last executing test programs: 5.228145982s ago: executing program 3 (id=13550): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x10, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3ffffd, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) 5.199754284s ago: executing program 3 (id=13551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) (async, rerun: 64) poll(0x0, 0x0, 0x10001) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r5) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) 5.028142515s ago: executing program 3 (id=13554): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\"\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) 4.748728227s ago: executing program 3 (id=13557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) socket(0x11, 0x6, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x81}) (async, rerun: 64) syz_emit_ethernet(0x7e, &(0x7f0000002340)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x3ff, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000001, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x20}}}}}}}}}, 0x0) (async, rerun: 64) shutdown(r1, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x200}) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) (async) listen(r4, 0x802) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9febf2ff180000000000000024000000240000000600000000000000000000020300000002000000000000100000000004000000000000120200000000005f006100"], 0x0, 0x42, 0x0, 0x1}, 0x20) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000380)={0x4, {{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e24, 0x9, @mcast1, 0x49}}}, 0x108) setsockopt$inet6_int(r3, 0x29, 0x14, 0x0, 0xfff3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) recvmmsg(r6, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) (async) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) (async, rerun: 64) write$bt_hci(r6, &(0x7f0000000200)=ANY=[], 0x6) (async, rerun: 64) writev(r5, &(0x7f0000000140)=[{&(0x7f00000006c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000ff00000000000000", 0x58}], 0x1) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00008996c8113d55229a06000000943b461b17aaaaaaaa0a2daaaaaaaaaabb4305"], 0x12) 4.308029218s ago: executing program 3 (id=13562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) readv(r5, &(0x7f0000001680)=[{&(0x7f0000000000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/67, 0x43}], 0x9) 3.866866146s ago: executing program 3 (id=13570): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14"], 0x18, 0x8001}}], 0x1, 0x80) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0xffffffff, {{0xa, 0x0, 0x0, @private1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) unshare(0x6a040000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000010000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000d0000010000030900020073797a31000000000500010007000000280007800c000180080001400a0101020c0014800800012eac1414100c00028008000140ffffffff"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0441, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES16, @ANYRES32=r5, @ANYRES8=r6, @ANYRESDEC], 0xfdef) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, 0x0, 0x8000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe9}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x2, @loopback}, @in6={0xa, 0x4e24, 0x5, @mcast1, 0x4}, @in={0x2, 0x4e21, @private=0xa010101}], 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x24, 0x3a, 0xff, @remote, @mcast2, {[@dstopts={0xb4}], @mlv2_query={0x82, 0x0, 0x0, 0x401, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x4, 0x7}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) 2.076906439s ago: executing program 0 (id=13590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2}, &(0x7f0000000080)=0x8) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.889009439s ago: executing program 0 (id=13593): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffe0, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000001c0)=0x8, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 64) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) 1.799873308s ago: executing program 1 (id=13595): r0 = socket(0x80000000000000a, 0x9, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x56}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfbd2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x0, 0xb, 0x4, 0x2, 0x5392, 0xfb9d, 0x8, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc050000000000000000053582bd37153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 1.496026972s ago: executing program 1 (id=13597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaee}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000980), 0xe) listen(r5, 0x0) ioctl$sock_SIOCINQ(r5, 0x5411, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x30, 0x29, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0xa}, {0xfff2, 0xfff3}, {0x6, 0xa}}, [@tclass_kind_options=@c_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000080e11b915f2eeacdc37b7cc9858624a6c549cd1cc1443b29b7cb6c1e0993073338c92b6f96f136e173aed5bcd46ba541b283c64e92e9a0b1cd6e741e525da854f2be17402fc0cc25f1e32e12e899f3a06096ffd1c829cfa9cbf73658033c504008d89348eb208eb0809425ec69203aa23f32396fc676de531f84007c01334bb8a134f26607598b5f61c664306f715c8e32279fda7c5b78f60fb2c9d3b06e9db71c8f12ae4c9a01154fdea383413aedd07d6d56139d7b4919a7709ea649d8b6ecb17fc075aefd8cb37771b3a1abb5a1", @ANYRES16=r10, @ANYBLOB="01002abd7000000000004e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab00fcffffff08000b00a76000000600110002000000"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062014000000200009500000000040000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.495628672s ago: executing program 2 (id=13598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.461368328s ago: executing program 0 (id=13599): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000540)={{r0, &(0x7f0000000180)='vcan0\x00', 0x40500, &(0x7f0000000300)={@align=0xfffffffffffffffe, {0x9, 0x9, 0x9, 0x2}}, 0x80000000, &(0x7f0000000340), &(0x7f0000000380)=0xffff}, 0x2, &(0x7f0000000500)=[{0x1, 0xfffffffc, &(0x7f00000003c0)='vcan0\x00', &(0x7f0000000400)="94272d59e43c54570c334ba36158700582fa6db1462e1786256f04be098df11f921b37dea9e5afac5a2daeffaeb332dd4166a0a8", 0x34}, {0x2, 0x2, &(0x7f0000000440)='{]/}**-$+\x00', &(0x7f0000000480)="e05a691a09d2a909aa85712879c0e0e9918a6ed901d712fef17a2c21fc0646bd8f73b24e488016dd6b2b85d1da6dc531751d8587bd877581d1c1c9d9b82a260346afb7130ae223a6223f00f121a594df390d1c5b2470ad98f9eccd524362f014d50754bd424e235515915078", 0x6c, 0x22}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x10, 0x300, 0x70bd25, 0x25dfdbfd, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xffe0}, {0x7, 0x5}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f00000005c0)=[{0x6, 0x60, 0x8}, {0x80, 0x7, 0x20, 0xeb25}]}) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000080)=0x9) (async) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000080)=0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000016c0)={r2, &(0x7f0000000680)="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", &(0x7f0000001680)=@tcp6=r2}, 0x20) r6 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) write$ppp(r4, &(0x7f0000000540)='|Z', 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="e03f030041000b05d25a806c8c6394f90324fc60100000040a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) (async) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x0, 0x0) 1.44527403s ago: executing program 4 (id=13600): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.284130347s ago: executing program 4 (id=13601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) close(0x4) getsockname(r2, 0x0, 0x0) (async) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}}, 0x0) 1.28363637s ago: executing program 2 (id=13602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket(0x1e, 0x1, 0x0) recvmmsg(r2, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}}], 0x1, 0x40000161, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x7, 0x66, 0x68, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x6}, {"92de7b253fdcf89d15d599cb58511c3efe6eea31b11b67944960fec8de12b986ba3d8ae4c8330900000040da57842b55726a6aa269847c6a10c6"}}}}, 0x74) 1.007313057s ago: executing program 4 (id=13603): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0xffdffffc, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x5104}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xfffffff7}}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c000) 990.985414ms ago: executing program 1 (id=13604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x401, 0x7fff, 0x7, 0x85f3, 0x9}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc3aff7f8daad9175}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0xe}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 884.605701ms ago: executing program 2 (id=13605): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00 ', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25170000000c000600010000000100000010003080050002000b00000004000180"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)="3b651e0eba74c3a6ce", 0x9, 0x24000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) recvfrom(r2, 0x0, 0x0, 0x99bcb88da02507f2, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1405, 0x300, 0x70bd2a, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) sendto(r5, 0x0, 0x30, 0x4000800, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 814.602329ms ago: executing program 1 (id=13606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x15}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 690.235361ms ago: executing program 2 (id=13607): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x90) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) 632.378124ms ago: executing program 4 (id=13608): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb8, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0xa0, 0x1, 0x0, 0x1, [@nested={0x9c, 0x129, 0x0, 0x1, [@generic="5a5d82cf", @nested={0x89, 0xa8, 0x0, 0x1, [@generic="61fef901a3223f8425eabb0fb47319b3a099cabd5b5bd36ca78d9715f905fe129e76517489717c4f7ded3ce5e8ddac662f6e4b0e9646050611e128daca7052bfcc7aa9b2eec25a6ac6dafe", @nested={0x4, 0x2e}, @generic="156be09d72c63c3fbf6146fd7d6ee7", @generic="bc080db12eb141ed8d6af59e15c733e5ae5fcebde94a75e5f78b94916a6e77", @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}]}, @nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0x116}]}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r8, 0x80, 0x8000, 0x1, 0x7, {{0x12, 0x4, 0x1, 0xc, 0x48, 0x66, 0x0, 0x7c, 0x1aed6261b30d0ee, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}, {[@end, @noop, @noop, @rr={0x7, 0xf, 0x10, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xe0, [@local, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002740)=@newtfilter={0x1a5c, 0x2c, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0xffff}, {0x6, 0xffe0}, {0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xe}}, @TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0xa00, 0x2, [@TCA_CGROUP_EMATCHES={0x16c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xff21, 0x7, 0x7}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x0, 0x0, 0xf}, "a6f2d34de7c26a565f68a36d33e1c6873b4caf1cfef21b4395ea8daaab4ea95c33cbca2e22055e1cd1d6d0ad578e169f801b06d83fd33fffc8eecaec24176e2fbda5dafbf4100cecc7df386aea4b933020948200a62c95ebf1e9e137dbd77747fd9312feec146bdb9456435623fe3c7366e010be13da2e30ff39db0417d2c61b5df2cae56c20144e31fd56b0a733df007f30c7000d76096615b6"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x70e, 0x3, 0x9e5}, {0xacd, 0x4, 0x7, 0x9}}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x10, 0x3, 0xa0}, {0x9, 0x3, 0x1ff}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xfff}, {0x9, 0x8, 0x9, 0x249}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x81}, {0x7fff, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x5}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x36b}, {0x5, 0x3, 0x2, "dbb142"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}, @TCA_CGROUP_POLICE={0x890, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x5, 0x7ff, 0x77d52a20, {0x0, 0x1, 0x7, 0x6, 0xf, 0x2}, {0x91, 0x2, 0x2, 0x6, 0x4, 0x6}, 0x5, 0x401, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbe2, 0x8001, 0x1, 0x80000000, 0x7, 0x9, 0x4, 0x8000, 0x2fdb, 0x8, 0x3, 0x1, 0x6, 0x800, 0x80000001, 0x1ff, 0x7, 0x2, 0x40, 0x9, 0x1, 0x1000000, 0x11e88214, 0x4, 0x8001, 0x5, 0x2, 0x0, 0x3, 0x40, 0x5, 0x5, 0x4, 0x4, 0x2, 0x81, 0x9, 0x4, 0x7, 0x0, 0x4, 0x6, 0x100, 0x101, 0x10, 0x0, 0x8, 0x7, 0x9, 0x3, 0x200, 0x52, 0x1, 0x1, 0xa82, 0x50, 0x6, 0x98, 0x8, 0x400, 0x8, 0x1, 0x5, 0x10, 0x3, 0x4, 0x0, 0x80000000, 0x6, 0xb1d0, 0x2, 0x37ac, 0xd, 0x5, 0x4, 0x6, 0x9, 0x8000, 0xfff, 0x8, 0x8000, 0x0, 0x6, 0x85c, 0x2, 0x6, 0xdfb, 0x0, 0xffffff00, 0x7, 0x80000000, 0x65, 0x7, 0x1, 0x7fff, 0x2, 0x1, 0x9, 0x5, 0x7, 0xc, 0x1, 0xfff, 0xfff, 0x2, 0x8d, 0x4, 0x100, 0x7f, 0x9, 0x3, 0x4540000, 0x7, 0x5, 0x7, 0x9, 0x81, 0x7, 0x8, 0x7fffffff, 0x2, 0x401, 0xb, 0x6, 0x4, 0x4, 0xeaa, 0xc3cc, 0x10001, 0xf69, 0x1, 0x3ff, 0x7, 0x7fff, 0x2, 0x4, 0x81, 0xffffffe3, 0xfffffff8, 0x2, 0x7, 0x2, 0xb, 0xb6b, 0x3, 0x10001, 0x2, 0x5, 0x7, 0x3, 0x6, 0x28, 0x100020, 0x5, 0x2, 0x9, 0x52, 0x6, 0x800, 0x7, 0x9, 0x7, 0x706, 0xffff1eaa, 0x3, 0xc1f, 0x5e, 0x1, 0x4, 0xb6, 0xfffffff8, 0x7, 0x2, 0x3, 0x80000000, 0x2, 0x4, 0xfffffffb, 0x7fff, 0x7, 0x3, 0x2, 0x6, 0x7fff, 0x4, 0x10001, 0x6, 0x3, 0x80000000, 0x9, 0x4, 0x3, 0x5, 0xffff, 0x5, 0x4, 0x9, 0x6681, 0x5, 0xb, 0x4d, 0x4, 0xa, 0x2, 0xf, 0x2fab8bea, 0x3, 0x3, 0x3, 0x73c5, 0x0, 0x2, 0x5, 0x80, 0xaa, 0x174, 0xd172, 0xffffffff, 0x9, 0x80000000, 0x101, 0x6, 0x81, 0x8000, 0x1, 0x5, 0x71, 0x2, 0x2, 0x79c, 0x9, 0x0, 0x0, 0x8, 0x3, 0x9, 0xdc5, 0x9, 0x8f1, 0x8001, 0x4, 0x1, 0x1, 0x3, 0x73a1, 0x6, 0x7, 0x17, 0x6, 0x1000, 0x600000, 0x6, 0xc, 0x2, 0x80, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0xb59c, 0x5, 0x5, 0x47a4, 0xfffffff8, 0xa, 0x1000, 0xfffffffa, 0xc8a, 0x3ff, 0xb211, 0x8, 0x2, 0x6, 0x9, 0x5, 0x0, 0xe4e, 0x1ff, 0x1, 0x0, 0x81, 0x7, 0x101, 0x5, 0x9, 0x10000, 0x6, 0x9, 0x7, 0xd8, 0xff, 0xfffffffa, 0x4, 0xf9, 0x8, 0x7, 0x81, 0x6737, 0x4, 0x2, 0xfffffffc, 0x4, 0x80, 0x0, 0xfff, 0x7, 0x10, 0x3, 0x2ad, 0xffffffff, 0x800, 0x66, 0x2, 0xb7a, 0x96, 0x4, 0x5, 0x4, 0x6, 0x80000001, 0x0, 0x429a, 0x8, 0x6, 0x6, 0x8, 0x9, 0x4, 0x8, 0x9, 0x2, 0x3, 0x4, 0x0, 0x4, 0x4, 0xb, 0x4fdc, 0x800, 0x0, 0x10000, 0xffff, 0x3, 0x0, 0x6, 0x6, 0x10, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0xec, 0x78c5, 0x7a2, 0x9ea, 0x3, 0x7, 0x10000, 0x279d, 0x7, 0x5, 0x8, 0x2, 0xffff, 0x9, 0x4, 0x6, 0x63d5, 0x7, 0x1, 0x236, 0x800, 0x3, 0x8, 0xd36f, 0x6, 0x4a4, 0x200, 0x1, 0x9, 0x0, 0x3, 0x6, 0x1, 0x5, 0xc71, 0x8000, 0x3, 0x1, 0x2399, 0x7ff, 0xfbe, 0x30, 0x80000000, 0x2, 0x9, 0x0, 0xea, 0x3, 0x5, 0xfffffffa, 0x80000001, 0x7f, 0x8, 0x6, 0x574, 0xd, 0x3, 0x9, 0x100, 0x5, 0x3, 0xdf, 0x0, 0x800, 0x6c, 0x6, 0x6, 0xfffffff9, 0x7, 0x6, 0x0, 0x3, 0x10, 0x7, 0xb37b, 0x3, 0x7, 0x9, 0x8000000, 0x4, 0xfffffffb, 0xf51, 0x1, 0x4, 0x7, 0x9f4, 0x1, 0x8, 0xfffffff7, 0x0, 0x0, 0x200, 0x7, 0x3, 0x8, 0xffffcf91, 0x1, 0x400, 0x4, 0x6, 0xfffffe00, 0x5, 0x3, 0x1, 0x6, 0x5, 0x6350, 0xa, 0x5, 0x6, 0x8, 0x1, 0xfe, 0x905c, 0x4, 0x4e13, 0x2, 0x0, 0x7, 0xa, 0x10001, 0xf, 0x3, 0x3, 0x10, 0x5, 0x2, 0x10000, 0xba5f, 0xe, 0xfffffffd, 0x5, 0x2, 0xcc00, 0x7ff, 0x8b61, 0x2, 0x6, 0x2, 0xc, 0x9, 0x2, 0x2, 0xb, 0x7, 0x7f, 0x6, 0x48eb, 0x81, 0x8, 0x2, 0x8000, 0x7fffffff, 0xcc0, 0x24, 0x2, 0x4, 0x7, 0xd, 0xf, 0x9, 0xbf, 0x7fff]}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x80}}, @filter_kind_options=@f_fw={{0x7}, {0xfc8, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5f}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xd51}, @TCA_FW_ACT={0xe28, 0x4, [@m_ct={0xb8, 0x1e, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "2f73b5e277991f327eb38ac8e7a982d7"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}]}, {0x4e, 0x6, "414a9c0d301247aa1e107f87897cd26520510ce11d597ddc0e22e5943992c36253025e47a7f69d96da14494efa2284a1faaf6bfab79ea2d80f8fd820c1ed0710b16d2620011d12cf2597"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_police={0x990, 0xf, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x40000000, 0x80000000, 0x7, 0xb, 0x3, 0x0, 0x8, 0x6, 0x1, 0x1, 0x2, 0x4, 0x4, 0x8, 0x8001, 0x8, 0xffffff90, 0xc, 0x6, 0x5, 0x2, 0x5, 0x3, 0xf, 0x3, 0x1, 0xe5d, 0x8, 0x198, 0xffff, 0x3, 0x6a, 0xc3, 0x7f, 0x2a12db, 0x5, 0xb5, 0x0, 0x0, 0x0, 0x7, 0x4, 0xc0, 0xfffffffc, 0x37b, 0x0, 0x5, 0x40, 0x80000000, 0xda, 0x8000, 0x2, 0x95, 0x6, 0x0, 0x5, 0xfffffff7, 0x8001, 0x4, 0x4, 0x4, 0x10000, 0x447, 0xd, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x2, 0x1, 0x1, 0x3, 0x2, 0x20000, 0xc, 0x40, 0x2, 0x4, 0xaf7d, 0x40, 0x7fffffff, 0x6, 0x2, 0xd57a, 0x6, 0x785, 0x63e, 0x9, 0x9, 0x3, 0x549, 0x8000, 0x2, 0x6, 0x3, 0xc6, 0x8, 0x9, 0x8, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x8000, 0x800, 0x6, 0xa, 0x7, 0x221, 0xeb, 0xbe, 0x4, 0x30dd, 0x7, 0x9, 0x7, 0x1, 0x703f, 0x7394, 0x85c, 0x4, 0x0, 0x5, 0x0, 0x4, 0xfffffffa, 0x100, 0x0, 0xa71, 0x7, 0x3, 0x9, 0x0, 0x7, 0x0, 0x4, 0x9, 0x405, 0xfffffffb, 0x2, 0x2, 0x6, 0x10, 0x40, 0x80000001, 0x1, 0xac3, 0x6, 0x4, 0x7, 0x9b, 0xfffff001, 0x5, 0x7, 0x9e, 0x3, 0x6, 0x2, 0x5, 0xfff, 0xffffadfe, 0x2, 0x1ff, 0x2, 0x10, 0x6, 0x8, 0x4, 0x8, 0x401, 0x7, 0x5, 0x6, 0x0, 0x300, 0xf492, 0x7, 0x21a, 0x0, 0x9, 0xfffffffb, 0x6, 0x7, 0x1, 0x6ad, 0x3, 0x9, 0xb, 0x7fc, 0x0, 0xbea, 0x1, 0x1ff, 0x200, 0x9, 0x0, 0x40, 0xfff, 0x7952b993, 0x48d3, 0xb, 0x7, 0x6, 0x1ffe0, 0x155, 0x2, 0x0, 0x0, 0x1, 0x8, 0xfffffffc, 0x0, 0xffff, 0x9, 0x0, 0x800, 0x3, 0x4, 0x7fffffff, 0x2, 0x45a, 0x81, 0x4, 0x3, 0x59412ccc, 0x3, 0x2, 0x0, 0x8, 0x6, 0x200, 0x7, 0x5, 0x7fff, 0x2, 0x401, 0x8, 0x7, 0x182, 0x6, 0xfffffffd, 0x7f, 0x9, 0xfffffffc, 0x5, 0x9, 0x8820, 0x2, 0x3, 0x80000001, 0x80000001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x5, 0xfffffff9, 0x2, 0x4, {0x2, 0x1, 0x5, 0xd, 0x75f5, 0x7}, {0x9c, 0x2, 0x4, 0x9, 0x3, 0x1}, 0x2, 0x401, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5aad, 0x1, 0x7, 0x2, 0x3ff, 0x6, 0x6, 0xa268, 0x1, 0x200, 0x3, 0x3, 0x2, 0x7, 0x7, 0xffffffa3, 0x5, 0x3, 0x1, 0x706, 0x4, 0x4, 0x80000000, 0xce, 0x10, 0x4c18, 0x10200, 0xfffffffc, 0x8, 0x8, 0x9, 0xfffff001, 0x0, 0x4, 0x5, 0x3, 0x401, 0x5, 0x9, 0x1ff, 0x5, 0x0, 0xb59, 0x101, 0xfffffffb, 0x2, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4ef, 0x8000, 0x1ff, 0x8, 0x7, 0xdbf, 0x5, 0x4, 0x8, 0x9, 0xa2, 0x3, 0x0, 0x0, 0x1, 0x6, 0x7f, 0xc, 0x4, 0xfffffff7, 0x4, 0x40, 0x2, 0x8001, 0x6, 0x1, 0x8001, 0x2, 0x4, 0xffff, 0x0, 0x3ff, 0x1, 0x4, 0x0, 0x0, 0xdb, 0x8, 0x5, 0x0, 0xb, 0x80000001, 0x5, 0x84, 0x4, 0x10000, 0x5, 0x81, 0x9, 0x9, 0x5, 0xadfa, 0x6, 0x323, 0x4, 0x3, 0x0, 0x65, 0x5248, 0x8, 0x40, 0xd, 0x690, 0x4, 0x7, 0x8, 0x1, 0xc, 0xffff2274, 0xfffffffa, 0x3d, 0x0, 0x8, 0x9, 0x6, 0x3, 0xeb38, 0x10, 0x80000000, 0x3, 0x0, 0xfffffff8, 0x80, 0x7, 0x400, 0x0, 0x7, 0xd00, 0x48, 0x6, 0x101, 0x2, 0x200, 0x7, 0x80, 0x6, 0x6, 0x30f, 0x3b6, 0x7ff, 0x8, 0x4, 0xfffffffb, 0x0, 0x0, 0xff, 0x2, 0x3, 0xd1, 0xb, 0x7, 0x0, 0xe8, 0x1, 0xe859, 0x7f, 0x2fd, 0x9b69, 0xe, 0xffffffff, 0x8, 0x6, 0x1, 0x2, 0x80000000, 0x4, 0x400, 0xfffffff7, 0xffffffff, 0xb, 0x4, 0x100, 0x80000000, 0xd, 0xfffffff5, 0x2, 0x1, 0x100, 0x7, 0x1, 0x7, 0x4, 0x7, 0xd, 0x8, 0x7, 0x5, 0x0, 0x80000000, 0x9, 0x80, 0x3, 0xfffffffe, 0x1ff, 0xd, 0x10, 0x2, 0x8, 0x2, 0x1, 0x9, 0x0, 0xffffffb9, 0x7, 0x1, 0x8, 0x2, 0x8, 0x80, 0x9, 0x6, 0x3, 0x5, 0x7, 0x4, 0xc8, 0x7, 0x8, 0x10001, 0x1800000, 0x6b7, 0x4, 0x2, 0x7, 0x800, 0x4, 0x2, 0x8, 0xffffffff, 0x1, 0x8, 0x3, 0x1, 0x4, 0x13b4, 0x7725, 0x6, 0x6, 0xfffffff8, 0xb3, 0x5, 0x10001, 0x2, 0x1, 0xfffffffd]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_RESULT={0x8}]]}, {0xe6, 0x6, "9e5fa61f5e51bd7dad998f8e85b21950fa19ce26d98347f94a6e9aa92c03c4618ae29a35771a07979e78e7ed76eb57d434484a5eca47937c05d5bdacedfcc3ca28b29ed74911d0574e5947bff377eee4e667025230d6bb443719e1b8ea2f726fa9ae635fe4adfd0c7d422847dcc6f6fdca07e71415729000c8c1b6acd7f961ffd6bfd969ec1013461c1ebcd41af076b1ff2537c30da905a29601c31b3d8931b7bfd5d27ca23da796c85691a8c366b7c824ae089eebbf6acacc2ac1be7512de649f5ec3aecd7a6651f2ad4f4b3907a852835935a694d9baa4a35476ad478290062233"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x11c, 0x12, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x8, 0x7, 0x7256, 0x7}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x35, 0x139, 0x5, 0x1, 0x6}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xffff, 0xffffffffffffffff, 0x2, 0x5f}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0xfffffffffffffffb, 0x7}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x84, 0x4, 0x1, 0xfffffff7, 0x3}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbd, 0x2, 0xffffffffffffffff, 0x7ff}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x5, 0x7, 0x2, 0x2}, 0x1, r8}}]}, {0xf, 0x6, "5bf99ea08c2613b211230b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xbc, 0x4, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5}]}, {0x7e, 0x6, "704480b9415e465d847d14b545cef14224087cb22513b76e2702d7bd2b48f67e7850c2f68254e79c258f0cf2e06b64bb74be9a5208a4fd9f74c8c33cc9994e8dbe5a1471c798a70027b4467b2065e2f9c2010d14ef89cbae5e9a976aa0704859d0b552675b07a4656852cce6dcb482b4065881aa6ce042944e9b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x12c, 0xe, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2fd, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10, 0x2, 0x7, 0x7, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xdb2, 0x8, 0x3, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x218a, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1989, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x115a, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x263a, 0x10000000}}]}, {0x94, 0x6, "b746b4963b18a725aac568d9e31e6c8a77bb37bdf510bbcf84cd55b0694cf415a2abe61729ecc72674b52a9a4e2d983a076cba2d0decb04124ce3aeeeac226f1840e3eb138900b3f6b3b3f187c180d040755d4de3714a52d93707610d2a05891767af9d678134c336f870fbc423a1918802b967155b27f9335d7ec26169f73e350a01494bf81dce346c1f492266a1ab7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x94, 0x8, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb22}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x28}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffff, 0x6, 0x2, 0x9, 0xfffffca8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x5, 0x8, 0x4, 0x2cc}}]}, {0xd, 0x6, "123674bca42ce7d81e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x44, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xe, 0x6, "013da1b72fba643bd974"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x100}, @TCA_FW_ACT={0x168, 0x4, [@m_ife={0x164, 0xd, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x3, 0xf, 0x200}}}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xbd}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x1a5c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}}}]}, 0x48}}, 0x0) 583.005441ms ago: executing program 1 (id=13609): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x300, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8048044}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) sendmsg$netlink(r1, &(0x7f0000002500)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000024c0)=[{&(0x7f00000002c0)={0x21fc, 0x38, 0x20, 0x70bd25, 0x25dfdbff, "", [@generic="4c34d76bc16bef5c7c6e0f06c05ddff6e9a000358962bbb726b29c06a424765ade26adb879298fc113d4e484675dbc0c1bded7a2174cab1d0bdab79145b6be360cf4f29dc4d599f3fc0fb836cc55b2c0bb6c85b3c6b551ba93de360a70b23190ab4923de1125a4cbce1a8ee0362bbd55d707ce9d152fe3d913569a75fac62df63dac0eaa4707af11eb83a841fc66c8f093e7985ca35cc1432cd049c8ddb1e37d2aca3850bdd92b75970769bfb6748df622acfd1ad6dc0de11a04d909aafccc5731e9a8", @typed={0xf, 0x78, 0x0, 0x0, @str='-.,,/*,,+)\x00'}, @nested={0xfe, 0x3b, 0x0, 0x1, [@generic="a0cab4d6a28a34a214edbcec1f08774aa9be97d2fcbdf55d22f98e5a05f1851e6159bee8eb10498eaea420c1b3ce280bba2db15f98f138b29977c5143ef1faca5c7cb44aebc60159c95e4693d4e47135529991557d198c2a3ca227aa3ef3ecf72ca3d5ae626be7a627c84b2c91b6b4c06d211557629227182630f22da66fd0d6cb5c1a9e7ee0865240e13869ed4a5918d50ec7dd4fef2d9b072729ae9cec0188c985bbb632bdfaf17fd6b5aea561199f9b01ca197a4d1ed379e696c33ee12c13cd01f7f0be8a321af8508e2d4e3a3407203499aff70540d82d1a0394d6a1d7e25bda4005c25b015591c2d552d6e7ce344595", @typed={0x8, 0x19, 0x0, 0x0, @uid=r2}]}, @typed={0x1004, 0x105, 0x0, 0x0, @binary="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"}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="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"]}, 0x21fc}], 0x1, 0x0, 0x0, 0x1}, 0x811) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000002540)={0xa, 0x0, 0x1, @private2, 0x40, 0x3}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_icmp(0x2, 0x2, 0x1) connect$pppl2tp(r4, &(0x7f0000002580)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x2, 0x2, 0x1}}, 0x26) r6 = socket$isdn(0x22, 0x3, 0x10) ioctl$IMCTRLREQ(r6, 0x80044945, &(0x7f00000025c0)={0x20, 0x3, 0x5, 0x10000}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) bind$l2tp6(r3, &(0x7f0000002740)={0xa, 0x0, 0xb63, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff, 0x4}, 0x20) bind$netlink(r1, &(0x7f0000002780)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002800), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x34, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7544}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24008840) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0xfffffffffffffffe, 0x0) close(r0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000002900)=0x200, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x54, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x10000, 0x60}}}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb5, 0x40}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x888}, 0x4048040) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r11, 0x1, 0x4, &(0x7f0000002b00)=0x5, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r11, 0x80106720, &(0x7f0000002bc0)={0x1, &(0x7f0000002b80)=[{0x80000000, 0x9, &(0x7f0000002b40)="187bd29cf3109810bf", 0x1}]}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000002c00)=0xb9, 0x4) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x20, &(0x7f0000002c40), &(0x7f0000002c80)=0x4) 535.438355ms ago: executing program 4 (id=13610): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bind$802154_dgram(r0, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) 484.91782ms ago: executing program 2 (id=13611): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0014000000", 0x28}, {&(0x7f0000000380)="ff1ed8614d03", 0x6}], 0x2}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e22, @remote}}) 479.137436ms ago: executing program 0 (id=13612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x1f, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) r2 = socket$inet6(0xa, 0x3, 0x3c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000c04fdd782451b43540553b1daed8981000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010800000000000000000700000008000a40000000000900020073797a31000000000900010073797a301f54641b87181000000000080005400000f9dfcc0d5d4880b1e7fd08d9e09e1dc05e9abf781b43be547b5f88a1f190970193155ef739ee88e7db6a9b0aabff7614e2e7303a17c44033a9cad755e22e2e17d15f887037893dc5ef676de390d6e30e912bf0daac6bc341bd23e599c1b5d356c102df0ae12da5b74d600af4d8e2d8d440b1c7093bb20e9c034946a8ef978758a8bd6538d14f3c785e34d0848ef1025ee5d97a025f1e750295bcc9b686cd840a68e87e41f59e6b354eb7180019a12cadb5"], 0x84}}, 0x0) (async) r4 = epoll_create1(0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="0180c200000000000000008086dd602c96ed00003b00fe800000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2c1e2082c92b3658993aaed890e3980379db937fc9a1e05540ab6a73ab02c16c4dae076a7a4d0e4b986bdb10ee529074f12ce5e49f1d682c", 0x38}], 0x1) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r9, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) connect$llc(r9, &(0x7f0000000380)={0x1a, 0x313, 0x3f, 0xf, 0xff, 0xba, @broadcast}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0xfffffffd, r10}, 0x10) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000700)={r10, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) 408.535326ms ago: executing program 1 (id=13613): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x40000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000002440)=0x8) accept(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x1, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x2000cd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x8, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0xc, 0x8001, 0x2, 0x6, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x3, 0xfffffffe, 0xffffff7f, 0x4, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x4, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000200)={0x0, @broadcast, 0x4e23, 0x0, 'lc\x00', 0x0, 0x5, 0xe}, 0x2c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8040044) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 308.757903ms ago: executing program 4 (id=13614): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a"], 0x16c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r4, 0xc08ba000) r7 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 229.166838ms ago: executing program 0 (id=13615): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f6a064f", 0x28}], 0x1, 0x0, 0x24c0}}], 0x1, 0x60040d1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0xc1, 0xc5, &(0x7f00000004c0)="3ee8f84684aeb24b452515ee6358d402414ef54a4605457926ab02cf6fefbbfaf32bd8b831f0d1eb6e27b438d5c29528840e2e90cb9fccca00c92f0748861b34626e4ae030e5e57026651935ab1824fc36a2ba37ac5bc5bcde11660f2537996edd55bf12de3c4df3c5430c6518fe431644e0c4747b365ed3f68d7856b49e8f17f0f099b87be258302c3795974a84ea48b4caf886e31c8e11875ee056422065b51a8096e621a72a73f11eada4ee2183f8433d01bbc828857c05cc559f740babf4db", &(0x7f00000005c0)=""/197, 0x1e, 0x0, 0x16, 0xe0, &(0x7f00000006c0)="f9078a744d7f7d133cb6ae6fa92e46f727de65f9d76f", &(0x7f0000000700)="b6f343f42012b8c8851771f5d8805426455753eda674827fb783cdf556747cda3f6d0c133159712821fd4b55cf21b8a0b26b7cd37b0e5a2fd46ffc19dc68cbcfcdd59505191ef023d6da0ba82ca0ca7eb92bfa96265b6f308dbfcab97bb1f129f897e49d18cfc5016bdcdbc07dd2f07591c81c166a27dbce8baaa7a34c85719572952110ec7379449d742518accd556687d261649819623013c47748febd677276d7d8a9a3457ed08763d5999f149751921d8287739a995fbb07aef8597a06ddedc7e906a90787c93b2901f9b5cdf95a4d0b3132d453ab300b79374faca8ecd2", 0x0, 0x0, 0xf4}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 74.033819ms ago: executing program 2 (id=13616): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x500}}, 0x1c}}, 0x0) 0s ago: executing program 0 (id=13617): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/33, 0x21, 0x4, 0x396}) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x1407, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async, rerun: 32) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) getpeername$llc(r3, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x108, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x24044054}, 0x24004040) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000003c0)={0x2, 'pimreg\x00', {0x9}, 0x2}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000400)=@buf) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x36, 0x400, 0x70bd2a, 0x25dfdbff, {0x1e}, [@typed={0x8, 0x19, 0x0, 0x0, @uid=r6}, @typed={0x4, 0xd1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x4048080) (async, rerun: 64) r7 = accept$inet6(r1, &(0x7f0000000680)={0xa, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x1c) (rerun: 64) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000700)={@local, 0xc, r5}) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f0000000740)={0xa, 0x4e22, 0xffff, @empty, 0x2}, 0x1c) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xfc, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xfc}}, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044}, 0x8800) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x100000) getsockname$llc(r3, &(0x7f0000000b00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000bc0)={0x1, &(0x7f0000000b80)=[{0x7, 0x6, 0x8, 0x2}]}, 0x10) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) syz_open_procfs$namespace(r12, &(0x7f0000000c80)='ns/user\x00') (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r10) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, r13, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x13}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async, rerun: 32) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000e40)={@broadcast, @dev={0xac, 0x14, 0x14, 0xf}, 0x1, "3f89b80e2565ffb2e428296df2c49848850fae0b875962bd2d02a05c85bc2aa7", 0x1000, 0x0, 0x34, 0x4}, 0x3c) (rerun: 32) kernel console output (not intermixed with test programs): invalid length. [ 1106.406643][T16738] pim6reg: left allmulticast mode [ 1106.505744][T16544] hsr_slave_0: entered promiscuous mode [ 1106.515098][T16544] hsr_slave_1: entered promiscuous mode [ 1106.521763][T16544] debugfs: 'hsr0' already exists in 'hsr' [ 1106.527731][T16544] Cannot create hsr debugfs directory [ 1106.569217][T16751] tipc: Enabled bearer , priority 0 [ 1106.602822][T16751] syzkaller0: entered promiscuous mode [ 1106.608371][T16751] syzkaller0: entered allmulticast mode [ 1106.705052][T16761] tipc: Resetting bearer [ 1106.734896][T16764] netlink: 'syz.2.11784': attribute type 1 has an invalid length. [ 1106.811896][T16750] tipc: Resetting bearer [ 1106.846354][T16750] tipc: Disabling bearer [ 1107.004364][T16769] bond0: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 1107.063213][T16777] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1107.065646][T16783] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1107.107526][T16777] bond0 (unregistering): Released all slaves [ 1107.773602][T16826] netlink: 'syz.1.11796': attribute type 20 has an invalid length. [ 1107.784259][T16826] __nla_validate_parse: 5 callbacks suppressed [ 1107.784277][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11796'. [ 1107.826248][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11796'. [ 1107.836656][T16826] netlink: 'syz.1.11796': attribute type 20 has an invalid length. [ 1107.845288][T24307] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.847812][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11796'. [ 1107.865140][T24307] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.912467][T16839] nbd: must specify at least one socket [ 1107.971851][T24307] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.988446][T24307] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.022347][T16842] tipc: New replicast peer: 255.255.255.255 [ 1108.041872][T16842] tipc: Enabled bearer , priority 10 [ 1108.072670][ T5840] Bluetooth: hci3: command tx timeout [ 1108.215557][T16544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1108.236495][T16544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1108.274242][T16852] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11804'. [ 1108.288074][T16544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1108.305449][T16544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1108.505182][T16873] xt_CT: No such helper "netbios-ns" [ 1108.530180][T16872] xt_CT: No such helper "netbios-ns" [ 1108.623314][T16544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.648570][T16887] netlink: 'syz.4.11811': attribute type 1 has an invalid length. [ 1108.684741][T16544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.736335][T16894] netlink: 'syz.1.11812': attribute type 1 has an invalid length. [ 1108.782401][T16887] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1108.878126][T16886] bond13: (slave veth9): Enslaving as an active interface with a down link [ 1108.912653][T16890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.919819][T16890] bond13: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1109.054129][T16894] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1109.140068][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.147323][ T8093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.263939][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.271230][ T8232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.341477][T16920] netlink: 816 bytes leftover after parsing attributes in process `syz.1.11817'. [ 1109.647753][T16934] netem: change failed [ 1109.842907][T16544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.932349][T16544] veth0_vlan: entered promiscuous mode [ 1109.943632][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11822'. [ 1109.958094][T16544] veth1_vlan: entered promiscuous mode [ 1110.007899][T16544] veth0_macvtap: entered promiscuous mode [ 1110.014309][T16959] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1110.055558][T16544] veth1_macvtap: entered promiscuous mode [ 1110.125007][T16544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.142353][T16544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.151104][ T5840] Bluetooth: hci3: command tx timeout [ 1110.197308][ T8232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.229104][ T8232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.278107][ T8232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.293581][ T8232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.747431][ T8093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.769385][ T8093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.907809][T17001] syzkaller1: entered promiscuous mode [ 1110.925939][T17001] syzkaller1: entered allmulticast mode [ 1110.940884][ T8224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.958564][ T8224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.116994][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11836'. [ 1111.977520][T17071] netlink: 'syz.4.11850': attribute type 32 has an invalid length. [ 1112.021694][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11850'. [ 1112.075681][T17065] netlink: 'syz.4.11850': attribute type 1 has an invalid length. [ 1112.080903][T17071] bond14: Setting coupled_control to off (0) [ 1112.257109][T17089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11858'. [ 1112.287113][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11858'. [ 1112.497709][T17108] veth0_to_team: left allmulticast mode [ 1113.031939][T17140] veth1_to_bond: entered allmulticast mode [ 1113.048482][T17140] veth1_to_bond: left allmulticast mode [ 1113.145965][T17145] : entered promiscuous mode [ 1113.252307][T17152] tipc: Failed to remove unknown binding: 66,0,0/0:2020201306/2020201307 [ 1113.308721][T17152] tipc: Failed to remove unknown binding: 66,0,0/0:2020201306/2020201307 [ 1113.408824][T17160] netlink: 'syz.2.11873': attribute type 5 has an invalid length. [ 1113.444006][T17157] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1113.474218][T17157] bond1 (unregistering): Released all slaves [ 1113.539833][T17163] netlink: 'syz.1.11874': attribute type 1 has an invalid length. [ 1113.547997][T17163] __nla_validate_parse: 2 callbacks suppressed [ 1113.548014][T17163] netlink: 220 bytes leftover after parsing attributes in process `syz.1.11874'. [ 1113.725230][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11876'. [ 1113.735148][T17175] netlink: 'syz.0.11876': attribute type 1 has an invalid length. [ 1113.822993][T17175] bond11: entered promiscuous mode [ 1113.876849][T17175] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1113.963655][T17183] bond11: (slave bridge8): making interface the new active one [ 1113.990515][T17183] bridge8: entered promiscuous mode [ 1113.998887][T17183] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 1114.009164][T17170] openvswitch: netlink: IP tunnel dst address not specified [ 1114.217767][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11883'. [ 1114.245012][T17201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11883'. [ 1114.373806][T17206] netlink: 'syz.4.11885': attribute type 1 has an invalid length. [ 1114.400013][T17210] atomic_op ffff8880494dd998 conn xmit_atomic 0000000000000000 [ 1114.447875][T17206] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1114.468376][T17215] netlink: 'syz.0.11888': attribute type 1 has an invalid length. [ 1114.608712][T17215] bond12: (slave vxcan4): The slave device specified does not support setting the MAC address [ 1114.650232][T17215] bond12: (slave vxcan4): Error -95 calling set_mac_address [ 1114.778523][T17239] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11892'. [ 1114.960684][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11891'. [ 1115.100816][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11897'. [ 1115.165523][T17257] syzkaller1: entered promiscuous mode [ 1115.172208][T17257] syzkaller1: entered allmulticast mode [ 1115.342478][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11903'. [ 1115.397005][T17277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11905'. [ 1115.537620][T17277] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1115.841076][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1115.895564][T17322] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11916'. [ 1116.563195][T17379] netlink: 'syz.0.11934': attribute type 3 has an invalid length. [ 1116.625906][T17389] netlink: 'syz.3.11936': attribute type 7 has an invalid length. [ 1116.647388][T17389] netlink: 'syz.3.11936': attribute type 8 has an invalid length. [ 1116.738093][T17399] xt_cluster: node mask cannot exceed total number of nodes [ 1116.773321][T17395] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1116.857192][T17417] openvswitch: netlink: Flow key attr not present in new flow. [ 1116.869628][T17406] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1116.885554][T17406] bond0 (unregistering): Released all slaves [ 1117.218432][T17444] netlink: 'syz.0.11952': attribute type 6 has an invalid length. [ 1117.227403][T17444] netlink: 'syz.0.11952': attribute type 5 has an invalid length. [ 1117.264162][T17446] netlink: 'syz.0.11953': attribute type 4 has an invalid length. [ 1117.275541][T17446] netlink: 'syz.0.11953': attribute type 4 has an invalid length. [ 1117.286364][ T2294] lo speed is unknown, defaulting to 1000 [ 1117.293438][ T2294] syz0: Port: 1 Link ACTIVE [ 1117.299441][ T9641] lo speed is unknown, defaulting to 1000 [ 1117.299470][T17446] netlink: 'syz.0.11953': attribute type 16 has an invalid length. [ 1117.314823][T17446] netlink: 'syz.0.11953': attribute type 17 has an invalid length. [ 1117.322970][T17446] lo: left allmulticast mode [ 1117.328365][T17446] tunl0: left allmulticast mode [ 1117.335206][T17446] gre0: left allmulticast mode [ 1117.343845][T17446] gretap0: left allmulticast mode [ 1117.351220][T17446] erspan0: left allmulticast mode [ 1117.358216][T17446] ip_vti0: left allmulticast mode [ 1117.364879][T17446] ip6_vti0: left allmulticast mode [ 1117.372244][T17446] sit0: left allmulticast mode [ 1117.383296][T17446] ip6tnl0: left allmulticast mode [ 1117.389908][T17446] ip6gre0: left allmulticast mode [ 1117.401703][T17446] bridge0: port 1(syz_tun) entered blocking state [ 1117.408380][T17446] bridge0: port 1(syz_tun) entered listening state [ 1117.416783][T17446] vcan0: left allmulticast mode [ 1117.426040][T17446] bond0: left promiscuous mode [ 1117.431664][T17446] bond_slave_0: left promiscuous mode [ 1117.437245][T17446] bond_slave_1: left promiscuous mode [ 1117.443242][T17446] mac80211_hwsim hwsim106 wlan1: left promiscuous mode [ 1117.450313][T17446] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1117.457819][T17446] bond0: left allmulticast mode [ 1117.462818][T17446] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1117.470865][T17446] team0: left allmulticast mode [ 1117.476448][T17446] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.484040][T17446] dummy0: left allmulticast mode [ 1117.489224][T17446] batman_adv: batadv0: Interface activated: dummy0 [ 1117.495957][T17446] batadv0: mtu less than device minimum [ 1117.502550][T17446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1117.513715][T17446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1117.524810][T17446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1117.536241][T17446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1117.547461][T17446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1117.559256][T17446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1117.571104][T17446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1117.603184][T17446] nlmon0: left allmulticast mode [ 1117.613097][T17446] caif0: left allmulticast mode [ 1117.816584][ T8232] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1117.827510][ T8232] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1117.850262][ T8232] bond0: (slave wlan1): link status definitely down, disabling slave [ 1117.870794][ T8232] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 1117.895425][ T8232] bond0: now running without any active interface! [ 1117.998712][T17466] xt_CT: No such helper "pptp" [ 1118.009187][T17466] netlink: 'syz.2.11960': attribute type 18 has an invalid length. [ 1118.018619][T17467] netlink: 'syz.2.11960': attribute type 18 has an invalid length. [ 1118.044662][T17466] netlink: 'syz.2.11960': attribute type 18 has an invalid length. [ 1118.409834][T17498] syzkaller1: entered promiscuous mode [ 1118.423641][T17498] syzkaller1: entered allmulticast mode [ 1118.554421][T17516] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1118.573613][T17518] netlink: 'syz.4.11973': attribute type 4 has an invalid length. [ 1118.689720][T17526] __nla_validate_parse: 12 callbacks suppressed [ 1118.689744][T17526] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11976'. [ 1118.709677][T17526] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11976'. [ 1118.737878][T17529] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1119.019562][T17548] xt_check_match: 23 callbacks suppressed [ 1119.019587][T17548] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1119.361740][T17575] net_ratelimit: 13 callbacks suppressed [ 1119.361760][T17575] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1119.471121][T17587] sit0: Caught tx_queue_len zero misconfig [ 1119.728136][T17601] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.12002'. [ 1119.743477][T17602] SET target dimension over the limit! [ 1120.222595][T17617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12007'. [ 1120.242653][T17617] netlink: 576 bytes leftover after parsing attributes in process `syz.1.12007'. [ 1120.290848][T17619] hsr0: left allmulticast mode [ 1120.305339][T17619] hsr_slave_0: left allmulticast mode [ 1120.331057][T17619] hsr_slave_1: left allmulticast mode [ 1120.339909][T17619] macvlan0: left allmulticast mode [ 1120.708934][T17641] syzkaller0: entered promiscuous mode [ 1120.772027][T17641] syzkaller0: entered allmulticast mode [ 1120.841841][T17650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12018'. [ 1120.861507][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1120.869584][ C1] lec:lec_tx_timeout: lec0 [ 1121.006284][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1121.018370][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1121.027746][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1121.036580][T17658] pimreg3: entered allmulticast mode [ 1121.044445][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1121.054208][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.170031][T17660] lo speed is unknown, defaulting to 1000 [ 1121.252136][T17671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12023'. [ 1121.443013][T17677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12025'. [ 1121.529332][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12025'. [ 1121.539801][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12025'. [ 1123.112011][ T5840] Bluetooth: hci1: command tx timeout [ 1123.380051][T17660] lo speed is unknown, defaulting to 1000 [ 1123.408839][T17686] validate_nla: 6 callbacks suppressed [ 1123.408857][T17686] netlink: 'syz.3.12027': attribute type 1 has an invalid length. [ 1123.619837][T17707] vlan3: entered promiscuous mode [ 1123.634809][T17707] erspan0: entered promiscuous mode [ 1123.724442][T17712] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1123.743423][T17712] bond9: (slave lo): Enslaving as an active interface with an up link [ 1123.761230][T17712] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1123.836063][T17717] __nla_validate_parse: 8 callbacks suppressed [ 1123.836084][T17717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12034'. [ 1123.989099][T17729] netlink: 'syz.2.12036': attribute type 4 has an invalid length. [ 1124.038649][T17732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12037'. [ 1124.039108][T17660] chnl_net:caif_netlink_parms(): no params data found [ 1124.072140][T17733] Bluetooth: MGMT ver 1.23 [ 1124.153435][T17660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.165179][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.172633][T17660] bridge_slave_0: entered allmulticast mode [ 1124.180688][T17660] bridge_slave_0: entered promiscuous mode [ 1124.201853][T17660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.211408][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.219387][T17660] bridge_slave_1: entered allmulticast mode [ 1124.227975][T17741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1124.229360][T17660] bridge_slave_1: entered promiscuous mode [ 1124.309147][T17660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.323514][T17660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.366850][T17660] team0: Port device team_slave_0 added [ 1124.376815][T17660] team0: Port device team_slave_1 added [ 1124.414255][T17660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.422791][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.470154][T17660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.549126][T17660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.594294][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.665788][T17660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.667785][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12044'. [ 1124.832725][T17660] hsr_slave_0: entered promiscuous mode [ 1124.854422][T17660] hsr_slave_1: entered promiscuous mode [ 1124.862078][T17660] debugfs: 'hsr0' already exists in 'hsr' [ 1124.867846][T17660] Cannot create hsr debugfs directory [ 1124.893194][T17772] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1125.190988][ T5840] Bluetooth: hci1: command tx timeout [ 1125.686691][T17660] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.698988][T17660] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.908661][T17660] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.929414][T17660] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.965206][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12055'. [ 1125.984866][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12054'. [ 1126.016367][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12054'. [ 1126.023189][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12058'. [ 1126.077177][T17808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1126.171280][T17660] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.189510][T17660] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.217957][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12061'. [ 1126.655112][T17849] netlink: 216 bytes leftover after parsing attributes in process `syz.0.12068'. [ 1126.710668][T17849] netlink: 'syz.0.12068': attribute type 2 has an invalid length. [ 1126.718579][T17849] netlink: 'syz.0.12068': attribute type 1 has an invalid length. [ 1126.752475][T17853] Cannot find map_set index 65533 as target [ 1126.756088][T17849] pim6reg: entered allmulticast mode [ 1126.777967][T17660] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1126.806270][T17849] pim6reg: left allmulticast mode [ 1126.830683][T17849] bridge0: left allmulticast mode [ 1126.944572][T17660] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1127.027870][T17660] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1127.212675][T17660] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1127.272035][ T5840] Bluetooth: hci1: command tx timeout [ 1127.520601][T17885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12076'. [ 1127.737012][T17660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.798001][T17660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.822479][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.829605][ T8224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.861299][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.868496][ T8224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.877684][T17907] x_tables: duplicate underflow at hook 1 [ 1127.957369][T17908] netlink: 'syz.3.12083': attribute type 12 has an invalid length. [ 1127.967029][T17908] netlink: 'syz.3.12083': attribute type 29 has an invalid length. [ 1128.435820][T17660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.508885][T17939] syzkaller0: entered promiscuous mode [ 1128.514671][T17939] syzkaller0: entered allmulticast mode [ 1128.687936][T17945] netlink: 'syz.1.12093': attribute type 12 has an invalid length. [ 1128.697777][T17945] netlink: 'syz.1.12093': attribute type 29 has an invalid length. [ 1128.706394][T17945] netlink: 'syz.1.12093': attribute type 2 has an invalid length. [ 1128.856428][T17954] netlink: 'syz.2.12094': attribute type 1 has an invalid length. [ 1128.903980][T17954] __nla_validate_parse: 8 callbacks suppressed [ 1128.904000][T17954] netlink: 216 bytes leftover after parsing attributes in process `syz.2.12094'. [ 1129.036685][T17964] Cannot find add_set index 0 as target [ 1129.128832][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12099'. [ 1129.280268][T17660] veth0_vlan: entered promiscuous mode [ 1129.310927][T17972] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1129.332480][T17977] netlink: 404 bytes leftover after parsing attributes in process `syz.2.12102'. [ 1129.343790][T17977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12102'. [ 1129.353505][T17977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12102'. [ 1129.354249][ T5840] Bluetooth: hci1: command tx timeout [ 1129.368318][T17977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12102'. [ 1129.423426][T17660] veth1_vlan: entered promiscuous mode [ 1129.533109][T17660] veth0_macvtap: entered promiscuous mode [ 1129.562479][T17660] veth1_macvtap: entered promiscuous mode [ 1129.597026][T17997] netlink: 'syz.2.12108': attribute type 1 has an invalid length. [ 1129.607943][T17660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.639093][T17660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.647290][T18005] netlink: 240 bytes leftover after parsing attributes in process `syz.1.12105'. [ 1129.687864][T17997] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12108'. [ 1129.715271][ T8093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.784153][ T8093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.800079][ T8093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.846895][T18012] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1129.848142][ T8093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.946661][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12112'. [ 1129.957026][T18020] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12114'. [ 1129.977646][T24307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.987342][T24307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.143561][T24307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.166124][T24307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.293340][T18030] can: request_module (can-proto-4) failed. [ 1130.394109][T18047] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1130.428433][T18049] netlink: 'syz.3.12121': attribute type 1 has an invalid length. [ 1130.438744][T18049] netlink: 'syz.3.12121': attribute type 1 has an invalid length. [ 1130.634682][T18063] xt_cluster: node mask cannot exceed total number of nodes [ 1130.827770][T18074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.857363][T18078] ip6gre0: entered promiscuous mode [ 1130.884578][T18079] IPVS: Error connecting to the multicast addr [ 1131.088732][T18092] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1131.101273][T18092] netlink: 'syz.0.12136': attribute type 3 has an invalid length. [ 1131.476561][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1131.493309][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1131.505724][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1131.551811][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1131.559519][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1131.638610][T18100] lo speed is unknown, defaulting to 1000 [ 1131.773965][T18112] netlink: 'syz.1.12144': attribute type 10 has an invalid length. [ 1131.966613][ T7638] bridge0: port 1(syz_tun) entered disabled state [ 1132.063641][ T7638] syz_tun (unregistering): left allmulticast mode [ 1132.070119][ T7638] syz_tun (unregistering): left promiscuous mode [ 1132.103104][ T7638] bridge0: port 1(syz_tun) entered disabled state [ 1132.221997][T18100] lo speed is unknown, defaulting to 1000 [ 1132.229929][T18127] netlink: 'syz.2.12150': attribute type 9 has an invalid length. [ 1132.353881][T18140] openvswitch: netlink: Message has 8 unknown bytes. [ 1132.371048][T18140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.497999][T18146] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1132.547916][T18146] bond10 (unregistering): Released all slaves [ 1132.969614][T18166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1133.163331][T18100] chnl_net:caif_netlink_parms(): no params data found [ 1133.298208][T18184] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1133.302590][T18100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.317369][T18100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.325274][T18100] bridge_slave_0: entered allmulticast mode [ 1133.333338][T18100] bridge_slave_0: entered promiscuous mode [ 1133.348300][T18100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.355632][T18100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.363265][T18100] bridge_slave_1: entered allmulticast mode [ 1133.371533][T18100] bridge_slave_1: entered promiscuous mode [ 1133.422346][T18100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.436738][T18100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.482053][T18100] team0: Port device team_slave_0 added [ 1133.491515][T18100] team0: Port device team_slave_1 added [ 1133.549444][T18100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.571549][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.599522][ T5840] Bluetooth: hci0: command tx timeout [ 1133.607707][T18100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.623793][T18100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.631236][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.658598][T18100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.753283][T18209] validate_nla: 2 callbacks suppressed [ 1133.753302][T18209] netlink: 'syz.3.12173': attribute type 2 has an invalid length. [ 1133.759408][T18100] hsr_slave_0: entered promiscuous mode [ 1133.771580][T18209] netlink: 'syz.3.12173': attribute type 2 has an invalid length. [ 1133.785981][T18100] hsr_slave_1: entered promiscuous mode [ 1133.794483][T18100] debugfs: 'hsr0' already exists in 'hsr' [ 1133.805393][T18100] Cannot create hsr debugfs directory [ 1134.027165][T24306] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.113937][T18223] tipc: Started in network mode [ 1134.118938][T18223] tipc: Node identity , cluster identity 4711 [ 1134.125450][T18223] tipc: Failed to obtain node identity [ 1134.133058][T18223] tipc: Enabling of bearer rejected, failed to enable media [ 1134.225945][T18231] tipc: Enabling of bearer rejected, failed to enable media [ 1134.589455][T18258] __nla_validate_parse: 18 callbacks suppressed [ 1134.589477][T18258] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12186'. [ 1134.589557][T18100] bond0: (slave netdevsim0): Releasing backup interface [ 1134.623848][T18258] GUP no longer grows the stack in syz.1.12186 (18258): 200000003000-20000000a000 (200000001000) [ 1134.636482][T18258] CPU: 0 UID: 0 PID: 18258 Comm: syz.1.12186 Not tainted syzkaller #0 PREEMPT(full) [ 1134.636519][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1134.636533][T18258] Call Trace: [ 1134.636543][T18258] [ 1134.636552][T18258] dump_stack_lvl+0xe8/0x150 [ 1134.636589][T18258] __get_user_pages+0x2453/0x29d0 [ 1134.636624][T18258] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.636672][T18258] ? __gup_longterm_locked+0xc4e/0x1630 [ 1134.636705][T18258] ? down_read_killable+0x1bb/0x340 [ 1134.636744][T18258] __gup_longterm_locked+0xdcf/0x1630 [ 1134.636800][T18258] gup_fast_fallback+0x1d82/0x22e0 [ 1134.636866][T18258] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1134.636901][T18258] ? is_valid_gup_args+0x11f/0x200 [ 1134.636936][T18258] ? get_user_pages_fast+0x4d/0xb0 [ 1134.636970][T18258] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 1134.637005][T18258] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1134.637033][T18258] iov_iter_get_pages2+0x5e/0xa0 [ 1134.637062][T18258] __se_sys_vmsplice+0x7b3/0x1490 [ 1134.637103][T18258] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1134.637128][T18258] ? __pfx_futex_wake+0x10/0x10 [ 1134.637230][T18258] do_syscall_64+0x14d/0xf80 [ 1134.637258][T18258] ? trace_irq_disable+0x3b/0x150 [ 1134.637277][T18258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.637299][T18258] ? clear_bhb_loop+0x40/0x90 [ 1134.637325][T18258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.637346][T18258] RIP: 0033:0x7fafb7f9c819 [ 1134.637367][T18258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.637386][T18258] RSP: 002b:00007fafb8e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1134.637411][T18258] RAX: ffffffffffffffda RBX: 00007fafb8215fa0 RCX: 00007fafb7f9c819 [ 1134.637427][T18258] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1134.637441][T18258] RBP: 00007fafb8032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1134.637455][T18258] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1134.637469][T18258] R13: 00007fafb8216038 R14: 00007fafb8215fa0 R15: 00007ffc27096a38 [ 1134.637510][T18258] [ 1134.661976][T18257] netlink: 'syz.3.12187': attribute type 8 has an invalid length. [ 1134.834518][T18263] syzkaller1: entered promiscuous mode [ 1134.896609][T18263] syzkaller1: entered allmulticast mode [ 1135.146672][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12193'. [ 1135.297143][T18100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1135.329057][T18100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1135.386508][T18100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1135.398377][T18302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12197'. [ 1135.429806][T18304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12197'. [ 1135.444659][T18100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1135.594142][T18100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.647461][T18100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.673154][ T5840] Bluetooth: hci0: command tx timeout [ 1135.693057][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.700184][ T8224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.776872][T18324] netlink: 'syz.3.12203': attribute type 16 has an invalid length. [ 1135.784748][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.791024][T18324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12203'. [ 1135.792155][ T8224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.839952][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12200'. [ 1136.170211][T18348] Cannot find add_set index 0 as target [ 1136.197143][T18340] nbd: couldn't find device at index 4 [ 1136.206548][T18340] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12205'. [ 1136.215817][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12205'. [ 1136.243085][T18355] netlink: 88 bytes leftover after parsing attributes in process `syz.1.12209'. [ 1136.292554][T18355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12209'. [ 1136.480005][T18100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.667435][T18100] veth0_vlan: entered promiscuous mode [ 1136.717245][T18387] IPVS: length: 8 != 1152 [ 1136.751739][T18100] veth1_vlan: entered promiscuous mode [ 1136.821379][T18395] netlink: 'syz.3.12221': attribute type 10 has an invalid length. [ 1136.839702][T18100] veth0_macvtap: entered promiscuous mode [ 1136.907640][T18100] veth1_macvtap: entered promiscuous mode [ 1136.922124][T18395] nbd7: detected capacity change from 0 to 4096 [ 1136.935587][T18100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.957644][ T5840] block nbd7: Receive control failed (result -104) [ 1136.979512][T18100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.001948][ T6146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.018206][ T6146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.050174][ T6146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.103152][ T6146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.141141][T24306] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.153238][T24306] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.165674][T24306] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.339129][T24307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.368867][T24307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.408934][T18424] netlink: 'syz.2.12232': attribute type 58 has an invalid length. [ 1137.445486][ T6119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.469766][ T6119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.615390][T18440] xt_hashlimit: size too large, truncated to 1048576 [ 1137.751449][ T5840] Bluetooth: hci0: command tx timeout [ 1137.843878][T18453] bridge2: entered promiscuous mode [ 1137.849207][T18453] bridge2: entered allmulticast mode [ 1139.833343][ T5840] Bluetooth: hci0: command tx timeout [ 1140.445357][T18426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1140.588559][T18464] nbd: must specify at least one socket [ 1140.777821][T18474] __nla_validate_parse: 16 callbacks suppressed [ 1140.777841][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12247'. [ 1140.839409][T18479] netlink: 248 bytes leftover after parsing attributes in process `syz.0.12248'. [ 1140.883284][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1140.902978][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1140.912016][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1140.934303][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1140.942660][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1141.070096][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12250'. [ 1141.107630][T18482] lo speed is unknown, defaulting to 1000 [ 1141.274752][T18492] syzkaller0: entered promiscuous mode [ 1141.280651][T18492] syzkaller0: entered allmulticast mode [ 1141.300625][T18500] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12254'. [ 1141.450849][T18503] netlink: 'syz.2.12255': attribute type 6 has an invalid length. [ 1141.533317][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12256'. [ 1143.032851][ T5842] Bluetooth: hci5: command tx timeout [ 1143.396329][T18506] team1: entered promiscuous mode [ 1143.402189][T18506] team1: entered allmulticast mode [ 1143.421476][T18482] lo speed is unknown, defaulting to 1000 [ 1143.525617][T18513] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1143.554767][T18515] netlink: 'syz.4.12259': attribute type 5 has an invalid length. [ 1143.899593][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12264'. [ 1143.946203][T18533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1144.063153][T18542] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12267'. [ 1144.076942][T18542] netlink: 43 bytes leftover after parsing attributes in process `syz.0.12267'. [ 1144.086541][T18542] netlink: 'syz.0.12267': attribute type 6 has an invalid length. [ 1144.096188][T18542] netlink: 'syz.0.12267': attribute type 5 has an invalid length. [ 1144.104602][T18542] netlink: 43 bytes leftover after parsing attributes in process `syz.0.12267'. [ 1144.272074][T18482] chnl_net:caif_netlink_parms(): no params data found [ 1144.316297][T18553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.323810][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.332118][T18551] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.12269'. [ 1144.338788][T18553] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1144.443960][T18553] syzkaller0: entered promiscuous mode [ 1144.455754][T18553] syzkaller0: entered allmulticast mode [ 1144.506193][T18562] macvlan0: entered promiscuous mode [ 1144.516025][T18562] hsr0: entered promiscuous mode [ 1144.603533][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.617598][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.626386][T18482] bridge_slave_0: entered allmulticast mode [ 1144.635647][T18482] bridge_slave_0: entered promiscuous mode [ 1144.669246][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.687126][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.695004][T18482] bridge_slave_1: entered allmulticast mode [ 1144.703420][T18482] bridge_slave_1: entered promiscuous mode [ 1144.753739][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.775050][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.937159][T18482] team0: Port device team_slave_0 added [ 1144.962782][T18482] team0: Port device team_slave_1 added [ 1145.003468][T18588] tipc: Enabling not permitted [ 1145.011223][T18588] tipc: Enabling of bearer rejected, failed to enable media [ 1145.066818][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.083464][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.116908][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.134070][ T5842] Bluetooth: hci5: command tx timeout [ 1145.148198][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.166963][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.195887][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.220989][T18588] H: renamed from dummy0 (while UP) [ 1145.347468][T18482] hsr_slave_0: entered promiscuous mode [ 1145.372949][T18482] hsr_slave_1: entered promiscuous mode [ 1145.396521][T18482] debugfs: 'hsr0' already exists in 'hsr' [ 1145.416165][T18482] Cannot create hsr debugfs directory [ 1145.452080][T18600] xt_CT: No such helper "pptp" [ 1145.608110][T18624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1145.673364][T18624] hsr_slave_0: left promiscuous mode [ 1145.688043][T18624] hsr_slave_1: left promiscuous mode [ 1145.734439][T18630] netlink: 'syz.3.12289': attribute type 12 has an invalid length. [ 1145.757871][T18630] netdevsim netdevsim3: Direct firmware load for .. @ failed with error -2 [ 1145.771847][T18630] netdevsim netdevsim3: Falling back to sysfs fallback for: .. @ [ 1145.840696][T18633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.867444][T18482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.880121][T18482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.907954][T18635] __nla_validate_parse: 6 callbacks suppressed [ 1145.907973][T18635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12291'. [ 1145.927862][T18635] ip6t_srh: unknown srh invflags 4000 [ 1145.966563][ T2294] IPVS: starting estimator thread 0... [ 1145.999377][T18482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.028714][T18482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.071400][T18638] IPVS: using max 36 ests per chain, 86400 per kthread [ 1146.180040][T18482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.193421][T18482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.254767][T18652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12298'. [ 1146.271637][T18652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12298'. [ 1146.293827][T18482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.306110][T18482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.646663][T18482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1146.864703][T18679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12309'. [ 1146.902941][T18482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1146.974532][T18482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1146.992945][T18482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1147.093024][T18697] Bluetooth: MGMT ver 1.23 [ 1147.186954][T18697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.201028][ T5842] Bluetooth: hci5: command tx timeout [ 1147.219108][T18697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.454805][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.497110][T18724] netlink: 232 bytes leftover after parsing attributes in process `syz.4.12322'. [ 1147.503516][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.554421][T24307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.561823][T24307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.576548][T18723] mac80211_hwsim hwsim134 wlan0: entered promiscuous mode [ 1147.584991][T18723] mac80211_hwsim hwsim134 wlan0: entered allmulticast mode [ 1147.624241][T24307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.631499][T24307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.754922][T18736] netlink: 'syz.4.12325': attribute type 11 has an invalid length. [ 1147.764324][T18736] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12325'. [ 1147.830151][T18734] lo speed is unknown, defaulting to 1000 [ 1148.283095][T18759] vlan1: entered allmulticast mode [ 1148.288286][T18759] veth0_vlan: entered allmulticast mode [ 1148.321294][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.387341][T18482] veth0_vlan: entered promiscuous mode [ 1148.409010][T18728] lo speed is unknown, defaulting to 1000 [ 1148.419524][T18482] veth1_vlan: entered promiscuous mode [ 1148.448593][T18734] lo speed is unknown, defaulting to 1000 [ 1148.515957][T18482] veth0_macvtap: entered promiscuous mode [ 1148.542139][T18482] veth1_macvtap: entered promiscuous mode [ 1148.581992][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.626393][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.661057][ T6146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.680170][ T6146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.715757][ T6146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.733495][ T6146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.915211][T18776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12336'. [ 1148.963497][T18774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.975407][T24307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.000806][T24307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.116265][T18728] lo speed is unknown, defaulting to 1000 [ 1149.134277][T24307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.160935][T24307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.272368][ T5842] Bluetooth: hci5: command tx timeout [ 1150.407046][T18813] netlink: 4240 bytes leftover after parsing attributes in process `syz.1.12343'. [ 1150.428234][T18813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12343'. [ 1150.815797][T18836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12351'. [ 1150.826106][ T2288] IPVS: starting estimator thread 0... [ 1150.844923][T18839] vxcan1: entered promiscuous mode [ 1150.851631][T18839] vxcan1: entered allmulticast mode [ 1150.942972][T18837] IPVS: using max 31 ests per chain, 74400 per kthread [ 1151.381777][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1151.393170][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1151.404674][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1151.445665][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1151.453495][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1151.632710][T18861] lo speed is unknown, defaulting to 1000 [ 1151.641332][T18872] sctp: [Deprecated]: syz.1.12358 (pid 18872) Use of int in max_burst socket option. [ 1151.641332][T18872] Use struct sctp_assoc_value instead [ 1151.760631][T18875] __nla_validate_parse: 1 callbacks suppressed [ 1151.760651][T18875] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12359'. [ 1151.848094][T18876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12359'. [ 1152.140870][T18861] lo speed is unknown, defaulting to 1000 [ 1152.247330][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12369'. [ 1152.405550][ T9641] IPVS: starting estimator thread 0... [ 1152.440924][T18920] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1152.473295][T18909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1152.501167][T18918] IPVS: using max 40 ests per chain, 96000 per kthread [ 1152.584277][T18923] syzkaller0: entered promiscuous mode [ 1152.611132][T18923] syzkaller0: entered allmulticast mode [ 1152.677307][T18913] lo speed is unknown, defaulting to 1000 [ 1152.969272][T18861] chnl_net:caif_netlink_parms(): no params data found [ 1153.111509][T18912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1153.117635][T18912] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1153.127570][T18947] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1153.136339][T18913] lo speed is unknown, defaulting to 1000 [ 1153.249613][T18861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.269159][T18861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.278153][T18861] bridge_slave_0: entered allmulticast mode [ 1153.286232][T18861] bridge_slave_0: entered promiscuous mode [ 1153.294674][T18912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1153.295498][T18861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.306674][T18912] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1153.309174][T18861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.355747][T18861] bridge_slave_1: entered allmulticast mode [ 1153.369992][T18861] bridge_slave_1: entered promiscuous mode [ 1153.429359][T18912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1153.450408][T18912] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1153.484295][T18954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12380'. [ 1153.510901][ T5840] Bluetooth: hci2: command tx timeout [ 1153.529459][T18954] netlink: 'syz.4.12380': attribute type 2 has an invalid length. [ 1153.533832][T18861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.546642][T18954] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12380'. [ 1153.563250][T18861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.606669][T18912] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1153.614580][T18912] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1153.746706][T18861] team0: Port device team_slave_0 added [ 1153.783300][T18912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1153.789268][T18912] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1153.806163][T18861] team0: Port device team_slave_1 added [ 1154.042352][T18861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.049531][T18861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.078507][T18861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.111510][T18861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.129818][T18908] infiniband sy‡1: set active [ 1154.148051][T18861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.151389][T18908] infiniband sy‡1: added bond0 [ 1154.244475][T18978] netlink: 'syz.4.12386': attribute type 1 has an invalid length. [ 1154.264660][T18861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.321062][T18908] RDS/IB: sy‡1: added [ 1154.325447][T18908] smc: adding ib device sy‡1 with port count 1 [ 1154.335462][T18908] smc: ib device sy‡1 port 1 has no pnetid [ 1154.462514][T18978] bond2: entered promiscuous mode [ 1154.468100][T18978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1154.494837][T18983] bond2: (slave bridge5): making interface the new active one [ 1154.502526][T18983] bridge5: entered promiscuous mode [ 1154.509469][T18983] bridge5: left promiscuous mode [ 1154.618646][T18861] hsr_slave_0: entered promiscuous mode [ 1154.625713][T18861] hsr_slave_1: entered promiscuous mode [ 1154.634336][T18861] debugfs: 'hsr0' already exists in 'hsr' [ 1154.640092][T18861] Cannot create hsr debugfs directory [ 1154.962842][T19004] netlink: 204 bytes leftover after parsing attributes in process `syz.0.12392'. [ 1155.062567][T18861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.200282][T18861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.311839][T18861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.624990][T18861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1155.647078][T18861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1155.676485][T18861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1155.698241][T18861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1155.936226][T18861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.989736][T18861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.025550][T24306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.032940][T24306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.065824][T24306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.073023][T24306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.655565][T18861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.667287][T19069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12409'. [ 1156.838952][T18861] veth0_vlan: entered promiscuous mode [ 1156.904137][T18861] veth1_vlan: entered promiscuous mode [ 1157.027729][T18861] veth0_macvtap: entered promiscuous mode [ 1157.040255][T18861] veth1_macvtap: entered promiscuous mode [ 1157.083475][T18861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.134716][T18861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.183545][ T6119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.236231][ T6119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.252227][ T6119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.296602][ T6119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.369089][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12415'. [ 1157.722223][ T6119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.730088][ T6119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.791317][T19111] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12418'. [ 1157.861504][T24307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.867250][T19113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.900494][T24307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.986084][T19124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12421'. [ 1158.007672][T19113] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12419'. [ 1158.034593][T19126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12421'. [ 1158.271400][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12423'. [ 1158.275594][T19137] netlink: 'syz.2.12424': attribute type 1 has an invalid length. [ 1158.301036][T19137] netlink: 'syz.2.12424': attribute type 4 has an invalid length. [ 1158.321103][T19137] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.12424'. [ 1158.369911][T19134] hsr_slave_1 (unregistering): left promiscuous mode [ 1158.414475][T19137] ªªªªª!: renamed from vlan1 (while UP) [ 1158.518086][T19152] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1158.639732][T19157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12430'. [ 1158.815606][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12433'. [ 1158.886836][T19173] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12436'. [ 1158.922023][T19171] tipc: Started in network mode [ 1158.926941][T19171] tipc: Node identity 8a9dfbcc9402, cluster identity 4711 [ 1158.947009][T19171] tipc: Enabled bearer , priority 0 [ 1158.986319][T19179] syzkaller0: entered promiscuous mode [ 1159.001374][T19179] syzkaller0: entered allmulticast mode [ 1159.061431][T19171] tipc: Resetting bearer [ 1159.118500][T19170] tipc: Resetting bearer [ 1159.221054][T19170] tipc: Disabling bearer [ 1159.259851][T19194] bond0: entered promiscuous mode [ 1159.271084][T19194] bond_slave_0: entered promiscuous mode [ 1159.277190][T21621] lec:lec_start_xmit: lec0:No lecd attached [ 1159.288373][T19194] bond_slave_1: entered promiscuous mode [ 1159.304887][T19194] batadv0: entered promiscuous mode [ 1159.325646][T19194] debugfs: 'hsr1' already exists in 'hsr' [ 1159.340609][T19194] Cannot create hsr debugfs directory [ 1159.357061][T19194] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1159.368596][T19194] bond0: left promiscuous mode [ 1159.374052][T19194] bond_slave_0: left promiscuous mode [ 1159.382229][T19194] bond_slave_1: left promiscuous mode [ 1159.388964][T19194] batadv0: left promiscuous mode [ 1159.625303][T19215] netlink: 'syz.0.12444': attribute type 9 has an invalid length. [ 1160.575569][T19243] tipc: Started in network mode [ 1160.594678][T19243] tipc: Node identity 2a4a52fee049, cluster identity 4711 [ 1160.606206][T19243] tipc: Enabled bearer , priority 0 [ 1160.627645][T19244] veth0_macvtap: left promiscuous mode [ 1160.656335][T19244] macvtap0: entered allmulticast mode [ 1160.685704][T19242] tipc: Disabling bearer [ 1160.857895][T19177] rdma_rxe: rxe_newlink: failed to add bond0 [ 1161.061952][T19256] geneve2: entered promiscuous mode [ 1161.089734][ T8226] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 37343 - 0 [ 1161.124651][ T8226] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 37343 - 0 [ 1161.142358][ T8226] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 37343 - 0 [ 1161.180026][ T8226] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 37343 - 0 [ 1161.421463][T19286] netlink: 'syz.3.12465': attribute type 1 has an invalid length. [ 1161.481419][T19285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.755869][T19303] team1: entered promiscuous mode [ 1161.774121][T19303] team1: entered allmulticast mode [ 1162.413530][T19345] netlink: 'syz.0.12483': attribute type 3 has an invalid length. [ 1162.423303][T19345] __nla_validate_parse: 15 callbacks suppressed [ 1162.423331][T19345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12483'. [ 1162.692460][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12484'. [ 1163.048422][T19379] netlink: 'syz.2.12491': attribute type 1 has an invalid length. [ 1163.087671][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12491'. [ 1163.116496][T19382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12492'. [ 1163.344129][T19382] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12492'. [ 1163.639156][T19408] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1163.654466][T19408] bond1 (unregistering): Released all slaves [ 1163.902266][T19426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12503'. [ 1163.971698][T19430] bridge_slave_0: left allmulticast mode [ 1163.989428][T19430] bridge_slave_0: left promiscuous mode [ 1164.012185][T19430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.028210][T19437] netlink: 'syz.0.12499': attribute type 17 has an invalid length. [ 1164.038197][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12499'. [ 1164.066035][T19430] bridge_slave_1: left promiscuous mode [ 1164.073068][T19437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12499'. [ 1164.101099][T19430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.142600][T19430] bond0: (slave bond_slave_0): Releasing backup interface [ 1164.200099][T19430] bond0: (slave bond_slave_1): Releasing backup interface [ 1164.267734][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12506'. [ 1164.282607][T19430] team0: Port device team_slave_0 removed [ 1164.308159][T19430] team0: Port device team_slave_1 removed [ 1164.322226][T19430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.329860][T19430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.341791][T19430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.349401][T19430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.368608][T19430] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1164.396786][T19437] gretap0: entered promiscuous mode [ 1164.408896][T19437] gretap0: left promiscuous mode [ 1164.572402][T19461] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12507'. [ 1164.787279][T19469] xt_hashlimit: size too large, truncated to 1048576 [ 1164.794644][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1164.794676][ C1] lec:lec_tx_timeout: lec0 [ 1164.909748][T19481] bond0: entered promiscuous mode [ 1164.922953][T19481] bond_slave_0: entered promiscuous mode [ 1164.940217][T19481] bond_slave_1: entered promiscuous mode [ 1164.960308][T19481] batadv0: entered promiscuous mode [ 1164.978860][T19481] debugfs: 'hsr0' already exists in 'hsr' [ 1164.994357][T19481] Cannot create hsr debugfs directory [ 1165.001831][T19481] hsr0: entered promiscuous mode [ 1165.006889][T19481] hsr0: entered allmulticast mode [ 1165.016074][T19486] netlink: 'syz.0.12514': attribute type 1 has an invalid length. [ 1165.028175][T19481] bond0: entered allmulticast mode [ 1165.037697][T19481] bond_slave_0: entered allmulticast mode [ 1165.045165][T19481] bond_slave_1: entered allmulticast mode [ 1165.076131][T19481] batadv0: entered allmulticast mode [ 1165.082893][T19481] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1165.096448][T19481] bond0: left promiscuous mode [ 1165.111822][T19481] bond_slave_0: left promiscuous mode [ 1165.117618][T19481] bond_slave_1: left promiscuous mode [ 1165.145588][T19481] batadv0: left promiscuous mode [ 1165.245112][T19486] bond1: entered promiscuous mode [ 1165.281198][T19486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1165.336568][T19488] bond1: (slave bridge1): making interface the new active one [ 1165.346907][T19488] bridge1: entered promiscuous mode [ 1165.353663][T19488] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1165.396750][T19502] : renamed from hsr0 [ 1165.436452][T19489] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1165.445497][T19489] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1165.795299][T19529] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1165.812101][T19531] xt_hashlimit: size too large, truncated to 1048576 [ 1166.191296][T19555] sctp: [Deprecated]: syz.4.12536 (pid 19555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1166.191296][T19555] Use struct sctp_sack_info instead [ 1166.262463][T19558] sctp: [Deprecated]: syz.4.12536 (pid 19558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1166.262463][T19558] Use struct sctp_sack_info instead [ 1166.400765][T19571] netlink: 'syz.1.12542': attribute type 3 has an invalid length. [ 1166.634145][T19589] vcan0: tx address claim with dlc 0 [ 1166.816968][T19607] x_tables: duplicate underflow at hook 1 [ 1166.899075][T19609] openvswitch: netlink: Key 32 has unexpected len 1 expected 2 [ 1166.915253][T19605] bond2: entered promiscuous mode [ 1166.916131][T19613] netlink: 'syz.3.12556': attribute type 10 has an invalid length. [ 1166.922670][T19605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1166.958560][T19605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1166.966256][T19605] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1166.978322][T19605] bond2: (slave sit1): Error -95 calling set_mac_address [ 1166.991656][T19613] netlink: 'syz.3.12556': attribute type 2 has an invalid length. [ 1167.037452][ T1675] block nbd7: Possible stuck request ffff888027330000: control (read@0,4096B). Runtime 30 seconds [ 1167.238586][T19627] bridge0: port 3(ipvlan2) entered blocking state [ 1167.252203][T19627] bridge0: port 3(ipvlan2) entered disabled state [ 1167.273225][T19627] ipvlan2: entered allmulticast mode [ 1167.287771][T19627] bridge0: entered allmulticast mode [ 1167.302576][T19627] ipvlan2: left allmulticast mode [ 1167.312784][T19627] bridge0: left allmulticast mode [ 1167.427747][T19643] bond3: option resend_igmp: invalid value (32767) [ 1167.436758][T19643] bond3: option resend_igmp: allowed values 0 - 255 [ 1167.466079][T19643] bond3 (unregistering): Released all slaves [ 1167.674961][T19654] __nla_validate_parse: 18 callbacks suppressed [ 1167.674983][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12565'. [ 1167.740625][T19664] tc action pedit offset must be on 32 bit boundaries [ 1167.846277][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12572'. [ 1167.952954][T19679] team0: Port device team_slave_0 removed [ 1168.030238][T19692] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12577'. [ 1168.077099][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12579'. [ 1168.173747][T19700] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.12581'. [ 1168.183782][T19695] hsr_slave_0: left promiscuous mode [ 1168.190029][T19695] hsr_slave_1: left promiscuous mode [ 1168.194139][T19700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.356245][T19729] syzkaller0: entered promiscuous mode [ 1170.362058][T19729] syzkaller0: entered allmulticast mode [ 1170.419292][T19733] syzkaller0: entered allmulticast mode [ 1170.519471][T19741] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12595'. [ 1170.532697][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12595'. [ 1170.805314][T19759] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12602'. [ 1170.885499][T19766] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1171.145586][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12608'. [ 1171.348212][T19789] netlink: 'syz.0.12610': attribute type 29 has an invalid length. [ 1171.365109][T19789] netlink: 'syz.0.12610': attribute type 29 has an invalid length. [ 1171.375054][T19789] netlink: 500 bytes leftover after parsing attributes in process `syz.0.12610'. [ 1171.487321][T19796] lo speed is unknown, defaulting to 1000 [ 1171.734570][T19796] lo speed is unknown, defaulting to 1000 [ 1171.902965][T19800] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1172.144356][T19808] netlink: 'syz.1.12615': attribute type 1 has an invalid length. [ 1172.173473][T19808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1174.018480][T19775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1174.453076][T19844] __nla_validate_parse: 1 callbacks suppressed [ 1174.453097][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12624'. [ 1174.621438][T19863] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12632'. [ 1174.641847][T19865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12633'. [ 1174.656313][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12632'. [ 1174.690641][T19863] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12632'. [ 1174.807873][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12638'. [ 1174.885298][T19879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12638'. [ 1175.155566][T19902] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12644'. [ 1175.348221][T19916] netlink: 'syz.4.12649': attribute type 17 has an invalid length. [ 1175.359772][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12649'. [ 1175.373020][T19916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12649'. [ 1175.373631][T19918] netlink: 'syz.0.12650': attribute type 25 has an invalid length. [ 1175.424184][T19924] netlink: 'syz.1.12651': attribute type 10 has an invalid length. [ 1175.568317][ T8226] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.577707][T19929] xt_hashlimit: size too large, truncated to 1048576 [ 1175.630695][ T8226] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.691430][ T8226] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.700295][ T8226] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.749996][T19936] –: renamed from vxcan1 (while UP) [ 1175.833980][T19944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1176.302596][T19975] netlink: 'syz.0.12664': attribute type 64 has an invalid length. [ 1176.520843][T19999] netlink: 'syz.4.12673': attribute type 2 has an invalid length. [ 1176.530218][T19999] netlink: 'syz.4.12673': attribute type 5 has an invalid length. [ 1176.557246][T20002] netlink: 'syz.2.12674': attribute type 1 has an invalid length. [ 1176.728698][T20017] x_tables: duplicate underflow at hook 2 [ 1176.823822][T20021] syzkaller0: entered promiscuous mode [ 1176.835339][T20021] syzkaller0: entered allmulticast mode [ 1176.922630][T20026] IPVS: set_ctl: invalid protocol: 9 100.1.1.2:20001 [ 1177.239695][T20042] netlink: 'syz.2.12684': attribute type 9 has an invalid length. [ 1177.281817][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1177.570853][T20059] netlink: 'syz.4.12689': attribute type 1 has an invalid length. [ 1178.041787][ T5840] block nbd8: Receive control failed (result -32) [ 1178.260552][T20098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1178.581901][T20109] syzkaller0: entered promiscuous mode [ 1178.590580][T20109] syzkaller0: entered allmulticast mode [ 1178.658881][T20118] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1178.702467][T20118] bond1 (unregistering): Released all slaves [ 1180.644755][T20149] netlink: 'syz.0.12711': attribute type 1 has an invalid length. [ 1180.852404][T20154] syzkaller1: entered promiscuous mode [ 1180.858021][T20154] syzkaller1: entered allmulticast mode [ 1181.348285][T20199] __nla_validate_parse: 15 callbacks suppressed [ 1181.348306][T20199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12726'. [ 1181.372396][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12726'. [ 1181.405407][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12727'. [ 1181.430311][T20166] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1181.702495][T20222] syzkaller0: entered promiscuous mode [ 1181.708148][T20222] syzkaller0: entered allmulticast mode [ 1181.818266][T20237] netlink: 294 bytes leftover after parsing attributes in process `syz.2.12736'. [ 1181.828949][T20237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1181.979800][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12739'. [ 1182.074983][T20259] syz_tun: entered allmulticast mode [ 1182.217806][T20272] netlink: 100 bytes leftover after parsing attributes in process `syz.3.12744'. [ 1182.238717][T20275] netlink: 'syz.2.12748': attribute type 1 has an invalid length. [ 1182.610147][T20299] netlink: 'syz.4.12754': attribute type 8 has an invalid length. [ 1182.790462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1182.798571][ C1] lec:lec_tx_timeout: lec0 [ 1182.859458][T20317] xt_HMARK: spi-set and port-set can't be combined [ 1182.907445][T20317] netlink: 'syz.1.12759': attribute type 10 has an invalid length. [ 1182.944157][T20317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.966725][T20317] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1183.029174][T20330] netlink: 'syz.4.12761': attribute type 1 has an invalid length. [ 1183.112676][T20330] bond3: entered promiscuous mode [ 1183.119534][T20330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1183.158406][T20336] bond3: (slave bridge6): making interface the new active one [ 1183.167348][T20336] bridge6: entered promiscuous mode [ 1183.174435][T20336] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 1183.338810][T20351] erspan0: entered promiscuous mode [ 1183.358274][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12767'. [ 1183.380748][T20351] netlink: 'syz.4.12767': attribute type 21 has an invalid length. [ 1183.389196][T20351] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12767'. [ 1183.399105][T20351] netlink: 'syz.4.12767': attribute type 5 has an invalid length. [ 1183.407587][T20351] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12767'. [ 1183.473965][T20353] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12768'. [ 1183.483854][T20353] netlink: ct family unspecified [ 1183.889331][T20385] Cannot find set identified by id 0 to match [ 1183.896886][T20389] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1183.908287][ T2288] IPVS: starting estimator thread 0... [ 1184.000479][T20392] IPVS: using max 32 ests per chain, 76800 per kthread [ 1184.113829][T20402] tunl0: entered promiscuous mode [ 1184.129683][T20402] netlink: 'syz.2.12783': attribute type 3 has an invalid length. [ 1184.193260][T20407] netlink: 'syz.4.12784': attribute type 10 has an invalid length. [ 1184.254486][T20413] netlink: 'syz.1.12787': attribute type 1 has an invalid length. [ 1184.336173][T20417] vlan1: entered allmulticast mode [ 1184.357764][T20417] : entered allmulticast mode [ 1184.364707][T20417] hsr_slave_0: entered allmulticast mode [ 1184.371017][T20417] hsr_slave_1: entered allmulticast mode [ 1184.414873][T20413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1184.695785][T20437] tipc: Enabling of bearer rejected, failed to enable media [ 1185.147905][T20468] tipc: Started in network mode [ 1185.154081][T20468] tipc: Node identity , cluster identity 4711 [ 1185.161958][T20468] tipc: Failed to obtain node identity [ 1185.167564][T20468] tipc: Enabling of bearer rejected, failed to enable media [ 1185.409575][T20484] veth7: entered promiscuous mode [ 1185.473393][T20486] syzkaller0: entered promiscuous mode [ 1185.481215][T20486] syzkaller0: entered allmulticast mode [ 1186.371112][T20556] __nla_validate_parse: 9 callbacks suppressed [ 1186.371129][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12835'. [ 1186.402888][T20563] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1186.421522][T20564] netlink: 'syz.2.12837': attribute type 13 has an invalid length. [ 1186.440198][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12837'. [ 1186.502519][ T6119] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1186.502654][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12837'. [ 1186.513060][ T6119] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1186.541863][ T6119] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1186.561955][ T6119] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.513897][ T8232] bond0: (slave batadv0): interface is now down [ 1187.899349][T20635] validate_nla: 2 callbacks suppressed [ 1187.899369][T20635] netlink: 'syz.2.12858': attribute type 1 has an invalid length. [ 1187.945166][T20635] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1189.529873][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12870'. [ 1189.638832][T20690] netlink: 51 bytes leftover after parsing attributes in process `syz.2.12871'. [ 1189.651206][T20690] tc_dump_action: action bad kind [ 1189.730878][T20697] netlink: 'syz.2.12873': attribute type 32 has an invalid length. [ 1189.739136][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12873'. [ 1189.765370][T20697] bond2: option coupled_control: invalid value (192) [ 1189.773686][T20697] bond2 (unregistering): Released all slaves [ 1190.072112][ T6133] bond0: (slave batadv0): interface is now down [ 1190.082172][ T6133] bond0: now running without any active interface! [ 1190.937942][T20640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1191.104548][T20713] x_tables: unsorted underflow at hook 2 [ 1191.117979][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12878'. [ 1191.212553][T20718] syz.1.12879: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1191.225214][T20730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12880'. [ 1191.243730][T20718] CPU: 1 UID: 0 PID: 20718 Comm: syz.1.12879 Not tainted syzkaller #0 PREEMPT(full) [ 1191.243776][T20718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1191.243798][T20718] Call Trace: [ 1191.243806][T20718] [ 1191.243814][T20718] dump_stack_lvl+0xe8/0x150 [ 1191.243844][T20718] warn_alloc+0x249/0x340 [ 1191.243867][T20718] ? stack_trace_save+0xa9/0x100 [ 1191.243890][T20718] ? __pfx_warn_alloc+0x10/0x10 [ 1191.243919][T20718] ? kasan_save_track+0x4f/0x80 [ 1191.243938][T20718] ? kasan_save_track+0x3e/0x80 [ 1191.243955][T20718] ? __kasan_kmalloc+0x93/0xb0 [ 1191.243975][T20718] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1191.243995][T20718] ? xskq_create+0x56/0x170 [ 1191.244016][T20718] ? xsk_setsockopt+0x54c/0x990 [ 1191.244034][T20718] ? do_sock_setsockopt+0x17c/0x1b0 [ 1191.244054][T20718] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1191.244075][T20718] ? do_syscall_64+0x14d/0xf80 [ 1191.244102][T20718] __vmalloc_node_range_noprof+0x132/0x1730 [ 1191.244156][T20718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1191.244185][T20718] ? __kasan_kmalloc+0x93/0xb0 [ 1191.244212][T20718] vmalloc_user_noprof+0xad/0xe0 [ 1191.244233][T20718] ? xskq_create+0xbf/0x170 [ 1191.244254][T20718] xskq_create+0xbf/0x170 [ 1191.244278][T20718] xsk_init_queue+0x8a/0xe0 [ 1191.244301][T20718] xsk_setsockopt+0x54c/0x990 [ 1191.244324][T20718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1191.244345][T20718] ? __pfx_aa_sk_perm+0x10/0x10 [ 1191.244374][T20718] ? aa_sock_opt_perm+0xff/0x1a0 [ 1191.244395][T20718] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1191.244413][T20718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1191.244432][T20718] do_sock_setsockopt+0x17c/0x1b0 [ 1191.244457][T20718] __x64_sys_setsockopt+0x13d/0x1b0 [ 1191.244485][T20718] do_syscall_64+0x14d/0xf80 [ 1191.244507][T20718] ? trace_irq_disable+0x3b/0x150 [ 1191.244524][T20718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.244544][T20718] ? clear_bhb_loop+0x40/0x90 [ 1191.244567][T20718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.244585][T20718] RIP: 0033:0x7f9c6199c819 [ 1191.244604][T20718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.244620][T20718] RSP: 002b:00007f9c5fbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1191.244640][T20718] RAX: ffffffffffffffda RBX: 00007f9c61c16090 RCX: 00007f9c6199c819 [ 1191.244654][T20718] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1191.244666][T20718] RBP: 00007f9c61a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1191.244678][T20718] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.244690][T20718] R13: 00007f9c61c16128 R14: 00007f9c61c16090 R15: 00007fffcdf93448 [ 1191.244728][T20718] [ 1191.244736][T20718] Mem-Info: [ 1191.260866][T20730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12880'. [ 1191.312676][T20718] active_anon:6687 inactive_anon:0 isolated_anon:0 [ 1191.312676][T20718] active_file:3151 inactive_file:40361 isolated_file:0 [ 1191.312676][T20718] unevictable:768 dirty:105 writeback:0 [ 1191.312676][T20718] slab_reclaimable:16042 slab_unreclaimable:176419 [ 1191.312676][T20718] mapped:29485 shmem:1394 pagetables:3742 [ 1191.312676][T20718] sec_pagetables:0 bounce:0 [ 1191.312676][T20718] kernel_misc_reclaimable:0 [ 1191.312676][T20718] free:1213234 free_pcp:24615 free_cma:0 [ 1191.589643][T20718] Node 0 active_anon:26548kB inactive_anon:0kB active_file:12604kB inactive_file:161252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:19636kB dirty:420kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19304kB pagetables:14836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1191.675992][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12886'. [ 1191.705730][T20718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1191.737699][T20718] Node 0 DMA free:11220kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:40kB free_cma:0kB [ 1191.769899][T20718] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1191.776278][T20718] Node 0 DMA32 free:1176428kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26648kB inactive_anon:0kB active_file:12604kB inactive_file:161252kB unevictable:1536kB writepending:420kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:35344kB local_pcp:15432kB free_cma:0kB [ 1191.810246][T20718] lowmem_reserve[]: 0 0 0 0 0 [ 1191.823271][T20718] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1191.859592][T20718] lowmem_reserve[]: 0 0 0 0 0 [ 1191.865254][T20718] Node 1 Normal free:3665560kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63172kB local_pcp:31216kB free_cma:0kB [ 1191.915206][T20718] lowmem_reserve[]: 0 0 0 0 0 [ 1191.919973][T20718] Node 0 DMA: 1*4kB (U) 2*8kB (U) 2*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11220kB [ 1191.943928][T20718] Node 0 DMA32: 4657*4kB (UME) 8585*8kB (UME) 6230*16kB (UME) 240*32kB (UME) 69*64kB (UME) 431*128kB (UME) 530*256kB (UME) 212*512kB (UM) 362*1024kB (UME) 150*2048kB (UM) 0*4096kB = 1176364kB [ 1191.964480][T20718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1191.967763][T20717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1191.980760][T20718] Node 1 Normal: 12*4kB (UM) 16*8kB (UM) 25*16kB (UM) 14*32kB (UM) 20*64kB (UM) 18*128kB (UM) 17*256kB (UM) 16*512kB (UM) 15*1024kB (UM) 16*2048kB (U) 879*4096kB (UM) = 3665664kB [ 1192.091061][T20718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1192.134060][T20718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1192.162752][T20718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1192.188776][T20718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1192.221509][T20763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12892'. [ 1192.232676][T20718] 44908 total pagecache pages [ 1192.237399][T20718] 5 pages in swap cache [ 1192.257073][T20718] Free swap = 124976kB [ 1192.269068][T20718] Total swap = 124996kB [ 1192.281428][T20718] 2097051 pages RAM [ 1192.291036][T20718] 0 pages HighMem/MovableOnly [ 1192.300081][T20718] 427071 pages reserved [ 1192.318203][T20718] 0 pages cma reserved [ 1192.331752][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12891'. [ 1192.500546][T20767] netlink: 'syz.3.12890': attribute type 3 has an invalid length. [ 1192.508651][T20767] netlink: 'syz.3.12890': attribute type 3 has an invalid length. [ 1192.522045][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12896'. [ 1192.544037][T20785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.569825][T20789] xfrm1: entered promiscuous mode [ 1192.576362][T20789] xfrm1: entered allmulticast mode [ 1192.654923][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12896'. [ 1192.711391][T20794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12899'. [ 1192.735576][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12899'. [ 1192.805882][T20794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12899'. [ 1192.818470][T20800] openvswitch: netlink: IPv4 tun info is not correct [ 1192.949556][T20803] netlink: 'syz.0.12904': attribute type 2 has an invalid length. [ 1193.100044][T20812] syzkaller0: entered promiscuous mode [ 1193.107344][T20812] syzkaller0: entered allmulticast mode [ 1193.196438][T20817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12910'. [ 1193.225055][T20817] macsec2: entered promiscuous mode [ 1193.233414][T20817] bridge0: entered promiscuous mode [ 1193.238787][T20817] macsec2: entered allmulticast mode [ 1193.244386][T20817] bridge0: entered allmulticast mode [ 1193.261308][T20817] bridge0: port 3(macsec2) entered blocking state [ 1193.282387][T20817] bridge0: port 3(macsec2) entered disabled state [ 1193.300068][T20817] bridge0: left allmulticast mode [ 1193.322702][T20817] bridge0: left promiscuous mode [ 1193.333740][T30889] IPVS: starting estimator thread 0... [ 1193.412980][T20830] netlink: 'syz.1.12913': attribute type 2 has an invalid length. [ 1193.432162][T20828] IPVS: using max 57 ests per chain, 136800 per kthread [ 1193.432919][T20830] netlink: 'syz.1.12913': attribute type 2 has an invalid length. [ 1193.878583][T20864] netlink: 'syz.2.12922': attribute type 6 has an invalid length. [ 1193.932062][T20870] pim6reg: entered allmulticast mode [ 1193.937590][T20864] netlink: 184 bytes leftover after parsing attributes in process `syz.2.12922'. [ 1193.950625][T20870] pim6reg: left allmulticast mode [ 1193.984401][T20864] sctp: [Deprecated]: syz.2.12922 (pid 20864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1193.984401][T20864] Use struct sctp_sack_info instead [ 1194.468795][T20902] lo speed is unknown, defaulting to 1000 [ 1195.177706][T20902] lo speed is unknown, defaulting to 1000 [ 1195.403814][T20946] netlink: 'syz.2.12944': attribute type 4 has an invalid length. [ 1195.645197][T20958] netlink: 'syz.1.12947': attribute type 12 has an invalid length. [ 1195.658825][T20958] netlink: 'syz.1.12947': attribute type 12 has an invalid length. [ 1195.705816][T20968] netlink: 'syz.0.12946': attribute type 2 has an invalid length. [ 1195.781914][T20964] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1196.306731][T21013] netlink: 'syz.3.12959': attribute type 4 has an invalid length. [ 1196.656798][T21033] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1196.665864][T21033] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 1196.695729][T21033] team0: Failed to send options change via netlink (err -105) [ 1196.713198][T21033] team0: Port device batadv2 added [ 1196.902822][T21020] __nla_validate_parse: 12 callbacks suppressed [ 1196.902846][T21020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12961'. [ 1197.098820][T21042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12967'. [ 1197.108358][T21042] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12967'. [ 1197.134627][ T1675] block nbd7: Possible stuck request ffff888027330000: control (read@0,4096B). Runtime 60 seconds [ 1199.418116][T21023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1199.875578][T21085] xt_hashlimit: size too large, truncated to 1048576 [ 1200.009608][T21090] pim6reg: entered allmulticast mode [ 1200.040139][T21093] pim6reg: left allmulticast mode [ 1200.087541][T21106] netlink: 248 bytes leftover after parsing attributes in process `syz.3.12985'. [ 1200.322998][T21118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12990'. [ 1200.372764][T21118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12990'. [ 1200.454439][T21136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12994'. [ 1200.475939][T21138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12994'. [ 1200.554603][T21134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1200.561912][T21134] IPv6: NLM_F_CREATE should be set when creating new route [ 1200.569169][T21134] IPv6: NLM_F_CREATE should be set when creating new route [ 1200.576621][T21134] IPv6: NLM_F_CREATE should be set when creating new route [ 1200.597448][T21150] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 1200.619097][T21152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1200.711565][T21162] xt_TCPMSS: Only works on TCP SYN packets [ 1200.795504][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13001'. [ 1200.835518][T21174] netlink: 240 bytes leftover after parsing attributes in process `syz.1.13004'. [ 1200.876398][T21170] bond0: entered promiscuous mode [ 1200.903185][T21170] bond_slave_0: entered promiscuous mode [ 1200.909143][T21170] bond_slave_1: entered promiscuous mode [ 1200.926584][T21170] batadv0: entered promiscuous mode [ 1200.933654][T21170] debugfs: 'hsr0' already exists in 'hsr' [ 1200.939415][T21170] Cannot create hsr debugfs directory [ 1200.950167][T21170] hsr0: entered promiscuous mode [ 1200.958748][T21170] hsr0: entered allmulticast mode [ 1200.973868][T21170] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1200.993290][T21170] bond0: left promiscuous mode [ 1201.001990][T21170] bond_slave_0: left promiscuous mode [ 1201.007610][T21170] bond_slave_1: left promiscuous mode [ 1201.029742][T21170] batadv0: left promiscuous mode [ 1201.065092][T21187] netlink: 'syz.0.13009': attribute type 7 has an invalid length. [ 1201.080594][T21187] netlink: 'syz.0.13009': attribute type 8 has an invalid length. [ 1201.346420][T21211] x_tables: duplicate underflow at hook 2 [ 1201.391213][T21215] netlink: 'syz.4.13018': attribute type 4 has an invalid length. [ 1201.647000][T21222] netlink: 'syz.4.13021': attribute type 1 has an invalid length. [ 1201.778049][T21222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1201.848482][T21232] bond4: (slave geneve3): making interface the new active one [ 1201.873639][T21232] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1201.949683][T21244] syzkaller0: entered promiscuous mode [ 1201.962671][T21244] syzkaller0: entered allmulticast mode [ 1202.131449][T21253] syzkaller0: entered promiscuous mode [ 1202.136961][T21253] syzkaller0: entered allmulticast mode [ 1202.294100][T21279] __nla_validate_parse: 8 callbacks suppressed [ 1202.294120][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13030'. [ 1204.643201][T21302] gre1: entered promiscuous mode [ 1204.648308][T21302] gre1: entered allmulticast mode [ 1204.664072][T21302] team0: Device gre1 is of different type [ 1204.821141][T21321] sctp: [Deprecated]: syz.1.13038 (pid 21321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1204.821141][T21321] Use struct sctp_sack_info instead [ 1204.973457][T21328] syzkaller0: entered promiscuous mode [ 1204.979004][T21328] syzkaller0: entered allmulticast mode [ 1204.997651][T21328] pim6reg: entered allmulticast mode [ 1205.209809][T21347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1205.331415][ T5193] udevd[5193]: worker [18016] /devices/virtual/block/nbd7 is taking a long time [ 1205.414436][T21363] netlink: 'syz.2.13050': attribute type 21 has an invalid length. [ 1205.441850][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13050'. [ 1205.482411][T21363] netlink: 'syz.2.13050': attribute type 21 has an invalid length. [ 1205.521782][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13050'. [ 1205.592307][T21367] syzkaller0: entered promiscuous mode [ 1205.598717][T21367] syzkaller0: entered allmulticast mode [ 1207.941981][T21416] netlink: 'syz.3.13064': attribute type 1 has an invalid length. [ 1207.950791][T21416] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13064'. [ 1207.960069][T21416] netlink: 658 bytes leftover after parsing attributes in process `syz.3.13064'. [ 1207.979882][T21416] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13064'. [ 1208.148090][T21438] xt_time: unknown flags 0xf4 [ 1208.156364][T21430] can: request_module (can-proto-3) failed. [ 1208.163071][T21434] can: request_module (can-proto-3) failed. [ 1208.529782][T21472] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13077'. [ 1208.539895][T21469] netlink: 'syz.0.13081': attribute type 4 has an invalid length. [ 1208.544709][T21462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13079'. [ 1208.589331][T21472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13077'. [ 1208.686869][T21479] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13083'. [ 1208.805228][T21477] syzkaller0: entered promiscuous mode [ 1208.841535][T21477] syzkaller0: entered allmulticast mode [ 1208.912947][T21497] xt_hashlimit: size too large, truncated to 1048576 [ 1209.274025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.351507][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.432449][T21517] netlink: 'syz.4.13092': attribute type 1 has an invalid length. [ 1209.616708][T21523] netlink: 'syz.4.13092': attribute type 11 has an invalid length. [ 1209.624797][T21523] netlink: 228 bytes leftover after parsing attributes in process `syz.4.13092'. [ 1210.393011][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.272135][T21539] IPVS: Unknown mcast interface: vcan0 [ 1211.305332][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13098'. [ 1211.354647][T21549] openvswitch: netlink: IPv4 tun info is not correct [ 1211.396663][T21553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13100'. [ 1211.430923][T21553] veth0_virt_wifi: entered promiscuous mode [ 1211.437256][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.520015][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.620008][T21572] netlink: 'syz.3.13105': attribute type 10 has an invalid length. [ 1211.656881][T21572] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1211.746263][T21582] netlink: 'syz.1.13111': attribute type 2 has an invalid length. [ 1212.479037][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.566526][T21650] tipc: Enabling of bearer rejected, failed to enable media [ 1212.671016][ T6146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1212.678956][ T6146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1212.700643][ T2288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1212.737806][T21671] openvswitch: netlink: Unknown key attributes 2 [ 1212.819709][T21679] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1212.877865][T21685] xt_hashlimit: size too large, truncated to 1048576 [ 1212.892998][ T2293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.963833][T21686] __nla_validate_parse: 9 callbacks suppressed [ 1212.963855][T21686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13143'. [ 1213.014841][T21693] xt_ecn: cannot match TCP bits for non-tcp packets [ 1213.041485][T21688] bond5 (unregistering): Released all slaves [ 1213.082717][ T2288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.182489][T21693] tipc: Failed to remove unknown binding: 66,0,0/0:1007385816/1007385817 [ 1213.201369][T21693] tipc: Failed to remove unknown binding: 66,0,0/0:1007385816/1007385817 [ 1213.238968][T21698] netlink: 'syz.4.13148': attribute type 1 has an invalid length. [ 1213.322379][ T2293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.429142][T21710] netlink: 'syz.4.13152': attribute type 21 has an invalid length. [ 1213.454382][T21710] netlink: 'syz.4.13152': attribute type 22 has an invalid length. [ 1213.471507][T21710] netlink: 'syz.4.13152': attribute type 23 has an invalid length. [ 1213.512873][T21710] netlink: 'syz.4.13152': attribute type 25 has an invalid length. [ 1213.513325][ T2288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.529129][ T2288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.544792][T21710] netlink: 'syz.4.13152': attribute type 26 has an invalid length. [ 1213.574774][T21710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13152'. [ 1213.664846][T21726] netlink: 'syz.0.13155': attribute type 64 has an invalid length. [ 1213.693445][T21726] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13155'. [ 1213.770701][T21723] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13155'. [ 1214.079536][T21758] netlink: 'syz.4.13165': attribute type 1 has an invalid length. [ 1214.084743][T21753] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1214.122780][T21769] openvswitch: netlink: IP tunnel TTL not specified. [ 1214.133791][T21757] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1214.149250][T21757] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 1214.262076][T21772] netlink: 'syz.0.13169': attribute type 11 has an invalid length. [ 1214.308679][T21772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13169'. [ 1214.349809][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13169'. [ 1214.379342][T21783] netlink: 'syz.3.13173': attribute type 10 has an invalid length. [ 1214.393811][T21783] veth0_macvtap: left promiscuous mode [ 1214.653642][T21807] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13179'. [ 1214.726730][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13180'. [ 1214.933498][T21823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13183'. [ 1214.970835][T21818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13180'. [ 1215.105259][T21828] syzkaller0: entered promiscuous mode [ 1215.111071][T21828] syzkaller0: entered allmulticast mode [ 1215.592939][ T2288] net_ratelimit: 2 callbacks suppressed [ 1215.592960][ T2288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.674197][ T2288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.638556][ T2288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.951282][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1216.953658][ T2293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.594574][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.671289][ T2288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.827971][T21879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.838829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.888845][T21873] syzkaller0: entered promiscuous mode [ 1217.910569][T21873] syzkaller0: entered allmulticast mode [ 1218.034605][T21889] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1218.157224][T21899] __nla_validate_parse: 10 callbacks suppressed [ 1218.157245][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13205'. [ 1218.205642][T21899] wlan1: mtu greater than device maximum [ 1218.213094][T21899] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 1218.253033][T21903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1218.377639][T21913] validate_nla: 6 callbacks suppressed [ 1218.377660][T21913] netlink: 'syz.3.13212': attribute type 1 has an invalid length. [ 1218.519093][T21926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13214'. [ 1218.757217][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13218'. [ 1218.768938][T21938] netlink: 'syz.2.13218': attribute type 5 has an invalid length. [ 1218.769623][T21937] netlink: 'syz.0.13219': attribute type 1 has an invalid length. [ 1218.778013][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13218'. [ 1218.809246][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13218'. [ 1218.813305][T21937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13219'. [ 1218.819167][T21938] netlink: 'syz.2.13218': attribute type 5 has an invalid length. [ 1218.836078][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13218'. [ 1219.137672][T21962] tipc: Enabling of bearer rejected, failed to enable media [ 1219.226927][T21969] syzkaller1: entered promiscuous mode [ 1219.237208][T21969] syzkaller1: entered allmulticast mode [ 1219.263543][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13229'. [ 1219.358417][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13231'. [ 1219.523116][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13235'. [ 1219.974484][T22031] syzkaller0: entered promiscuous mode [ 1219.986577][T22031] syzkaller0: entered allmulticast mode [ 1220.053348][T22036] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1220.228353][T22041] netlink: 'syz.2.13251': attribute type 1 has an invalid length. [ 1220.336863][T22044] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1220.381254][T22044] team1: entered promiscuous mode [ 1220.386384][T22044] team1: entered allmulticast mode [ 1220.794532][ T5904] net_ratelimit: 9 callbacks suppressed [ 1220.794549][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.016863][T22092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.182474][T22114] geneve2: entered promiscuous mode [ 1221.197963][T22114] geneve2: entered allmulticast mode [ 1221.212902][T22119] netlink: 'syz.4.13273': attribute type 4 has an invalid length. [ 1221.313314][T22122] lo: Caught tx_queue_len zero misconfig [ 1221.520851][T22137] vlan2: entered promiscuous mode [ 1221.538957][T22137] bridge0: entered promiscuous mode [ 1221.553887][T22135] lo speed is unknown, defaulting to 1000 [ 1221.750773][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.832479][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.101772][T22135] lo speed is unknown, defaulting to 1000 [ 1222.410213][T22189] netlink: 'syz.3.13295': attribute type 153 has an invalid length. [ 1222.887835][T22206] netlink: 'syz.3.13299': attribute type 63 has an invalid length. [ 1222.916168][T30889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.987526][T22212] netlink: 'syz.3.13299': attribute type 63 has an invalid length. [ 1223.001932][T22214] x_tables: duplicate underflow at hook 3 [ 1223.244358][T22223] __nla_validate_parse: 15 callbacks suppressed [ 1223.244381][T22223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13305'. [ 1223.279249][T22223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13305'. [ 1223.288771][T22223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13305'. [ 1223.307022][T22227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13307'. [ 1223.631974][T22246] openvswitch: netlink: IPv4 tun info is not correct [ 1223.762297][T21621] lec:lec_start_xmit: lec0:No lecd attached [ 1223.840154][T22264] netlink: 'syz.1.13318': attribute type 21 has an invalid length. [ 1223.848616][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13318'. [ 1223.926978][T22264] netlink: 'syz.1.13318': attribute type 21 has an invalid length. [ 1223.935292][ T6146] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.944216][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13318'. [ 1223.956157][ T6146] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.967958][ T6146] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.989371][ T6146] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.000676][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.322807][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1224.338183][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1224.372801][T22283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1224.374832][T22282] syzkaller0: entered promiscuous mode [ 1224.390139][T22282] syzkaller0: entered allmulticast mode [ 1224.806479][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.030694][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.270702][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1226.072499][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.653380][T22322] veth0_to_team: entered allmulticast mode [ 1226.685355][T22320] syzkaller1: entered promiscuous mode [ 1226.720631][T22320] syzkaller1: entered allmulticast mode [ 1226.772488][T22328] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1227.240963][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.241783][ T1675] block nbd7: Possible stuck request ffff888027330000: control (read@0,4096B). Runtime 90 seconds [ 1227.269509][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.288532][T22353] netlink: 72 bytes leftover after parsing attributes in process `syz.4.13343'. [ 1227.672740][T22367] syzkaller0: entered promiscuous mode [ 1227.678326][T22367] syzkaller0: entered allmulticast mode [ 1227.814672][T22376] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1227.832864][ T2293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.995306][T22383] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1228.164237][T22403] netlink: 'syz.0.13361': attribute type 1 has an invalid length. [ 1228.310890][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.614279][T22432] Bluetooth: MGMT ver 1.23 [ 1228.636571][T22432] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1228.771783][T22446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.780308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.791749][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1228.799836][ C1] lec:lec_tx_timeout: lec0 [ 1228.802362][T22446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.882673][T22439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.910724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.997087][T22458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1229.012933][T22458] __nla_validate_parse: 6 callbacks suppressed [ 1229.012951][T22458] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13374'. [ 1229.053827][ T5840] block nbd9: Receive control failed (result -32) [ 1229.123558][T22468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13379'. [ 1229.214238][T22473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13380'. [ 1229.370554][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13383'. [ 1229.379607][T22484] netlink: 'syz.4.13384': attribute type 2 has an invalid length. [ 1229.428721][T22484] netlink: 'syz.4.13384': attribute type 4 has an invalid length. [ 1229.463790][T22484] netlink: 240 bytes leftover after parsing attributes in process `syz.4.13384'. [ 1229.578780][T22492] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13387'. [ 1229.608324][T22497] H: renamed from dummy0 (while UP) [ 1229.965962][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13398'. [ 1229.979357][T22525] netlink: 'syz.1.13398': attribute type 30 has an invalid length. [ 1230.056715][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13398'. [ 1230.066377][T22525] netlink: 'syz.1.13398': attribute type 30 has an invalid length. [ 1230.133361][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13398'. [ 1230.160877][T22525] netlink: 'syz.1.13398': attribute type 30 has an invalid length. [ 1230.197352][T22535] netlink: 'syz.2.13400': attribute type 1 has an invalid length. [ 1230.261675][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13398'. [ 1230.273881][T22525] netlink: 'syz.1.13398': attribute type 30 has an invalid length. [ 1230.334456][T22525] netlink: 'syz.1.13398': attribute type 30 has an invalid length. [ 1230.421361][T22525] netlink: 'syz.1.13398': attribute type 30 has an invalid length. [ 1230.440149][T22545] ip6t_srh: unknown srh match flags 4000 [ 1230.525014][T22546] syzkaller0: entered promiscuous mode [ 1230.531460][T22525] netlink: 'syz.1.13398': attribute type 30 has an invalid length. [ 1230.581876][T22546] syzkaller0: entered allmulticast mode [ 1230.855322][T22569] tipc: Enabling of bearer rejected, failed to enable media [ 1230.881182][T22569] syzkaller1: entered promiscuous mode [ 1230.886710][T22569] syzkaller1: entered allmulticast mode [ 1231.043991][T22578] lo speed is unknown, defaulting to 1000 [ 1231.163650][T22591] net_ratelimit: 8 callbacks suppressed [ 1231.163671][T22591] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1231.294963][T22598] erspan0: entered promiscuous mode [ 1231.431277][T30889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.510741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.523266][T22612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1231.530636][T22612] IPv6: NLM_F_CREATE should be set when creating new route [ 1231.576632][T22578] lo speed is unknown, defaulting to 1000 [ 1231.779457][T22628] openvswitch: netlink: Flow actions attr not present in new flow. [ 1231.865365][T22628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1231.915097][T22634] syzkaller0: entered promiscuous mode [ 1231.925483][T22634] syzkaller0: entered allmulticast mode [ 1231.996503][T22634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1232.095178][T22641] SET target dimension over the limit! [ 1232.139656][T22610] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 1232.178730][T22642] x_tables: duplicate underflow at hook 2 [ 1232.477226][T30889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.229646][T22684] vlan1: left allmulticast mode [ 1233.234778][T22684] veth0_vlan: left allmulticast mode [ 1233.240260][T22684] syz_tun: left allmulticast mode [ 1233.513596][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.799135][T22722] xt_hashlimit: size too large, truncated to 1048576 [ 1233.824519][T22724] veth3: entered promiscuous mode [ 1233.837572][T22724] veth3: entered allmulticast mode [ 1233.915849][ T2294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.001513][T22738] syzkaller1: entered promiscuous mode [ 1234.030481][T22738] syzkaller1: entered allmulticast mode [ 1234.559923][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.773697][T22767] __nla_validate_parse: 23 callbacks suppressed [ 1234.773720][T22767] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13469'. [ 1234.878892][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13469'. [ 1234.906146][T22772] validate_nla: 6 callbacks suppressed [ 1234.906168][T22772] netlink: 'syz.1.13468': attribute type 16 has an invalid length. [ 1234.987701][T22772] netlink: 'syz.1.13468': attribute type 17 has an invalid length. [ 1235.004293][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13469'. [ 1235.034969][T22781] macvlan0: entered promiscuous mode [ 1235.141977][T22793] netlink: 'syz.4.13475': attribute type 10 has an invalid length. [ 1235.193031][T22794] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13473'. [ 1235.208997][T22796] netlink: 5276 bytes leftover after parsing attributes in process `syz.2.13476'. [ 1235.219654][T22796] openvswitch: netlink: Flow key attr not present in new flow. [ 1235.255025][T22793] mac80211_hwsim hwsim133 wlan1: entered allmulticast mode [ 1235.264986][T22793] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1235.343436][ T6119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.351724][ T6119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.390190][T22803] netlink: 'syz.0.13477': attribute type 1 has an invalid length. [ 1235.455378][T22806] ip6tnl0: entered promiscuous mode [ 1235.470282][T22806] ip6tnl0: entered allmulticast mode [ 1235.520133][T22810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13477'. [ 1235.544358][T22803] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1235.591443][T22810] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1235.602118][T22810] bond6: entered allmulticast mode [ 1235.802276][T22822] netlink: 'syz.0.13483': attribute type 4 has an invalid length. [ 1235.826232][T22822] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13483'. [ 1235.858189][T22822] .`: renamed from bond0 (while UP) [ 1236.107367][T22832] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1236.241629][T22848] netlink: 59 bytes leftover after parsing attributes in process `syz.1.13494'. [ 1236.269579][T22845] lo speed is unknown, defaulting to 1000 [ 1236.611447][T22869] No such timeout policy "syz0" [ 1236.630645][ T5904] net_ratelimit: 2 callbacks suppressed [ 1236.630663][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.671743][T22874] netlink: 'syz.2.13499': attribute type 32 has an invalid length. [ 1236.691395][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13499'. [ 1236.791202][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.870068][T22874] bond3: option coupled_control: invalid value (192) [ 1236.904426][T22874] bond3 (unregistering): Released all slaves [ 1236.924845][T22863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13497'. [ 1236.942963][T22845] lo speed is unknown, defaulting to 1000 [ 1236.954453][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.485851][T22920] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1237.671231][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.830157][T22941] netlink: 'syz.0.13519': attribute type 1 has an invalid length. [ 1237.964407][T22948] netlink: 'syz.1.13521': attribute type 21 has an invalid length. [ 1238.257105][T22970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1238.725764][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.748886][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1239.751435][T23030] bridge_slave_0: left allmulticast mode [ 1239.753438][T30889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.781648][T23030] bridge_slave_0: left promiscuous mode [ 1239.787461][T23030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.821006][T23030] bridge_slave_1: left allmulticast mode [ 1239.826679][T23030] bridge_slave_1: left promiscuous mode [ 1239.836111][T23030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.851953][T23030] .`: (slave bond_slave_0): Releasing backup interface [ 1239.866856][T23030] .`: (slave bond_slave_1): Releasing backup interface [ 1239.882112][T23030] team0: Port device team_slave_1 removed [ 1239.891627][T23030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.902954][T23030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.914280][T23030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.924969][T23030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.944064][T23030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1239.962867][T23045] IPVS: Unknown mcast interface: pim6reg1 [ 1239.991209][ T2294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.080774][T23057] __nla_validate_parse: 6 callbacks suppressed [ 1240.080795][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13549'. [ 1240.349679][T23073] sctp: [Deprecated]: syz.2.13553 (pid 23073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1240.349679][T23073] Use struct sctp_sack_info instead [ 1240.391623][T23076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13552'. [ 1240.640013][T23090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13556'. [ 1240.694864][T23091] xt_hashlimit: size too large, truncated to 1048576 [ 1240.790914][T30889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.809611][T23099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13558'. [ 1241.143653][T23121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1241.150135][T23122] netlink: 'syz.3.13562': attribute type 24 has an invalid length. [ 1241.154484][T23123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1241.240606][T23122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13562'. [ 1241.258660][T23122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13562'. [ 1241.362380][T23122] netlink: 'syz.3.13562': attribute type 4 has an invalid length. [ 1241.395597][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13564'. [ 1241.414308][T23132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13566'. [ 1241.441678][T23129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13564'. [ 1241.463177][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13564'. [ 1241.642018][T23160] syz_tun: entered allmulticast mode [ 1241.652996][T23157] syz_tun: left allmulticast mode [ 1241.703785][T23146] lo speed is unknown, defaulting to 1000 [ 1241.825523][T23164] syzkaller1: entered promiscuous mode [ 1241.832690][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.833329][T23164] syzkaller1: entered allmulticast mode [ 1241.841836][T23166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1242.115599][T23146] lo speed is unknown, defaulting to 1000 [ 1242.299385][T23175] bridge_slave_0: entered promiscuous mode [ 1242.318707][T23175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1242.383931][T23179] netlink: 'syz.1.13579': attribute type 1 has an invalid length. [ 1242.523027][T23179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1242.550527][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1242.619020][T23182] bond4: (slave geneve2): making interface the new active one [ 1242.666480][T23182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.701452][T23182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.745300][T23182] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1242.775148][T23188] 8021q: VLANs not supported on ip_vti0 [ 1242.813030][ T8228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.837326][ T2294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.872436][T30889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.031023][ T2294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.516195][ T8228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.678802][T23237] xt_hashlimit: size too large, truncated to 1048576 [ 1243.834567][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 1243.842633][ C1] lec:lec_tx_timeout: lec0 [ 1244.237362][T23272] syzkaller1: entered promiscuous mode [ 1244.255221][T23272] syzkaller1: entered allmulticast mode [ 1244.507102][T23279] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1244.609970][T23285] netlink: 'syz.2.13605': attribute type 21 has an invalid length. [ 1244.618002][T23285] IPv6: NLM_F_CREATE should be specified when creating new route [ 1244.627322][T23285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1244.634599][T23285] IPv6: NLM_F_CREATE should be set when creating new route [ 1244.642336][T23285] IPv6: NLM_F_CREATE should be set when creating new route [ 1244.649587][T23285] IPv6: NLM_F_CREATE should be set when creating new route [ 1244.970108][T23300] Unsupported ieee802154 address type: 0 [ 1244.982765][T23301] netlink: 'syz.2.13611': attribute type 10 has an invalid length. [ 1245.035012][T23301] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1245.087887][T23301] batman_adv: batadv0: Adding interface: netdevsim0 [ 1245.145182][T23301] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.219527][T23316] __nla_validate_parse: 8 callbacks suppressed [ 1245.219548][T23316] netlink: 288 bytes leftover after parsing attributes in process `syz.4.13614'. [ 1245.225646][T23301] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1245.243172][T23316] netlink: 'syz.4.13614': attribute type 10 has an invalid length. [ 1245.307532][T23316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.338674][T23316] bridge_slave_1: left allmulticast mode [ 1245.351432][T23316] bridge_slave_1: left promiscuous mode [ 1245.361015][T23316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.406846][T23317] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 1245.422983][T23316] bridge_slave_1: entered allmulticast mode [ 1245.452365][T23316] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1245.460529][ T8227] unregister_netdevice: waiting for bond1 to become free. Usage count = 2 [ 1246.994136][ T6133] net_ratelimit: 27 callbacks suppressed [ 1246.994159][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.038105][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.073508][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.122983][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.390999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.113020][T30889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.121456][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.266530][ T8229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.151135][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.380612][ T8228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.152242][ T2293] net_ratelimit: 2 callbacks suppressed [ 1252.152263][ T2293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.231275][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.600667][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.271213][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.701865][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.312282][T30889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.821475][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.193162][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.350815][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog