last executing test programs: 2.993523927s ago: executing program 4 (id=14851): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) (async) getsockname$packet(r1, 0x0, &(0x7f0000000080)) accept4(r0, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x4}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r3, 0x4a, 0x2, [0x200, 0x8]}, &(0x7f00000000c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000700)={0x0, 0x80000001}) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000109010300000000000000000a00000208000540000000170900010073797a30000000000c000480080001400000000008000640000000017c1bef82145ce2d4ab3264e71cac0dd4759747c75d487a7366a0e8c982ef3245fca3ef1837e277dabbf6b327d5fd937931cac7a1102572959e15b084c4fc7114179277cb08249d18ea7568b6c9d458f1e9cec5faf931df750c644d8029eb8d"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4015) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cf7fe918607aed0ba328854ccc68b193666490800009bd6d872b0ea7bdf", @ANYRES32=0x0, @ANYBLOB="0000000000b401001c0012800900010069706970000000000c000280060011004e230000"], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r4, 0x5, 0x2, 0x100000, 0x8, 0x100}, &(0x7f0000000340)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r4, 0x5, 0x2, 0x100000, 0x8, 0x100}, &(0x7f0000000340)=0x14) 2.95661879s ago: executing program 4 (id=14852): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x10, 0xd, 0x1, 0x0, "7a0eb17cd18f333a5689c0ea"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.849297259s ago: executing program 4 (id=14855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0xfffffffe, 0x25dfdbff, {0x2, 0x20, 0x0, 0x36}}, 0x18}, 0x1, 0x0, 0x0, 0x40020}, 0x20004000) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.748061506s ago: executing program 0 (id=14859): r0 = socket$kcm(0x10, 0x5, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) socketpair(0x2a, 0xa, 0x18b, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000002c0)={r0, 0x3, 0x9, 0xa}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000540)=0xfffffffffffffead) sendmsg$nl_route(r5, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="d40000001900000327bd7000e4dbdf250a203009fd00ff0300000000080017000800000008001900", @ANYRES32=r6, @ANYBLOB="89000880ab61fb34fcc6b9dca43c57e0ecde914eafb371f47d719fd93b69692e24e415fa197eddbdc3a9b596ba65f7f866450eaa4e9922c1e7a11b08adcea6331089b4ff6cea5537044597e418b7ec763ee2d44f32a62a09ebebe4474d575c891c0bb6200ad623ef1a34027a70b5d136f90d648255466982e4a61f358fd5b8ac5067a6ecc978b881b800000014000500fc02000000000000000000000000000108000400", @ANYRES32=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x8083}, 0x8000) syz_emit_ethernet(0x6a, &(0x7f0000000b80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1708004500005c00000000fd019078ac1e0001ac1414aa0300907803240000400000000000000003010000ac1414bbac141437862300000000000ce256b28ceafffffffa520009789607675ca638ff01020200020002860600000002000000"], 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r8, 0x0, {}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000001300)={&(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}}, 0x18, &(0x7f00000012c0)={&(0x7f0000001340)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x24004102}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000006800010003000000000000808000000000000000"], 0x18}}, 0x4000) read(r1, &(0x7f0000000340)=""/217, 0xd9) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f00009ec000/0x2000)=nil, 0x2000, 0x0, 0x28011, r11, 0x0) ioctl$TUNSETVNETLE(r10, 0x400454dc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="18008b00b58d04000924de6875d44b1e2b3dc2004b"], &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x115201, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.51447702s ago: executing program 1 (id=14861): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @default, 0x0, [@remote, @default, @rose, @rose, @rose, @default]}, &(0x7f0000000100)=0x40, 0x80800) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @bcast, @rose={'rose', 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r1 = socket$inet(0x2, 0x3, 0x8d) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, &(0x7f00000012c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200fe80000000002db8eb9bd1653d071028"], 0x2c}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r5}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000078000100005332d8f200000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x8040) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r10, 0x7, &(0x7f0000000000)) 2.383195601s ago: executing program 1 (id=14863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) shutdown(r6, 0x1) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff1}, {0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'syz_tun\x00'}) r10 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'dvmrp1\x00'}) (async) write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r11, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0908000000000035090100000000009500000000070000b708000000000000639a04fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76080000000000008500000000000000b7000000000000009500006000"/64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.089623724s ago: executing program 1 (id=14866): r0 = socket(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000016c0)={0x0, 0x1}, &(0x7f0000001700)=0x8) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000000000000000ac06bf0750d3ae41d9d64cb35584b2698b0a73bf1877f818940064b62a1af8adbc2b53531af8e948e18e1414bb000000000000000000000000000012f0bb93ceeffe0e92cdcdf5f10e135db3646dee2dc3b4724d3688332454194e544696c0f89be224816701c626cd48aecbb5526569bcf5375288e4f109099acbf5f3b1eb5121046ad6e76152597a457add8000822017f5974b5526", @ANYRES32=0x0, @ANYRES32], 0x1bc}}, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) 2.038300244s ago: executing program 0 (id=14867): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0xfffffffffffffd4e, &(0x7f0000000a00)=[{&(0x7f0000000cc0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x160) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba", 0x2}], 0x1}}], 0x2, 0x400c404) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000840), &(0x7f0000004880)=@udp=r4}, 0x20) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r13 = syz_open_procfs$namespace(r10, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(r9, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r12}}}], 0x40, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @rights={{0x38, 0x1, 0x1, [r5, r5, r5, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x5b, 0x800}}, {{&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)="3c828dba2c3218d3cb6ae08d560cb581b643fd6794cf463aa82eaa3968c2f1aeb2feb53431d2022b78ff86819e02433dfb0ea953e8fdefd18e34d0", 0x3b}, {&(0x7f00000007c0)="06c0e909b2b671d571e1576674e07f2a5183f02da8c4f5d29143be86be120437bba8b858369b0bdb57862f9948c446f9f3734f14f724710ded68efd33fdeb03a6da3d125750fd6c881395336721421cf65dab2bff11d6e7fdf402374", 0x5c}, {&(0x7f0000000880)="a2ed230cf5cdc14ce171e52210f1de9d158e52af5208ced7e4215963d6f205eaa6cb7e3b92e1a996b8f897647caa74b26d78688670614fdea3b5c3aad7dc044f128073d9242b0aeeb2cf2d15a1158ae6e07459ae940f2185200215766fcca3889cc43726b656da77a1062571a25fadab4cea52bc9121f5d6fba54d94a6469c4405c83fbd761d6874c2e6f9ab4e0158c3c6", 0x91}, {&(0x7f0000000940)="f93a054a2e976dbb7505", 0xa}, {&(0x7f0000000a80)="3c758c55955b685afa5faad7405ac10fb1702ffccc55a893821ace16dbc2b3444abeaf19c9b13aa03b5be1454daaaa2a888fe31477d492c73f61183ad69cafd2c5537b77337fb6d8efdb6b237175d473b3fc4f70aa536a79d15383cc76fa727596ab7a010165db8846eda89763eeba6cb0a75e57e8e9cc68450fbe4b87605a94753ca2a8fc069f7e0e3bed182f20344a94b1c24049a9f7f8d105a4f945a2c8186440b0a7159703fce782cf1c97513dc6eaa6e8cbad0e29770bc303df3dc824606318be0a42b5ad2e142a01a217fc09f4e2b8d1de1d0d80fa0f55fb37c28be926fbc9b1631c708477d6673b13d0583546", 0xf0}], 0x5, &(0x7f0000000b80)=[@rights={{0x24, 0x1, 0x1, [r6, r4, r1, r3, r8]}}, @rights={{0x30, 0x1, 0x1, [r2, r4, r9, r2, r8, r2, r13, r6]}}], 0x58, 0x85}}], 0x3, 0x0) r14 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)="6ac02d7598cbf71db05f8fd3ce8a838de63b85e1cee75c50dd12540a32536d1be43bd88f9eb8fb3aede2c2b4ab0b84657326415086460cf2c0bb3d0cfd63bcd986a69eb74463c307e920257a1db32bb428c29cca64e2d2ff", 0x58}, {&(0x7f0000000240)="95c78765a2942c51924fb454784aa8657f0e9efa218ca31807def42e72f7418caf93701e6e2ef4db75bf8dc6138cabb52490e72949204f0e0f3ac569cd049ffb75825bb167212dd1469f310fdb184011169db233b0bb01ae137cd969ca1714a89325888e589edd21576c2a35adbf238b4cd61114ea17f20661fa1fd0c5041f75610ee37a915c7565bef4", 0x8a}, {&(0x7f0000000040)="ba35", 0x2}, {&(0x7f0000000440)="984ed02324db6cffcd11f45d7e3e5fffa149bd32d2142f313933f9c0d0dc86734165b8f9384ab9b7b5746055fba72a3f2daa4d5675645683558b8034a19e2bb2e518377da086711e4ce0d45ba42bdcfdf6683be8785cc124a1ba1b1eb321681720aac2304c3b5f56aa0699a53bce2a623c6fc73d3c34411cb3a3c820eeac7de08d8248cb60d1b33741014af61d835f264e995ee097352ac84e5df42d70d8837fb0a376bd50e7d1b1959a8b8689c93a158fc4a7ed68d53a91b15500f79d0d61a41a02da39825aea384060b63cddae68", 0xcf}], 0x4, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r6, 0xffffffffffffffff, r0, 0xffffffffffffffff, r2, r3, r4, r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r11, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r14]}}], 0xb0, 0x8090}, 0x40040c5) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x68}}, 0x0) 1.934102086s ago: executing program 1 (id=14870): r0 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x80}, {0x6}]}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x670, 0x5, 0x470, 0x0, 0x258, 0xffffffff, 0x258, 0x120, 0x3d8, 0x3d8, 0xffffffff, 0x3d8, 0x3d8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0xe8, 0x120, 0x48, {}, [@common=@set={{0x40}, {{0x0, [0xc, 0x3, 0x1, 0x0, 0x2, 0x4], 0x3, 0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x108, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_virt_wifi\x00', {0xff}, 'vlan0\x00', {0xff}, 0x0, 0x10}}, @common=@ah={{0x30}, {[0x97, 0x5], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0xffff, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xffffff00, 0x0, 'batadv_slave_1\x00', 'dummy0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @private=0xa010100, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000011c0)={0xe2b9, {{0x2, 0x4e23, @empty}}}, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000001c0)={{r1}, "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"}) 1.798119182s ago: executing program 1 (id=14871): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x83, &(0x7f0000000500)={0x0, 0xa7a}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x28) 1.775036797s ago: executing program 1 (id=14872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) (async, rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x4, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2ec, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @local, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffaa3d}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf, @mcast2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe467}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x269}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xefd}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x44}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4008008}, 0x40000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x89d7, 0x1, @remote}, 0x1c) socket(0x14, 0x2, 0x4) (async, rerun: 32) listen(r1, 0x8) (async, rerun: 32) close(0x4) 1.590758313s ago: executing program 4 (id=14875): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4965de55c8eec8b0, @bcast, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) poll(&(0x7f0000000040), 0x55, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x7}, {0x0, 0x4e1a, 0x40, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x804) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4965de55c8eec8b0, @bcast, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null]}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) poll(&(0x7f0000000040), 0x55, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x7}, {0x0, 0x4e1a, 0x40, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x804) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1.278151974s ago: executing program 3 (id=14876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) socket$inet(0x2, 0xa, 0x400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002500090122bd7008fcffffff020000000b003d807bfa472f962330000800030034"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.110967441s ago: executing program 0 (id=14878): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="5b1257f0bcb5021b2400128011000100e272696467655f736c617665000000000c00058005002b0001000000140003006272696467655f736c6176655f3000006e1021caa9b10be97d2c68ecedea456b36c1dbb1e1b96fd3e22b45648f22b797584b5eddbfff71b4080fd241"], 0x58}, 0x1, 0x0, 0x0, 0x20044011}, 0x40000) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/220, &(0x7f0000000140)=0xdc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000}, 0x9}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) 1.109131525s ago: executing program 2 (id=14879): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) connect$unix(r3, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) connect$llc(r6, &(0x7f0000000040)={0x1a, 0x10f, 0xc, 0xa, 0x3b, 0x5, @broadcast}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00030000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x0) 933.371771ms ago: executing program 0 (id=14880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1402, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1) 878.054864ms ago: executing program 2 (id=14881): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x90}, 0x1, 0x7}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@empty, r2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbc, &(0x7f0000000080)=""/188, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 777.282168ms ago: executing program 0 (id=14882): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x301}, 0x14}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) write$tun(r2, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xd, 0x2e, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 551.994049ms ago: executing program 2 (id=14883): syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x9) syz_emit_ethernet(0x1e, &(0x7f0000000100)={@empty, @multicast, @void, {@can={0xc, {{0x2}, 0x4, 0x0, 0x0, 0x0, "311e0d1ea384ba97"}}}}, &(0x7f0000000140)={0x0, 0x3, [0x467, 0x48, 0xd43, 0xe85]}) syz_emit_ethernet(0x98, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@mpls_mc={0x8848, {[{0x2}], @ipv4=@dccp={{0x17, 0x4, 0x3, 0x15, 0x86, 0x67, 0x0, 0x1, 0x21, 0x0, @remote, @remote, {[@generic={0x86, 0x4, "0ccc"}, @ra={0x94, 0x4}, @generic={0x88, 0x12, "54f6461a3870c82c75ef4d5abc04c9cd"}, @ssrr={0x89, 0x1b, 0xce, [@broadcast, @multicast2, @rand_addr=0x64010101, @remote, @remote, @rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x1a, [@multicast1, @empty, @empty, @multicast1]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x0, 0x7, "a38fcb", 0x40, "f3961f"}, "282c4d1017bfeb6e7269a6f08f2e2b6e417a6fb44b651088e423"}}}}}}, 0x0) 481.692312ms ago: executing program 3 (id=14884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@delqdisc={0x34, 0x25, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6}, {0x6, 0x9}, {0x3, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x38, 0xff}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2c}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x4005) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x100, 0x72bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 354.539215ms ago: executing program 2 (id=14885): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0xb9, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000014001280090001007663616e000000000400028008000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x3c}}, 0x880) 339.852395ms ago: executing program 3 (id=14886): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) 318.971253ms ago: executing program 4 (id=14887): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)={0x30, r2, 0x201, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x60, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x23, 0x2a, [@challenge={0x10, 0x1, 0x24}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@broadcast}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a080001"], 0x80}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x0, 0x13, 0x0, &(0x7f000000a500)) r8 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r9, 0x891b, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000000c0)={r11}) sendto$unix(r5, &(0x7f0000000040)="1101e95e78af82132e98a38babb162a6bb3c62f1", 0x14, 0x0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r13, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r2, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="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"], 0x5c}, 0x1, 0x620b}, 0x0) 198.112507ms ago: executing program 2 (id=14888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) 189.50859ms ago: executing program 4 (id=14889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="000000000000ebffffff002751aa76df7f3e515ff3000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=0x0, @ANYBLOB='c'], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@newtaction={0x74, 0x30, 0x1, 0x0, 0xffffffff, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000, 0xe) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xa, 0x7ea, 0x66, 0x0, 0xd, 0x88, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0x7f8) 159.535661ms ago: executing program 0 (id=14890): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r1, &(0x7f0000000f00)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f6649d204a1065dad7cffef082a59ee2b21eb73656d3dc03547888735", 0x6d, 0x4c840, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e22, 0x1e7, 0x4e23, 0x5, 0xa, 0x20, 0x0, 0x3a}, {0xb, 0x80000001, 0xff, 0x8, 0x6, 0x7, 0x5, 0x6}, {0xa11, 0x4, 0x7, 0xbd}, 0x9, 0x6e6bc0, 0x0, 0x1}, {{@in=@local, 0x4d2, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3503, 0x4, 0x2, 0x1, 0x3, 0x7, 0x8}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x600}}}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x9a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000400)={0x200, {{0xa, 0x4e20, 0x70, @local, 0x800}}, {{0xa, 0x4e21, 0x5, @empty, 0x5}}}, 0x108) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x80) 86.584376ms ago: executing program 3 (id=14891): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14000000130001000b000000fffffff607"], 0x14}], 0x1}, 0x0) 86.151983ms ago: executing program 2 (id=14892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "136826151b9b5971"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "136826151b9b5971"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0x108, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x78}}, 0x20000400) recvmmsg(r4, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) (async) recvmmsg(r4, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000180)={&(0x7f0000000300)=""/242, 0xf2, 0xfffffff7, 0x4}) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) (async) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) 54.417985ms ago: executing program 3 (id=14893): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) syz_emit_ethernet(0x246, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x210, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x3a, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @generic={0x1, 0x59, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1cea2b483cc5fa05f"}]}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=14894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xde8, 0x56) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) kernel console output (not intermixed with test programs): 34572][T18655] veth0_vlan: entered promiscuous mode [ 1183.274595][T18655] veth1_vlan: entered promiscuous mode [ 1183.351350][ T49] IPVS: stop unused estimator thread 0... [ 1183.406467][T18655] veth0_macvtap: entered promiscuous mode [ 1183.427351][T17508] IPVS: starting estimator thread 0... [ 1183.441342][T18655] veth1_macvtap: entered promiscuous mode [ 1183.447678][T19264] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1183.465212][T19264] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1183.500950][T18655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.508847][T19265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12499'. [ 1183.525037][T19267] IPVS: using max 29 ests per chain, 69600 per kthread [ 1183.542242][T18655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.579326][ T6306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.601441][ T6306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.736336][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12500'. [ 1183.749276][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12500'. [ 1184.033668][ T6306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.056567][ T6306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.489874][T11617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.508556][T11617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.628212][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.641248][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.107044][T19332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12514'. [ 1185.238438][T19344] syzkaller0: entered promiscuous mode [ 1185.244646][T19344] syzkaller0: entered allmulticast mode [ 1185.264329][T19336] syzkaller0: entered promiscuous mode [ 1185.270637][T19336] syzkaller0: entered allmulticast mode [ 1185.300139][T19344] ip6erspan0: entered promiscuous mode [ 1185.584111][T19360] Cannot find add_set index 0 as target [ 1185.750434][T19366] ipvlan3: entered allmulticast mode [ 1185.764474][T19366] batadv_slave_1: entered allmulticast mode [ 1186.039685][T19392] siw: device registration error -23 [ 1186.807514][T19450] __nla_validate_parse: 3 callbacks suppressed [ 1186.809824][T19450] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12541'. [ 1186.997718][T19455] syzkaller0: entered promiscuous mode [ 1187.003345][T19455] syzkaller0: entered allmulticast mode [ 1187.121534][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12545'. [ 1187.163927][T19468] netlink: 'syz.1.12545': attribute type 5 has an invalid length. [ 1187.172984][T19468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12545'. [ 1187.253488][T17505] IPVS: starting estimator thread 0... [ 1187.347979][T19482] IPVS: using max 34 ests per chain, 81600 per kthread [ 1187.372639][T19469] netlink: 'syz.4.12546': attribute type 1 has an invalid length. [ 1187.372863][T19468] geneve2: entered promiscuous mode [ 1187.445861][T19468] geneve2: entered allmulticast mode [ 1187.477238][T19478] syzkaller0: entered promiscuous mode [ 1187.490979][T19478] syzkaller0: entered allmulticast mode [ 1187.780976][T19508] can: request_module (can-proto-4) failed. [ 1188.715543][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 1189.190431][ T6306] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1189.219677][T19469] bond1: entered promiscuous mode [ 1189.225753][T19469] bond1: entered allmulticast mode [ 1189.231331][T19469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1189.253998][T19507] bridge1: entered promiscuous mode [ 1189.259665][T19507] bridge1: entered allmulticast mode [ 1189.433903][ T6306] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1189.448617][T19540] netlink: 'syz.2.12553': attribute type 1 has an invalid length. [ 1189.485207][ T6306] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1189.516124][ T6306] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1189.620728][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12556'. [ 1189.677437][T19553] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12558'. [ 1190.042446][T19582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12565'. [ 1190.339140][T19597] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1190.351648][T19597] syzkaller1: Linktype set failed because interface is up [ 1190.359962][T17505] syzkaller1: tun_net_xmit 90 [ 1190.379685][T19597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12568'. [ 1190.391261][T17505] syzkaller1: tun_net_xmit 90 [ 1190.462867][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.470168][T19604] IPv6: NLM_F_CREATE should be set when creating new route [ 1190.486514][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.494194][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.502353][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.546018][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.567560][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.597154][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.606488][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.621036][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.651706][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.688969][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12571'. [ 1190.691249][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.707357][T19611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12571'. [ 1190.725740][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.739147][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.773443][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.820817][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.828571][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.836197][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.843744][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.851606][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.863971][T19616] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12572'. [ 1190.877824][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.886946][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.907113][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.910877][T19614] netlink: 'syz.1.12571': attribute type 1 has an invalid length. [ 1190.927818][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.955478][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.972713][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1190.988548][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.000626][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.008377][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.016269][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.023983][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.031712][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.039515][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.048020][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.056139][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.063754][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.075738][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.083460][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.093984][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.102383][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.110681][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.139504][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.170957][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.217422][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.267559][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.724234][T19651] syzkaller0: entered promiscuous mode [ 1191.751916][T19651] syzkaller0: entered allmulticast mode [ 1193.824495][T19713] gretap0 speed is unknown, defaulting to 1000 [ 1193.985394][T19722] __nla_validate_parse: 2 callbacks suppressed [ 1193.985414][T19722] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12594'. [ 1194.045867][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12594'. [ 1194.092378][T19727] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1194.251431][T19733] sctp: [Deprecated]: syz.4.12599 (pid 19733) Use of int in maxseg socket option. [ 1194.251431][T19733] Use struct sctp_assoc_value instead [ 1194.816325][T19769] netlink: 244 bytes leftover after parsing attributes in process `syz.1.12610'. [ 1194.982449][T19778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12613'. [ 1195.029695][T19772] bridge_slave_1: left allmulticast mode [ 1195.039332][T19772] bridge_slave_1: left promiscuous mode [ 1195.049613][T19772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.112454][T19772] bridge_slave_0: left allmulticast mode [ 1195.133880][T19772] bridge_slave_0: left promiscuous mode [ 1195.141137][T19772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.581624][T19821] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12623'. [ 1195.631190][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12623'. [ 1195.667023][T19827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12625'. [ 1195.711638][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12625'. [ 1195.764125][T19830] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1195.787819][T19831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12627'. [ 1195.806380][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12626'. [ 1195.883859][T19834] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1196.207363][T19854] nbd: must specify at least one socket [ 1196.231838][T19854] block nbd2: NBD_DISCONNECT [ 1196.255374][T19854] block nbd2: Send disconnect failed -110 [ 1196.271415][T19854] block nbd2: shutting down sockets [ 1196.481696][T19870] netlink: 'syz.2.12638': attribute type 10 has an invalid length. [ 1196.525095][T19870] veth0_vlan: left promiscuous mode [ 1196.539732][T19870] veth0_vlan: entered promiscuous mode [ 1196.549885][T19876] netlink: 'syz.1.12642': attribute type 1 has an invalid length. [ 1196.566902][T19870] team0: Device veth0_vlan failed to register rx_handler [ 1196.634462][T19876] bond3: entered promiscuous mode [ 1196.640814][T19876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1196.678595][T19886] gre1: entered promiscuous mode [ 1196.683681][T19886] gre1: entered allmulticast mode [ 1197.244821][T19915] sctp: [Deprecated]: syz.0.12652 (pid 19915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1197.244821][T19915] Use struct sctp_sack_info instead [ 1197.466841][T19922] dvmrp0: entered allmulticast mode [ 1197.928030][T19936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1198.129261][T11615] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1198.422806][T11615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.445607][T11615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.467101][T11615] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1198.479591][T11615] bond0 (unregistering): Released all slaves [ 1198.494218][T11615] bond1 (unregistering): Released all slaves [ 1198.520835][T11615] bond2 (unregistering): Released all slaves [ 1198.538949][T11615] bond3 (unregistering): Released all slaves [ 1198.558858][T11615] bond4 (unregistering): Released all slaves [ 1198.586610][T11615] bond5 (unregistering): Released all slaves [ 1198.609171][T11615] bond6 (unregistering): Released all slaves [ 1198.623695][T11615] bond7 (unregistering): Released all slaves [ 1198.772915][T11615] tipc: Left network mode [ 1198.860001][T19963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1198.897666][T19964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1199.143188][T19980] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1199.450722][T20002] netlink: 'syz.0.12681': attribute type 1 has an invalid length. [ 1199.577554][T20013] __nla_validate_parse: 11 callbacks suppressed [ 1199.577573][T20013] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12682'. [ 1199.632419][T20002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1199.974456][T20029] atomic_op ffff88803bdb4998 conn xmit_atomic 0000000000000000 [ 1201.684554][T11615] hsr_slave_0: left promiscuous mode [ 1201.691437][T11615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.699490][T11615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.742053][T11615] pimreg (unregistering): left allmulticast mode [ 1202.147452][T20074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12694'. [ 1202.162218][T20072] delete_channel: no stack [ 1202.171059][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12695'. [ 1202.193071][T20066] syzkaller0: entered promiscuous mode [ 1202.199581][T20066] syzkaller0: entered allmulticast mode [ 1202.260654][T20084] netlink: 'syz.3.12697': attribute type 1 has an invalid length. [ 1202.366021][T20088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12696'. [ 1202.382595][T20084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1202.421157][T20097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12696'. [ 1202.438313][T20090] bond1: (slave geneve2): making interface the new active one [ 1202.450111][T20090] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1202.451489][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12697'. [ 1202.582571][T20104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12700'. [ 1202.657510][T11615] IPVS: stop unused estimator thread 0... [ 1202.876644][T20130] netlink: 'syz.0.12704': attribute type 61 has an invalid length. [ 1203.026763][T19715] udevd[19715]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1203.050294][T19714] udevd[19714]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1203.112834][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12706'. [ 1203.241647][T20156] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12709'. [ 1205.230309][T13621] lec:lec_start_xmit: lec0:No lecd attached [ 1205.530691][T20104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1205.703782][T20178] netlink: 'syz.2.12715': attribute type 3 has an invalid length. [ 1205.776145][T20186] netlink: 6 bytes leftover after parsing attributes in process `syz.2.12715'. [ 1205.879016][T20196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1205.931629][T20194] tipc: Enabled bearer , priority 0 [ 1205.956938][T20197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1205.980373][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12722'. [ 1205.996643][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12722'. [ 1206.036698][T20194] tipc: Disabling bearer [ 1206.105577][T20207] tipc: Started in network mode [ 1206.110464][T20207] tipc: Node identity 4e9c2ac2a5a3, cluster identity 4711 [ 1206.132400][T20207] tipc: Enabled bearer , priority 0 [ 1206.206580][T20208] syzkaller0: entered promiscuous mode [ 1206.212270][T20208] syzkaller0: entered allmulticast mode [ 1206.219848][T20208] tipc: Resetting bearer [ 1206.243894][T20208] tipc: Resetting bearer [ 1207.874174][T20208] tipc: Disabling bearer [ 1207.904294][T17507] tipc: Node number set to 3946785474 [ 1207.969567][T20215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.983480][T20215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.994781][T20246] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1208.028980][T20246] tipc: Enabling of bearer rejected, failed to enable media [ 1208.126470][T20215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1208.146226][T20215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.190036][T20260] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 1, id = 0 [ 1208.292020][T20215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1208.332786][T20215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.406684][T20264] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1208.419250][T20264] bond4 (unregistering): Released all slaves [ 1208.544313][T20215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1208.575757][T20215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.789592][T20308] ipvlan3: entered allmulticast mode [ 1208.796082][T20308] batadv_slave_1: entered allmulticast mode [ 1208.804406][T20308] batman_adv: batadv0: Adding interface: ipvlan3 [ 1208.812271][T20308] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.815938][T20310] Cannot find del_set index 1 as target [ 1208.846660][T20308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1208.858502][T20308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.869540][T20308] batman_adv: batadv0: Interface activated: ipvlan3 [ 1208.903438][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.912666][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.963536][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.981273][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.999728][T20317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12754'. [ 1209.024139][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1209.032924][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.057100][T20322] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1209.078166][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1209.099364][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.349330][T20337] netlink: 'syz.3.12760': attribute type 1 has an invalid length. [ 1209.412173][T20337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1209.439233][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12760'. [ 1209.549591][T20337] veth3: entered promiscuous mode [ 1209.558765][T20337] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1209.669018][T20349] netlink: 'syz.2.12764': attribute type 5 has an invalid length. [ 1209.679580][T20352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12765'. [ 1209.849854][T20363] netlink: 276 bytes leftover after parsing attributes in process `syz.0.12766'. [ 1209.926799][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12771'. [ 1209.952732][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12770'. [ 1209.971543][T20368] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1210.002513][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12770'. [ 1210.002791][T20368] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1210.050959][T20374] netlink: 'syz.3.12771': attribute type 1 has an invalid length. [ 1210.058871][T20368] gretap1: entered promiscuous mode [ 1210.058891][T20368] gretap1: entered allmulticast mode [ 1210.122557][T20377] geneve2: entered promiscuous mode [ 1210.130498][T20377] geneve2: entered allmulticast mode [ 1210.324746][T20391] tc_dump_action: action bad kind [ 1210.375708][T20394] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1210.451644][T20399] batadv1: entered allmulticast mode [ 1210.715126][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5480 ms [ 1210.723198][ C1] lec:lec_tx_timeout: lec0 [ 1210.831785][T20419] syzkaller0: entered promiscuous mode [ 1210.841463][T20419] syzkaller0: entered allmulticast mode [ 1210.856642][T20421] syzkaller0: entered promiscuous mode [ 1210.862215][T20421] syzkaller0: entered allmulticast mode [ 1210.900307][T20425] __nla_validate_parse: 7 callbacks suppressed [ 1210.900325][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12791'. [ 1210.938985][T20421] tipc: Started in network mode [ 1210.943919][T20421] tipc: Node identity 8698bc216e1c, cluster identity 4711 [ 1210.952173][T20421] tipc: Enabled bearer , priority 0 [ 1211.041371][T20420] tipc: Resetting bearer [ 1211.091541][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12793'. [ 1211.114301][T20420] tipc: Disabling bearer [ 1211.396466][T20456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12799'. [ 1211.436634][T20454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1211.467707][T20456] vlan2: entered allmulticast mode [ 1211.472862][T20456] team_slave_1: entered allmulticast mode [ 1211.505921][T20463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12798'. [ 1211.520408][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.708044][T20478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12804'. [ 1211.709521][T20477] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1211.729141][T20478] nbd: must specify a size in bytes for the device [ 1211.754501][T20482] openvswitch: netlink: IP tunnel dst address not specified [ 1211.909560][T20491] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12807'. [ 1211.919030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.058163][T20503] xt_hashlimit: max too large, truncated to 1048576 [ 1212.161313][T20509] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.12814'. [ 1212.276636][T20520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12817'. [ 1212.397783][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.579132][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.595829][T20543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12820'. [ 1212.639127][T20544] netlink: 'syz.2.12821': attribute type 12 has an invalid length. [ 1212.773589][T20539] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1212.784408][T20539] syzkaller1: Linktype set failed because interface is up [ 1212.866975][T20556] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12826'. [ 1213.045877][T13773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.081760][T20569] erspan0: entered promiscuous mode [ 1213.604482][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.996215][T20623] : renamed from bond0 (while UP) [ 1214.042410][T20623] netlink: 'syz.3.12846': attribute type 2 has an invalid length. [ 1214.074972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.118142][T20638] netlink: 'syz.0.12852': attribute type 21 has an invalid length. [ 1214.139571][T20638] netlink: 'syz.0.12852': attribute type 21 has an invalid length. [ 1214.156435][T20638] netlink: 'syz.0.12852': attribute type 21 has an invalid length. [ 1214.196643][T20638] netlink: 'syz.0.12852': attribute type 21 has an invalid length. [ 1214.223501][T20638] netlink: 'syz.0.12852': attribute type 21 has an invalid length. [ 1214.226358][T20645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1214.238826][T20645] IPv6: NLM_F_CREATE should be set when creating new route [ 1214.404482][T20654] netlink: zone id is out of range [ 1214.416297][T20652] validate_nla: 28 callbacks suppressed [ 1214.416314][T20652] netlink: 'syz.1.12855': attribute type 1 has an invalid length. [ 1214.431377][T20652] netlink: 'syz.1.12855': attribute type 2 has an invalid length. [ 1214.444481][T20652] netlink: 'syz.1.12855': attribute type 1 has an invalid length. [ 1214.538904][T20662] netlink: 'syz.1.12859': attribute type 3 has an invalid length. [ 1214.896325][T20681] gre2: entered promiscuous mode [ 1214.901325][T20681] gre2: entered allmulticast mode [ 1215.240650][T20705] netlink: 'syz.4.12874': attribute type 5 has an invalid length. [ 1215.307986][T20705] bond2: Invalid ad_actor_system MAC address. [ 1215.314078][T20705] bond2: option ad_actor_system: invalid value (1) [ 1215.371282][T20705] bond2 (unregistering): Released all slaves [ 1215.433040][T20713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.450071][T20713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.457428][T20713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.790032][T20727] xt_cgroup: invalid path, errno=-2 [ 1215.987259][T20738] netlink: 'syz.1.12885': attribute type 1 has an invalid length. [ 1215.995248][T20738] __nla_validate_parse: 13 callbacks suppressed [ 1215.995262][T20738] netlink: 280 bytes leftover after parsing attributes in process `syz.1.12885'. [ 1216.015952][T20738] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12885'. [ 1216.077401][T20745] netlink: 'syz.2.12890': attribute type 1 has an invalid length. [ 1216.088084][T20746] netlink: 'syz.2.12890': attribute type 1 has an invalid length. [ 1216.228852][T20754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12893'. [ 1216.297645][T20761] veth0: entered promiscuous mode [ 1216.306826][T20760] veth0: left promiscuous mode [ 1216.409774][T20771] netlink: 'syz.2.12898': attribute type 83 has an invalid length. [ 1216.424495][T20771] Cannot find add_set index 0 as target [ 1216.527026][T20783] netlink: 'syz.0.12903': attribute type 1 has an invalid length. [ 1216.540654][T20781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12902'. [ 1216.589053][T20783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1216.600255][T20781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12902'. [ 1216.635862][T20783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12903'. [ 1216.723826][T17505] net_ratelimit: 16 callbacks suppressed [ 1216.723841][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.829570][T20801] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1217.194946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.427859][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12924'. [ 1217.451608][T20852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12924'. [ 1217.537612][T20852] geneve2: entered promiscuous mode [ 1217.563656][T20852] geneve2: entered allmulticast mode [ 1217.626161][T20866] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1217.643839][T20866] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1217.763962][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.155847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.235114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.275564][T20908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.296500][T20908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.306829][T20912] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12941'. [ 1218.519124][T20936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12946'. [ 1218.638134][T17507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.802436][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.031292][T20968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.133552][T20984] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20004 [ 1219.212584][T20987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.220256][T20987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.227461][T20987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.262766][T20991] syzkaller0: entered promiscuous mode [ 1219.271586][T20991] syzkaller0: entered allmulticast mode [ 1219.277721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.408037][T21002] ip6gre1: entered allmulticast mode [ 1219.498787][T21008] netlink: 'syz.0.12968': attribute type 11 has an invalid length. [ 1219.837025][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.171082][T21066] validate_nla: 5 callbacks suppressed [ 1220.171100][T21066] netlink: 'syz.4.12988': attribute type 2 has an invalid length. [ 1220.211014][T21066] 9: entered promiscuous mode [ 1220.330272][T21075] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1220.467464][T21087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.476733][T21087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.483965][T21087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.666885][T21095] netlink: 'syz.0.12997': attribute type 10 has an invalid length. [ 1220.786496][T21101] netlink: 'syz.0.12999': attribute type 2 has an invalid length. [ 1220.817618][T21101] 9: entered promiscuous mode [ 1220.839614][T21101] netlink: 'syz.0.12999': attribute type 2 has an invalid length. [ 1221.041105][T21114] __nla_validate_parse: 12 callbacks suppressed [ 1221.041134][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13003'. [ 1221.068614][T21112] netlink: 'syz.0.13004': attribute type 9 has an invalid length. [ 1221.076910][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13004'. [ 1221.164758][T21112] netlink: 'syz.0.13004': attribute type 9 has an invalid length. [ 1221.194263][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13004'. [ 1221.213881][T21124] atomic_op ffff88807f5a3198 conn xmit_atomic 0000000000000000 [ 1221.282576][T21126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13009'. [ 1221.297365][T21126] netlink: 'syz.1.13009': attribute type 33 has an invalid length. [ 1221.305619][T21126] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13009'. [ 1221.488271][T21139] netlink: 'syz.0.13016': attribute type 2 has an invalid length. [ 1221.498126][T21139] netlink: 'syz.0.13016': attribute type 1 has an invalid length. [ 1221.551938][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13015'. [ 1221.579936][T21143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13014'. [ 1221.591026][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13017'. [ 1221.614093][T21143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13014'. [ 1221.618353][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13017'. [ 1221.661500][T21144] IPv6: Can't replace route, no match found [ 1221.685102][T21145] IPv6: Can't replace route, no match found [ 1221.921185][T11382] net_ratelimit: 4 callbacks suppressed [ 1221.921203][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.991874][T21182] netlink: 'syz.0.13027': attribute type 3 has an invalid length. [ 1222.058938][T21177] bridge_slave_1: left allmulticast mode [ 1222.064724][T21177] bridge_slave_1: left promiscuous mode [ 1222.070583][T21177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.105086][T21177] bridge_slave_0: left allmulticast mode [ 1222.110764][T21177] bridge_slave_0: left promiscuous mode [ 1222.129419][T21177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.395513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.891908][T21202] infiniband syz0: set active [ 1222.912761][T21202] infiniband syz0: added bond0 [ 1222.957243][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.976851][T21202] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1222.980509][T21202] infiniband syz0: Couldn't open port 1 [ 1223.093527][T21202] RDS/IB: syz0: added [ 1223.125765][T21267] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1223.141582][T21202] smc: adding ib device syz0 with port count 1 [ 1223.147901][T21202] smc: ib device syz0 port 1 has no pnetid [ 1223.434986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.487409][T21280] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 1223.981317][T21292] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1224.000479][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.226983][T21301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.245310][T21301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.252524][T21301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.474996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.487506][T21316] gretap0: entered promiscuous mode [ 1224.533538][T21316] gretap0: left promiscuous mode [ 1224.599376][T21316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1224.702552][T21320] team0: Port device team_slave_0 removed [ 1224.715263][T17508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.827489][T21328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1224.873699][T21334] macvlan2: entered promiscuous mode [ 1224.913431][T21334] macvlan2: entered allmulticast mode [ 1224.919755][T21334] bond3: entered allmulticast mode [ 1224.925520][T21334] bond3: entered promiscuous mode [ 1224.931156][T21334] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1224.944828][T21334] team0: Port device macvlan2 added [ 1225.050286][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.219517][T21353] syzkaller0: entered promiscuous mode [ 1225.225926][T21353] syzkaller0: entered allmulticast mode [ 1225.839389][T21337] siw: device registration error -23 [ 1225.846622][T21368] gretap0 speed is unknown, defaulting to 1000 [ 1226.038557][T21377] bond2: entered allmulticast mode [ 1226.081417][T21385] __nla_validate_parse: 21 callbacks suppressed [ 1226.081435][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13086'. [ 1226.176585][T21392] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13088'. [ 1226.200055][T21385] syzkaller0: entered promiscuous mode [ 1226.203775][T21391] validate_nla: 1 callbacks suppressed [ 1226.203819][T21391] netlink: 'syz.0.13089': attribute type 1 has an invalid length. [ 1226.205589][T21385] syzkaller0: entered allmulticast mode [ 1226.278978][T21391] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13089'. [ 1226.393514][T21398] netlink: 'syz.2.13090': attribute type 1 has an invalid length. [ 1226.438768][T21398] bond3: entered promiscuous mode [ 1226.445849][T21398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1226.499512][T21398] bond3: (slave bridge1): making interface the new active one [ 1226.512558][T21398] bridge1: entered promiscuous mode [ 1226.519369][T21398] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1227.112759][T21413] net_ratelimit: 3 callbacks suppressed [ 1227.112782][T21413] openvswitch: netlink: Message has 8 unknown bytes. [ 1227.134117][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.159660][T21413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1227.206336][T21413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13096'. [ 1227.297440][T21413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13096'. [ 1227.310763][T21418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13096'. [ 1227.477283][T21422] syzkaller0: entered promiscuous mode [ 1227.492727][T21426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1227.493613][T21422] syzkaller0: entered allmulticast mode [ 1227.508659][T21424] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13100'. [ 1227.594962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.631137][T21434] x_tables: duplicate underflow at hook 2 [ 1227.757020][T17508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.785884][T21442] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13104'. [ 1227.939665][T21446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13105'. [ 1227.949325][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13107'. [ 1228.160234][T11382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.287346][T21479] netlink: 'syz.3.13116': attribute type 13 has an invalid length. [ 1228.296546][T21479] veth0_macvtap: left promiscuous mode [ 1228.302308][T21479] macvtap0: entered allmulticast mode [ 1228.335727][T21479] macvtap0: refused to change device tx_queue_len [ 1228.486220][T21486] netlink: 'syz.1.13119': attribute type 1 has an invalid length. [ 1228.494143][T21486] netlink: 'syz.1.13119': attribute type 1 has an invalid length. [ 1228.635264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.711208][T21502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1228.734093][T21508] netlink: 'syz.2.13124': attribute type 1 has an invalid length. [ 1228.763302][T21508] veth3: entered promiscuous mode [ 1229.195749][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.351501][T21539] syzkaller0: entered promiscuous mode [ 1229.361389][T21539] syzkaller0: entered allmulticast mode [ 1229.675280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.916607][T21587] netlink: 'syz.1.13145': attribute type 1 has an invalid length. [ 1229.941207][T21587] netlink: 'syz.1.13145': attribute type 2 has an invalid length. [ 1230.035736][T21602] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1230.192070][T21611] syzkaller0: entered promiscuous mode [ 1230.206126][T21611] syzkaller0: entered allmulticast mode [ 1230.222393][T21611] netlink: 'syz.4.13151': attribute type 21 has an invalid length. [ 1230.304711][T21617] ksmbd: Unknown IPC event: 3, ignore. [ 1230.580511][T21637] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1231.098454][T21666] __nla_validate_parse: 20 callbacks suppressed [ 1231.098472][T21666] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13174'. [ 1231.126659][T21666] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13174'. [ 1231.350025][T21690] netlink: 'syz.1.13180': attribute type 10 has an invalid length. [ 1231.459022][T21688] gretap0 speed is unknown, defaulting to 1000 [ 1231.673607][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13187'. [ 1231.717501][T21710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13186'. [ 1231.752020][T21712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13187'. [ 1232.030890][T21730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13194'. [ 1232.142998][T21741] netlink: 212 bytes leftover after parsing attributes in process `syz.4.13195'. [ 1232.322786][T14892] net_ratelimit: 13 callbacks suppressed [ 1232.322805][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.764679][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13207'. [ 1232.795018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.836290][T21779] mac80211_hwsim hwsim93 wlan0: entered promiscuous mode [ 1232.949335][T21784] netlink: 'syz.2.13211': attribute type 2 has an invalid length. [ 1233.032536][T21789] netlink: 'syz.3.13213': attribute type 1 has an invalid length. [ 1233.093286][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13212'. [ 1233.380124][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.388985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.470913][T21807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13217'. [ 1233.835049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.843176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.852455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.126618][T21835] netlink: 'syz.1.13229': attribute type 21 has an invalid length. [ 1234.134645][T21835] netlink: 'syz.1.13229': attribute type 5 has an invalid length. [ 1234.186650][T21839] sch_fq: defrate 0 ignored. [ 1234.271745][T21843] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1234.328357][T21847] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1234.342642][T21849] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1234.599969][T21871] netlink: 'syz.3.13241': attribute type 3 has an invalid length. [ 1234.616259][T21873] syzkaller1: entered promiscuous mode [ 1234.622058][T21873] syzkaller1: entered allmulticast mode [ 1234.627303][T21871] netlink: 'syz.3.13241': attribute type 3 has an invalid length. [ 1234.834690][T21890] tipc: Started in network mode [ 1234.841353][T21890] tipc: Node identity aa84c1a4f9d8, cluster identity 4711 [ 1234.858527][T21890] tipc: Enabled bearer , priority 0 [ 1234.929394][T21887] xt_hashlimit: overflow, try lower: 3/0 [ 1234.954989][T21871] syzkaller0: entered promiscuous mode [ 1234.960489][T21871] syzkaller0: entered allmulticast mode [ 1234.982282][T21871] tipc: Resetting bearer [ 1235.007219][T21869] tipc: Resetting bearer [ 1235.033972][T21901] netlink: 'syz.1.13247': attribute type 58 has an invalid length. [ 1235.118460][T21903] "syz.2.13248" (21903) uses obsolete ecb(arc4) skcipher [ 1236.399563][T21869] tipc: Disabling bearer [ 1236.439373][T17507] tipc: Node number set to 1398587812 [ 1236.500669][T21909] __nla_validate_parse: 10 callbacks suppressed [ 1236.500685][T21909] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.13249'. [ 1236.660034][T21916] gre0: entered promiscuous mode [ 1236.665654][T21916] gre0: entered allmulticast mode [ 1236.781791][T21933] netlink: 'syz.1.13256': attribute type 1 has an invalid length. [ 1236.790912][T21933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13256'. [ 1236.832055][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13255'. [ 1236.859418][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13255'. [ 1236.868678][T21933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.897922][T21933] bridge_slave_0 (unregistering): left allmulticast mode [ 1236.912412][T21933] bridge_slave_0 (unregistering): left promiscuous mode [ 1236.921082][T21933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.309403][T21965] pim6reg1: entered promiscuous mode [ 1237.314765][T21965] pim6reg1: entered allmulticast mode [ 1237.480487][T21979] net_ratelimit: 275 callbacks suppressed [ 1237.480503][T21979] openvswitch: netlink: Multiple metadata blocks provided [ 1237.522213][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.531081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.540036][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.855240][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13278'. [ 1237.883841][T22005] netlink: 'syz.3.13278': attribute type 4 has an invalid length. [ 1237.894028][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13273'. [ 1237.971637][T22013] xt_ecn: cannot match TCP bits for non-tcp packets [ 1237.991946][T22010] macsec1: entered promiscuous mode [ 1237.996066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.007352][T22010] bridge0: entered promiscuous mode [ 1238.021172][T22010] macsec1: entered allmulticast mode [ 1238.027465][T22010] bridge0: entered allmulticast mode [ 1238.034309][T22010] bridge0: port 1(macsec1) entered blocking state [ 1238.041738][T22010] bridge0: port 1(macsec1) entered disabled state [ 1238.060413][T22010] bridge0: left allmulticast mode [ 1238.105118][T22010] bridge0: left promiscuous mode [ 1238.196782][T22023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.206338][T22023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.216236][T22023] IPv4: Oversized IP packet from 172.20.20.10 [ 1238.219109][T22013] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1238.224326][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 1238.247698][T22026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13283'. [ 1238.348338][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13284'. [ 1238.386882][T22034] netlink: 'syz.4.13287': attribute type 2 has an invalid length. [ 1238.526144][T22045] syzkaller0: entered promiscuous mode [ 1238.532791][T22045] syzkaller0: entered allmulticast mode [ 1238.626710][T22052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13293'. [ 1238.646235][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1238.663009][T22052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13293'. [ 1238.965778][T22072] netlink: 'syz.4.13300': attribute type 11 has an invalid length. [ 1239.426030][T22098] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1239.885985][T22133] netlink: 'syz.4.13318': attribute type 29 has an invalid length. [ 1239.894913][T22133] netlink: 'syz.4.13318': attribute type 29 has an invalid length. [ 1239.903437][T22135] netlink: 'syz.4.13318': attribute type 29 has an invalid length. [ 1240.715989][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 1240.724197][T22207] netlink: 'syz.3.13344': attribute type 6 has an invalid length. [ 1240.744584][T22201] netlink: 'syz.4.13343': attribute type 1 has an invalid length. [ 1240.757739][T22207] netlink: 'syz.3.13344': attribute type 6 has an invalid length. [ 1240.813009][T22211] netlink: 'syz.2.13345': attribute type 1 has an invalid length. [ 1241.043209][T22225] : entered promiscuous mode [ 1241.553316][T22269] tipc: Enabled bearer , priority 0 [ 1241.561189][T22269] syzkaller0: entered promiscuous mode [ 1241.575346][T22269] syzkaller0: entered allmulticast mode [ 1241.623053][T22269] tipc: Resetting bearer [ 1241.662288][T22275] gretap0 speed is unknown, defaulting to 1000 [ 1241.743085][T22278] Bluetooth: MGMT ver 1.23 [ 1241.967286][T22261] tipc: Resetting bearer [ 1241.992829][T22288] Cannot find add_set index 0 as target [ 1242.018304][T22261] tipc: Disabling bearer [ 1242.288230][T22306] validate_nla: 2 callbacks suppressed [ 1242.288249][T22306] netlink: 'syz.1.13378': attribute type 13 has an invalid length. [ 1242.325943][T22309] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 1242.678847][T13773] net_ratelimit: 40 callbacks suppressed [ 1242.678866][T13773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.716355][T22326] __nla_validate_parse: 16 callbacks suppressed [ 1242.716374][T22326] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13384'. [ 1242.717628][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.746623][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.754926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.955146][T17508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.963403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.195061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.413367][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13399'. [ 1243.472699][T22373] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1243.486277][T22373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13397'. [ 1243.756992][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1243.765170][ C1] lec:lec_tx_timeout: lec0 [ 1243.788168][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.797023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.959206][T22406] netlink: 'syz.1.13407': attribute type 1 has an invalid length. [ 1243.969503][T22406] netlink: 'syz.1.13407': attribute type 3 has an invalid length. [ 1243.989604][T22406] netlink: 'syz.1.13407': attribute type 7 has an invalid length. [ 1244.003843][T22406] netlink: 'syz.1.13407': attribute type 8 has an invalid length. [ 1244.043434][T22406] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13407'. [ 1244.076230][T22406] NCSI netlink: No device for ifindex 131092 [ 1244.209229][T22416] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13409'. [ 1244.220363][T22416] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13409'. [ 1244.464530][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13412'. [ 1244.652534][T22435] netlink: 'syz.4.13414': attribute type 1 has an invalid length. [ 1245.960722][T22425] tipc: Enabled bearer , priority 0 [ 1245.968167][T22429] netlink: 'syz.2.13412': attribute type 23 has an invalid length. [ 1246.010037][T22435] bond2: entered promiscuous mode [ 1246.015770][T22435] bond2: entered allmulticast mode [ 1246.021427][T22435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1246.041691][T22408] tipc: Disabling bearer [ 1246.137282][T22445] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13415'. [ 1246.356971][T22449] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1246.369280][T22463] netlink: 'syz.0.13419': attribute type 21 has an invalid length. [ 1246.382512][T22449] bond3: entered promiscuous mode [ 1246.388641][T22449] bond3: entered allmulticast mode [ 1246.395966][T22449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1246.415657][T22463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13419'. [ 1246.939152][T22493] sctp: [Deprecated]: syz.2.13429 (pid 22493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1246.939152][T22493] Use struct sctp_sack_info instead [ 1247.015813][T22495] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 1247.057909][T22495] syzkaller1: entered promiscuous mode [ 1247.065738][T22495] syzkaller1: entered allmulticast mode [ 1247.371026][T22507] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13434'. [ 1247.542688][T22520] vlan2: entered allmulticast mode [ 1247.583023][T22520] hsr0: entered allmulticast mode [ 1247.609226][T22520] hsr_slave_0: entered allmulticast mode [ 1247.623470][T22520] hsr_slave_1: entered allmulticast mode [ 1247.703495][T22523] net_ratelimit: 31 callbacks suppressed [ 1247.703514][T22523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.728269][T22535] netlink: 'syz.2.13444': attribute type 1 has an invalid length. [ 1247.756850][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.766270][T22535] bond4: entered promiscuous mode [ 1247.771804][T22535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1247.814107][T22535] bond4: (slave bridge2): making interface the new active one [ 1247.821910][T22535] bridge2: entered promiscuous mode [ 1247.828856][T22535] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1247.921682][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.930538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.976056][T22542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13446'. [ 1248.000203][T22544] netlink: 'syz.1.13447': attribute type 4 has an invalid length. [ 1248.008869][T22544] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13447'. [ 1248.057278][T22544] `: renamed from bond0 (while UP) [ 1248.127001][T22542] geneve2: entered promiscuous mode [ 1248.142618][T22550] netlink: 'syz.2.13446': attribute type 23 has an invalid length. [ 1248.229944][T13772] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.230290][T22553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13448'. [ 1248.258509][T11615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.267407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.283268][ T6306] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.293778][T13773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.305731][ T6306] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.320506][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13448'. [ 1248.357389][ T6306] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.395041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.400277][T22553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13448'. [ 1248.442953][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13448'. [ 1248.560078][T22565] tipc: Enabled bearer , priority 0 [ 1248.570773][T22570] netlink: 'syz.2.13453': attribute type 1 has an invalid length. [ 1248.579336][T22570] netlink: 228 bytes leftover after parsing attributes in process `syz.2.13453'. [ 1248.665667][T22565] syzkaller0: entered promiscuous mode [ 1248.671240][T22565] syzkaller0: entered allmulticast mode [ 1248.677861][T22565] tipc: Resetting bearer [ 1248.707254][T22577] netlink: 'syz.4.13455': attribute type 1 has an invalid length. [ 1248.718131][T22575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13458'. [ 1248.732028][T22564] tipc: Resetting bearer [ 1248.800221][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.808374][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.844427][T22585] netlink: 'syz.2.13459': attribute type 21 has an invalid length. [ 1250.248349][T22564] tipc: Disabling bearer [ 1250.267202][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13459'. [ 1250.278390][T22587] tipc: New replicast peer: 255.255.255.255 [ 1250.285193][T22587] tipc: Enabled bearer , priority 10 [ 1250.336233][T14892] tipc: Node number set to 3901013025 [ 1250.496076][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13465'. [ 1250.642467][T22618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.649423][T22607] netlink: 'syz.3.13464': attribute type 13 has an invalid length. [ 1250.660182][T22618] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 1250.669355][T22618] team0: Failed to send options change via netlink (err -105) [ 1250.677325][T22618] team0: Port device batadv0 added [ 1250.783787][T22628] gretap0: entered promiscuous mode [ 1250.809235][T22628] lo: left promiscuous mode [ 1250.830312][T22628] gre0: left promiscuous mode [ 1250.839014][T22628] gre0: left allmulticast mode [ 1250.847209][T22628] gretap0: left promiscuous mode [ 1250.861036][T22628] erspan0: left promiscuous mode [ 1250.870521][T22628] erspan0: left allmulticast mode [ 1251.058224][T22648] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1251.277118][T17507] tipc: Node number set to 246406748 [ 1251.433089][T22671] gretap1: entered promiscuous mode [ 1251.439717][T22671] gretap1: entered allmulticast mode [ 1251.628986][T22691] netlink: 'syz.2.13493': attribute type 4 has an invalid length. [ 1251.816792][T22703] netlink: 'syz.4.13498': attribute type 1 has an invalid length. [ 1252.748667][T22752] ipvlan0: entered promiscuous mode [ 1252.805377][T11617] net_ratelimit: 43 callbacks suppressed [ 1252.805394][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.829106][T22754] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1252.957136][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.988852][T22762] netlink: 'syz.0.13518': attribute type 1 has an invalid length. [ 1253.015886][T22762] bond6: entered promiscuous mode [ 1253.021358][T22762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1253.046310][T22762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1253.053527][T22762] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 1253.065416][T22762] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1253.077859][T22762] bond6: (slave vcan0): making interface the new active one [ 1253.085432][T22762] vcan0: entered promiscuous mode [ 1253.092645][T22762] bond6: (slave vcan0): Enslaving as an active interface with an up link [ 1253.108813][T22762] tipc: Failed to remove unknown binding: 66,0,0/3946785474:3436630445/3436630446 [ 1253.128164][T17505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.136545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.173990][T22764] tipc: Failed to remove unknown binding: 66,0,0/3946785474:3436630445/3436630446 [ 1253.595252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.975447][T13773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.997991][T13773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.006413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.027427][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.121581][T22737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1255.132601][T22744] netlink: 'syz.4.13510': attribute type 1 has an invalid length. [ 1255.145427][T22744] __nla_validate_parse: 14 callbacks suppressed [ 1255.145443][T22744] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13510'. [ 1255.175039][T22769] netlink: 'syz.2.13520': attribute type 1 has an invalid length. [ 1255.182884][T22769] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13520'. [ 1255.396201][T22782] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13523'. [ 1255.458876][T22786] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1255.473104][T22786] bond4 (unregistering): Released all slaves [ 1255.601371][T22802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13531'. [ 1255.706196][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13535'. [ 1255.726517][T22810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13534'. [ 1255.741496][T22807] netlink: 'syz.0.13535': attribute type 1 has an invalid length. [ 1255.765177][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13535'. [ 1255.775679][T22812] netlink: 'syz.0.13535': attribute type 10 has an invalid length. [ 1255.788213][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13535'. [ 1255.815115][T22807] netlink: 'syz.0.13535': attribute type 1 has an invalid length. [ 1255.849569][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13535'. [ 1255.914316][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13540'. [ 1256.075446][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 1256.640571][T22879] bond0: (slave bond_slave_0): Releasing backup interface [ 1256.702645][T22879] bond0: (slave bond_slave_1): Releasing backup interface [ 1256.736979][T22879] team0: Port device team_slave_0 removed [ 1256.779298][T22879] team0: Port device team_slave_1 removed [ 1256.789037][T22879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.800665][T22879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.811426][T22879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.820600][T22879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.387716][T22934] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1257.493490][T22944] netlink: 'syz.1.13574': attribute type 3 has an invalid length. [ 1257.517435][T22947] siw: device registration error -23 [ 1257.730462][T22964] sctp: [Deprecated]: syz.4.13580 (pid 22964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1257.730462][T22964] Use struct sctp_sack_info instead [ 1258.175379][T17508] net_ratelimit: 30 callbacks suppressed [ 1258.175414][T17508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.175680][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.181553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.270187][T23002] openvswitch: netlink: EtherType 50a is less than min 600 [ 1258.292592][T22997] netlink: 'syz.2.13591': attribute type 1 has an invalid length. [ 1258.302965][T22997] netlink: 'syz.2.13591': attribute type 3 has an invalid length. [ 1258.315641][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.323918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.356809][T23004] smc: removing net device team0 with user defined pnetid SYZ2 [ 1258.369482][T23004] team0 (unregistering): Port device team_slave_1 removed [ 1258.380041][T23004] team0 (unregistering): Port device batadv0 removed [ 1258.393874][T23007] ip6tnl0: entered promiscuous mode [ 1258.409531][T23007] sctp: [Deprecated]: syz.0.13594 (pid 23007) Use of int in maxseg socket option. [ 1258.409531][T23007] Use struct sctp_assoc_value instead [ 1258.447449][T23005] netlink: 'syz.3.13592': attribute type 11 has an invalid length. [ 1258.570611][T23010] netlink: 'syz.0.13595': attribute type 9 has an invalid length. [ 1258.606191][T23019] netlink: 'syz.4.13597': attribute type 11 has an invalid length. [ 1258.795021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.818646][T23032] tipc: New replicast peer: 255.255.255.255 [ 1258.825326][T23032] tipc: Enabled bearer , priority 10 [ 1258.845259][T23032] : renamed from veth1_vlan (while UP) [ 1259.117358][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.126248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.299143][T23062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1259.356964][T14892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.454311][T23058] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1259.472033][T23080] netlink: 'syz.3.13615': attribute type 18 has an invalid length. [ 1259.477186][T23058] bond5: option arp_ip_target: invalid value (0) [ 1259.509944][T23058] bond5 (unregistering): Released all slaves [ 1259.532996][T23070] can: request_module (can-proto-5) failed. [ 1259.572480][T23069] syzkaller1: entered promiscuous mode [ 1259.580241][T23069] syzkaller1: entered allmulticast mode [ 1259.678345][T23087] bond0: entered promiscuous mode [ 1259.683572][T23087] bond0: entered allmulticast mode [ 1259.690090][T23087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.761064][T23091] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1259.928191][T23101] bond6: option all_slaves_active: invalid value (222) [ 1260.026974][T23101] bond6 (unregistering): Released all slaves [ 1260.057975][T23107] lo: Caught tx_queue_len zero misconfig [ 1260.182494][T23116] __nla_validate_parse: 15 callbacks suppressed [ 1260.182508][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13625'. [ 1260.228220][T23118] dvmrp6: entered allmulticast mode [ 1260.304113][T23120] syzkaller0: entered promiscuous mode [ 1260.310127][T23120] syzkaller0: entered allmulticast mode [ 1260.321462][T23118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13626'. [ 1260.362863][T23124] netlink: 240 bytes leftover after parsing attributes in process `syz.1.13625'. [ 1260.402153][T23123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13628'. [ 1260.648178][T23139] vlan3: entered promiscuous mode [ 1260.673593][T23139] geneve1: entered promiscuous mode [ 1260.683994][T23139] vlan3: entered allmulticast mode [ 1260.689519][T23142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13632'. [ 1260.703862][T23139] geneve1: entered allmulticast mode [ 1260.762390][T23146] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1260.770210][T23137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13632'. [ 1260.856577][T23144] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1260.879234][T23144] bond8 (unregistering): Released all slaves [ 1260.912706][T23148] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1260.933334][T23147] geneve2: entered promiscuous mode [ 1261.059009][T23158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13637'. [ 1261.361179][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13645'. [ 1261.382632][T23187] netlink: 'syz.0.13646': attribute type 4 has an invalid length. [ 1261.430028][T23187] netlink: 'syz.0.13646': attribute type 4 has an invalid length. [ 1261.651051][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13649'. [ 1261.663640][T23204] netlink: 'syz.3.13649': attribute type 12 has an invalid length. [ 1261.727556][T23204] bond5: option primary_reselect: invalid value (255) [ 1261.745956][T23204] bond5 (unregistering): Released all slaves [ 1262.146835][T23234] IPVS: Unknown mcast interface: syzkaller1 [ 1262.372443][T23250] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.13670'. [ 1262.990462][T23307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.998511][T23307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.005737][T23307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.163058][T23323] netlink: 'syz.2.13693': attribute type 3 has an invalid length. [ 1263.330852][T23330] netlink: 'syz.2.13695': attribute type 1 has an invalid length. [ 1263.795856][T23359] syzkaller0: entered promiscuous mode [ 1263.801829][T23359] syzkaller0: entered allmulticast mode [ 1264.231564][T23375] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1264.415798][T23400] netlink: 'syz.1.13720': attribute type 2 has an invalid length. [ 1264.536222][T23409] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1264.556133][T23409] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1264.656380][T23418] netlink: 'syz.1.13729': attribute type 29 has an invalid length. [ 1264.685818][T23418] netlink: 'syz.1.13729': attribute type 29 has an invalid length. [ 1264.729931][T23423] netlink: 'syz.4.13730': attribute type 23 has an invalid length. [ 1264.928973][T23439] net_ratelimit: 4 callbacks suppressed [ 1264.928989][T23439] batadv_slave_1: mtu less than device minimum [ 1265.069163][T23454] netlink: 'syz.1.13740': attribute type 10 has an invalid length. [ 1265.078931][T23451] syzkaller1: entered promiscuous mode [ 1265.093560][T23451] syzkaller1: entered allmulticast mode [ 1265.107776][T23454] dummy0: entered promiscuous mode [ 1265.113623][T23454] bridge0: port 1(dummy0) entered blocking state [ 1265.122505][T23454] bridge0: port 1(dummy0) entered disabled state [ 1265.129889][T23454] dummy0: entered allmulticast mode [ 1265.179519][T23454] bridge0: port 1(dummy0) entered blocking state [ 1265.186056][T23454] bridge0: port 1(dummy0) entered forwarding state [ 1265.259212][T23451] netlink: 'syz.0.13739': attribute type 1 has an invalid length. [ 1265.304254][T23451] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1265.561343][T23481] __nla_validate_parse: 16 callbacks suppressed [ 1265.561362][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13747'. [ 1265.603808][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13747'. [ 1265.614056][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13747'. [ 1265.680875][T23489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13749'. [ 1265.774790][T23495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13751'. [ 1266.109768][T23510] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13756'. [ 1266.144111][T23512] tipc: Enabling of bearer rejected, media not registered [ 1266.306750][T23514] netlink: 'syz.2.13758': attribute type 1 has an invalid length. [ 1266.337207][T23514] nbd: error processing sock list [ 1266.342497][T23514] block nbd0: shutting down sockets [ 1266.520059][T23528] netlink: 'syz.0.13764': attribute type 1 has an invalid length. [ 1266.589052][T23528] bond9: entered promiscuous mode [ 1266.594141][T23528] bond9: entered allmulticast mode [ 1266.615704][T23528] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1267.028795][T23554] netlink: 232 bytes leftover after parsing attributes in process `syz.3.13769'. [ 1267.067714][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13771'. [ 1267.098727][T23564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13773'. [ 1267.360238][T23584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13775'. [ 1267.550733][T23597] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 1267.734554][T23616] netlink: 'syz.0.13785': attribute type 4 has an invalid length. [ 1267.783950][T23620] syzkaller0: entered promiscuous mode [ 1267.790595][T23620] syzkaller0: entered allmulticast mode [ 1267.937150][T23631] tipc: Trying to set illegal importance in message [ 1267.952077][T23631] netlink: zone id is out of range [ 1267.966828][T23631] netlink: get zone limit has 4 unknown bytes [ 1268.069774][T23640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1268.300470][T23664] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 1268.660627][T23701] sctp: [Deprecated]: syz.4.13808 (pid 23701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1268.660627][T23701] Use struct sctp_sack_info instead [ 1268.840825][T23706] sctp: [Deprecated]: syz.0.13807 (pid 23706) Use of int in max_burst socket option deprecated. [ 1268.840825][T23706] Use struct sctp_assoc_value instead [ 1269.223334][T23733] C: renamed from lo (while UP) [ 1269.234745][T23733] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1269.351421][T23736] gretap0 speed is unknown, defaulting to 1000 [ 1269.475822][T13621] lec:lec_start_xmit: lec0:No lecd attached [ 1270.129939][T23780] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1270.372097][T23783] gretap0 speed is unknown, defaulting to 1000 [ 1270.499962][T23799] FAULT_INJECTION: forcing a failure. [ 1270.499962][T23799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.521290][T23799] CPU: 0 UID: 0 PID: 23799 Comm: syz.3.13839 Not tainted syzkaller #0 PREEMPT(full) [ 1270.521316][T23799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1270.521328][T23799] Call Trace: [ 1270.521336][T23799] [ 1270.521345][T23799] dump_stack_lvl+0xe8/0x150 [ 1270.521377][T23799] should_fail_ex+0x412/0x560 [ 1270.521409][T23799] strncpy_from_user+0x36/0x2b0 [ 1270.521439][T23799] do_tcp_setsockopt+0x2e6/0x2060 [ 1270.521470][T23799] ? get_pid_task+0x20/0x1f0 [ 1270.521498][T23799] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1270.521523][T23799] ? __lock_acquire+0x6b5/0x2cf0 [ 1270.521548][T23799] ? tcp_setsockopt+0x3d/0xe0 [ 1270.521570][T23799] tls_setsockopt+0x259/0x15c0 [ 1270.521590][T23799] ? aa_sk_perm+0x15a/0x960 [ 1270.521616][T23799] ? aa_sk_perm+0x82d/0x960 [ 1270.521640][T23799] ? __pfx_tls_setsockopt+0x10/0x10 [ 1270.521665][T23799] ? __pfx_aa_sk_perm+0x10/0x10 [ 1270.521691][T23799] ? __fget_files+0x2a/0x420 [ 1270.521708][T23799] ? aa_sock_opt_perm+0xff/0x1a0 [ 1270.521734][T23799] ? sock_common_setsockopt+0x36/0xc0 [ 1270.521752][T23799] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1270.521772][T23799] do_sock_setsockopt+0x17c/0x1b0 [ 1270.521798][T23799] __x64_sys_setsockopt+0x13d/0x1b0 [ 1270.521826][T23799] do_syscall_64+0x14d/0xf80 [ 1270.521850][T23799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.521867][T23799] ? trace_irq_disable+0x37/0x100 [ 1270.521888][T23799] ? clear_bhb_loop+0x40/0x90 [ 1270.521910][T23799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.521927][T23799] RIP: 0033:0x7f7bc039bf79 [ 1270.521943][T23799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.521959][T23799] RSP: 002b:00007f7bc1229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1270.521978][T23799] RAX: ffffffffffffffda RBX: 00007f7bc0615fa0 RCX: 00007f7bc039bf79 [ 1270.521992][T23799] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000003 [ 1270.522003][T23799] RBP: 00007f7bc1229090 R08: 0000000000000003 R09: 0000000000000000 [ 1270.522014][T23799] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1270.522026][T23799] R13: 00007f7bc0616038 R14: 00007f7bc0615fa0 R15: 00007ffd6e3b4a18 [ 1270.522055][T23799] [ 1270.783869][T23796] team0: Port device team_slave_0 removed [ 1271.471858][T23824] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1271.473878][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 1271.677406][T23832] syzkaller1: entered promiscuous mode [ 1271.703264][T23832] syzkaller1: entered allmulticast mode [ 1271.884462][T23840] rdma_op ffff88803e4f71f0 conn xmit_rdma 0000000000000000 [ 1271.961262][T23837] __nla_validate_parse: 15 callbacks suppressed [ 1271.961280][T23837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13850'. [ 1271.980444][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13850'. [ 1271.996020][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13850'. [ 1272.853197][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13860'. [ 1272.923315][T23878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13862'. [ 1273.028174][T23884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13865'. [ 1273.039915][T23884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13865'. [ 1273.072168][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13866'. [ 1273.448019][T23913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13875'. [ 1273.511214][T23916] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1273.520588][T23916] bond5: option arp_ip_target: invalid value (0) [ 1273.534501][T23916] bond5 (unregistering): Released all slaves [ 1273.543661][T23919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13877'. [ 1273.823102][T23933] gtp0: entered promiscuous mode [ 1273.893520][T23936] netlink: 'syz.2.13882': attribute type 9 has an invalid length. [ 1273.902661][T23936] netlink: 'syz.2.13882': attribute type 11 has an invalid length. [ 1273.919377][T23936] netlink: 'syz.2.13882': attribute type 12 has an invalid length. [ 1274.286006][T23957] netlink: 'syz.0.13888': attribute type 24 has an invalid length. [ 1274.413770][T23960] netlink: 'syz.3.13890': attribute type 3 has an invalid length. [ 1274.714910][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 1274.723027][ C1] lec:lec_tx_timeout: lec0 [ 1274.774705][T23982] vlan2: entered allmulticast mode [ 1274.784101][T23982] mac80211_hwsim hwsim100 wlan0: entered allmulticast mode [ 1274.891827][T23994] netlink: 'syz.3.13900': attribute type 1 has an invalid length. [ 1275.053365][T24007] IPv6: NLM_F_CREATE should be specified when creating new route [ 1275.096919][T24010] IPv6: NLM_F_CREATE should be specified when creating new route [ 1275.357871][T24033] netlink: 'syz.3.13913': attribute type 1 has an invalid length. [ 1275.366826][T24033] netlink: 'syz.3.13913': attribute type 2 has an invalid length. [ 1275.407959][T24036] syzkaller0: entered promiscuous mode [ 1275.413471][T24036] syzkaller0: entered allmulticast mode [ 1275.948396][T24083] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1275.972434][T24082] netlink: 'syz.2.13927': attribute type 16 has an invalid length. [ 1275.989956][T24082] netlink: 'syz.2.13927': attribute type 17 has an invalid length. [ 1276.119941][T24082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.127623][T24082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.213209][T24082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.228255][T24082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.314567][T24082] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1276.362971][ T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.388528][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.426602][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.446466][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.475527][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.492216][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.516930][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.526916][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.557397][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 1276.613991][T24121] set match dimension is over the limit! [ 1276.773124][T24124] syzkaller0: entered promiscuous mode [ 1276.784734][T24124] syzkaller0: entered allmulticast mode [ 1276.797905][T24127] vcan0: entered promiscuous mode [ 1276.802963][T24127] vcan0: entered allmulticast mode [ 1277.097056][T24149] __nla_validate_parse: 15 callbacks suppressed [ 1277.097076][T24149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13942'. [ 1278.609937][T24145] gre2: entered promiscuous mode [ 1278.615289][T24145] gre2: entered allmulticast mode [ 1278.890681][T24172] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1278.978246][T24172] bond5 (unregistering): Released all slaves [ 1279.014175][T24184] netlink: 'syz.1.13951': attribute type 23 has an invalid length. [ 1279.026991][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13952'. [ 1279.072842][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13952'. [ 1279.241520][T24196] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1279.260895][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13954'. [ 1279.273624][T24204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13958'. [ 1279.329870][T24206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1279.423317][T24210] netlink: 124 bytes leftover after parsing attributes in process `syz.3.13960'. [ 1279.491393][T24221] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1279.575947][T24226] netlink: 187308 bytes leftover after parsing attributes in process `syz.0.13963'. [ 1279.608557][T24221] netlink: 'syz.0.13963': attribute type 2 has an invalid length. [ 1279.624159][T24221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13963'. [ 1279.666882][T24233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13968'. [ 1279.924650][T24243] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 1279.932478][T24247] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13975'. [ 1280.107446][T24258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1280.663316][T24307] netlink: 'syz.3.13994': attribute type 4 has an invalid length. [ 1280.811677][T24314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.745516][T24398] netlink: 'syz.3.14023': attribute type 9 has an invalid length. [ 1282.186804][T24424] __nla_validate_parse: 11 callbacks suppressed [ 1282.186820][T24424] netlink: 112 bytes leftover after parsing attributes in process `syz.4.14031'. [ 1282.208851][T24428] syzkaller0: entered promiscuous mode [ 1282.214433][T24428] syzkaller0: entered allmulticast mode [ 1282.277222][T24431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14034'. [ 1282.311766][T24435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14035'. [ 1282.615635][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14042'. [ 1282.778432][T24466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14047'. [ 1282.872880][T24474] openvswitch: netlink: Flow key attribute not present in set flow. [ 1283.036377][T24485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.084680][T24491] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1283.218217][T24504] Unsupported ieee802154 address type: 0 [ 1283.406674][T24508] netlink: 'syz.3.14061': attribute type 1 has an invalid length. [ 1283.489427][T24521] sit0: Caught tx_queue_len zero misconfig [ 1283.651420][T24527] team0 (unregistering): Port device team_slave_1 removed [ 1283.686936][T24529] .: renamed from bridge_slave_1 (while UP) [ 1283.724579][T24536] syzkaller0: entered promiscuous mode [ 1283.732871][T24536] syzkaller0: entered allmulticast mode [ 1283.753698][T24529] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1284.165482][T24559] netlink: 'syz.2.14078': attribute type 1 has an invalid length. [ 1284.193645][T24559] netlink: 232 bytes leftover after parsing attributes in process `syz.2.14078'. [ 1284.244354][T24568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14079'. [ 1284.287636][T24574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1284.296997][T24561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14077'. [ 1284.347240][T24569] syzkaller0: entered promiscuous mode [ 1284.352738][T24569] syzkaller0: entered allmulticast mode [ 1284.522170][T24589] netlink: 'syz.2.14087': attribute type 10 has an invalid length. [ 1284.538895][T24590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14084'. [ 1285.051965][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14097'. [ 1285.222264][T24633] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 1285.247337][T24633] bond4 (unregistering): Released all slaves [ 1285.258240][T24643] netlink: 'syz.3.14104': attribute type 3 has an invalid length. [ 1285.290712][T24637] IPv6: sit2: Disabled Multicast RS [ 1285.468487][T24660] tipc: Enabled bearer , priority 0 [ 1285.561011][T24658] syzkaller0: entered promiscuous mode [ 1285.569581][T24658] syzkaller0: entered allmulticast mode [ 1285.577224][T24658] tipc: Resetting bearer [ 1285.605522][T24656] tipc: Resetting bearer [ 1287.420899][T24656] tipc: Disabling bearer [ 1287.550809][T24702] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1288.067884][T24746] __nla_validate_parse: 5 callbacks suppressed [ 1288.067903][T24746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14126'. [ 1288.262962][T24764] ip6gre2: entered promiscuous mode [ 1288.275814][T24764] ip6gre2: entered allmulticast mode [ 1288.351747][T24771] netlink: 'syz.4.14135': attribute type 1 has an invalid length. [ 1288.388403][T24771] bond4: entered promiscuous mode [ 1288.394145][T24771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1288.461349][T24771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1288.473839][T24771] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 1288.506574][T24771] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 1288.522521][T24771] bond4: (slave vti1): making interface the new active one [ 1288.529928][T24771] vti1: entered promiscuous mode [ 1288.536334][T24771] bond4: (slave vti1): Enslaving as an active interface with an up link [ 1288.680146][T24790] syzkaller0: entered promiscuous mode [ 1288.688762][T24790] syzkaller0: entered allmulticast mode [ 1290.226446][T24812] netlink: 'syz.4.14145': attribute type 1 has an invalid length. [ 1290.350104][T24820] tipc: Enabled bearer , priority 10 [ 1290.372459][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14149'. [ 1290.387187][T24820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1290.406174][T24820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14149'. [ 1290.415937][T24820] netlink: 'syz.4.14149': attribute type 5 has an invalid length. [ 1290.424825][T24820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14149'. [ 1290.439249][T24820] netlink: 'syz.4.14149': attribute type 1 has an invalid length. [ 1290.448000][T24820] netlink: 'syz.4.14149': attribute type 2 has an invalid length. [ 1290.457555][T24820] netlink: 'syz.4.14149': attribute type 1 has an invalid length. [ 1290.727461][T24840] openvswitch: netlink: IP tunnel dst address not specified [ 1290.832413][T24851] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14158'. [ 1290.851099][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14158'. [ 1291.095739][T24860] netlink: 'syz.4.14159': attribute type 10 has an invalid length. [ 1291.681487][T24833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.721939][T24833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.260547][T24833] bond3: left allmulticast mode [ 1292.269487][T24833] bond3: left promiscuous mode [ 1292.371117][T11615] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.402592][T11615] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.464597][T11615] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.486612][T11615] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.818339][T24908] netlink: 'syz.1.14172': attribute type 29 has an invalid length. [ 1292.828902][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14171'. [ 1292.834138][T24910] SET target dimension over the limit! [ 1292.867102][T17509] IPVS: starting estimator thread 0... [ 1292.896701][T24908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14172'. [ 1292.921309][T24908] netlink: 'syz.1.14172': attribute type 12 has an invalid length. [ 1292.933150][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14174'. [ 1292.934628][T24908] netlink: 'syz.1.14172': attribute type 29 has an invalid length. [ 1292.944577][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14174'. [ 1292.965393][T24913] IPVS: using max 30 ests per chain, 72000 per kthread [ 1292.977758][T24915] tipc: Trying to set illegal importance in message [ 1292.988867][ T6308] bond0: (slave bond_slave_0): interface is now down [ 1293.000161][T24917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.008506][ T6308] bond0: (slave bond_slave_1): interface is now down [ 1293.234603][T24929] netlink: 'syz.1.14179': attribute type 11 has an invalid length. [ 1293.250768][T24929] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14179'. [ 1293.341587][T24936] netlink: 'syz.2.14181': attribute type 23 has an invalid length. [ 1293.461645][T24945] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14184'. [ 1293.814749][T24979] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14194'. [ 1293.931675][T24989] bond5: (slave ip6gretap1): making interface the new active one [ 1293.943944][T24989] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1293.987930][T24991] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14197'. [ 1294.190302][T25012] syzkaller0: entered allmulticast mode [ 1294.279650][T25012] syzkaller0 (unregistering): left allmulticast mode [ 1294.379250][T25014] syzkaller0: entered promiscuous mode [ 1294.396524][T25014] syzkaller0: entered allmulticast mode [ 1294.430564][T25014] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14203'. [ 1294.631025][T25043] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.14211'. [ 1294.698249][T25046] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14213'. [ 1294.731033][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14214'. [ 1294.780360][T25056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14214'. [ 1294.909099][T25067] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14217'. [ 1294.999685][T25067] syzkaller0: entered promiscuous mode [ 1295.015747][T25067] syzkaller0: entered allmulticast mode [ 1295.144716][ T6306] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1295.156567][ T6306] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1295.177793][ T6306] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1295.195863][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1295.339593][T25090] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1295.516520][ T36] bond0: (slave bond_slave_0): interface is now down [ 1295.523457][ T36] bond0: (slave bond_slave_1): interface is now down [ 1295.536555][ T36] bond0: now running without any active interface! [ 1295.580009][T25105] validate_nla: 5 callbacks suppressed [ 1295.580024][T25105] netlink: 'syz.2.14233': attribute type 30 has an invalid length. [ 1295.980722][T25128] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1296.232713][T25137] tipc: Enabling of bearer rejected, already enabled [ 1296.288994][T25137] netlink: 'syz.4.14242': attribute type 1 has an invalid length. [ 1296.616335][T25153] netlink: 'syz.0.14248': attribute type 2 has an invalid length. [ 1296.654452][T25148] gretap0 speed is unknown, defaulting to 1000 [ 1296.665411][T25157] team_slave_0: Caught tx_queue_len zero misconfig [ 1297.097723][T25171] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20000 [ 1297.349391][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1297.369172][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1297.381835][T25187] Bluetooth: MGMT ver 1.23 [ 1297.388979][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1297.411704][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1297.461336][T25189] delete_channel: no stack [ 1297.747832][T25206] netlink: 'syz.3.14266': attribute type 26 has an invalid length. [ 1297.775297][T25206] netlink: 'syz.3.14266': attribute type 26 has an invalid length. [ 1297.914019][T25216] syzkaller0: entered promiscuous mode [ 1297.925773][T25216] syzkaller0: entered allmulticast mode [ 1298.041512][T25223] netlink: 'syz.2.14271': attribute type 1 has an invalid length. [ 1298.303817][T25228] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1298.331060][T25228] bond6: (slave bond7): making interface the new active one [ 1298.353828][T25228] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1298.396807][T25247] __nla_validate_parse: 18 callbacks suppressed [ 1298.396823][T25247] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14277'. [ 1298.415658][T25247] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 1298.442466][T25233] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 1298.466732][T25223] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1298.648326][T25258] x_tables: unsorted entry at hook 3 [ 1298.854168][T25262] geneve2: entered promiscuous mode [ 1298.867989][T25267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14282'. [ 1298.887907][T25262] geneve2: entered allmulticast mode [ 1298.909341][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1298.929341][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1298.980635][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1298.990599][T25267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14282'. [ 1299.000662][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1300.091020][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1301.145083][T25325] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1301.177071][T25332] netlink: 'syz.4.14302': attribute type 26 has an invalid length. [ 1301.185836][T25332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14302'. [ 1301.196114][T25332] netlink: 'syz.4.14302': attribute type 1 has an invalid length. [ 1301.308132][T25334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14302'. [ 1301.317189][T25332] bond6: entered promiscuous mode [ 1301.317838][T25332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1301.351199][T25334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14302'. [ 1301.390444][T25332] bond6: (slave bridge5): making interface the new active one [ 1301.398322][T25332] bridge5: entered promiscuous mode [ 1301.404736][T25332] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1301.419692][T25341] netlink: 83 bytes leftover after parsing attributes in process `syz.0.14303'. [ 1301.496905][T25349] s5: renamed from vlan1 (while UP) [ 1301.644336][T25358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14311'. [ 1301.660170][T25359] IPVS: stopping master sync thread 22309 ... [ 1301.673064][T25359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14313'. [ 1301.906904][T25375] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14318'. [ 1301.968927][T25379] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1301.977927][T25379] netlink: 'syz.4.14319': attribute type 26 has an invalid length. [ 1302.126925][T25392] netlink: 'syz.2.14324': attribute type 2 has an invalid length. [ 1302.399383][T25412] pim6reg: entered allmulticast mode [ 1302.409367][T25413] pim6reg: left allmulticast mode [ 1302.508203][T25417] netlink: 'syz.4.14332': attribute type 11 has an invalid length. [ 1302.543545][T25423] openvswitch: netlink: Unknown nsh attribute 0 [ 1302.829755][T25441] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1303.478748][T25486] syzkaller1: entered promiscuous mode [ 1303.484283][T25486] syzkaller1: entered allmulticast mode [ 1303.546166][T25492] netlink: 'syz.0.14351': attribute type 11 has an invalid length. [ 1304.117070][T25519] __nla_validate_parse: 5 callbacks suppressed [ 1304.117088][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14358'. [ 1304.154550][T25523] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14357'. [ 1304.196089][T25523] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14357'. [ 1304.222138][T25528] : renamed from veth1_vlan (while UP) [ 1304.269426][T25523] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14357'. [ 1304.611780][T25549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14364'. [ 1305.183973][T25596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14376'. [ 1305.368164][T25607] netlink: 'syz.4.14381': attribute type 9 has an invalid length. [ 1305.385459][T25601] nbd0: detected capacity change from 0 to 127 [ 1305.397119][ T5829] block nbd0: Receive control failed (result -32) [ 1305.408501][T25605] block nbd0: Dead connection, failed to find a fallback [ 1305.434892][T25605] block nbd0: shutting down sockets [ 1305.440151][T25605] blk_print_req_error: 138 callbacks suppressed [ 1305.440166][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.456967][T25605] buffer_io_error: 138 callbacks suppressed [ 1305.456980][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.471117][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.480998][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.489043][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.498883][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.515857][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.545153][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.552980][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.587505][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.613804][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.645001][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.652964][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.683482][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.715050][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.726906][T25613] tipc: Enabled bearer , priority 0 [ 1305.745455][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.753330][T25605] ldm_validate_partition_table(): Disk read failed. [ 1305.755096][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1305.767956][ C1] lec:lec_tx_timeout: lec0 [ 1305.789696][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.815128][T25623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14387'. [ 1305.827665][T25613] syzkaller0: entered promiscuous mode [ 1305.833224][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.852511][T25613] syzkaller0: entered allmulticast mode [ 1305.875142][T25605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1305.915222][T25605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1305.923136][T25605] Dev nbd0: unable to read RDB block 0 [ 1305.979406][T25605] nbd0: unable to read partition table [ 1306.022624][T25605] ldm_validate_partition_table(): Disk read failed. [ 1306.034388][T25605] Dev nbd0: unable to read RDB block 0 [ 1306.040917][T25605] nbd0: unable to read partition table [ 1306.069959][T25613] tipc: Resetting bearer [ 1306.104274][T25605] ldm_validate_partition_table(): Disk read failed. [ 1306.122362][T25612] tipc: Resetting bearer [ 1306.130321][T25605] Dev nbd0: unable to read RDB block 0 [ 1306.139948][T25605] nbd0: unable to read partition table [ 1306.227717][T25612] tipc: Disabling bearer [ 1306.445583][T25659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14395'. [ 1306.466009][T25659] netlink: 'syz.2.14395': attribute type 7 has an invalid length. [ 1306.489047][T25661] netlink: 'syz.4.14396': attribute type 13 has an invalid length. [ 1306.503222][T25659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14395'. [ 1306.515503][T25661] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14396'. [ 1306.553345][T25661] syz_tun: refused to change device tx_queue_len [ 1306.706188][T25681] block nbd2: not configured, cannot reconfigure [ 1306.779021][T25687] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1307.006769][T25708] netlink: 'syz.2.14408': attribute type 10 has an invalid length. [ 1307.049036][T25711] IPVS: Unknown mcast interface: vcan0 [ 1307.260151][T25721] netlink: 'syz.4.14416': attribute type 5 has an invalid length. [ 1307.270627][T25725] sctp: [Deprecated]: syz.2.14417 (pid 25725) Use of int in max_burst socket option. [ 1307.270627][T25725] Use struct sctp_assoc_value instead [ 1307.505509][T25745] netlink: 'syz.1.14422': attribute type 15 has an invalid length. [ 1307.785866][T25759] netlink: 'syz.4.14429': attribute type 1 has an invalid length. [ 1307.821290][T25763] lo: entered promiscuous mode [ 1307.838945][T25763] lo: entered allmulticast mode [ 1307.854502][T25759] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1307.969930][T25776] block nbd3: not configured, cannot reconfigure [ 1308.080253][T25784] netlink: 'syz.1.14436': attribute type 13 has an invalid length. [ 1308.107926][T25784] veth0_macvtap: left promiscuous mode [ 1308.117058][T25784] macvtap0: entered allmulticast mode [ 1308.127590][T25784] macvtap0: refused to change device tx_queue_len [ 1308.247889][T25792] syzkaller0: entered promiscuous mode [ 1308.253419][T25792] syzkaller0: entered allmulticast mode [ 1308.336008][T25796] tipc: Enabled bearer , priority 0 [ 1308.434313][T25796] syzkaller0: entered promiscuous mode [ 1308.441585][T25796] syzkaller0: entered allmulticast mode [ 1308.449904][T25796] tipc: Resetting bearer [ 1308.510860][T25802] IPv6: sit1: Disabled Multicast RS [ 1308.542818][T25794] tipc: Resetting bearer [ 1308.682229][T25818] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1310.111672][T25794] tipc: Disabling bearer [ 1310.126687][T25827] netlink: 'syz.0.14449': attribute type 7 has an invalid length. [ 1310.455872][T25855] __nla_validate_parse: 14 callbacks suppressed [ 1310.455891][T25855] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14454'. [ 1310.502677][T25857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14457'. [ 1310.733487][T25863] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1310.749873][T25863] bond10 (unregistering): Released all slaves [ 1310.782640][T25867] netlink: 'syz.1.14460': attribute type 5 has an invalid length. [ 1310.828518][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14455'. [ 1310.943718][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14463'. [ 1310.953286][T25878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14463'. [ 1310.974008][ T6315] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.983276][ T6315] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.992474][ T6315] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.002626][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14463'. [ 1311.012566][T25878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14463'. [ 1311.023167][ T6315] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.098812][T25886] x_tables: duplicate underflow at hook 2 [ 1311.121693][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14464'. [ 1311.232076][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14466'. [ 1311.278240][T25894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14466'. [ 1311.384150][T25741] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1311.413289][T11617] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1311.425510][T11617] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1311.434257][T11617] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1311.607662][T25915] netlink: 'syz.1.14473': attribute type 9 has an invalid length. [ 1311.686803][T25922] x_tables: duplicate underflow at hook 2 [ 1311.795785][T25931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1311.868002][T25933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 1311.877666][T25937] geneve3: entered promiscuous mode [ 1311.896837][ T6315] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 46474 - 0 [ 1311.907740][ T6315] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 46474 - 0 [ 1311.950417][ T6315] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 46474 - 0 [ 1311.999348][ T6315] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 46474 - 0 [ 1312.482900][ T5833] Bluetooth: hci1: command 0x0405 tx timeout [ 1312.873703][T25986] gretap0 speed is unknown, defaulting to 1000 [ 1312.913042][T25991] netlink: 'syz.4.14494': attribute type 1 has an invalid length. [ 1312.999553][T25995] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1313.317460][T26003] veth0_to_team: entered promiscuous mode [ 1313.347645][T26003] veth0_to_team: left promiscuous mode [ 1313.354304][T26007] netlink: 'syz.4.14500': attribute type 1 has an invalid length. [ 1313.749038][T26025] syzkaller0: entered promiscuous mode [ 1313.754572][T26025] syzkaller0: entered allmulticast mode [ 1313.769040][T26019] netlink: 'syz.2.14504': attribute type 13 has an invalid length. [ 1313.785851][T26032] netlink: 'syz.1.14505': attribute type 1 has an invalid length. [ 1313.810228][T26026] vlan1: entered promiscuous mode [ 1313.817063][T26026] hsr_slave_1: entered promiscuous mode [ 1313.822802][T26026] vlan1: entered allmulticast mode [ 1313.837659][T26026] hsr_slave_1: entered allmulticast mode [ 1313.898546][T26032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1314.025689][T26034] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1314.074046][T26034] bond7 (unregistering): Released all slaves [ 1316.800422][T26134] __nla_validate_parse: 11 callbacks suppressed [ 1316.800441][T26134] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14525'. [ 1316.866040][T26134] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14525'. [ 1316.876699][T26139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14527'. [ 1316.885975][T26134] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14525'. [ 1316.916397][T26138] gretap0 speed is unknown, defaulting to 1000 [ 1317.029996][T26145] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1317.513374][T26168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14535'. [ 1317.570131][T26167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14535'. [ 1317.698657][T26167] bond7: option xmit_hash_policy: invalid value (64) [ 1317.711777][T26179] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14538'. [ 1317.723599][T26167] bond7 (unregistering): Released all slaves [ 1317.732102][T26183] netlink: 'syz.0.14539': attribute type 2 has an invalid length. [ 1317.807253][T26183] 9: entered promiscuous mode [ 1317.816652][T26175] gretap0 speed is unknown, defaulting to 1000 [ 1317.967110][T26189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14542'. [ 1318.148865][T26197] syzkaller1: entered promiscuous mode [ 1318.154394][T26197] syzkaller1: entered allmulticast mode [ 1318.187752][T26197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14545'. [ 1318.447374][T26208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14549'. [ 1318.475534][T26209] netlink: 'syz.0.14548': attribute type 1 has an invalid length. [ 1318.566748][T26209] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1318.592378][T26204] bond10: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1318.692110][T26209] tipc: Enabling of bearer rejected, failed to enable media [ 1319.936437][T26267] netlink: 'syz.2.14566': attribute type 4 has an invalid length. [ 1320.833663][T26310] syz_tun: entered allmulticast mode [ 1320.870525][T26310] dvmrp8: entered allmulticast mode [ 1320.878100][T26310] dvmrp8: left allmulticast mode [ 1320.958413][T26309] syz_tun: left allmulticast mode [ 1321.050995][T26322] ipvlan1: entered allmulticast mode [ 1321.072216][T26322] batadv_slave_1: entered allmulticast mode [ 1321.094044][T26322] batman_adv: batadv0: Adding interface: ipvlan1 [ 1321.118837][T26322] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.180462][T26322] batman_adv: batadv0: Interface activated: ipvlan1 [ 1321.354102][T26341] netlink: 'syz.3.14590': attribute type 1 has an invalid length. [ 1321.385545][T26344] sctp: [Deprecated]: syz.4.14589 (pid 26344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1321.385545][T26344] Use struct sctp_sack_info instead [ 1321.461151][T26351] lo: Caught tx_queue_len zero misconfig [ 1321.739827][T26363] pimreg: entered allmulticast mode [ 1321.913330][T26373] __nla_validate_parse: 16 callbacks suppressed [ 1321.913350][T26373] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14599'. [ 1322.298644][T26399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14608'. [ 1322.315451][T14894] IPVS: starting estimator thread 0... [ 1322.397756][T26411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14608'. [ 1322.444944][T26402] IPVS: using max 31 ests per chain, 74400 per kthread [ 1322.473558][T26411] bridge0: entered allmulticast mode [ 1322.493788][T26423] x_tables: duplicate entry at hook 3 [ 1322.650216][T26429] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.14612'. [ 1322.681627][T26430] ip6gre4: entered promiscuous mode [ 1322.701188][T26430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14613'. [ 1322.759375][T26430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14613'. [ 1322.952142][T26442] pimreg3: entered allmulticast mode [ 1322.968245][ T5829] Bluetooth: hci1: command 0x0405 tx timeout [ 1323.084352][T26446] gretap0 speed is unknown, defaulting to 1000 [ 1323.260427][T26455] tipc: Enabled bearer , priority 0 [ 1323.290404][T26455] syzkaller0: entered promiscuous mode [ 1323.310991][T26455] syzkaller0: entered allmulticast mode [ 1323.322245][T26460] netlink: 'syz.0.14624': attribute type 1 has an invalid length. [ 1323.336208][T26455] tipc: Resetting bearer [ 1323.363056][T26460] netlink: 'syz.0.14624': attribute type 1 has an invalid length. [ 1323.371676][T26454] tipc: Resetting bearer [ 1323.390325][T26460] netlink: 'syz.0.14624': attribute type 1 has an invalid length. [ 1323.421917][T14894] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1323.450586][T26454] tipc: Disabling bearer [ 1323.700472][T26469] netlink: 'syz.3.14628': attribute type 6 has an invalid length. [ 1324.106822][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14632'. [ 1324.126748][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14632'. [ 1324.155011][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14632'. [ 1324.175983][T26512] tipc: Enabling of bearer rejected, failed to enable media [ 1324.205587][T26512] sctp: [Deprecated]: syz.0.14635 (pid 26512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1324.205587][T26512] Use struct sctp_sack_info instead [ 1324.318653][T26514] syzkaller0: entered promiscuous mode [ 1324.324452][T26514] syzkaller0: entered allmulticast mode [ 1324.333709][T26514] 0: reclassify loop, rule prio 0, protocol 800 [ 1324.347880][T26518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14638'. [ 1324.420835][T26518] IPVS: Error connecting to the multicast addr [ 1324.708416][T26527] netlink: 'syz.0.14641': attribute type 1 has an invalid length. [ 1324.849171][T26527] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1324.935634][T26526] bond11: (slave veth5): Enslaving as an active interface with a down link [ 1324.985980][T26529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1324.993885][T26529] bond11: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1325.062210][T26540] netlink: 'syz.2.14644': attribute type 1 has an invalid length. [ 1325.381267][T26558] netlink: 'syz.3.14649': attribute type 29 has an invalid length. [ 1325.557860][T26571] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1325.583925][T26571] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1325.605876][T26571] gretap4: entered promiscuous mode [ 1325.614339][T26571] gretap4: entered allmulticast mode [ 1325.621661][T26577] netlink: 'syz.3.14654': attribute type 1 has an invalid length. [ 1325.664648][T26577] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1325.729156][T26573] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1325.757951][T26577] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1325.868168][T26573] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1326.032350][T26599] hsr_slave_0 (unregistering): left promiscuous mode [ 1326.044798][T26605] netlink: 'syz.4.14665': attribute type 1 has an invalid length. [ 1326.224011][T26611] openvswitch: netlink: EtherType 50a is less than min 600 [ 1326.246811][T26613] netlink: 'syz.4.14669': attribute type 11 has an invalid length. [ 1326.255886][T26611] sctp: [Deprecated]: syz.3.14670 (pid 26611) Use of int in maxseg socket option. [ 1326.255886][T26611] Use struct sctp_assoc_value instead [ 1326.259777][T26613] netlink: 'syz.4.14669': attribute type 11 has an invalid length. [ 1326.538336][T26637] tipc: Enabling of bearer rejected, failed to enable media [ 1326.559924][T26638] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1326.577322][T26639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1326.898065][T26655] gretap0 speed is unknown, defaulting to 1000 [ 1327.203832][T26675] vcan0: entered promiscuous mode [ 1327.214676][T26675] vcan0: entered allmulticast mode [ 1327.378895][T26682] netlink: 'syz.4.14691': attribute type 1 has an invalid length. [ 1327.517046][T26687] __nla_validate_parse: 23 callbacks suppressed [ 1327.517064][T26687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14693'. [ 1327.743379][T26693] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14695'. [ 1327.853775][T26697] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14697'. [ 1328.044929][T26704] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 1328.052735][T26704] batman_adv: batadv0: Removing interface: ipvlan1 [ 1328.209822][T26715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14705'. [ 1328.443985][T26727] validate_nla: 1 callbacks suppressed [ 1328.444003][T26727] netlink: 'syz.0.14708': attribute type 83 has an invalid length. [ 1328.447376][T26729] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14709'. [ 1328.471401][T26730] netlink: 'syz.0.14708': attribute type 83 has an invalid length. [ 1328.602579][T26734] netlink: 'syz.0.14711': attribute type 1 has an invalid length. [ 1328.678292][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14713'. [ 1328.696165][T26744] netlink: 'syz.0.14711': attribute type 1 has an invalid length. [ 1328.723291][T26742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14713'. [ 1328.751812][T26745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14711'. [ 1328.816880][T26736] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1328.849464][T26736] bond8 (unregistering): Released all slaves [ 1328.878007][T26748] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14715'. [ 1328.887767][T26748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14715'. [ 1329.219629][T26763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1329.465238][T26775] syzkaller0: entered promiscuous mode [ 1329.475507][T26775] syzkaller0: entered allmulticast mode [ 1330.277745][T26837] tipc: Enabling of bearer rejected, already enabled [ 1330.423493][T26850] netlink: 'syz.4.14742': attribute type 1 has an invalid length. [ 1330.493468][T26850] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1330.509524][T26859] macvlan3: entered promiscuous mode [ 1330.515224][T26859] macvlan3: entered allmulticast mode [ 1330.561777][T26864] pim6reg1: entered promiscuous mode [ 1330.572336][T26864] pim6reg1: entered allmulticast mode [ 1330.653162][T26871] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1330.775641][T26881] gretap0 speed is unknown, defaulting to 1000 [ 1330.981511][T26886] netlink: 'syz.1.14748': attribute type 9 has an invalid length. [ 1331.038547][T26886] netlink: 'syz.1.14748': attribute type 9 has an invalid length. [ 1331.433647][T26894] vlan0: entered promiscuous mode [ 1331.440057][T26894] geneve1: entered promiscuous mode [ 1331.446050][T26894] vlan0: entered allmulticast mode [ 1331.451280][T26894] geneve1: entered allmulticast mode [ 1332.935963][T13621] lec:lec_start_xmit: lec0:No lecd attached [ 1333.335584][T26843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1333.497097][T26906] __nla_validate_parse: 10 callbacks suppressed [ 1333.497115][T26906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14752'. [ 1333.730159][T26920] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1333.745532][T26920] bond7 (unregistering): Released all slaves [ 1333.769001][T26936] netlink: 'syz.3.14761': attribute type 13 has an invalid length. [ 1333.787436][T26931] veth0_to_bridge: mtu less than device minimum [ 1333.810459][T26938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14759'. [ 1333.821153][T26941] netlink: 'syz.3.14761': attribute type 4 has an invalid length. [ 1333.844004][T26936] gretap0: refused to change device tx_queue_len [ 1333.850721][T26941] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14761'. [ 1333.860248][T26936] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1333.950351][T26941] `: renamed from  [ 1333.954751][T26936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14761'. [ 1333.973322][T26929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14761'. [ 1334.501361][T26988] tipc: Enabled bearer , priority 0 [ 1334.540795][T26980] tipc: Disabling bearer [ 1335.042635][T27022] SET target dimension over the limit! [ 1335.089161][T27014] can: request_module (can-proto-0) failed. [ 1335.103497][T27028] SET target dimension over the limit! [ 1335.131877][T27026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14786'. [ 1335.208479][T27031] netlink: 'syz.4.14787': attribute type 1 has an invalid length. [ 1335.241344][T27034] netlink: 'syz.0.14790': attribute type 1 has an invalid length. [ 1335.489801][T27055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14796'. [ 1335.543620][T27059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14798'. [ 1335.613343][T27063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14799'. [ 1335.653953][T27063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14799'. [ 1335.682818][T27062] netlink: 'syz.3.14800': attribute type 16 has an invalid length. [ 1335.728404][T27062] netlink: 'syz.3.14800': attribute type 17 has an invalid length. [ 1335.824397][T27062] 8021q: adding VLAN 0 to HW filter on device ` [ 1335.836557][T27062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.853024][T27062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1335.880793][T27074] syzkaller0: entered promiscuous mode [ 1335.886578][T27074] syzkaller0: entered allmulticast mode [ 1335.894091][T27074] tipc: Started in network mode [ 1335.905240][T27074] tipc: Node identity 9632fda74f27, cluster identity 4711 [ 1335.913000][T27074] tipc: Enabled bearer , priority 0 [ 1336.015926][T27071] tipc: Resetting bearer [ 1336.048834][T27071] tipc: Disabling bearer [ 1336.352192][T27108] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1336.439490][T27112] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 1336.605808][T27123] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1336.727301][T27125] netlink: 'syz.0.14819': attribute type 1 has an invalid length. [ 1336.804301][T27127] syzkaller0: entered promiscuous mode [ 1336.810345][T27127] syzkaller0: entered allmulticast mode [ 1337.000164][T27133] syzkaller1: entered promiscuous mode [ 1337.005942][T27133] syzkaller1: entered allmulticast mode [ 1337.238943][T27161] netlink: Unknown conntrack attr (0) [ 1337.448221][T27178] netlink: 'syz.1.14836': attribute type 10 has an invalid length. [ 1337.552619][T27185] openvswitch: netlink: IP tunnel dst address not specified [ 1337.570270][T27187] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1337.601275][T27183] ip6gre1: entered promiscuous mode [ 1338.304553][T27233] syzkaller0: entered promiscuous mode [ 1338.316363][T27233] syzkaller0: entered allmulticast mode [ 1338.337664][T27239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1338.348482][ C0] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88807b90b400: connection exists (01 00). last cmd: 14 [ 1338.423687][T27241] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1338.449402][T27241] hsr_slave_0: left promiscuous mode [ 1338.460249][T27241] hsr_slave_1: left promiscuous mode [ 1338.512021][T27243] __nla_validate_parse: 90 callbacks suppressed [ 1338.512037][T27243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14861'. [ 1338.589529][T27245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14862'. [ 1338.599619][T27245] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1338.666530][T27230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14855'. [ 1338.714866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 1338.722950][ C1] lec:lec_tx_timeout: lec0 [ 1338.981572][T27261] netlink: 260 bytes leftover after parsing attributes in process `syz.1.14866'. [ 1339.130164][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14869'. [ 1339.138208][T27272] set match dimension is over the limit! [ 1339.180079][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14869'. [ 1339.404093][T27288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14874'. [ 1339.441389][T27288] xt_hashlimit: invalid rate [ 1339.848847][T27297] netlink: 'syz.3.14876': attribute type 61 has an invalid length. [ 1339.876082][T27297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14876'. [ 1339.952470][T27303] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14879'. [ 1340.073615][T27303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14879'. [ 1340.753934][T27332] netlink: 'syz.3.14886': attribute type 2 has an invalid length. [ 1340.781075][T27334] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1341.106226][ T49] [ 1341.108614][ T49] ====================================================== [ 1341.115649][ T49] WARNING: possible circular locking dependency detected [ 1341.122700][ T49] syzkaller #0 Not tainted [ 1341.127178][ T49] ------------------------------------------------------ [ 1341.134209][ T49] kworker/u8:3/49 is trying to acquire lock: [ 1341.140213][ T49] ffff88808c986f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1341.149343][ T49] [ 1341.149343][ T49] but task is already holding lock: [ 1341.156718][ T49] ffff88807ae6a158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1341.166595][ T49] [ 1341.166595][ T49] which lock already depends on the new lock. [ 1341.166595][ T49] [ 1341.177006][ T49] [ 1341.177006][ T49] the existing dependency chain (in reverse order) is: [ 1341.186029][ T49] [ 1341.186029][ T49] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 1341.194312][ T49] _raw_spin_lock+0x2e/0x40 [ 1341.199358][ T49] sch_direct_xmit+0x15f/0x4c0 [ 1341.204672][ T49] __dev_queue_xmit+0x1538/0x3850 [ 1341.210246][ T49] hsr_forward_skb+0x157b/0x2860 [ 1341.215729][ T49] send_hsr_supervision_frame+0x731/0xcb0 [ 1341.221987][ T49] hsr_announce+0x1db/0x370 [ 1341.227023][ T49] call_timer_fn+0x192/0x5a0 [ 1341.232155][ T49] __run_timer_base+0x652/0x8b0 [ 1341.237539][ T49] run_timer_softirq+0xb7/0x170 [ 1341.242955][ T49] handle_softirqs+0x22a/0x7c0 [ 1341.248259][ T49] __irq_exit_rcu+0x5f/0x150 [ 1341.253391][ T49] irq_exit_rcu+0x9/0x30 [ 1341.258173][ T49] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1341.264346][ T49] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1341.270882][ T49] hrtimer_nanosleep+0x18b/0x390 [ 1341.276377][ T49] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1341.282467][ T49] do_syscall_64+0x14d/0xf80 [ 1341.287618][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.294072][ T49] [ 1341.294072][ T49] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 1341.301826][ T49] __lock_acquire+0x15a5/0x2cf0 [ 1341.307216][ T49] lock_acquire+0x106/0x330 [ 1341.312264][ T49] _raw_spin_lock_bh+0x36/0x50 [ 1341.317589][ T49] hsr_dev_xmit+0x237/0x360 [ 1341.322638][ T49] dev_hard_start_xmit+0x2cd/0x7f0 [ 1341.328297][ T49] __dev_queue_xmit+0x168f/0x3850 [ 1341.333888][ T49] NF_HOOK+0x33a/0x3c0 [ 1341.338502][ T49] arp_xmit+0x16c/0x270 [ 1341.343201][ T49] arp_solicit+0xbe0/0xe40 [ 1341.348179][ T49] __neigh_event_send+0xf05/0x14a0 [ 1341.353825][ T49] neigh_resolve_output+0x198/0x750 [ 1341.359568][ T49] ip_finish_output2+0xca9/0x1070 [ 1341.365138][ T49] ip_output+0x29f/0x450 [ 1341.369930][ T49] iptunnel_xmit+0x59f/0xa00 [ 1341.375076][ T49] ip_tunnel_xmit+0x193a/0x1f20 [ 1341.380490][ T49] __gre_xmit+0x19e/0x240 [ 1341.385363][ T49] erspan_xmit+0xa81/0x1670 [ 1341.390436][ T49] dev_hard_start_xmit+0x2cd/0x7f0 [ 1341.396088][ T49] sch_direct_xmit+0x251/0x4c0 [ 1341.401400][ T49] __dev_queue_xmit+0x1538/0x3850 [ 1341.406971][ T49] alb_send_lp_vid+0x348/0x550 [ 1341.412300][ T49] alb_send_learning_packets+0x12c/0x300 [ 1341.418486][ T49] bond_alb_monitor+0x3d5/0x17e0 [ 1341.423975][ T49] process_scheduled_works+0xaec/0x17a0 [ 1341.430064][ T49] worker_thread+0xa50/0xfc0 [ 1341.435202][ T49] kthread+0x388/0x470 [ 1341.439819][ T49] ret_from_fork+0x51e/0xb90 [ 1341.444954][ T49] ret_from_fork_asm+0x1a/0x30 [ 1341.450265][ T49] [ 1341.450265][ T49] other info that might help us debug this: [ 1341.450265][ T49] [ 1341.460497][ T49] Possible unsafe locking scenario: [ 1341.460497][ T49] [ 1341.467977][ T49] CPU0 CPU1 [ 1341.473347][ T49] ---- ---- [ 1341.478727][ T49] lock(&qdisc_xmit_lock_key#4); [ 1341.483782][ T49] lock(&hsr->seqnr_lock); [ 1341.490823][ T49] lock(&qdisc_xmit_lock_key#4); [ 1341.498397][ T49] lock(&hsr->seqnr_lock); [ 1341.502917][ T49] [ 1341.502917][ T49] *** DEADLOCK *** [ 1341.502917][ T49] [ 1341.511079][ T49] 11 locks held by kworker/u8:3/49: [ 1341.516287][ T49] #0: ffff88805a6b4148 ((wq_completion)bond1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1341.527380][ T49] #1: ffffc90000ba7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1341.540281][ T49] #2: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 1341.549890][ T49] #3: ffffffff8e75e100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 1341.559858][ T49] #4: ffff88807b69e228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 1341.572517][ T49] #5: ffff88807ae6a158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1341.582831][ T49] #6: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1341.591739][ T49] #7: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1341.601514][ T49] #8: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1341.610341][ T49] #9: ffffffff8e75e100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 1341.620297][ T49] #10: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1341.629554][ T49] [ 1341.629554][ T49] stack backtrace: [ 1341.635474][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1341.635498][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1341.635512][ T49] Workqueue: bond1 bond_alb_monitor [ 1341.635533][ T49] Call Trace: [ 1341.635542][ T49] [ 1341.635550][ T49] dump_stack_lvl+0xe8/0x150 [ 1341.635577][ T49] print_circular_bug+0x2e1/0x300 [ 1341.635605][ T49] check_noncircular+0x12e/0x150 [ 1341.635632][ T49] __lock_acquire+0x15a5/0x2cf0 [ 1341.635656][ T49] ? __siphash_unaligned+0x25f/0x3b0 [ 1341.635685][ T49] ? __flow_hash_from_keys+0x45b/0x6e0 [ 1341.635711][ T49] ? hsr_dev_xmit+0x237/0x360 [ 1341.635726][ T49] lock_acquire+0x106/0x330 [ 1341.635744][ T49] ? hsr_dev_xmit+0x237/0x360 [ 1341.635766][ T49] ? hsr_dev_xmit+0x237/0x360 [ 1341.635781][ T49] _raw_spin_lock_bh+0x36/0x50 [ 1341.635801][ T49] ? hsr_dev_xmit+0x237/0x360 [ 1341.635817][ T49] hsr_dev_xmit+0x237/0x360 [ 1341.635833][ T49] ? hsr_dev_xmit+0x2d/0x360 [ 1341.635851][ T49] dev_hard_start_xmit+0x2cd/0x7f0 [ 1341.635882][ T49] __dev_queue_xmit+0x168f/0x3850 [ 1341.635910][ T49] ? __dev_queue_xmit+0x274/0x3850 [ 1341.635935][ T49] ? arpt_do_table+0x261/0x1ec0 [ 1341.635956][ T49] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1341.635983][ T49] ? __pfx_arpt_do_table+0x10/0x10 [ 1341.636003][ T49] ? rcu_is_watching+0x15/0xb0 [ 1341.636029][ T49] ? NF_HOOK+0xa2/0x3c0 [ 1341.636052][ T49] NF_HOOK+0x33a/0x3c0 [ 1341.636074][ T49] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1341.636098][ T49] ? NF_HOOK+0xa2/0x3c0 [ 1341.636119][ T49] ? __pfx_NF_HOOK+0x10/0x10 [ 1341.636141][ T49] ? lock_acquire+0x106/0x330 [ 1341.636160][ T49] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1341.636185][ T49] ? inet_addr_type_dev_table+0x25/0x190 [ 1341.636214][ T49] arp_xmit+0x16c/0x270 [ 1341.636236][ T49] ? arp_xmit+0x23/0x270 [ 1341.636268][ T49] arp_solicit+0xbe0/0xe40 [ 1341.636296][ T49] ? arp_solicit+0x119/0xe40 [ 1341.636320][ T49] ? __pfx_arp_solicit+0x10/0x10 [ 1341.636348][ T49] ? __neigh_event_send+0xe9d/0x14a0 [ 1341.636368][ T49] ? __pfx_arp_solicit+0x10/0x10 [ 1341.636391][ T49] __neigh_event_send+0xf05/0x14a0 [ 1341.636417][ T49] neigh_resolve_output+0x198/0x750 [ 1341.636438][ T49] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1341.636466][ T49] ? ip_finish_output2+0x3c2/0x1070 [ 1341.636490][ T49] ip_finish_output2+0xca9/0x1070 [ 1341.636514][ T49] ? ip_skb_dst_mtu+0x109/0xa50 [ 1341.636537][ T49] ? ip_finish_output+0x33a/0x3f0 [ 1341.636561][ T49] ip_output+0x29f/0x450 [ 1341.636583][ T49] ? ip_output+0x5b/0x450 [ 1341.636604][ T49] iptunnel_xmit+0x59f/0xa00 [ 1341.636639][ T49] ip_tunnel_xmit+0x193a/0x1f20 [ 1341.636674][ T49] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1341.636701][ T49] ? __pfx_gre_build_header+0x10/0x10 [ 1341.636728][ T49] __gre_xmit+0x19e/0x240 [ 1341.636748][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 1341.636774][ T49] ? __pfx___gre_xmit+0x10/0x10 [ 1341.636793][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 1341.636817][ T49] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1341.636848][ T49] erspan_xmit+0xa81/0x1670 [ 1341.636870][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 1341.636896][ T49] ? __pfx_erspan_xmit+0x10/0x10 [ 1341.636924][ T49] dev_hard_start_xmit+0x2cd/0x7f0 [ 1341.636956][ T49] sch_direct_xmit+0x251/0x4c0 [ 1341.636988][ T49] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1341.637015][ T49] ? bond_alb_monitor+0x3d5/0x17e0 [ 1341.637032][ T49] ? kthread+0x300/0x470 [ 1341.637057][ T49] ? ret_from_fork+0x51e/0xb90 [ 1341.637080][ T49] __dev_queue_xmit+0x1538/0x3850 [ 1341.637111][ T49] ? __dev_queue_xmit+0x274/0x3850 [ 1341.637141][ T49] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1341.637170][ T49] ? rcu_is_watching+0x15/0xb0 [ 1341.637191][ T49] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1341.637213][ T49] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1341.637250][ T49] ? alb_send_lp_vid+0x14e/0x550 [ 1341.637272][ T49] alb_send_lp_vid+0x348/0x550 [ 1341.637294][ T49] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1341.637321][ T49] alb_send_learning_packets+0x12c/0x300 [ 1341.637342][ T49] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1341.637363][ T49] ? bond_alb_monitor+0xf8/0x17e0 [ 1341.637384][ T49] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1341.637407][ T49] bond_alb_monitor+0x3d5/0x17e0 [ 1341.637428][ T49] ? bond_alb_monitor+0xf8/0x17e0 [ 1341.637448][ T49] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1341.637468][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 1341.637487][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 1341.637507][ T49] process_scheduled_works+0xaec/0x17a0 [ 1341.637541][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 1341.637564][ T49] ? assign_work+0x3d5/0x5e0 [ 1341.637585][ T49] worker_thread+0xa50/0xfc0 [ 1341.637619][ T49] kthread+0x388/0x470 [ 1341.637643][ T49] ? __pfx_worker_thread+0x10/0x10 [ 1341.637662][ T49] ? __pfx_kthread+0x10/0x10 [ 1341.637688][ T49] ret_from_fork+0x51e/0xb90 [ 1341.637710][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 1341.637730][ T49] ? __switch_to+0xc7d/0x1400 [ 1341.637748][ T49] ? __pfx_kthread+0x10/0x10 [ 1341.637774][ T49] ret_from_fork_asm+0x1a/0x30 [ 1341.637808][ T49] [ 1342.226350][T14894] syz1: Port: 1 Link DOWN [ 1342.258301][ T6315] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.268844][ T6315] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.289210][ T6315] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1342.312865][ T6315] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.330761][ T6315] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.340384][ T6315] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1342.373646][ T6315] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.383224][ T6315] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.392787][ T6315] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1342.405849][ T6315] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.417518][ T6315] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.427492][ T6315] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0