last executing test programs: 1m36.699474142s ago: executing program 4 (id=15045): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x4000, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006800012029bd7000fedbdf250000040010000000e4bf83"], 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x800) accept4(r0, 0x0, 0x0, 0x80800) 1m36.3638802s ago: executing program 2 (id=15048): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x20}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x20}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1m36.131747256s ago: executing program 1 (id=15052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 1m36.05493215s ago: executing program 0 (id=15053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x20040054) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x20040054) (async) 1m36.044949838s ago: executing program 2 (id=15054): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000040)=0x1, r0, &(0x7f0000000080)=0xffff, 0x80, 0x6) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00210009ffffffffffff"], 0x4c}}, 0x0) 1m35.96362518s ago: executing program 1 (id=15055): socket(0xa, 0x2400000001, 0x0) (async) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffe6d) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x2, @mcast1, 0x2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f00000000c0)=""/110, &(0x7f0000002280)=0x6e) 1m35.886334457s ago: executing program 1 (id=15057): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000300)=""/225, 0x0, 0xfffffffffffffd56, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r1], 0x48}}, 0x0) 1m35.868392739s ago: executing program 2 (id=15058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x18, &(0x7f0000000500)=@assoc_value, &(0x7f00000004c0)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="e9d73dfadf240180c200000000040000e3dd"], 0x0) bind$tipc(r2, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4, 0x1}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0xfffffd80) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001980)="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", 0x10e3}, {&(0x7f0000000400)="864deacde1b6ae994783f5f8f5a63aa56212d2c5c058b6b2bede5b", 0x1b}], 0x2}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000050000000008000100ac1e0101080002006401010108000300", @ANYRES32=r6], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @netrom}, [@remote, @default, @rose, @null, @rose, @rose, @rose, @default]}, &(0x7f00000000c0)=0x48, 0x800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000003800cd1e2efabf1756e84f7b6c0100720000000000000002000000009d941ec88f5481c566934d7d13bdd7"], 0x24}}, 0x0) 1m35.848517052s ago: executing program 3 (id=15059): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket(0x848000000015, 0x805, 0x0) (async) r4 = socket(0x848000000015, 0x805, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x8) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0xf8e0cd8684db7449, 0xc7, 0xd2, 0x5, 0x41, @mcast2, @mcast1, 0x80, 0x40, 0x40, 0x3}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xfc, r6, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x57}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000000000000000010000000000000004000200040001"], 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc68}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40881}, 0x4000001) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000000)=0xf) 1m35.775510403s ago: executing program 0 (id=15060): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffffc}) ioctl(r0, 0x8b26, &(0x7f0000000040)) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000080)) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000440)) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x64, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000004) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbb00bbbbbbaaaaaaaaaabb86dd6d0020000008110000000000000000000000000000000000ff06"], 0x42) 1m35.725947685s ago: executing program 1 (id=15061): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYRES16], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a3200000000140004800800024000000000080001"], 0x110}}, 0x40040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r3, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x7, &(0x7f0000000340)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r7, 0x0) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r8, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r6, 0x12, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=[0x8001, 0x611, 0x7ff, 0x7], &(0x7f0000000240)=[0x0, 0x5, 0x5], 0xf24, 0x4, 0x0, r8}}, 0x40) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) (async) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYRES16], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a3200000000140004800800024000000000080001"], 0x110}}, 0x40040) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r3, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x7, &(0x7f0000000340)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) shutdown(r7, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0) (async) syz_open_procfs$namespace(r8, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r6, 0x12, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=[0x8001, 0x611, 0x7ff, 0x7], &(0x7f0000000240)=[0x0, 0x5, 0x5], 0xf24, 0x4, 0x0, r8}}, 0x40) (async) 1m35.676312124s ago: executing program 2 (id=15062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000080010a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000000000000000000f100000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000900000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/91, 0x5b, 0x40000002, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000100)="520003000100b8", 0x7) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x4, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000080010a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000000000000000000f100000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000900000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/91, 0x5b, 0x40000002, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(0xffffffffffffffff, &(0x7f0000000100)="520003000100b8", 0x7) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x4, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) (async) 1m35.554925817s ago: executing program 3 (id=15063): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 1m35.542401881s ago: executing program 0 (id=15064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 64) r4 = socket$kcm(0x2, 0xa, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@remote, @remote, @val={@val, {0x8100, 0x5, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32) write$tun(r5, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @remote, 0x1}, 0x1c) (async, rerun: 64) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700100000004000400060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC], 0xffe) (rerun: 64) 1m35.440718667s ago: executing program 4 (id=15065): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt(r1, 0x84, 0x11, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) syz_emit_ethernet(0x42, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x10, 0x0, 0x0, 0xd0a, 0x2c, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000)=0x7, 0x4) 1m35.311017758s ago: executing program 3 (id=15066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_BUCKETS_LOG={0x0, 0x8, 0xf}]}}]}, 0x48}}, 0x20008000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) (async) write$nci(r3, &(0x7f0000000040)=@DATA={0x2, 0x1, 0x0, 0x0, 0x5, "2edf351b43af901916fb65523844cf0d4a7dc607b069b1af2be5a945bea44d46fd58ff63e23ab7097b5f62ffa222e2f8f2f6b009adee577afc47782a37e32aacfb8234f60a5f91d307ef7bac334492b7defdd15526d2bb37253c02d46f85415320f285af58680f77923ea518ef46e7010c026a1d90bc571ecf1e7271519097758cdf08249954dd6bfe91392c0ae1bfee326f80381dbd03858a80f0a0595ef54f0badd270474f6f01b981a7a7e89a4886afbd63031876de81ccca312cdd8cb8dcd9356c9614f9d4ef0231ccf8bae5bc532bb5f90a1e81700fae8330a8fec5f7aa60c4870d12585dc4b681"}, 0xed) 1m35.309740986s ago: executing program 1 (id=15067): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) 1m35.170960791s ago: executing program 2 (id=15068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0x12100, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x38}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r7, 0x8008b705, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x17, 0x66, 0xfcd66a900070b359}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="baadeee96e3e14000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f00000004c0)={0x7, 0x9, 0x4, 0x4, 0xc0, 0x40}, 0xc) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, 0x14, 0x65c28d33709e660d, 0x0, 0x0, {0x11, 0x36}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "91fabc0b03e55e3719"}]}, 0x24}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000040)) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000040)=0x6e) r11 = socket(0x10, 0x803, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendto$l2tp6(r11, &(0x7f00000000c0)="911f499edd2726f3cf0f47656149a81344768884a84ce240269cf6b338a7e1d818c637eb0edd9df712e209af3f109fd72937f96cc07094dbd8b5d0bcd655c6e1126d4be478432ba756343ae40de1a958d78683094c5b38b377c8c238461ba4583c780b317a63f14c97ebf0c42b2f0c0921ff5ec5d411222c641c3f652631da9c9163ea0ebc5787f1d3a4ce5838da85f9dea2ac97e70234a1ca59a027aa1a28b332229da5a1", 0xa5, 0x84, &(0x7f0000000000)={0xa, 0x0, 0xa4, @local, 0x5}, 0x20) 1m35.157422534s ago: executing program 3 (id=15069): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000000)="826bb683", 0x104, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m35.093919351s ago: executing program 4 (id=15070): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x3b, 0x5b, "4e6355c245717a3311427e64db9ff2a11a4d8478b2227042b273234c2147542e24af3ce1f04eec482949aa1b1d5ef6f29f67d6c1cba944"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004808) r1 = socket$inet6_sctp(0xa, 0x53f80c1e5c5fdeac, 0x84) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000180)=0x5d58b2fb, 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240)=0x30, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000280)=0xfffffe81, 0x4) getsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x4, 0x2000}, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x33, "00caf9073042cd8cbc57712561500b84d122aac7c72b46c30fdfac7ef5d4bed8a9f0fe171966c74ac47c9989a9027548fe515e"}, &(0x7f0000000440)=0x3b) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={r2, 0x0, 0x6}, 0x8) r3 = accept4$vsock_stream(r0, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000500)=0x3, 0x8) r4 = accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000580)=0x1c, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000005c0)={0x8, 0x224, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x400, [0x3, 0x100, 0x9, 0x2]}}, @generic={0x5, 0xb6, "623a8e0a3c345ca2a867dcf181d984da17690e73687f5ed604b021d3dc136fda4ca806f166c1399364c8a1905e7a07a5f194e5ca922a97d03ad0052066022bfe1bd2ffc044e7e1852af8d3d15501412f7079149fe6b24965327a9bd566bd605b9f6e1cfbe1a8e3325923f7cba7ee9e57aa058ff7f454a51d12e0ca65db758fd597a9cec2d2f11584bb9a1506c74165838ae44079bf7c379ac35e6149b53ed4a938faa5af51337d32c274457a1872f14324e29a59e0f0"}, @calipso={0x7, 0x40, {0x1, 0xe, 0xf6, 0x5, [0x0, 0x7, 0xbd, 0x7fffffffffffffff, 0x105a, 0xff, 0x9]}}, @generic={0x0, 0x1000, "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"}]}, 0x1130) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xa8, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "d53adef7bee42adb340ff3c5434bd181"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "de58a377106223bdff17d5333f"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008881}, 0x4000000) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000019c0)={r3, &(0x7f00000018c0)='\x02\x02\x02\x02\x02\x02', 0x800, &(0x7f0000001900)={@align=0x2, {0x93, 0xdb5a, 0x7fff, 0x7}}, 0x9, &(0x7f0000001940), &(0x7f0000001980)=0x3}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000001a00)={'icmp6\x00'}, &(0x7f0000001a40)=0x1e) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b00)={0x158, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001d00)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x5, 0x0, 0x3, 0xfff, 0xbb9c, 0x5}, {0x6, 0x7a, 0x40, 0x2, 0x8, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x5}, @device_b}}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000002040)={r0}, 0x8) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000002080), 0x4) sendto$packet(r8, &(0x7f00000020c0)="c0ec6566f218b16c4462dba8af85ee3aa550299100d70f81931adbe1f62cd6238ab9be2d77a2a1876669357ebe1ea2d5641ddc1c9b88984bacfc660bf0d19c51e299fbf9182ffeaca54afcbf88f5b81e89b0025fd09e9082e561b8bbab2b4f3b01e7bf075257f1fea715e826e60ca8a87525f16d215aa29969f235224cab55e2dcf6ed8f580efe92ce9542a8a6f8e59537d8d17c39ad9cdd0da7944370", 0x9d, 0x44844, &(0x7f0000002180)={0x11, 0x15, 0x0, 0x1, 0x4}, 0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000021c0)={r2, 0x4}, 0x8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002240), r8) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r9, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x40800) 1m35.093307733s ago: executing program 1 (id=15071): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) listen(0xffffffffffffffff, 0x8) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000c80)="cc68fbd4b7", 0x5, 0x20008004, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f00000000c0)=@l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x2}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="0691bc30f0d638140c3305f958877fc676a52d9318b00771c4e036a8cecbb67d47977aeb18f5fe1f63aaad769978c799a795aa5e0d6f60aaf35deb2046cbe32a9594799e1fd11e01a3b2d19e2beb06b47561277b378b51717f1b979492b2dabeeb7faa340dbc0954f0d4b103a1ecd87c3714f8759203c0365148d92937e7cf5450c60fda1b2b3c4924ccde6958e56ea9f0f54eda0e0fb4cd563001b4dd107a4bc38409f5ae33cce50d3f321b776e21effd0f927f70b330176399913c2ddc34cf66f9aa252cbe9a863f66fa6c7a0db3b0ac646af20021765f6a2c406783724564afd873debcf228cd2a65", 0xea}, {&(0x7f00000001c0)="19fe14ee4df62124860909e23a563069e4c8398c7b3df6e1cd6239626b2115e9b47dc97b0abe5e3f8562cb64c0b1d598ae8d7a897c259e8d100474da355d2c9ecf39e24815ed28acf7c807367af581de49b9934317746e4785653595c2e162", 0x5f}, {&(0x7f00000003c0)="20fd600707eb", 0x6}, {&(0x7f0000000480)="8165d6ae68022ba9cfb768b7fead502794098ec2787eff8296ab8cbeb7e9ce40ca488503c5cafaeb973ba6c03e977b6ca62bb5bedc2787dc640e38793592f632adcedf964b3332a7acbf1fea66a08bf79602604695fbceceea7a7f121ccfeecb673cc69607c796a78f921272f22672d354a6399508e98b7a62d63d7ffc6b844f88cd47e3bc7f29b120acf9e4e5ff23999356cfc629cc40efd4d5dd575bba96ffa341ebd85452a0e504f669ecf0aff541417ba69f6ab14aa5978ce2e18a734422a901ed2f349ef2a53311f01e0383237c18620fd354", 0xd5}, {&(0x7f0000000640)="9d13eb541052bad4faa0e368cab379ce416304b969216303a97f42cc506eec0a0dadd014ea768ed2660c44664f79c00db2b990f7dd24899408865f2f36e8c8a14efd4a8067061e1408cab25d8d2ffb461a1197a5b3b50831eb78be1f7b8d63a280419ab32f9e426eca924bfc8abf511d70deac574a539399e47f6d0b8152e8a809d43a5775b8120b122d97f3f870bab94d95af8cce2524df9f193f6883df43cdbb8708a475b25dc41b2dd0707dd83ddb4171b158aa38", 0xb6}], 0x5, &(0x7f0000000840)=[{0xe8, 0x15c, 0x5, "a4180474ddcb8c8b279fa43fd65d634775429df49775d99f20c759dad2b7d47b9f80b19e41b20ea024f98388a46d683de74e9f0a9e04f13f79e38ea958c99345999e0c8f10f2a7463920e4393af14281c8c7671c38852940732a463dffafacb118a879854aa4b1e14daff13d88222d1bcc433c177017d07d40efed54ba5cf7ddc362521e739bd7916c7af84965f7512cc611445c0739449c7cbc3face1f99d693520a7baf5b0e13895d3d730acf4b7d290e04f7d77e698cbd22815ffbb2dd50dadfbb75f718b3904c6e0a615a0f00f71f8f25065da53"}, {0xe0, 0x84, 0x8, "db096148463cf01f04efd1ecac9805b4a2e979ebe6eaa06a6377fbfd83d3fbd3d5d9c559eda87f90637c2adba0a8a472037ef3efe75c7af207e0056d642ade1dd22f0609680011f31bff1468bfbd0619e288dcc0ae7a24738251d0882ae766986f4b0382e9f1631377e5781ff360868873e16d684d62dd38c4252513459521aecc5e852476d836b46cc1e49f1a5dfbbe3f06672c2e24266f59f22ab856cc0e72764e078f1a53a0bc0750648db032397aff650ac8ac2a4b4075992ccdc105a59553a861c1a365ff7f66bfee"}, {0xb0, 0x88, 0x6, "58c7673ae475134430939d92090e6fc3bc5466319b5eeb63bed54f49b4a9f2f33f23dae871c7fe7e3e6c3f0d62fc7f071c7ece5167e644979296204c1da41578e47f5fea963bce766ce922248196d0353a7e3a4fe2e4067fd5bba3dca9131dcea5ba8aa290131dd410625ec0992e80be0d805a92201f6ef0446eacd85a38ab7f1b5dd50f49cf84e698fae25a5439356be730cd8fe98871515510"}, {0x10, 0x11, 0xd}, {0x18, 0x116, 0xffff, "8277"}, {0xa8, 0x112, 0x0, "9f8f8f3e79b81ab9ddac5d80b876cc531ea9f7fe6093f63d1bad7c1552f9cf94362f66601af8d24ad045091057b10fe54b2f7ab08a6f4f8acc0db18b2d8a01169045bd656f9a5e62b4cfc478fa3bebe808b8a4c306a32e1073cfb40321deec03ab42bbebf856c82720276ebd50818460ba1c234e68192b4450b19c149b401c83d9be7b336184aeccb33eda41cd864e0db8568f968bf2"}, {0xa8, 0x1, 0x1000, "390b0fba142cd073034e354c219585619f4381228ecd03b3c39bec94f65b737082b73c25a16e1049b53aa27ee8703b62c5e0357c1deb4c9dccd43f1f1f0b5293448be70b454d28e6590537c0b4f613215808e890cd9a0a7d09f04093556e6709637d07e8b238d8a9efaa6d3c5fd68abb8fa3a7397521d3bf34394167f1f0c7a1fac8868b7a5dd68bf980983ceb32a8ae14de7f"}, {0x30, 0x6, 0xa2, "0f559fc3cf047138986b37b0a36338cbfc07a10589f75a20f3d52ca42960"}], 0x420}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f0000010000000000000000000000000000000000000000000000000000000000000404040000000a0060803b000000", @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='macvlan0\x00', 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f071fff000100000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1m34.94390148s ago: executing program 3 (id=15072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="e328029b4392c0a0392b881c00000002030300edff100000000000000000000800010001000000"], 0x1c}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="169381", 0x3}], 0x1}}], 0x1, 0x48c4) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x20}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x453, 0x2, 0x70bd2d, 0x25dfdbfd, "3e6fa3ab40ff7259a1cbcbc6b853ef467dfc23721293dddcb4ff6e110f5466454479cd64479ee23e65c9e5434065693b9f78fd229d0ca3ea244196ef3a230af61e07128e068e3126939bdc5b0298e6e1a248f5671d1a877d11a3d441c4a61cae17", ["", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 1m34.943740714s ago: executing program 0 (id=15073): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m34.848234466s ago: executing program 4 (id=15074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, {0xa, 0x4e21, 0x0, @loopback, 0xfff}, 0xffffffffffffffff, {[0x1, 0x1db, 0x33, 0x8, 0xffffff56, 0x7, 0x6, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x2000}, 0x5c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100000000000200000000000000", @ANYRES32=r1, @ANYBLOB="408f010008200200280012800e00010069703667726574617000000014000280060011e64d24000006001000"], 0x48}}, 0x0) 1m34.725419444s ago: executing program 0 (id=15075): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$802154_dgram(r1, &(0x7f0000001200)={&(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000011c0)={&(0x7f0000001080)="2c25c6741ed7954d4f4b6f4c5f53238f9be8ed00caaaa675aa54a6f64eb3b239ac469ad5abca8d4e586e9785b4321c074a543dd23bad1b957f6c6bf70b6db1d2172f810533c7ad8f8efc741423c2924a2d78b932f18d47b334a33a406f878d815dc26d4ca8fa3dfe87c568af8d24da4d48fae0cb483c91dcf8bc3e21ba1b0982ee19a7e49c3ce6d726e69f862a5acd7b2dede00e551ba5a0bdc39801740b5437c263f2eb02970b3c8c5126e45fbccc326605c2f363ad34f44231cde80cf789655ea142470bb1596a54573bfe0a86f9f4933e88035082f591d150ccf26eb06fc631cccf04", 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES64=0x0, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) 1m34.646443137s ago: executing program 3 (id=15076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x125}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffcddb}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a7}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fdcb127}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x914b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd398}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e81699a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad1f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x265de6b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb515}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19d71d66}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x101a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x827e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48277099}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45f92cb7}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x140001}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x24}}, 0x20008000) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000580)={{0x2f, @empty, 0x4e21, 0x1, 'lblcr\x00', 0x21, 0x9e9, 0x51}, {@empty, 0x4e20, 0x3, 0x8, 0x9, 0x5}}, 0x44) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008080}, 0x48085) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r5, r4, 0x0, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r7, &(0x7f0000000940)="6ce796cf216b47adba01ee8e0dd7bdf4b56adbe4d64eefa5", &(0x7f0000000980)=@udp6=r4}, 0x20) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r9, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004801) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000e40)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c010) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000f00)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x8010) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r7) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, r13, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x24044880) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1m34.550951304s ago: executing program 4 (id=15077): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c9"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) (async) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x0, 0x2c8, 0xffffffff, 0x0, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'fsm\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x29}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r9, 0xd7735000) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1m34.44908462s ago: executing program 2 (id=15078): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) (async, rerun: 32) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f00000000c0)) 1m34.294779677s ago: executing program 0 (id=15079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd51", 0x2, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1m34.238811343s ago: executing program 4 (id=15080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) unshare(0x2000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x9, 0x2, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x2, 0x12, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x6, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044044}, 0x8000) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r4, 0xfffff000) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 32 (id=15079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd51", 0x2, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) kernel console output (not intermixed with test programs): W filter on device team0 [ 1298.228870][ T9796] Bluetooth: hci0: command tx timeout [ 1298.237395][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.244816][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.323719][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.330978][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.358238][T21926] netlink: 'syz.0.12749': attribute type 24 has an invalid length. [ 1298.472677][T21930] sit0: entered promiscuous mode [ 1298.512708][T21930] netlink: 'syz.1.12750': attribute type 1 has an invalid length. [ 1298.921666][T21950] __nla_validate_parse: 6 callbacks suppressed [ 1298.921698][T21950] netlink: 216 bytes leftover after parsing attributes in process `syz.0.12756'. [ 1299.137508][T21962] netlink: 'syz.0.12760': attribute type 4 has an invalid length. [ 1299.140243][T21968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12762'. [ 1299.165481][T21555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.170539][T21969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12762'. [ 1299.339375][T21555] veth0_vlan: entered promiscuous mode [ 1299.390623][T21555] veth1_vlan: entered promiscuous mode [ 1299.441705][T21973] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12763'. [ 1299.478718][T21973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1299.596098][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12766'. [ 1299.727289][T21555] veth0_macvtap: entered promiscuous mode [ 1299.852493][T21555] veth1_macvtap: entered promiscuous mode [ 1299.935070][T21555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.959076][T22007] netlink: 'syz.0.12771': attribute type 9 has an invalid length. [ 1299.966954][T22007] netlink: 'syz.0.12771': attribute type 11 has an invalid length. [ 1299.972495][T21555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.020898][T22007] netlink: 'syz.0.12771': attribute type 12 has an invalid length. [ 1300.025203][T22010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12772'. [ 1300.050387][T19832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.057293][T22007] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.12771'. [ 1300.069022][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 1300.069055][ C0] lec:lec_tx_timeout: lec0 [ 1300.072377][T19832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.078541][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1300.105523][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12771'. [ 1300.127474][T22017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12774'. [ 1300.140466][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12772'. [ 1300.186882][T19832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.198823][T19832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.393505][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.420422][T19832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.426823][T22028] IPVS: set_ctl: invalid protocol: 47 172.20.20.31:20000 [ 1300.451613][T19832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.567160][T19838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.584137][T19838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.920094][T22049] openvswitch: netlink: IP tunnel dst address not specified [ 1301.020297][T22062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.076783][T22065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.417049][T22068] netlink: 'syz.3.12786': attribute type 9 has an invalid length. [ 1302.906981][T22151] netlink: 'syz.1.12802': attribute type 12 has an invalid length. [ 1304.050456][T22250] sch_fq: defrate 0 ignored. [ 1304.282915][T22269] __nla_validate_parse: 11 callbacks suppressed [ 1304.282939][T22269] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12822'. [ 1304.290434][T22266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1304.348712][T22269] netlink: 320 bytes leftover after parsing attributes in process `syz.3.12822'. [ 1304.651663][T22284] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1304.668001][T10362] IPVS: starting estimator thread 0... [ 1304.773898][T22294] netlink: 'syz.3.12827': attribute type 1 has an invalid length. [ 1304.788395][T22285] IPVS: using max 25 ests per chain, 60000 per kthread [ 1304.806542][T22294] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12827'. [ 1305.108300][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1305.116475][ C0] lec:lec_tx_timeout: lec0 [ 1305.121742][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1305.353613][T22321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12834'. [ 1305.392447][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12834'. [ 1305.425816][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12834'. [ 1305.466083][T22322] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1305.483275][T22322] bond3 (unregistering): Released all slaves [ 1305.525357][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12835'. [ 1305.651248][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12838'. [ 1305.660831][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12838'. [ 1305.954588][T22359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12845'. [ 1306.196979][T22376] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1306.209534][T22376] bond1 (unregistering): Released all slaves [ 1306.530953][T22388] syzkaller0: entered promiscuous mode [ 1306.555399][T22388] syzkaller0: entered allmulticast mode [ 1306.967636][T22413] tipc: Enabling of bearer rejected, already enabled [ 1306.991706][T22412] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1307.221575][T22428] IPv6: Can't replace route, no match found [ 1307.373077][T22230] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.418517][T22230] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.427308][T22230] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.456997][T22230] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.952914][T22464] sctp: [Deprecated]: syz.4.12878 (pid 22464) Use of int in max_burst socket option deprecated. [ 1307.952914][T22464] Use struct sctp_assoc_value instead [ 1308.010109][T22472] netlink: 'syz.2.12877': attribute type 8 has an invalid length. [ 1308.033626][T22472] bond0: entered promiscuous mode [ 1308.091208][T22472] bond_slave_0: entered promiscuous mode [ 1308.111232][T22472] bond_slave_1: entered promiscuous mode [ 1308.130298][T22472] gretap0: entered promiscuous mode [ 1308.153840][T22472] bond0: left promiscuous mode [ 1308.159639][T22472] bond_slave_0: left promiscuous mode [ 1308.171168][T22472] bond_slave_1: left promiscuous mode [ 1308.189892][T22472] gretap0: left promiscuous mode [ 1308.273359][T22494] openvswitch: netlink: IP tunnel dst address not specified [ 1308.786609][T22468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1309.252470][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1309.277741][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1309.316749][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1309.573781][T22553] Bluetooth: MGMT ver 1.23 [ 1309.598835][T22553] "syz.4.12903" (22553) uses obsolete ecb(arc4) skcipher [ 1309.652423][ T5826] IPVS: starting estimator thread 0... [ 1309.727512][T22562] openvswitch: netlink: Actions may not be safe on all matching packets [ 1309.748365][T22559] IPVS: using max 24 ests per chain, 57600 per kthread [ 1309.916680][T22571] netlink: 'syz.1.12907': attribute type 1 has an invalid length. [ 1309.936529][T22530] infiniband syz2: set active [ 1309.943215][T22530] infiniband syz2: added vxcan1 [ 1309.981691][T22577] netlink: 'syz.1.12907': attribute type 28 has an invalid length. [ 1309.992809][T22577] netlink: 'syz.1.12907': attribute type 3 has an invalid length. [ 1310.010239][T22577] __nla_validate_parse: 9 callbacks suppressed [ 1310.010260][T22577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12907'. [ 1310.035112][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12907'. [ 1310.074369][T22530] RDS/IB: syz2: added [ 1310.079471][T22530] smc: adding ib device syz2 with port count 1 [ 1310.088227][T22530] smc: ib device syz2 port 1 has no pnetid [ 1310.101186][T22571] bond3: entered promiscuous mode [ 1310.106662][T22571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1310.124140][T10362] vxcan1 speed is unknown, defaulting to 1000 [ 1310.130476][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1310.130504][ C0] lec:lec_tx_timeout: lec0 [ 1310.139472][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1310.144281][T22571] bond3: (slave bridge3): making interface the new active one [ 1310.187919][T22571] bridge3: entered promiscuous mode [ 1310.194223][T22571] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1310.204387][T14322] vxcan1 speed is unknown, defaulting to 1000 [ 1310.212758][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1310.374688][T22592] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12912'. [ 1310.663285][T22602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12915'. [ 1310.799188][T22612] syzkaller0: entered promiscuous mode [ 1310.815005][T22612] syzkaller0: entered allmulticast mode [ 1310.846883][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1310.940215][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12920'. [ 1310.975613][T22616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12919'. [ 1311.042839][T22621] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12921'. [ 1311.450394][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1311.452214][T22640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12926'. [ 1311.466519][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12926'. [ 1311.480065][T22639] ve: renamed from macvlan0 (while UP) [ 1311.701547][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12930'. [ 1311.753114][T22652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.903608][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1312.562454][T22683] syzkaller1: entered promiscuous mode [ 1312.571751][T22683] syzkaller1: entered allmulticast mode [ 1312.589739][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1313.404561][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1313.575448][T22708] netlink: 'syz.1.12941': attribute type 29 has an invalid length. [ 1313.750000][T22711] netlink: set zone limit has 4 unknown bytes [ 1313.888976][T22719] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1313.890401][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1313.909985][T22720] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1314.416011][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1314.638925][T22731] syzkaller1: entered promiscuous mode [ 1314.644458][T22731] syzkaller1: entered allmulticast mode [ 1314.847718][T22745] netlink: 'syz.2.12954': attribute type 3 has an invalid length. [ 1314.905832][T22752] xt_l2tp: v2 doesn't support IP mode [ 1314.974131][T22750] wlan0 speed is unknown, defaulting to 1000 [ 1314.976926][T22530] vxcan1 speed is unknown, defaulting to 1000 [ 1315.125051][T22759] __nla_validate_parse: 6 callbacks suppressed [ 1315.125076][T22759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12959'. [ 1315.147927][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1315.155970][ C0] lec:lec_tx_timeout: lec0 [ 1315.161713][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1315.191614][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12960'. [ 1315.335923][T22750] vxcan1 speed is unknown, defaulting to 1000 [ 1315.770741][T22776] netlink: 'syz.0.12964': attribute type 1 has an invalid length. [ 1315.798017][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12964'. [ 1315.822115][T22781] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12966'. [ 1316.866483][T22811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12974'. [ 1317.193741][T22822] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12978'. [ 1317.242234][T22822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12978'. [ 1317.410088][T22825] bond1: entered promiscuous mode [ 1317.422212][T22825] bond1: entered allmulticast mode [ 1317.440369][T22825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1317.492706][T22837] bridge0: port 1(bond0) entered blocking state [ 1317.524484][T22837] bridge0: port 1(bond0) entered disabled state [ 1317.565422][T22837] bond0: entered allmulticast mode [ 1317.584419][T22837] bond0: entered promiscuous mode [ 1317.980461][T22866] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1318.159051][T22876] IPVS: Error connecting to the multicast addr [ 1318.214931][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12993'. [ 1318.230756][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12993'. [ 1318.283457][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12992'. [ 1318.384419][T22888] bond4: Invalid ad_actor_system MAC address. [ 1318.393280][T22888] bond4: option ad_actor_system: invalid value (1) [ 1318.423237][T22888] bond4 (unregistering): Released all slaves [ 1318.503843][T22901] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1318.892639][T22921] xt_hashlimit: size too large, truncated to 1048576 [ 1319.118966][T22939] netlink: 'syz.2.13012': attribute type 1 has an invalid length. [ 1319.138207][T22939] netlink: 'syz.2.13012': attribute type 1 has an invalid length. [ 1319.338260][T10362] vxcan1 speed is unknown, defaulting to 1000 [ 1319.407740][T22935] syzkaller0: entered promiscuous mode [ 1319.415907][T22935] syzkaller0: entered allmulticast mode [ 1319.432779][T22953] IPv6: sit2: Disabled Multicast RS [ 1319.440749][T22953] sit2: entered allmulticast mode [ 1319.922283][T22977] netlink: 'syz.2.13025': attribute type 1 has an invalid length. [ 1319.993141][T22979] netlink: 'syz.2.13025': attribute type 1 has an invalid length. [ 1320.154158][T22989] netlink: 'syz.4.13027': attribute type 12 has an invalid length. [ 1320.167897][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1320.176444][ C0] lec:lec_tx_timeout: lec0 [ 1320.181727][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1320.250198][T22989] bond2: option primary_reselect: invalid value (255) [ 1320.259102][T22992] __nla_validate_parse: 7 callbacks suppressed [ 1320.259122][T22992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13029'. [ 1320.280409][T22989] bond2 (unregistering): Released all slaves [ 1320.298967][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13030'. [ 1320.313822][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13030'. [ 1320.332341][T22997] netlink: 'syz.1.13030': attribute type 30 has an invalid length. [ 1320.356995][T22996] netlink: 'syz.1.13030': attribute type 30 has an invalid length. [ 1320.358987][T22993] netlink: 'syz.0.13029': attribute type 1 has an invalid length. [ 1320.406120][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13029'. [ 1320.417076][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13029'. [ 1320.508739][T23010] netlink: 'syz.1.13032': attribute type 2 has an invalid length. [ 1320.547659][T23010] netlink: 'syz.1.13032': attribute type 11 has an invalid length. [ 1320.564582][T23010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13032'. [ 1320.792392][T23031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13038'. [ 1320.852846][T23035] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13040'. [ 1320.883583][T23038] syzkaller0: entered promiscuous mode [ 1320.898382][T23038] syzkaller0: entered allmulticast mode [ 1320.917432][T23043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13039'. [ 1321.056024][T10362] IPVS: starting estimator thread 0... [ 1321.157970][T23052] IPVS: using max 26 ests per chain, 62400 per kthread [ 1321.184994][T23057] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13045'. [ 1321.268727][T23062] erspan1: entered allmulticast mode [ 1321.883638][T23091] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1322.451936][T23136] xt_hashlimit: size too large, truncated to 1048576 [ 1323.286580][T23178] x_tables: duplicate underflow at hook 2 [ 1323.637028][T23184] +: renamed from syzkaller0 [ 1323.830073][ T9796] Bluetooth: hci0: command 0x0405 tx timeout [ 1325.188508][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1325.196755][ C0] lec:lec_tx_timeout: lec0 [ 1325.201920][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1325.331819][T23145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1325.355510][T23191] validate_nla: 10 callbacks suppressed [ 1325.355537][T23191] netlink: 'syz.1.13080': attribute type 1 has an invalid length. [ 1325.717495][T23220] netlink: 'syz.3.13088': attribute type 13 has an invalid length. [ 1325.748729][T23220] gretap0: refused to change device tx_queue_len [ 1325.773597][T23220] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1325.825858][T23229] netlink: 'syz.2.13092': attribute type 1 has an invalid length. [ 1325.836446][T23232] __nla_validate_parse: 9 callbacks suppressed [ 1325.836469][T23232] netlink: 812 bytes leftover after parsing attributes in process `syz.0.13093'. [ 1325.892063][T23232] openvswitch: netlink: Flow key attr not present in new flow. [ 1325.923856][T23232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13093'. [ 1325.939658][T23240] netlink: 'syz.4.13095': attribute type 8 has an invalid length. [ 1325.966577][T23242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13096'. [ 1326.005384][T23244] netlink: 'syz.4.13095': attribute type 8 has an invalid length. [ 1326.037581][T23240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13095'. [ 1326.083129][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13094'. [ 1326.138893][T23252] netlink: 'syz.0.13098': attribute type 1 has an invalid length. [ 1326.161717][T23243] xt_CT: No such helper "pptp" [ 1326.282399][T23259] tipc: Enabled bearer , priority 10 [ 1326.736144][T23238] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1326.780998][T23274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1326.878553][T23273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1326.946103][T23284] syz_tun: entered promiscuous mode [ 1327.178797][T23294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13110'. [ 1327.202419][T23294] : entered promiscuous mode [ 1327.335478][T23301] netlink: 'syz.1.13114': attribute type 1 has an invalid length. [ 1327.343772][T23301] netlink: 280 bytes leftover after parsing attributes in process `syz.1.13114'. [ 1327.483006][T23277] syz_tun: left promiscuous mode [ 1327.582999][T23304] syzkaller0: entered promiscuous mode [ 1327.601676][T23304] syzkaller0: entered allmulticast mode [ 1327.619556][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13117'. [ 1327.637990][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13117'. [ 1327.816184][T23314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13118'. [ 1328.392577][T23341] bond2: entered promiscuous mode [ 1328.428748][T23341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1328.515100][T23341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1328.523421][T23341] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1328.559462][T23341] bond2: (slave sit1): Error -95 calling set_mac_address [ 1328.877629][T23368] syzkaller1: entered promiscuous mode [ 1328.897626][T23368] syzkaller1: entered allmulticast mode [ 1329.797634][T23404] netlink: 'syz.2.13138': attribute type 2 has an invalid length. [ 1329.980561][T23416] netlink: 'syz.4.13143': attribute type 1 has an invalid length. [ 1330.039399][T23418] syzkaller1: entered promiscuous mode [ 1330.058065][T23418] syzkaller1: entered allmulticast mode [ 1330.218202][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1330.226443][ C0] lec:lec_tx_timeout: lec0 [ 1330.232623][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1330.270880][T23427] syzkaller0: entered promiscuous mode [ 1330.276680][T23427] syzkaller0: entered allmulticast mode [ 1330.740275][T23446] Cannot find add_set index 0 as target [ 1331.017503][T23463] __nla_validate_parse: 12 callbacks suppressed [ 1331.017526][T23463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13157'. [ 1331.162546][T23467] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1331.290443][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13159'. [ 1331.365636][T23479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13162'. [ 1331.710243][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13167'. [ 1331.749554][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13167'. [ 1331.802563][T23501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13169'. [ 1331.823038][T23506] netlink: 'syz.3.13170': attribute type 6 has an invalid length. [ 1331.829224][T23501] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1332.018451][T23516] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13173'. [ 1332.060532][T23513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13171'. [ 1332.071270][T23513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13171'. [ 1332.244168][T23526] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13177'. [ 1332.432432][T23537] netlink: 'syz.4.13179': attribute type 32 has an invalid length. [ 1332.543147][T23537] bond3: Setting coupled_control to off (0) [ 1332.588267][T23549] netlink: 'syz.2.13184': attribute type 1 has an invalid length. [ 1332.597047][T23552] x_tables: duplicate entry at hook 1 [ 1332.597400][T23542] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1332.617521][T23542] bond2 (unregistering): Released all slaves [ 1332.676330][T23549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1332.729399][T23553] bond5: (slave gretap1): making interface the new active one [ 1332.739922][T23553] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1333.099797][T23576] netlink: 'syz.1.13189': attribute type 10 has an invalid length. [ 1333.813094][T23631] netlink: 'syz.0.13204': attribute type 2 has an invalid length. [ 1334.091576][T23643] netlink: 'syz.0.13206': attribute type 4 has an invalid length. [ 1334.240014][T23658] x_tables: duplicate underflow at hook 1 [ 1334.664025][T23681] wlan0 speed is unknown, defaulting to 1000 [ 1334.687643][T23681] vxcan1 speed is unknown, defaulting to 1000 [ 1334.916305][T23698] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 1335.247946][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1335.256083][ C0] lec:lec_tx_timeout: lec0 [ 1335.261188][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1335.396289][T23719] bond0: entered promiscuous mode [ 1335.415234][T23719] bond_slave_0: entered promiscuous mode [ 1335.421638][T23719] bond_slave_1: entered promiscuous mode [ 1335.428239][T23719] batadv0: entered promiscuous mode [ 1335.468207][T23719] bond0: left promiscuous mode [ 1335.473041][T23719] bond_slave_0: left promiscuous mode [ 1335.479653][T23719] bond_slave_1: left promiscuous mode [ 1335.485364][T23719] batadv0: left promiscuous mode [ 1335.693090][T23733] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1335.721316][T23733] netem: change failed [ 1336.035309][T23754] __nla_validate_parse: 15 callbacks suppressed [ 1336.035333][T23754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13243'. [ 1336.393383][T23758] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1336.401604][T23772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13249'. [ 1336.635853][T23793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13258'. [ 1336.712378][T23793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13258'. [ 1336.823098][T23803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13261'. [ 1336.862925][T23803] netlink: 'syz.0.13261': attribute type 1 has an invalid length. [ 1336.882376][T23803] netlink: 'syz.0.13261': attribute type 2 has an invalid length. [ 1337.375518][T23833] veth3: entered allmulticast mode [ 1337.530074][T23843] tipc: Resetting bearer [ 1337.536318][T23843] tipc: Resetting bearer [ 1337.622531][T23847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13270'. [ 1337.841498][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13274'. [ 1337.895088][T23864] netlink: 'syz.1.13274': attribute type 1 has an invalid length. [ 1337.964991][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13276'. [ 1338.012292][T23867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13276'. [ 1338.280836][T23890] netlink: 'syz.1.13283': attribute type 10 has an invalid length. [ 1338.292759][T23890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13283'. [ 1338.333575][T23892] xfrm1: entered promiscuous mode [ 1338.354592][T23892] xfrm1: entered allmulticast mode [ 1338.386297][T23896] syzkaller1: entered promiscuous mode [ 1338.392366][T23896] syzkaller1: entered allmulticast mode [ 1338.524813][T23898] macvtap3: entered allmulticast mode [ 1338.537466][T23900] netlink: 'syz.4.13287': attribute type 1 has an invalid length. [ 1338.990740][T23933] netlink: 'syz.0.13295': attribute type 15 has an invalid length. [ 1339.016224][T23932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1339.035535][T23923] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1339.260490][T23944] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 1339.433974][T23959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.026699][T23984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.211636][T23993] netlink: ct family unspecified [ 1340.267936][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1340.276010][ C0] lec:lec_tx_timeout: lec0 [ 1340.280729][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1340.297259][T23995] netlink: 'syz.2.13314': attribute type 3 has an invalid length. [ 1340.439980][T24004] netlink: 'syz.3.13315': attribute type 25 has an invalid length. [ 1340.450540][T24004] netlink: 'syz.3.13315': attribute type 9 has an invalid length. [ 1340.488002][ T30] audit: type=1107 audit(1773810191.167:17): pid=24005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='bÊTèÇYÑh;_϶ëõÍîuz6¤ò;íš6þ©--J«ïƒä< ÍÌøÛ†›È* %jf­5NzÖÐ&&p=â ¾k}½Ç˜6CɹɼҒ–ÒŸEáÌŒ¯||!A#G”*DHm£âIÐÎÂ) [ 1340.488002][ T30] <[ÐXíž' [ 1340.693344][T24020] erspan0: entered allmulticast mode [ 1340.800136][T24027] x_tables: unsorted underflow at hook 1 [ 1340.961629][T24039] netlink: 'syz.3.13325': attribute type 21 has an invalid length. [ 1341.078958][T24048] __nla_validate_parse: 14 callbacks suppressed [ 1341.078980][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13330'. [ 1341.097594][T24048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13330'. [ 1341.169832][T22224] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.202345][T22224] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.231476][T22224] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.246241][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13333'. [ 1341.250623][T22224] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.330594][T24056] vlan2: entered allmulticast mode [ 1341.354160][T24056] hsr0: entered allmulticast mode [ 1341.370017][T24056] hsr_slave_0: entered allmulticast mode [ 1341.388795][T24056] hsr_slave_1: entered allmulticast mode [ 1341.539745][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13336'. [ 1341.581444][T22228] smc: removing ib device syz2 [ 1342.182254][ T5826] vxcan1 speed is unknown, defaulting to 1000 [ 1342.189348][ T5826] syz2: Port: 1 Link DOWN [ 1342.513233][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13344'. [ 1342.566173][T24101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13344'. [ 1342.609054][T24101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13344'. [ 1342.632522][T24095] hsr_slave_0: left promiscuous mode [ 1342.642320][T24104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13346'. [ 1342.660573][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13346'. [ 1342.670129][T24095] hsr_slave_1: left promiscuous mode [ 1342.923430][T24108] netlink: 'syz.2.13347': attribute type 12 has an invalid length. [ 1342.954760][T24108] netlink: 'syz.2.13347': attribute type 29 has an invalid length. [ 1342.996955][T24108] netlink: 'syz.2.13347': attribute type 2 has an invalid length. [ 1343.017405][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13348'. [ 1343.407179][T24128] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 1343.443512][T24130] IPv6: NLM_F_CREATE should be specified when creating new route [ 1343.682168][T24138] wireguard0: entered promiscuous mode [ 1343.773872][T24138] team0: Device wireguard0 is of different type [ 1344.179260][T24154] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1344.882752][T24175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1344.908306][T24175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.985684][T24182] netlink: 'syz.1.13369': attribute type 1 has an invalid length. [ 1345.107400][T24182] bond4: entered promiscuous mode [ 1345.114121][T24182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1345.209706][T24175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.220591][T24175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.366878][T24175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.379988][T24175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.592507][T24175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.633825][T24175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.709801][T24212] netlink: 'syz.0.13378': attribute type 21 has an invalid length. [ 1345.714218][T24213] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1345.834645][T22230] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.854019][T22230] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.907619][T22230] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.936821][T22230] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.971690][T24226] netlink: Conntrack attr has 4 unknown bytes [ 1345.997026][T24220] tipc: Resetting bearer [ 1346.006510][T24220] tipc: Resetting bearer [ 1346.055654][T22230] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.067875][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 1346.075972][ C0] lec:lec_tx_timeout: lec0 [ 1346.081675][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1346.091214][T22230] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.124636][T19835] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.133195][T19835] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.201831][T24237] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1346.257382][T24239] __nla_validate_parse: 14 callbacks suppressed [ 1346.257405][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13388'. [ 1346.378690][T24242] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13388'. [ 1346.406106][T24244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13389'. [ 1346.422116][T24242] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1346.435505][T24248] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13391'. [ 1346.436515][T24242] netlink: 7 bytes leftover after parsing attributes in process `syz.0.13388'. [ 1346.491858][T24252] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1346.535661][T24242] erspan0: entered promiscuous mode [ 1346.667341][T24260] tipc: Enabling of bearer rejected, failed to enable media [ 1346.741808][T24265] netlink: 165 bytes leftover after parsing attributes in process `syz.0.13396'. [ 1346.754849][T24264] delete_channel: no stack [ 1346.766631][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13397'. [ 1346.783062][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13397'. [ 1346.899057][T24276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13399'. [ 1346.959222][T24282] erspan0: entered promiscuous mode [ 1346.964707][T24282] erspan0: entered allmulticast mode [ 1347.143587][T24292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1347.150946][T24292] IPv6: NLM_F_CREATE should be set when creating new route [ 1347.158247][T24292] IPv6: NLM_F_CREATE should be set when creating new route [ 1347.424168][T24315] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1347.459905][T24317] xt_cgroup: invalid path, errno=-2 [ 1347.606649][T24322] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13411'. [ 1347.693046][T24322] bond5 (unregistering): Released all slaves [ 1347.875465][T24329] wlan0 speed is unknown, defaulting to 1000 [ 1348.267801][ T30] audit: type=1800 audit(1773810198.947:18): pid=24360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13423" name="memory.events" dev="tmpfs" ino=1275 res=0 errno=0 [ 1348.308768][T24363] netlink: 'syz.2.13424': attribute type 1 has an invalid length. [ 1348.409200][T24363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1348.422559][T24370] netlink: 'syz.4.13426': attribute type 1 has an invalid length. [ 1348.468222][T24371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1348.475567][T24371] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 1348.488629][T24371] bond6: (slave vcan0): Error -95 calling set_mac_address [ 1348.656792][T24379] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 1349.166556][T24418] netlink: 'syz.2.13437': attribute type 1 has an invalid length. [ 1349.183427][T24418] netlink: 'syz.2.13437': attribute type 3 has an invalid length. [ 1349.192035][T24418] NCSI netlink: No device for ifindex 813332851 [ 1349.631568][T24439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1349.638898][T24439] IPv6: NLM_F_CREATE should be set when creating new route [ 1349.646183][T24439] IPv6: NLM_F_CREATE should be set when creating new route [ 1349.929035][T24451] openvswitch: netlink: IP tunnel dst address not specified [ 1349.942232][T24452] openvswitch: netlink: IP tunnel dst address not specified [ 1349.959325][T24443] syzkaller0: entered promiscuous mode [ 1349.967796][T24443] syzkaller0: entered allmulticast mode [ 1351.112354][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1351.120508][ C0] lec:lec_tx_timeout: lec0 [ 1351.125644][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1352.555596][T24484] __nla_validate_parse: 15 callbacks suppressed [ 1352.555620][T24484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13460'. [ 1352.755156][T24499] netlink: 252 bytes leftover after parsing attributes in process `syz.0.13464'. [ 1352.777795][T24499] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.13464'. [ 1352.808983][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13466'. [ 1353.007136][T24520] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13469'. [ 1353.009736][T24516] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13467'. [ 1353.040396][T24521] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1353.136627][T24529] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1353.175090][T24531] sctp: [Deprecated]: syz.1.13472 (pid 24531) Use of int in maxseg socket option. [ 1353.175090][T24531] Use struct sctp_assoc_value instead [ 1353.424012][T24540] IPv6: sit3: Disabled Multicast RS [ 1353.431404][T24551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13479'. [ 1353.439053][T24540] sit3: entered allmulticast mode [ 1353.524049][T24551] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1353.551554][T24551] gretap1: entered promiscuous mode [ 1353.557064][T24551] gretap1: entered allmulticast mode [ 1353.668165][T14014] Bluetooth: hci2: command 0x0406 tx timeout [ 1353.676532][T24563] netlink: 165 bytes leftover after parsing attributes in process `syz.0.13482'. [ 1353.680320][T24561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13481'. [ 1353.733104][T24562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.827648][T24570] bond5 (unregistering): Released all slaves [ 1353.892381][T24568] bond5 (unregistering): Released all slaves [ 1354.001660][T24587] xt_socket: unknown flags 0xe4 [ 1354.143805][T24598] tipc: Started in network mode [ 1354.168018][T24598] tipc: Node identity a, cluster identity 4711 [ 1354.183872][T24598] tipc: Node number set to 10 [ 1354.267675][T24607] bond5 (unregistering): Released all slaves [ 1354.402674][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13495'. [ 1354.743008][T24630] xfrm1: entered promiscuous mode [ 1354.748524][T24630] xfrm1: entered allmulticast mode [ 1355.123875][T24634] veth5: entered allmulticast mode [ 1356.082586][T24659] wlan0 speed is unknown, defaulting to 1000 [ 1356.089951][T24662] tipc: Enabled bearer , priority 2 [ 1356.138206][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1356.146305][ C0] lec:lec_tx_timeout: lec0 [ 1356.151025][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1357.024747][T24707] netlink: 'syz.3.13523': attribute type 1 has an invalid length. [ 1357.035015][T24706] netlink: 'syz.3.13523': attribute type 1 has an invalid length. [ 1357.047009][T24709] syzkaller0: entered promiscuous mode [ 1357.056604][T24709] syzkaller0: entered allmulticast mode [ 1357.128386][T24711] xt_CT: No such helper "pptp" [ 1357.620946][T24742] pim6reg1: entered promiscuous mode [ 1357.627060][T24742] pim6reg1: entered allmulticast mode [ 1357.672486][T24749] netlink: 'syz.2.13536': attribute type 2 has an invalid length. [ 1357.680616][T24749] netlink: 'syz.2.13536': attribute type 8 has an invalid length. [ 1357.696694][T24747] xt_hashlimit: size too large, truncated to 1048576 [ 1357.707987][T24749] __nla_validate_parse: 9 callbacks suppressed [ 1357.708008][T24749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13536'. [ 1358.108328][ T30] audit: type=1800 audit(1773810208.787:19): pid=24765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13541" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2098 res=0 errno=0 [ 1358.626818][T24799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13550'. [ 1358.701650][T24806] veth0_to_batadv: entered allmulticast mode [ 1358.733189][T24806] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1358.809569][T14014] Bluetooth: hci1: command 0x0406 tx timeout [ 1358.823723][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13553'. [ 1358.843102][T24810] vxcan2: entered allmulticast mode [ 1359.110582][T24833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1359.377567][T24845] veth0: entered promiscuous mode [ 1359.393537][T24845] veth0: left promiscuous mode [ 1359.684553][T24864] netlink: 264 bytes leftover after parsing attributes in process `syz.1.13568'. [ 1359.759601][T24866] syzkaller1: entered promiscuous mode [ 1359.765248][T24866] syzkaller1: entered allmulticast mode [ 1359.775625][T24873] netlink: 'syz.2.13571': attribute type 1 has an invalid length. [ 1359.784834][T24873] netlink: 'syz.2.13571': attribute type 2 has an invalid length. [ 1359.796088][T24873] netlink: 'syz.2.13571': attribute type 1 has an invalid length. [ 1359.819835][T24873] netlink: 'syz.2.13571': attribute type 3 has an invalid length. [ 1359.848796][T24866] bond2 (unregistering): Released all slaves [ 1359.865331][T24873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13571'. [ 1359.886239][T24868] xt_nat: multiple ranges no longer supported [ 1360.038098][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13573'. [ 1360.711388][T24922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1360.737726][T24922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1360.812799][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13587'. [ 1360.858579][T24931] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13588'. [ 1361.158174][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1361.166237][ C0] lec:lec_tx_timeout: lec0 [ 1361.171304][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1361.340366][T24950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13592'. [ 1361.368286][T24950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.477588][T24950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.556974][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13600'. [ 1361.750290][T24984] sock: sock_timestamping_bind_phc: sock not bind to device [ 1361.834894][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1362.020875][T25008] netlink: 'syz.4.13608': attribute type 27 has an invalid length. [ 1362.163814][T25015] chnl_net:caif_netlink_parms(): no params data found [ 1362.219369][T24997] netlink: 'syz.2.13607': attribute type 18 has an invalid length. [ 1362.470948][T24997] netlink: 'syz.2.13607': attribute type 18 has an invalid length. [ 1362.815745][T25050] netlink: 'syz.3.13619': attribute type 58 has an invalid length. [ 1362.824090][T25050] __nla_validate_parse: 5 callbacks suppressed [ 1362.824109][T25050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13619'. [ 1363.006843][T25065] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13622'. [ 1363.081184][T25065] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13622'. [ 1363.189610][T25076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13626'. [ 1363.304246][T25083] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1363.312445][T25083] team0: Device macvlan0 is already an upper device of the team interface [ 1363.504477][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13628'. [ 1363.522501][T25090] xt_hashlimit: invalid rate [ 1363.558743][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13628'. [ 1363.568289][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13628'. [ 1363.581716][T25093] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.13631'. [ 1363.588125][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13628'. [ 1363.659771][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13628'. [ 1364.053101][T25116] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1364.176858][T25114] tipc: Enabled bearer , priority 10 [ 1364.194002][T25123] netlink: 'syz.0.13640': attribute type 1 has an invalid length. [ 1364.238444][T25123] netlink: 'syz.0.13640': attribute type 1 has an invalid length. [ 1364.275983][T25123] netlink: 'syz.0.13640': attribute type 8 has an invalid length. [ 1364.654719][T25144] vlan2: entered promiscuous mode [ 1364.662394][T25144] geneve1: entered promiscuous mode [ 1364.668764][T25144] vlan2: entered allmulticast mode [ 1364.674029][T25144] geneve1: entered allmulticast mode [ 1365.116318][T25175] xt_TCPMSS: Only works on TCP SYN packets [ 1365.367803][T25183] syzkaller0: entered promiscuous mode [ 1365.384001][T25183] syzkaller0: entered allmulticast mode [ 1365.400602][T25187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1366.181288][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1366.189404][ C0] lec:lec_tx_timeout: lec0 [ 1366.194343][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1367.874731][T25227] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 1367.976109][T25225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.042579][T25225] __nla_validate_parse: 70 callbacks suppressed [ 1368.042603][T25225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13670'. [ 1368.087019][T25225] vlan2: entered allmulticast mode [ 1368.100525][T25225] mac80211_hwsim hwsim115 wlan0: entered allmulticast mode [ 1368.146445][T25239] openvswitch: netlink: Flow actions attr not present in new flow. [ 1368.328437][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13678'. [ 1368.334084][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13678'. [ 1368.350375][T25262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13679'. [ 1368.406452][T25263] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1368.426357][T25263] bond7: (slave lo): Enslaving as an active interface with an up link [ 1368.437279][T25263] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1368.531430][T25274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13682'. [ 1368.805350][T25301] netlink: 'syz.4.13687': attribute type 1 has an invalid length. [ 1369.048669][T25311] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13691'. [ 1369.059373][T25313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13693'. [ 1369.212554][T25321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13696'. [ 1369.292820][T25323] ±ÿ: renamed from team_slave_1 [ 1369.296091][T25324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13696'. [ 1369.569546][T25336] netlink: 'syz.2.13701': attribute type 1 has an invalid length. [ 1369.598082][T25336] nbd: error processing sock list [ 1369.816765][T25356] netlink: 'syz.3.13709': attribute type 16 has an invalid length. [ 1369.859815][T25356] netlink: 'syz.3.13709': attribute type 17 has an invalid length. [ 1369.901678][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13710'. [ 1369.924331][T25356] erspan0: left allmulticast mode [ 1369.967552][T25356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1370.168825][T25369] bond2: (slave gre0): Device is not bonding slave [ 1370.180620][T25369] bond2: option active_slave: invalid value (gre0) [ 1370.198505][T25369] bond2 (unregistering): Released all slaves [ 1370.862885][T25424] hsr_slave_0: left promiscuous mode [ 1370.871392][T25424] hsr_slave_1: left promiscuous mode [ 1370.937050][T25429] Cannot find del_set index 1 as target [ 1371.208273][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1371.216947][ C0] lec:lec_tx_timeout: lec0 [ 1371.222050][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1371.262037][T25444] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1371.270709][T25444] team0: Device macvlan4 is already an upper device of the team interface [ 1371.397667][T25451] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1372.001128][T25492] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1372.061083][T25494] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1372.767182][T25543] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1372.781765][T25543] bond0: entered promiscuous mode [ 1372.787211][T25543] bond_slave_0: entered promiscuous mode [ 1372.798297][T25543] bond_slave_1: entered promiscuous mode [ 1372.805150][T25543] bond0: left promiscuous mode [ 1372.812994][T25543] bond_slave_0: left promiscuous mode [ 1372.845276][T25543] bond_slave_1: left promiscuous mode [ 1373.062850][T25557] vlan1: entered promiscuous mode [ 1373.311812][T25568] __nla_validate_parse: 8 callbacks suppressed [ 1373.311834][T25568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13770'. [ 1373.334011][T25570] Unknown options in mask b7f2 [ 1373.670509][ C1] sit: Src spoofed 172.20.20.45/fe80::ac14:142d -> 172.20.20.187/ff02::16 [ 1373.696159][ C0] sit: Src spoofed 172.20.20.45/fe80::ac14:142d -> 172.20.20.187/ff02::2 [ 1373.708752][ C1] sit: Src spoofed 172.20.20.45/fe80::ac14:142d -> 172.20.20.187/ff02::16 [ 1373.758155][T25594] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13775'. [ 1373.879027][ C1] sit: Src spoofed 172.20.20.45/fe80::ac14:142d -> 172.20.20.187/ff02::16 [ 1374.095195][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13782'. [ 1374.104438][T25612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13782'. [ 1374.158808][ C0] sit: Src spoofed 172.20.20.45/fe80::ac14:142d -> 172.20.20.187/ff02::16 [ 1374.532892][T25626] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13785'. [ 1374.571128][T25626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.587607][T25626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.603593][T25626] bond0 (unregistering): Released all slaves [ 1374.669678][T25630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13786'. [ 1374.679674][T25630] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13786'. [ 1374.724517][T25631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13786'. [ 1374.972794][T25654] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1375.248485][T25669] netlink: 'syz.1.13796': attribute type 24 has an invalid length. [ 1375.303425][T25669] set match dimension is over the limit! [ 1375.559469][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13800'. [ 1375.583114][T25690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13800'. [ 1376.135130][T25729] xt_hashlimit: overflow, try lower: 3/0 [ 1376.160585][T25732] xt_hashlimit: overflow, try lower: 3/0 [ 1376.238173][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1376.246281][ C0] lec:lec_tx_timeout: lec0 [ 1376.251248][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1376.297084][T22215] nci: nci_rx_work: unknown MT 0x7 [ 1376.912982][T25779] netlink: 'syz.3.13825': attribute type 13 has an invalid length. [ 1376.946132][T25779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1376.971472][T25730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.132285][T25791] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1377.159472][T25791] syzkaller0: entered promiscuous mode [ 1377.179552][T25791] syzkaller0: entered allmulticast mode [ 1377.272451][T25791] tipc: Failed to remove unknown binding: 66,0,0/2294418068:3982446584/3982446585 [ 1377.272904][T25796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1377.320763][T25791] tipc: Failed to remove unknown binding: 66,0,0/2294418068:3982446584/3982446585 [ 1377.653155][T25808] netlink: 'syz.1.13831': attribute type 24 has an invalid length. [ 1377.860834][T25809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1377.908633][ C0] sit: Src spoofed 172.20.20.45/fe80::ac14:142d -> 172.20.20.187/ff02::2 [ 1378.072438][T25823] netlink: 'syz.1.13835': attribute type 10 has an invalid length. [ 1378.254687][T25838] netlink: 'syz.1.13839': attribute type 2 has an invalid length. [ 1378.382302][T25845] syzkaller0: entered promiscuous mode [ 1378.408444][T25845] syzkaller0: entered allmulticast mode [ 1378.725705][T25867] netlink: 'syz.1.13848': attribute type 2 has an invalid length. [ 1378.754425][T25867] netlink: 'syz.1.13848': attribute type 2 has an invalid length. [ 1378.899022][T25869] tc_dump_action: action bad kind [ 1379.025104][T25884] __nla_validate_parse: 11 callbacks suppressed [ 1379.025127][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13852'. [ 1379.062896][T25886] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13853'. [ 1379.080911][T25888] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13853'. [ 1379.120985][T25886] netlink: 'syz.3.13853': attribute type 1 has an invalid length. [ 1379.129373][T25886] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13853'. [ 1379.160610][T25886] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.13853'. [ 1379.183235][T25888] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.13853'. [ 1379.319226][T25899] netlink: 'syz.4.13859': attribute type 1 has an invalid length. [ 1379.405232][T25899] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1379.678034][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.686960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.728413][T25929] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13865'. [ 1380.013892][T25945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13869'. [ 1380.082378][T25946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13869'. [ 1380.106812][T25945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13869'. [ 1380.234886][T25957] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1380.387450][T25965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.396334][T25965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.404583][T25965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.412830][T25965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.442296][T25976] syzkaller0: entered promiscuous mode [ 1380.496486][T25976] syzkaller0: entered allmulticast mode [ 1380.628419][T25992] netlink: 'syz.3.13882': attribute type 1 has an invalid length. [ 1380.744485][T25992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.793041][T25989] bond0: (slave geneve2): making interface the new active one [ 1380.827187][T25989] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1380.843013][T22205] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1380.858301][T22205] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1380.880665][T22205] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1380.889547][T22205] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1381.257956][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1381.266016][ C0] lec:lec_tx_timeout: lec0 [ 1381.272750][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1381.363449][T26020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1381.796445][T26031] bridge0: port 1(bond0) entered disabled state [ 1382.231023][T26031] veth1_vlan: left allmulticast mode [ 1382.267615][T26031] veth0_macvtap: left allmulticast mode [ 1382.366092][T26053] geneve2: entered promiscuous mode [ 1382.397198][T22205] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.412006][T22205] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 1382.421314][T22205] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.431769][T22205] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 56110 - 0 [ 1382.441312][T22205] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.454947][T22205] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 1382.464357][T22205] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.480614][T22205] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 56110 - 0 [ 1382.526436][T22223] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.540205][T22223] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 1382.557193][T22223] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.591091][T22223] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 56110 - 0 [ 1382.624902][T22223] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.645033][T22223] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 1382.659205][T22223] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.678559][T22223] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 56110 - 0 [ 1382.718625][T26084] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1382.728521][T26084] bond5: option arp_ip_target: invalid value (0) [ 1382.737694][T26084] bond5 (unregistering): Released all slaves [ 1382.833028][T25486] net_ratelimit: 3338 callbacks suppressed [ 1382.833051][T25486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.847338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.879878][T22223] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x18 [ 1382.948570][T25486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.957450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.107432][T26123] syzkaller0: entered promiscuous mode [ 1383.115092][T26123] syzkaller0: entered allmulticast mode [ 1383.147295][T26128] xt_hashlimit: max too large, truncated to 1048576 [ 1383.166486][T26126] openvswitch: netlink: Flow actions attr not present in new flow. [ 1383.201305][T26131] xt_hashlimit: max too large, truncated to 1048576 [ 1383.362782][T26133] syzkaller0: entered promiscuous mode [ 1383.381945][T14323] IPVS: starting estimator thread 0... [ 1383.394252][T26133] syzkaller0: entered allmulticast mode [ 1383.476259][T26135] syzkaller1: entered promiscuous mode [ 1383.482289][T26135] syzkaller1: entered allmulticast mode [ 1383.498916][T26143] IPVS: using max 26 ests per chain, 62400 per kthread [ 1383.770113][T26161] netlink: 'syz.2.13920': attribute type 5 has an invalid length. [ 1383.924076][T25486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.932681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.964618][T26173] netlink: 'syz.4.13926': attribute type 1 has an invalid length. [ 1384.030593][T26173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1384.043556][T26190] __nla_validate_parse: 15 callbacks suppressed [ 1384.043575][T26190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13929'. [ 1384.051076][T26191] bond6: (slave geneve3): making interface the new active one [ 1384.071407][T26191] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1384.080717][T26189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13929'. [ 1384.124631][T26173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13926'. [ 1384.166487][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13927'. [ 1384.179336][T26197] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1384.186775][T26197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1384.203716][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13927'. [ 1384.346377][T26203] netlink: 'syz.0.13933': attribute type 28 has an invalid length. [ 1384.364300][T26203] netlink: 'syz.0.13933': attribute type 3 has an invalid length. [ 1384.369336][T26206] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13934'. [ 1384.406556][T26203] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13933'. [ 1384.444748][T26209] netlink: 'syz.3.13935': attribute type 1 has an invalid length. [ 1384.522920][T26215] Bluetooth: MGMT ver 1.23 [ 1384.562421][T26209] bond2: (slave gretap1): making interface the new active one [ 1384.572040][T26209] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1384.611801][T26219] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13937'. [ 1384.741696][T26227] ipt_rpfilter: unknown options [ 1384.835728][T26233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1384.875711][T26232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13943'. [ 1384.911627][T26235] Cannot find add_set index 1 as target [ 1385.061907][T26244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13948'. [ 1385.842968][T26280] netlink: 'syz.0.13961': attribute type 5 has an invalid length. [ 1386.205113][T26310] nft_compat: unsupported protocol 5 [ 1386.951577][T26176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.108113][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1387.116304][ C0] lec:lec_tx_timeout: lec0 [ 1387.121717][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1388.083592][T25486] net_ratelimit: 8 callbacks suppressed [ 1388.083609][T25486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.097681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.708257][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.717345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.930236][T26288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1389.114314][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.123533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.145315][T26350] __nla_validate_parse: 6 callbacks suppressed [ 1389.145335][T26350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13981'. [ 1389.465386][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13980'. [ 1389.508569][ T9796] Bluetooth: hci3: command 0x0405 tx timeout [ 1389.572950][T26381] netlink: 'syz.1.13989': attribute type 1 has an invalid length. [ 1389.617160][T26383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13991'. [ 1389.716479][T26381] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1389.779221][T26394] openvswitch: netlink: IP tunnel dst address not specified [ 1389.799341][T26378] bond5: (slave gretap2): making interface the new active one [ 1389.821109][T26378] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1389.821784][T26399] netlink: 'syz.4.13992': attribute type 11 has an invalid length. [ 1389.992699][T10362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.001093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.220010][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.699432][T26443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14006'. [ 1392.127922][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1392.136026][ C0] lec:lec_tx_timeout: lec0 [ 1392.141355][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1392.606270][T26391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1392.862393][T26474] bridge0: port 1(ipvlan2) entered blocking state [ 1392.869391][T26474] bridge0: port 1(ipvlan2) entered disabled state [ 1392.876114][T26474] ipvlan2: entered allmulticast mode [ 1392.884210][T26474] bridge0: entered allmulticast mode [ 1392.894417][T26474] ipvlan2: left allmulticast mode [ 1392.902457][T26474] bridge0: left allmulticast mode [ 1393.062270][T26483] netlink: 'syz.3.14020': attribute type 12 has an invalid length. [ 1393.088573][T26488] net_ratelimit: 9 callbacks suppressed [ 1393.088595][T26488] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1393.201675][T26493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14022'. [ 1393.355432][T25488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.363846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.630768][T26517] netlink: 'syz.0.14031': attribute type 10 has an invalid length. [ 1393.677887][T26517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.711527][T26517] bridge_slave_1: left allmulticast mode [ 1393.719605][T26517] bridge_slave_1: left promiscuous mode [ 1393.728703][T26517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.761320][T26517] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1393.822634][T26527] syzkaller0: entered promiscuous mode [ 1393.829080][T26527] syzkaller0: entered allmulticast mode [ 1393.842207][T26527] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1393.947521][T26534] xt_CT: No such helper "snmp_trap" [ 1394.050914][T26546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14040'. [ 1394.121686][T26546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14040'. [ 1394.148405][T26546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14040'. [ 1394.181277][T26546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14040'. [ 1394.346329][T26555] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.14044'. [ 1394.411214][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.419746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.519222][T26566] netlink: 'syz.2.14047': attribute type 4 has an invalid length. [ 1394.575158][T26566] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14047'. [ 1394.596677][T26563] netlink: 'syz.1.14046': attribute type 1 has an invalid length. [ 1394.615951][T26566] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14047'. [ 1394.664183][T26578] xt_hashlimit: size too large, truncated to 1048576 [ 1394.676705][T26563] bond6: entered promiscuous mode [ 1394.682598][T26563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1394.709250][T26582] veth1_macvtap: left promiscuous mode [ 1394.763050][T26584] netlink: 'syz.4.14052': attribute type 21 has an invalid length. [ 1394.772507][T26584] IPv6: NLM_F_CREATE should be specified when creating new route [ 1394.782374][T26584] netlink: 'syz.4.14052': attribute type 1 has an invalid length. [ 1394.817704][T26587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.826845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.891727][T26584] syzkaller0: entered promiscuous mode [ 1394.897258][T26584] syzkaller0: entered allmulticast mode [ 1394.907548][T26589] netlink: 'syz.3.14054': attribute type 39 has an invalid length. [ 1394.929476][T26589] netlink: 'syz.3.14054': attribute type 39 has an invalid length. [ 1394.946503][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14052'. [ 1395.000803][T26584] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1395.021235][T26584] netlink: 148 bytes leftover after parsing attributes in process `syz.4.14052'. [ 1395.434488][T25486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.443595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.568983][T26630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1395.695171][T26636] s5ÿÿø: renamed from vlan1 (while UP) [ 1395.704167][T26637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14070'. [ 1395.804236][T26647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14073'. [ 1396.100282][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14078'. [ 1396.261030][T26680] netlink: 'syz.4.14081': attribute type 1 has an invalid length. [ 1396.289184][T26682] netlink: 'syz.3.14082': attribute type 1 has an invalid length. [ 1396.322658][T26680] bond7: entered promiscuous mode [ 1396.329123][T26680] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1396.386265][T26680] bond7: (slave bridge3): making interface the new active one [ 1396.423691][T26680] bridge3: entered promiscuous mode [ 1396.435782][T26680] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1396.626302][T26703] xt_recent: Unsupported userspace flags (000000b1) [ 1396.644883][T26699] xt_bpf: check failed: parse error [ 1396.845320][T26712] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1397.147887][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1397.156085][ C0] lec:lec_tx_timeout: lec0 [ 1397.161283][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1400.571690][T26759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1400.716036][T26798] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1400.791063][T26806] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1401.192148][T26822] wlan0 speed is unknown, defaulting to 1000 [ 1401.434443][T26843] __nla_validate_parse: 7 callbacks suppressed [ 1401.434465][T26843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14130'. [ 1401.555382][T26851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14132'. [ 1401.562929][T26843] x_tables: duplicate underflow at hook 1 [ 1401.566218][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14132'. [ 1401.698792][T26860] net_ratelimit: 4 callbacks suppressed [ 1401.698816][T26860] openvswitch: netlink: Message has -2 unknown bytes. [ 1401.894046][T26867] can: request_module (can-proto-5) failed. [ 1401.904440][T26822] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14124'. [ 1402.074949][T26877] validate_nla: 8 callbacks suppressed [ 1402.074971][T26877] netlink: 'syz.0.14142': attribute type 2 has an invalid length. [ 1402.089135][T26877] netlink: 'syz.0.14142': attribute type 11 has an invalid length. [ 1402.097074][T26877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14142'. [ 1402.169327][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1402.177387][ C0] lec:lec_tx_timeout: lec0 [ 1402.182204][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1402.334257][T26884] netem: change failed [ 1402.451673][T26892] netlink: 'syz.0.14150': attribute type 1 has an invalid length. [ 1402.547150][T26892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1402.690753][T26907] bond8 (unregistering): Released all slaves [ 1403.104964][T26933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1403.205336][T26937] xt_hashlimit: size too large, truncated to 1048576 [ 1403.288220][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14165'. [ 1403.300613][T26938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14165'. [ 1403.536153][T26956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14170'. [ 1403.860956][T26979] Cannot find add_set index 2 as target [ 1404.369472][T26990] syzkaller0: entered allmulticast mode [ 1404.595232][T26992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14181'. [ 1404.611991][T26994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14180'. [ 1404.817438][T26992] team0: Port device team_slave_0 removed [ 1405.155606][T27010] bridge_slave_0 (unregistering): left allmulticast mode [ 1405.211420][T27010] bridge_slave_0 (unregistering): left promiscuous mode [ 1405.233376][T27010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.477461][T27032] sctp: [Deprecated]: syz.2.14194 (pid 27032) Use of int in maxseg socket option. [ 1405.477461][T27032] Use struct sctp_assoc_value instead [ 1405.719104][T27046] netlink: 'syz.4.14199': attribute type 21 has an invalid length. [ 1406.121791][T27073] veth0: entered promiscuous mode [ 1406.163741][T27073] veth0: left promiscuous mode [ 1406.347452][T11228] IPVS: starting estimator thread 0... [ 1406.371820][T27099] netlink: 'syz.0.14214': attribute type 3 has an invalid length. [ 1406.438069][T27097] IPVS: using max 27 ests per chain, 64800 per kthread [ 1406.976489][T27081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1407.015800][T27113] __nla_validate_parse: 10 callbacks suppressed [ 1407.015824][T27113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14218'. [ 1407.029592][T27115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14218'. [ 1407.036236][T27113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14218'. [ 1407.052596][T27113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14218'. [ 1407.140572][T27118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14220'. [ 1407.198405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1407.206496][ C0] lec:lec_tx_timeout: lec0 [ 1407.212134][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1407.219225][T27126] netlink: 112 bytes leftover after parsing attributes in process `syz.1.14221'. [ 1407.249910][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14221'. [ 1407.523971][T27147] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14227'. [ 1407.535575][T27147] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14227'. [ 1407.545403][T27147] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14227'. [ 1407.688460][T27158] ip6gre0: Master is either lo or non-ether device [ 1407.696756][T27158] tc_dump_action: action bad kind [ 1408.148138][T14014] Bluetooth: hci2: command 0x0406 tx timeout [ 1409.437217][T27102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1409.647243][T27171] netlink: 'syz.3.14234': attribute type 21 has an invalid length. [ 1409.683801][T27178] openvswitch: netlink: Flow key attr not present in new flow. [ 1409.686461][T27168] bond8: option miimon: invalid value (18446744073709551585) [ 1409.703915][T27168] bond8: option miimon: allowed values 0 - 2147483647 [ 1409.713691][T27168] bond8 (unregistering): Released all slaves [ 1409.926283][T27188] gretap0: entered promiscuous mode [ 1409.954555][T27188] netlink: 'syz.3.14241': attribute type 1 has an invalid length. [ 1409.985272][T27188] gretap0: left promiscuous mode [ 1410.016580][T27195] syzkaller0: entered promiscuous mode [ 1410.024452][T27195] syzkaller0: entered allmulticast mode [ 1410.514758][T27236] netlink: 'syz.1.14255': attribute type 3 has an invalid length. [ 1411.229128][T27290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1411.298968][T27294] syzkaller1: entered promiscuous mode [ 1411.304505][T27294] syzkaller1: entered allmulticast mode [ 1411.367638][T27301] xt_hashlimit: size too large, truncated to 1048576 [ 1411.526950][T27314] syzkaller0: entered promiscuous mode [ 1411.538011][T27314] syzkaller0: entered allmulticast mode [ 1411.594061][T27320] netlink: 'syz.3.14281': attribute type 1 has an invalid length. [ 1411.838618][T27333] netlink: 'syz.2.14286': attribute type 1 has an invalid length. [ 1412.064031][T27347] netlink: 'syz.3.14291': attribute type 10 has an invalid length. [ 1412.122700][T27345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56110 - 0 [ 1412.132950][T27353] __nla_validate_parse: 18 callbacks suppressed [ 1412.132970][T27353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14291'. [ 1412.158864][T27347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.166788][T27347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.183152][T27353] bridge_slave_1: left allmulticast mode [ 1412.193000][T27353] bridge_slave_1: left promiscuous mode [ 1412.200722][T27353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.212147][T27353] bridge_slave_0: left allmulticast mode [ 1412.218377][T27353] bridge_slave_0: left promiscuous mode [ 1412.227986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1412.231253][T27353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.236131][ C0] lec:lec_tx_timeout: lec0 [ 1412.249003][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1412.342324][T27345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56110 - 0 [ 1412.484586][T27358] openvswitch: netlink: IP tunnel dst address not specified [ 1412.521569][T27345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56110 - 0 [ 1412.614060][T27345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56110 - 0 [ 1412.810316][T19813] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56110 - 0 [ 1412.845766][T27378] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14302'. [ 1412.874569][T19813] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56110 - 0 [ 1412.885289][T19813] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56110 - 0 [ 1412.944003][T19813] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56110 - 0 [ 1413.497526][T27416] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14315'. [ 1413.513625][T27419] netlink: 'syz.1.14312': attribute type 1 has an invalid length. [ 1413.524185][T27419] netlink: 'syz.1.14312': attribute type 2 has an invalid length. [ 1413.550283][T27419] netlink: 'syz.1.14312': attribute type 1 has an invalid length. [ 1413.735454][T27432] netlink: 'syz.4.14320': attribute type 9 has an invalid length. [ 1413.793175][T27436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1413.826916][T27441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14321'. [ 1413.885167][T27445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14323'. [ 1413.910824][T27445] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14323'. [ 1413.980446][T27448] netlink: 88 bytes leftover after parsing attributes in process `syz.1.14325'. [ 1414.396096][T27475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14333'. [ 1414.509090][T27475] netlink: 'syz.0.14333': attribute type 11 has an invalid length. [ 1414.672674][T27489] SET target dimension over the limit! [ 1415.022663][T27508] syzkaller1: entered promiscuous mode [ 1415.038570][T27508] syzkaller1: entered allmulticast mode [ 1415.152610][T27512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14344'. [ 1415.250302][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14345'. [ 1415.546528][T27540] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 3, id = 0 [ 1415.934658][T27561] validate_nla: 1 callbacks suppressed [ 1415.934682][T27561] netlink: 'syz.3.14355': attribute type 10 has an invalid length. [ 1416.144275][T27566] ip6gre1: entered promiscuous mode [ 1416.544720][T27592] netlink: 'syz.3.14365': attribute type 3 has an invalid length. [ 1416.547265][T27586] netlink: 'syz.2.14364': attribute type 1 has an invalid length. [ 1416.589596][T27586] netlink: 'syz.2.14364': attribute type 1 has an invalid length. [ 1416.602666][T27586] netlink: 'syz.2.14364': attribute type 1 has an invalid length. [ 1416.657919][T27586] netlink: 'syz.2.14364': attribute type 2 has an invalid length. [ 1416.725630][T27605] openvswitch: netlink: IP tunnel dst address not specified [ 1416.736975][T27606] wireguard0: entered promiscuous mode [ 1416.742719][T27606] wireguard0: entered allmulticast mode [ 1416.766654][T27606] team0: Device wireguard0 is of different type [ 1416.825058][T27610] syzkaller0: entered promiscuous mode [ 1416.830770][T27610] syzkaller0: entered allmulticast mode [ 1417.257883][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1417.266098][ C0] lec:lec_tx_timeout: lec0 [ 1417.272026][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1417.546189][T27654] __nla_validate_parse: 3 callbacks suppressed [ 1417.546205][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14382'. [ 1417.603810][T27657] netlink: 'syz.2.14383': attribute type 2 has an invalid length. [ 1417.694605][T27663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14386'. [ 1417.800355][T27668] netlink: 116 bytes leftover after parsing attributes in process `syz.2.14387'. [ 1417.980014][T27675] netlink: 112 bytes leftover after parsing attributes in process `syz.2.14390'. [ 1418.008113][T27678] netlink: 'syz.1.14392': attribute type 3 has an invalid length. [ 1418.016136][T27679] team0: No ports can be present during mode change [ 1418.045266][T27679] syzkaller0: entered promiscuous mode [ 1418.059595][T27679] syzkaller0: entered allmulticast mode [ 1418.114084][T27683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14395'. [ 1418.226933][T27683] bond8: Invalid ad_actor_system MAC address. [ 1418.272684][T27683] bond8: option ad_actor_system: invalid value (1) [ 1418.327220][T27683] bond8 (unregistering): Released all slaves [ 1418.467362][T27686] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 1418.519379][T27686] bond7 (unregistering): Released all slaves [ 1418.550956][T27711] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14402'. [ 1419.034450][T27733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14409'. [ 1419.054697][T27733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14409'. [ 1419.069973][T27733] syzkaller0: entered promiscuous mode [ 1419.075594][T27733] syzkaller0: entered allmulticast mode [ 1419.085930][T27733] 0: reclassify loop, rule prio 0, protocol 800 [ 1419.535493][T27764] macsec0: entered promiscuous mode [ 1419.541525][T27764] macsec0: entered allmulticast mode [ 1419.698673][T27762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14414'. [ 1419.728293][T27762] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14414'. [ 1419.910850][T27783] sctp: [Deprecated]: syz.2.14421 (pid 27783) Use of int in max_burst socket option. [ 1419.910850][T27783] Use struct sctp_assoc_value instead [ 1420.234769][T27798] bond8: entered promiscuous mode [ 1420.243889][T27798] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1420.506851][T27817] delete_channel: no stack [ 1420.528495][T27816] delete_channel: no stack [ 1420.549631][T27820] netlink: 'syz.0.14432': attribute type 1 has an invalid length. [ 1420.703183][T27826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1420.730097][T27826] bond3: (slave bond4): making interface the new active one [ 1420.741176][T27826] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1420.772827][T27820] bond3: (slave gretap3): Enslaving as a backup interface with an up link [ 1420.801801][T27832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1420.814264][T27831] sctp: [Deprecated]: syz.1.14435 (pid 27831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1420.814264][T27831] Use struct sctp_sack_info instead [ 1421.163549][T27843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.744696][T27878] ±ÿ: renamed from team_slave_1 (while UP) [ 1421.772106][T27880] macvtap1: entered allmulticast mode [ 1421.782168][T27880] veth0_macvtap: entered allmulticast mode [ 1421.915557][T27889] netlink: 'syz.0.14452': attribute type 10 has an invalid length. [ 1421.928064][T27889] syz_tun: entered promiscuous mode [ 1421.953631][T27889] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1422.721387][T27935] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1422.762069][T27940] __nla_validate_parse: 8 callbacks suppressed [ 1422.762091][T27940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14466'. [ 1422.874738][T27944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14467'. [ 1423.107857][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1423.115914][ C0] lec:lec_tx_timeout: lec0 [ 1423.122666][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1423.276644][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1423.552242][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14476'. [ 1424.285264][T28006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1424.295721][T28006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1424.305820][T28006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1424.327256][T28006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1424.336140][T28006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1424.417439][T28004] wlan0 speed is unknown, defaulting to 1000 [ 1424.493088][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14485'. [ 1424.652298][T28015] netlink: 'syz.0.14487': attribute type 3 has an invalid length. [ 1424.664421][T28015] netlink: 'syz.0.14487': attribute type 2 has an invalid length. [ 1424.672667][T28015] netlink: 'syz.0.14487': attribute type 11 has an invalid length. [ 1424.680731][T28015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14487'. [ 1424.738531][T28013] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14485'. [ 1424.911110][T28026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14489'. [ 1425.352998][T27966] Bluetooth: hci5: command 0x0406 tx timeout [ 1426.405119][T14014] Bluetooth: hci4: command tx timeout [ 1426.860769][T28031] sit0: entered promiscuous mode [ 1426.866019][T28031] netlink: 'syz.2.14491': attribute type 1 has an invalid length. [ 1426.874898][T28031] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14491'. [ 1426.957500][T28004] chnl_net:caif_netlink_parms(): no params data found [ 1427.052809][T28051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14493'. [ 1427.145429][T28051] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.14493'. [ 1427.268123][T28004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.275506][T28004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.283443][T28004] bridge_slave_0: entered allmulticast mode [ 1427.292862][T28004] bridge_slave_0: entered promiscuous mode [ 1427.302706][T28004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.311914][T28004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.320102][T28004] bridge_slave_1: entered allmulticast mode [ 1427.328989][T28004] bridge_slave_1: entered promiscuous mode [ 1427.385018][T28004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.411760][T28004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.553317][T28004] team0: Port device team_slave_0 added [ 1427.599409][T28004] team0: Port device team_slave_1 added [ 1427.622651][T28081] netlink: 'syz.0.14500': attribute type 1 has an invalid length. [ 1427.848546][T28081] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1427.874620][T28004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1427.906922][T28004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.977871][T28004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.052996][T28004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.097880][T28004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.137871][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1428.145932][ C0] lec:lec_tx_timeout: lec0 [ 1428.156310][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1428.163471][T28004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.244719][T28085] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1428.282004][T28092] bond5: (slave veth0_to_bond): making interface the new active one [ 1428.291603][T28092] veth0_to_bond: entered promiscuous mode [ 1428.297597][T28092] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1428.341405][T28081] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1428.352475][T28081] netlink: 'syz.0.14500': attribute type 1 has an invalid length. [ 1428.361245][T28081] netlink: 'syz.0.14500': attribute type 2 has an invalid length. [ 1428.469424][T14014] Bluetooth: hci4: command tx timeout [ 1428.547549][T28004] hsr_slave_0: entered promiscuous mode [ 1428.558206][T28004] hsr_slave_1: entered promiscuous mode [ 1428.762460][T28146] __nla_validate_parse: 2 callbacks suppressed [ 1428.762483][T28146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14510'. [ 1429.095874][T28162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14514'. [ 1429.273504][T28004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 56110 - 0 [ 1429.420078][T28004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 56110 - 0 [ 1429.549095][T28178] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1429.579637][T28178] bond9 (unregistering): Released all slaves [ 1429.637631][T28004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 56110 - 0 [ 1429.745946][T28197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14522'. [ 1429.775309][T28004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 56110 - 0 [ 1429.865237][T28202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14524'. [ 1429.915047][T28202] netlink: 21 bytes leftover after parsing attributes in process `syz.2.14524'. [ 1429.978446][T28202] netlink: 21 bytes leftover after parsing attributes in process `syz.2.14524'. [ 1430.059356][T28213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14527'. [ 1430.094975][T28220] netlink: 'syz.0.14528': attribute type 21 has an invalid length. [ 1430.158555][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14528'. [ 1430.215891][T19832] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.236780][T28226] netlink: 'syz.3.14529': attribute type 3 has an invalid length. [ 1430.245977][T19832] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.373131][T19832] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.429108][T28220] pimreg: entered allmulticast mode [ 1430.434623][T19832] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.533061][T28004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1430.549827][T14014] Bluetooth: hci4: command tx timeout [ 1430.616216][T28004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1430.718192][T28004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1430.785035][T28253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1430.788555][T28004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1431.071335][T28275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14539'. [ 1431.414640][T28004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.446763][T28294] netlink: 'syz.2.14542': attribute type 26 has an invalid length. [ 1431.504647][T28004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.580296][T28297] wlan0 speed is unknown, defaulting to 1000 [ 1431.581762][T19844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.593578][T19844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.732080][T19844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.739334][T19844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.806520][T28321] tipc: Enabling of bearer rejected, already enabled [ 1431.893746][T28324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14550'. [ 1432.344814][T28339] netlink: 'syz.2.14553': attribute type 29 has an invalid length. [ 1432.629572][T14014] Bluetooth: hci4: command tx timeout [ 1432.681460][T28004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.785757][T28373] pim6reg1: entered promiscuous mode [ 1432.802808][T28373] pim6reg1: entered allmulticast mode [ 1432.961753][T28004] veth0_vlan: entered promiscuous mode [ 1432.981717][T28387] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1432.986003][T28004] veth1_vlan: entered promiscuous mode [ 1433.076204][T28391] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1433.106315][T28004] veth0_macvtap: entered promiscuous mode [ 1433.143147][T28004] veth1_macvtap: entered promiscuous mode [ 1433.167884][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1433.175937][ C0] lec:lec_tx_timeout: lec0 [ 1433.180831][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1433.234671][T28004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.284723][T28004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.329210][T22222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.370448][T19822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.390399][T19822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.409024][T19822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.869742][T22227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.879383][T22227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.009301][T19846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.031853][T19846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.125331][T28438] openvswitch: netlink: IP tunnel dst address not specified [ 1434.360096][T28452] netlink: 'syz.4.14579': attribute type 13 has an invalid length. [ 1434.402859][T28452] veth0_macvtap: left promiscuous mode [ 1434.422925][T28452] macvtap0: entered allmulticast mode [ 1434.451702][T28453] netlink: 'syz.0.14578': attribute type 3 has an invalid length. [ 1434.484136][T28452] macvtap0: refused to change device tx_queue_len [ 1434.692125][T28464] __nla_validate_parse: 7 callbacks suppressed [ 1434.692148][T28464] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14583'. [ 1434.762253][T28469] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1434.789866][T28469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14584'. [ 1434.856471][T28471] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14585'. [ 1434.941017][T28474] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14586'. [ 1434.954270][T28474] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14586'. [ 1435.085263][T28481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14588'. [ 1435.163361][T28481] xt_hashlimit: size too large, truncated to 1048576 [ 1435.195524][T28488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14591'. [ 1435.219666][T28490] –: renamed from vxcan1 (while UP) [ 1435.759311][T28513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14599'. [ 1435.844679][T28515] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1435.898240][T28519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14601'. [ 1436.011725][T28523] netlink: 'syz.2.14602': attribute type 29 has an invalid length. [ 1436.048522][T28523] netlink: 'syz.2.14602': attribute type 29 has an invalid length. [ 1436.074020][T28523] xt_hashlimit: size too large, truncated to 1048576 [ 1436.089022][T28523] netlink: 'syz.2.14602': attribute type 29 has an invalid length. [ 1436.097532][T28523] netlink: 'syz.2.14602': attribute type 29 has an invalid length. [ 1436.117422][T28523] netlink: 'syz.2.14602': attribute type 29 has an invalid length. [ 1436.152430][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14604'. [ 1436.911598][T28574] netlink: 'syz.4.14618': attribute type 8 has an invalid length. [ 1436.963416][T28574] bond0: entered promiscuous mode [ 1436.969873][T28574] bond_slave_0: entered promiscuous mode [ 1436.981306][T28574] bond_slave_1: entered promiscuous mode [ 1436.994214][T28574] batadv0: entered promiscuous mode [ 1437.006683][T28574] bond0: left promiscuous mode [ 1437.013963][T28574] bond_slave_0: left promiscuous mode [ 1437.022174][T28574] bond_slave_1: left promiscuous mode [ 1437.088168][T28574] batadv0: left promiscuous mode [ 1437.399320][T28602] : entered promiscuous mode [ 1437.611221][T28614] bond0: entered promiscuous mode [ 1437.616399][T28614] geneve2: entered promiscuous mode [ 1437.649649][T28614] veth0_to_bond: entered promiscuous mode [ 1437.656813][T28614] debugfs: 'hsr0' already exists in 'hsr' [ 1437.691481][T28614] Cannot create hsr debugfs directory [ 1437.696921][T28614] hsr0: entered promiscuous mode [ 1437.754024][T28623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1438.020833][T28643] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1438.032472][T28643] netlink: 'syz.4.14637': attribute type 24 has an invalid length. [ 1438.187924][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1438.196011][ C0] lec:lec_tx_timeout: lec0 [ 1438.202802][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1438.794298][T28691] bridge6: entered promiscuous mode [ 1438.813017][T28691] bridge6: entered allmulticast mode [ 1438.994484][T28705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1439.328823][T28722] netlink: 'syz.0.14660': attribute type 1 has an invalid length. [ 1439.431034][T19822] veth0_to_bond: left promiscuous mode [ 1439.510324][T28733] netlink: 'syz.4.14664': attribute type 11 has an invalid length. [ 1439.540325][T28733] netlink: 'syz.4.14664': attribute type 11 has an invalid length. [ 1439.756505][T28749] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1439.762097][T28746] wireguard0: entered promiscuous mode [ 1439.777681][T28746] wireguard0: entered allmulticast mode [ 1439.791684][T28746] team0: Device wireguard0 is of different type [ 1439.846284][T28754] tls_set_device_offload: netdev not found [ 1440.012466][T28760] bond1: entered allmulticast mode [ 1440.034942][T28760] bridge2: entered promiscuous mode [ 1440.040738][T28760] bridge2: entered allmulticast mode [ 1440.051396][T28760] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1440.131437][T28765] __nla_validate_parse: 13 callbacks suppressed [ 1440.131462][T28765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14676'. [ 1440.181864][T28767] netlink: 209336 bytes leftover after parsing attributes in process `syz.2.14677'. [ 1440.244002][T28771] syzkaller0: entered promiscuous mode [ 1440.250762][T28771] syzkaller0: entered allmulticast mode [ 1440.265713][T28771] tipc: Started in network mode [ 1440.271774][T28771] tipc: Node identity 82335389cfeb, cluster identity 4711 [ 1440.280080][T28771] tipc: Enabled bearer , priority 0 [ 1440.297065][T28768] tipc: Resetting bearer [ 1440.336985][T28768] tipc: Disabling bearer [ 1441.183923][T28810] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14688'. [ 1441.209151][T28810] validate_nla: 2 callbacks suppressed [ 1441.209172][T28810] netlink: 'syz.0.14688': attribute type 2 has an invalid length. [ 1441.453411][T28816] netlink: 'syz.0.14690': attribute type 21 has an invalid length. [ 1441.485010][T28816] IPv6: NLM_F_CREATE should be specified when creating new route [ 1441.505458][T28816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1441.513222][T28816] IPv6: NLM_F_CREATE should be set when creating new route [ 1441.520813][T28816] IPv6: NLM_F_CREATE should be set when creating new route [ 1441.528134][T28816] IPv6: NLM_F_CREATE should be set when creating new route [ 1441.548811][T28819] sock: sock_set_timeout: `syz.1.14691' (pid 28819) tries to set negative timeout [ 1441.698891][T28823] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 1441.711025][T28821] sctp: [Deprecated]: syz.3.14693 (pid 28821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1441.711025][T28821] Use struct sctp_sack_info instead [ 1441.718593][T28823] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14692'. [ 1441.952407][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14700'. [ 1441.978891][T28841] netlink: 'syz.0.14700': attribute type 30 has an invalid length. [ 1441.989675][T28838] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14698'. [ 1442.396150][T28855] syzkaller0: entered promiscuous mode [ 1442.403930][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14707'. [ 1442.414989][T28855] syzkaller0: entered allmulticast mode [ 1442.576877][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14711'. [ 1442.672819][T28891] netlink: 'syz.0.14713': attribute type 11 has an invalid length. [ 1442.685842][T28891] netlink: 148208 bytes leftover after parsing attributes in process `syz.0.14713'. [ 1443.218943][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1443.227032][ C0] lec:lec_tx_timeout: lec0 [ 1443.232250][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1444.647680][T28878] syzkaller1: entered promiscuous mode [ 1444.658120][T28878] syzkaller1: entered allmulticast mode [ 1444.757222][T28905] lo: Caught tx_queue_len zero misconfig [ 1444.901684][T28910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14717'. [ 1445.145726][T28926] wlan0 speed is unknown, defaulting to 1000 [ 1445.150463][T28927] xt_hashlimit: invalid interval [ 1445.204235][T28927] : entered promiscuous mode [ 1445.402447][T28942] netlink: 'syz.0.14726': attribute type 1 has an invalid length. [ 1445.545623][T28942] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1445.616011][T28935] bond6: (slave geneve2): making interface the new active one [ 1445.629630][T28935] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1445.952137][T28968] netlink: 'syz.0.14733': attribute type 29 has an invalid length. [ 1445.961832][T28968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14733'. [ 1445.988852][T28968] atomic_op ffff88803330b998 conn xmit_atomic 0000000000000000 [ 1446.150844][T28971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14734'. [ 1446.152169][T28974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14735'. [ 1446.160713][T28971] netlink: 'syz.3.14734': attribute type 24 has an invalid length. [ 1446.253495][T28976] macvtap0: entered promiscuous mode [ 1446.260320][T28976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14736'. [ 1446.275627][T28978] netlink: 'syz.4.14737': attribute type 1 has an invalid length. [ 1446.286670][T28978] netlink: 'syz.4.14737': attribute type 1 has an invalid length. [ 1446.298945][T28976] veth0_macvtap: left promiscuous mode [ 1446.410153][T28976] macvtap0 (unregistering): left promiscuous mode [ 1446.488964][T28983] bond7: (slave bond_slave_1): Device is not our slave [ 1446.526731][T28983] bond7: option active_slave: invalid value (bond_slave_1) [ 1446.567612][T28983] bond7 (unregistering): Released all slaves [ 1446.653193][T28999] : entered promiscuous mode [ 1446.813889][T29007] netlink: 276 bytes leftover after parsing attributes in process `syz.4.14743'. [ 1446.971961][T29020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14746'. [ 1447.489724][T29048] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1447.861018][T29070] netlink: 'syz.0.14762': attribute type 1 has an invalid length. [ 1447.884427][T29070] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14762'. [ 1447.894607][T29070] netlink: 'syz.0.14762': attribute type 1 has an invalid length. [ 1447.917980][T29070] netlink: 'syz.0.14762': attribute type 8 has an invalid length. [ 1447.933105][T29070] netlink: 582 bytes leftover after parsing attributes in process `syz.0.14762'. [ 1448.011444][T29083] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14766'. [ 1448.258362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1448.266455][ C0] lec:lec_tx_timeout: lec0 [ 1448.271257][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1448.449723][T29095] SET target dimension over the limit! [ 1448.499220][T29106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14772'. [ 1448.837564][T14014] block nbd2: Receive control failed (result -32) [ 1448.942375][T29137] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20003 [ 1449.169011][T25486] IPVS: starting estimator thread 0... [ 1449.298287][T29154] IPVS: using max 26 ests per chain, 62400 per kthread [ 1449.772688][T29184] netlink: 'syz.1.14795': attribute type 10 has an invalid length. [ 1449.795918][T29184] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1450.373302][T29214] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1450.766962][T29235] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20002 [ 1450.863895][ T30] audit: type=1800 audit(1773810301.547:20): pid=29239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14810" name="memory.events" dev="tmpfs" ino=2171 res=0 errno=0 [ 1450.917323][T29242] netlink: 'syz.2.14811': attribute type 1 has an invalid length. [ 1450.993722][T29242] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1451.050455][T29247] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1451.060824][T29247] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 1451.089763][T29247] bond9: (slave vcan0): Error -95 calling set_mac_address [ 1451.177400][T29242] bond9: (slave gretap3): making interface the new active one [ 1451.196112][T29242] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 1451.220532][T29263] __nla_validate_parse: 11 callbacks suppressed [ 1451.220554][T29263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14815'. [ 1451.367242][T29271] netlink: 'syz.2.14820': attribute type 4 has an invalid length. [ 1451.369186][T29269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14818'. [ 1451.416759][T29271] netlink: 'syz.2.14820': attribute type 4 has an invalid length. [ 1451.447064][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14821'. [ 1451.494772][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14821'. [ 1451.612465][T29286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1451.754809][T29288] bridge0: port 1(ipvlan2) entered blocking state [ 1451.778076][T29288] bridge0: port 1(ipvlan2) entered disabled state [ 1451.785095][T29288] ipvlan2: entered allmulticast mode [ 1451.808864][T29288] bridge0: entered allmulticast mode [ 1451.820134][T29288] ipvlan2: left allmulticast mode [ 1451.825214][T29288] bridge0: left allmulticast mode [ 1451.851225][T29302] netlink: 'syz.2.14828': attribute type 3 has an invalid length. [ 1451.928258][T29305] netlink: 788 bytes leftover after parsing attributes in process `syz.2.14828'. [ 1452.306689][T29326] netlink: 'syz.2.14835': attribute type 1 has an invalid length. [ 1452.327113][T29327] IPv6: NLM_F_CREATE should be specified when creating new route [ 1452.385902][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1452.393509][T29326] erspan0: left allmulticast mode [ 1452.400183][T29326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14835'. [ 1452.465793][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1452.482524][T29329] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1452.486454][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1452.649883][T29338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14837'. [ 1452.927335][T29322] infiniband syz2: set down [ 1452.946127][T29322] infiniband syz2: added ip6_vti0 [ 1452.955950][T29322] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1452.973712][T29322] infiniband syz2: Couldn't open port 1 [ 1453.070972][T29322] RDS/IB: syz2: added [ 1453.078890][T29322] smc: adding ib device syz2 with port count 1 [ 1453.085924][T29322] smc: ib device syz2 port 1 has no pnetid [ 1453.276580][T29360] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14840'. [ 1453.286531][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1453.286566][ C0] lec:lec_tx_timeout: lec0 [ 1453.353527][T29362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14842'. [ 1453.537179][T29370] netlink: 'syz.4.14843': attribute type 21 has an invalid length. [ 1453.546185][T29370] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14843'. [ 1455.396987][ T5826] ip6_vti0 speed is unknown, defaulting to 1000 [ 1455.425458][T25488] ip6_vti0 speed is unknown, defaulting to 1000 [ 1455.435463][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1455.812795][T29404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1455.833760][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1455.984259][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1456.130790][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1456.278974][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1456.427344][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1456.574486][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1456.717061][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1456.855622][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1456.992208][T29322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1457.214558][T29413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14854'. [ 1457.259436][T29416] sctp: [Deprecated]: syz.0.14855 (pid 29416) Use of int in maxseg socket option. [ 1457.259436][T29416] Use struct sctp_assoc_value instead [ 1458.529896][T29390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1458.728530][T29424] Cannot find map_set index 65533 as target [ 1458.809058][T29427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14859'. [ 1458.845631][T29427] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1458.906183][T29427] team1: entered promiscuous mode [ 1458.916260][T29427] team1: entered allmulticast mode [ 1458.945092][T29446] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14865'. [ 1458.945641][T29439] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14862'. [ 1459.117676][T29455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14869'. [ 1459.148579][T29455] netlink: 'syz.3.14869': attribute type 1 has an invalid length. [ 1459.157581][T29455] netlink: 'syz.3.14869': attribute type 2 has an invalid length. [ 1459.164704][T29459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14867'. [ 1459.185452][T29455] netlink: 'syz.3.14869': attribute type 1 has an invalid length. [ 1459.215703][T29455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14869'. [ 1459.248695][T29455] IPv6: sit2: Disabled Multicast RS [ 1459.549825][T29485] wlan0 speed is unknown, defaulting to 1000 [ 1459.565514][T29485] ip6_vti0 speed is unknown, defaulting to 1000 [ 1459.890681][T29514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14881'. [ 1460.311287][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14886'. [ 1460.525760][T29535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14889'. [ 1460.642412][T29538] IPv6: sit1: Disabled Multicast RS [ 1460.663215][T29538] sit1: entered allmulticast mode [ 1461.092430][T29562] x_tables: duplicate underflow at hook 1 [ 1461.283951][T29574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1461.296264][T29574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.444399][T29574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1461.462086][T29574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.564686][T29591] netlink: 'syz.2.14903': attribute type 1 has an invalid length. [ 1461.642066][T29574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1461.673849][T29574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.715403][T29600] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1461.817477][T29591] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1461.857756][T29598] bond10: (slave geneve3): making interface the new active one [ 1461.869789][T29598] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 1461.986786][T29574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1462.018298][T29574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.061343][T19832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.072312][T19832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.098458][T19832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.116571][T19822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.136112][T29617] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1462.299131][T19832] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.343382][T19832] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.397223][T22227] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.406098][T22227] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.422377][T29636] __nla_validate_parse: 7 callbacks suppressed [ 1462.422399][T29636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14916'. [ 1462.477512][T19822] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.490630][T19822] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.529786][T19822] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.538237][T19822] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.770891][T29657] netlink: 'syz.2.14923': attribute type 1 has an invalid length. [ 1463.195144][T29684] netlink: 'syz.2.14931': attribute type 1 has an invalid length. [ 1463.197738][T29686] netlink: 830 bytes leftover after parsing attributes in process `syz.4.14932'. [ 1463.224779][T29686] ip6t_srh: unknown srh match flags 4000 [ 1463.260409][T29689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1463.263316][T29684] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1463.284925][T29690] vlan1: entered promiscuous mode [ 1463.295641][T29690] bond11: entered promiscuous mode [ 1463.329107][T29690] vlan1: entered allmulticast mode [ 1463.341415][T29690] bond11: entered allmulticast mode [ 1463.370686][T29686] lo: entered promiscuous mode [ 1463.387326][T29686] tunl0: entered promiscuous mode [ 1463.400159][T29686] gre0: entered promiscuous mode [ 1463.431985][T29686] gretap0: entered promiscuous mode [ 1463.451080][T29686] erspan0: entered promiscuous mode [ 1463.479993][T29686] ip_vti0: entered promiscuous mode [ 1463.518465][T29684] bond11: (slave bridge9): making interface the new active one [ 1463.527963][T29684] bridge9: entered promiscuous mode [ 1463.536805][T29684] bridge9: entered allmulticast mode [ 1463.548958][T29684] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 1463.772457][T29718] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 1463.842148][T29716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14939'. [ 1463.853841][T29720] netlink: 'syz.1.14941': attribute type 10 has an invalid length. [ 1463.935103][T29720] team0: Device – is of different type [ 1464.211046][T29741] netlink: 'syz.3.14948': attribute type 1 has an invalid length. [ 1464.225820][T29741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14948'. [ 1464.242282][T29735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.304747][T29735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.321183][T29747] netlink: 204 bytes leftover after parsing attributes in process `syz.0.14949'. [ 1464.349638][T29750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14945'. [ 1464.384958][T29742] ip6tnl0: entered promiscuous mode [ 1464.403619][T29742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14945'. [ 1464.487321][T29756] xt_socket: unknown flags 0x50 [ 1464.515275][T29760] netem: change failed [ 1464.681506][T29768] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14955'. [ 1464.705689][T29768] syzkaller1: entered promiscuous mode [ 1464.712295][T29768] syzkaller1: entered allmulticast mode [ 1464.921803][T29781] bond8: Unable to set up delay as MII monitoring is disabled [ 1464.960058][T29781] bond8 (unregistering): Released all slaves [ 1465.556489][T29806] syzkaller1: entered promiscuous mode [ 1465.563002][T29806] syzkaller1: entered allmulticast mode [ 1465.877031][T29817] netlink: 'syz.4.14970': attribute type 21 has an invalid length. [ 1465.898644][T29817] IPv6: NLM_F_CREATE should be specified when creating new route [ 1465.952009][T29819] syzkaller0: entered promiscuous mode [ 1465.957655][T29819] syzkaller0: entered allmulticast mode [ 1466.103873][T29824] netlink: 'syz.0.14972': attribute type 29 has an invalid length. [ 1466.129942][T29824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14972'. [ 1466.427201][T29841] netlink: 'syz.2.14975': attribute type 10 has an invalid length. [ 1466.451127][T29841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.494329][T29841] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1466.617443][T29852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14978'. [ 1466.902592][T29865] x_tables: duplicate underflow at hook 1 [ 1466.932178][T29867] : entered promiscuous mode [ 1467.031499][T29869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1467.546433][T29894] __nla_validate_parse: 3 callbacks suppressed [ 1467.546457][T29894] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14992'. [ 1467.752933][T29907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1467.850268][T29906] wlan0 speed is unknown, defaulting to 1000 [ 1467.897497][T29909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14997'. [ 1467.908094][T29909] gre0: entered allmulticast mode [ 1467.916858][T29906] ip6_vti0 speed is unknown, defaulting to 1000 [ 1468.203581][T29921] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.15000'. [ 1468.433118][T29928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15003'. [ 1469.570825][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15016'. [ 1469.574928][T29984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15017'. [ 1469.675215][T29988] syzkaller0: entered promiscuous mode [ 1469.718000][T29988] syzkaller0: entered allmulticast mode [ 1469.871138][T30002] netlink: 'syz.0.15021': attribute type 1 has an invalid length. [ 1469.879460][T30002] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15021'. [ 1470.327432][T30025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15027'. [ 1470.480767][T30032] Cannot find add_set index 2 as target [ 1470.493994][T30034] netdevsim0: renamed from gre0 [ 1470.510015][T30034] netdevsim0: entered promiscuous mode [ 1470.516394][T30034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1470.661491][T30038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15031'. [ 1470.676946][T30042] vlan4: entered allmulticast mode [ 1470.682954][T30042] bond0: entered allmulticast mode [ 1470.691090][T30042] bond_slave_0: entered allmulticast mode [ 1470.697032][T30042] bond_slave_1: entered allmulticast mode [ 1470.715367][T30042] batadv0: entered allmulticast mode [ 1470.724949][T30042] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15032'. [ 1470.841949][T30042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.863476][T30048] netlink: 'syz.4.15032': attribute type 1 has an invalid length. [ 1470.874368][T30042] bond_slave_0: left allmulticast mode [ 1470.896386][T30048] nbd: error processing sock list [ 1470.912881][T30042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.938831][T30042] bond_slave_1: left allmulticast mode [ 1470.956513][T30042] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1470.967324][T30042] batadv0: left allmulticast mode [ 1470.999690][T30042] bond0 (unregistering): Released all slaves [ 1471.432055][T14014] Bluetooth: hci4: command tx timeout [ 1471.860785][T30098] siw: device registration error -23 [ 1472.015460][T30106] netlink: 'syz.3.15051': attribute type 1 has an invalid length. [ 1472.081878][T30106] bond3: (slave gretap2): making interface the new active one [ 1472.090649][T30106] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1472.152371][T30112] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1472.332898][T30125] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1472.344136][T30126] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1472.483472][T30138] netlink: ct family unspecified [ 1472.667966][T30147] syzkaller1: entered promiscuous mode [ 1472.674516][T30142] siw: device registration error -23 [ 1472.686811][T30142] netlink: 'syz.3.15063': attribute type 4 has an invalid length. [ 1472.686872][T30147] syzkaller1: entered allmulticast mode [ 1473.577500][T30185] __nla_validate_parse: 5 callbacks suppressed [ 1473.577524][T30185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15075'. [ 1480.537821][ C0] sched: DL replenish lagged too much [ 1486.741284][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1495.082872][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1500.111864][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1500.120045][ C0] lec:lec_tx_timeout: lec0 [ 1547.426290][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1551.043931][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1556.077186][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1556.085314][ C0] lec:lec_tx_timeout: lec0 [ 1596.372696][T27966] Bluetooth: hci4: command 0x0406 tx timeout [ 1600.217741][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1600.224840][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30187/1:b..l [ 1600.233443][ C1] rcu: (detected by 1, t=10503 jiffies, g=288333, q=894107 ncpus=2) [ 1600.241630][ C1] task:syz.3.15076 state:R running task stack:26848 pid:30187 tgid:30186 ppid:21555 task_flags:0x40054c flags:0x00080003 [ 1600.257065][ C1] Call Trace: [ 1600.260475][ C1] [ 1600.263447][ C1] __schedule+0x15dd/0x52d0 [ 1600.268023][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1600.273214][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1600.278236][ C1] ? __pfx___schedule+0x10/0x10 [ 1600.283312][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1600.288390][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1600.293517][ C1] irqentry_exit+0x599/0x620 [ 1600.298660][ C1] ? trace_irq_disable+0x3b/0x150 [ 1600.303728][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1600.309740][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 1600.315062][ C1] Code: e9 30 ff ff ff e8 35 79 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 b1 76 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 16 5f 0f 0a cc 48 8d 3d 6e 60 73 [ 1600.334708][ C1] RSP: 0018:ffffc90003fc7290 EFLAGS: 00000296 [ 1600.340835][ C1] RAX: 51c4d589e3ab9a00 RBX: 0000000000000246 RCX: 0000000000000046 [ 1600.349116][ C1] RDX: 00000000a69b4a9e RSI: ffffffff8e166561 RDI: ffffffff8c27b580 [ 1600.357131][ C1] RBP: 0000000000000000 R08: ffffffff81d54476 R09: ffffffff8e75e420 [ 1600.365231][ C1] R10: ffffc90003fc73b8 R11: ffffffff81b0bfa0 R12: 0000000000000002 [ 1600.373234][ C1] R13: ffffffff8e75e420 R14: 0000000000000000 R15: 0000000000000000 [ 1600.381259][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1600.387474][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1600.392752][ C1] is_bpf_text_address+0x47/0x2b0 [ 1600.398172][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1600.403412][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1600.408743][ C1] kernel_text_address+0xa5/0xe0 [ 1600.413726][ C1] __kernel_text_address+0xd/0x30 [ 1600.418872][ C1] unwind_get_return_address+0x4d/0x90 [ 1600.424370][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1600.430615][ C1] arch_stack_walk+0xfb/0x150 [ 1600.435441][ C1] stack_trace_save+0xa9/0x100 [ 1600.440326][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1600.445735][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1600.451241][ C1] kasan_save_track+0x3e/0x80 [ 1600.455960][ C1] ? kasan_save_track+0x3e/0x80 [ 1600.460859][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1600.465765][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1600.471348][ C1] ? kmem_cache_free+0x15b/0x630 [ 1600.476330][ C1] ? tear_down_vmas+0x312/0x520 [ 1600.481211][ C1] ? exit_mmap+0x4b6/0xa10 [ 1600.485657][ C1] ? __mmput+0x118/0x430 [ 1600.490033][ C1] ? exit_mm+0x168/0x220 [ 1600.494318][ C1] ? do_exit+0x6a2/0x23c0 [ 1600.498777][ C1] ? do_group_exit+0x21b/0x2d0 [ 1600.504022][ C1] ? get_signal+0x1284/0x1330 [ 1600.508839][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 1600.514598][ C1] ? exit_to_user_mode_loop+0x86/0x480 [ 1600.520092][ C1] ? do_syscall_64+0x32d/0xf80 [ 1600.524891][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.531056][ C1] __kasan_kmalloc+0x93/0xb0 [ 1600.535773][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 1600.541177][ C1] ? kmem_cache_free+0x15b/0x630 [ 1600.546144][ C1] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1600.551799][ C1] kmem_cache_free+0x15b/0x630 [ 1600.556604][ C1] ? tear_down_vmas+0x312/0x520 [ 1600.561521][ C1] tear_down_vmas+0x312/0x520 [ 1600.566354][ C1] exit_mmap+0x4b6/0xa10 [ 1600.570747][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1600.575593][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1600.580335][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1600.585669][ C1] __mmput+0x118/0x430 [ 1600.589866][ C1] exit_mm+0x168/0x220 [ 1600.593987][ C1] do_exit+0x6a2/0x23c0 [ 1600.598373][ C1] ? __pfx_do_exit+0x10/0x10 [ 1600.603165][ C1] ? cgroup1_freezing+0x20/0x350 [ 1600.608232][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1600.613301][ C1] do_group_exit+0x21b/0x2d0 [ 1600.617988][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1600.623246][ C1] get_signal+0x1284/0x1330 [ 1600.628422][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1600.634133][ C1] ? __pfx_task_work_add+0x10/0x10 [ 1600.639452][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1600.645638][ C1] ? sock_ioctl+0x5c6/0x7f0 [ 1600.650401][ C1] ? __fput_deferred+0x216/0x380 [ 1600.655395][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1600.660868][ C1] ? rcu_is_watching+0x15/0xb0 [ 1600.665687][ C1] do_syscall_64+0x32d/0xf80 [ 1600.670485][ C1] ? trace_irq_disable+0x3b/0x150 [ 1600.675630][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.681822][ C1] ? clear_bhb_loop+0x40/0x90 [ 1600.686557][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.692485][ C1] RIP: 0033:0x7fd0b679c799 [ 1600.697052][ C1] RSP: 002b:00007fd0b7699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1600.705859][ C1] RAX: ffffffffffffffed RBX: 00007fd0b6a15fa0 RCX: 00007fd0b679c799 [ 1600.713949][ C1] RDX: 0000200000000340 RSI: 0000000000008933 RDI: 0000000000000005 [ 1600.721987][ C1] RBP: 00007fd0b6832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1600.730244][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.738420][ C1] R13: 00007fd0b6a16038 R14: 00007fd0b6a15fa0 R15: 00007ffdbb471b48 [ 1600.746512][ C1] [ 1600.749642][ C1] rcu: rcu_preempt kthread starved for 678 jiffies! g288333 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1600.760966][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1600.771060][ C1] rcu: RCU grace-period kthread stack dump: [ 1600.776980][ C1] task:rcu_preempt state:R running task stack:27656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1600.790604][ C1] Call Trace: [ 1600.793921][ C1] [ 1600.796908][ C1] __schedule+0x15dd/0x52d0 [ 1600.801583][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1600.806607][ C1] ? __pfx___schedule+0x10/0x10 [ 1600.811675][ C1] ? schedule+0x90/0x360 [ 1600.815975][ C1] schedule+0x164/0x360 [ 1600.820176][ C1] schedule_timeout+0x158/0x2c0 [ 1600.825145][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1600.830662][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1600.835999][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1600.841849][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1600.847434][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1600.852431][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1600.858882][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1600.864393][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1600.869645][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1600.874282][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1600.879595][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1600.885441][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1600.890400][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1600.895497][ C1] kthread+0x388/0x470 [ 1600.899785][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1600.905097][ C1] ? __pfx_kthread+0x10/0x10 [ 1600.909712][ C1] ret_from_fork+0x51e/0xb90 [ 1600.914619][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1600.919882][ C1] ? __switch_to+0xc7d/0x1450 [ 1600.924746][ C1] ? __pfx_kthread+0x10/0x10 [ 1600.929397][ C1] ret_from_fork_asm+0x1a/0x30 [ 1600.934410][ C1] [ 1600.937464][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1600.943906][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1600.949151][ C0] NMI backtrace for cpu 0 [ 1600.949170][ C0] CPU: 0 UID: 0 PID: 22202 Comm: kworker/u8:41 Not tainted syzkaller #0 PREEMPT(full) [ 1600.949190][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1600.949201][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1600.949228][ C0] RIP: 0010:__lock_acquire+0x4f1/0x2cf0 [ 1600.949252][ C0] Code: 0f 84 cc 04 00 00 41 3b 9e 50 0b 00 00 0f 8d f5 00 00 00 4c 63 fb 4b 8d 04 bf 49 8d 1c c6 48 81 c3 78 0b 00 00 eb 1d 44 89 e0 <49> ff c7 49 63 8e 50 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d [ 1600.949267][ C0] RSP: 0018:ffffc900000067d8 EFLAGS: 00000093 [ 1600.949281][ C0] RAX: 0000000000000003 RBX: ffff88802efe8c40 RCX: ffffffff93c4d988 [ 1600.949293][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 1600.949304][ C0] RBP: ffff88802efe8c98 R08: ffffffff81767de5 R09: ffffffff8e75e420 [ 1600.949316][ C0] R10: ffffc90000006ab8 R11: ffffffff81b0bfa0 R12: 0000000000000003 [ 1600.949328][ C0] R13: ffff88802efe8c98 R14: ffff88802efe8000 R15: 0000000000000005 [ 1600.949339][ C0] FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 1600.949353][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1600.949365][ C0] CR2: 00005616d205b008 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1600.949383][ C0] Call Trace: [ 1600.949389][ C0] [ 1600.949402][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1600.949424][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1600.949450][ C0] lock_acquire+0xf0/0x2e0 [ 1600.949469][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1600.949492][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1600.949513][ C0] ? smp_text_poke_batch_finish+0x5f5/0x1160 [ 1600.949531][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1600.949552][ C0] unwind_next_frame+0xc2/0x23c0 [ 1600.949573][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1600.949598][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1600.949619][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 1600.949636][ C0] ? smp_text_poke_batch_finish+0x5f5/0x1160 [ 1600.949654][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1600.949673][ C0] arch_stack_walk+0x11b/0x150 [ 1600.949698][ C0] ? smp_text_poke_batch_finish+0x5f5/0x1160 [ 1600.949716][ C0] ? dst_alloc+0x105/0x170 [ 1600.949733][ C0] stack_trace_save+0xa9/0x100 [ 1600.949749][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1600.949768][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1600.949796][ C0] kasan_save_track+0x3e/0x80 [ 1600.949812][ C0] ? kasan_save_track+0x3e/0x80 [ 1600.949828][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1600.949844][ C0] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1600.949860][ C0] ? dst_alloc+0x105/0x170 [ 1600.949875][ C0] ? ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1600.949899][ C0] ? ip_route_output_key_hash+0x18d/0x2a0 [ 1600.949920][ C0] ? ip_route_output_flow+0x2a/0x150 [ 1600.949941][ C0] ? ip_route_me_harder+0x742/0xf90 [ 1600.949956][ C0] ? synproxy_send_tcp+0x34c/0x670 [ 1600.949977][ C0] ? synproxy_send_client_synack+0x8c1/0xe30 [ 1600.949999][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 1600.950014][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 1600.950030][ C0] ? nft_do_chain+0x45e/0x1990 [ 1600.950045][ C0] ? nft_do_chain_inet+0x29d/0x380 [ 1600.950060][ C0] ? nf_hook_slow+0xc5/0x220 [ 1600.950081][ C0] ? NF_HOOK+0x21f/0x3c0 [ 1600.950098][ C0] ? NF_HOOK+0x336/0x3c0 [ 1600.950114][ C0] ? process_backlog+0xaa3/0x1950 [ 1600.950135][ C0] ? __napi_poll+0xae/0x340 [ 1600.950152][ C0] ? net_rx_action+0x627/0xf70 [ 1600.950172][ C0] ? handle_softirqs+0x22a/0x870 [ 1600.950191][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1600.950210][ C0] ? irq_exit_rcu+0x9/0x30 [ 1600.950228][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1600.950250][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1600.950266][ C0] ? smp_call_function_many_cond+0xcf6/0x12c0 [ 1600.950283][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 1600.950298][ C0] ? smp_text_poke_batch_finish+0x5f5/0x1160 [ 1600.950328][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1600.950347][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1600.950362][ C0] ? dst_alloc+0x105/0x170 [ 1600.950378][ C0] ? __pfx_find_exception+0x10/0x10 [ 1600.950398][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1600.950417][ C0] dst_alloc+0x105/0x170 [ 1600.950436][ C0] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1600.950463][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1600.950487][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 1600.950510][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1600.950540][ C0] ip_route_output_flow+0x2a/0x150 [ 1600.950561][ C0] ? ip_route_me_harder+0x730/0xf90 [ 1600.950577][ C0] ip_route_me_harder+0x742/0xf90 [ 1600.950592][ C0] ? ret_from_fork+0x51e/0xb90 [ 1600.950610][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1600.950638][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1600.950660][ C0] ? __cookie_v4_init_sequence+0x25d/0x500 [ 1600.950684][ C0] synproxy_send_tcp+0x34c/0x670 [ 1600.950708][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 1600.950737][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1600.950759][ C0] ? nft_tproxy_eval+0xed8/0x1b00 [ 1600.950781][ C0] ? synproxy_pernet+0x45/0x270 [ 1600.950800][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1600.950820][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1600.950838][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1600.950857][ C0] nft_synproxy_do_eval+0x305/0x580 [ 1600.950877][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1600.950893][ C0] ? ip_vs_service_find+0xa6b/0xf10 [ 1600.950919][ C0] nft_do_chain+0x45e/0x1990 [ 1600.950935][ C0] ? __pfx_tcp_conn_schedule+0x10/0x10 [ 1600.950961][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 1600.950979][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1600.951007][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1600.951027][ C0] nft_do_chain_inet+0x29d/0x380 [ 1600.951043][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1600.951062][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1600.951084][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1600.951101][ C0] nf_hook_slow+0xc5/0x220 [ 1600.951124][ C0] NF_HOOK+0x21f/0x3c0 [ 1600.951143][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1600.951162][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1600.951180][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1600.951197][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1600.951217][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1600.951238][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1600.951259][ C0] NF_HOOK+0x336/0x3c0 [ 1600.951277][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1600.951296][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1600.951313][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1600.951333][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1600.951354][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1600.951371][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1600.951389][ C0] ? process_backlog+0x3eb/0x1950 [ 1600.951409][ C0] process_backlog+0xaa3/0x1950 [ 1600.951438][ C0] __napi_poll+0xae/0x340 [ 1600.951456][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1600.951478][ C0] net_rx_action+0x627/0xf70 [ 1600.951498][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1600.951525][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1600.951557][ C0] handle_softirqs+0x22a/0x870 [ 1600.951578][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1600.951616][ C0] __irq_exit_rcu+0x5f/0x150 [ 1600.951635][ C0] irq_exit_rcu+0x9/0x30 [ 1600.951653][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1600.951676][ C0] [ 1600.951681][ C0] [ 1600.951688][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1600.951705][ C0] RIP: 0010:smp_call_function_many_cond+0xcf6/0x12c0 [ 1600.951722][ C0] Code: 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 cf e1 0b 00 eb 38 f3 90 42 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 <74> 1e e8 b3 e1 0b 00 eb e4 44 89 e1 80 e1 07 80 c1 03 38 c1 7c e2 [ 1600.951736][ C0] RSP: 0018:ffffc900053af720 EFLAGS: 00000202 [ 1600.951749][ C0] RAX: 0000000000000000 RBX: 1ffff110170e812d RCX: ffff88802efe8000 [ 1600.951761][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1600.951777][ C0] RBP: ffffc900053af860 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 1600.951789][ C0] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: ffff8880b8740968 [ 1600.951801][ C0] R13: dffffc0000000000 R14: ffff8880b863bf80 R15: 0000000000000001 [ 1600.951822][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1600.951842][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1600.951867][ C0] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 1600.951886][ C0] ? __pfx___text_poke+0x10/0x10 [ 1600.951903][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1600.951917][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1600.951934][ C0] smp_text_poke_batch_finish+0x5f5/0x1160 [ 1600.951954][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1600.951971][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1600.951990][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1600.952013][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1600.952032][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1600.952056][ C0] static_key_disable+0x1a/0x20 [ 1600.952077][ C0] toggle_allocation_gate+0x1fe/0x290 [ 1600.952096][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1600.952115][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1600.952135][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1600.952155][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1600.952175][ C0] process_scheduled_works+0xb02/0x1830 [ 1600.952206][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1600.952228][ C0] ? assign_work+0x3d5/0x5e0 [ 1600.952249][ C0] worker_thread+0xa50/0xfc0 [ 1600.952280][ C0] kthread+0x388/0x470 [ 1600.952296][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1600.952314][ C0] ? __pfx_kthread+0x10/0x10 [ 1600.952330][ C0] ret_from_fork+0x51e/0xb90 [ 1600.952350][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1600.952378][ C0] ? __switch_to+0xc7d/0x1450 [ 1600.952402][ C0] ? __pfx_kthread+0x10/0x10 [ 1600.952417][ C0] ret_from_fork_asm+0x1a/0x30 [ 1600.952445][ C0]