last executing test programs: 3.142736364s ago: executing program 0 (id=4429): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x5411, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYBLOB="48b37eff630a37a216f6a9a0f54b33029a3d860c69bc15e0a30de8f39092266d8bc3bdf4c518b0a2af1e27b596d70df064932594c6a0206e9505a8", @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0], 0x0) 2.979250103s ago: executing program 0 (id=4432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000100"]) sendto$packet(r6, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x11, 0xc, r5, 0x1, 0xd8, 0x6, @link_local}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00000040000701feffffff00001000017c000004004280100001800c0002000002000000000000040002802cba2527ea04487e617112da93ae7bcc1ced78e44ef0f85d1b9d1cf34c09825faf0aacb8aab36d5c89930040ffe59223b70254e68833395686ed120bb8b7196669625c4d3a2bae5c29ca119a70eacbe936de3fe070b77cf85fb61e45b1f177b87559ec7dc2e861c6d66f74f21bb7d048f2b08af4128042976ad9d91c0ce6260dfe5e00d664ec02dbcf"], 0x2c}}, 0xc000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.590979136s ago: executing program 0 (id=4441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 2.235407754s ago: executing program 0 (id=4444): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @short}, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) 2.126401148s ago: executing program 0 (id=4447): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000001c0)=0x8) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) r3 = accept$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000b80)) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xff, [0xfffd, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x8, 0x3dc], [0x0, 0x824, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r9, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000000000000000008000"], 0x18}}], 0x1, 0x40000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a800000091a5ddd514dc8c54a7038f889d130c758810ccb806a1491d7edbcb1c070e80a29e883b7e2ee4d0659dce63759fe7b68ff015d893c7d84f9829d96cf41f152cb2acbd0000e52f2db378e5360b60b429a1083235ea0c529598b3fe42a6e06238885380410846e4ff1c6bcf339471fe76bfafef346787809ac21c8f0f6fd60580737984ad7fc66efd768b7cf0df3e6f5a430c35256f693c6703ab137fefe5d28ca7740e239db5511128b731171887e802b34470e37627d3187f45cdccdac74c472846af8e1a20c05127bd6bc692b57bc5e5a8b17bc9ab914f3b27fbc3d6b03b437efd", @ANYRES16=r8, @ANYBLOB="02002dbd7000ffdbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="0c009900020000004c0000000a000600080211000000000004000b0010006e8004000100040002000400010005000800050000002c006e800400020004000200040002000400020004000200040001000400010004000100040001000400020024006e8004000200040002000400010004000200040002000400020004000100040002000500080005000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20000881}, 0x80c0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a2452323cfcd50e8f45540adf5f667eae1c94c629c93d8fda25f9670238c3ed769485a3df", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10010, r11, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r12, 0x10c, 0x3, &(0x7f0000000040), 0x4) accept$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e) r13 = socket$unix(0x1, 0x5, 0x0) bind$unix(r13, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) r14 = getuid() ioctl$TUNSETOWNER(r11, 0x400454cc, r14) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r15, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r1, 0x200, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x16, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES32=r11, @ANYBLOB="d6fdd8017a44c96b1d50d55efc9d9c8bea48948ba36971c747ea6cc36bb24c561f79c737d23875fe230bdc58c2c79602cbed7d414b2e1d1fcbd80ae6375edeeea980dc802d534d639d89e3f1a1f5ca7514a9a79ca49f28e580ec89347a6e3999a47611f690a0789d428e28ab967ec3b2ca7138c8b7b75f7bc19f1a8a799d1f57e2f0facf989a9aa5d7a5a52d0532996ab3990069ec80f733e7c5c6621bf1c3f76a37cf950915a74d0519c7f427443b06f358d1dfcade2692e6c4e270f14ca464ad0dfad4063c210b3f5fd76696d0833e8f9ad341afabe8e4f871ea26f92a3ecb1a7f6853", @ANYRESDEC=r8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.854255984s ago: executing program 0 (id=4453): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000040)=[{r0, 0x16842e9bd142d0d5}], 0x1, 0x94) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0xdd}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131}], 0x0, &(0x7f00000004c0)=""/205}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20}, {&(0x7f0000000640)=""/194}, {&(0x7f0000000440)=""/50}, {&(0x7f0000000740)=""/206}, {&(0x7f0000000840)=""/55}, {&(0x7f0000000880)=""/111}]}, 0x2}], 0x2, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) poll(&(0x7f0000000040)=[{r0, 0x16842e9bd142d0d5}], 0x1, 0x94) (async) unshare(0x6a040000) (async) socket(0x8, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0xdd}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131}], 0x0, &(0x7f00000004c0)=""/205}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20}, {&(0x7f0000000640)=""/194}, {&(0x7f0000000440)=""/50}, {&(0x7f0000000740)=""/206}, {&(0x7f0000000840)=""/55}, {&(0x7f0000000880)=""/111}]}, 0x2}], 0x2, 0x0, 0x0) (async) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) (async) 1.632050743s ago: executing program 3 (id=4458): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@remote, @initdev, 0x0}, &(0x7f0000000240)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000280)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x3}}]}, 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_DELSETELEM={0x18, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.494054143s ago: executing program 3 (id=4460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x100, @bearer=@l2={'ib', 0x3a, 'pim6reg1\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8100) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001340)={r3, r4, "6f27d3b1a899db70bddd8864f965a9d98f99298663e7f6356532be80960f8662cf60221f10689c3b29af05e58f3684c54e98f93d74ff578196854ca1d70cbfdbe1dd902018346f61aff7fb1d6062cc5cce899f67d07f368f0119d14f4b5c51f049cc6c9811ff30b25e4d499b35e2fbd90734d21c96971bf9a524e83691906249563830db54d749feef03391d8bc75cb9fd0ffe4b95e4da1916fe17602f8b6a5fd67842646255b7148009f4ed8699311ae44ed8b42e890ea3a66d625366f74ee60d8e75a16d24fbe590e60adbdfd33f7d16d4464df2fb97524f831cfb0620d33657f18d2eead3cb12b1f190316441810e7978b116db33837b9638b7c48f3463cc", "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"}) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000002340), &(0x7f00000023c0)=0x80) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f00000026c0)={&(0x7f0000002400)=@nfc_llcp, 0x80, &(0x7f0000002580)=[{&(0x7f0000002480)=""/209, 0xd1}], 0x1, &(0x7f00000025c0)=""/211, 0xd3}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000002700)=0x2, 0x4) r8 = accept4(0xffffffffffffffff, &(0x7f0000002740)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f00000027c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002800)={0x0, 0xae, "3c404319a473cb1831bbababf1c3df25fecfc0a478781a22fe2f0dd147b8903a5fdb3b5a177befda3e6bdaae14fdf1dfe49288bf98fe8e5e041df9a30e68c1a2b3b2986d931368fb56282450d88b30fb6aabd7da20e36090426f7328169cbf35b32b5ab1974d47d035e3b9350337499042a7c224012ce5be1a4d8abd900d7de81769d489deadb9b4b38d4dab03d024cbcac72672fbf2bb063ef7662deb49283c454007d57c2a5baa4cb8f3335c58"}, &(0x7f00000028c0)=0xb6) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000002900)={r9, 0x1263}, &(0x7f0000002940)=0x8) sendmsg$inet(r8, &(0x7f0000002b80)={&(0x7f0000002980)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002b00)=[{&(0x7f00000029c0)="9d06fd9e093dbf2e2bcfb65237b1b3d512b555bd", 0x14}, {&(0x7f0000002a00)="06bb84c7f6abd1e11cabc81ab44b351e4adc2163d486746a87b5ddfb2b6ef086efa746e4e8e6a65c8910d76cddc698ad1a7791327433f4bf458fb54e16ca94807655391ce84a0d4edd50939c51d216b5fa616f4d4b60fd59a7b5d4c7d101561baba53d009f5508adeb90749ba59862a1393afd5a896570f23ffa8d55fff37ef02530e6a9d784dd9101ffa754a2c7fa71a2d19e890dbf501e8fe95ae539dcb67f3b16ad8dc203c47ffbb4c2f7257f379e7860a2db8369814954507423de96d48d9f2e0e93aff939bc6a383650b098e688eabc4fb04672a221cc4a3dba4b6755ecb02a167ca72ec3c95d", 0xe9}], 0x2, &(0x7f0000002b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x4000050) poll(&(0x7f0000002bc0)=[{r5, 0x1}], 0x1, 0x10000) syz_emit_ethernet(0x26, &(0x7f0000002c00)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@can={0xc, {{0x2}, 0x2, 0x2, 0x0, 0x0, "32d3510a4d9148f0"}}}}, &(0x7f0000002c40)={0x0, 0x4, [0xb93, 0x2a3, 0x1f8, 0x73c]}) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, &(0x7f0000002c80), 0x4) socket$inet6(0xa, 0x3, 0x4) syz_emit_ethernet(0x50, &(0x7f0000002cc0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@generic={0x809b, "20c086f9d7b449e4f14b699f0a82a3776ebb24f98f462c9de64e04678ab0d53a0e15d841e7d0c224b6fd8d52180a6b1efac73bc9fd12718caf07859cbaf8001d7915"}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000002d40)={r10, 0x7, 0x65, "de1e5fe36f7dfff1a2224fb34a271c0d6f6c13c0a1a8cbab5d84183e6d1dd3f2054e61a237f84aefb4a11aa8a87a10082b90f6cc9316bc37b0aa1b58c77111aeff6ce494de179ff32f6ea9ce693289d005a2680337135fe94660c10861f768f55a3201c6bc"}, 0x6d) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000002dc0)=0x5, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000002e00), r8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000002e80)={'sit0\x00', &(0x7f0000002e40)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0x3, 0x98, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x64, 0x0, 0x40, 0x4, 0x0, @multicast2, @broadcast, {[@end]}}}}}) sendmsg$xdp(r8, &(0x7f00000045c0)={&(0x7f0000002ec0)={0x2c, 0x2, r11, 0x3}, 0x10, &(0x7f0000004500)=[{&(0x7f0000002f00)="5caabc3036a239d5192998c9379a7b50683ef9653b7fdbed68bda8f98859a6ec19ab231270dfb70cab4198090f6ed0037b2d142b0ddd0abf49d8369f02e5d905c32708c7990c2048963c24dc688f6a10c87d14505d61ef01be4c07e912fd9f02a63a746aab38e00ff5c4815d70f7bc25f89ab5f6913cb15ef6eb86aa2f12e844097be0b3ef52f73ec0807c24bae82d9c92b5974a1e2729039cde3b4ae3de3327aa29363e945afeecf16e0bf61915f0525483f05e4cfd6ba672dfd8e15ce267d0987947", 0xc3}, {&(0x7f0000003000)="4d85047df32234ef2a440732fb2fff6394df3341a9c889b87e77130a5162c8ea3151d3f9be09240053fc5936bb3226c846b6e60210d93cdf94b4ace29528f2c155b82be3f9d77cf0809298052358ab4bfda8276b6c27da06e5719cd07b0d8e9d50ba9789e73fd3e7903a35159c89f08f3e9a7b29408aac31bd844ea249219b79f1ca61f2a4e1fd86fe1773e0fafbcce76ec27f8f8714910aa912b9438e1c7cee58bc94d5083f9abc18f8c9174c236a171c75ed0d64748cdea08b8e2b2486fb34a4b5950a4b6ff190d3f0a501e3d60e2254befa5eb2799c0033c616a808f214d2b3a1b97ca2a6a1f68039b3", 0xeb}, {&(0x7f0000003100)="01576a97ad13309e738b291700daf33a60acfcdf8de2fc0711d390cb8e08ec94292a5be866ae4b386d2a345d83deb8418489214d042ebfd18599f95fd7f27ed401f213672fbe93ffcc562566953313df59cb72e0e3747945dcf55c3e78ac99b2ab35a41225543f34b8dc06662328f904491310832ef665de79b333a0bf970eb569a562349f5fc617d0ab8ac96815235a63887a796f8c680dadd42e9894dada1276352bbefa", 0xa5}, {&(0x7f00000031c0)}, {&(0x7f0000003200)="5ac13011319e06bd88ec1758beae0c5b1151b2a8c99b58dbc1793dce919941a931a3ed29bd022223c8b6861673e35de21cb8a356316305f3ee8dccaa4d55cb959718adc87ce32f6aeafb", 0x4a}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="c3765b959fc7baf98d8bd32fb260d8760a0d6ada3d28bc0bb46ed9932bf9dbdfcd590906067812c46ffe5cd17d09cc616a97461206e5bf9f974237b8096f05efc07ac0bf8384099489be198bd85ba37f2f05f6d0453deda7c86a10e30ff314a157bd53c40f282e3f7579015bfb22fd97fd743ccd1bba4e8a0d88a355dc63d7b58ec4107b5590ade87a787c3566da9a75b96ec45dbd1946bdf0401cdef41fca00cdfa68437223f308c9a6c132e108603fa362f6d974f2bc940caae4912e02de6bd89f1aa37b694bc55ac2f916b15703a2aa1de0e64336", 0xd6}, {&(0x7f0000004380)="164ce6e587055d9e19c74027fe56df2b3d655f1a1a56970a11fe3a8630d01cbc", 0x20}, {&(0x7f00000043c0)="51ba0289fbf457d385504295fe5e358618e24972e90643d9eebeb4a3f630cc793f8f9db7ed5534b42a336e69c430a9cf3575d8dc90645dc3cc6c82984c0803b4441b0aecea9faedb69344682e3a488a644c2342540a51f1c164527ee1d5f41e21633be0b0e4979b43a7fa5e81ba522daa893f326e10726f79dbe8c77d38d16278bb3a5efbb21634f5cbfd4392bdfe0359cdec61f5bb2d556d8ee003c129810459f6057f89804501aad124e580f4084c95f2913b87b311ae3e2ce62d8a4c3f75157b8273ec2d3d4bcd2f9e66ce41339f4123051a7680b24fbc0be1ec4d0cac255bec51e8ebda8e0f0dcc14580f7a12f0300df0ced14", 0xf5}, {&(0x7f00000044c0)="271f294b142f73c7a21a60bb8bbfae85c73b3c0fa939d7f052c6a5df7d8fc5ce", 0x20}], 0xa, 0x0, 0x0, 0x40000}, 0x804) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004640), r8) sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f00000047c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004780)={&(0x7f0000004680)={0xf8, r12, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xca07}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xef40}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000) 1.401432996s ago: executing program 1 (id=4463): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x7, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6}, 0x94) 1.310183643s ago: executing program 1 (id=4465): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x6, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x2}, @typedef={0xb, 0x0, 0x0, 0x8, 0x2}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @datasec={0x6, 0x5, 0x0, 0xf, 0x3, [{0x2, 0xc, 0x9}, {0x2, 0x30, 0x4}, {0x3, 0x80000000, 0x7}, {0x5, 0x3, 0x101}, {0x3, 0x2, 0x80000000}], "d62e10"}, @datasec={0x9, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x5}, {0x2, 0x8, 0x100}, {0x1, 0x5, 0x80000001}], "c8c7"}]}, {0x0, [0x30, 0xe1fcd9738e2a8d13, 0x2e, 0x0]}}, &(0x7f0000000400)=""/247, 0xe2, 0xf7, 0x1, 0x7fffffff}, 0x28) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000580)={r0, &(0x7f0000000200)='GPL\x00', 0x282080, &(0x7f0000000240)={@align=0x400, {0x1, 0x101, 0x7, 0x8}}, 0xb, &(0x7f0000000280), &(0x7f0000000500)=0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8000, 0x0, 0x1, 0x10800, 0xffffffffffffffff, 0x7f, '\x00', r3, r4, 0x1, 0x0, 0x2, 0xc, @void, @value, @value=r5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1.095434954s ago: executing program 1 (id=4467): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b0016000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x10, 0x1ff, 0x2, {{0x47, 0x4, 0x1, 0x1e, 0x11c, 0x67, 0x0, 0xe0, 0x6, 0x0, @private=0xc, @local, {[@generic={0x94, 0x7, "98c37c601f"}, @timestamp_addr={0x44, 0x44, 0x4, 0x1, 0x9, [{@multicast2, 0xa}, {@multicast2, 0x7ff}, {@remote, 0x6}, {@loopback, 0xd244}, {@broadcast, 0x5}, {@multicast2, 0x2}, {@remote, 0x251b}, {@loopback, 0x8e}]}, @end, @ssrr={0x89, 0x17, 0x30, [@loopback, @rand_addr=0x64010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @ra={0x94, 0x4}, @cipso={0x86, 0x78, 0x0, [{0x7, 0x4, 'S,'}, {0x1, 0x3, "9c"}, {0x7, 0x12, "a8dcf722bab44775eb2d807592f56cb0"}, {0x7, 0xf, "424d5d7ec125d0193cbc7f5edf"}, {0x2, 0x9, "c75191c09c4c08"}, {0x0, 0xe, "5320be0fed058dfd9dc84aa9"}, {0x5, 0xf, "815d6eb4693521ede08ec3d6a5"}, {0x1, 0x7, "4016186c8c"}, {0x2, 0xe, "b0118e38c743f7f39f37b8e7"}, {0x1, 0xf, "9e93bf23141d104917b6929417"}]}, @timestamp={0x44, 0x28, 0x5, 0x0, 0xf, [0x6, 0xc9a1, 0x100, 0x6, 0x400, 0x7, 0x9, 0x4, 0x7fffffff]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xfb, 0x4, 0x1a, @loopback, @dev={0xfe, 0x80, '\x00', 0x36}, 0x80, 0x1, 0xcf51, 0x8b}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="10002cbd7000ffdbdf250c0000000c000180080003000200000064000180141404a162a81eb9c108000358176ef91a881769c6db31498026853e87b501520f493b9403bdd443bf571d216f2dfaa119c4c7", @ANYRES32=r10, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="0800030001000000080003000100000014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000780003800800020000000000040001005f0004001a7a443a5b06777508fdac022c0c5b3a918917ac3521800f705da1eff1eaddeb628450d2149dfcaa8069900cf69e03c32d8c21b1f63b7b9ada4a567692b3d39018d1e44ff2424d65e736ea08b48987f2b7ad325b19bd4f74f1e89a0008000200060000000c0001800800030003000000"], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x20000008) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x8000}, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x7ea, 0x7, 0x5, 0x8, 0x100010001, 0x1, 0x60000000000000}}], 0x58}, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f00000005c0)={'veth0_to_hsr\x00', 0x2}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r7) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r13, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c00)=ANY=[@ANYBLOB="24030000", @ANYRES16=r14, @ANYBLOB="00022905000000000000000000000000000000393fbd839db57469a2ee1cb1f096d9748411ab915d80d33ef815135cf4a341e4ec44ee52715f265b7bcc5fae277dd0d2e43eb7b05152324e9510efbb3f6a18c0019cef717d3e975395526c4cccee3604a30aa8a817362b9c6a8e1157f772", @ANYRES32=0x0, @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0x1}, 0x4080) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.011648995s ago: executing program 1 (id=4469): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES64=r3], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x1c, 0x49, 0x400, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x58, r7, 0xe01, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7}, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4000}, @from_mac, @device_a, @device_b, {0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000044}, 0x40000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r9, 0xf6695000) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd6c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0192436a2acd"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf1b}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000085}, 0x4004040) 927.813168ms ago: executing program 4 (id=4472): shutdown(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200043582c137153e3704020180fc5409000c00", 0x2f}], 0x1}, 0x40010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x8847}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @random="f7572f10c732", @private=0xa010100}}, 0x20) shutdown(0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200043582c137153e3704020180fc5409000c00", 0x2f}], 0x1}, 0x40010) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) (async) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x8847}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @random="f7572f10c732", @private=0xa010100}}, 0x20) (async) 861.336004ms ago: executing program 1 (id=4473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000280)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xb}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x114, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x49}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x15c}}, 0x20050800) 763.707435ms ago: executing program 2 (id=4474): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="250300000000000000000800"], 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES64=r1], 0x44}}, 0x0) 762.851094ms ago: executing program 4 (id=4475): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "d61418f3"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 707.279092ms ago: executing program 2 (id=4476): r0 = socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000140)=0x30) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000140)=0x30) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)="10007f00b1c465d0d8c535f55c0102cf57fa9e7f4b0ff8901589a7d61769212bd89cc0a6eedc829de7cd71ce28debfb735e139f312e2f485e3998038f69ed898c46a62e9239de544f2", 0x49}, {&(0x7f0000000040)="681fcde24eb8c0fc551360", 0xb}, {&(0x7f0000001240)="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", 0x1018}, {&(0x7f0000001140)="1364bbef64d24f6096f67468d49f36d7818a7a39388134d587c5d95986392c7e0c23ce639e80da3448ab171b1b341b35c2564ac45370cf24b738466c9adaadc56827175089251432a7c06148a54601c00e889216feec7a20684f54779d29b1d7396ce46238f8e7db393d20ce280ed7ca8df9e2907e03fbc56c0ac3a763d52470d2dc3919cb6ef4ab4c0312b535bfcca3d95efdf63e71d3c0fcb4580d4a9a8bbba3007d0384b1cf3e8f73", 0xaa}], 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 658.949272ms ago: executing program 1 (id=4477): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 603.851156ms ago: executing program 4 (id=4478): r0 = socket(0x22, 0x80000, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x2c}}, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000003c0)) 596.336345ms ago: executing program 2 (id=4479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYBLOB="37f6b79f9f73c83daa2c72745918f93b99103d12558f0c76c411ea3c48b16e636af13f78c3171d193d21d737318a398f9ec1197f6f1d5306f86e629c70a5e9121a77", @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 591.844201ms ago: executing program 3 (id=4480): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(r3, &(0x7f0000000900)=[{&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000200)}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/74, 0x4a}, {&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/153, 0x99}, {&(0x7f0000001100)=""/4096, 0x1000}], 0xa, 0x6, 0xa) close(r2) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockname(r2, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x80) 507.170591ms ago: executing program 4 (id=4481): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000240)={0xf}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000104030000000007050001000100000008000440000000030000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}], 0x1}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000240)={0xf}, 0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000104030000000007050001000100000008000440000000030000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) (async) 427.510363ms ago: executing program 2 (id=4482): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fffff7ff0061027f2e99c5397f000600030000000000000008000100000000000c000200ff7f000000000000"], 0x34}}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) 404.806066ms ago: executing program 3 (id=4483): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x70}, 0x1, 0x7}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r3) 223.378428ms ago: executing program 4 (id=4484): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="872308", 0x3}], 0x1, 0x0, 0x0, 0x8800}, 0x800) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r2, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@can_newroute={0x0, 0x18, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x0, 0x4, {{{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "1904e1d02a278c9f"}, 0x6}}, @CGW_LIM_HOPS={0x0, 0xd, 0x1}, @CGW_LIM_HOPS={0x0, 0xd, 0x1}, @CGW_MOD_UID]}, 0x40}, 0x1, 0x0, 0x0, 0x4011}, 0x24000080) 222.152497ms ago: executing program 2 (id=4485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) 221.277112ms ago: executing program 3 (id=4486): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="110725bd7000fbdbde2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) (async) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x3c}}, 0x4000044) (async) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000300)=0x1000, 0x4) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, 0x7ff, 0x0, 0x7fffffff, 0x5, 0xfd}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={r10, @in={{0x2, 0x4e20, @empty}}, 0x4, 0xafa, 0x8, 0x7fb787df, 0x4d, 0xc47}, 0x9c) (async) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) (async) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 115.322342ms ago: executing program 2 (id=4487): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x4, 'syz0\x00', @bcast, 0x1, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 102.893067ms ago: executing program 4 (id=4488): r0 = socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001500)=""/4110, &(0x7f0000000000)=0x100e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r4, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r5, &(0x7f0000000480)={@void, @val, @ipv6=@dccp_packet={0x0, 0x6, "492216", 0xfcf, 0x21, 0x0, @dev, @private2, {[@fragment, @routing={0x0, 0xc, 0x0, 0x0, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @empty]}, @hopopts={0x0, 0x1e0, '\x00', [@generic={0x0, 0xeff, "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"}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "85b36f", 0x0, "63f226"}, "6927155de4155953418064938630a61736c5e9f80d756280b0d28fd858ebabd2c7d30f6e3cc7f93d294c6275d3420ce5ba199ec804b4ec9ab7cb4384532cc3"}}}}, 0x1001) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ec5400000000000001000000180000003cfce13ca2b3c306fb8a", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018480000b4ffffff00000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x4, 0xe5, &(0x7f0000000680)=""/229, 0x41000, 0x2, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x7, 0x0, 0x7}, 0x10, r3, 0x0, 0x9, &(0x7f0000000a80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r5], &(0x7f0000000ac0)=[{0x5, 0x4, 0xb, 0x5}, {0x0, 0x2, 0x1, 0x2}, {0x5, 0x2, 0xd, 0x4}, {0x0, 0x4, 0x2, 0xc}, {0x3, 0x4, 0xf, 0x2}, {0x5, 0x2, 0x4, 0x3}, {0x1, 0x4, 0xd, 0x3}, {0x1, 0x2, 0xe, 0x1}, {0x4, 0x2, 0xa, 0x6}], 0x10, 0x2}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000003740)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0xffffff34, @local}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000c80)="e0", 0x1}], 0x1}}], 0x2, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25041100800c0002"], 0x114}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r9, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf2502180000ff1b11f01e68bd7e5b00000800000002"], 0x24}}, 0x0) 0s ago: executing program 3 (id=4489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) r2 = socket(0x2a, 0x57c53394d6d575be, 0x0) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6}, 0x10) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44005) close(r0) kernel console output (not intermixed with test programs): g [ 477.382546][T16934] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 477.421769][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 477.431267][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 477.445712][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.458600][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 477.472225][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.785731][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.794331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.803772][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.168948][T16935] vxcan1 speed is unknown, defaulting to 1000 [ 478.335062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.391543][T16956] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 478.416082][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.527843][T16961] sctp: [Deprecated]: syz.3.2903 (pid 16961) Use of int in maxseg socket option. [ 478.527843][T16961] Use struct sctp_assoc_value instead [ 478.820599][T16973] __nla_validate_parse: 6 callbacks suppressed [ 478.820620][T16973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2905'. [ 479.535468][ T5829] Bluetooth: hci5: command tx timeout [ 479.577039][T16935] chnl_net:caif_netlink_parms(): no params data found [ 479.734260][T16995] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2911'. [ 479.969572][T17008] netlink: 'syz.0.2913': attribute type 3 has an invalid length. [ 480.069778][T16935] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.108944][T16935] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.137427][T16935] bridge_slave_0: entered allmulticast mode [ 480.175258][T16935] bridge_slave_0: entered promiscuous mode [ 480.209582][T16935] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.237624][T16935] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.283502][T16935] bridge_slave_1: entered allmulticast mode [ 480.329890][T16935] bridge_slave_1: entered promiscuous mode [ 480.492190][T16935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.560211][T16935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.827644][T16935] team0: Port device team_slave_0 added [ 480.880221][T16935] team0: Port device team_slave_1 added [ 481.001387][T16935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.015300][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.057621][T16935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.071429][T16935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.104455][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.137802][T16935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.220005][T16935] hsr_slave_0: entered promiscuous mode [ 481.230833][T16935] hsr_slave_1: entered promiscuous mode [ 481.239861][T16935] debugfs: 'hsr0' already exists in 'hsr' [ 481.246064][T16935] Cannot create hsr debugfs directory [ 481.454989][ C1] net_ratelimit: 8 callbacks suppressed [ 481.455009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.616188][ T5829] Bluetooth: hci5: command tx timeout [ 481.724296][T17058] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2924'. [ 481.762827][T17058] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2924'. [ 481.838855][T17058] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2924'. [ 481.866202][T17058] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2924'. [ 481.908824][T17058] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2924'. [ 481.959082][T17066] can: request_module (can-proto-0) failed. [ 481.965372][T17058] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2924'. [ 481.989636][T17067] can: request_module (can-proto-0) failed. [ 482.047691][T17058] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2924'. [ 482.099383][T17058] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2924'. [ 482.256530][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.322325][T17077] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 482.352630][T16935] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.387561][T17077] netlink: 'syz.2.2930': attribute type 7 has an invalid length. [ 482.395595][T17077] netlink: 'syz.2.2930': attribute type 8 has an invalid length. [ 482.420574][T17084] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 482.428677][T16935] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57675 - 0 [ 482.495354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.638532][T16935] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.696202][T16935] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57675 - 0 [ 482.779532][T17094] tipc: Enabled bearer , priority 0 [ 482.899777][T17084] syzkaller0: entered promiscuous mode [ 482.906370][T17084] syzkaller0: entered allmulticast mode [ 482.913390][T17084] tipc: Resetting bearer [ 482.970562][ T49] tipc: Resetting bearer [ 483.008592][T17091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.027635][ T8126] syzkaller1: tun_net_xmit 90 [ 483.095864][T16935] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.123789][T16935] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57675 - 0 [ 483.179101][T17107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.188512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.207679][T17083] tipc: Resetting bearer [ 483.537148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.546861][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.697920][ T5829] Bluetooth: hci5: command tx timeout [ 484.575930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.379233][ T7417] lec:lec_start_xmit: lec0:No lecd attached [ 485.781234][ T5829] Bluetooth: hci5: command tx timeout [ 486.219392][T17083] tipc: Disabling bearer [ 486.249722][T16935] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.260749][T16935] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57675 - 0 [ 486.305459][ T8126] tipc: Node number set to 3826829372 [ 486.569851][T17132] syzkaller0: entered promiscuous mode [ 486.586981][T17132] syzkaller0: entered allmulticast mode [ 486.655213][ C1] net_ratelimit: 5 callbacks suppressed [ 486.655232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.906060][T16935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.963381][T16935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 487.018309][T16935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 487.057689][T16935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 487.250433][T17164] __nla_validate_parse: 27 callbacks suppressed [ 487.250451][T17164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 487.378596][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.597560][T17180] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 487.695034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.947494][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 487.963956][T16935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.025543][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 488.050742][T16935] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.231105][T17203] 8021q: adding VLAN 0 to HW filter on device bond7 [ 488.254519][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.261739][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.375316][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.382559][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.745022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.048469][T16935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.106788][T16935] veth0_vlan: entered promiscuous mode [ 489.120645][T16935] veth1_vlan: entered promiscuous mode [ 489.306977][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.341812][T16935] veth0_macvtap: entered promiscuous mode [ 489.395659][T16935] veth1_macvtap: entered promiscuous mode [ 489.502203][T16935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.551772][T17235] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 489.589078][T16935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.650999][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.686832][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.747831][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.775071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.818009][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.283148][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.382171][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.536585][T17260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2972'. [ 490.559375][ T7363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.603426][ T7363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.623988][T17262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2973'. [ 490.815018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.823462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 490.831501][ C1] lec:lec_tx_timeout: lec0 [ 491.092050][T17280] x_tables: duplicate underflow at hook 2 [ 491.138173][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.146774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.569379][T17292] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2980'. [ 491.855070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.968589][T17300] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2983'. [ 492.033225][T17301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2983'. [ 492.116739][T17300] sctp: [Deprecated]: syz.4.2983 (pid 17300) Use of int in max_burst socket option deprecated. [ 492.116739][T17300] Use struct sctp_assoc_value instead [ 492.238518][T17304] sctp: [Deprecated]: syz.4.2983 (pid 17304) Use of int in max_burst socket option deprecated. [ 492.238518][T17304] Use struct sctp_assoc_value instead [ 492.277298][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.287704][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.297195][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.309632][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.317629][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.476935][T17315] set match dimension is over the limit! [ 492.552026][T17307] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2985'. [ 492.607209][T17307] netlink: 'syz.1.2985': attribute type 4 has an invalid length. [ 492.659838][T17307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2985'. [ 492.710292][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'. [ 492.749709][T17307] `: renamed from bond0 (while UP) [ 492.762093][T17321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2988'. [ 492.783090][T17321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2988'. [ 492.827339][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'. [ 492.860197][T17320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2988'. [ 492.881386][T17320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2988'. [ 492.894973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.914144][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'. [ 493.135474][ T7358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.238740][T17325] netlink: 'syz.4.2989': attribute type 29 has an invalid length. [ 493.351286][T17329] syzkaller0: entered promiscuous mode [ 493.364773][T17329] syzkaller0: entered allmulticast mode [ 493.935042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.183295][T17360] netlink: 'syz.1.3000': attribute type 2 has an invalid length. [ 494.223503][T17360] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3000'. [ 494.418405][ T5839] Bluetooth: hci1: command tx timeout [ 494.975633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.056215][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.202875][T17302] vxcan1 speed is unknown, defaulting to 1000 [ 495.759803][T17389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.015043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.495186][ T5839] Bluetooth: hci1: command tx timeout [ 496.977231][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.985956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.065134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.092334][ T49] bond0 (unregistering): Released all slaves [ 497.124593][ T49] bond1 (unregistering): (slave veth3): Releasing active interface [ 497.148446][ T49] bond1 (unregistering): Released all slaves [ 497.173149][ T49] bond2 (unregistering): Released all slaves [ 497.192703][ T49] bond3 (unregistering): Released all slaves [ 497.235880][T17403] veth0: entered promiscuous mode [ 497.391176][ T49] tipc: Disabling bearer [ 497.400671][ T49] tipc: Left network mode [ 497.461102][T17412] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 497.502500][T17407] veth0: left promiscuous mode [ 498.049551][T17438] __nla_validate_parse: 1 callbacks suppressed [ 498.049568][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'. [ 498.072633][T17302] chnl_net:caif_netlink_parms(): no params data found [ 498.093420][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'. [ 498.142997][ T49] IPVS: stopping master sync thread 12248 ... [ 498.364569][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3018'. [ 498.578191][ T5839] Bluetooth: hci1: command tx timeout [ 498.936202][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.948666][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.960605][T17302] bridge_slave_0: entered allmulticast mode [ 499.009233][T17302] bridge_slave_0: entered promiscuous mode [ 499.030188][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.055082][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.076873][T17302] bridge_slave_1: entered allmulticast mode [ 499.091583][T17302] bridge_slave_1: entered promiscuous mode [ 499.472804][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3027'. [ 499.507870][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.581027][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.657494][T17481] C: renamed from lo (while UP) [ 499.680704][T17481] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 499.761375][T17489] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3030'. [ 500.282105][T17507] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3032'. [ 500.629340][T17487] syzkaller0: entered promiscuous mode [ 500.649908][T17487] syzkaller0: entered allmulticast mode [ 500.657735][ T5839] Bluetooth: hci1: command tx timeout [ 501.197373][T17302] team0: Port device team_slave_0 added [ 501.437473][T17531] xt_hashlimit: invalid interval [ 501.471712][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 504.860562][T17302] team0: Port device team_slave_1 added [ 504.909040][T17525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.224037][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.270101][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.465000][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.641774][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.716448][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.810642][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.871497][T17566] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3042'. [ 506.113106][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 506.824764][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.832960][ C1] lec:lec_tx_timeout: lec0 [ 507.027556][T17611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'. [ 507.290632][T17302] hsr_slave_0: entered promiscuous mode [ 507.336948][T17621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3050'. [ 507.356230][T17302] hsr_slave_1: entered promiscuous mode [ 507.384106][T17302] debugfs: 'hsr0' already exists in 'hsr' [ 507.412231][T17302] Cannot create hsr debugfs directory [ 507.657689][T17626] bridge1: entered promiscuous mode [ 507.687960][T17626] bridge1: entered allmulticast mode [ 508.044498][T17638] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3054'. [ 508.287892][T17638] erspan0: entered promiscuous mode [ 508.315642][T17644] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3055'. [ 508.628151][T17661] netlink: 'syz.4.3059': attribute type 13 has an invalid length. [ 508.870861][T17661] gretap0: refused to change device tx_queue_len [ 508.898463][T17661] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 508.956462][T17663] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 509.115835][T17666] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3060'. [ 509.480049][ T49] hsr_slave_0: left promiscuous mode [ 509.519866][ T49] hsr_slave_1: left promiscuous mode [ 509.758911][T17681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3062'. [ 510.729493][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 511.596435][T17715] tc_dump_action: action bad kind [ 512.240611][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3072'. [ 512.293476][T17732] netlink: 'syz.0.3072': attribute type 20 has an invalid length. [ 512.304806][T17732] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.312800][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'. [ 512.399057][T17731] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3072'. [ 512.552802][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 512.670171][T17739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3074'. [ 512.702510][ T49] IPVS: stop unused estimator thread 0... [ 512.805836][ T29] audit: type=1107 audit(1771776138.289:8): pid=17742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='.%_Ö¥&zÈJÈ+ªXô/·ãåÍÛî|m[îŽ\ªÑ [8ƒÛ!—ÄYqú~ zÅÆ’øÐÀUÈè~l]§]½jØ+^î•p' [ 512.938384][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 512.974484][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3075'. [ 513.014993][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3075'. [ 513.359903][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3077'. [ 513.423512][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3077'. [ 514.397819][T17302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 514.530565][T17302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 514.625956][T17302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 514.813057][T17302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.687326][T17302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.841521][T17302] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.902891][T17851] C: renamed from lo (while UP) [ 515.974345][T17851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.054282][T17854] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 516.072024][T17851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.171592][T17851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.246396][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.253562][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.308562][T17851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.357217][T17851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.412380][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.419613][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.469759][T17865] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 516.480386][T17867] sock: sock_timestamping_bind_phc: sock not bind to device [ 516.488048][T17851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.563337][T17851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 517.272716][T17889] erspan0: entered promiscuous mode [ 517.371228][T17889] erspan0: left promiscuous mode [ 517.714578][T17906] __nla_validate_parse: 5 callbacks suppressed [ 517.714598][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3106'. [ 517.919068][T17302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.030460][T17917] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3109'. [ 518.252041][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 518.287618][T17925] gretap0: entered promiscuous mode [ 518.327004][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 518.377400][T17302] veth0_vlan: entered promiscuous mode [ 518.400146][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 518.436454][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 518.476896][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 518.527630][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 518.571029][T17302] veth1_vlan: entered promiscuous mode [ 518.611036][T17302] veth0_macvtap: entered promiscuous mode [ 518.622624][T17302] veth1_macvtap: entered promiscuous mode [ 518.647851][T17302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.677861][T17302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.800109][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 518.868063][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 518.944438][ T7363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.972845][ T7363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.048568][ T7363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.081894][ T7363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.954253][T17959] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 520.292220][T17981] netlink: 'syz.4.3119': attribute type 4 has an invalid length. [ 520.367675][T17980] syz_tun: entered allmulticast mode [ 520.624014][T17976] syzkaller0: entered promiscuous mode [ 520.653943][T17976] syzkaller0: entered allmulticast mode [ 520.779141][T17974] syz_tun: left allmulticast mode [ 525.662439][T18001] __nla_validate_parse: 4 callbacks suppressed [ 525.662452][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 525.767886][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3126'. [ 525.845519][T18037] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3127'. [ 525.900259][T18040] netlink: 'syz.1.3128': attribute type 1 has an invalid length. [ 525.930412][T18015] erspan0: entered allmulticast mode [ 526.049429][T18040] syzkaller0: entered allmulticast mode [ 526.131449][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'. [ 526.240842][T18047] syzkaller0 (unregistering): left allmulticast mode [ 526.404412][ T7363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.471413][ T7363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.632138][ T7358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.673321][ T7358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.954967][T18014] vxcan1 speed is unknown, defaulting to 1000 [ 527.169195][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 527.262279][T18077] netlink: 'syz.3.3136': attribute type 16 has an invalid length. [ 527.322861][T18076] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 527.382798][T18077] netlink: 'syz.3.3136': attribute type 17 has an invalid length. [ 527.413432][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 527.465767][T18071] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.498798][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 527.556714][T18071] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.586136][T18076] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 527.617696][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 527.887675][T18077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.910447][T18087] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 528.030066][T18089] erspan1: entered allmulticast mode [ 528.122369][T18087] bond0: entered promiscuous mode [ 528.161140][T18087] bond0: entered allmulticast mode [ 528.181816][T18087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.706966][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.716883][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.728124][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.737295][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.745226][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.463752][T18120] netlink: 'syz.1.3149': attribute type 1 has an invalid length. [ 529.527507][T18127] netlink: 'syz.2.3148': attribute type 4 has an invalid length. [ 529.795994][T18129] Cannot find add_set index 0 as target [ 530.038252][T18100] vxcan1 speed is unknown, defaulting to 1000 [ 530.274888][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 530.356402][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 530.462129][T18144] netlink: 'syz.2.3153': attribute type 2 has an invalid length. [ 530.499660][T18144] netlink: 'syz.2.3153': attribute type 5 has an invalid length. [ 530.906742][ T5829] Bluetooth: hci4: command tx timeout [ 531.793265][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 531.835063][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 531.884011][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3161'. [ 531.895046][T18100] chnl_net:caif_netlink_parms(): no params data found [ 532.191512][T18174] netlink: 'syz.1.3163': attribute type 1 has an invalid length. [ 532.233921][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'. [ 532.584622][T18186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3166'. [ 532.744250][T14229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.808389][T14229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.844409][T18199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3170'. [ 532.898339][T14229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 532.977572][ T5829] Bluetooth: hci4: command tx timeout [ 533.033816][T18208] netlink: 'syz.2.3170': attribute type 9 has an invalid length. [ 533.449288][T14229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.492435][T14229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.518022][T14229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 533.573411][T18221] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 533.582392][T18221] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 533.763289][T14229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.783206][T14229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.797180][T14229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 533.842946][T18100] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.873950][T18100] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.884619][T18100] bridge_slave_0: entered allmulticast mode [ 533.897533][T18100] bridge_slave_0: entered promiscuous mode [ 533.913850][T18230] tipc: Enabling of bearer rejected, failed to enable media [ 534.100018][T18100] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.132872][T18100] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.164006][T18100] bridge_slave_1: entered allmulticast mode [ 534.181821][T18244] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3180'. [ 534.194979][T18100] bridge_slave_1: entered promiscuous mode [ 534.260241][T18246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3181'. [ 534.276981][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 534.343903][T18100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.506214][T18100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.838587][T18100] team0: Port device team_slave_0 added [ 535.055774][ T5829] Bluetooth: hci4: command tx timeout [ 535.065192][T18100] team0: Port device team_slave_1 added [ 535.353560][T18100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.386025][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 535.397596][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.451486][T18100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.542903][T18286] netlink: 'syz.2.3192': attribute type 1 has an invalid length. [ 535.611821][T18100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.634820][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.674596][T18295] netlink: 'syz.1.3193': attribute type 1 has an invalid length. [ 535.711924][T18100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.591788][T14229] bond9 (unregistering): (slave macvlan0): Releasing active interface [ 536.603902][T14229] bond0 (unregistering): Released all slaves [ 536.605915][ T7363] smc: removing ib device syz0 [ 536.617046][T14229] bond1 (unregistering): Released all slaves [ 536.634261][T14229] bond2 (unregistering): Released all slaves [ 536.667262][T14229] bond3 (unregistering): Released all slaves [ 536.683813][T14229] bond4 (unregistering): Released all slaves [ 536.698761][T14229] bond5 (unregistering): Released all slaves [ 536.711585][T14229] bond6 (unregistering): Released all slaves [ 536.727548][T14229] bond7 (unregistering): Released all slaves [ 536.744439][T14229] bond8 (unregistering): Released all slaves [ 536.764582][T14229] bond9 (unregistering): Released all slaves [ 537.135430][ T5829] Bluetooth: hci4: command tx timeout [ 537.151537][T18100] hsr_slave_0: entered promiscuous mode [ 537.191165][T18100] hsr_slave_1: entered promiscuous mode [ 537.207048][T18100] debugfs: 'hsr0' already exists in 'hsr' [ 537.212824][T18100] Cannot create hsr debugfs directory [ 537.630450][T18356] Cannot find add_set index 0 as target [ 537.647176][T18354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.779177][T18360] __nla_validate_parse: 3 callbacks suppressed [ 537.779198][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 537.884171][T18360] º: renamed from veth1_vlan (while UP) [ 539.195192][T18414] openvswitch: netlink: IPv6 tunnel dst address is zero [ 539.529112][T18436] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 539.738835][T18449] netlink: 'syz.2.3226': attribute type 1 has an invalid length. [ 539.837991][T18449] netlink: 'syz.2.3226': attribute type 2 has an invalid length. [ 540.101304][T18449] bridge_slave_0: left allmulticast mode [ 540.111222][T18449] bridge_slave_0: left promiscuous mode [ 540.117449][T18449] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.172727][T18449] bridge_slave_1: left allmulticast mode [ 540.180417][T18449] bridge_slave_1: left promiscuous mode [ 540.186904][T18449] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.251529][T18449] bond0: (slave bond_slave_0): Releasing backup interface [ 540.285268][T18449] bond0: (slave bond_slave_1): Releasing backup interface [ 540.310736][T18449] team0: Port device team_slave_0 removed [ 540.331000][T18449] team0: Port device team_slave_1 removed [ 540.350390][T18449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.379546][T18449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.394620][T18449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.403148][T18449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.416898][T18449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 540.462607][T14229] tipc: Disabling bearer [ 540.492808][T14229] tipc: Left network mode [ 540.671225][T18100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.799645][T18100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.809582][T18503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3233'. [ 540.892818][T18100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 540.956407][T18100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 541.098711][T18525] xt_l2tp: v2 doesn't support IP mode [ 541.173185][T18511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3236'. [ 541.198147][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 541.343991][T18545] netlink: 'syz.3.3240': attribute type 1 has an invalid length. [ 541.712548][T18100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.824653][T18100] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.004678][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.011934][ T7363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.051100][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.058290][ T7363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.059883][T18584] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3249'. [ 542.121678][T18584] vlan5: entered allmulticast mode [ 542.144340][T18584] gretap0: entered allmulticast mode [ 542.263741][T18592] syzkaller0: entered promiscuous mode [ 542.269580][T18592] syzkaller0: entered allmulticast mode [ 542.280367][T18544] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3241'. [ 542.427409][T18543] lec:lec_atm_close: lec0: Shut down! [ 542.546461][T18100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.637269][T18610] netlink: 'syz.1.3253': attribute type 11 has an invalid length. [ 542.660167][T18610] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3253'. [ 542.685765][T14229] hsr_slave_1: left promiscuous mode [ 542.726745][T14229] veth1_macvtap: left promiscuous mode [ 542.745389][T14229] veth0_macvtap: left promiscuous mode [ 542.933041][T14229] pimreg3 (unregistering): left allmulticast mode [ 542.962143][T18632] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3257'. [ 542.979750][T18632] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 543.532433][T18650] netlink: 'syz.0.3258': attribute type 1 has an invalid length. [ 543.584122][T18100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.712289][T18652] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 543.723060][T18652] bond7 (unregistering): Released all slaves [ 543.738352][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 543.790202][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 543.825343][T18657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3261'. [ 543.834449][T18657] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3261'. [ 543.952803][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'. [ 543.995718][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 544.195714][T14229] IPVS: stop unused estimator thread 0... [ 544.517516][T18100] veth0_vlan: entered promiscuous mode [ 544.587387][T18100] veth1_vlan: entered promiscuous mode [ 544.716197][T18719] xt_cgroup: path and classid specified [ 544.737323][T18100] veth0_macvtap: entered promiscuous mode [ 544.772921][T18100] veth1_macvtap: entered promiscuous mode [ 544.949959][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3277'. [ 544.970617][T18729] syzkaller0: entered promiscuous mode [ 544.978827][T18729] syzkaller0: entered allmulticast mode [ 545.013170][T18733] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 545.117402][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'. [ 545.166744][T18100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.216716][T18100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.266830][ T1095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.297921][ T1095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.358111][ T1095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.371156][ T1095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.392934][T18752] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 545.434945][T18752] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3281'. [ 545.447655][T18757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.510811][T18757] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 545.556520][T18757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.756156][T14229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.764009][T14229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.802327][ T7363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.838278][ T7363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.893306][T18778] netlink: 'syz.1.3289': attribute type 21 has an invalid length. [ 545.902607][T18778] netlink: 'syz.1.3289': attribute type 22 has an invalid length. [ 545.912966][T18778] netlink: 'syz.1.3289': attribute type 23 has an invalid length. [ 545.923766][T18778] netlink: 'syz.1.3289': attribute type 25 has an invalid length. [ 545.932033][T18778] netlink: 'syz.1.3289': attribute type 26 has an invalid length. [ 545.943600][T18777] tipc: Started in network mode [ 545.964274][T18777] tipc: Node identity 0ad788e9ff97, cluster identity 4711 [ 545.974368][T18777] tipc: Enabled bearer , priority 0 [ 546.026805][T18783] syzkaller0: entered promiscuous mode [ 546.032328][T18783] syzkaller0: entered allmulticast mode [ 546.039261][T18783] tipc: Resetting bearer [ 546.084598][T18777] team0: Device gtp0 is up. Set it down before adding it as a team port [ 546.256258][T18774] tipc: Resetting bearer [ 546.489101][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 546.501790][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 546.532779][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 546.565757][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 546.576798][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 546.608007][T18818] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 547.855469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 547.863510][ C1] lec:lec_tx_timeout: lec0 [ 548.046482][T18774] tipc: Disabling bearer [ 548.176316][T18164] tipc: Node number set to 4114647273 [ 548.290879][T18813] vxcan1 speed is unknown, defaulting to 1000 [ 548.372398][T18843] tipc: Enabling of bearer rejected, failed to enable media [ 548.373858][T18839] netlink: 'syz.4.3305': attribute type 1 has an invalid length. [ 548.654910][ T5839] Bluetooth: hci3: command tx timeout [ 548.662740][ T7417] lec:lec_start_xmit: lec0:No lecd attached [ 548.814183][T18858] openvswitch: netlink: Invalid VLAN frame [ 548.848357][T18858] __nla_validate_parse: 7 callbacks suppressed [ 548.848376][T18858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3309'. [ 548.905518][T14229] tipc: Subscription rejected, illegal request [ 548.954441][T18813] chnl_net:caif_netlink_parms(): no params data found [ 549.063995][T18813] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.071835][T18813] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.079334][T18813] bridge_slave_0: entered allmulticast mode [ 549.088889][T18813] bridge_slave_0: entered promiscuous mode [ 549.098179][T18813] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.105483][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.112806][T18813] bridge_slave_1: entered allmulticast mode [ 549.120661][T18813] bridge_slave_1: entered promiscuous mode [ 549.181659][T18813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.212092][T18813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.255919][T18813] team0: Port device team_slave_0 added [ 549.265524][T18813] team0: Port device team_slave_1 added [ 549.350293][T18813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.384789][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.465286][T18813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.486056][T18896] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3320'. [ 549.499637][T18813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.507137][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.508548][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'. [ 549.544772][T18813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.707657][T18906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3324'. [ 549.828976][T18813] hsr_slave_0: entered promiscuous mode [ 549.842920][T18878] lec:lec_atm_close: lec0: Shut down! [ 549.858460][T18813] hsr_slave_1: entered promiscuous mode [ 549.868042][T18813] debugfs: 'hsr0' already exists in 'hsr' [ 549.873807][T18813] Cannot create hsr debugfs directory [ 550.092610][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 550.249788][T18932] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3328'. [ 550.268222][T18813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.295239][T18813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.317782][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 550.373200][T18938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.439348][T18813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.451203][T18813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.526875][T18813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.547268][T18813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.604096][T18948] netlink: 'syz.3.3334': attribute type 9 has an invalid length. [ 550.637099][T18948] netlink: 'syz.3.3334': attribute type 11 has an invalid length. [ 550.645362][T18948] netlink: 'syz.3.3334': attribute type 12 has an invalid length. [ 550.678372][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 550.684956][T18948] netlink: 199280 bytes leftover after parsing attributes in process `syz.3.3334'. [ 550.720464][T18813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.732902][T18813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.736668][ T5839] Bluetooth: hci3: command tx timeout [ 550.778299][T18955] x_tables: duplicate underflow at hook 1 [ 550.863849][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'. [ 550.906308][T18959] syzkaller0: entered promiscuous mode [ 550.914377][T18959] syzkaller0: entered allmulticast mode [ 550.970111][T18813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.019567][T18813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.034596][T18964] veth0_to_team: entered promiscuous mode [ 551.041573][T18964] veth0_to_team: left promiscuous mode [ 551.057823][T18813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.081761][T18813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 551.261156][T18813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.290377][T18813] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.327779][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.334978][ T7363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.369525][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.376698][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.479800][T18989] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 551.512603][T18813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.933423][T18813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.999625][T19031] syzkaller1: entered allmulticast mode [ 552.032714][T18813] veth0_vlan: entered promiscuous mode [ 552.053781][T18813] veth1_vlan: entered promiscuous mode [ 552.068217][T19028] delete_channel: no stack [ 552.071386][T19033] netlink: 'syz.3.3358': attribute type 1 has an invalid length. [ 552.121395][T19033] bond7: entered promiscuous mode [ 552.127796][T19033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 552.159544][T19034] bond7: (slave gretap2): making interface the new active one [ 552.167612][T19034] gretap2: entered promiscuous mode [ 552.173666][T19034] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 552.184593][T18813] veth0_macvtap: entered promiscuous mode [ 552.222808][T19033] macvlan3: entered promiscuous mode [ 552.228537][T19033] macvlan3: entered allmulticast mode [ 552.235917][T19033] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 552.308610][T18813] veth1_macvtap: entered promiscuous mode [ 552.395726][T19041] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 552.469928][T19041] bond8: entered promiscuous mode [ 552.485547][T19041] 8021q: adding VLAN 0 to HW filter on device bond8 [ 552.553617][T19051] sock: sock_set_timeout: `syz.2.3363' (pid 19051) tries to set negative timeout [ 552.578970][T19043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 552.589592][T19043] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 552.600446][T19043] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 552.613975][T19043] bond8: (slave vti0): making interface the new active one [ 552.621631][T19043] vti0: entered promiscuous mode [ 552.628952][T19043] bond8: (slave vti0): Enslaving as an active interface with an up link [ 552.651479][T18813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.695489][T18813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.733867][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.743982][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.819249][ T5839] Bluetooth: hci3: command tx timeout [ 552.844026][T14229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.853756][T14229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.013181][T19072] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 553.053505][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.080414][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.151451][ T7363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.166284][ T7363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.378943][T19092] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 553.400533][T19092] bond1 (unregistering): Released all slaves [ 553.484971][T19100] netlink: 'syz.0.3379': attribute type 29 has an invalid length. [ 553.507914][T19097] openvswitch: netlink: Flow actions attr not present in new flow. [ 553.668229][T19106] netlink: 'syz.2.3381': attribute type 1 has an invalid length. [ 553.676328][T19106] netlink: 'syz.2.3381': attribute type 4 has an invalid length. [ 553.754533][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 553.768331][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 553.782058][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 553.799911][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 553.816375][T19112] tipc: Failed to remove unknown binding: 66,0,0/0:2157962124/2157962125 [ 553.826534][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.863658][T19112] tipc: Failed to remove unknown binding: 66,0,0/0:2157962124/2157962125 [ 553.912955][T19112] __nla_validate_parse: 12 callbacks suppressed [ 553.912973][T19112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3384'. [ 553.936306][T19119] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 553.967783][T19110] vxcan1 speed is unknown, defaulting to 1000 [ 554.004955][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'. [ 554.230154][T19140] netlink: 'syz.4.3388': attribute type 4 has an invalid length. [ 554.265265][T19140] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3388'. [ 554.424051][ T974] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.457064][ T974] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.588301][ T974] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.623809][ T974] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.669903][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3394'. [ 554.811337][ T974] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.839336][ T974] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.844757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 554.857135][ C1] lec:lec_tx_timeout: lec0 [ 554.898172][ T5829] Bluetooth: hci3: command tx timeout [ 554.928222][T19164] gre0: entered promiscuous mode [ 554.933346][T19164] gre0: entered allmulticast mode [ 554.973798][ T974] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.009956][ T974] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.074127][T19174] netlink: 'syz.0.3398': attribute type 6 has an invalid length. [ 555.177756][T19181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3402'. [ 555.391828][T19110] chnl_net:caif_netlink_parms(): no params data found [ 555.593726][ T974] bridge_slave_1: left allmulticast mode [ 555.607135][ T974] bridge_slave_1: left promiscuous mode [ 555.615509][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.651490][ T974] bridge_slave_0: left allmulticast mode [ 555.668991][ T974] bridge_slave_0: left promiscuous mode [ 555.679074][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.897217][ T974] bond8 (unregistering): (slave vti0): Releasing backup interface [ 555.905163][ T974] vti0 (unregistering): left promiscuous mode [ 555.935572][ T5829] Bluetooth: hci0: command tx timeout [ 555.961341][ T974] bond7 (unregistering): (slave gretap2): Releasing backup interface [ 555.970220][ T974] gretap2 (unregistering): left promiscuous mode [ 555.999654][ T974] dvmrp6 (unregistering): left allmulticast mode [ 556.335981][ T974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.345171][ T974] bond_slave_0: left allmulticast mode [ 556.354223][ T974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.363423][ T974] bond_slave_1: left allmulticast mode [ 556.372665][ T974] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 556.381454][ T974] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 556.388900][ T974] bond0 (unregistering): Released all slaves [ 556.399288][ T974] bond1 (unregistering): Released all slaves [ 556.412409][ T974] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 556.421807][ T974] bond2 (unregistering): Released all slaves [ 556.435641][ T974] bond3 (unregistering): Released all slaves [ 556.449456][ T974] bond4 (unregistering): Released all slaves [ 556.470220][ T974] bond5 (unregistering): Released all slaves [ 556.482689][ T974] bond6 (unregistering): Released all slaves [ 556.498576][ T974] bond7 (unregistering): Released all slaves [ 556.511951][ T974] bond8 (unregistering): Released all slaves [ 556.533037][T19110] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.546182][T19110] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.555056][T19110] bridge_slave_0: entered allmulticast mode [ 556.564369][T19110] bridge_slave_0: entered promiscuous mode [ 556.581771][T19213] syz_tun: entered allmulticast mode [ 556.604344][T19214] dvmrp8: entered allmulticast mode [ 556.653623][T19110] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.664550][T19110] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.672746][T19110] bridge_slave_1: entered allmulticast mode [ 556.695727][T19110] bridge_slave_1: entered promiscuous mode [ 556.748947][T19223] SET target dimension over the limit! [ 556.766216][ T974] tipc: Left network mode [ 556.799076][T19214] syz_tun: left allmulticast mode [ 556.808516][T19110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.823031][T19110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.906837][T19231] validate_nla: 1 callbacks suppressed [ 556.906857][T19231] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 556.934988][T19231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3414'. [ 556.989304][T19110] team0: Port device team_slave_0 added [ 557.039106][T19110] team0: Port device team_slave_1 added [ 557.079172][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3416'. [ 557.366617][T19110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.408530][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.490143][T19261] xt_hashlimit: size too large, truncated to 1048576 [ 557.493880][T19259] xt_hashlimit: size too large, truncated to 1048576 [ 557.517958][T19110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.548939][T19110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.590218][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.635860][T19110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.752943][T19272] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3420'. [ 558.014876][ T5829] Bluetooth: hci0: command tx timeout [ 558.214048][T19110] hsr_slave_0: entered promiscuous mode [ 558.234213][T19110] hsr_slave_1: entered promiscuous mode [ 558.264681][T19110] debugfs: 'hsr0' already exists in 'hsr' [ 558.273637][T19110] Cannot create hsr debugfs directory [ 558.346988][T19280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3421'. [ 558.412776][T19280] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3421'. [ 558.557216][T19294] netlink: 'syz.4.3424': attribute type 1 has an invalid length. [ 558.683867][T19298] Cannot find set identified by id 1 to match [ 558.952864][T19308] tipc: Enabled bearer , priority 0 [ 559.101110][T19312] syzkaller0: entered promiscuous mode [ 559.119804][T19312] syzkaller0: entered allmulticast mode [ 559.136855][T19312] tipc: Resetting bearer [ 559.223511][ T974] hsr_slave_0: left promiscuous mode [ 559.243091][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.286064][ T974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.370230][ T974] veth1_macvtap: left promiscuous mode [ 559.383778][ T974] veth1_vlan: left promiscuous mode [ 559.407095][ T974] veth0_vlan: left promiscuous mode [ 559.611171][T19358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3439'. [ 559.650451][ T974] pimreg (unregistering): left allmulticast mode [ 559.785882][ T974] team0 (unregistering): Port device team_slave_1 removed [ 559.952675][ T7363] tipc: Resetting bearer [ 559.960641][T19312] tipc: Resetting bearer [ 560.095908][ T5829] Bluetooth: hci0: command tx timeout [ 561.360273][T19312] tipc: Disabling bearer [ 561.377258][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 561.389840][T19354] tipc: MTU too low for tipc bearer [ 561.548101][T19366] ipt_REJECT: TCP_RESET invalid for non-tcp [ 561.714681][T19376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3446'. [ 561.745148][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3446'. [ 561.775336][T19376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3446'. [ 561.849346][T19380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3447'. [ 561.867434][T19386] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3449'. [ 561.880276][T19380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3447'. [ 561.894625][T19377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3447'. [ 561.967704][T19380] netlink: 'syz.4.3447': attribute type 5 has an invalid length. [ 561.980150][T19380] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3447'. [ 562.174837][ T5829] Bluetooth: hci0: command tx timeout [ 562.566337][ T974] IPVS: stop unused estimator thread 0... [ 562.716923][T18164] IPVS: starting estimator thread 0... [ 562.782738][T19443] netlink: 'syz.2.3459': attribute type 4 has an invalid length. [ 562.824818][T19440] IPVS: using max 33 ests per chain, 79200 per kthread [ 562.828284][T19445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.848725][T19110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 562.868480][T19445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.877443][T19110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 562.910208][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 562.962996][T19110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.010591][T19110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.369479][T19110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.390509][T19477] syzkaller1: entered promiscuous mode [ 563.404793][T19477] syzkaller1: entered allmulticast mode [ 563.435646][T19110] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.468113][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.475346][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.801530][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.808758][ T974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.227404][T19503] sctp: [Deprecated]: syz.0.3472 (pid 19503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.227404][T19503] Use struct sctp_sack_info instead [ 564.516918][T19110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.562755][T19526] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20265 [ 564.580008][ T8121] IPVS: starting estimator thread 0... [ 564.651583][T19526] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 564.671654][T19110] veth0_vlan: entered promiscuous mode [ 564.695705][T19530] IPVS: using max 34 ests per chain, 81600 per kthread [ 564.712778][T19110] veth1_vlan: entered promiscuous mode [ 564.789705][T19539] ip6gretap0: entered promiscuous mode [ 564.808355][T19539] __nla_validate_parse: 6 callbacks suppressed [ 564.808375][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 564.867997][T19539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3480'. [ 564.914445][T19552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.926097][T19110] veth0_macvtap: entered promiscuous mode [ 564.956120][T19110] veth1_macvtap: entered promiscuous mode [ 565.030703][T19110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.321411][T19110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.357599][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3485'. [ 565.390757][T19561] veth0_virt_wifi: entered promiscuous mode [ 565.419643][ T7352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.440765][ T7352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.487585][ T7352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.528506][ T7352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.562612][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 565.573704][T19575] IPv6: NLM_F_REPLACE set, but no existing node found! [ 565.607207][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 565.666458][ T7363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.714837][ T7363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.827076][ T7352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.840731][T19586] netlink: 'syz.4.3491': attribute type 3 has an invalid length. [ 565.869904][ T7352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.111807][T19610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3496'. [ 566.940566][T19651] syzkaller1: entered promiscuous mode [ 566.951051][T19651] syzkaller1: entered allmulticast mode [ 567.180207][T19668] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3510'. [ 567.478102][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'. [ 567.493248][T19692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.584689][T19692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.683717][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 567.726342][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 567.852388][T19722] sctp: [Deprecated]: syz.0.3525 (pid 19722) Use of int in maxseg socket option. [ 567.852388][T19722] Use struct sctp_assoc_value instead [ 567.924739][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.933212][ C1] lec:lec_tx_timeout: lec0 [ 567.940702][T19728] tipc: Started in network mode [ 567.948448][T19728] tipc: Node identity 82449b8d8742, cluster identity 4711 [ 567.958737][T19728] tipc: Enabled bearer , priority 0 [ 567.984539][T19728] syzkaller0: entered promiscuous mode [ 567.990943][T19728] syzkaller0: entered allmulticast mode [ 568.007082][T19728] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 568.039915][T19728] tipc: Resetting bearer [ 568.054388][T19728] netlink: 'syz.0.3528': attribute type 25 has an invalid length. [ 568.066139][T19727] tipc: Resetting bearer [ 568.090026][T19727] tipc: Disabling bearer [ 568.270753][T19740] syzkaller0: entered promiscuous mode [ 568.276903][T19740] syzkaller0: entered allmulticast mode [ 569.809567][T19754] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 569.997257][T19757] netlink: 'syz.4.3535': attribute type 18 has an invalid length. [ 570.005334][T19757] __nla_validate_parse: 4 callbacks suppressed [ 570.005348][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3535'. [ 570.031819][T14229] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.031851][T19757] netlink: 'syz.4.3535': attribute type 18 has an invalid length. [ 570.060607][T14229] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.061074][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3535'. [ 570.083940][T14229] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.104930][T14229] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.304048][T19780] netlink: 'syz.4.3541': attribute type 1 has an invalid length. [ 570.309995][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 570.355900][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 570.412581][T19780] bond2: entered promiscuous mode [ 570.434655][T19780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.444136][ T7363] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.471562][ T7363] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.485536][ T7352] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.494281][ T7352] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.505780][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 570.518993][T19782] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3543'. [ 570.542058][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 570.661114][T19772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 570.705644][T19772] team0: Device macvlan2 is already an upper device of the team interface [ 570.741516][T19803] lo speed is unknown, defaulting to 1000 [ 570.750058][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'. [ 570.762481][T19803] lo speed is unknown, defaulting to 1000 [ 570.793194][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3552'. [ 570.806695][T19803] lo speed is unknown, defaulting to 1000 [ 571.032913][T19820] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 571.056221][ T5829] Bluetooth: hci4: command 0x0401 tx timeout [ 571.068944][T19820] syzkaller1: linktype set to 823 [ 571.267612][T19803] infiniband syz0: set active [ 571.272405][ T5959] lo speed is unknown, defaulting to 1000 [ 571.279199][T19803] infiniband syz0: added lo [ 571.336226][T19803] RDS/IB: syz0: added [ 571.340314][T19803] smc: adding ib device syz0 with port count 1 [ 571.346992][T19803] smc: ib device syz0 port 1 has no pnetid [ 571.353154][ T5959] lo speed is unknown, defaulting to 1000 [ 571.362683][T19803] lo speed is unknown, defaulting to 1000 [ 571.469864][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3561'. [ 571.551228][T19849] netlink: 'syz.4.3563': attribute type 1 has an invalid length. [ 571.632193][T19849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 571.647287][T19803] lo speed is unknown, defaulting to 1000 [ 571.678869][T19853] netlink: 'syz.0.3564': attribute type 2 has an invalid length. [ 571.707978][T19853] netlink: 'syz.0.3564': attribute type 1 has an invalid length. [ 571.969580][T19803] lo speed is unknown, defaulting to 1000 [ 572.021788][T19869] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 572.189337][T19878] netlink: 'syz.4.3571': attribute type 64 has an invalid length. [ 572.245979][T19885] atomic_op ffff888077289198 conn xmit_atomic 0000000000000000 [ 572.455539][T19803] lo speed is unknown, defaulting to 1000 [ 572.723623][T19916] netlink: 'syz.4.3582': attribute type 1 has an invalid length. [ 572.760159][T19916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.788365][T19803] lo speed is unknown, defaulting to 1000 [ 572.815145][T19923] netlink: 'syz.4.3583': attribute type 2 has an invalid length. [ 572.951993][T19931] bond0: entered promiscuous mode [ 572.960723][T19931] bond_slave_0: entered promiscuous mode [ 572.967408][T19931] bond_slave_1: entered promiscuous mode [ 572.975411][T19931] gretap0: entered promiscuous mode [ 572.981797][T19931] debugfs: 'hsr1' already exists in 'hsr' [ 572.988111][T19931] Cannot create hsr debugfs directory [ 572.993601][T19931] hsr1: entered promiscuous mode [ 573.034414][T19803] lo speed is unknown, defaulting to 1000 [ 573.198995][T19803] lo speed is unknown, defaulting to 1000 [ 575.165588][T19885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.330110][T19947] __nla_validate_parse: 2 callbacks suppressed [ 575.330128][T19947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'. [ 575.353084][T19947] openvswitch: netlink: Flow actions attr not present in new flow. [ 576.835533][T19945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3588'. [ 576.951874][T19961] validate_nla: 1 callbacks suppressed [ 576.951892][T19961] netlink: 'syz.0.3593': attribute type 18 has an invalid length. [ 577.130438][T19975] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3599'. [ 577.199283][T19983] syzkaller0: entered promiscuous mode [ 577.218531][T19983] syzkaller0: entered allmulticast mode [ 577.231730][T19977] vxcan1 speed is unknown, defaulting to 1000 [ 577.267373][T19990] syzkaller0: entered promiscuous mode [ 577.283855][T19990] syzkaller0: entered allmulticast mode [ 577.399265][T19996] netlink: 'syz.1.3605': attribute type 4 has an invalid length. [ 577.593266][T20009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3610'. [ 577.783320][T20019] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 577.813635][T20021] netlink: 'syz.4.3614': attribute type 1 has an invalid length. [ 577.830015][T20021] netlink: 'syz.4.3614': attribute type 2 has an invalid length. [ 577.831806][T19977] lo speed is unknown, defaulting to 1000 [ 577.854432][T20025] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3617'. [ 577.885679][T20025] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3617'. [ 578.043049][T20037] netlink: 'syz.4.3620': attribute type 1 has an invalid length. [ 578.055573][T20037] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3620'. [ 578.080311][T20041] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3622'. [ 578.180950][T20048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3625'. [ 578.277640][T20055] netlink: 'syz.1.3628': attribute type 1 has an invalid length. [ 578.349661][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'. [ 578.370406][T20056] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 578.387767][T20055] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 578.810483][T20095] netlink: 'syz.1.3637': attribute type 58 has an invalid length. [ 579.526817][T20125] xt_hashlimit: invalid rate [ 579.879425][T20154] openvswitch: netlink: EtherType 53b is less than min 600 [ 579.954498][T20158] : entered promiscuous mode [ 580.076907][T20171] erspan0: entered promiscuous mode [ 580.088617][T20169] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 580.097734][T20171] erspan0: left promiscuous mode [ 580.268127][T20186] netlink: 'syz.0.3668': attribute type 4 has an invalid length. [ 580.288730][T20177] bridge0: entered promiscuous mode [ 580.293995][T20177] bridge0: entered allmulticast mode [ 580.316433][T20186] `: renamed from bond0 (while UP) [ 580.338444][T20180] vxcan1 speed is unknown, defaulting to 1000 [ 580.573459][T20180] lo speed is unknown, defaulting to 1000 [ 580.616783][T20200] vxcan1 speed is unknown, defaulting to 1000 [ 580.864315][T20213] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 581.043791][T20200] lo speed is unknown, defaulting to 1000 [ 581.076027][T20220] xt_l2tp: missing protocol rule (udp|l2tpip) [ 581.381054][T20233] __nla_validate_parse: 11 callbacks suppressed [ 581.381074][T20233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3682'. [ 581.528031][T20235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3683'. [ 581.538899][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3683'. [ 581.667079][T20244] gre0: left promiscuous mode [ 581.671816][T20244] gre0: left allmulticast mode [ 581.727398][T20248] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 581.869678][T20252] netlink: 'syz.0.3687': attribute type 1 has an invalid length. [ 582.173136][T20263] team0: Port device team_slave_0 removed [ 582.183522][T20263] bond0: (slave team_slave_0): Enslaving as a backup interface with an up link [ 582.400578][T20286] netlink: 'syz.1.3694': attribute type 1 has an invalid length. [ 582.459021][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 582.476887][T20294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'. [ 582.499247][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3694'. [ 582.504006][T20286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.699122][T20311] netlink: 'syz.3.3698': attribute type 3 has an invalid length. [ 582.738391][T20311] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3698'. [ 582.804441][T20305] vxcan1 speed is unknown, defaulting to 1000 [ 583.007201][T20305] lo speed is unknown, defaulting to 1000 [ 583.145998][T20325] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3700'. [ 583.645673][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'. [ 583.860346][T20358] syzkaller0: entered promiscuous mode [ 583.885085][T20358] syzkaller0: entered allmulticast mode [ 584.189838][T20382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3710'. [ 584.798152][T20406] netlink: 'syz.1.3715': attribute type 12 has an invalid length. [ 584.809146][T20406] netlink: 'syz.1.3715': attribute type 29 has an invalid length. [ 584.834949][T20406] netlink: 'syz.1.3715': attribute type 1 has an invalid length. [ 585.316645][T20445] IPVS: ip_vs_add_dest(): server weight less than zero [ 585.354364][ T979] IPVS: starting estimator thread 0... [ 585.488986][T20446] IPVS: using max 28 ests per chain, 67200 per kthread [ 585.679731][T20455] Bluetooth: MGMT ver 1.23 [ 586.084518][T20475] vxcan1 speed is unknown, defaulting to 1000 [ 586.084586][T20477] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 586.293534][T20488] xt_l2tp: wrong L2TP version: 0 [ 586.329734][T20491] syzkaller0: entered promiscuous mode [ 586.345126][T20491] syzkaller0: entered allmulticast mode [ 586.609608][T20475] lo speed is unknown, defaulting to 1000 [ 586.759116][T20506] can: request_module (can-proto-0) failed. [ 587.447464][T20551] geneve2: entered promiscuous mode [ 587.872155][T20585] __nla_validate_parse: 6 callbacks suppressed [ 587.872175][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'. [ 587.906167][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'. [ 588.037964][T20600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 588.068758][T20604] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 588.070064][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 588.084795][T20604] netlink: 'syz.3.3761': attribute type 2 has an invalid length. [ 588.361728][T20617] netlink: 'syz.3.3765': attribute type 39 has an invalid length. [ 588.452579][T20629] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3769'. [ 588.463882][T20626] syzkaller0: entered promiscuous mode [ 588.471763][T20626] syzkaller0: entered allmulticast mode [ 588.659135][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3768'. [ 588.672263][T20641] netlink: 'syz.4.3768': attribute type 30 has an invalid length. [ 588.962539][T20655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3777'. [ 588.976740][T20657] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 588.986733][T20659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3777'. [ 588.996195][ T42] IPVS: starting estimator thread 0... [ 589.035698][T20657] nbd0: detected capacity change from 127 to 0 [ 589.057565][T20665] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3779'. [ 589.080248][T20657] geneve2: entered promiscuous mode [ 589.096802][T20663] IPVS: using max 32 ests per chain, 76800 per kthread [ 589.105173][T20657] geneve2: entered allmulticast mode [ 589.124894][ T7363] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 589.133752][ T7363] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 589.157772][ T7363] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 589.182500][T20673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 589.194628][T20673] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 589.203030][T20673] gretap1: entered promiscuous mode [ 589.208926][T20673] gretap1: entered allmulticast mode [ 589.228707][ T7363] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 589.231050][T20678] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3783'. [ 589.581495][T20698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.588793][T20698] IPv6: NLM_F_CREATE should be set when creating new route [ 589.923110][T20730] netlink: 'syz.3.3800': attribute type 21 has an invalid length. [ 590.167541][T20747] netlink: 'syz.0.3807': attribute type 1 has an invalid length. [ 590.214928][T20747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.244130][T20757] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 590.247469][T20749] bond1: (slave veth3): Enslaving as an active interface with a down link [ 590.268327][T20764] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 590.332951][T20749] sctp: [Deprecated]: syz.0.3807 (pid 20749) Use of int in max_burst socket option deprecated. [ 590.332951][T20749] Use struct sctp_assoc_value instead [ 590.358914][T20767] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 590.367418][T20767] syzkaller1: linktype set to 823 [ 590.408140][T20749] bond1: (slave veth0_to_bond): making interface the new active one [ 590.423439][T20749] veth0_to_bond: entered promiscuous mode [ 590.429860][T20749] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 590.442021][T20770] netlink: 'syz.0.3807': attribute type 1 has an invalid length. [ 590.458121][T20770] netlink: 'syz.0.3807': attribute type 2 has an invalid length. [ 590.467021][T20749] netlink: 'syz.0.3807': attribute type 1 has an invalid length. [ 590.476851][T20749] netlink: 'syz.0.3807': attribute type 2 has an invalid length. [ 590.541893][T20782] openvswitch: netlink: Message has 8 unknown bytes. [ 590.550956][T20782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.839551][T20798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.857933][T20798] bond1: (slave geneve3): making interface the new active one [ 590.868112][T20798] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 591.166247][T20816] pim6reg: entered allmulticast mode [ 591.185717][T20818] pim6reg: left allmulticast mode [ 592.196498][T20867] veth5: entered allmulticast mode [ 592.205514][T20874] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 592.444515][T20886] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 592.548668][T20889] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 592.609455][T20889] bridge0: entered allmulticast mode [ 592.984629][T20917] __nla_validate_parse: 25 callbacks suppressed [ 592.984648][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3860'. [ 593.011055][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3861'. [ 593.063694][T20922] lo: entered allmulticast mode [ 593.184637][T20938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3866'. [ 593.393152][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 593.455109][ T5829] Bluetooth: hci0: command tx timeout [ 593.492901][T20956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3873'. [ 593.623715][T20963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3876'. [ 593.674323][T20963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3876'. [ 593.770205][T20970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3876'. [ 593.781278][T20970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3876'. [ 593.781397][T20963] openvswitch: netlink: IP tunnel dst address not specified [ 593.832970][T20967] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3877'. [ 593.906443][T20983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.920051][T20983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.935462][T20983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.267893][T21005] validate_nla: 4 callbacks suppressed [ 594.267912][T21005] netlink: 'syz.0.3887': attribute type 15 has an invalid length. [ 594.382240][T21000] tipc: Started in network mode [ 594.388024][T21000] tipc: Node identity d2ad7d43a1e7, cluster identity 4711 [ 594.395605][T21000] tipc: Enabled bearer , priority 11 [ 594.550812][T21020] netlink: 'syz.4.3893': attribute type 1 has an invalid length. [ 594.564534][T21015] team1: entered promiscuous mode [ 594.571588][T21015] team1: entered allmulticast mode [ 594.584431][T21020] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 594.590728][T21017] netlink: 'syz.0.3891': attribute type 1 has an invalid length. [ 594.873240][T21048] gretap0: entered promiscuous mode [ 594.891909][T21048] gretap0: left promiscuous mode [ 594.974739][T21050] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.093293][T21063] sch_fq: defrate 0 ignored. [ 595.114460][T21067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 595.204006][T21074] ipvlan1: entered allmulticast mode [ 595.217440][T21074] batadv_slave_1: entered allmulticast mode [ 595.241884][T21074] batman_adv: batadv0: Adding interface: ipvlan1 [ 595.250219][T21074] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.276811][T21074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.287834][T21074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.300722][T21074] batman_adv: batadv0: Interface activated: ipvlan1 [ 595.387012][T21082] delete_channel: no stack [ 595.515633][ T979] tipc: Node number set to 1934261571 [ 595.665568][T21099] openvswitch: netlink: Flow actions attr not present in new flow. [ 596.016768][T21120] syzkaller0: entered promiscuous mode [ 596.032551][T21120] syzkaller0: entered allmulticast mode [ 596.207986][T21138] sctp: [Deprecated]: syz.4.3930 (pid 21138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.207986][T21138] Use struct sctp_sack_info instead [ 596.555270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.564409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.586563][T21164] netlink: 'syz.1.3937': attribute type 21 has an invalid length. [ 596.738733][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.761058][ T1095] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.779387][ T1095] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.789470][ T1095] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.803665][T21175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.829175][ T1095] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.428963][T21217] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 597.438026][T21220] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 597.456271][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.474748][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.485079][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.930479][T21259] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 597.993991][T21253] delete_channel: no stack [ 598.094656][T21271] sctp: [Deprecated]: syz.1.3964 (pid 21271) Use of int in max_burst socket option. [ 598.094656][T21271] Use struct sctp_assoc_value instead [ 598.113323][T21269] __nla_validate_parse: 21 callbacks suppressed [ 598.113343][T21269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3963'. [ 598.154045][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3963'. [ 598.593033][T21315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3975'. [ 598.614005][T21314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3974'. [ 598.815851][ T8126] net_ratelimit: 14 callbacks suppressed [ 598.815872][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.832538][T21335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3982'. [ 598.836044][T21332] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 598.864984][T21334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3982'. [ 598.877050][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 598.914588][T21340] vlan3: entered allmulticast mode [ 598.921022][T21340] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 598.930335][T21344] netlink: 'syz.0.3986': attribute type 12 has an invalid length. [ 598.938966][T21344] netlink: 'syz.0.3986': attribute type 29 has an invalid length. [ 598.953332][T21344] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3986'. [ 599.050841][T21351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3987'. [ 599.142570][T21359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3988'. [ 599.230554][T21366] chnl_net:caif_netlink_parms(): no params data found [ 599.276672][T21367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 599.283974][T21367] IPv6: NLM_F_CREATE should be set when creating new route [ 599.697365][T21387] sctp: [Deprecated]: syz.2.3997 (pid 21387) Use of int in max_burst socket option deprecated. [ 599.697365][T21387] Use struct sctp_assoc_value instead [ 599.865525][ T8121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.472981][T21392] xt_cgroup: invalid path, errno=-2 [ 600.576412][T18164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.819643][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 600.899816][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.825075][ T7363] veth0_to_bond: left promiscuous mode [ 601.936469][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.123671][T21436] sctp: [Deprecated]: syz.3.4008 (pid 21436) Use of int in maxseg socket option. [ 602.123671][T21436] Use struct sctp_assoc_value instead [ 602.254621][T21443] netlink: 'syz.3.4011': attribute type 62 has an invalid length. [ 602.306134][T21449] tipc: Started in network mode [ 602.316647][T21449] tipc: Node identity 0ebc68deca0b, cluster identity 4711 [ 602.324050][T21449] tipc: Enabled bearer , priority 0 [ 602.361849][T21447] tipc: Disabling bearer [ 602.655753][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.664892][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.676203][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.966158][T21488] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 602.976952][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.046320][T21488] bond2: entered promiscuous mode [ 603.051537][T21488] bond2: entered allmulticast mode [ 603.057690][T21488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.087275][T21492] erspan1: entered allmulticast mode [ 603.096525][T21492] bond2: (slave erspan1): making interface the new active one [ 603.104021][T21492] erspan1: entered promiscuous mode [ 603.118527][T21492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.157181][T21492] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 603.200911][T21491] __nla_validate_parse: 9 callbacks suppressed [ 603.200927][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4026'. [ 603.309337][T21504] syzkaller0: entered promiscuous mode [ 603.345260][T21504] syzkaller0: entered allmulticast mode [ 603.585260][T21521] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 603.621329][ T42] lo speed is unknown, defaulting to 1000 [ 603.628462][ T42] syz0: Port: 1 Link DOWN [ 603.633720][ T42] lo speed is unknown, defaulting to 1000 [ 603.767718][T21530] netlink: 81 bytes leftover after parsing attributes in process `syz.1.4035'. [ 603.811603][T21532] syzkaller0: entered promiscuous mode [ 603.827462][T21537] netlink: 'syz.4.4038': attribute type 4 has an invalid length. [ 603.845493][T21532] syzkaller0: entered allmulticast mode [ 603.895751][T21536] vlan1: entered allmulticast mode [ 603.924588][T21536] geneve1: entered allmulticast mode [ 603.996213][T21547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4040'. [ 604.016995][T21547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4040'. [ 604.027829][ T42] net_ratelimit: 5 callbacks suppressed [ 604.027845][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.145817][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.175613][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.237379][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.427506][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4045'. [ 604.775894][T21596] veth0_to_bond: entered allmulticast mode [ 604.828165][ T7363] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 604.869912][ T7363] bond1: now running without any active interface! [ 605.028977][T21612] netlink: 'syz.0.4060': attribute type 1 has an invalid length. [ 605.056667][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.084771][T21612] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4060'. [ 605.260425][T21627] syzkaller0: entered promiscuous mode [ 605.285174][T21627] syzkaller0: entered allmulticast mode [ 605.307677][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.328971][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'. [ 605.548606][T21654] netlink: 'syz.2.4067': attribute type 3 has an invalid length. [ 605.572352][T21654] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4067'. [ 606.095942][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.456361][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.655177][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.140208][ T8121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.413778][T21637] bridge_slave_0: left allmulticast mode [ 607.419817][T21637] bridge_slave_0: left promiscuous mode [ 607.426154][T21637] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.439058][T21637] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.452186][T21637] `: (slave bond_slave_0): Releasing backup interface [ 607.469768][T21637] `: (slave bond_slave_1): Releasing backup interface [ 607.497188][T21637] team0: Port device team_slave_0 removed [ 607.513024][T21637] team0: Port device team_slave_1 removed [ 607.524538][T21637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.532766][T21637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.542189][T21637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.550274][T21637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.652148][T21660] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.4069'. [ 607.811562][T21664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4071'. [ 608.506548][T21713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4082'. [ 608.629520][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'. [ 608.648629][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'. [ 608.661639][T21725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4088'. [ 608.950242][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4093'. [ 609.040998][T21742] veth2: entered promiscuous mode [ 609.083390][T21742] veth3: entered promiscuous mode [ 609.095003][T21742] veth3: entered allmulticast mode [ 609.105966][T21759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4097'. [ 609.115183][T21750] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 609.215697][ T8121] net_ratelimit: 14 callbacks suppressed [ 609.215715][ T8121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.249971][T21762] netlink: 'syz.1.4098': attribute type 9 has an invalid length. [ 609.268393][T21762] netlink: 'syz.1.4098': attribute type 11 has an invalid length. [ 609.287501][T21749] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 609.303564][T21762] netlink: 'syz.1.4098': attribute type 12 has an invalid length. [ 609.335257][T21762] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4098'. [ 609.375058][T21762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4098'. [ 609.387566][T21771] syzkaller0: entered promiscuous mode [ 609.393066][T21771] syzkaller0: entered allmulticast mode [ 609.580849][T21789] netlink: zone id is out of range [ 609.589533][T21789] netlink: zone id is out of range [ 609.594792][T21789] netlink: zone id is out of range [ 609.601623][T21789] netlink: zone id is out of range [ 609.607375][T21789] netlink: zone id is out of range [ 609.612678][T21789] netlink: zone id is out of range [ 609.616216][T18164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.620450][T21789] netlink: zone id is out of range [ 609.639331][T21789] netlink: zone id is out of range [ 611.250776][T21803] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.258455][T21803] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.389165][T21807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4109'. [ 611.459823][T21812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4111'. [ 611.682924][T21829] netlink: 'syz.3.4114': attribute type 4 has an invalid length. [ 611.732193][ T7417] lec:lec_start_xmit: lec0:No lecd attached [ 611.742634][T21841] netlink: 'syz.3.4114': attribute type 4 has an invalid length. [ 611.918262][T21847] batadv_slave_1: entered promiscuous mode [ 611.931953][T21852] syzkaller0: entered promiscuous mode [ 611.934115][T21851] nbd: must specify at least one socket [ 611.942863][T21852] syzkaller0: entered allmulticast mode [ 611.961904][T21846] batadv_slave_1: left promiscuous mode [ 612.181125][T21861] delete_channel: no stack [ 612.340365][T21872] nbd: nbd0 already in use [ 612.484871][T21881] x_tables: unsorted entry at hook 3 [ 612.980159][T21927] netlink: 'syz.3.4144': attribute type 3 has an invalid length. [ 613.010597][T21927] netlink: 'syz.3.4144': attribute type 1 has an invalid length. [ 613.084794][T21934] sit2: entered promiscuous mode [ 613.096781][T21934] sit2: entered allmulticast mode [ 613.234189][T21950] netlink: 'syz.2.4149': attribute type 10 has an invalid length. [ 613.710218][T21977] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 613.746883][T21977] bond2 (unregistering): Released all slaves [ 613.967333][T21994] netlink: 'syz.4.4157': attribute type 23 has an invalid length. [ 614.143630][T22004] __nla_validate_parse: 18 callbacks suppressed [ 614.143649][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4157'. [ 614.426435][ T8121] net_ratelimit: 72 callbacks suppressed [ 614.426454][ T8121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.749964][T18164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.305250][T14229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.465943][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.620619][T22004] hsr_slave_0 (unregistering): left promiscuous mode [ 615.695605][T18164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.732038][T22025] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 615.898076][T22028] openvswitch: netlink: Tunnel attr 3 has unexpected len 16 expected 1 [ 615.912084][T22031] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4163'. [ 615.926045][T22036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4164'. [ 616.076650][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4166'. [ 616.093267][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4165'. [ 616.176219][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4167'. [ 616.187382][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 616.271972][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4166'. [ 616.405908][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.496415][ T8121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.669668][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 616.814882][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 616.822916][ C1] lec:lec_tx_timeout: lec0 [ 616.838155][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4178'. [ 617.227849][T22130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.236873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.409050][T22140] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4188'. [ 617.481594][T22140] bond0: entered promiscuous mode [ 617.506280][T22140] team_slave_0: entered promiscuous mode [ 617.526789][T22140] batadv0: entered promiscuous mode [ 617.541675][T22140] debugfs: 'hsr1' already exists in 'hsr' [ 617.561795][T22140] Cannot create hsr debugfs directory [ 617.575220][T22154] delete_channel: no stack [ 617.578381][T22140] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 617.610362][T22140] hsr1: entered promiscuous mode [ 617.621924][T22140] hsr1: entered allmulticast mode [ 617.641549][T22140] bond0: entered allmulticast mode [ 617.651659][T22140] team_slave_0: entered allmulticast mode [ 617.664143][T22140] batadv0: entered allmulticast mode [ 617.700021][T22140] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 617.727835][T22140] bond0: left promiscuous mode [ 617.742027][T22140] team_slave_0: left promiscuous mode [ 617.773255][T22140] batadv0: left promiscuous mode [ 618.161609][T22194] pim6reg527: entered allmulticast mode [ 618.445595][T22214] syzkaller0: entered promiscuous mode [ 618.454911][T22214] syzkaller0: entered allmulticast mode [ 618.655700][T22230] tipc: Enabled bearer , priority 0 [ 618.746824][T22213] tipc: Resetting bearer [ 618.782445][T22240] x_tables: duplicate underflow at hook 3 [ 618.846967][T22213] tipc: Disabling bearer [ 618.847000][T22246] netlink: 'syz.3.4214': attribute type 5 has an invalid length. [ 618.885768][T22246] netlink: 'syz.3.4214': attribute type 5 has an invalid length. [ 618.982624][T22249] syzkaller0: entered allmulticast mode [ 619.311067][T22289] xt_TCPMSS: Only works on TCP SYN packets [ 619.317568][T22286] __nla_validate_parse: 4 callbacks suppressed [ 619.317586][T22286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4223'. [ 619.423917][T22286] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 619.484973][T22295] syzkaller1: entered promiscuous mode [ 619.490625][T22295] syzkaller1: entered allmulticast mode [ 619.615482][ T42] net_ratelimit: 11 callbacks suppressed [ 619.615501][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.682810][T22309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4230'. [ 619.803136][T22319] netlink: 'syz.4.4230': attribute type 3 has an invalid length. [ 619.815821][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.855026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.869112][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.928013][T22309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.940317][T22309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.979875][T22312] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4231'. [ 620.137428][T22309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.161533][T22345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4240'. [ 620.174966][T22309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.221828][T22337] IPv6: sit1: Disabled Multicast RS [ 620.235558][T22337] sit1: entered allmulticast mode [ 620.292341][T22357] netlink: 'syz.0.4239': attribute type 61 has an invalid length. [ 620.315883][T22309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.329209][T22357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4239'. [ 620.357681][T22309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.657987][T18168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.703598][T22309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.744501][T22309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.808158][T22390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4245'. [ 620.916078][T22386] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4245'. [ 620.954161][T14229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.017871][ T5839] Bluetooth: hci0: link tx timeout [ 621.023418][ T5839] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 621.060083][ T1160] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.104617][ T1160] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.125018][ T1160] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.133271][ T1160] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.142863][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 621.197869][ T1095] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.210603][ T1095] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.269535][ T1160] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.295048][ T1160] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.330347][T22407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4249'. [ 621.606293][T22416] erspan0: entered promiscuous mode [ 621.631932][T22416] erspan0: entered allmulticast mode [ 621.642489][T22423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.651868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.690233][T22423] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4255'. [ 621.700819][T18168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.756427][T22418] vxcan1 speed is unknown, defaulting to 1000 [ 622.015557][T22441] macvtap1: entered allmulticast mode [ 622.034861][T22441] veth0_macvtap: entered allmulticast mode [ 622.115514][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.125737][T22447] netlink: 'syz.0.4262': attribute type 1 has an invalid length. [ 622.165169][T22454] block nbd1: Unsupported socket: should be TCP or UNIX. [ 622.337616][T22454] netem: invalid attributes len -24 [ 622.342967][T22454] netem: change failed [ 622.354270][T22418] lo speed is unknown, defaulting to 1000 [ 622.756715][ T5829] Bluetooth: hci0: link tx timeout [ 622.763020][ T5829] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 622.775991][T22495] netlink: 'syz.0.4271': attribute type 2 has an invalid length. [ 622.788679][ T5829] Bluetooth: hci0: link tx timeout [ 622.793855][ T5829] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 622.810183][T22495] netlink: 'syz.0.4271': attribute type 8 has an invalid length. [ 623.058081][ T5829] Bluetooth: hci0: command 0x0405 tx timeout [ 623.078914][T22510] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 623.093509][T22517] netlink: 'syz.0.4278': attribute type 1 has an invalid length. [ 623.166682][T22511] team_slave_1: entered promiscuous mode [ 623.181967][T22511] team_slave_1: left promiscuous mode [ 623.290889][T22517] bond3 (unregistering): Released all slaves [ 624.163070][T22586] netlink: 'syz.0.4298': attribute type 1 has an invalid length. [ 624.351510][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 624.667621][T22616] __nla_validate_parse: 15 callbacks suppressed [ 624.667639][T22616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4302'. [ 624.770685][T22626] netlink: 'syz.1.4305': attribute type 2 has an invalid length. [ 624.780718][T22626] netlink: 'syz.1.4305': attribute type 1 has an invalid length. [ 625.039747][T22644] netlink: 'syz.0.4313': attribute type 1 has an invalid length. [ 625.049196][T22646] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4314'. [ 625.112618][T22644] bond3: entered promiscuous mode [ 625.121413][T22644] bond3: entered allmulticast mode [ 625.135634][T22644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.136007][T22649] netlink: 'syz.4.4315': attribute type 1 has an invalid length. [ 625.151065][T22649] net_ratelimit: 7 callbacks suppressed [ 625.151080][T22649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.175450][T22649] netlink: 'syz.4.4315': attribute type 21 has an invalid length. [ 625.191167][T22649] IPv6: NLM_F_CREATE should be specified when creating new route [ 625.200463][T22644] bridge5: entered promiscuous mode [ 625.200666][T22649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 625.207214][T22644] bridge5: entered allmulticast mode [ 625.213020][T22649] IPv6: NLM_F_CREATE should be set when creating new route [ 625.220494][T22644] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 625.225708][T22649] IPv6: NLM_F_CREATE should be set when creating new route [ 625.241450][T22649] IPv6: NLM_F_CREATE should be set when creating new route [ 625.257361][ T7367] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 625.317621][T22644] bridge6: entered promiscuous mode [ 625.341370][T22644] bridge6: entered allmulticast mode [ 625.347681][T22644] bond3: (slave bridge6): Enslaving as a backup interface with a down link [ 625.385597][T14229] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 625.498951][T22666] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4320'. [ 625.744302][T22669] syzkaller0: entered promiscuous mode [ 625.750299][T22669] syzkaller0: entered allmulticast mode [ 626.306124][T22660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.549561][T22683] syzkaller0: entered allmulticast mode [ 626.559230][T22683] syzkaller0 (unregistering): left allmulticast mode [ 628.430060][T22661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.583666][T22697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4330'. [ 628.795940][T22720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4333'. [ 628.852470][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'. [ 628.893224][T22725] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 628.921798][T22724] Bluetooth: MGMT ver 1.23 [ 628.971498][T22722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4331'. [ 629.066580][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 629.094955][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 629.173331][T22748] validate_nla: 1 callbacks suppressed [ 629.173349][T22748] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 629.212420][T22748] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 629.224056][T22748] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 629.232009][T22748] netlink: 'syz.2.4342': attribute type 2 has an invalid length. [ 629.240057][T22748] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4342'. [ 629.559466][T22771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.566859][T22771] IPv6: NLM_F_CREATE should be set when creating new route [ 629.711865][T22777] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 629.812290][T22780] pimreg3: entered allmulticast mode [ 629.820335][T22761] lec:lec_atm_close: lec0: Shut down! [ 629.847648][T22761] __nla_validate_parse: 2 callbacks suppressed [ 629.847700][T22761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4345'. [ 629.928861][T22784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4353'. [ 630.102287][T22783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.715144][T22819] lo: entered allmulticast mode [ 630.804026][T22830] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 630.811896][T22831] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 630.821711][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4365'. [ 631.073417][T22834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4366'. [ 631.162436][T22838] : entered promiscuous mode [ 631.171271][T22836] only policy match revision 0 supported [ 631.171289][T22836] unable to load match [ 631.559629][T22852] netlink: 'syz.2.4371': attribute type 4 has an invalid length. [ 631.567857][T22852] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4371'. [ 631.581647][T22852] `: renamed from bond0 (while UP) [ 631.639763][T22854] netlink: 'syz.2.4372': attribute type 4 has an invalid length. [ 631.762794][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4374'. [ 631.775042][T22858] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 631.788465][T22858] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4374'. [ 631.802248][T22858] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 632.000387][T22869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.321830][T22811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.508103][T22891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4381'. [ 633.761420][T22909] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4384'. [ 633.821325][T22914] xt_hashlimit: size too large, truncated to 1048576 [ 633.851725][T22917] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4387'. [ 633.902790][T22926] netlink: 'syz.3.4387': attribute type 7 has an invalid length. [ 633.945719][T22926] netlink: 'syz.3.4387': attribute type 8 has an invalid length. [ 633.950133][T22928] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 634.113519][T22938] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 634.491155][T22962] netlink: 'syz.2.4398': attribute type 5 has an invalid length. [ 634.527484][ T7363] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.553153][ T7363] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.578689][ T7363] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.608703][ T7363] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.739116][T22980] tipc: Can't bind to reserved service type 1 [ 634.834707][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 634.842778][ C1] lec:lec_tx_timeout: lec0 [ 635.075465][T22994] netlink: 'syz.2.4406': attribute type 1 has an invalid length. [ 635.433416][T23021] netlink: 'syz.0.4410': attribute type 2 has an invalid length. [ 635.441968][T23021] netlink: 'syz.0.4410': attribute type 1 has an invalid length. [ 635.463986][T23023] ipt_ECN: cannot use operation on non-tcp rule [ 635.983995][T23044] __nla_validate_parse: 7 callbacks suppressed [ 635.984016][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4417'. [ 636.039530][T23044] xfrm1: entered promiscuous mode [ 636.055867][T23005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.064629][T23047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4417'. [ 636.080019][T23044] xfrm1: entered allmulticast mode [ 636.236557][T23060] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 636.248397][T23060] bond5 (unregistering): Released all slaves [ 636.280261][T23057] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 636.290618][T23057] bond5 (unregistering): Released all slaves [ 636.402985][T23066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4421'. [ 637.360436][T23074] SET target dimension over the limit! [ 638.224504][T23022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.417884][T23091] netlink: 'syz.4.4428': attribute type 6 has an invalid length. [ 638.429869][T23093] netlink: 'syz.1.4431': attribute type 13 has an invalid length. [ 638.433979][T23096] netlink: 'syz.4.4428': attribute type 6 has an invalid length. [ 638.464932][T23093] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4431'. [ 638.474289][T23093] syz_tun: refused to change device tx_queue_len [ 638.517539][T23093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4431'. [ 638.616896][T23108] netlink: 'syz.4.4434': attribute type 8 has an invalid length. [ 638.620599][T23103] syzkaller0: entered promiscuous mode [ 638.626317][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 638.665843][T23103] syzkaller0: entered allmulticast mode [ 638.730907][T23110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4435'. [ 638.763515][T23113] netlink: 'syz.3.4436': attribute type 3 has an invalid length. [ 638.847285][T23113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4436'. [ 638.908209][T23123] netlink: 'syz.4.4439': attribute type 1 has an invalid length. [ 638.909993][T23124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4440'. [ 638.924983][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4439'. [ 639.000582][T23124] gtp0: entered promiscuous mode [ 639.015974][T23124] gtp0: entered allmulticast mode [ 639.081952][T23124] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 639.116969][T23124] bond0 (unregistering): Released all slaves [ 639.233138][T23110] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 639.271118][T23110] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 639.730456][T23181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 639.748556][T23174] bond0: left promiscuous mode [ 639.766824][T23181] macvlan2: entered promiscuous mode [ 639.772154][T23181] macvlan2: entered allmulticast mode [ 639.788523][T23181] bond2: entered allmulticast mode [ 639.793765][T23181] bond2: entered promiscuous mode [ 639.804531][T23181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 639.817549][T23181] team0: Port device macvlan2 added [ 639.830218][T23190] sit0: entered promiscuous mode [ 639.846629][T23190] validate_nla: 3 callbacks suppressed [ 639.846647][T23190] netlink: 'syz.1.4454': attribute type 1 has an invalid length. [ 639.883110][T23184] vxcan1 speed is unknown, defaulting to 1000 [ 640.060052][T23204] netlink: 'syz.4.4459': attribute type 1 has an invalid length. [ 640.070105][T23204] xt_nat: multiple ranges no longer supported [ 640.255925][T23229] netlink: 'syz.2.4464': attribute type 13 has an invalid length. [ 640.275369][T23229] netlink: 'syz.2.4464': attribute type 58 has an invalid length. [ 640.376805][T23226] bond6: entered promiscuous mode [ 640.382404][T23226] bond6: entered allmulticast mode [ 640.389184][T23226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 640.418740][T23234] atomic_op ffff88807bafc998 conn xmit_atomic 0000000000000000 [ 640.430047][T23234] veth0_to_hsr: mtu less than device minimum [ 640.452170][T23184] lo speed is unknown, defaulting to 1000 [ 640.757537][T23258] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 641.016303][T23274] __nla_validate_parse: 7 callbacks suppressed [ 641.016321][T23274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4481'. [ 641.040916][T23268] vxcan1 speed is unknown, defaulting to 1000 [ 641.097839][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 641.098851][T23279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.286298][T23286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4485'. [ 641.453915][T23297] [ 641.456287][T23297] ====================================================== [ 641.463309][T23297] WARNING: possible circular locking dependency detected [ 641.470343][T23297] syzkaller #0 Not tainted [ 641.474764][T23297] ------------------------------------------------------ [ 641.481786][T23297] syz.2.4487/23297 is trying to acquire lock: [ 641.487856][T23297] ffffffff8fd47a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 641.497033][T23297] [ 641.497033][T23297] but task is already holding lock: [ 641.504412][T23297] ffff888056a9c470 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 641.513677][T23297] [ 641.513677][T23297] which lock already depends on the new lock. [ 641.513677][T23297] [ 641.524096][T23297] [ 641.524096][T23297] the existing dependency chain (in reverse order) is: [ 641.533126][T23297] [ 641.533126][T23297] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 641.541146][T23297] _raw_spin_lock_bh+0x36/0x50 [ 641.546462][T23297] nr_rt_device_down+0x153/0x860 [ 641.551951][T23297] nr_device_event+0x137/0x150 [ 641.557267][T23297] notifier_call_chain+0x1be/0x400 [ 641.562927][T23297] __dev_notify_flags+0x16d/0x310 [ 641.568501][T23297] netif_change_flags+0xe8/0x1a0 [ 641.573999][T23297] dev_change_flags+0x130/0x260 [ 641.579422][T23297] dev_ioctl+0x7b4/0x1150 [ 641.584302][T23297] sock_do_ioctl+0x23e/0x320 [ 641.589426][T23297] sock_ioctl+0x5c6/0x7f0 [ 641.594294][T23297] __se_sys_ioctl+0xfc/0x170 [ 641.599433][T23297] do_syscall_64+0x14d/0xf80 [ 641.604579][T23297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.611025][T23297] [ 641.611025][T23297] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 641.618877][T23297] _raw_spin_lock_bh+0x36/0x50 [ 641.624188][T23297] nr_rt_device_down+0xbe/0x860 [ 641.629581][T23297] nr_device_event+0x137/0x150 [ 641.634890][T23297] notifier_call_chain+0x1be/0x400 [ 641.640552][T23297] __dev_notify_flags+0x16d/0x310 [ 641.646135][T23297] netif_change_flags+0xe8/0x1a0 [ 641.651979][T23297] dev_change_flags+0x130/0x260 [ 641.657407][T23297] dev_ioctl+0x7b4/0x1150 [ 641.662292][T23297] sock_do_ioctl+0x23e/0x320 [ 641.667438][T23297] sock_ioctl+0x5c6/0x7f0 [ 641.672315][T23297] __se_sys_ioctl+0xfc/0x170 [ 641.677443][T23297] do_syscall_64+0x14d/0xf80 [ 641.682578][T23297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.689001][T23297] [ 641.689001][T23297] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 641.696927][T23297] __lock_acquire+0x15a5/0x2cf0 [ 641.702297][T23297] lock_acquire+0xf0/0x2e0 [ 641.707224][T23297] _raw_spin_lock_bh+0x36/0x50 [ 641.712503][T23297] nr_del_node+0x57d/0xbb0 [ 641.717435][T23297] nr_rt_ioctl+0xb34/0xf90 [ 641.722367][T23297] sock_do_ioctl+0x101/0x320 [ 641.727467][T23297] sock_ioctl+0x5c6/0x7f0 [ 641.732300][T23297] __se_sys_ioctl+0xfc/0x170 [ 641.737394][T23297] do_syscall_64+0x14d/0xf80 [ 641.742499][T23297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.748896][T23297] [ 641.748896][T23297] other info that might help us debug this: [ 641.748896][T23297] [ 641.759109][T23297] Chain exists of: [ 641.759109][T23297] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 641.759109][T23297] [ 641.772926][T23297] Possible unsafe locking scenario: [ 641.772926][T23297] [ 641.780361][T23297] CPU0 CPU1 [ 641.785756][T23297] ---- ---- [ 641.791105][T23297] lock(&nr_node->node_lock); [ 641.795859][T23297] lock(nr_node_list_lock); [ 641.803042][T23297] lock(&nr_node->node_lock); [ 641.810327][T23297] lock(nr_neigh_list_lock); [ 641.815012][T23297] [ 641.815012][T23297] *** DEADLOCK *** [ 641.815012][T23297] [ 641.823155][T23297] 2 locks held by syz.2.4487/23297: [ 641.828341][T23297] #0: ffffffff8fd47ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 641.837832][T23297] #1: ffff888056a9c470 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 641.847489][T23297] [ 641.847489][T23297] stack backtrace: [ 641.853362][T23297] CPU: 1 UID: 0 PID: 23297 Comm: syz.2.4487 Not tainted syzkaller #0 PREEMPT(full) [ 641.853380][T23297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.853391][T23297] Call Trace: [ 641.853400][T23297] [ 641.853408][T23297] dump_stack_lvl+0xe8/0x150 [ 641.853431][T23297] print_circular_bug+0x2e1/0x300 [ 641.853457][T23297] check_noncircular+0x12e/0x150 [ 641.853481][T23297] __lock_acquire+0x15a5/0x2cf0 [ 641.853509][T23297] lock_acquire+0xf0/0x2e0 [ 641.853526][T23297] ? nr_del_node+0x57d/0xbb0 [ 641.853549][T23297] ? nr_del_node+0x247/0xbb0 [ 641.853573][T23297] ? nr_del_node+0x57d/0xbb0 [ 641.853595][T23297] _raw_spin_lock_bh+0x36/0x50 [ 641.853616][T23297] ? nr_del_node+0x57d/0xbb0 [ 641.853637][T23297] nr_del_node+0x57d/0xbb0 [ 641.853661][T23297] nr_rt_ioctl+0xb34/0xf90 [ 641.853687][T23297] ? kasan_quarantine_put+0xbb/0x1f0 [ 641.853702][T23297] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 641.853728][T23297] ? apparmor_capable+0x137/0x1a0 [ 641.853752][T23297] ? capable+0x88/0xe0 [ 641.853772][T23297] ? nr_ioctl+0x1b1/0x3b0 [ 641.853792][T23297] sock_do_ioctl+0x101/0x320 [ 641.853809][T23297] ? __pfx_sock_do_ioctl+0x10/0x10 [ 641.853829][T23297] sock_ioctl+0x5c6/0x7f0 [ 641.853844][T23297] ? __pfx_sock_ioctl+0x10/0x10 [ 641.853859][T23297] ? __fget_files+0x2a/0x420 [ 641.853880][T23297] ? __fget_files+0x3a0/0x420 [ 641.853900][T23297] ? __fget_files+0x2a/0x420 [ 641.853920][T23297] ? bpf_lsm_file_ioctl+0x9/0x20 [ 641.853939][T23297] ? __pfx_sock_ioctl+0x10/0x10 [ 641.853953][T23297] __se_sys_ioctl+0xfc/0x170 [ 641.853970][T23297] do_syscall_64+0x14d/0xf80 [ 641.853993][T23297] ? trace_irq_disable+0x3b/0x150 [ 641.854014][T23297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.854030][T23297] ? clear_bhb_loop+0x40/0x90 [ 641.854052][T23297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.854069][T23297] RIP: 0033:0x7f2a6079c629 [ 641.854084][T23297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.854098][T23297] RSP: 002b:00007f2a6164e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.854115][T23297] RAX: ffffffffffffffda RBX: 00007f2a60a16090 RCX: 00007f2a6079c629 [ 641.854126][T23297] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000006 [ 641.854137][T23297] RBP: 00007f2a60832b39 R08: 0000000000000000 R09: 0000000000000000 [ 641.854147][T23297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.854157][T23297] R13: 00007f2a60a16128 R14: 00007f2a60a16090 R15: 00007ffdb7317138 [ 641.854174][T23297] [ 642.114594][T23299] netlink: 'syz.2.4487': attribute type 1 has an invalid length. [ 642.145617][T23294] bond3: option resend_igmp: invalid value (32767) [ 642.152175][T23294] bond3: option resend_igmp: allowed values 0 - 255 [ 642.237189][T23294] bond3 (unregistering): Released all slaves [ 642.366415][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4488'. [ 642.426395][T23299] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 642.468081][T23268] lo speed is unknown, defaulting to 1000 [ 642.484502][T23305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.505947][T23305] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 642.517065][T23305] bond0: (slave gre0): Error -95 calling set_mac_address [ 642.569759][T23297] bond3: entered promiscuous mode [ 642.575769][ T1160] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 642.575848][T23297] bridge5: entered promiscuous mode [ 642.614963][T23297] bond3: entered allmulticast mode [ 642.632201][T23297] bridge5: entered allmulticast mode [ 642.649362][T23297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 642.683768][T23303] bridge6: entered promiscuous mode [ 642.695859][T23303] bridge6: entered allmulticast mode [ 642.705603][ T1095] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 642.723294][T23303] bond3: (slave bridge6): Enslaving as a backup interface with a down link