last executing test programs: 7.462708837s ago: executing program 1 (id=3048): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x24000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r8, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x24000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) socket$inet6(0x10, 0x2, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) (async) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r8, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) (async) 7.139409679s ago: executing program 1 (id=3052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x6}, 0x0, 0x7, 0x3, 0x59, 0x25, 'syz0\x00', "aa26976ec905c19db4604917016b0455ab8bf1f1f820698558db5e3c50957503", "8c09877bd5991673dec46e2540e04715bf984ccee4dd285454eca66b5aba3379", [{0x80, 0xfffd, {0x1, 0x8}}, {0x8, 0x78, {0x3, 0xffff0000}}, {0xc0, 0xffff, {0x0, 0x6}}, {0x0, 0xf, {0x3, 0x7}}, {0xe58f, 0x7, {0x1, 0x3}}, {0xffbe, 0x1, {0x2, 0xfffffff8}}, {0x6ac, 0x4, {0x0, 0x8}}, {0x1ff, 0x1000, {0x3, 0x7ff}}, {0x8001, 0x10, {0x2, 0x8}}, {0xff81, 0xafb, {0x3}}, {0xf6ae, 0x8, {0x3, 0x9}}, {0x9, 0xca, {0x1, 0xfffffffe}}, {0x2, 0x3, {0x3, 0xcd}}, {0x600, 0x27f2, {0x3}}, {0x2, 0x3, {0x2, 0x8}}, {0xa, 0x6dc6, {0x2, 0xb26d}}, {0xf46, 0x3, {0x1, 0xff}}, {0xa25, 0x7, {0x2, 0x7}}, {0x5, 0x1000, {0x1, 0x5}}, {0xea, 0xe, {0x3, 0x5}}, {0xab1, 0x5, {0x3, 0xfffffff8}}, {0x1, 0x6, {0x0, 0xa}}, {0x1400, 0x3, {0x3, 0x6}}, {0xfff, 0xc, {0x0, 0x1}}, {0xdc7f, 0x3, {0x1}}, {0xffff, 0x4, {0x2, 0x6}}, {0x7ff, 0x2, {0x1, 0x93}}, {0x4, 0x7, {0x3, 0x80000000}}, {0xfffa, 0x8, {0x1, 0x8}}, {0x100, 0xfffa, {0x1, 0x3}}, {0x3, 0x4, {0x3, 0x3}}, {0x1000, 0xd711, {0x0, 0x80}}, {0x2, 0xf000, {0x3, 0x8}}, {0x830, 0x585b, {0x0, 0x71}}, {0x200, 0x8, {0x1, 0x5}}, {0x8, 0x3, {0x2, 0x7f}}, {0x2, 0xf, {0x0, 0x5}}, {0x3, 0x6, {0x3, 0x1}}, {0x1, 0x0, {0x0, 0x9}}, {0x369, 0x0, {0x1, 0x7ff}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x6, 0xf8, 0x3, 0x5, 0x7, 'syz0\x00', "34ab42bef1a9c4db02fd5e271d88833d34fb61e7671216e26243eaa0d2fce7b4", "f1838e22ae8c6758340d25435ac717c9f0d8af3ee1b60ca56ee260db46e14615", [{0x1, 0x200, {0x3, 0x5}}, {0x4, 0x0, {0x0, 0x8}}, {0x7, 0x9, {0x3, 0x8}}, {0x9f, 0x1, {0x3, 0x1ff}}, {0x4, 0x7, {0x2}}, {0x7, 0x1, {0x3, 0x27b}}, {0xfff4, 0x8, {0x1, 0x3}}, {0x7, 0xf, {0x1, 0x6}}, {0x619e, 0x8001, {0x3, 0xdac6}}, {0xa, 0x3, {0x3, 0x7}}, {0x7ff, 0x8, {0x0, 0x3}}, {0x4, 0x82f, {0x0, 0x29f}}, {0x8, 0x4, {0x2, 0xdde5}}, {0x5691, 0x3, {0x1, 0x1}}, {0x8, 0x4, {0x3, 0x1}}, {0x5, 0xfffe, {0x1, 0x5}}, {0x62, 0x10, {0x0, 0x6}}, {0x5, 0xe, {0x0, 0x81}}, {0x2, 0x1, {0x3, 0x5}}, {0x6, 0x8, {0x1, 0x6}}, {0x3, 0x0, {0x1, 0xfffffffe}}, {0x0, 0x1, {0x2, 0x1}}, {0x219d, 0x400, {0x1, 0x80000001}}, {0x8001, 0x100, {0x2, 0x5}}, {0x7, 0xf765, {0x2, 0x9}}, {0x7, 0xff, {0x3, 0x6}}, {0x9, 0x6, {0x3, 0x4}}, {0x9, 0x8, {0x1, 0x9}}, {0x7, 0x1000, {0x0, 0x7fff}}, {0xf3f8, 0x8000, {0x3, 0xffffffc0}}, {0x7, 0x9, {0x3, 0x7}}, {0x1, 0x8, {0x3, 0xac}}, {0x98c1, 0x800, {0x3, 0x1}}, {0xfffa, 0xfff9, {0xd1bc4394838ebcc1, 0x51}}, {0x3abd, 0x6b0, {0x1}}, {0x5, 0xf801, {0x1, 0x9}}, {0x3, 0x9, {0x3, 0x5}}, {0x6, 0xf9d, {0x0, 0x3}}, {0x6, 0x8, {0x0, 0x9}}, {0x8, 0x4, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x8, 0x9, 0x7, 0x1, 0xc, 'syz0\x00', "a0ff7f108b84fd7b43e946ffbf4d2481576fab974214280521172720ea5510ef", "a86ece1e6c26dafde1c3004c27573d1c7bc820cc6c88cffc44f7f27cfbfcf060", [{0x8, 0x7, {0x2, 0x1eb5}}, {0x3, 0x1ff, {0x2, 0xffff}}, {0x5, 0x9, {0x1, 0x3}}, {0x9, 0x12, {0x3, 0x400}}, {0x7fff, 0x400, {0x0, 0x80000000}}, {0x3f, 0xfffe, {0x3, 0x8}}, {0xfffc, 0x9, {0x3, 0x6}}, {0x5, 0x2}, {0x5, 0xe28d, {0x0, 0xffffffff}}, {0x5, 0x6, {0x2, 0x10001}}, {0x4010, 0x2, {0x0, 0x1}}, {0x3, 0x6}, {0x3, 0x6, {0x3, 0x726}}, {0x2, 0xfffc, {0x0, 0xff}}, {0x0, 0x747e, {0x0, 0xffff8000}}, {0xfffd, 0x100, {0x3, 0x4}}, {0x7f, 0x7f, {0x2, 0x10000}}, {0x3, 0x200, {0x2, 0xc}}, {0xcaa4, 0x60, {0x0, 0xfffffffc}}, {0x4, 0xb, {0x3, 0x4}}, {0x2, 0xffff, {0x1, 0xb}}, {0x69db, 0x7, {0x5ddabb7816ba623e, 0x5}}, {0xb2, 0x11, {0x1, 0x5}}, {0x1, 0x5, {0x2, 0x10000}}, {0x0, 0x6, {0x3, 0x6}}, {0x6, 0x6, {0x0, 0x8}}, {0x6, 0x400, {0x3, 0xffffffff}}, {0x4, 0x1ff, {0x0, 0xff}}, {0x6fa3, 0xf89, {0x0, 0xe00000}}, {0xff80, 0x1, {0x3, 0x5}}, {0x8, 0xfffa, {0x0, 0xff}}, {0x1, 0x4, {0x3, 0x8}}, {0x2, 0x8, {0x3, 0x80}}, {0x5, 0x3ff, {0x1, 0x6}}, {0x2, 0x4, {0x0, 0x3}}, {0x200, 0x401, {0x2, 0x4}}, {0x5, 0x3, {0x2, 0x1}}, {0x23, 0x5, {0x2, 0x9}}, {0x2, 0xba7, {0x3, 0x3ff}}, {0x9, 0x60, {0x0, 0x7f}}]}}}, {{0x254, 0x1, {{0x0, 0x3e}, 0x5, 0x7, 0xee06, 0x2495, 0x27, 'syz1\x00', "ccd4d2eaca15be59e4ff2b8c391c5969d57dc1a27623ff652bb63dc1c7ba809e", "a10d4fb3db30d1567f033cabb782ef3f2d0d256e3f74feef09fe0b2c2a8c9a8c", [{0xf1ac, 0xaa90, {0x1}}, {0x1ff, 0x101, {0x2, 0x80000000}}, {0x5, 0x8, {0x3, 0x3}}, {0x1, 0x5, {0x3}}, {0xda, 0x6, {0x3, 0x5}}, {0x3, 0xda96, {0x3, 0xffff}}, {0x4, 0x2, {0x0, 0x5}}, {0x100, 0x7, {0x1, 0xffffb5af}}, {0xfffe, 0x8, {0x0, 0x9}}, {0x0, 0x4fa4, {0x0, 0x6}}, {0x2, 0x8001, {0x2, 0x5da}}, {0x80, 0x1, {0x2, 0x9}}, {0x1, 0x812, {0x3, 0x9}}, {0xf, 0x7fff, {0x2, 0x2}}, {0xc, 0xfffd, {0x3, 0x9}}, {0x7, 0x5, {0x0, 0x9}}, {0x2, 0x4, {0x1, 0x1}}, {0x2, 0xfff6, {0x2}}, {0x1ca, 0x9, {0x3, 0x35}}, {0x2, 0x7, {0x0, 0x6}}, {0x2, 0x1000, {0x0, 0x3ff}}, {0x4, 0x7fff, {0x3}}, {0x5, 0x3, {0x3, 0x5}}, {0x9, 0x1, {0x1, 0x6}}, {0x6, 0x3, {0x2, 0x3}}, {0x0, 0x0, {0x0, 0xfc81}}, {0x2, 0xf7b, {0x6, 0x100}}, {0xd, 0xef62, {0x1, 0x1}}, {0x6, 0x5, {0x1, 0x200}}, {0x3ff, 0x9, {0x0, 0x4}}, {0x6, 0x2, {0x2, 0x400}}, {0x7fff, 0x8, {0x0, 0x100}}, {0x7997, 0x0, {0x0, 0x10000}}, {0x1000, 0x5, {0x0, 0x200}}, {0x9, 0xd107, {0x1, 0x1}}, {0x5, 0x4, {0x1, 0xe}}, {0x9, 0x9, {0x2, 0x883e}}, {0x2, 0x7, {0x2, 0x5}}, {0xf21, 0x7, {0x1, 0x5}}, {0xbc39, 0xfffc, {0x2, 0x38}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x48000}, 0x6000000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x100) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'hsr0\x00', @local}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (rerun: 32) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) r4 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) close(0x3) (async) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x30, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x30}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) (async) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x6, 0x9d, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x1, 0xef}}]}]}, 0x34}}, 0x0) 6.875697079s ago: executing program 1 (id=3055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x30, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="b70000001000010000000000000000000000000a28000000000a0101000000005e62b5c40c4697230df3fabe11d97a1affca020000000900010073797a300000000008000240000000032c000000030a01020000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000004978314f6104af15000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800024000000004080003400000000108000140000000080900010073797a30000000000902020073797a320000008c85e973e8daee8a8cf21b4300140000001100010000000000000000000000000a8e118c13f9359681c4bc57713b1bd0e47b6801c8a6382e2e87"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 6.751609834s ago: executing program 1 (id=3058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000000000000000008000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x60000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xc, 0xb73e, 0xa7a}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000200)=[r0, r0, r0, r0, r1, r0, r0, r0], &(0x7f0000000240)=[{0x3, 0x2, 0x3, 0x6}, {0x5, 0x3, 0x5, 0x4}], 0x10, 0x6}, 0x94) 6.726190634s ago: executing program 1 (id=3059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e0238057", 0x16}, {&(0x7f0000000140)="d6f12351876d5702fb64018cc67dcb307616eafb60", 0x15}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r6, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x4, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e0238057", 0x16}, {&(0x7f0000000140)="d6f12351876d5702fb64018cc67dcb307616eafb60", 0x15}], 0x3) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r6, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x4, 0x0, &(0x7f0000000040)) (async) 6.494634462s ago: executing program 1 (id=3063): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140), 0x4) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e24, 0x8a08, @local, 0xd}, 0x1c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 3.719188482s ago: executing program 0 (id=3097): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r4, 0x100, 0xd6, 0xff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000003600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003640)=@newchain={0x1f64, 0x64, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x9, 0x1}, {0x4, 0xfff1}, {0x6, 0x8009}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_basic={{0xa}, {0x340, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xfff1}}, @TCA_BASIC_ACT={0x334, 0x3, [@m_skbedit={0xa4, 0x14, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x6, 0x0, 0x0, 0xfffffff7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xdf0, 0x3, 0x0, 0x8000}}]}, {0x40, 0x6, "7ef02757786d449dd2f3808a03899a932c0073e424629c5877ad37d77a8bc1abb7489eaa56f3df18397a625dbf9337809a087ad78f915a795c67b4c0"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ct={0x94, 0xe, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x4d, 0x6, "6213cc10532413e0a62ad6da007777cd6125a3418767ebf3a771b2cea90d46e5a57e89baf5a6ebd74e80968fc93f036e6213f34c65d66d7c68ea47d4e84ad4dfb43104e4306b21f061"}, {0xc, 0x7, {0x41b333d515ff9e0b, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xb0, 0xd, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0x6f, 0x6, "34ccbc2834335625824b70d9789933549e6ff9fbc5c680210a3642a493eaf2bb0403c81cb2b88a914439d1744df1d672cc21c709747d1fe1522865eb01c4ebb4f4eacc0c7768bb329de933701fe8d6b8ee3375f33613378fdc4f5c17160534a85a181230f39ecfca2aafe3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0xc9cb75590a64c207}}}}, @m_ct={0x148, 0x3, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "b25b62b142bf69b0776e73b0f5eb55bc"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1b1ca1833187059ba1440b22e978efa6"}]}, {0xf7, 0x6, "818bd3e4e7dc4d36ea98202380af8946f32e9ff44489cf3b0813a75c0374891a74f09eac9c72db7fb6c187188187abe490de5196b6cc9916cd5690f654e739da81919d68846d23696cdb38ce424c42195be6a10f9b8e5db45ba23e3844b7a87982a4864165dd7246078c62afdeb8fd76689b6dccc59e0d4a47ac89b42cc6be8ca81b44033b3e4d11b37d038c1171350a2c7b8de97c4f8b793833a4f7446119492fd93b2d6234c92e9f3a5aa1b0a93542f8185b8bc2158ed62d456baab02de0f6c103208951c86235382921f36d6733321965e2a4aea7dab48e8f3767c40be73a5f5570474453e7843158c4aa35ad4607bece94"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_cgroup={{0xb}, {0x1b7c, 0x2, [@TCA_CGROUP_EMATCHES={0x10c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0x8, 0x100, 0x1, 0x4, 0x8, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x9eec}, {0x1ff, 0x9, 0x2, "2c42ed6e136c664c62"}}}]}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x6}, {0x5, 0x9, 0x0, "82c54b9f53e7369676"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x101}, {{0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_META={0x68, 0x3, 0x0, 0x0, {{0xa7c2, 0x4, 0xff}, [@TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e487bb3d63"]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="76120eaa09e0", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="8b29dd9bd017a0acf658", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="f483264f4f67"]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="6c3e2320dfee", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="cccb29b9560a", @TCF_META_TYPE_VAR='p', @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x4}, {0x6, 0x9, 0xf39d, 0x4, 0x8, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xc, 0x7, 0x9}, {{0x3}, {0x1, 0x1, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_ACT={0x1a6c, 0x1, [@m_nat={0x20c, 0xf, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x9d, 0x10000000, 0x5, 0x2}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x6, 0xfffffffffffffff5, 0x8, 0x6}, @empty, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x8, 0x7, 0x7, 0xfffffffb}, @loopback, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc1, 0x2, 0x1, 0x101, 0x8}, @multicast2, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0x6, 0x0, 0x6}, @multicast2, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0xffffffffffffffff, 0x1, 0x3}, @rand_addr=0x64010102, @private=0xa010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xab, 0x0, 0x1, 0x3, 0x9}, @multicast1, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x8, 0x3, 0x2}, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, 0xeffbeeb700565216, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x5, 0x7ff, 0x9}, @multicast2, @multicast1, 0x0, 0x1}}]}, {0x7c, 0x6, "5e124f07fc3afe4ffa5651246d6d76f5d058f65127d676a17e3d6434ad41a3b3cf9c01f218d015b8f2be35c83e21f325bee5d98832d885d6efe6592906e34433d40eff2d74366eb594e8a89c66d53627e3525f954e6ba9708f0f440392c00f918bcdbb9bb2eb8584971e91ebc7b3938dcb2b40958d9c447d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x60c248ca9e8d4d4, 0x3}}}}, @m_skbmod={0x11c, 0xe, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfc00}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xffffff00, 0x20000000, 0xd, 0xff}, 0x7}}]}, {0xa7, 0x6, "1a865429d0831c479ce5079fdff265617fe1f846edf3369079ee6ea6d6b537bee94c2f2b7ef0072db57cbbf075b056eaa1889a1a16bb5ea90eae4bfec0bff416a9f8e7ad2c401e36a4ed162716f12e32a178fbbca68ed96565df6fb4d2c3fe76549a615ebc5fdf227354c2eb0029b981a3ef93ab0d3a7693bc21c524a6617023f6573bcf7d41cfbf4a17aa5b75fe7721eabb2a78547c370ca4619469d3bad85fbbdb11"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x10b0, 0x2, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc56}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0x3f, 0x2, 0xfffffff9, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000000, 0xfaa2, 0x2, 0xfffffff7, 0xb57}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0x0, 0x0, 0xfffffffd, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x80, 0x3, 0x8, 0x10}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x11c, 0x17, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x98ea, 0xffffffc0, 0x6216eb824ee50860, 0xfffffffa, 0x3}, 0x4, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x1, 0x0, 0x80000000}, 0x4, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x20000000, 0x80, 0x8}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8b5, 0xffffffffcffffffd, 0x2, 0x1}, 0x2, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0xffffffffffffffff, 0x81, 0x3}, 0x3, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x868d, 0x1000, 0x10000000, 0x2, 0x7f}, 0x3, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x4, 0x8, 0xbc}, 0x2, r0}}]}, {0xe, 0x6, "2084a6077c512e6fc880"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x168, 0x1f, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'veth0\x00'}, @TCA_DEF_DATA={0x17, 0x3, '+/+\x82:*!.),]!(}/$,#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7e24ea2, 0x0, 0x7, 0x7}}]}, {0xfd, 0x6, "1ab40e670c9dd0f8c81a389bd77986b6af00302c6c40892c9000b2d380d867c0f7a2dca2e2e727dfa97cf378235454c81df0053b8f2b00352f91be10786ea6c5135b8f673b8212d303cb708bc7b10c053fbb75bf8bfffdf868b6225bfec3d71b9b0ee4f2bbfc76f5d452f40502c8f627b9a323fcb28c7f4f1e043e8353abd3bda25fafc0c1972a1c08be697bb13879ba760f57a8e24e1624acb3b1a2ffb2849942f2f5f179119c9234a45fa54dfb294be2e62d024d8841fbb37581dcc393fff96212911def9e98cef5520597b1f0fec8196c0fa9ed16dded98ba20396a5b462110e456f95f00bf68ba2d57e93a5c03f53a89a8864d2bdaab7f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x140, 0x14, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0xf6, 0x6, "32a02f6446313eea45224b8de0c680b9de5ce4543aa827eb50e58e2463129b6e01496c6d7eaa36f6bc243b2416c3bcefe932bf5646735b2b23cb8f6e3587bf44a7a25964c5de7758051a03c125c470572913601090e700b92eebf48c5534b1d23212a363779bf8f663ca02fd251c941ba9e29819659e4bcd27502d6cc61aa3a1dbc2f09d0e057544556a7b72408e7894c8412aefb8420d18aaa18df1d2584ece986b398175236eb99e8c78ba08c40028b00db118f6e880793ad85152cb408d4d3b5abf745566c6b0ff4274f3d13f0f9206545d91e975b9f9716ed6590376d8ae181115d7d658977f99e57c6ffc3708b53606"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x268, 0x18, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x185, 0x6, {0x4, 'filter\x00', 0x5a, 0x9, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xa6, 0x6, "34e52589a1a6a262caf79ad0d33da02806381e441a0aeba6ac7896c63acda555d941bd097ef70738e33fbb052882c2f9d1593c9f328c285493275b34b9bf17cebd02bacd2f71434e96acb38af3af5e6c19b9e1e77ed529a1b9641e4daa5e49f105af4ee16a9754be0f30e3a97345a43ee50b3ed4ca6ce498d54ed156f4f3706a0c0cab597e67119811a15a15edd230af4f373a7c56088959c9fb67d4080317f74e85"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x64, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x1, 0x20000002, 0x0, 0x1}, 0xe}}]}, {0x16, 0x6, "6087be39dd19f2e375bb54258274ed853685"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x18e}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8}]}}]}, 0x1f64}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r12}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="83", 0x1}], 0x1}, 0x4000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f0000000240)) 3.655151818s ago: executing program 2 (id=3098): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbb20044978514cdca2462a633bbbaaaa0045101c1c00660000070290780a0103020000000000"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket(0x8, 0x3, 0xfffffe01) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0xfffffffc}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0xc, 0xa, 0xa, 0x40, 0xfffffffffffffff1}, @generic={0x0, 0x3, 0x6, 0x9, 0x200}, @exit, @ringbuf_query, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x28f}, @generic={0xff, 0xe, 0x7, 0x9f, 0x400}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @exit], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x3f, &(0x7f00000005c0)=""/63, 0x41000, 0x44, '\x00', 0x0, 0x4, r1, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x4, 0x45f, 0x1000}, 0x10, 0x1f5f3, r0, 0x5, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x1, 0x0, 0x7}, {0x2, 0x2, 0x0, 0xa}, {0x2, 0x5, 0x3, 0xb}, {0x4, 0x3, 0x7, 0x9}, {0x3, 0x4, 0x3, 0x2}], 0x10, 0x4}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50) socketpair(0x3, 0x2, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x10, 0x5, 0x8000003, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.973318427s ago: executing program 0 (id=3100): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0xd89cb0924b85805f}, {{@in=@local, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.972683207s ago: executing program 2 (id=3101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0xf5ff, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) 1.877442322s ago: executing program 2 (id=3102): syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000380)='-', 0x1}], 0x1) (async) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000000)={0x75, @local, 0x4e20, 0x0, 'lblcr\x00', 0x5, 0x0, 0x42}, 0x2c) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0xc, 0x5, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x20) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@multicast1, @private=0xa010102, 0xffffffffffffffff, "b5c4c0c56800a8a6ebba4285f251ac74e2cd234a180472d33a3a985863e1a856", 0x2, 0x100, 0x7, 0x3dd}, 0x3c) 1.730602511s ago: executing program 4 (id=3104): syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0xc4, 0x0, 0x0, 0x7, 0x0, @loopback}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x2e, 0xa01, 0x0, 0x0, {0x1f}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xb, 0x0, 0x0, @ipv4}]}, 0x28}}, 0x8000) 1.647027288s ago: executing program 2 (id=3105): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r1, &(0x7f0000010280)=[{{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000000380)="cdca", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005d40)='u.', 0x2}], 0x1}}], 0x2, 0x4044044) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r3, 0x0, 0x50, 0x0, &(0x7f0000000100)) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x24, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010200000000000000000c0000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a31000000000d0003006861735b36971803ba46310dc42f15e9683a6e657400000000"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000faffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702cae914000000b7030000000000008500000083000000bf0900000000000055090100000000009500e70000000000bf9100000000003205463ae2bbe8ffa0336c00b7020000020000008500000084000000b700000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$packet(0x11, 0x3, 0x300) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x4, 0x1072bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x206, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000140)={{0x1d, @broadcast, 0x4e22, 0x2, 'rr\x00', 0x9, 0x5, 0x18}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x4, 0xbb9, 0x8001, 0x81f}}, 0x44) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.630664827s ago: executing program 4 (id=3106): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) openat$cgroup_pressure(r0, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) (async) r2 = openat$cgroup_pressure(r0, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0xfd6, 0x20, 0xfffffffffffffff7}, 0x2f) 1.385495278s ago: executing program 3 (id=3108): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0xff6c}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) r2 = accept4(r1, &(0x7f0000000380)=@hci, &(0x7f0000000400)=0x80, 0x800) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c8c0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000834400e7020000000500000000000000e334e3d8ab2d49b493015e13bd59ed224fe76fcb9c2e4ff7065d23a034540013e53391b3a010ba55c1de975bc8a17d2294cc747da525625c946b7e2afc252e98c76b75cf2bced4aaa16a28941d9b648966a69a5afad90487de56023bdbae7a42db0eb2d437e6cd8159cb9b3cce078fc29385", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.368423656s ago: executing program 4 (id=3109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r11, 0x5452, &(0x7f0000000280)=0x3a0af83a) (async) ioctl$int_in(r11, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r11, 0x1) listen(r11, 0x20) (async) listen(r11, 0x20) shutdown(r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.171193617s ago: executing program 3 (id=3110): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ff0700002e00090027db7000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.048054508s ago: executing program 3 (id=3111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0xfff5, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) 1.031675668s ago: executing program 0 (id=3112): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYBLOB="0fd1820dfe4b69257393686223589a0a0d05b832191072aaba7af19887fdfe4e12f152d0d6efc96f02a0fa1dedb4c965c20a2bcc3836020c76b3f208225e23e2ae115ab094078498ac776b92e8f6e9260f8f5411ea3c81aff43c501984cf7f70788be23483b6aa"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000580)='Q`\x97\x10-\x00\xd78\xa5\x91A\xe2I\x9fW\xaf\x1f\xfcf\xd5Z\x00\x8ewH\xfam\xf6.\x0f<\x1c\x98\xf0\xba\x02\x8fH\x85\x97q\xe6\xe5\a.\x00\x1d\xf3p\x19:\xee\xfb\xf7/\x86\x02\xc3\xc0\x0f.2D\xaa\xe1\xeb\x86m\xe0\x00\xd3\x8e\x1f\xa4\xcb\x0e\x88$O\xd5\xa2\xba\xeeR\rS\x02M\x96\x11y8\xf2M\xbd\rp\xccY\x1fb!:\xf38!\"do\xb8\xda\x8b#\xb8\xf2\xc3\xf8\xd1\n\x8c)\xc3\xc3\xdc\xc4\xc3\xdaxE\xff\x0e\xcagQc5y\xb7\xce\x13|\xb0[\xa5~oD\xd2\xa98\xbb\x11p\x92;\b\x9a\xce{\x86\xeb#4\xd4\xdfq\xad\x80\x04(\xe0\x7fh{\x05\aaM\'\xa6nt;>/\xa1\xca+\xca\xbd\xafH\x82h\xdf\xe0\xcf\xdaS\xf4\x9f\x00\xf0yu\fCL\x8f}\xd5\x81\f\x8f\xae\x93WgZ\xddw\xc2\x81\xa7\xd3\xa8Vi\x84Uo}\xe1 \xa7$\xc2<2R\x00\x8eK\x19\"\xad\x81\x8c\xc7d\xf6\xdenxQ\xd6\x88\xb8F\xf6\xaa\x1f\x7f^\xe3\xf4i\xf9Yl\xfa\xcf\xfb\x04\x99\x18_\xf8\xe1\xbb\x19\x02F\xf9\x8d|\x84\x87Lw\xaa\xdbw\rL8\xef\xe5\xfd\xd1Qt\xc0\x94\xe62TC\xea\x9f\xe9\x04\x93\x80\x9a/\xdbvDW{\xabW\xa7\x1d\x0f\x14\xb2\xa0\a\xf0\xe0\x18d\x8e\xc8\xfbJw~\xbc\x022\f\xed\xc1}\x8f\xf6\xd4Z\xdd\x93\xca\x9a\x95\x94~\xb7\xdf\x06\xd6\xacG(\x97PQ\x1a\x05\xb1\x1cS\xed,X\xb6\xb8\xa5\x87_\x1a\xbd<\xac\x00$\xd9\b\xf5`\x13\xa8a~\xa6u\xea\xa4r\xaf/\x86N\x9f\xc6\'', 0x1b7) socket$netlink(0x10, 0x3, 0x14) 993.215326ms ago: executing program 2 (id=3113): r0 = socket(0x28, 0x6, 0x4000000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1405, 0x2, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x41) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) 819.199856ms ago: executing program 4 (id=3114): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400000000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c00028005000d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x884) 818.084769ms ago: executing program 0 (id=3115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@multicast1, 0x200, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x3504, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0xc004004) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @tipc=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x1}}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @can={0x1d, r2}, 0x4, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000080)='ip6gre0\x00', 0x10001, 0xa1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x1fd, 0x6}}]}]}]}, 0x48}}, 0x0) 815.577471ms ago: executing program 2 (id=3116): close(0x4) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 815.096396ms ago: executing program 3 (id=3117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000001380)=""/99, 0x63}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000003440)=""/4102, 0x1006}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000005c0)=""/218, 0xda}], 0x8}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 267.526093ms ago: executing program 3 (id=3118): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc={0x4, {@llc={0xd4, 0x4, "d6", "e664134a85139f835cecf1f66151f0f8a3236dd6fa6942a7e4a24a2bd3e0e303d665ac00dce69fd788def35032ffc8e5008b4bd2fa9d8104cb3b72aeb2488768c89b7b901b2cf8ea5c1eebac15d052eb6f11dbd7fc0b84d55dd911d6cb8b88180f437966ed77989d41494c8ff5a6f10c6ef0c97d89"}}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x672, 0x70b, 0x4c4, 0x8b]}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = epoll_create1(0x0) sendfile(r2, r0, &(0x7f0000000140)=0x6, 0x276f) 266.221591ms ago: executing program 4 (id=3119): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x78, "934f0ac76637e19e125b94fc9b259c4f936069389fb914c0b1a69550b85a83b959aee0254f2e2a4040b3ee26b492f647b54e75423b9cb969c81663b256bf4ceaf18feab01c037db11ccd6918055bb7a69a9c2477deb848430b19d0531c92431061ad5ea5a26d69d41014bbf76aab46cf52d1c408ee95c211"}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r0, &(0x7f0000000100)=0x4) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r1, 0x2}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000180)={0x0, 0x9, [0x7, 0x6, 0x1, 0xffffffff00000001, 0x8]}) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0xf, @private1, 0x4}, 0x1c) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r0, @in={{0x2, 0x3, @loopback}}, 0x15, 0x7}, 0x90) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x8001, 0x8208, 0x2, 0x2, 0x7fff, 0xd, 0xffff, r1}, &(0x7f0000000380)=0x20) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000003c0)={@any, 0x1, 0x80, 0x7, 0x5, 0x4, "33b5dce99598a3f5eca755225501b8908ff9b44815fcbe50c2b297411b2d794a0be8403e8e4f7c4513ab8dfdd620f8aad2d541155a0b4df82a02c71357f73f6f88dcc9ab83bdba70b72c673a2cd04c9749313fe300e436b2a8a6212309a4754462963907e5cefaca5c9c084e361bbcc74e1945717cff67e4ffa62f26c5d90d0c"}) (async) sendto$inet6(r2, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7e}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4810) (async, rerun: 64) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/28, 0x1c, 0x0, &(0x7f0000000640)=""/20, 0x14}, &(0x7f00000006c0)=0x40) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000700)={r1, 0x2, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000740)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffffffe, 0x7, 0x9e, 0x3, 0x2, 0x0, 0xbf}, 0x9c) (async, rerun: 64) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) bind$bt_l2cap(r7, &(0x7f0000000800)={0x1f, 0x200, @none, 0xba}, 0xe) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000840)={r3, 0xf5, "eaededbd02141de1eb36aa8c70ea648b8e7657c148715c87042d99579b3269d0cd3d8300aba7b34eb98397ca9a4af49a9ff3587abda695b5f62964504594c869c36fb921743ccbfb04f7bf2a5b2d210bbd72da9a5fa8810ad8a2b0140fcd2f8e7b4853590d0ef61673a8fd53459663f418ab68fce7c21fdf9e2ff344f1e9c6e46e2388b51dd9ff80ff44c071fc577066186cb0b6cf08ff9c78386334578ba0e6ab241a0ab3938057d7397ce83023848bf3b37e1c6e768ca2aa1815ceb74dbb7681d1ed14398cb216109935d064629d4b6a9476aa87b11fa04e4d1d723cdd602d044a26bb2bc50d53b79e750bf4a2041a7e9d49ec0f"}, &(0x7f0000000940)=0xfd) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000980)={r0, 0xfff9}, &(0x7f00000009c0)=0x8) (async, rerun: 64) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000a00)=0x8000000) (async, rerun: 64) pwritev(r2, &(0x7f0000000b40)=[{&(0x7f0000000a40)="97d77bd3ae3d9ce4b3a250ee25fc1831323cac4e99a887842ed341e7952fd38149d1a9f8e593a38134b83b3f7066f34bc9d5cae7a9248e7012eb2f6fb6455390f25dc2d822ecef58d7f16856fdfa80c832127106a106865f1be074358d8f39e4d69961db4e86812b2c53bdd0a85f14a797f39760374f6bd01ecdb9d5bf11137fba993e0589a93f4168786c95383564e4a7b42ceba60e31ced169eb8aca4092844a619bb49538161255c0227dc990e5daa591095dde868c8ddded00a375c0945607b1fc12225c6a823ad8f3b145fd97ab25338a5fb57b1d0ac67cc836ed57b53375f5058bc53257bf3f931c5ea5eb5485433eb3b3c608b29350", 0xf9}], 0x1, 0x9, 0x7fffffff) (async) r9 = accept(r6, &(0x7f0000000b80)=@xdp, &(0x7f0000000c00)=0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000c40)={r8, 0x9, 0x1}, &(0x7f0000000c80)=0x8) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000cc0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000d00)={r8, 0x6}, &(0x7f0000000d40)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000d80)={r1, 0x10, 0x3}, &(0x7f0000000dc0)=0x8) 265.879475ms ago: executing program 0 (id=3120): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r4, 0x0, 0x0}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES32=r2, @ANYRESHEX, @ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 115.874414ms ago: executing program 0 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000033c0)={0x1c7c, 0x8032, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x1004, 0x3d, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x93, 0x0, 0x0, @fd}, @typed={0x8, 0x4f, 0x0, 0x0, @uid=0xee01}, @nested={0x1c, 0x144, 0x0, 0x1, [@typed={0xc, 0x106, 0x0, 0x0, @u64}, @typed={0x8, 0x14d, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x136}]}, @nested={0xc3c, 0xd8, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@loopback}, @generic="1ce7d20f87b72c366b447b6c874fa5c382d9038dabdf350ad6ef5eaf52ea28f785149f7e23", @generic="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"]}]}, 0x1c7c}], 0x1, 0x0, 0x0, 0x44010}, 0x4008000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000008140)=ANY=[@ANYBLOB="c4220000120001000000000000000000100000000c0000000000000000000000a42221"], 0x22c4}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002b00)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) r6 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002c40)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c80), &(0x7f0000002cc0)=0xc) r7 = getpid() r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002d00)={0x0, 0x0, 0x0}, &(0x7f0000002d40)=0xc) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$unix(r3, &(0x7f0000002e80)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001ac0)="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", 0x1000}], 0x1, &(0x7f0000002d80)=[@rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r6}}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r4, r8]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r11, r12]}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r13, r0, r0, r0, r1, 0xffffffffffffffff]}}], 0xd0, 0x63e224230c367e68}}], 0x1, 0x10) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r16}]}, 0x50}}, 0x0) 107.760936ms ago: executing program 3 (id=3122): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x8080) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000040)=0xffff, 0x4) (async, rerun: 32) sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x4, @loopback}, 0x1c) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10102, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x226, 0xffffffff, 0x1323, 0xe, 0xdf0, 0x4, 0x10000, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0x80000001, 0x4b, 0x7fffffff, 0x2, 0x3}}, &(0x7f0000000840)=0xb0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) sendmmsg$inet6(r7, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)="03a10691df6c68fe9e6c2bb219f9c301e7af3b3931e61cca3e2fc82a4b6eb0bdbca1535b5e5079c66f12187ab087687e12451eb5e491c4224faeae5a9f46999e325186c43bb59729a542e53051f89e1a0df2c926428c06bdf4481b421b2a5fe3b93dad4c6fc50205a26bb70f1fba630e7a8e5290fe70c1dcb206c345d5dd0c87f4a6cc50a8b250e3ff76538b9005760b71585ecd4f3a5c22ce2b6879fc81641092bdf23f51dec692b8", 0xa9}, {0x0}], 0x3}}], 0x2, 0x1405c891) (async, rerun: 32) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012020, 0x0) (rerun: 32) 0s ago: executing program 4 (id=3123): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ffff0000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ffff0000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="4322750400f4ffffff003c000000", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="4322750400f4ffffff003c000000", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip_vti0\x00', r3, 0x7800, 0x7, 0x6, 0x6, {{0x10, 0x4, 0x2, 0x3f, 0x40, 0x67, 0x0, 0x2, 0x2f, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x7, 0x72, [@broadcast]}, @ssrr={0x89, 0x23, 0x92, [@remote, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, @local, @broadcast, @multicast1, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip_vti0\x00', r3, 0x7800, 0x7, 0x6, 0x6, {{0x10, 0x4, 0x2, 0x3f, 0x40, 0x67, 0x0, 0x2, 0x2f, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x7, 0x72, [@broadcast]}, @ssrr={0x89, 0x23, 0x92, [@remote, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, @local, @broadcast, @multicast1, @private=0xa010100]}]}}}}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @multicast1}}}}) write$cgroup_type(r5, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="8db9010ad6258ba9a109b331f92ca6f3b14168e03c8dbb91dd7da062caa1b98a132801ddeb84f7622b3af9eab20f5b7d141f46630201a9aa51", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r3], 0x84}}, 0x20008040) kernel console output (not intermixed with test programs): .786941][T10238] hsr_slave_1: left promiscuous mode [ 166.039202][T10264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1218'. [ 166.068460][T10261] syzkaller0: entered promiscuous mode [ 166.083845][T10261] syzkaller0: entered allmulticast mode [ 166.147513][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 166.155805][ C1] lec:lec_tx_timeout: lec0 [ 166.160987][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 166.472357][T10272] syzkaller0: entered promiscuous mode [ 166.488235][T10272] syzkaller0: entered allmulticast mode [ 167.548542][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 167.599337][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1230'. [ 167.609229][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.938688][T10311] bond6: (slave ip6tnl0): Device is not bonding slave [ 168.945858][T10311] bond6: option active_slave: invalid value (ip6tnl0) [ 168.968113][T10311] bond6 (unregistering): Released all slaves [ 169.073949][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 169.476301][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 169.486724][T10351] macvlan0: left promiscuous mode [ 169.503129][T10351] netlink: 'syz.4.1243': attribute type 2 has an invalid length. [ 169.764768][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1250'. [ 169.781310][T10367] IPVS: set_ctl: invalid protocol: 41 10.1.1.0:20004 [ 169.993325][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1253'. [ 170.184305][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.025433][T10423] xt_hashlimit: size too large, truncated to 1048576 [ 171.168212][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 171.176708][ C1] lec:lec_tx_timeout: lec0 [ 171.182977][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 171.413014][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 171.633370][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 171.661685][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1275'. [ 171.687786][T10446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1275'. [ 171.719437][T10452] syzkaller0: entered promiscuous mode [ 171.725519][T10452] syzkaller0: entered allmulticast mode [ 171.747063][T10452] tc action pedit 'at' offset 257 out of bounds [ 171.859141][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 171.883253][T10456] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 171.930599][T10456] team1: entered promiscuous mode [ 171.945867][T10456] team1: entered allmulticast mode [ 171.945920][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'. [ 171.998890][T10461] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.934301][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1297'. [ 173.206723][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1304'. [ 173.221751][T10540] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1304'. [ 173.234546][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 173.543798][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 173.807172][T10574] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.841669][T10574] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.901875][T10583] netlink: 'syz.3.1319': attribute type 83 has an invalid length. [ 174.055880][T10581] syzkaller0: entered promiscuous mode [ 174.068035][T10581] syzkaller0: entered allmulticast mode [ 176.197584][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 176.205948][ C1] lec:lec_tx_timeout: lec0 [ 176.211948][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 176.662244][T10692] xt_hashlimit: size too large, truncated to 1048576 [ 176.710995][T10686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.750903][T10705] __nla_validate_parse: 4 callbacks suppressed [ 176.750920][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1348'. [ 176.991279][T10712] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 177.372817][T10745] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.388084][T10745] bridge0: port 2(bridge_slave_1) entered listening state [ 177.396150][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.403807][T10745] bridge0: port 1(bridge_slave_0) entered listening state [ 177.482082][T10747] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1359'. [ 177.646135][T10760] netlink: 'syz.3.1363': attribute type 3 has an invalid length. [ 177.665582][T10760] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 177.681136][T10760] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1363'. [ 177.701145][T10760] NCSI netlink: No device for ifindex 813332851 [ 177.732442][T10762] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1366'. [ 177.892245][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1372'. [ 177.930635][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'. [ 177.985014][T10793] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 178.036383][T10793] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 178.330094][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 178.363168][T10822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.370971][T10824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 178.383814][T10824] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.392937][T10824] gretap1: entered promiscuous mode [ 178.399536][T10824] gretap1: entered allmulticast mode [ 178.489114][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.499909][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.510364][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.547967][T10837] syzkaller0: entered promiscuous mode [ 178.553582][T10837] syzkaller0: entered allmulticast mode [ 178.677614][T10841] sctp: [Deprecated]: syz.1.1386 (pid 10841) Use of int in maxseg socket option. [ 178.677614][T10841] Use struct sctp_assoc_value instead [ 178.968429][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.203661][T10865] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 179.263230][T10865] bond6: option packets_per_slave: allowed values 0 - 65535 [ 179.284067][T10865] bond6 (unregistering): Released all slaves [ 179.337736][T10874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.346638][T10874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.368046][T10874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.376480][T10874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.417186][ T48] tipc: Subscription rejected, illegal request [ 179.859777][T10903] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1402'. [ 179.879154][T10904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1402'. [ 180.007900][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.340136][T10917] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1405'. [ 180.408674][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.418394][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.442358][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.697043][T10932] syzkaller1: entered promiscuous mode [ 180.714202][T10932] syzkaller1: entered allmulticast mode [ 180.889971][T10941] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 180.987462][T10941] bond5: entered promiscuous mode [ 181.051002][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.108839][T10951] netlink: 'syz.3.1414': attribute type 1 has an invalid length. [ 181.120001][T10941] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.227534][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 181.236313][ C1] lec:lec_tx_timeout: lec0 [ 181.247623][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 181.252372][T10948] bond5: (slave bridge3): making interface the new active one [ 181.308922][T10948] bridge3: entered promiscuous mode [ 181.334596][T10948] bridge3: left promiscuous mode [ 181.618352][T10967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.625845][T10967] IPv6: NLM_F_CREATE should be set when creating new route [ 181.633356][T10967] IPv6: NLM_F_CREATE should be set when creating new route [ 181.755653][T10974] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 181.861219][T10974] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.956996][T10989] __nla_validate_parse: 15 callbacks suppressed [ 181.957016][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 182.009564][T10979] bond6: (slave geneve4): making interface the new active one [ 182.031126][T10979] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 182.309569][T11001] syzkaller0: entered promiscuous mode [ 182.363667][T11001] syzkaller0: entered allmulticast mode [ 182.743266][T11032] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 182.760020][T11032] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1434'. [ 182.772438][T11032] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 182.780675][T11032] netlink: 'syz.2.1434': attribute type 8 has an invalid length. [ 182.789222][T11032] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1434'. [ 182.804394][T11032] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1434'. [ 182.971844][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.998622][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 183.015630][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 184.170701][ T5827] net_ratelimit: 4 callbacks suppressed [ 184.170721][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.253648][T11042] netlink: 'syz.2.1438': attribute type 2 has an invalid length. [ 184.273758][T11042] 9: entered promiscuous mode [ 184.331851][T11044] netem: change failed [ 184.332115][T11048] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1439'. [ 184.369520][T11053] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1439'. [ 184.450728][T11058] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1442'. [ 184.524778][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 184.567931][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.804508][T11088] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 184.878381][T11095] netlink: 'syz.3.1453': attribute type 1 has an invalid length. [ 184.907108][T11087] bond7: (slave bridge3): making interface the new active one [ 184.911902][T11098] tipc: Failed to remove unknown binding: 66,0,0/0:3416211652/3416211653 [ 184.917711][T11087] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 184.938319][T11098] tipc: Failed to remove unknown binding: 66,0,0/0:3416211652/3416211653 [ 185.092035][T11105] Bluetooth: MGMT ver 1.23 [ 185.209230][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.299430][T11118] syzkaller0: entered promiscuous mode [ 185.323840][T11125] netlink: 'syz.2.1464': attribute type 6 has an invalid length. [ 185.327657][T11118] syzkaller0: entered allmulticast mode [ 185.388849][T11126] netlink: 'syz.2.1464': attribute type 21 has an invalid length. [ 185.452476][T11125] netlink: 'syz.2.1464': attribute type 6 has an invalid length. [ 185.467901][T11126] netlink: 'syz.2.1464': attribute type 5 has an invalid length. [ 186.248269][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.257567][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 186.266367][ C1] lec:lec_tx_timeout: lec0 [ 186.271155][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 187.288044][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.619593][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.329200][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.368265][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.008727][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.417815][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.650140][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.448461][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.087592][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 192.097761][ C1] lec:lec_tx_timeout: lec0 [ 192.102460][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 192.487966][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.528279][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.689123][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.502873][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.573351][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.608736][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.647895][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.731066][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.117769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 197.126591][ C1] lec:lec_tx_timeout: lec0 [ 197.132348][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 197.688650][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.728022][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.612012][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.767878][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.776336][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.818078][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.687745][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 201.694355][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 201.700654][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 201.847902][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.157609][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 202.165989][ C1] lec:lec_tx_timeout: lec0 [ 202.170740][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 202.809066][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.887881][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.928436][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.732858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.749787][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.758579][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.769517][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.968488][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.007920][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.048273][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.177787][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 207.186100][ C1] lec:lec_tx_timeout: lec0 [ 207.191129][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.768288][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.929072][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 207.937694][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 208.088950][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.500638][T11212] team0 (unregistering): Port device team_slave_0 removed [ 208.581554][T11223] __nla_validate_parse: 8 callbacks suppressed [ 208.581573][T11223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1485'. [ 208.663999][T11212] team0 (unregistering): Port device team_slave_1 removed [ 208.695230][T11228] vlan1: entered promiscuous mode [ 208.700622][T11228] bridge0: entered promiscuous mode [ 208.720411][T11226] netlink: 'syz.0.1487': attribute type 1 has an invalid length. [ 208.984977][T11248] netlink: get zone limit has 4 unknown bytes [ 209.136578][T11254] IPVS: Unknown mcast interface: vcan0 [ 209.159554][T11254] IPVS: Unknown mcast interface: vcan0 [ 209.191029][T11254] IPVS: Unknown mcast interface: vcan0 [ 209.496887][T11283] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1504'. [ 209.568849][T11287] bond5: entered promiscuous mode [ 209.789485][T11312] net_ratelimit: 3 callbacks suppressed [ 209.789502][T11312] openvswitch: netlink: Message has 16 unknown bytes. [ 210.038528][T11325] ipt_ECN: cannot use operation on non-tcp rule [ 210.183321][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.194895][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1519'. [ 210.218626][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 210.242065][T11341] netlink: 'syz.0.1521': attribute type 3 has an invalid length. [ 210.281080][T11338] openvswitch: netlink: Flow actions attr not present in new flow. [ 210.334674][T11338] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 210.479610][T11357] netlink: 'syz.3.1524': attribute type 12 has an invalid length. [ 210.488003][T11357] netlink: 'syz.3.1524': attribute type 29 has an invalid length. [ 210.496268][T11357] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1524'. [ 210.522148][T11357] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1524'. [ 210.549369][T11365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.807871][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.207902][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.197569][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 212.206302][ C1] lec:lec_tx_timeout: lec0 [ 212.211332][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 212.248113][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.048217][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.115361][T11329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.269867][T11387] FAULT_INJECTION: forcing a failure. [ 213.269867][T11387] name failslab, interval 1, probability 0, space 0, times 1 [ 213.300164][T11389] dvmrp0: entered allmulticast mode [ 213.306356][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.318526][T11387] CPU: 1 UID: 0 PID: 11387 Comm: syz.1.1532 Not tainted syzkaller #0 PREEMPT(full) [ 213.318556][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.318573][T11387] Call Trace: [ 213.318580][T11387] [ 213.318587][T11387] dump_stack_lvl+0xe8/0x150 [ 213.318628][T11387] should_fail_ex+0x412/0x560 [ 213.318668][T11387] should_failslab+0xa8/0x100 [ 213.318707][T11387] ? skb_clone+0x212/0x3a0 [ 213.318730][T11387] kmem_cache_alloc_noprof+0x87/0x650 [ 213.318749][T11387] ? __netlink_lookup+0xc6/0x8b0 [ 213.318776][T11387] skb_clone+0x212/0x3a0 [ 213.318801][T11387] __netlink_deliver_tap+0x404/0x850 [ 213.318829][T11387] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.318848][T11387] netlink_deliver_tap+0x19c/0x1b0 [ 213.318867][T11387] netlink_unicast+0x7e3/0x9b0 [ 213.318890][T11387] ? __pfx_netlink_unicast+0x10/0x10 [ 213.318908][T11387] ? netlink_sendmsg+0x650/0xb40 [ 213.318925][T11387] ? skb_put+0x11b/0x210 [ 213.318954][T11387] netlink_sendmsg+0x813/0xb40 [ 213.318987][T11387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.319027][T11387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 213.319059][T11387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.319092][T11387] ____sys_sendmsg+0x972/0x9f0 [ 213.319130][T11387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.319165][T11387] ? import_iovec+0x73/0xa0 [ 213.319189][T11387] ___sys_sendmsg+0x2a5/0x360 [ 213.319218][T11387] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.319279][T11387] ? __fget_files+0x2a/0x420 [ 213.319296][T11387] ? __fget_files+0x3a0/0x420 [ 213.319325][T11387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 213.319368][T11387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.319399][T11387] ? __pfx_ksys_write+0x10/0x10 [ 213.319435][T11387] do_syscall_64+0x14d/0xf80 [ 213.319469][T11387] ? trace_irq_disable+0x3b/0x150 [ 213.319490][T11387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.319507][T11387] ? clear_bhb_loop+0x40/0x90 [ 213.319529][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.319546][T11387] RIP: 0033:0x7feaca99c819 [ 213.319575][T11387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.319590][T11387] RSP: 002b:00007feacb87b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.319617][T11387] RAX: ffffffffffffffda RBX: 00007feacac15fa0 RCX: 00007feaca99c819 [ 213.319629][T11387] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000005 [ 213.319644][T11387] RBP: 00007feacb87b090 R08: 0000000000000000 R09: 0000000000000000 [ 213.319655][T11387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.319679][T11387] R13: 00007feacac16038 R14: 00007feacac15fa0 R15: 00007ffc0af5ea98 [ 213.319714][T11387] [ 213.322986][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1535'. [ 213.326967][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 213.489506][T11398] vlan2: entered allmulticast mode [ 213.517226][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 213.712185][T11404] pim6reg: entered allmulticast mode [ 213.848326][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.288778][T11449] FAULT_INJECTION: forcing a failure. [ 214.288778][T11449] name failslab, interval 1, probability 0, space 0, times 0 [ 214.314958][T11449] CPU: 0 UID: 0 PID: 11449 Comm: syz.3.1550 Not tainted syzkaller #0 PREEMPT(full) [ 214.314985][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.314995][T11449] Call Trace: [ 214.315002][T11449] [ 214.315010][T11449] dump_stack_lvl+0xe8/0x150 [ 214.315039][T11449] should_fail_ex+0x412/0x560 [ 214.315071][T11449] should_failslab+0xa8/0x100 [ 214.315094][T11449] ? skb_clone+0x212/0x3a0 [ 214.315117][T11449] kmem_cache_alloc_noprof+0x87/0x650 [ 214.315136][T11449] ? __netlink_lookup+0xc6/0x8b0 [ 214.315165][T11449] skb_clone+0x212/0x3a0 [ 214.315192][T11449] __netlink_deliver_tap+0x404/0x850 [ 214.315224][T11449] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.315245][T11449] netlink_deliver_tap+0x19c/0x1b0 [ 214.315267][T11449] netlink_unicast+0x7e3/0x9b0 [ 214.315293][T11449] ? __pfx_netlink_unicast+0x10/0x10 [ 214.315313][T11449] ? netlink_sendmsg+0x650/0xb40 [ 214.315331][T11449] ? skb_put+0x11b/0x210 [ 214.315356][T11449] netlink_sendmsg+0x813/0xb40 [ 214.315385][T11449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.315409][T11449] ? aa_sock_msg_perm+0xf1/0x1b0 [ 214.315436][T11449] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.315460][T11449] ____sys_sendmsg+0x972/0x9f0 [ 214.315492][T11449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.315524][T11449] ? import_iovec+0x73/0xa0 [ 214.315548][T11449] ___sys_sendmsg+0x2a5/0x360 [ 214.315576][T11449] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.315634][T11449] ? __fget_files+0x2a/0x420 [ 214.315647][T11449] ? __fget_files+0x3a0/0x420 [ 214.315671][T11449] __x64_sys_sendmsg+0x1bd/0x2a0 [ 214.315693][T11449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.315721][T11449] ? __pfx_ksys_write+0x10/0x10 [ 214.315749][T11449] do_syscall_64+0x14d/0xf80 [ 214.315772][T11449] ? trace_irq_disable+0x3b/0x150 [ 214.315788][T11449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.315806][T11449] ? clear_bhb_loop+0x40/0x90 [ 214.315827][T11449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.315844][T11449] RIP: 0033:0x7f87a9b9c819 [ 214.315861][T11449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.315874][T11449] RSP: 002b:00007f87aaa9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.315891][T11449] RAX: ffffffffffffffda RBX: 00007f87a9e15fa0 RCX: 00007f87a9b9c819 [ 214.315911][T11449] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000005 [ 214.315922][T11449] RBP: 00007f87aaa9c090 R08: 0000000000000000 R09: 0000000000000000 [ 214.315931][T11449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.315945][T11449] R13: 00007f87a9e16038 R14: 00007f87a9e15fa0 R15: 00007fff8fb43558 [ 214.315973][T11449] [ 214.317171][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 214.605411][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.614408][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 214.852612][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 214.876182][T11474] netlink: 'syz.4.1555': attribute type 30 has an invalid length. [ 214.891482][T11470] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 214.923272][T11470] netlink: 'syz.1.1554': attribute type 2 has an invalid length. [ 214.976896][ T5827] net_ratelimit: 1 callbacks suppressed [ 214.976913][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.998743][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.002774][T11487] delete_channel: no stack [ 215.152122][T11483] bond8 (unregistering): Released all slaves [ 215.200439][ T5827] IPVS: starting estimator thread 0... [ 215.267637][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1561'. [ 215.330491][T11502] IPVS: using max 28 ests per chain, 67200 per kthread [ 215.346719][T11512] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1561'. [ 215.395334][T11501] 8021q: VLANs not supported on ip6tnl0 [ 215.476604][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 215.612605][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.761344][T11544] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 215.801573][T11544] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 215.829441][T11544] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 215.834762][T11552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1570'. [ 215.881127][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 215.991907][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 216.654054][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.750608][T11609] syzkaller0: entered promiscuous mode [ 216.783599][T11609] syzkaller0: entered allmulticast mode [ 217.013563][T11629] syzkaller1: entered promiscuous mode [ 217.020988][T11629] syzkaller1: entered allmulticast mode [ 217.186990][T11637] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1586'. [ 217.198044][T11637] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 217.217837][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 217.226774][ C1] lec:lec_tx_timeout: lec0 [ 217.231474][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 217.392622][T11648] netlink: 'syz.2.1588': attribute type 21 has an invalid length. [ 217.396120][T11651] delete_channel: no stack [ 217.627246][T11660] IPv6: sit3: Disabled Multicast RS [ 217.734506][T11660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.917854][T11678] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 218.027322][T11686] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 218.392502][T11704] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 218.768171][T11720] netlink: 'syz.1.1608': attribute type 15 has an invalid length. [ 219.046931][T11735] bond8: option fail_over_mac: invalid value (16) [ 219.074663][T11735] bond8 (unregistering): Released all slaves [ 219.168883][T11750] x_tables: unsorted underflow at hook 3 [ 219.183330][T11754] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.435872][T11774] __nla_validate_parse: 18 callbacks suppressed [ 219.435891][T11774] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1622'. [ 219.468768][T11774] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1622'. [ 219.517209][T11769] syzkaller0: entered promiscuous mode [ 219.526189][T11769] syzkaller0: entered allmulticast mode [ 219.988007][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 220.123294][T11799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.145897][T11808] team1: entered promiscuous mode [ 220.164867][T11808] team1: entered allmulticast mode [ 220.825998][T11855] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 220.854003][T11855] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1639'. [ 221.037681][T11865] netlink: 'syz.1.1642': attribute type 2 has an invalid length. [ 221.106134][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 221.278640][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'. [ 221.465146][T11896] veth0: entered promiscuous mode [ 221.610952][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1651'. [ 221.629437][T11904] IPv6: addrconf: prefix option has invalid lifetime [ 221.906119][T11919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1654'. [ 221.980026][T11916] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1653'. [ 222.023220][T11916] syzkaller0: entered allmulticast mode [ 222.247598][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 222.256059][ C1] lec:lec_tx_timeout: lec0 [ 222.260858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 222.324674][T11883] veth0: left promiscuous mode [ 222.329929][T11943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1661'. [ 222.516264][T11948] syzkaller1: entered promiscuous mode [ 222.539384][T11948] syzkaller1: entered allmulticast mode [ 222.557852][T11951] netlink: 'syz.0.1664': attribute type 3 has an invalid length. [ 222.567034][T11951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.582883][T11957] syzkaller1: entered promiscuous mode [ 222.595031][T11957] syzkaller1: entered allmulticast mode [ 222.807425][T11976] netlink: 'syz.4.1670': attribute type 11 has an invalid length. [ 222.889381][T11984] xt_HMARK: spi-set and port-set can't be combined [ 222.969619][T11989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.977177][T11989] IPv6: NLM_F_CREATE should be set when creating new route [ 223.004209][T11989] lo: entered allmulticast mode [ 223.043406][T11989] tunl0: entered allmulticast mode [ 223.072261][T11989] gre0: entered allmulticast mode [ 223.148113][T11989] gretap0: entered allmulticast mode [ 223.156791][T12000] netlink: 'syz.0.1676': attribute type 21 has an invalid length. [ 223.202019][T11989] erspan0: entered allmulticast mode [ 223.245587][T11989] ip_vti0: entered allmulticast mode [ 223.274440][T11989] ip6_vti0: entered allmulticast mode [ 223.284456][T11989] sit0: entered allmulticast mode [ 223.305343][T11989] ip6tnl0: entered allmulticast mode [ 223.329823][T11989] ip6gre0: entered allmulticast mode [ 223.341947][T11989] syz_tun: entered allmulticast mode [ 223.377061][T11989] ip6gretap0: entered allmulticast mode [ 223.397136][T11989] bridge0: entered allmulticast mode [ 223.419163][T11989] vcan0: entered allmulticast mode [ 223.432961][T11989] team0: entered allmulticast mode [ 223.441484][T11989] team_slave_0: entered allmulticast mode [ 223.448849][T11989] team_slave_1: entered allmulticast mode [ 223.473016][T11989] dummy0: entered allmulticast mode [ 223.495447][T11989] nlmon0: entered allmulticast mode [ 223.503323][T11989] caif0: entered allmulticast mode [ 223.513539][T11989] vxcan0: entered allmulticast mode [ 223.521618][T11989] vxcan1: entered allmulticast mode [ 223.530569][T11989] veth0: entered allmulticast mode [ 223.540578][T11989] veth1: entered allmulticast mode [ 223.553972][T11989] wg0: entered allmulticast mode [ 223.584435][T11989] wg1: entered allmulticast mode [ 223.594976][T11989] wg2: entered allmulticast mode [ 223.608972][T11989] veth0_to_bridge: entered allmulticast mode [ 223.623814][T11989] veth1_to_bridge: entered allmulticast mode [ 223.651010][T11989] veth0_to_bond: entered allmulticast mode [ 223.671350][T11989] veth1_to_bond: entered allmulticast mode [ 223.689595][T11989] veth0_to_team: entered allmulticast mode [ 223.701123][T11989] veth1_to_team: entered allmulticast mode [ 223.721626][T11989] veth0_to_batadv: entered allmulticast mode [ 223.740416][T11989] batadv_slave_0: entered allmulticast mode [ 223.753107][T11989] xfrm0: entered allmulticast mode [ 223.768627][T11989] veth0_to_hsr: entered allmulticast mode [ 223.800777][T11989] veth1_virt_wifi: entered allmulticast mode [ 223.816975][T11989] veth0_virt_wifi: entered allmulticast mode [ 223.827432][T11989] virt_wifi0: entered allmulticast mode [ 223.836689][T11989] veth1_vlan: entered allmulticast mode [ 223.846952][T11989] veth0_vlan: entered allmulticast mode [ 223.869553][T11989] vlan0: entered allmulticast mode [ 223.887071][T11989] vlan1: entered allmulticast mode [ 223.896524][T11989] macvlan0: entered allmulticast mode [ 223.918008][T11989] macvlan1: entered allmulticast mode [ 223.924936][T11989] ipvlan0: entered allmulticast mode [ 223.947791][T11989] ipvlan1: entered allmulticast mode [ 223.956053][T11989] veth1_macvtap: entered allmulticast mode [ 223.975724][T11989] veth0_macvtap: entered allmulticast mode [ 223.998270][T11989] macvtap0: entered allmulticast mode [ 224.005344][T11989] macsec0: entered allmulticast mode [ 224.029704][T11989] geneve0: entered allmulticast mode [ 224.058827][T11989] geneve1: entered allmulticast mode [ 224.069168][T11989] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 224.076419][T11989] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 224.101609][T11989] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 224.122730][T11989] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 224.133492][T11989] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 224.156513][T11989] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 224.165090][T11989] bridge1: entered allmulticast mode [ 224.174357][T11989] bond1: entered allmulticast mode [ 224.180548][T11989] bond2: entered allmulticast mode [ 224.188681][T11989] syztnl0: entered allmulticast mode [ 224.194231][T11989] syztnl2: entered allmulticast mode [ 224.200406][T11989] bond3: left promiscuous mode [ 224.205378][T11989] bond3: entered allmulticast mode [ 224.217044][T11989] sit1: entered allmulticast mode [ 224.222913][T11989] bond4: left promiscuous mode [ 224.232083][T11989] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 224.240323][T11989] bond5: left promiscuous mode [ 224.245283][T11989] bridge2: left promiscuous mode [ 224.251647][T11989] bond5: entered allmulticast mode [ 224.256846][T11989] bridge2: entered allmulticast mode [ 224.271636][T11989] vlan2: entered allmulticast mode [ 224.282152][T11989] geneve2: entered allmulticast mode [ 224.288145][T11989] bond6: entered allmulticast mode [ 224.293909][T11989] bond7: entered allmulticast mode [ 224.299239][T11989] xfrm1: entered allmulticast mode [ 224.309033][T11989] bond8: entered allmulticast mode [ 224.322880][T11989] bridge3: entered allmulticast mode [ 224.332615][T11989] gtp0: entered allmulticast mode [ 224.346468][T11989] ip6tnl1: entered allmulticast mode [ 224.356801][T11989] bridge4: entered allmulticast mode [ 224.362921][T11989] ;: entered allmulticast mode [ 224.369386][T11989] @: entered allmulticast mode [ 224.383293][T11989] bond9: left promiscuous mode [ 224.389090][T11989] h: left promiscuous mode [ 224.394885][T11989] h: entered allmulticast mode [ 224.400163][T11989] mac80211_hwsim hwsim16 wlan3: entered allmulticast mode [ 224.408423][T11989] bridge5: entered allmulticast mode [ 224.414058][T11989] veth2: entered allmulticast mode [ 224.419647][T11989] veth3: entered allmulticast mode [ 224.425228][T11989] gretap1: left promiscuous mode [ 224.432404][T11989] 9: entered allmulticast mode [ 224.440127][T11989] veth4: entered allmulticast mode [ 224.445759][T11989] veth5: entered allmulticast mode [ 224.458271][T11989] veth6: entered allmulticast mode [ 224.464072][T11989] veth7: entered allmulticast mode [ 224.469998][T11989] gre1: entered allmulticast mode [ 224.483731][T11989] gre2: entered allmulticast mode [ 224.498362][T12000] __nla_validate_parse: 3 callbacks suppressed [ 224.498381][T12000] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1676'. [ 224.603939][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.622191][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.677587][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.695048][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.736245][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.774057][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.774147][T12036] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.790822][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.811657][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.868433][T12036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1684'. [ 225.008724][T12055] netlink: 'syz.1.1689': attribute type 6 has an invalid length. [ 225.033225][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 225.043224][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 225.157002][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 225.296991][T12072] tipc: Started in network mode [ 225.313829][T12072] tipc: Node identity 401, cluster identity 4711 [ 225.340913][T12072] tipc: Node number set to 1025 [ 225.397421][T12069] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1697'. [ 225.431426][T12083] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1701'. [ 225.500340][T12088] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1703'. [ 225.543675][T12093] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1706'. [ 225.554075][T12088] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 225.564901][T12094] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1703'. [ 225.599663][T12093] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 225.615221][T12094] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 225.624736][T12093] nbd: error processing sock list [ 225.900723][T12110] syzkaller1: entered promiscuous mode [ 225.906760][T12110] syzkaller1: entered allmulticast mode [ 226.044951][T12125] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.129485][T12135] xt_hashlimit: size too large, truncated to 1048576 [ 226.310008][T12147] gtp1: entered promiscuous mode [ 226.337736][T12147] gtp1: entered allmulticast mode [ 226.454099][T12148] bond10: Unable to set up delay as MII monitoring is disabled [ 226.512661][T12148] bond10 (unregistering): Released all slaves [ 227.079539][T12194] bond10: entered promiscuous mode [ 227.114241][T12194] bond10: entered allmulticast mode [ 227.135707][T12194] 8021q: adding VLAN 0 to HW filter on device bond10 [ 227.196901][T12200] pim6reg: entered allmulticast mode [ 227.267963][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 227.276251][ C1] lec:lec_tx_timeout: lec0 [ 227.282442][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.402822][T12219] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 227.421301][T12219] netlink: 'syz.3.1736': attribute type 2 has an invalid length. [ 227.584065][T12218] syzkaller0: entered promiscuous mode [ 227.604758][T12218] syzkaller0: entered allmulticast mode [ 227.625240][T12235] openvswitch: netlink: Key type 166 is out of range max 32 [ 227.689136][T12235] openvswitch: netlink: Key type 166 is out of range max 32 [ 227.697158][T12235] openvswitch: netlink: Key type 166 is out of range max 32 [ 229.702186][T12249] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 229.922218][T12280] vlan2: entered promiscuous mode [ 230.238685][T12300] netlink: 'syz.2.1757': attribute type 3 has an invalid length. [ 230.325569][T12307] __nla_validate_parse: 15 callbacks suppressed [ 230.325589][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 230.629614][T12319] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1762'. [ 231.194223][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 231.385791][T12355] netlink: 'syz.2.1774': attribute type 83 has an invalid length. [ 231.465261][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 231.468904][T12366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1776'. [ 231.490024][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1776'. [ 231.499781][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 231.504211][T12368] netlink: 'syz.0.1777': attribute type 2 has an invalid length. [ 231.552946][T12372] netlink: 'syz.0.1777': attribute type 2 has an invalid length. [ 231.900829][T12392] netlink: 'syz.4.1785': attribute type 5 has an invalid length. [ 231.929940][T12396] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1783'. [ 232.743026][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 232.786168][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1796'. [ 233.501782][T12469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.527762][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6240 ms [ 233.536238][ C1] lec:lec_tx_timeout: lec0 [ 233.541725][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 233.607241][T12473] bond11: Unable to set up delay as MII monitoring is disabled [ 233.619790][T12473] bond11 (unregistering): Released all slaves [ 234.046903][T12458] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 234.112705][T12496] netlink: 'syz.4.1814': attribute type 10 has an invalid length. [ 234.227584][T12499] syzkaller0: entered promiscuous mode [ 234.243777][T12499] 0: reclassify loop, rule prio 0, protocol 800 [ 234.350104][T12502] tipc: Started in network mode [ 234.355181][T12502] tipc: Node identity ce542654b5d7, cluster identity 4711 [ 234.365533][T12502] tipc: Enabled bearer , priority 0 [ 234.400768][T12510] hsr_slave_0: left promiscuous mode [ 234.442961][T12510] hsr_slave_1: left promiscuous mode [ 234.593344][T12502] syzkaller0: entered promiscuous mode [ 234.602546][T12502] syzkaller0: entered allmulticast mode [ 234.610545][T12502] tipc: Resetting bearer [ 234.713805][T12498] tipc: Resetting bearer [ 235.297633][ T5838] Bluetooth: hci1: command 0x0401 tx timeout [ 236.402599][T12498] tipc: Disabling bearer [ 236.469996][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.523565][ T5901] tipc: Node number set to 2072192596 [ 236.535022][T12573] __nla_validate_parse: 7 callbacks suppressed [ 236.535042][T12573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1834'. [ 236.663087][T12582] netlink: 'syz.4.1834': attribute type 7 has an invalid length. [ 236.687748][T12581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1837'. [ 236.699448][T12582] netlink: 'syz.4.1834': attribute type 8 has an invalid length. [ 236.712754][T12586] pim6reg1: entered promiscuous mode [ 236.726672][T12586] pim6reg1: entered allmulticast mode [ 236.735561][T12573] xt_hashlimit: size too large, truncated to 1048576 [ 236.815695][T12581] syzkaller0: entered promiscuous mode [ 236.821878][T12581] syzkaller0: entered allmulticast mode [ 236.845157][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1837'. [ 236.900255][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 237.234699][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 237.375599][T12631] Cannot find add_set index 46338 as target [ 237.396813][T12631] Cannot find add_set index 46338 as target [ 237.409659][T12631] Cannot find add_set index 46338 as target [ 237.418902][T12631] Cannot find add_set index 46338 as target [ 237.430822][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 237.442104][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 237.462375][T12631] Cannot find add_set index 46338 as target [ 237.472086][T12631] Cannot find add_set index 46338 as target [ 237.489299][T12631] Cannot find add_set index 46338 as target [ 237.508134][T12631] Cannot find add_set index 46338 as target [ 237.514970][T12631] Cannot find add_set index 46338 as target [ 237.546388][T12631] Cannot find add_set index 46338 as target [ 237.671053][T12645] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1858'. [ 237.809648][T12652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1861'. [ 237.994470][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 238.007592][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.015074][ C0] bridge0: topology change detected, propagating [ 238.123740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.137315][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 238.501014][T12694] bond0: entered promiscuous mode [ 238.506118][T12694] bond_slave_0: entered promiscuous mode [ 238.512309][T12694] bond_slave_1: entered promiscuous mode [ 238.525408][T12698] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 238.535403][T12694] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 238.543288][T12698] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 238.551949][T12694] bond0: left allmulticast mode [ 238.557264][T12694] bond_slave_0: left allmulticast mode [ 238.563591][T12694] bond_slave_1: left allmulticast mode [ 238.570775][T12694] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 238.593269][T12700] macvtap1: entered promiscuous mode [ 238.600180][T12700] macvtap1: entered allmulticast mode [ 238.610399][T12700] veth1_vlan: entered allmulticast mode [ 238.629110][T12706] macvtap2: entered promiscuous mode [ 238.636510][T12706] macvtap2: entered allmulticast mode [ 238.759894][T12715] netlink: 'syz.2.1882': attribute type 25 has an invalid length. [ 239.237088][T12746] syzkaller0: entered promiscuous mode [ 239.244102][T12746] syzkaller0: entered allmulticast mode [ 239.285885][T12751] syzkaller1: entered promiscuous mode [ 239.291449][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 239.291525][ C1] lec:lec_tx_timeout: lec0 [ 239.300668][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 239.316846][T12751] syzkaller1: entered allmulticast mode [ 239.738459][T12778] netlink: 'syz.2.1901': attribute type 1 has an invalid length. [ 239.849163][T12780] xt_limit: Overflow, try lower: 271964/0 [ 240.015737][T12789] ip6t_REJECT: ECHOREPLY is not supported [ 240.140455][T12795] SET target dimension over the limit! [ 240.410823][T12801] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 240.443935][T12801] bond6 (unregistering): Released all slaves [ 240.508398][T12802] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 240.663761][T12815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.729987][T12819] xt_TPROXY: Can be used only with -p tcp or -p udp [ 240.775897][T12825] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 240.891743][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.900885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.048689][T12840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.057850][T12840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.066719][T12840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.251940][T12850] syzkaller1: entered promiscuous mode [ 241.266507][T12850] syzkaller1: entered allmulticast mode [ 241.650510][T12893] netlink: 'syz.4.1936': attribute type 12 has an invalid length. [ 241.861955][T12902] netlink: 'syz.2.1937': attribute type 7 has an invalid length. [ 242.062225][T12907] __nla_validate_parse: 12 callbacks suppressed [ 242.062245][T12907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1939'. [ 242.114244][T12909] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1941'. [ 242.175932][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'. [ 242.215861][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 243.412800][T12952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1948'. [ 244.680022][T12898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.704196][T12938] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 244.720249][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 244.739304][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 244.765074][T12938] netlink: 'syz.4.1942': attribute type 2 has an invalid length. [ 244.773669][T12938] netlink: 'syz.4.1942': attribute type 2 has an invalid length. [ 244.782453][T12938] netlink: 'syz.4.1942': attribute type 2 has an invalid length. [ 244.852219][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 244.861930][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 244.873973][T12959] netlink: 'syz.1.1949': attribute type 29 has an invalid length. [ 244.875717][T12960] xt_l2tp: invalid flags combination: 8 [ 245.047581][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 245.056672][ C1] lec:lec_tx_timeout: lec0 [ 245.061694][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.968357][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.978069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.087716][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 250.095756][ C1] lec:lec_tx_timeout: lec0 [ 250.100543][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 253.368156][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.107725][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 255.116064][ C1] lec:lec_tx_timeout: lec0 [ 255.120923][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 255.940055][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.198711][T12972] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1953'. [ 259.208456][T12971] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1953'. [ 259.215979][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 259.368698][T12990] x_tables: duplicate entry at hook 3 [ 259.638615][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1965'. [ 259.683673][T13020] xt_TCPMSS: Only works on TCP SYN packets [ 259.930860][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 259.943169][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 259.952854][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1970'. [ 259.966320][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 259.985654][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 260.015795][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1970'. [ 260.127511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 260.135933][ C1] lec:lec_tx_timeout: lec0 [ 260.140583][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 260.546776][T13073] syzkaller1: entered promiscuous mode [ 260.561783][T13073] syzkaller1: entered allmulticast mode [ 260.592120][T13074] syzkaller1: entered promiscuous mode [ 260.599061][T13074] syzkaller1: entered allmulticast mode [ 260.970987][T13100] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 261.053366][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.062371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.515971][T13145] tc_dump_action: action bad kind [ 261.587206][T13151] netlink: 'syz.3.2003': attribute type 21 has an invalid length. [ 261.617855][T13151] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 262.262959][T13195] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 262.657114][T13218] syzkaller0: entered promiscuous mode [ 262.663532][T13218] syzkaller0: entered allmulticast mode [ 263.154285][T13230] netlink: 'syz.2.2029': attribute type 1 has an invalid length. [ 263.266422][T13230] bond11: entered promiscuous mode [ 263.304214][T13241] netlink: 'syz.0.2033': attribute type 2 has an invalid length. [ 263.349864][T13230] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.398437][T13242] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.419179][T13242] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 263.444039][T13242] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 263.457416][T13242] bond11: (slave ip6gre1): making interface the new active one [ 263.467198][T13242] ip6gre1: entered promiscuous mode [ 263.475095][T13242] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 263.485042][T13247] netlink: 'syz.3.2032': attribute type 3 has an invalid length. [ 263.700272][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.720297][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.727622][T13268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.749283][T13262] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.266268][T13306] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 264.365960][T13306] bond6: (slave bridge3): Enslaving as a backup interface with an up link [ 264.379745][T13312] __nla_validate_parse: 11 callbacks suppressed [ 264.379764][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 264.379887][T13314] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 264.389109][T13316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2057'. [ 264.418613][T13312] bond0: entered promiscuous mode [ 264.421443][T13316] netlink: 'syz.4.2057': attribute type 7 has an invalid length. [ 264.424605][T13312] bond_slave_0: entered promiscuous mode [ 264.432473][T13316] netlink: 'syz.4.2057': attribute type 8 has an invalid length. [ 264.448190][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'. [ 264.448293][T13312] bond_slave_1: entered promiscuous mode [ 264.464559][T13312] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 264.473768][T13312] hsr1: entered promiscuous mode [ 264.524691][T13316] veth1: entered promiscuous mode [ 264.538926][T13316] veth0: entered promiscuous mode [ 264.545046][T13316] erspan0: entered promiscuous mode [ 264.694570][T13337] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 264.954576][T13362] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2066'. [ 265.146309][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2069'. [ 265.147539][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 265.158896][T13368] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 265.163769][ C1] lec:lec_tx_timeout: lec0 [ 265.175762][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 265.185997][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2069'. [ 265.203704][T13368] netlink: 'syz.1.2068': attribute type 2 has an invalid length. [ 265.236307][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2069'. [ 265.365618][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 265.456176][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2076'. [ 265.480446][T13382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.495034][T13375] team0 (unregistering): Port device team_slave_0 removed [ 265.526158][T13375] team0 (unregistering): Port device team_slave_1 removed [ 265.621561][T13395] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 265.650960][T13395] bond11: (slave lo): Enslaving as an active interface with an up link [ 265.683341][T13403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2079'. [ 265.683382][T13395] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 265.749707][T13403] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.757875][T13403] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.398756][T13457] bond12: entered promiscuous mode [ 266.419852][T13457] 8021q: adding VLAN 0 to HW filter on device bond12 [ 266.425878][T13463] ipt_REJECT: TCP_RESET invalid for non-tcp [ 266.674565][T13475] validate_nla: 4 callbacks suppressed [ 266.674584][T13475] netlink: 'syz.0.2097': attribute type 12 has an invalid length. [ 266.719917][T13475] syzkaller1: entered promiscuous mode [ 266.725616][T13475] syzkaller1: entered allmulticast mode [ 266.896476][T13488] syzkaller0: entered promiscuous mode [ 266.902256][T13488] syzkaller0: entered allmulticast mode [ 267.144175][T13508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.338105][T13508] netlink: 'syz.0.2107': attribute type 10 has an invalid length. [ 267.454306][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.468167][T13508] bridge_slave_1: left allmulticast mode [ 267.487799][T13508] bridge_slave_1: left promiscuous mode [ 267.494055][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.537135][T13508] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 268.173960][T13574] syzkaller0: left promiscuous mode [ 269.010237][T13614] syzkaller0: entered promiscuous mode [ 269.016069][T13614] syzkaller0: entered allmulticast mode [ 269.240395][T13651] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 270.191748][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 270.200071][ C1] lec:lec_tx_timeout: lec0 [ 270.204778][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 270.611120][T13648] vlan4: entered promiscuous mode [ 270.616485][T13648] geneve1: entered promiscuous mode [ 270.622855][T13648] vlan4: entered allmulticast mode [ 270.782047][T13663] xt_hashlimit: size too large, truncated to 1048576 [ 270.870204][T13673] bond12: entered promiscuous mode [ 270.875693][T13673] bond12: entered allmulticast mode [ 270.883606][T13673] 8021q: adding VLAN 0 to HW filter on device bond12 [ 270.949649][T13678] netlink: 'syz.2.2148': attribute type 2 has an invalid length. [ 270.992571][T13678] __nla_validate_parse: 13 callbacks suppressed [ 270.992591][T13678] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2148'. [ 271.030434][T13675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2147'. [ 271.074560][T13690] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2153'. [ 271.226396][T13695] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2155'. [ 271.251770][T13695] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2155'. [ 271.287720][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.429648][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'. [ 271.725897][T13712] bond13: option mode: invalid value (133) [ 271.738483][T13712] bond13 (unregistering): Released all slaves [ 271.967285][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'. [ 271.978255][T13727] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 272.051364][T13717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2162'. [ 272.613993][T13761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2168'. [ 272.638586][T13761] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.077579][T13770] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.104204][T13770] bond8: (slave lo): Enslaving as an active interface with an up link [ 273.121775][T13770] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 273.264581][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2178'. [ 273.911974][T13823] netdevsim netdevsim4: Direct firmware load for .. @ failed with error -2 [ 273.916855][T13828] netlink: 'syz.0.2194': attribute type 29 has an invalid length. [ 273.922256][T13823] netdevsim netdevsim4: Falling back to sysfs fallback for: .. @ [ 273.938909][T13828] netlink: 'syz.0.2194': attribute type 29 has an invalid length. [ 273.968872][T13830] unsupported nla_type 58 [ 273.991313][T13825] syzkaller0: entered promiscuous mode [ 274.211355][T13840] netlink: 'syz.1.2198': attribute type 39 has an invalid length. [ 274.534522][T13863] syzkaller0: entered promiscuous mode [ 274.548213][T13863] syzkaller0: entered allmulticast mode [ 274.639646][T13866] Cannot find add_set index 2 as target [ 275.217588][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 275.225730][ C1] lec:lec_tx_timeout: lec0 [ 275.230908][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 275.302242][T13905] syzkaller0: entered promiscuous mode [ 275.317388][T13905] syzkaller0: entered allmulticast mode [ 275.806935][T13943] netlink: 'syz.3.2227': attribute type 3 has an invalid length. [ 276.045498][T13956] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 276.143633][T13956] bond13: (slave geneve3): making interface the new active one [ 276.196929][T13964] __nla_validate_parse: 9 callbacks suppressed [ 276.196949][T13964] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2230'. [ 276.218758][T13956] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 276.272910][ T3524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 276.304956][ T3524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 276.332266][ T3524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 276.382179][ T3524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 276.600007][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2238'. [ 276.635033][T13995] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2238'. [ 276.727452][T13995] bond9 (unregistering): Released all slaves [ 276.951329][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 277.085761][T14039] bond9: entered promiscuous mode [ 277.091757][T14039] bond9: entered allmulticast mode [ 277.119420][T14044] netlink: 'syz.4.2252': attribute type 8 has an invalid length. [ 277.307428][T14052] netlink: 'syz.4.2255': attribute type 8 has an invalid length. [ 277.318161][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 277.373952][T14055] bond14 (unregistering): Released all slaves [ 277.394911][T14059] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 277.645782][ T5838] Bluetooth: hci1: link tx timeout [ 277.653015][ T5838] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 277.655271][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 277.682456][T14080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2261'. [ 277.705553][T14085] netlink: 'syz.0.2263': attribute type 2 has an invalid length. [ 277.759894][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2265'. [ 277.933988][T14097] syzkaller0: entered promiscuous mode [ 277.944597][T14097] 0: reclassify loop, rule prio 0, protocol 800 [ 278.253257][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 278.294484][T14108] tipc: Started in network mode [ 278.300179][T14108] tipc: Node identity ac14140f, cluster identity 1 [ 278.308145][T14108] tipc: New replicast peer: 255.255.255.255 [ 278.315161][T14108] tipc: Enabled bearer , priority 10 [ 278.325233][T14109] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2273'. [ 278.385247][T14112] syzkaller0: entered promiscuous mode [ 278.474555][T14116] netlink: 'syz.2.2276': attribute type 1 has an invalid length. [ 278.504699][T14116] 8021q: adding VLAN 0 to HW filter on device bond14 [ 278.561087][T14116] bond14: (slave veth9): Enslaving as an active interface with a down link [ 278.576529][T14116] veth0_to_bond: left allmulticast mode [ 278.587041][T14116] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 278.620075][T14121] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 278.651755][T14121] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 278.663529][T14116] bond14: (slave veth11): Enslaving as an active interface with a down link [ 278.684179][T14116] netlink: 'syz.2.2276': attribute type 1 has an invalid length. [ 278.709406][T14116] netlink: 'syz.2.2276': attribute type 2 has an invalid length. [ 278.792651][T14138] : renamed from bond0 (while UP) [ 279.066519][T14162] nbd: couldn't find a device at index 1048580 [ 279.124402][T14164] netlink: 'syz.0.2290': attribute type 1 has an invalid length. [ 279.241630][T14172] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 279.267894][T14164] netlink: 'syz.0.2290': attribute type 1 has an invalid length. [ 279.285100][T14176] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 279.378517][T14176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.392513][T14184] bond0: (slave veth0_to_bond): making interface the new active one [ 279.402563][T14184] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 279.460056][T14190] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 279.520927][T14176] 8021q: adding VLAN 0 to HW filter on device bond14 [ 279.534949][T14176] bond0: (slave bond14): Enslaving as an active interface with a down link [ 279.550972][ T9] tipc: Node number set to 2886997007 [ 279.689681][ T5839] Bluetooth: hci1: command 0x0401 tx timeout [ 280.237551][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 280.245955][ C1] lec:lec_tx_timeout: lec0 [ 280.251186][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.344399][T14236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.366864][T14239] IPVS: sync thread started: state = MASTER, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 280.382845][T14238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.364439][T14300] netlink: 'syz.2.2327': attribute type 11 has an invalid length. [ 281.397598][T14300] __nla_validate_parse: 139 callbacks suppressed [ 281.397615][T14300] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2327'. [ 281.470649][T14313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.690979][T14330] erspan0: entered promiscuous mode [ 281.716904][T14330] erspan0: entered allmulticast mode [ 281.832381][T14335] syzkaller0: entered promiscuous mode [ 281.838478][T14335] syzkaller0: entered allmulticast mode [ 281.851464][T14335] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2339'. [ 281.894113][T14345] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2342'. [ 281.929125][T14345] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2342'. [ 281.955721][T14345] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2342'. [ 281.978921][T14345] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2342'. [ 282.009425][T14350] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.2343'. [ 282.018421][T14352] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2344'. [ 282.029715][T14352] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2344'. [ 282.041889][T14345] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2342'. [ 282.520035][T14334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.561319][T14334] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 282.629454][T14334] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.687247][T14334] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 282.898157][T14334] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 282.904199][T14334] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 283.036074][T14334] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.048610][T14414] syzkaller0: entered promiscuous mode [ 283.071782][T14334] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 283.078739][T14420] validate_nla: 3 callbacks suppressed [ 283.078757][T14420] netlink: 'syz.4.2358': attribute type 3 has an invalid length. [ 283.088421][T14414] syzkaller0: entered allmulticast mode [ 283.150469][T14422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.895110][T14472] 8021q: VLANs not supported on syzkaller1 [ 283.984902][T14479] xt_ipcomp: unknown flags 1D [ 284.200408][T14495] ip6tnl0: mtu less than device minimum [ 284.576739][T14520] netlink: 'syz.0.2377': attribute type 1 has an invalid length. [ 285.267589][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 285.276178][ C1] lec:lec_tx_timeout: lec0 [ 285.281060][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.822720][T14565] ip6t_REJECT: ECHOREPLY is not supported [ 285.964142][T14576] ieee802154 phy1 wpan1: encryption failed: -90 [ 286.039098][T14586] xt_HMARK: spi-set and port-set can't be combined [ 286.226136][T14585] veth13: entered promiscuous mode [ 286.523765][T14612] __nla_validate_parse: 38 callbacks suppressed [ 286.523785][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2396'. [ 286.573048][T14619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2400'. [ 286.600416][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 286.612886][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 286.945085][T14650] delete_channel: no stack [ 287.030065][T14657] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2408'. [ 287.075685][T14657] vcan0: entered promiscuous mode [ 287.107821][T14657] vcan0: entered allmulticast mode [ 287.132637][T14664] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 287.306859][T14681] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 287.352386][T14681] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.382843][T14688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.394533][T14691] xt_TCPMSS: Only works on TCP SYN packets [ 287.411934][T14688] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 287.458631][T14688] bond7: (slave vcan0): Error -95 calling set_mac_address [ 287.514423][T14689] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 287.538377][T14689] bond7: (slave vcan0): Error -95 calling set_mac_address [ 287.582891][T14694] netlink: 'syz.0.2417': attribute type 2 has an invalid length. [ 287.618012][T14694] 9: entered promiscuous mode [ 287.725346][T14705] netlink: 'syz.1.2419': attribute type 8 has an invalid length. [ 287.792943][T14705] macvtap1: entered promiscuous mode [ 287.818512][T14705] macvtap1: entered allmulticast mode [ 287.848049][T14705] veth1_vlan: entered allmulticast mode [ 288.138167][T14737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'. [ 288.204841][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 288.228227][T14744] block nbd2: Unsupported socket: should be TCP or UNIX. [ 288.343675][T14755] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2431'. [ 288.996321][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2440'. [ 289.302614][T14807] tipc: Enabling of bearer rejected, failed to enable media [ 289.353209][T14814] netlink: 'syz.4.2443': attribute type 3 has an invalid length. [ 289.466768][T14820] IPv6: sit3: Disabled Multicast RS [ 289.480002][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 289.496879][T14820] sit3: entered allmulticast mode [ 289.708326][T14834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.158524][T14871] syzkaller1: entered allmulticast mode [ 290.254988][T14879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.262991][T14879] IPv6: NLM_F_CREATE should be set when creating new route [ 290.270830][T14879] IPv6: NLM_F_CREATE should be set when creating new route [ 290.278646][T14879] IPv6: NLM_F_CREATE should be set when creating new route [ 290.328026][T14891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.387640][T14891] netlink: 'syz.4.2462': attribute type 7 has an invalid length. [ 290.574835][T14908] x9: renamed from bridge_slave_0 (while UP) [ 290.793702][T14918] veth13: entered promiscuous mode [ 290.925228][T14929] netlink: 'syz.1.2471': attribute type 5 has an invalid length. [ 291.103521][T14946] netlink: 'syz.2.2474': attribute type 39 has an invalid length. [ 291.127546][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 291.136154][ C1] lec:lec_tx_timeout: lec0 [ 291.141964][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.654427][T14972] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 291.669009][T14972] __nla_validate_parse: 9 callbacks suppressed [ 291.669026][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2480'. [ 291.732497][T14980] netlink: 'syz.4.2483': attribute type 11 has an invalid length. [ 292.194152][T15010] netlink: 'syz.4.2487': attribute type 9 has an invalid length. [ 292.641094][T15033] sctp: [Deprecated]: syz.4.2492 (pid 15033) Use of int in maxseg socket option. [ 292.641094][T15033] Use struct sctp_assoc_value instead [ 292.845436][T15051] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 292.887590][T15051] netlink: 'syz.4.2496': attribute type 3 has an invalid length. [ 292.952705][T15051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2496'. [ 292.959970][T15054] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 293.025873][T15051] xt_l2tp: invalid flags combination: 0 [ 293.078452][T15054] netlink: 'syz.4.2496': attribute type 2 has an invalid length. [ 293.094367][T15064] netlink: 'syz.2.2498': attribute type 1 has an invalid length. [ 293.125780][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 293.175971][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2498'. [ 293.290634][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.327606][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 293.977243][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 294.026388][T15132] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2517'. [ 294.473900][T15159] ipt_REJECT: TCP_RESET invalid for non-tcp [ 294.475759][T15160] syzkaller0: entered promiscuous mode [ 294.487731][T15160] syzkaller0: entered allmulticast mode [ 294.589154][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2527'. [ 294.725678][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2528'. [ 294.804424][T15180] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2529'. [ 294.839224][T15176] bond16 (unregistering): Released all slaves [ 294.915237][T15180] bond0 (unregistering): left promiscuous mode [ 294.947703][T15180] bond_slave_0: left promiscuous mode [ 294.971260][T15180] bond_slave_1: left promiscuous mode [ 295.004562][T15180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.026448][T15180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.044581][T15180] bond0 (unregistering): Released all slaves [ 295.192136][T15195] openvswitch: netlink: Duplicate or invalid key (type 0). [ 295.224462][T15195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.288163][T15200] validate_nla: 5 callbacks suppressed [ 295.288182][T15200] netlink: 'syz.1.2535': attribute type 4 has an invalid length. [ 295.563955][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 295.629119][T15220] netlink: 'syz.4.2537': attribute type 11 has an invalid length. [ 296.055189][T15255] netlink: 'syz.3.2548': attribute type 1 has an invalid length. [ 296.157523][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 296.166425][ C1] lec:lec_tx_timeout: lec0 [ 296.172595][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.235914][T15262] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 296.264419][T15261] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 296.795873][T15301] __nla_validate_parse: 8 callbacks suppressed [ 296.795896][T15301] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2563'. [ 296.857056][T15306] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 296.909189][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 296.920201][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2567'. [ 296.933074][T15310] openvswitch: netlink: Multiple metadata blocks provided [ 297.113556][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2571'. [ 297.138534][T15326] lo speed is unknown, defaulting to 1000 [ 297.148818][T15326] lo speed is unknown, defaulting to 1000 [ 297.158256][T15326] lo speed is unknown, defaulting to 1000 [ 297.180344][T15326] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 297.272322][T15326] lo speed is unknown, defaulting to 1000 [ 297.304334][T15326] lo speed is unknown, defaulting to 1000 [ 297.315387][T15326] lo speed is unknown, defaulting to 1000 [ 297.326810][T15326] lo speed is unknown, defaulting to 1000 [ 297.337000][T15326] lo speed is unknown, defaulting to 1000 [ 297.354975][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2573'. [ 297.385269][T15343] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.664641][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2581'. [ 297.759796][T15375] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20003 [ 297.822217][T15379] Bluetooth: MGMT ver 1.23 [ 297.910221][T15385] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2586'. [ 297.914602][T15384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2585'. [ 298.012773][T15391] netlink: 'syz.1.2589': attribute type 21 has an invalid length. [ 298.030241][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'. [ 298.256142][T15411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2596'. [ 298.428303][T15421] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 298.704816][T15438] dvmrp0: entered allmulticast mode [ 298.823441][T15449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.044447][T15461] IPVS: set_ctl: invalid protocol: 4 172.30.0.2:20001 [ 299.839866][T15500] netlink: 'syz.4.2619': attribute type 1 has an invalid length. [ 299.948653][T15500] 8021q: adding VLAN 0 to HW filter on device bond16 [ 299.973735][T15501] bond16: (slave batadv1): Opening slave failed [ 300.325586][T15523] netlink: 'syz.0.2626': attribute type 4 has an invalid length. [ 300.411919][T15525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 300.468344][T15525] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 300.509466][T15525] gretap3: entered promiscuous mode [ 300.515095][T15525] gretap3: entered allmulticast mode [ 300.755621][T15552] netlink: 'syz.3.2638': attribute type 61 has an invalid length. [ 300.906876][T15564] block nbd0: Unsupported socket: should be TCP or UNIX. [ 301.057808][T15577] lo: entered promiscuous mode [ 301.073124][T15577] netlink: 'syz.1.2647': attribute type 2 has an invalid length. [ 301.097592][T15577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.187523][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.195844][ C1] lec:lec_tx_timeout: lec0 [ 301.200710][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.276726][T15586] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 301.314491][T15586] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 301.844188][T15614] syzkaller1: entered promiscuous mode [ 301.851257][T15614] syzkaller1: entered allmulticast mode [ 302.520996][T15649] sctp: [Deprecated]: syz.1.2672 (pid 15649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.520996][T15649] Use struct sctp_sack_info instead [ 302.638509][T15656] __nla_validate_parse: 21 callbacks suppressed [ 302.638529][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2673'. [ 302.675628][T15657] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2674'. [ 302.935590][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2680'. [ 302.949454][T15680] syzkaller1: entered promiscuous mode [ 302.955753][T15680] syzkaller1: entered allmulticast mode [ 302.957702][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2680'. [ 303.062787][T15686] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2683'. [ 303.130050][T15690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2684'. [ 303.148415][T15690] netlink: 'syz.0.2684': attribute type 1 has an invalid length. [ 303.159744][T15690] netlink: 'syz.0.2684': attribute type 3 has an invalid length. [ 303.168350][T15690] netlink: 'syz.0.2684': attribute type 7 has an invalid length. [ 303.176792][T15690] netlink: 'syz.0.2684': attribute type 8 has an invalid length. [ 303.185687][T15690] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2684'. [ 303.195514][T15690] NCSI netlink: No device for ifindex 131092 [ 303.418675][T15706] xt_hashlimit: size too large, truncated to 1048576 [ 303.488391][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'. [ 303.721022][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.729315][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.741222][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.756295][T15728] x_tables: unsorted underflow at hook 2 [ 303.762712][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.797737][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.805072][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.836567][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.861528][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.938146][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.946487][T15723] ipt_ECN: cannot use operation on non-tcp rule [ 303.980753][T15744] x_tables: duplicate entry at hook 1 [ 303.999486][T15744] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2697'. [ 304.027852][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2697'. [ 304.290118][T15756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.415995][T15768] IPv6: sit3: Disabled Multicast RS [ 304.637072][T15782] pim6reg1: entered promiscuous mode [ 304.646250][T15782] pim6reg1: entered allmulticast mode [ 304.853343][T15805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.860858][T15805] IPv6: NLM_F_CREATE should be set when creating new route [ 304.878128][T15810] netlink: Unknown conntrack attr (0) [ 304.941660][T15813] ip6t_srh: unknown srh match flags 5F28 [ 305.446367][T15845] lo speed is unknown, defaulting to 1000 [ 305.498244][T15851] IPVS: sh: FWM 3 0x00000003 - no destination available [ 305.513700][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 305.524745][T15851] IPVS: sh: FWM 3 0x00000003 - no destination available [ 305.541954][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 305.559322][T15848] vlan3: entered allmulticast mode [ 305.567993][T15848] bridge9: entered allmulticast mode [ 305.623145][T15848] bridge9: port 1(bond10) entered blocking state [ 305.630031][T15848] bridge9: port 1(bond10) entered disabled state [ 305.636899][T15848] bond10: entered allmulticast mode [ 305.648459][T15848] bond10: entered promiscuous mode [ 305.955513][T15876] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 306.101555][T15883] ipt_REJECT: TCP_RESET invalid for non-tcp [ 306.207522][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 306.215615][ C1] lec:lec_tx_timeout: lec0 [ 306.221401][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 306.731791][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.765857][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.781588][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.809138][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.820145][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.831771][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.842527][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.854036][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.864871][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.876254][T15939] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 307.887908][T15969] syzkaller0: Caught tx_queue_len zero misconfig [ 308.232074][T15998] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 308.274365][T16002] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 308.570376][T16018] FAULT_INJECTION: forcing a failure. [ 308.570376][T16018] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 308.595683][T16018] CPU: 1 UID: 0 PID: 16018 Comm: syz.1.2773 Not tainted syzkaller #0 PREEMPT(full) [ 308.595711][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.595733][T16018] Call Trace: [ 308.595740][T16018] [ 308.595748][T16018] dump_stack_lvl+0xe8/0x150 [ 308.595779][T16018] should_fail_ex+0x412/0x560 [ 308.595810][T16018] _copy_from_iter+0x1d3/0x1670 [ 308.595832][T16018] ? rcu_is_watching+0x15/0xb0 [ 308.595861][T16018] ? __pfx__copy_from_iter+0x10/0x10 [ 308.595885][T16018] ? netlink_sendmsg+0x650/0xb40 [ 308.595903][T16018] ? skb_put+0x11b/0x210 [ 308.595925][T16018] netlink_sendmsg+0x6c0/0xb40 [ 308.595953][T16018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.595974][T16018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 308.595998][T16018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.596019][T16018] ____sys_sendmsg+0x972/0x9f0 [ 308.596046][T16018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.596074][T16018] ? import_iovec+0x73/0xa0 [ 308.596096][T16018] ___sys_sendmsg+0x2a5/0x360 [ 308.596125][T16018] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.596175][T16018] ? __fget_files+0x2a/0x420 [ 308.596191][T16018] ? __fget_files+0x3a0/0x420 [ 308.596212][T16018] __x64_sys_sendmsg+0x1bd/0x2a0 [ 308.596236][T16018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.596268][T16018] ? __pfx_ksys_write+0x10/0x10 [ 308.596296][T16018] do_syscall_64+0x14d/0xf80 [ 308.596319][T16018] ? trace_irq_disable+0x3b/0x150 [ 308.596334][T16018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.596353][T16018] ? clear_bhb_loop+0x40/0x90 [ 308.596373][T16018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.596392][T16018] RIP: 0033:0x7feaca99c819 [ 308.596410][T16018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.596425][T16018] RSP: 002b:00007feacb87b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.596445][T16018] RAX: ffffffffffffffda RBX: 00007feacac15fa0 RCX: 00007feaca99c819 [ 308.596458][T16018] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 308.596468][T16018] RBP: 00007feacb87b090 R08: 0000000000000000 R09: 0000000000000000 [ 308.596479][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.596488][T16018] R13: 00007feacac16038 R14: 00007feacac15fa0 R15: 00007ffc0af5ea98 [ 308.596515][T16018] [ 308.920207][T16020] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 309.117032][T16029] syzkaller0: entered promiscuous mode [ 309.123328][T16029] syzkaller0: entered allmulticast mode [ 309.132759][T16040] lo speed is unknown, defaulting to 1000 [ 309.317836][T16046] __nla_validate_parse: 12 callbacks suppressed [ 309.317856][T16046] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2781'. [ 309.390609][T16050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2782'. [ 309.549084][T16056] xt_hashlimit: size too large, truncated to 1048576 [ 309.633931][T16062] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2787'. [ 309.680736][T16062] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2787'. [ 309.781285][T16040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2780'. [ 310.281637][T16086] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2793'. [ 310.528026][T16096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2797'. [ 310.562203][T16095] bond9: option miimon: invalid value (18446744073709551585) [ 310.589338][T16103] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2799'. [ 310.608441][T16095] bond9: option miimon: allowed values 0 - 2147483647 [ 310.630355][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2799'. [ 310.642036][T16102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2796'. [ 310.655100][T16095] bond9 (unregistering): Released all slaves [ 310.902433][T16110] 8021q: adding VLAN 0 to HW filter on device bond11 [ 310.910610][T16110] bridge0: port 3(bond11) entered blocking state [ 310.918139][T16110] bridge0: port 3(bond11) entered disabled state [ 310.927238][T16110] bond11: entered allmulticast mode [ 310.935482][T16110] bond11: entered promiscuous mode [ 311.067151][T16126] bridge0: left allmulticast mode [ 311.237532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 311.246155][ C1] lec:lec_tx_timeout: lec0 [ 311.251180][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.542812][T16158] tipc: Enabling of bearer rejected, failed to enable media [ 311.775248][T16182] netlink: 'syz.1.2825': attribute type 13 has an invalid length. [ 311.784543][T16183] netlink: 'syz.1.2825': attribute type 11 has an invalid length. [ 312.751659][T16244] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 312.932551][T16256] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 313.446863][T16283] syzkaller0: entered promiscuous mode [ 313.474252][T16283] syzkaller0: entered allmulticast mode [ 313.507180][T16297] veth1_macvtap: left promiscuous mode [ 313.513096][T16297] macsec0: entered promiscuous mode [ 313.520104][T16297] macsec0: entered allmulticast mode [ 313.561089][T16283] veth1_macvtap: entered promiscuous mode [ 313.571115][T16283] veth1_macvtap: entered allmulticast mode [ 313.591553][T16283] macsec0: left promiscuous mode [ 313.608204][T16283] macsec0: left allmulticast mode [ 313.630734][T16283] veth1_macvtap: left allmulticast mode [ 313.717333][T16307] tipc: Failed to remove unknown binding: 66,0,0/3553499876:2432767280/2432767281 [ 313.743495][T16307] tipc: Failed to remove unknown binding: 66,0,0/3553499876:2432767280/2432767281 [ 315.532877][T16329] netlink: 'syz.0.2869': attribute type 10 has an invalid length. [ 315.678528][T16342] __nla_validate_parse: 85 callbacks suppressed [ 315.678548][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 315.720871][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 315.928736][T16355] netlink: 'syz.0.2878': attribute type 1 has an invalid length. [ 315.929204][T16354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2877'. [ 315.968779][T16354] netlink: 'syz.3.2877': attribute type 7 has an invalid length. [ 315.977084][T16354] netlink: 'syz.3.2877': attribute type 8 has an invalid length. [ 315.998560][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 316.020485][T16363] netlink: 'syz.3.2877': attribute type 24 has an invalid length. [ 316.032696][T16355] bond9: entered promiscuous mode [ 316.052604][T16355] 8021q: adding VLAN 0 to HW filter on device bond9 [ 316.069766][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2879'. [ 316.102648][T16366] 8021q: adding VLAN 0 to HW filter on device bond9 [ 316.147532][T16366] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 316.174775][T16366] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 316.193205][T16366] bond9: (slave ip6gre1): making interface the new active one [ 316.203793][T16366] ip6gre1: entered promiscuous mode [ 316.216831][T16366] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 316.257577][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 316.267719][ C1] lec:lec_tx_timeout: lec0 [ 316.272856][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 316.437902][T16387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2886'. [ 316.775101][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 316.855188][T16411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2892'. [ 316.921894][T16411] netlink: 'syz.3.2892': attribute type 7 has an invalid length. [ 316.933018][T16411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2892'. [ 317.012080][T16427] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 317.263805][T16437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2897'. [ 317.376383][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.425218][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.436460][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.444739][T16448] nbd: must specify at least one socket [ 317.454208][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.468074][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.477728][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.513095][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.521955][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.532337][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.542090][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.551538][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.791245][T16455] bond8 (unregistering): Released all slaves [ 317.941334][T16450] lo speed is unknown, defaulting to 1000 [ 318.137303][T16491] net_ratelimit: 9498 callbacks suppressed [ 318.137323][T16491] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 318.370601][T16504] lo: Caught tx_queue_len zero misconfig [ 318.491877][T16450] chnl_net:caif_netlink_parms(): no params data found [ 318.753389][T16450] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.783089][T16450] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.797764][T16450] bridge_slave_0: entered allmulticast mode [ 318.814200][T16450] bridge_slave_0: entered promiscuous mode [ 318.826924][T16450] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.835580][T16450] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.843739][T16450] bridge_slave_1: entered allmulticast mode [ 318.852611][T16450] bridge_slave_1: entered promiscuous mode [ 318.971835][T16450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.035796][T16450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.166767][T16450] team0: Port device team_slave_0 added [ 319.176462][T16450] team0: Port device team_slave_1 added [ 319.239530][T16450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.246619][T16450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.276912][T16450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.312969][T16450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.326433][T16450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.355252][T16450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.491801][T16450] hsr_slave_0: entered promiscuous mode [ 319.502499][T16450] hsr_slave_1: entered promiscuous mode [ 319.512670][T16587] netlink: 'syz.0.2934': attribute type 1 has an invalid length. [ 319.522733][T16450] debugfs: 'hsr0' already exists in 'hsr' [ 319.576724][T16450] Cannot create hsr debugfs directory [ 319.607790][ T5839] Bluetooth: hci5: command tx timeout [ 320.106170][T16605] syzkaller0: entered promiscuous mode [ 320.112856][T16605] syzkaller0: entered allmulticast mode [ 321.691071][ T5839] Bluetooth: hci5: command tx timeout [ 322.087709][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 322.096800][ C1] lec:lec_tx_timeout: lec0 [ 322.102348][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.519232][T16450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.522657][T16643] __nla_validate_parse: 10 callbacks suppressed [ 322.522675][T16643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2950'. [ 322.547725][T16646] ip6t_rpfilter: unknown options [ 322.580112][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 322.640036][T16450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.705651][T16662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2954'. [ 322.735822][T16450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.758300][T16662] batman_adv: batadv0: Adding interface: dummy0 [ 322.765193][T16662] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.795891][T16662] batman_adv: batadv0: Interface activated: dummy0 [ 322.888315][T16450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.893798][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2957'. [ 323.106791][T16450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.119407][T16450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.132633][T16450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.149734][T16450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.159405][T16450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.170567][T16450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.180571][T16450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.201428][T16450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.211363][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2962'. [ 323.224085][T16682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2962'. [ 323.244493][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2962'. [ 323.329722][T16694] lo: entered promiscuous mode [ 323.336051][T16694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.423872][T16450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.452623][T16450] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.469804][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.477196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.510002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.517400][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.643972][T16706] veth0: entered promiscuous mode [ 323.767935][ T5839] Bluetooth: hci5: command tx timeout [ 323.790188][T16705] veth0: left promiscuous mode [ 323.801175][T16450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.860175][T16450] veth0_vlan: entered promiscuous mode [ 323.875637][T16450] veth1_vlan: entered promiscuous mode [ 323.930418][T16450] veth0_macvtap: entered promiscuous mode [ 323.943636][T16450] veth1_macvtap: entered promiscuous mode [ 323.971871][T16450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.987965][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 323.999750][T16450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.018085][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.033231][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.053692][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.091178][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.212643][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.228376][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.289302][T16733] netlink: 'syz.0.2975': attribute type 11 has an invalid length. [ 324.298001][T16733] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2975'. [ 324.299250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.320049][T16735] netlink: 'syz.1.2976': attribute type 7 has an invalid length. [ 324.332037][T16735] netlink: 'syz.1.2976': attribute type 7 has an invalid length. [ 324.337699][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.478894][T16743] dvmrp0: entered allmulticast mode [ 324.519312][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 324.530252][T16752] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2899'. [ 324.772950][T16765] netlink: 'syz.2.2982': attribute type 16 has an invalid length. [ 324.799949][T16765] netlink: 'syz.2.2982': attribute type 17 has an invalid length. [ 324.918642][T16765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.040204][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.051616][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.061099][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.074084][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.085999][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.131209][T16774] lo speed is unknown, defaulting to 1000 [ 325.213942][T16781] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 325.601196][T16774] chnl_net:caif_netlink_parms(): no params data found [ 325.847648][ T5839] Bluetooth: hci5: command tx timeout [ 325.994708][T16774] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.008480][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.016037][T16774] bridge_slave_0: entered allmulticast mode [ 326.038044][T16774] bridge_slave_0: entered promiscuous mode [ 326.066646][T16774] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.074357][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.097821][T16774] bridge_slave_1: entered allmulticast mode [ 326.105907][T16774] bridge_slave_1: entered promiscuous mode [ 326.191600][T16774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.220855][T16774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.234654][T16825] netlink: 'syz.0.2997': attribute type 10 has an invalid length. [ 326.369821][T16774] team0: Port device team_slave_0 added [ 326.389941][T16774] team0: Port device team_slave_1 added [ 326.425092][T16833] syzkaller0: entered promiscuous mode [ 326.438341][T16833] syzkaller0: entered allmulticast mode [ 326.606289][T16774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.632046][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.670381][T16774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.780868][T16774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.805494][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.844654][T16774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.054353][T16774] hsr_slave_0: entered promiscuous mode [ 327.082656][T16774] hsr_slave_1: entered promiscuous mode [ 327.104281][T16774] debugfs: 'hsr0' already exists in 'hsr' [ 327.117502][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.126096][ C1] lec:lec_tx_timeout: lec0 [ 327.131850][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.138388][ T5839] Bluetooth: hci1: command tx timeout [ 327.146162][T16774] Cannot create hsr debugfs directory [ 327.230880][T16880] xt_l2tp: invalid flags combination: 8 [ 327.444200][T16774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.457402][T16774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.541696][T16774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.556402][T16774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.598404][T16898] syzkaller0: entered promiscuous mode [ 327.604753][T16898] syzkaller0: entered allmulticast mode [ 327.675544][T16774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.707978][T16774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.818434][T16901] sctp: [Deprecated]: syz.1.3016 (pid 16901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.818434][T16901] Use struct sctp_sack_info instead [ 327.835658][T16911] __nla_validate_parse: 5 callbacks suppressed [ 327.835679][T16911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3019'. [ 327.857153][T16774] bond0: (slave netdevsim0): Releasing backup interface [ 327.870280][T16774] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 327.908451][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'. [ 328.166707][T16923] pim6reg1: entered promiscuous mode [ 328.176039][T16923] pim6reg1: entered allmulticast mode [ 328.192238][T16774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.205701][T16923] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 328.206909][T16774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.235975][T16774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.246199][T16774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.290813][T16774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.336041][T16774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.358349][T16774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.377157][T16774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.467668][T16942] netlink: 'syz.4.3027': attribute type 1 has an invalid length. [ 328.517147][T16942] 8021q: adding VLAN 0 to HW filter on device bond18 [ 328.564251][T16945] bond18: (slave gretap1): making interface the new active one [ 328.575927][T16945] bond18: (slave gretap1): Enslaving as an active interface with an up link [ 328.620123][T16947] lo speed is unknown, defaulting to 1000 [ 328.767248][T16774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.795557][T16774] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.817180][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.825109][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.851188][T16956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3031'. [ 328.887444][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.895181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.041753][T16774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.210830][ T5839] Bluetooth: hci1: command tx timeout [ 329.423355][T16990] netlink: 'syz.0.3041': attribute type 4 has an invalid length. [ 329.441650][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3040'. [ 329.454168][T16994] lo: left promiscuous mode [ 329.467852][T16994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.492999][T16991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3040'. [ 329.518390][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3040'. [ 329.556190][T16999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3042'. [ 329.611618][T16774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.702148][T16998] lo speed is unknown, defaulting to 1000 [ 329.707065][T16774] veth0_vlan: entered promiscuous mode [ 329.771847][T16774] veth1_vlan: entered promiscuous mode [ 330.015828][T16774] veth0_macvtap: entered promiscuous mode [ 330.071058][T16774] veth1_macvtap: entered promiscuous mode [ 330.133657][T16774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.165711][T17025] netlink: 'syz.2.3051': attribute type 10 has an invalid length. [ 330.171260][T16774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.220865][T17025] veth0_vlan: left promiscuous mode [ 330.231843][T17025] veth0_vlan: entered promiscuous mode [ 330.240721][T17025] team0: Device veth0_vlan failed to register rx_handler [ 330.291813][T17025] netlink: 'syz.2.3051': attribute type 4 has an invalid length. [ 330.295284][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.309315][T17025] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3051'. [ 330.322193][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.334519][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.352674][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.482837][T17043] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3055'. [ 330.527605][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.536352][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.665647][T17047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3056'. [ 330.681175][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.698429][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.927148][T17069] xt_CONNSECMARK: invalid mode: 0 [ 331.175313][T17081] bond1: entered promiscuous mode [ 331.203147][T17085] macvlan2: entered promiscuous mode [ 331.230254][T17088] IPv6: NLM_F_REPLACE set, but no existing node found! [ 331.236238][T17085] macvlan2: entered allmulticast mode [ 331.248768][T17085] bond1: (slave macvlan2): Opening slave failed [ 331.288016][ T5839] Bluetooth: hci1: command tx timeout [ 331.426470][T17096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.465003][T17093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.487171][T17099] nbd: illegal input index 2958377 [ 331.493026][T17101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.647118][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.659026][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.671356][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.702912][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.718637][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.842010][T17109] lo speed is unknown, defaulting to 1000 [ 332.050537][T17130] netlink: 'syz.3.3079': attribute type 2 has an invalid length. [ 332.147950][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 332.156406][ C1] lec:lec_tx_timeout: lec0 [ 332.161312][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.378867][T17145] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 332.434339][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.458953][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.474981][T17145] netlink: 'syz.2.3082': attribute type 10 has an invalid length. [ 332.558644][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.572567][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.613641][T17145] team0: Port device erspan0 added [ 332.826785][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.866707][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.892951][T17109] chnl_net:caif_netlink_parms(): no params data found [ 333.045871][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.073277][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.082048][T17178] netlink: 'syz.4.3090': attribute type 1 has an invalid length. [ 333.135549][T17179] __nla_validate_parse: 5 callbacks suppressed [ 333.135568][T17179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3090'. [ 333.174565][T17178] nbd: error processing sock list [ 333.195211][T17180] netlink: 'syz.0.3091': attribute type 11 has an invalid length. [ 333.211708][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'. [ 333.268583][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 333.315091][T17186] netlink: 'syz.2.3092': attribute type 14 has an invalid length. [ 333.335671][T17186] netlink: 'syz.2.3092': attribute type 13 has an invalid length. [ 333.356610][T17109] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.369480][ T5839] Bluetooth: hci1: command tx timeout [ 333.371829][T17109] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.375543][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3093'. [ 333.393348][T17109] bridge_slave_0: entered allmulticast mode [ 333.402547][T17109] bridge_slave_0: entered promiscuous mode [ 333.418118][T17109] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.426247][T17109] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.434472][T17109] bridge_slave_1: entered allmulticast mode [ 333.442717][T17109] bridge_slave_1: entered promiscuous mode [ 333.467688][T17192] wg1 speed is unknown, defaulting to 1000 [ 333.504245][T17192] wg1 speed is unknown, defaulting to 1000 [ 333.514096][T17109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.560116][T17192] wg1 speed is unknown, defaulting to 1000 [ 333.562928][T17109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.607137][T17192] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 333.682777][T17192] wg1 speed is unknown, defaulting to 1000 [ 333.697031][T17203] netlink: 'syz.0.3097': attribute type 10 has an invalid length. [ 333.759342][T17205] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3097'. [ 333.769017][ T5839] Bluetooth: hci4: command tx timeout [ 333.769496][T17192] wg1 speed is unknown, defaulting to 1000 [ 333.780836][T17205] nbd: illegal input index -8454144 [ 333.798705][T17109] team0: Port device team_slave_0 added [ 333.832592][T17109] team0: Port device team_slave_1 added [ 333.847208][T17203] xt_l2tp: missing protocol rule (udp|l2tpip) [ 333.866478][T17192] wg1 speed is unknown, defaulting to 1000 [ 333.922508][T17192] wg1 speed is unknown, defaulting to 1000 [ 333.998513][T17222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3099'. [ 334.045728][T17192] wg1 speed is unknown, defaulting to 1000 [ 334.047214][T17109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.068007][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.128845][T17109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.155426][ T69] bridge_slave_1: left promiscuous mode [ 334.180695][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.205227][ T69] x9: left allmulticast mode [ 334.219766][ T69] x9: left promiscuous mode [ 334.224782][ T69] bridge0: port 1(1x9) entered disabled state [ 334.611379][ T69] dvmrp0 (unregistering): left allmulticast mode [ 334.732265][ T69] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 334.781186][ T69] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 334.864031][ T69] bond5 (unregistering): (slave bridge5): Releasing active interface [ 335.132347][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.144439][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.156105][ T69] bond0 (unregistering): Released all slaves [ 335.166893][ T69] bond1 (unregistering): Released all slaves [ 335.180369][ T69] bond2 (unregistering): Released all slaves [ 335.196613][ T69] bond3 (unregistering): Released all slaves [ 335.210919][ T69] bond4 (unregistering): Released all slaves [ 335.224346][ T69] bond5 (unregistering): Released all slaves [ 335.242909][ T69] bond6 (unregistering): Released all slaves [ 335.256103][ T69] bond7 (unregistering): Released all slaves [ 335.270405][T17192] wg1 speed is unknown, defaulting to 1000 [ 335.271930][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'. [ 335.296848][T17109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.316543][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.374122][T17109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.397774][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 335.431528][T17192] wg1 speed is unknown, defaulting to 1000 [ 335.473508][ T69] : left promiscuous mode [ 335.558003][T17192] wg1 speed is unknown, defaulting to 1000 [ 335.603018][T17109] hsr_slave_0: entered promiscuous mode [ 335.613178][T17109] hsr_slave_1: entered promiscuous mode [ 335.620355][T17109] debugfs: 'hsr0' already exists in 'hsr' [ 335.626448][T17109] Cannot create hsr debugfs directory [ 335.632715][ T69] 9: left promiscuous mode [ 335.648568][T17242] 8021q: VLANs not supported on ip6tnl0 [ 335.656791][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3104'. [ 335.657035][T17242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3103'. [ 335.739654][ T69] tipc: Disabling bearer [ 335.764024][ T69] tipc: Left network mode [ 335.847630][ T5839] Bluetooth: hci4: command tx timeout [ 335.962070][T17251] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20002 [ 336.117832][ T69] IPVS: stopping master sync thread 14239 ... [ 336.721194][T17286] bond19: entered promiscuous mode [ 336.761130][T17299] netlink: 'syz.2.3116': attribute type 1 has an invalid length. [ 336.793650][T17299] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3116'. [ 336.914119][T17293] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.952037][T17295] macvlan3: entered promiscuous mode [ 336.958617][T17295] macvlan3: entered allmulticast mode [ 336.972386][T17295] bond19: (slave macvlan3): Opening slave failed [ 337.070221][T17293] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.177530][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.186042][ C1] lec:lec_tx_timeout: lec0 [ 337.191013][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.301882][T17293] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.372854][T17321] netlink: 'syz.0.3121': attribute type 33 has an invalid length. [ 337.412277][T17321] ================================================================== [ 337.420748][T17321] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 337.428611][T17321] Read of size 8 at addr ffff88806b59cf60 by task syz.0.3121/17321 [ 337.436866][T17321] [ 337.439324][T17321] CPU: 0 UID: 0 PID: 17321 Comm: syz.0.3121 Not tainted syzkaller #0 PREEMPT(full) [ 337.439351][T17321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 337.439366][T17321] Call Trace: [ 337.439374][T17321] [ 337.439381][T17321] dump_stack_lvl+0xe8/0x150 [ 337.439411][T17321] print_report+0xba/0x230 [ 337.439432][T17321] ? af_alg_pull_tsgl+0x1c6/0x740 [ 337.439460][T17321] kasan_report+0x117/0x150 [ 337.439487][T17321] ? af_alg_pull_tsgl+0x1c6/0x740 [ 337.439518][T17321] af_alg_pull_tsgl+0x1c6/0x740 [ 337.439550][T17321] skcipher_recvmsg+0x5df/0x1140 [ 337.439579][T17321] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 337.439602][T17321] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.439634][T17321] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 337.439657][T17321] ? security_socket_recvmsg+0x7e/0x2c0 [ 337.439681][T17321] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 337.439704][T17321] sock_recvmsg+0x172/0x1b0 [ 337.439726][T17321] ____sys_recvmsg+0x1e6/0x4a0 [ 337.439755][T17321] ? __pfx_____sys_recvmsg+0x10/0x10 [ 337.439794][T17321] ? import_iovec+0x73/0xa0 [ 337.439817][T17321] ___sys_recvmsg+0x215/0x590 [ 337.439839][T17321] ? futex_private_hash_put+0x13b/0x170 [ 337.439862][T17321] ? __pfx____sys_recvmsg+0x10/0x10 [ 337.439898][T17321] ? __fget_files+0x3a0/0x420 [ 337.439919][T17321] __x64_sys_recvmsg+0x1ba/0x2a0 [ 337.439944][T17321] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 337.439972][T17321] ? rcu_is_watching+0x15/0xb0 [ 337.440001][T17321] do_syscall_64+0x14d/0xf80 [ 337.440027][T17321] ? trace_irq_disable+0x3b/0x150 [ 337.440042][T17321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.440060][T17321] ? clear_bhb_loop+0x40/0x90 [ 337.440080][T17321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.440099][T17321] RIP: 0033:0x7f0e6399c819 [ 337.440116][T17321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.440132][T17321] RSP: 002b:00007f0e64893028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 337.440153][T17321] RAX: ffffffffffffffda RBX: 00007f0e63c15fa0 RCX: 00007f0e6399c819 [ 337.440168][T17321] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000006 [ 337.440181][T17321] RBP: 00007f0e63a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 337.440193][T17321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.440205][T17321] R13: 00007f0e63c16038 R14: 00007f0e63c15fa0 R15: 00007ffef115fee8 [ 337.440228][T17321] [ 337.440234][T17321] [ 337.694752][T17321] Allocated by task 17321: [ 337.699339][T17321] kasan_save_track+0x3e/0x80 [ 337.704190][T17321] __kasan_kmalloc+0x93/0xb0 [ 337.708954][T17321] __kmalloc_noprof+0x35c/0x760 [ 337.713969][T17321] sock_kmalloc+0xd6/0x160 [ 337.718739][T17321] skcipher_recvmsg+0x54d/0x1140 [ 337.724728][T17321] sock_recvmsg+0x172/0x1b0 [ 337.729598][T17321] ____sys_recvmsg+0x1e6/0x4a0 [ 337.734720][T17321] ___sys_recvmsg+0x215/0x590 [ 337.739484][T17321] __x64_sys_recvmsg+0x1ba/0x2a0 [ 337.744722][T17321] do_syscall_64+0x14d/0xf80 [ 337.749596][T17321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.756121][T17321] [ 337.758535][T17321] The buggy address belongs to the object at ffff88806b59cf40 [ 337.758535][T17321] which belongs to the cache kmalloc-32 of size 32 [ 337.773123][T17321] The buggy address is located 0 bytes to the right of [ 337.773123][T17321] allocated 32-byte region [ffff88806b59cf40, ffff88806b59cf60) [ 337.788580][T17321] [ 337.790995][T17321] The buggy address belongs to the physical page: [ 337.797577][T17321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b59c [ 337.806605][T17321] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 337.813780][T17321] page_type: f5(slab) [ 337.817848][T17321] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122 [ 337.826940][T17321] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 337.835761][T17321] page dumped because: kasan: bad access detected [ 337.842277][T17321] page_owner tracks the page as allocated [ 337.848290][T17321] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6184, tgid 6180 (syz.3.71), ts 89241441030, free_ts 89239282081 [ 337.869760][T17321] post_alloc_hook+0x231/0x280 [ 337.874721][T17321] get_page_from_freelist+0x24dc/0x2580 [ 337.880535][T17321] __alloc_frozen_pages_noprof+0x18d/0x380 [ 337.886424][T17321] allocate_slab+0x77/0x660 [ 337.891012][T17321] refill_objects+0x331/0x3c0 [ 337.895685][T17321] __pcs_replace_empty_main+0x2e6/0x730 [ 337.901257][T17321] __kmalloc_noprof+0x474/0x760 [ 337.906455][T17321] security_sk_alloc+0x52/0x360 [ 337.911397][T17321] sk_prot_alloc+0x101/0x210 [ 337.916070][T17321] sk_alloc+0x3a/0x390 [ 337.920128][T17321] __netlink_create+0x65/0x260 [ 337.924881][T17321] netlink_create+0x3ca/0x590 [ 337.929549][T17321] __sock_create+0x4b2/0x9d0 [ 337.934129][T17321] __sys_socket+0xd6/0x1b0 [ 337.938540][T17321] __x64_sys_socket+0x7a/0x90 [ 337.943227][T17321] do_syscall_64+0x14d/0xf80 [ 337.947904][T17321] page last free pid 6186 tgid 6186 stack trace: [ 337.954387][T17321] __free_frozen_pages+0xc2b/0xdb0 [ 337.960373][T17321] tlb_remove_table_rcu+0x85/0x100 [ 337.965661][T17321] rcu_core+0x7cd/0x1070 [ 337.969909][T17321] handle_softirqs+0x22a/0x870 [ 337.974946][T17321] __irq_exit_rcu+0x5f/0x150 [ 337.979698][T17321] irq_exit_rcu+0x9/0x30 [ 337.984199][T17321] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 337.990176][T17321] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.996677][T17321] [ 337.999741][T17321] Memory state around the buggy address: [ 338.005805][T17321] ffff88806b59ce00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 338.014125][T17321] ffff88806b59ce80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 338.022705][T17321] >ffff88806b59cf00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 338.030930][T17321] ^ [ 338.038202][T17321] ffff88806b59cf80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 338.046776][T17321] ffff88806b59d000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 338.054914][T17321] ================================================================== [ 338.077754][ T5839] Bluetooth: hci4: command tx timeout [ 338.084728][T17321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 338.092843][T17321] CPU: 0 UID: 0 PID: 17321 Comm: syz.0.3121 Not tainted syzkaller #0 PREEMPT(full) [ 338.102556][T17321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.112802][T17321] Call Trace: [ 338.116192][T17321] [ 338.119409][T17321] vpanic+0x56c/0xa60 [ 338.123509][T17321] ? __pfx_vpanic+0x10/0x10 [ 338.128517][T17321] ? __pfx___schedule+0x10/0x10 [ 338.133723][T17321] panic+0xc5/0xd0 [ 338.137533][T17321] ? __pfx_panic+0x10/0x10 [ 338.142047][T17321] ? preempt_schedule_common+0x82/0xd0 [ 338.147714][T17321] ? af_alg_pull_tsgl+0x1c6/0x740 [ 338.153021][T17321] check_panic_on_warn+0x89/0xb0 [ 338.158039][T17321] ? af_alg_pull_tsgl+0x1c6/0x740 [ 338.163147][T17321] end_report+0x73/0x180 [ 338.167733][T17321] ? af_alg_pull_tsgl+0x1c6/0x740 [ 338.172867][T17321] kasan_report+0x128/0x150 [ 338.177642][T17321] ? af_alg_pull_tsgl+0x1c6/0x740 [ 338.182773][T17321] af_alg_pull_tsgl+0x1c6/0x740 [ 338.187722][T17321] skcipher_recvmsg+0x5df/0x1140 [ 338.192775][T17321] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 338.198159][T17321] ? aa_sock_msg_perm+0xf1/0x1b0 [ 338.203454][T17321] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 338.209000][T17321] ? security_socket_recvmsg+0x7e/0x2c0 [ 338.214659][T17321] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 338.220119][T17321] sock_recvmsg+0x172/0x1b0 [ 338.224628][T17321] ____sys_recvmsg+0x1e6/0x4a0 [ 338.229392][T17321] ? __pfx_____sys_recvmsg+0x10/0x10 [ 338.234768][T17321] ? import_iovec+0x73/0xa0 [ 338.239529][T17321] ___sys_recvmsg+0x215/0x590 [ 338.244384][T17321] ? futex_private_hash_put+0x13b/0x170 [ 338.250117][T17321] ? __pfx____sys_recvmsg+0x10/0x10 [ 338.255433][T17321] ? __fget_files+0x3a0/0x420 [ 338.260136][T17321] __x64_sys_recvmsg+0x1ba/0x2a0 [ 338.265254][T17321] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 338.270888][T17321] ? rcu_is_watching+0x15/0xb0 [ 338.275930][T17321] do_syscall_64+0x14d/0xf80 [ 338.280782][T17321] ? trace_irq_disable+0x3b/0x150 [ 338.285889][T17321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.292120][T17321] ? clear_bhb_loop+0x40/0x90 [ 338.296887][T17321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.303068][T17321] RIP: 0033:0x7f0e6399c819 [ 338.307481][T17321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.327871][T17321] RSP: 002b:00007f0e64893028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 338.336907][T17321] RAX: ffffffffffffffda RBX: 00007f0e63c15fa0 RCX: 00007f0e6399c819 [ 338.344877][T17321] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000006 [ 338.353502][T17321] RBP: 00007f0e63a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 338.361550][T17321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.370123][T17321] R13: 00007f0e63c16038 R14: 00007f0e63c15fa0 R15: 00007ffef115fee8 [ 338.378371][T17321] [ 338.382043][T17321] Kernel Offset: disabled [ 338.386756][T17321] Rebooting in 86400 seconds..