18178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.848648][T18178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.888854][ T52] Bluetooth: hci3: command tx timeout [ 360.909709][T18178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.962345][T18178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.998790][T18178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.069033][T18178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.163995][T18431] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 361.249708][T18426] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 361.544378][T18178] hsr_slave_0: entered promiscuous mode [ 361.586377][T18178] hsr_slave_1: entered promiscuous mode [ 361.622101][T18178] debugfs: 'hsr0' already exists in 'hsr' [ 361.660533][T18178] Cannot create hsr debugfs directory [ 362.431673][T13766] hsr_slave_1: left promiscuous mode [ 362.503901][T13766] veth0_macvtap: left promiscuous mode [ 362.976136][ T52] Bluetooth: hci3: command tx timeout [ 363.822558][T18502] netlink: 'syz.4.3340': attribute type 1 has an invalid length. [ 364.119706][T18515] veth0: entered promiscuous mode [ 364.553991][T13766] IPVS: stop unused estimator thread 0... [ 364.665035][T18540] syzkaller0: entered promiscuous mode [ 364.682467][T18540] syzkaller0: entered allmulticast mode [ 364.712346][T18542] __nla_validate_parse: 2 callbacks suppressed [ 364.712368][T18542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3347'. [ 364.927139][T18552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3350'. [ 365.040328][T18560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3353'. [ 365.079195][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 365.112953][T18178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.152277][T18178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.199598][T18573] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3355'. [ 365.216036][T18178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.264438][T18178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.573253][T18178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.640082][T18178] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.673113][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.680370][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.727916][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.735278][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.294090][T18627] netlink: 'syz.1.3367': attribute type 11 has an invalid length. [ 366.316737][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3367'. [ 366.377440][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.400802][T18627] netlink: 'syz.1.3367': attribute type 11 has an invalid length. [ 366.412246][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.422751][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3367'. [ 366.441500][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.471555][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.712988][T18178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.743960][T18654] xt_l2tp: missing protocol rule (udp|l2tpip) [ 366.914048][T18660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3371'. [ 366.925474][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3372'. [ 366.934881][T18662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.025341][T18659] syzkaller0: entered promiscuous mode [ 367.041419][T18659] syzkaller0: entered allmulticast mode [ 369.259827][T18178] veth0_vlan: entered promiscuous mode [ 369.309101][T18178] veth1_vlan: entered promiscuous mode [ 369.431322][T18178] veth0_macvtap: entered promiscuous mode [ 369.466634][T18178] veth1_macvtap: entered promiscuous mode [ 369.535021][T18178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.592379][T18178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.630986][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.679407][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.703654][T18722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 369.729615][T18722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 369.733416][T18726] lo speed is unknown, defaulting to 1000 [ 369.744804][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.754306][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.990508][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.004348][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 370.031265][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.072249][T18737] bond0: entered promiscuous mode [ 370.077541][T18737] bond_slave_0: entered promiscuous mode [ 370.085196][T18737] bond_slave_1: entered promiscuous mode [ 370.102534][T18737] bond0: left promiscuous mode [ 370.108762][T18737] bond_slave_0: left promiscuous mode [ 370.123943][T18737] bond_slave_1: left promiscuous mode [ 370.254428][T13766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.293406][T13766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.296908][T18746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.338076][T18745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.458553][T18726] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.459273][T18754] netlink: 'syz.2.3390': attribute type 30 has an invalid length. [ 370.482013][T18752] netlink: 'syz.2.3390': attribute type 30 has an invalid length. [ 370.610699][T18762] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3264'. [ 370.641920][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3391'. [ 370.655698][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3392'. [ 370.699865][T18760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3392'. [ 370.842222][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'. [ 371.226346][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 371.396552][T18799] tipc: Cannot configure node identity twice [ 371.613718][T18809] lo: entered promiscuous mode [ 371.671220][T18809] tunl0: entered promiscuous mode [ 371.723457][T18809] gre0: entered promiscuous mode [ 371.726044][T18815] netlink: 'syz.1.3407': attribute type 10 has an invalid length. [ 371.752423][T18809] gretap0: entered promiscuous mode [ 371.778039][T18809] erspan0: entered promiscuous mode [ 371.800142][T18809] ip_vti0: entered promiscuous mode [ 371.812110][T18818] netlink: 'syz.1.3407': attribute type 10 has an invalid length. [ 371.829108][T18815] syz_tun: entered promiscuous mode [ 371.856937][T18815] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 371.949274][T18818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.981240][T18818] team0: Port device bond0 added [ 372.001864][T18827] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3410'. [ 372.032613][T18820] bond0: (slave syz_tun): Releasing backup interface [ 372.033938][T18828] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3410'. [ 372.065682][T18820] team0: Port device bond0 removed [ 372.076979][T18820] bridge_slave_0: left allmulticast mode [ 372.084586][T18820] bridge_slave_0: left promiscuous mode [ 372.096742][T18820] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.114325][T18820] bridge_slave_1: left allmulticast mode [ 372.120271][T18820] bridge_slave_1: left promiscuous mode [ 372.126190][T18820] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.148935][T18820] bond0: (slave bond_slave_0): Releasing backup interface [ 372.162635][T18820] bond0: (slave bond_slave_1): Releasing backup interface [ 372.182287][T18820] team0: Port device team_slave_0 removed [ 372.194093][T18820] team0: Port device team_slave_1 removed [ 372.201941][T18820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.209529][T18820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.221764][T18820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.230129][T18820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.243895][T18820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.380366][T18834] netlink: 'syz.1.3412': attribute type 18 has an invalid length. [ 372.400876][T18834] netlink: 'syz.1.3412': attribute type 18 has an invalid length. [ 373.434602][T18898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 373.550893][T18898] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 373.620682][T18898] gretap1: entered promiscuous mode [ 373.660002][T18898] gretap1: entered allmulticast mode [ 374.091708][T18940] netlink: 'syz.4.3435': attribute type 8 has an invalid length. [ 374.129559][T18945] Cannot find add_set index 65532 as target [ 374.312430][T18955] dvmrp0: entered allmulticast mode [ 374.711546][T18976] netlink: 'syz.3.3444': attribute type 18 has an invalid length. [ 375.124859][T18994] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 375.194014][ T5489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.364602][T19008] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 375.374757][ T30] audit: type=1800 audit(1770142381.122:5): pid=19008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3455" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 375.397883][T19008] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 375.441308][T19008] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 375.650762][T19008] syz.1.3455 (19008) used greatest stack depth: 16064 bytes left [ 375.682314][T19027] netlink: 'syz.0.3460': attribute type 2 has an invalid length. [ 375.715084][T19027] netlink: 'syz.0.3460': attribute type 4 has an invalid length. [ 376.366171][T19071] __nla_validate_parse: 5 callbacks suppressed [ 376.366191][T19071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3472'. [ 376.452405][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3472'. [ 376.507189][T19085] netlink: 294 bytes leftover after parsing attributes in process `syz.3.3477'. [ 376.519836][T19085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.525264][T19081] netlink: 'syz.0.3475': attribute type 21 has an invalid length. [ 376.537100][T19081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3475'. [ 376.589928][T19087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3477'. [ 376.844720][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'. [ 376.967196][T19104] syzkaller0: entered promiscuous mode [ 376.994455][T19104] syzkaller0: entered allmulticast mode [ 377.237424][T19116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.250504][T19116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.449279][T19116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.460845][T19116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.528018][T19142] IPv6: sit1: Disabled Multicast RS [ 377.567620][T19142] sit1: entered allmulticast mode [ 377.634229][T19116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.647534][T19116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.686710][T19148] vlan2: entered allmulticast mode [ 377.692548][T19148] team_slave_0: entered allmulticast mode [ 377.730469][T19147] IPVS: length: 104 != 8 [ 377.760291][T19116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.794033][T19116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.872121][T19154] netlink: 'syz.3.3500': attribute type 21 has an invalid length. [ 377.901769][T19154] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3500'. [ 378.073973][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.097621][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.149273][T13763] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.161976][T13763] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.221487][T13763] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.241471][T19173] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 378.260109][T13763] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.284893][T13763] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.295942][T13763] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.389142][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'. [ 378.466269][T19185] bridge0: port 1(batadv1) entered blocking state [ 378.506978][T19185] bridge0: port 1(batadv1) entered disabled state [ 378.535575][T19185] batadv1: entered allmulticast mode [ 378.590809][T19185] batadv1: entered promiscuous mode [ 378.861226][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 378.876629][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3516'. [ 378.972287][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 378.981741][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 379.011133][T19219] openvswitch: netlink: EtherType 0 is less than min 600 [ 379.113319][T19225] !: renamed from dummy0 (while UP) [ 379.265296][T19232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.279849][T19232] bond0: (slave bond1): Enslaving as an active interface with an up link [ 379.365638][T19245] netlink: 'syz.3.3527': attribute type 1 has an invalid length. [ 379.604429][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.639498][T19261] syz_tun: entered allmulticast mode [ 379.732993][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.750566][T19265] hsr_slave_0: left promiscuous mode [ 380.092098][T19265] hsr_slave_1: left promiscuous mode [ 380.364077][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.386345][T19256] syz_tun: left allmulticast mode [ 380.407403][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.530715][T19277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.540833][T19276] vlan2: entered promiscuous mode [ 380.545928][T19276] bridge0: entered promiscuous mode [ 380.591377][T19277] bond2 (unregistering): Released all slaves [ 380.742216][T19281] netlink: 'syz.4.3537': attribute type 29 has an invalid length. [ 380.777740][T19281] netlink: 'syz.4.3537': attribute type 29 has an invalid length. [ 381.149784][T19314] netlink: 'syz.2.3549': attribute type 12 has an invalid length. [ 381.192383][T19319] netlink: 'syz.0.3550': attribute type 3 has an invalid length. [ 381.225794][T19318] netlink: 'syz.3.3548': attribute type 1 has an invalid length. [ 381.410454][T19331] nbd: couldn't find a device at index 3 [ 381.570761][T19344] TCP: TCP_TX_DELAY enabled [ 381.594633][T19341] __nla_validate_parse: 7 callbacks suppressed [ 381.594655][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'. [ 381.809039][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'. [ 381.834303][T19341] ip6tnl1: entered allmulticast mode [ 382.005007][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3556'. [ 382.420922][T19370] netlink: 'syz.4.3560': attribute type 16 has an invalid length. [ 382.429081][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3560'. [ 382.714887][T19389] tipc: Enabling of bearer rejected, failed to enable media [ 382.742411][T19398] FAULT_INJECTION: forcing a failure. [ 382.742411][T19398] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 382.792106][T19398] CPU: 0 UID: 0 PID: 19398 Comm: syz.4.3566 Not tainted syzkaller #0 PREEMPT(full) [ 382.792136][T19398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 382.792158][T19398] Call Trace: [ 382.792168][T19398] [ 382.792177][T19398] dump_stack_lvl+0xe8/0x150 [ 382.792210][T19398] should_fail_ex+0x412/0x560 [ 382.792241][T19398] _copy_from_user+0x2d/0xb0 [ 382.792274][T19398] kstrtouint_from_user+0xd6/0x180 [ 382.792303][T19398] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 382.792348][T19398] proc_fail_nth_write+0x8e/0x210 [ 382.792379][T19398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 382.792414][T19398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 382.792446][T19398] vfs_write+0x29a/0xb90 [ 382.792486][T19398] ? __pfx_vfs_write+0x10/0x10 [ 382.792518][T19398] ? __fget_files+0x2a/0x420 [ 382.792545][T19398] ? __fget_files+0x3a0/0x420 [ 382.792566][T19398] ? __fget_files+0x2a/0x420 [ 382.792598][T19398] ksys_write+0x150/0x270 [ 382.792631][T19398] ? __pfx_ksys_write+0x10/0x10 [ 382.792673][T19398] do_syscall_64+0xe2/0xf80 [ 382.792695][T19398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.792715][T19398] ? trace_irq_disable+0x37/0x100 [ 382.792734][T19398] ? clear_bhb_loop+0x60/0xb0 [ 382.792760][T19398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.792784][T19398] RIP: 0033:0x7f8aeef5b78e [ 382.792803][T19398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.792821][T19398] RSP: 002b:00007f8aefe9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.792844][T19398] RAX: ffffffffffffffda RBX: 00007f8aefea06c0 RCX: 00007f8aeef5b78e [ 382.792860][T19398] RDX: 0000000000000001 RSI: 00007f8aefea00a0 RDI: 0000000000000005 [ 382.792873][T19398] RBP: 00007f8aefea0090 R08: 0000000000000000 R09: 0000000000000000 [ 382.792886][T19398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.792898][T19398] R13: 00007f8aef216128 R14: 00007f8aef216090 R15: 00007fff0d8972b8 [ 382.792933][T19398] [ 383.188679][T19411] veth0: entered promiscuous mode [ 383.196253][T19412] veth0: left promiscuous mode [ 383.209269][T19411] syzkaller0: entered promiscuous mode [ 383.214809][T19411] syzkaller0: entered allmulticast mode [ 383.390995][ T5877] IPVS: starting estimator thread 0... [ 383.422407][T19425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.450156][T19423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3574'. [ 383.479381][T19427] IPVS: using max 32 ests per chain, 76800 per kthread [ 383.586698][T19435] netlink: 'syz.3.3578': attribute type 15 has an invalid length. [ 383.752637][T19444] netlink: 'syz.3.3582': attribute type 13 has an invalid length. [ 383.776305][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3582'. [ 383.828477][T19444] netlink: 'syz.3.3582': attribute type 13 has an invalid length. [ 383.844724][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3582'. [ 383.923640][T19456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3583'. [ 383.946124][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.306818][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3590'. [ 384.358921][T19478] vlan1: entered allmulticast mode [ 384.375721][T19478] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 384.459651][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3593'. [ 384.503913][T19489] netlink: 'syz.0.3592': attribute type 1 has an invalid length. [ 384.550753][T19486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.701196][ T44] IPVS: starting estimator thread 0... [ 384.800454][T19498] IPVS: using max 25 ests per chain, 60000 per kthread [ 385.010038][T19524] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 385.519499][T19551] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.779412][T19566] syzkaller0: entered promiscuous mode [ 385.796385][T19566] syzkaller0: entered allmulticast mode [ 385.806270][T19569] sock: sock_timestamping_bind_phc: sock not bind to device [ 385.985192][T19580] validate_nla: 1 callbacks suppressed [ 385.985214][T19580] netlink: 'syz.3.3621': attribute type 1 has an invalid length. [ 386.066984][T19587] openvswitch: netlink: Missing key (keys=40, expected=100) [ 386.074515][T19583] syzkaller1: entered promiscuous mode [ 386.074541][T19583] syzkaller1: entered allmulticast mode [ 386.091879][T19582] IPVS: set_ctl: invalid protocol: 77 255.255.255.255:20001 [ 386.129299][T19583] IPVS: set_ctl: invalid protocol: 77 255.255.255.255:20001 [ 386.201258][T19583] syz.2.3624: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 386.239986][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.2.3624 Not tainted syzkaller #0 PREEMPT(full) [ 386.240015][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 386.240028][T19583] Call Trace: [ 386.240037][T19583] [ 386.240046][T19583] dump_stack_lvl+0xe8/0x150 [ 386.240079][T19583] warn_alloc+0x249/0x340 [ 386.240102][T19583] ? stack_trace_save+0xa9/0x100 [ 386.240131][T19583] ? __pfx_warn_alloc+0x10/0x10 [ 386.240159][T19583] ? kasan_save_track+0x4f/0x80 [ 386.240177][T19583] ? kasan_save_track+0x3e/0x80 [ 386.240193][T19583] ? __kasan_kmalloc+0x93/0xb0 [ 386.240212][T19583] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 386.240231][T19583] ? xskq_create+0x56/0x170 [ 386.240249][T19583] ? xsk_setsockopt+0x54c/0x990 [ 386.240277][T19583] ? do_sock_setsockopt+0x17c/0x1b0 [ 386.240301][T19583] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 386.240324][T19583] ? do_syscall_64+0xe2/0xf80 [ 386.240350][T19583] __vmalloc_node_range_noprof+0x132/0x1730 [ 386.240406][T19583] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.240434][T19583] ? __kasan_kmalloc+0x93/0xb0 [ 386.240462][T19583] vmalloc_user_noprof+0xad/0xe0 [ 386.240488][T19583] ? xskq_create+0xbf/0x170 [ 386.240507][T19583] xskq_create+0xbf/0x170 [ 386.240531][T19583] xsk_init_queue+0xad/0x110 [ 386.240564][T19583] xsk_setsockopt+0x54c/0x990 [ 386.240599][T19583] ? __pfx_xsk_setsockopt+0x10/0x10 [ 386.240629][T19583] ? __pfx_aa_sk_perm+0x10/0x10 [ 386.240665][T19583] ? aa_sock_opt_perm+0xff/0x1a0 [ 386.240695][T19583] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 386.240717][T19583] ? __pfx_xsk_setsockopt+0x10/0x10 [ 386.240749][T19583] do_sock_setsockopt+0x17c/0x1b0 [ 386.240781][T19583] __x64_sys_setsockopt+0x13d/0x1b0 [ 386.240813][T19583] do_syscall_64+0xe2/0xf80 [ 386.240834][T19583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.240854][T19583] ? trace_irq_disable+0x37/0x100 [ 386.240873][T19583] ? clear_bhb_loop+0x60/0xb0 [ 386.240899][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.240920][T19583] RIP: 0033:0x7fbe43d9aeb9 [ 386.240938][T19583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.240956][T19583] RSP: 002b:00007fbe44b83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 386.240978][T19583] RAX: ffffffffffffffda RBX: 00007fbe44016090 RCX: 00007fbe43d9aeb9 [ 386.240993][T19583] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 386.241006][T19583] RBP: 00007fbe43e08c1f R08: 0000000000000004 R09: 0000000000000000 [ 386.241019][T19583] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.241031][T19583] R13: 00007fbe44016128 R14: 00007fbe44016090 R15: 00007ffdbfae0038 [ 386.241065][T19583] [ 386.241167][T19583] Mem-Info: [ 386.569211][T19583] active_anon:5946 inactive_anon:0 isolated_anon:0 [ 386.569211][T19583] active_file:2825 inactive_file:40052 isolated_file:0 [ 386.569211][T19583] unevictable:768 dirty:84 writeback:0 [ 386.569211][T19583] slab_reclaimable:12833 slab_unreclaimable:122882 [ 386.569211][T19583] mapped:30180 shmem:1377 pagetables:1131 [ 386.569211][T19583] sec_pagetables:0 bounce:0 [ 386.569211][T19583] kernel_misc_reclaimable:0 [ 386.569211][T19583] free:1293863 free_pcp:15828 free_cma:0 [ 386.643812][T19583] Node 0 active_anon:23784kB inactive_anon:0kB active_file:11300kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120720kB dirty:328kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15568kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.677676][T19583] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.710684][T19583] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.742790][T19583] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 386.749228][T19583] Node 0 DMA32 free:1270580kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24484kB inactive_anon:0kB active_file:11300kB inactive_file:160008kB unevictable:1536kB writepending:328kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:44952kB local_pcp:28736kB free_cma:0kB [ 386.833647][T19583] lowmem_reserve[]: 0 0 1 1 1 [ 386.850947][T19583] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.887429][T19583] lowmem_reserve[]: 0 0 0 0 0 [ 386.892655][T19583] Node 1 Normal free:3889412kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17632kB local_pcp:7872kB free_cma:0kB [ 386.940503][T19583] lowmem_reserve[]: 0 0 0 0 0 [ 386.945502][T19583] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 386.979224][T19583] Node 0 DMA32: 5857*4kB (UE) 3916*8kB (UE) 1563*16kB (UM) 186*32kB (UME) 204*64kB (UME) 341*128kB (UME) 280*256kB (UM) 284*512kB (UM) 199*1024kB (UM) 95*2048kB (UM) 124*4096kB (UM) = 1265748kB [ 387.014542][T19583] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 387.031527][T19583] Node 1 Normal: 179*4kB (UM) 49*8kB (UME) 37*16kB (UME) 153*32kB (UME) 41*64kB (UME) 12*128kB (UME) 3*256kB (ME) 6*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3889412kB [ 387.051108][T19617] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 387.060959][T19617] __nla_validate_parse: 9 callbacks suppressed [ 387.060980][T19617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3631'. [ 387.078442][T19583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.088201][T19583] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.099134][T19583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.110553][T19583] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.159423][T19583] 46275 total pagecache pages [ 387.171285][T19583] 0 pages in swap cache [ 387.181572][T19583] Free swap = 124996kB [ 387.191478][T19583] Total swap = 124996kB [ 387.203066][T19583] 2097051 pages RAM [ 387.213253][T19583] 0 pages HighMem/MovableOnly [ 387.223763][T19583] 426622 pages reserved [ 387.237337][T19583] 0 pages cma reserved [ 387.402779][T19625] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3633'. [ 387.424335][T19625] xt_policy: neither incoming nor outgoing policy selected [ 387.562471][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3634'. [ 387.900173][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3641'. [ 387.914517][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3641'. [ 387.929584][T19655] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3640'. [ 387.968391][T19655] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3640'. [ 388.104696][T19669] syzkaller0: entered promiscuous mode [ 388.120815][T19669] syzkaller0: entered allmulticast mode [ 390.561872][T19724] openvswitch: netlink: IP tunnel dst address not specified [ 390.635483][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 390.659284][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 390.696345][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3655'. [ 391.103897][T19760] netlink: 'syz.3.3666': attribute type 1 has an invalid length. [ 391.152370][T19760] netlink: 'syz.3.3666': attribute type 1 has an invalid length. [ 391.316184][T19776] netlink: 'syz.1.3670': attribute type 11 has an invalid length. [ 391.429411][T19780] tipc: Enabled bearer , priority 0 [ 391.436909][T19780] syzkaller0: entered promiscuous mode [ 391.444245][T19780] syzkaller0: entered allmulticast mode [ 391.457679][T19780] tipc: Resetting bearer [ 391.490630][T19783] tipc: Enabled bearer , priority 0 [ 391.509623][T19787] syzkaller0: entered promiscuous mode [ 391.521852][T19787] syzkaller0: entered allmulticast mode [ 391.529207][T19790] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 391.539508][T19783] tipc: Enabling of bearer rejected, already enabled [ 391.551483][T19780] tipc: Resetting bearer [ 391.593709][T19780] tipc: Disabling bearer [ 391.613861][T19783] tipc: Resetting bearer [ 391.670506][T19783] tipc: Disabling bearer [ 392.159538][T19819] __nla_validate_parse: 10 callbacks suppressed [ 392.159561][T19819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3683'. [ 392.187554][T19819] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3683'. [ 392.207883][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'. [ 392.281839][T19828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3684'. [ 392.465508][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 392.671472][T19834] team0: Port device team_slave_0 removed [ 392.711791][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'. [ 392.721119][T19842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3690'. [ 392.831722][T19847] netlink: 'syz.4.3692': attribute type 12 has an invalid length. [ 392.887475][T19850] netlink: 'syz.1.3695': attribute type 23 has an invalid length. [ 392.907666][T19847] netlink: 'syz.4.3692': attribute type 12 has an invalid length. [ 393.066041][T19853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3693'. [ 393.079706][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3693'. [ 393.236710][T19874] syzkaller0: entered promiscuous mode [ 393.243383][T19874] syzkaller0: entered allmulticast mode [ 393.361917][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 393.437628][T19889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.447116][T19889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.461042][T19889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.471200][T19889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.591966][T19894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 393.812056][T19900] bond2: entered promiscuous mode [ 393.828597][T19900] bond2: entered allmulticast mode [ 393.840566][T19900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.024026][T19916] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 394.969576][T19978] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 395.043399][T19985] batadv_slave_0: entered promiscuous mode [ 395.184483][T19994] syzkaller1: entered promiscuous mode [ 395.208400][T19994] syzkaller1: entered allmulticast mode [ 395.230743][T19989] batadv_slave_0: left promiscuous mode [ 395.827978][T20028] tipc: New replicast peer: 255.255.255.255 [ 395.882451][T20028] tipc: Enabled bearer , priority 10 [ 395.906842][T20028] tipc: Enabling of bearer rejected, already enabled [ 395.996777][T20040] netlink: 'syz.4.3741': attribute type 21 has an invalid length. [ 396.216570][T20050] netlink: 'syz.2.3745': attribute type 1 has an invalid length. [ 396.370298][T20062] netlink: 'syz.0.3748': attribute type 178 has an invalid length. [ 396.433613][T20060] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 396.470506][T20060] bond2 (unregistering): Released all slaves [ 396.957187][T20082] xt_hashlimit: overflow, rate too high: 0 [ 397.043099][ T936] IPVS: starting estimator thread 0... [ 397.159102][T20106] IPVS: using max 25 ests per chain, 60000 per kthread [ 397.172266][T20112] __nla_validate_parse: 11 callbacks suppressed [ 397.172288][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3758'. [ 397.440921][T20128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3760'. [ 397.653667][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3760'. [ 397.807191][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3765'. [ 397.819423][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3765'. [ 398.341298][T20183] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3767'. [ 398.369744][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 398.379119][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 398.394900][T20189] netlink: 294 bytes leftover after parsing attributes in process `syz.4.3769'. [ 398.406099][T20189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.564933][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 398.807051][T20213] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 398.830948][T20213] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 398.863027][T20213] netlink: 'syz.3.3776': attribute type 8 has an invalid length. [ 399.122815][T20227] block nbd1: not configured, cannot reconfigure [ 399.144085][T20233] netlink: 'syz.0.3783': attribute type 1 has an invalid length. [ 399.218371][T20233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.306748][T20238] netlink: 'syz.4.3785': attribute type 6 has an invalid length. [ 399.360247][T20238] netlink: 'syz.4.3785': attribute type 6 has an invalid length. [ 399.639680][T20261] netlink: 'syz.2.3792': attribute type 4 has an invalid length. [ 399.737901][T20270] netlink: 'syz.4.3791': attribute type 1 has an invalid length. [ 399.920062][T20278] openvswitch: netlink: Duplicate key (type 32). [ 401.156184][T20318] syzkaller0: entered promiscuous mode [ 401.170417][T20318] syzkaller0: entered allmulticast mode [ 401.333542][T20350] xt_hashlimit: size too large, truncated to 1048576 [ 401.486314][T20356] validate_nla: 4 callbacks suppressed [ 401.486335][T20356] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 401.548908][T20356] netlink: 'syz.1.3818': attribute type 2 has an invalid length. [ 402.196359][T20385] lo: entered promiscuous mode [ 402.228576][T20385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.348563][T20389] netlink: 'syz.1.3826': attribute type 39 has an invalid length. [ 402.362733][T20391] __nla_validate_parse: 30 callbacks suppressed [ 402.362756][T20391] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3827'. [ 402.402393][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3826'. [ 402.464574][T20398] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 402.473726][T20398] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3828'. [ 402.716814][T20411] xt_l2tp: v2 sid > 0xffff: 1114112 [ 402.854750][T20413] netlink: 'syz.1.3835': attribute type 2 has an invalid length. [ 402.862853][T20413] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3835'. [ 402.924540][T20420] netlink: 'syz.4.3837': attribute type 5 has an invalid length. [ 403.043625][T20429] netlink: 'syz.4.3840': attribute type 25 has an invalid length. [ 403.059611][T20431] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3841'. [ 403.080148][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'. [ 403.092909][T20427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.107318][T20427] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 403.205257][T20438] netlink: 'syz.3.3843': attribute type 1 has an invalid length. [ 403.258220][T20438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.584619][T20460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.597592][T20457] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3849'. [ 403.701577][T20469] netlink: 'syz.2.3852': attribute type 4 has an invalid length. [ 403.778806][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'. [ 403.895579][T20480] netlink: 'syz.1.3855': attribute type 11 has an invalid length. [ 404.039803][T20495] ksmbd: Unknown IPC event: 3, ignore. [ 404.701342][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3872'. [ 404.723648][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3870'. [ 405.236314][T20568] syz_tun: left promiscuous mode [ 405.310125][T20568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.339861][T20568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.907851][T20620] vlan3: entered promiscuous mode [ 405.918591][T20620] bridge0: entered promiscuous mode [ 406.163329][T20611] geneve2: entered promiscuous mode [ 406.490941][T20651] syzkaller0: entered promiscuous mode [ 406.496899][T20651] syzkaller0: entered allmulticast mode [ 406.728079][T20663] xt_recent: Unsupported userspace flags (000000b1) [ 406.820727][T20667] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 406.837722][T20668] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 406.863433][T20670] validate_nla: 3 callbacks suppressed [ 406.863452][T20670] netlink: 'syz.4.3911': attribute type 3 has an invalid length. [ 406.894111][T20672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.922223][T20672] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20001 [ 406.937279][T20675] x_tables: duplicate underflow at hook 1 [ 406.945320][T20672] IPVS: rr: FWM 3 0x00000003 - no destination available [ 407.056977][T20679] tipc: Started in network mode [ 407.078591][T20679] tipc: Node identity b29fd436a9c4, cluster identity 4711 [ 407.114448][T20679] tipc: Enabled bearer , priority 0 [ 407.304425][T20679] tipc: Disabling bearer [ 407.434669][T20704] xt_hashlimit: size too large, truncated to 1048576 [ 407.503759][T20709] __nla_validate_parse: 13 callbacks suppressed [ 407.503781][T20709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3922'. [ 407.584662][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3922'. [ 407.777315][T20722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3923'. [ 408.148915][T20742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3926'. [ 408.285360][T20757] netlink: 'syz.3.3926': attribute type 1 has an invalid length. [ 408.302600][T20764] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3931'. [ 408.347246][T20757] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3926'. [ 408.391594][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'. [ 408.419660][T20761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3926'. [ 408.429374][T20761] nbd: device at index 64 is going down [ 408.456231][T20764] dvmrp6: entered allmulticast mode [ 408.704797][T20760] udevd[20760]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 408.737585][T20778] tunl0: entered promiscuous mode [ 408.764404][T20786] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3936'. [ 408.791023][T20778] netlink: 'syz.1.3933': attribute type 3 has an invalid length. [ 408.802666][T20778] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3933'. [ 408.882535][T20791] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 409.455067][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.464271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.536114][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.544995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.688616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.495545][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.504004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.733295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.115353][T20915] netlink: 'syz.1.3967': attribute type 18 has an invalid length. [ 411.449307][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.729153][T20943] netlink: 'syz.4.3976': attribute type 1 has an invalid length. [ 412.030181][T20960] netlink: 'syz.0.3982': attribute type 1 has an invalid length. [ 412.141627][T20966] delete_channel: no stack [ 412.308954][T20980] !: renamed from dummy0 (while UP) [ 412.495971][T20994] dvmrp6: entered allmulticast mode [ 412.545665][T20996] __nla_validate_parse: 19 callbacks suppressed [ 412.545689][T20996] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3994'. [ 412.883371][T21010] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4001'. [ 413.176055][T21028] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4005'. [ 413.413150][T21045] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 413.564068][T21049] netlink: 'syz.2.4011': attribute type 1 has an invalid length. [ 413.653445][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4013'. [ 413.673283][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4013'. [ 413.742154][T21060] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4015'. [ 413.879481][T21071] veth0: entered promiscuous mode [ 413.897699][T21071] bridge0: entered promiscuous mode [ 413.907023][T21069] bridge0: left promiscuous mode [ 413.919436][T21069] veth0: left promiscuous mode [ 414.012386][ T6027] net_ratelimit: 15 callbacks suppressed [ 414.012406][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.026889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.199834][T21088] netlink: 'syz.1.4025': attribute type 64 has an invalid length. [ 414.209572][T21088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4025'. [ 414.293921][T21090] netlink: 'syz.3.4026': attribute type 13 has an invalid length. [ 414.309862][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'. [ 414.319757][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'. [ 414.348535][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4029'. [ 414.522659][T21105] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 414.595884][T21109] bond4: invalid ARP target 0.0.0.0 specified for addition [ 414.605659][T21109] bond4: option arp_ip_target: invalid value (0) [ 414.616660][T21109] bond4 (unregistering): Released all slaves [ 414.662996][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.672354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.875922][T21121] x_tables: duplicate underflow at hook 3 [ 414.894718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.062419][T21128] netlink: 'syz.2.4036': attribute type 1 has an invalid length. [ 415.695527][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.704792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.929186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.731444][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.739924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.085638][T21153] netlink: 'syz.4.4039': attribute type 1 has an invalid length. [ 417.149627][T21150] netlink: 'syz.2.4042': attribute type 29 has an invalid length. [ 417.177803][T21150] netlink: 'syz.2.4042': attribute type 29 has an invalid length. [ 417.603935][T21186] __nla_validate_parse: 9 callbacks suppressed [ 417.603956][T21186] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4050'. [ 417.907066][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4056'. [ 417.923642][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4056'. [ 417.950713][T21206] netlink: 'syz.2.4057': attribute type 21 has an invalid length. [ 417.963003][T21206] IPv6: NLM_F_CREATE should be specified when creating new route [ 418.124823][T21211] netlink: 'syz.2.4059': attribute type 1 has an invalid length. [ 418.252545][T21219] syzkaller1: entered promiscuous mode [ 418.261738][T21219] syzkaller1: entered allmulticast mode [ 418.510801][T21235] netlink: 'syz.4.4066': attribute type 1 has an invalid length. [ 418.695574][T21241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4069'. [ 418.773584][T21241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4069'. [ 418.794330][T21241] netlink: 'syz.2.4069': attribute type 2 has an invalid length. [ 419.048602][ C0] net_ratelimit: 10 callbacks suppressed [ 419.048623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.073988][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 419.088125][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 419.129815][T13763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.138327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.218807][T21259] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 419.487284][T21274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.645675][T21285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.680517][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4084'. [ 419.699082][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4084'. [ 419.741016][T21290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4086'. [ 419.858010][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.866557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.088596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.575671][T21341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.595148][T21348] vlan3: entered promiscuous mode [ 420.603604][T21348] vlan3: entered allmulticast mode [ 420.648155][T21348] hsr_slave_1: entered allmulticast mode [ 420.667155][T21350] macvlan2: entered promiscuous mode [ 420.675347][T21350] macvlan2: entered allmulticast mode [ 420.681676][T21350] bond2: entered allmulticast mode [ 420.686851][T21350] bond2: entered promiscuous mode [ 420.696144][T21350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 420.707035][T21350] team0: Port device macvlan2 added [ 420.892808][T21370] lo: Caught tx_queue_len zero misconfig [ 420.898974][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.907315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.128524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.143569][T21381] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 421.399407][T21399] netlink: 'syz.0.4119': attribute type 21 has an invalid length. [ 421.579695][T21408] syzkaller0: entered promiscuous mode [ 421.585407][T21408] syzkaller0: entered allmulticast mode [ 421.714734][T21422] xt_policy: too many policy elements [ 421.935079][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.548111][T21415] __nla_validate_parse: 7 callbacks suppressed [ 423.548132][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4122'. [ 423.714694][T21438] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4128'. [ 423.726590][T21440] netlink: 'syz.2.4127': attribute type 2 has an invalid length. [ 423.834376][T21445] tipc: Enabling of bearer rejected, already enabled [ 423.913242][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4132'. [ 424.198090][T21474] xt_hashlimit: size too large, truncated to 1048576 [ 424.248520][ C0] net_ratelimit: 13 callbacks suppressed [ 424.248543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.265390][T13763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.274235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.357322][T21482] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4140'. [ 424.486194][T21485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4142'. [ 424.622960][T21490] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4143'. [ 424.778810][T21492] veth0: entered promiscuous mode [ 424.784659][T21492] veth0: left promiscuous mode [ 424.904385][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 425.070718][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.079206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.201708][T21518] netlink: 464 bytes leftover after parsing attributes in process `syz.4.4154'. [ 425.240076][T21518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4154'. [ 425.288591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.407431][T21529] bond3: option min_links: invalid value (18446744073709551614) [ 425.415315][T21529] bond3: option min_links: allowed values 0 - 2147483647 [ 425.432516][T21529] bond3 (unregistering): Released all slaves [ 425.473450][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'. [ 425.528921][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.537334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.099649][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.108341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.455667][T21558] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 426.580281][T21558] bond5 (unregistering): Released all slaves [ 426.897863][T21577] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 426.921112][T21577] netlink: 'syz.4.4172': attribute type 10 has an invalid length. [ 426.936667][T21577] veth0_macvtap: left promiscuous mode [ 427.270703][T21593] syzkaller1: entered promiscuous mode [ 427.276702][T21593] syzkaller1: entered allmulticast mode [ 427.299995][T21593] [ 427.302381][T21593] ====================================================== [ 427.309417][T21593] WARNING: possible circular locking dependency detected [ 427.316467][T21593] syzkaller #0 Not tainted [ 427.320903][T21593] ------------------------------------------------------ [ 427.328029][T21593] syz.2.4179/21593 is trying to acquire lock: [ 427.334119][T21593] ffffffff8fb28438 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 427.343661][T21593] [ 427.343661][T21593] but task is already holding lock: [ 427.351052][T21593] ffffffff8fb283d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 427.360738][T21593] [ 427.360738][T21593] which lock already depends on the new lock. [ 427.360738][T21593] [ 427.371259][T21593] [ 427.371259][T21593] the existing dependency chain (in reverse order) is: [ 427.380304][T21593] [ 427.380304][T21593] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 427.388254][T21593] _raw_spin_lock_bh+0x36/0x50 [ 427.393589][T21593] nr_rt_ioctl+0x40c/0xf90 [ 427.398556][T21593] sock_do_ioctl+0x101/0x320 [ 427.403686][T21593] sock_ioctl+0x5c6/0x7f0 [ 427.408568][T21593] __se_sys_ioctl+0xfc/0x170 [ 427.413712][T21593] do_syscall_64+0xe2/0xf80 [ 427.418841][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.425270][T21593] [ 427.425270][T21593] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 427.433369][T21593] _raw_spin_lock_bh+0x36/0x50 [ 427.438678][T21593] nr_rt_ioctl+0x215/0xf90 [ 427.443632][T21593] sock_do_ioctl+0x101/0x320 [ 427.449112][T21593] sock_ioctl+0x5c6/0x7f0 [ 427.453983][T21593] __se_sys_ioctl+0xfc/0x170 [ 427.459125][T21593] do_syscall_64+0xe2/0xf80 [ 427.464188][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.470645][T21593] [ 427.470645][T21593] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 427.478537][T21593] __lock_acquire+0x15a5/0x2cf0 [ 427.484026][T21593] lock_acquire+0x106/0x330 [ 427.489068][T21593] _raw_spin_lock_bh+0x36/0x50 [ 427.494376][T21593] nr_rt_device_down+0xbe/0x860 [ 427.499793][T21593] nr_device_event+0x137/0x150 [ 427.505098][T21593] notifier_call_chain+0x19d/0x3a0 [ 427.510747][T21593] __dev_notify_flags+0x16d/0x310 [ 427.516426][T21593] netif_change_flags+0xe8/0x1a0 [ 427.522016][T21593] dev_change_flags+0x130/0x260 [ 427.527425][T21593] dev_ioctl+0x7b4/0x1150 [ 427.532299][T21593] sock_do_ioctl+0x23e/0x320 [ 427.537425][T21593] sock_ioctl+0x5c6/0x7f0 [ 427.542310][T21593] __se_sys_ioctl+0xfc/0x170 [ 427.547449][T21593] do_syscall_64+0xe2/0xf80 [ 427.552495][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.558933][T21593] [ 427.558933][T21593] other info that might help us debug this: [ 427.558933][T21593] [ 427.569365][T21593] Chain exists of: [ 427.569365][T21593] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 427.569365][T21593] [ 427.583231][T21593] Possible unsafe locking scenario: [ 427.583231][T21593] [ 427.590712][T21593] CPU0 CPU1 [ 427.596098][T21593] ---- ---- [ 427.601479][T21593] lock(nr_neigh_list_lock); [ 427.606268][T21593] lock(&nr_node->node_lock); [ 427.613578][T21593] lock(nr_neigh_list_lock); [ 427.620820][T21593] lock(nr_node_list_lock); [ 427.625439][T21593] [ 427.625439][T21593] *** DEADLOCK *** [ 427.625439][T21593] [ 427.633627][T21593] 2 locks held by syz.2.4179/21593: [ 427.638840][T21593] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 427.647661][T21593] #1: ffffffff8fb283d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 427.657708][T21593] [ 427.657708][T21593] stack backtrace: [ 427.663708][T21593] CPU: 0 UID: 0 PID: 21593 Comm: syz.2.4179 Not tainted syzkaller #0 PREEMPT(full) [ 427.663728][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 427.663739][T21593] Call Trace: [ 427.663748][T21593] [ 427.663756][T21593] dump_stack_lvl+0xe8/0x150 [ 427.663780][T21593] print_circular_bug+0x2e1/0x300 [ 427.663799][T21593] check_noncircular+0x12e/0x150 [ 427.663819][T21593] __lock_acquire+0x15a5/0x2cf0 [ 427.663847][T21593] ? __lock_acquire+0x6b5/0x2cf0 [ 427.663872][T21593] ? dsa_user_netdevice_event+0x495/0x2850 [ 427.663891][T21593] ? nr_rt_device_down+0xbe/0x860 [ 427.663912][T21593] lock_acquire+0x106/0x330 [ 427.663934][T21593] ? nr_rt_device_down+0xbe/0x860 [ 427.663957][T21593] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 427.663978][T21593] ? nr_rt_device_down+0xbe/0x860 [ 427.663999][T21593] _raw_spin_lock_bh+0x36/0x50 [ 427.664024][T21593] ? nr_rt_device_down+0xbe/0x860 [ 427.664045][T21593] nr_rt_device_down+0xbe/0x860 [ 427.664071][T21593] nr_device_event+0x137/0x150 [ 427.664092][T21593] notifier_call_chain+0x19d/0x3a0 [ 427.664114][T21593] __dev_notify_flags+0x16d/0x310 [ 427.664136][T21593] ? __pfx___dev_notify_flags+0x10/0x10 [ 427.664156][T21593] ? __dev_change_flags+0x4c6/0x690 [ 427.664178][T21593] ? __pfx___dev_change_flags+0x10/0x10 [ 427.664200][T21593] ? full_name_hash+0x92/0xe0 [ 427.664220][T21593] netif_change_flags+0xe8/0x1a0 [ 427.664244][T21593] dev_change_flags+0x130/0x260 [ 427.664266][T21593] dev_ioctl+0x7b4/0x1150 [ 427.664285][T21593] sock_do_ioctl+0x23e/0x320 [ 427.664302][T21593] ? __pfx_sock_do_ioctl+0x10/0x10 [ 427.664315][T21593] ? do_futex+0x333/0x420 [ 427.664345][T21593] sock_ioctl+0x5c6/0x7f0 [ 427.664370][T21593] ? __pfx_sock_ioctl+0x10/0x10 [ 427.664395][T21593] ? __fget_files+0x2a/0x420 [ 427.664412][T21593] ? __fget_files+0x3a0/0x420 [ 427.664428][T21593] ? __fget_files+0x2a/0x420 [ 427.664447][T21593] ? bpf_lsm_file_ioctl+0x9/0x20 [ 427.664468][T21593] ? __pfx_sock_ioctl+0x10/0x10 [ 427.664492][T21593] __se_sys_ioctl+0xfc/0x170 [ 427.664516][T21593] do_syscall_64+0xe2/0xf80 [ 427.664533][T21593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.664550][T21593] ? trace_irq_disable+0x37/0x100 [ 427.664566][T21593] ? clear_bhb_loop+0x60/0xb0 [ 427.664584][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.664600][T21593] RIP: 0033:0x7fbe43d9aeb9 [ 427.664615][T21593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.664630][T21593] RSP: 002b:00007fbe44ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.664648][T21593] RAX: ffffffffffffffda RBX: 00007fbe44015fa0 RCX: 00007fbe43d9aeb9 [ 427.664660][T21593] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 427.664671][T21593] RBP: 00007fbe43e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 427.664682][T21593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.664691][T21593] R13: 00007fbe44016038 R14: 00007fbe44015fa0 R15: 00007ffdbfae0038 [ 427.664718][T21593] [ 430.008697][ C0] net_ratelimit: 13 callbacks suppressed [ 430.008720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.022556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.030691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.039993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.048369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.250549][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.258876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.048555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.290004][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.298382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.048872][ T6027] net_ratelimit: 13 callbacks suppressed [ 435.048889][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.063381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.208529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.451134][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.459421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.258520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.491117][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.499381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.209297][ T5839] Bluetooth: hci5: command 0x041b tx timeout