last executing test programs: 2m22.881997412s ago: executing program 1 (id=8526): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x10, 0x700, 0x7f, 0x4, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0x65, 0x0, 0x1, 0x2d, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x26, 0x3, [{0x5, 0xf, "19b0a0df9029e410d987673aa6"}, {0x2, 0x8, "2c8622fc3a8c"}, {0x0, 0x9, "a8e57f90c07550"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x10, 0x700, 0x7f, 0x4, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0x65, 0x0, 0x1, 0x2d, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x26, 0x3, [{0x5, 0xf, "19b0a0df9029e410d987673aa6"}, {0x2, 0x8, "2c8622fc3a8c"}, {0x0, 0x9, "a8e57f90c07550"}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0xd8, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xc4, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x10000000, 0x717, 0x401}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x10001, 0x3, 0x8a9, 0x5}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000240)="94", 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2m22.708115002s ago: executing program 1 (id=8527): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x2, 0x4) sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0x3, 0x0, 0x3e}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="17cec3c0c6da3472ee5701271a750313bc66", 0x12}, {&(0x7f0000000400)}, {&(0x7f0000000500)="7feeaf8962c97d03ea75fb0a510f948732040dc6dfa2da59ddaeff71994277b5f872e5256c4c8b49139c7af210c5db83f52d8b36c49bb41f60c82dd4dc78ae1248c4e51ca69f323061817445ddc5baa4c0139f4cdbb56eb616dad8057d46dab4f29a8465dbb66ae5d011e910ea25dbfafeca0e2f8dade2b85aff3f95f2113d5615a7cfdfd194adbe42047d58027091caffc0598471127aea0ff78f6afdc38f0627a732b7a376174c3cdf32f6575d16b261", 0xb1}, {&(0x7f00000005c0)="6e6013b5c108f9d3bc22c987ee038edfd7edb6316ab6d69b7b5f11f4fbfae50540a024c3e1c3c174f8d0a1dc531a5069f069a0cd35948f55ebb300d2d68a3d9524c914fcc594a6c3b35a2d3f5a92f288f372b851898ee103e3e6aee1e593ea9dbfec105979634133028c690ca6368a7a1d", 0x71}, {&(0x7f0000000640)="84d50eb96e38467581376e10020db379ed7a834da9bf5f3615070d36db14877ba4fb6dbcf86a1a75148df208479b12db9a6fd2091bd72a902f", 0x39}], 0x6, 0x0, 0x0, 0x200008c0}, 0x24004000) 2m21.372282368s ago: executing program 1 (id=8545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x3, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x9000000}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040)="15c26970d93d8be3334110c89635249c13a8", &(0x7f0000000080)=""/158, &(0x7f0000000140)="74e9230ebbb390c59bb29bd7b638c8ab1f788fc6a2889acf1fc7ab56268d4d5b3a2e0619209c5925bc85c01c686c1136ceac5803e4df5932420ed038d1e8f695c20e65b5b02bc0113a38a67bf33b9f0fc683816156c4e62372a63a2eefe67477b5b6419ccf13c7f59748a2d00bfe4520c1a0384046ac0581dc2e0d4653eb92fa2890510ebaad9f8cc5d2737ed9166717e9fba87f1556cbe21c32a7926773bdccd386e4ef9cec2d621788", &(0x7f0000000200)="981883ede9e6259068c278896159f060", 0x2, r1}, 0x38) 2m21.197030066s ago: executing program 1 (id=8549): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) close(0x3) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r0, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 2m21.168496145s ago: executing program 1 (id=8551): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c", 0xc9}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388", 0x93}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b", 0xcd}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af", 0x73}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674eff7875169861ce6274b379522d411d3766aa7de767671efa60a1fb949feae7ec37efdfbcf1afd4d5cf86a0f9ae55644480d6a5e735b84303583d6c2534badb3981b5448037697faa59cc666dd9ac5c7d019b47f102d78fcc0f1b609fdc51fd8d0", 0xec}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m21.043682953s ago: executing program 1 (id=8554): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x8001, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept(r0, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x19}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0xac, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x373239d4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x240448c4}, 0x448e4) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x9, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m5.917233291s ago: executing program 32 (id=8554): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x8001, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept(r0, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x19}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0xac, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x373239d4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x240448c4}, 0x448e4) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x9, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.030035871s ago: executing program 0 (id=10172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x4e23, 0x0, 0x4e24, 0x9, 0xa, 0x0, 0x20, 0x2c}, {0x80000000, 0x2, 0x100, 0xffffffffffffffff, 0xffffffff, 0x0, 0x2, 0xfc}, {0x0, 0x1, 0x2, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x2, 0x4, 0x0, 0x2, 0x7, 0x2, 0x1000}}, 0xe8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x8}}}, 0x2a) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 2.503387855s ago: executing program 0 (id=10180): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x0, 0x28) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request}}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x10000000, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 1.720592844s ago: executing program 5 (id=10192): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r0], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) close(0x3) (async) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) close(0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000580)={0x40000008}) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250b00000008000300", @ANYRES32=r10, @ANYBLOB="0800370002000000090007004e7cf397d900e600"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250b00000008000300", @ANYRES32=r10, @ANYBLOB="0800370002000000090007004e7cf397d900e600"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xf, 0x6, &(0x7f0000000080)="1b0ff58263fb7156ab73b0c541dcd4", &(0x7f0000000180)=""/6, 0x5, 0x0, 0x59, 0xf8, &(0x7f00000001c0)="6d56bf0f1fa2b69b8667eae9b6b4e74403d7070ae2eb5a6cd156a8e39535d69dc381c29b1dda061f18f6feec869c0c7fe0b13108d2c7d30afc4e6d3facdc72775b69512b1059adf30042e2473f240af8e60f744034adbed733", &(0x7f0000000280)="018d4213866715d75e71eff75e0835efb0779ab01bc6c25e661da86d6b8ec1675699bf6d83effc9eaf69b36bd41a6144926366203e82c3c03e130539f1e23768602d52c27c66b4a53b09d4e3df270d6622e63359252bac0c83883c72ff2e3b8c9a284def7814e6952ef6ee4d905c20c968d97cad41847f2370030616fcadd994ba1a9f8d9ba0cb8399af733dac45c2d50f63f80d07cfa7e16d751ac3e64ca89582d2a9e99645e8245d3bcbd44f1abadd88f32f41bffcf1484c633e0e56b321a4a858920247d7e0d402670d77a798978273ecc70da8593be1686bc8a124233ce20cf9aae8c22f5ea1c416c593c6a3c13c7d3d918c693eec6b", 0x2, 0x0, 0xc}, 0x50) 1.705897107s ago: executing program 0 (id=10195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001002009377098d8defb11200000a4c000000090a010400000000000000000000000008000a40000000000800f54dffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008814000000104900010000000000000000000084000a"], 0x74}}, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="07e8a9abafa0a49c2d72d6f1a4746c9196c29034a6fc8dfabe96ac103b0936f150cd9fa15dc347ec19f62b81eddbf6566544915ec9d068780585722d8201a40d23e4729997126087cd4b3c94a148ff9e10f1e75107183455a4c6cf929884dd00b8a6aada516e82dbccb4464ca015248c35246eb61092e60cfe7548a11ca1bccb6b224c6bd580c3d513411b6dcac36aab8cc8e3abd0c198cf5e1b3ce925f78bf824201bee7fea86395bae41c88a704c09b463d90fad847dc83ec06f85fd73ddad67617ccf81a6f53b1fdcb95959702f9ba65a7082f552f31e1282c39e6986d000873ddde9346e893632d61e11a63dc8704023c90f60e9d02d9c71a49779f012", 0xff}, {&(0x7f0000000080)="5cfe5598c9c8cdd40acacc7b4830833ee6f7341d233d78952333f598bd36c725e195d4", 0x23}, {&(0x7f0000000200)="113c2162ccd99395e3532a1f3b0de9614d22e460f77ccbb513a46e2687953c4bb6abb50644d86c93aa2e7e3bfc599c56b8a6132a8d38235cb9816e32952003c4863c79d2b9f8bbc62907b66108c5f2373a277638d7f86b8cc9d95a359a7fc3f38b94eba1b7b6b7cedc94aa87f99e6b9796916486e83128f2e5a0e8ad3bc77cee63b85d1b", 0x84}, {&(0x7f00000002c0)="da76adf8225a26da8c8d445f332b0e13aab52ecdf6fa31bca809c13cfb0cf14ccb560c5377d00336ab7e1f9ea2b49c689ad67a9357c79ecb7e978c6533a941297b20a9d718d7eb2bc57e436b553db19ed0015622fecb599ce25093a25d239c69507b52302999abb71bd470ab70e13f2e0776723cc95a4000ad8760d7b62a08f98828158b86bd7f1ec0b62a552061fd09983acc56f5356b405796d434cd10c5e897ea843cc69adfd57dc438a3a2fe32", 0xaf}], 0x4, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x60, 0x0, 0x7, {[@rr={0x7, 0xb, 0x48, [@local, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_addr={0x44, 0x34, 0x9, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x22}, {@local, 0xfffff1eb}, {@multicast2, 0x2}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@empty, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x6, "2564185f"}, @generic={0x88, 0x3, '9'}]}}}], 0x78}, 0x20044801) 1.561335809s ago: executing program 5 (id=10197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="020100000a0000000000000000000000030006000000000002000000ac1414aa0000000000000000030005000000000002000000ffffffff000000000000000002001300020000000000000000000000ec817eba6e70e9b8269c5d307f65dda3dbbb80bdd1d68845d37e40e13f735385f27ca6813e4dd5d9772ad1de02c83ef608f43a95d0c78b38fc63ed91388c15f14f453080f88078ea91fb73ff7afe174ae1fa56681de9c9bcb2b0a4ea43f3648fec4785e6bde5ac8e8f0a363f7fa10a73c33cf4ec1a544c3032f6593a0b99fa894f8620379563d63c3caaee261e22db8bfdcb09e8983c4f3c8e904b61987ec3599e725a"], 0x50}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r8, &(0x7f0000000000)={0xa0000001}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, 0x7, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000040)={0x2004}) epoll_pwait(r12, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x34}}, 0x80) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b40000000002400048020000180080001006677640014000280080002400000000d08000140000000160900010073797a3000000000140000001100010000000000000000000000000a20e121a7a690ec5b7894f5c85fc38281442e25e9ed5e3aa9bf322082205b8c675ae9b6c4"], 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket(0xf, 0x6, 0x8) 1.412538432s ago: executing program 0 (id=10199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) 1.093088656s ago: executing program 3 (id=10202): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendto$l2tp(r2, &(0x7f0000000000)="d368e4af92b32e7124979bcd903fb43d2c0f344790ab196e64182f8826fc1a54acebb8146022ce64152fed444c52c7ebd31c68dbe3131032f721cb6c51e5ff28e7d158a9ae30", 0x46, 0x80, &(0x7f0000000080)={0x2, 0x0, @private=0xa010102, 0x3}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) sendto$l2tp(r2, &(0x7f0000000000)="d368e4af92b32e7124979bcd903fb43d2c0f344790ab196e64182f8826fc1a54acebb8146022ce64152fed444c52c7ebd31c68dbe3131032f721cb6c51e5ff28e7d158a9ae30", 0x46, 0x80, &(0x7f0000000080)={0x2, 0x0, @private=0xa010102, 0x3}, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) (async) 1.092489552s ago: executing program 0 (id=10203): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r2 = socket$caif_stream(0x25, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) close(r5) 1.027719142s ago: executing program 3 (id=10204): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r3 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x3c, &(0x7f0000000140)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000380)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x43, 0x2, 0x6, 0x4}, &(0x7f0000000440)=0x98) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000000)={0x12, "568436811fa96359062114bb92c690a16112438091b17d89f8514e88262890e8009c3ef09dc13a77ee6640cd93386067d7ed77d0bc80a3f021c16a633c712590d0edfb0f8d745e3eb47b47612bcc46766b213a86122d8b237f8b10557ff0409f77a786395f752c19644143e99e2e9c2b5321cda2cf02aadd4187b540184dcd84"}) 915.706169ms ago: executing program 2 (id=10206): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x8, 0x9a, 0x100, 0xc40, 0x3, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x1, 0x1, 0x1, 0xe0000000}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r4, @in={{0x2, 0x4e24, @private=0xa010100}}, 0xff81, 0x8001}, 0x90) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r6 = socket$can_j1939(0x1d, 0x2, 0x7) write(r6, &(0x7f0000000300)="a971a5d2b86704793526337ede9832ccb99eca4f30054d8b58a7468ca86bfe08137c5bbd0ba72eed7e6692fd3169f9d6af9e9c0ffe324d4717155b515ccde9fde904ed3257eb5470de4660779a84be41d88b1e7c38a0fdbe9f7ff8b0407f99f59c9b8a5e9b5e31ded0dbc26e8392dff3b8209fd1dd416f8103ec706ad7104882800c24", 0x83) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) connect$netlink(r2, &(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000440)={r3, 0x7, 0x2}, 0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r10 = accept4$inet6(r9, &(0x7f0000000500)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000540)=0x1c, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000580)) r11 = accept$ax25(r2, &(0x7f00000005c0)={{0x3, @null}, [@bcast, @default, @rose, @default, @null, @null, @default, @bcast]}, &(0x7f0000000640)=0x48) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, r11) r13 = socket$pppl2tp(0x18, 0x1, 0x1) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r14, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40c5) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000800)=0x1) ioctl$PPPIOCSMRU(r13, 0x40047452, &(0x7f0000000840)=0x81) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000880), &(0x7f00000008c0)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x9, 0x12, &(0x7f0000000a00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56214c98}}, @call={0x85, 0x0, 0x0, 0xc8}], &(0x7f0000000ac0)='GPL\x00', 0x9, 0xf6, &(0x7f0000000b00)=""/246, 0x41000, 0x3f, '\x00', r7, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x2, 0x3, 0x3, 0x111}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)=[r0, 0x1], 0x0, 0x10, 0xffff32de}, 0x94) 721.693483ms ago: executing program 3 (id=10207): r0 = socket(0x11, 0xb, 0xee0c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bind$packet(r0, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0x5, 0x6, @link_local}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r8], 0x20}}, 0x2000e844) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc042aa1f8481f0000005e140604000000000e000a00faffffff02800000121f", 0x2e}], 0x1}, 0x0) 720.455786ms ago: executing program 0 (id=10208): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000d58d6c5ee5640d502d83a5271f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, 0x0, &(0x7f00000000c0)=""/85}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000240001800a000100726564697200000014000280080001400000001108000240000000110900010073797a30000000001400000011000100"], 0xf8}}, 0x0) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff0e, 0x10008095, 0x0, 0x0) 718.99642ms ago: executing program 4 (id=10209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) 717.042264ms ago: executing program 2 (id=10210): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000100)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x11, 0x0, 0x3}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x60}]}, 0x3c}}, 0x0) 564.569994ms ago: executing program 4 (id=10211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="6af181fc91ba042f021a7ab4ea0500000022ded63f0f149695a3ab30", 0x1c}, {&(0x7f0000000140)="c3", 0x1}], 0x2}}], 0x1, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x3, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 524.021538ms ago: executing program 5 (id=10212): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @empty, 'geneve0\x00'}}, 0x1e) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c204"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3", @ANYRES64=r3], 0x38}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) sendmsg$nl_generic(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000084458fc040000100fcff070004000000edffffff040048800c00018072eafb466532f6325c2e3be46e3c99f008001080"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 448.652873ms ago: executing program 2 (id=10213): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f06f53298346ab32dbad27ff0dd80d3035d46e0918cc5bda89dee85c46bbcf8d583d391cd8477fa3618f31ea2a4b4a245f07999b40ceb59f7933443465efdbc179ef5d120d1615683ab4b7e296ca5c95c7e68e0c6fec8f6f05849281e409be76a840c4239e72940c5d321bf27aa1add2af09b09daf327d0e31eede43a2275725e2b338c1064629ba8dde31d4364b194eb4ad915864a38c7160144d000000000000", @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @local}}, [0x5, 0x1, 0x3, 0x37ea, 0x100, 0x1d5e5d3e, 0x8000000000000001, 0x80000001, 0x7, 0xd, 0x8388, 0x7fff, 0x4, 0x9, 0x9]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000005c0)={r6, 0x1}, &(0x7f0000000600)=0x8) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x1f, 0x24, 0x1}, 0x24}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xa0, 0x1405, 0x20, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x180) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2d, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x80000000, @empty, 0x2}}]}, 0x50}, 0x1, 0x7}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) (async) sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r7, 0x1) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x1, 0x8, 0x800, 0x5, {{0x11, 0x4, 0x3, 0x14, 0x44, 0x64, 0x0, 0xc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, {[@ssrr={0x89, 0x23, 0xb5, [@remote, @broadcast, @empty, @rand_addr=0x64010100, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x2, 0x0}, @private=0xa010100]}, @generic={0x16, 0xd, "6c80056b470ea540ab7712"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', r10, 0x8000, 0x700, 0x7f, 0x7, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @multicast1, {[@noop, @cipso={0x86, 0x5f, 0x3, [{0x6, 0x12, "93fd63ddd830e5da750a6f45d656f867"}, {0x7, 0x2}, {0x7, 0xd, "f056e7f8feb99e8e90b113"}, {0x7, 0x12, "2c2ebe01391e882ec8a1e513e95fdc27"}, {0x2, 0x7, "dad0b56416"}, {0x5, 0x2}, {0x6, 0x8, "49b8bca0508d"}, {0x6, 0x5, "0af3c4"}, {0x0, 0x10, "6ca4a88b184fdcff7f5b9d3480f9"}]}, @timestamp_addr={0x44, 0x24, 0x46, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x9}]}, @end]}}}}}) (async) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, 0x0) 385.048904ms ago: executing program 4 (id=10214): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$alg(r0, &(0x7f0000009480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040081}], 0x1, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, r3, 0xff462000) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "17f78a4231c724fb", "91f4de83e53c642c05b4749fd769714a", "e2dfe93c", "9ba50c63d5d9556c"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x3c) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400040000000007040000f0ffffffb702000003c2df0000000000", @ANYRESDEC, @ANYRESHEX=r1], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 384.562624ms ago: executing program 3 (id=10215): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) clock_gettime(0x0, &(0x7f0000005000)) (async) clock_gettime(0x0, &(0x7f0000005000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000002500)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/162, 0xa2}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f0000001400)=""/246, 0xf6}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x9}, 0x5}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000025c0)=""/103, 0x67}, {&(0x7f0000002640)=""/232, 0xe8}, {&(0x7f00000027c0)=""/170, 0xaa}, {&(0x7f0000002740)=""/8, 0x8}, {&(0x7f0000002880)=""/140, 0x8c}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x6, &(0x7f00000039c0)=""/21, 0x15}, 0xcd}, {{&(0x7f0000003a00)=@x25={0x9, @remote}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003a80)=""/186, 0xba}, {&(0x7f0000003b40)=""/113, 0x71}, {&(0x7f0000003bc0)=""/153, 0x99}, {&(0x7f0000003c80)=""/72, 0x48}, {&(0x7f0000003d00)=""/95, 0x5f}, {&(0x7f0000003d80)=""/9, 0x9}, {&(0x7f0000003dc0)=""/136, 0x88}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/15, 0xf}, {&(0x7f0000003f40)=""/96, 0x60}], 0x2, &(0x7f0000004000)=""/124, 0x7c}, 0x6d}, {{&(0x7f0000004080)=@isdn, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/44, 0x2c}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/57, 0x39}, {&(0x7f0000004240)=""/254, 0xfe}], 0x4, &(0x7f0000004380)=""/235, 0xeb}, 0x6}, {{&(0x7f0000004480)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004500)=""/62, 0x3e}, {&(0x7f0000004540)=""/196, 0xc4}, {&(0x7f0000004640)=""/221, 0xdd}], 0x3, &(0x7f0000004780)=""/240, 0xf0}, 0x80000000}, {{&(0x7f0000004880)=@generic, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004900)=""/241, 0xf1}, {&(0x7f0000004a00)=""/85, 0x55}, {&(0x7f0000004a80)=""/17, 0x11}, {&(0x7f0000004ac0)=""/198, 0xc6}, {&(0x7f0000004bc0)=""/212, 0xd4}], 0x5, &(0x7f0000004d40)=""/225, 0xe1}, 0x1}], 0x7, 0x12040, &(0x7f0000005040)={r1, r2+60000000}) 372.181075ms ago: executing program 5 (id=10216): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 308.446638ms ago: executing program 4 (id=10217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630000dd000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='/0', 0x2}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendto$rxrpc(r3, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x2, 0x4, 0xfffffffffffffff9, 0x100, 0x8000, 0x2, 0x4}, &(0x7f0000000140)={0x7f, 0x69, 0x0, 0x7, 0x2, 0x3, 0xf5fa, 0xe}, &(0x7f0000000180)={0xffffffffffffffff, 0x2, 0x3, 0x454, 0xfffffffffffffff9, 0x4, 0x8, 0x7}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000480)=""/102, 0x66}], 0x2}, 0x2041) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1100240000000000000001000700000000000000", @ANYRES32=0x0], 0x18}}, 0x0) 199.696957ms ago: executing program 2 (id=10218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x20050800) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) listen(r4, 0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x9) ppoll(&(0x7f0000000280)=[{r4, 0x3206}, {r3}], 0x2, 0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f5, 0x8, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x41) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) (async) recvmsg$unix(r8, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000840), 0x4) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x47}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x21, r9, r10}, {0x2f, 0x8, 0xffff, 0x77b, 0x1, 0x5, 0x3, 0x8}, {0x5, 0x6, 0x2, 0x6}, 0x6}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3507, 0x0, 0x2, 0xe3, 0x7f, 0x4, 0xf}}, 0xe8) 199.271424ms ago: executing program 4 (id=10219): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xffffffffffffff15}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x8ae7, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) 196.338918ms ago: executing program 5 (id=10220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000100"/111], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000100000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}}, 0x4048010) 176.633404ms ago: executing program 3 (id=10221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x138, r4, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_IE={0x113, 0x2a, [@mic={0x8c, 0x18, {0x757, "4a9c0b7b81df", @long="990b4d9900bb872ae952d7c6252904cb"}}, @link_id={0x65, 0x12, {@from_mac, @device_b, @broadcast}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x4, 0x2, @device_b, 0x6, 0x6, 0x2}}, @random_vendor={0xdd, 0xbf, "c9e5b8a2b742b7a97c7dedee586b4e591e7c301d83a28d117fe9b6b85212028373dcacce370590e3e8a9697170d98317ec4448d540e3db2eab624cae24d90e22570e0a966f8869ff08cdb32cef2373b02aa3db73faeaa5a9c597d4a2888113c3e8fc52e2a85fb6e90bf3768fefb149e6f5979d0bbf779121efed9c5c8b1d414bfd2c393d5426109b8bf43fcb5d8350c53a12cae225606fc2712e1c4b16b15202cdc1d18d1c27bfb52ab685d0c05185ec7da74b84f09cd9c138d1ee950476be"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xd3, 0x9d, 0x3}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8880}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r7, 0x0, 0x1, 0x0, &(0x7f00000010c0)) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xf}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xffffffffffffff9c, &(0x7f0000000500)={&(0x7f0000000100)={0x74, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe70}}]}, 0x74}, 0x1, 0x0, 0x0, 0x440c5}, 0x4004054) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c0001800d3006000600800a000014000280100014801c0016800800b600884729378d9f3c2df2375ef8be9e701061062f6701d9e506db00b11795b703195649229422a98b276a1da0bc8bc937a83fded75f"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c8c1) 109.888985ms ago: executing program 4 (id=10222): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x3010}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r4) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) 65.110419ms ago: executing program 2 (id=10223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 64.745851ms ago: executing program 5 (id=10224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x31}, 0x1, 0x0, 0x0, 0x24004854}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) 5.703352ms ago: executing program 2 (id=10225): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/282], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) accept$ax25(r0, 0x0, 0x0) 0s ago: executing program 3 (id=10226): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffff31, &(0x7f0000000280)=[{&(0x7f0000000000)="1b", 0x1}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000600)="bdbeab9cae5d258e8e343d92c8cd53e0e68102ef6d0de2a7df50e5661f534130ecc1f85dad1f6e95bdab863d2afdd98f9a99dc33bb9d315ccaff5674e24722ecbca7d81c9497921119a1e7dc52ba61b7e49334c628879330fb208870f7ad68f5a8e5941e8c07b6249ab603ba6c91b16dc662bd91cebef1791559498cf23305daae2d2c4fdde9af5310fd2d840ea6028a78f3e4b2a82d35", 0x97}, {&(0x7f0000000380)="f635565df0ae4cab3a66944b977d05d78c53d36f464b04195898829ddf2eb71df02ef51411c00d5a5fecc73de8cf6b64dbc4fd2a2539e9aa4bfed434ff6e5f3f568b9bccfbeb6ac28e41df3a576f88a617bd18bf07b7b6cf3c42c6d1704b68652d3ddb2d11ca4e7b77625271", 0x6c}], 0x4}}], 0x1, 0x24008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r11, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8", 0x21}], 0x1}, 0x0) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYRES64=r11, @ANYRES16=r5, @ANYBLOB="deffffff0000000000000700000014000180050002000100000008f005001a00000075234eda1f5874659d143be80227e72af47b6e7abbbe92def0d830b7b05d9afa828dd80bc87d358ba91ffb1ca5b74c236562fdb8f242f6ba475841c7b73ff98c702d2ae75f6100037224b08162154884adefa00475fc88fbcfbb0a8a0d8c3d5008426816ae5b5d8098e5d1e89c5a589cb5a8ed3f1c78b99a6c4bd4be9ee5735c9a020addcc3c1fcce3b03a4c47a78456f64612a5719110c33a42e9d85a"], 0x28}}, 0x80) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$!7P', @ANYRES16=r13, @ANYBLOB="04002bbd7000fcdbdf250300000008000300000000000800020004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x20000051) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): syz.0.8574': attribute type 1 has an invalid length. [ 835.447861][ T4647] netlink: 'syz.0.8574': attribute type 1 has an invalid length. [ 835.456818][ T4645] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8573'. [ 835.518926][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8573'. [ 835.566583][ T4653] netlink: 'syz.0.8577': attribute type 11 has an invalid length. [ 835.584670][ T4653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8577'. [ 835.742532][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8577'. [ 835.752269][ T4657] netlink: 'syz.4.8578': attribute type 4 has an invalid length. [ 835.772944][ T4657] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8578'. [ 835.860813][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8580'. [ 835.887684][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8580'. [ 835.969437][ T4676] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20003 [ 836.040817][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8584'. [ 836.052215][ T4683] netlink: 'syz.2.8584': attribute type 3 has an invalid length. [ 836.060735][ T4684] netlink: 'syz.2.8584': attribute type 3 has an invalid length. [ 836.071971][ T4681] netlink: 'syz.4.8583': attribute type 1 has an invalid length. [ 836.211906][ T4692] netlink: 'syz.4.8587': attribute type 1 has an invalid length. [ 836.221036][ T4692] netlink: 'syz.4.8587': attribute type 1 has an invalid length. [ 836.355894][ T4703] nbd: must specify at least one socket [ 836.571095][ T4723] syzkaller0: entered promiscuous mode [ 836.578491][ T4723] syzkaller0: entered allmulticast mode [ 836.640151][ T4727] xt_socket: unknown flags 0x50 [ 838.869099][ T8033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.877684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.476431][ T4711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.486497][ T4715] tipc: Enabled bearer , priority 0 [ 839.509527][ T4716] tipc: Enabling of bearer rejected, already enabled [ 839.518785][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.527281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.763786][ T4761] netlink: 'syz.2.8602': attribute type 1 has an invalid length. [ 839.908487][ T4777] netlink: 'syz.2.8605': attribute type 1 has an invalid length. [ 840.150390][T31369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.407419][ T30] audit: type=1800 audit(1770258760.253:18): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8611" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2912 res=0 errno=0 [ 840.652010][ T4816] xt_hashlimit: size too large, truncated to 1048576 [ 840.829097][ T4824] netlink: 'syz.0.8617': attribute type 1 has an invalid length. [ 840.942047][ T4824] 8021q: adding VLAN 0 to HW filter on device bond6 [ 841.121888][T17965] lec:lec_start_xmit: lec0:No lecd attached [ 841.243920][ T4857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.989045][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.997526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.161142][ T4849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.390205][ T4878] pim6reg1: entered promiscuous mode [ 844.395580][ T4878] pim6reg1: entered allmulticast mode [ 844.591314][ T4881] __nla_validate_parse: 9 callbacks suppressed [ 844.591338][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8630'. [ 844.842304][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8636'. [ 844.879396][ T4911] openvswitch: netlink: Flow key attr not present in new flow. [ 845.090879][ T4928] netlink: 284 bytes leftover after parsing attributes in process `syz.3.8641'. [ 845.253005][ T4932] : renamed from hsr0 (while UP) [ 845.272315][T13002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.281005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.311940][ T4933] geneve6: entered promiscuous mode [ 845.351008][ T4939] syzkaller1: entered allmulticast mode [ 845.752969][ T4963] netlink: 'syz.2.8651': attribute type 3 has an invalid length. [ 845.776673][ T4963] netlink: 'syz.2.8651': attribute type 3 has an invalid length. [ 846.137941][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 846.146083][ C1] lec:lec_tx_timeout: lec0 [ 846.173692][ T5831] Bluetooth: hci1: link tx timeout [ 846.183162][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.192443][ T5831] Bluetooth: hci1: link tx timeout [ 846.198637][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.206557][ T5831] Bluetooth: hci1: link tx timeout [ 846.212280][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.220821][ T5831] Bluetooth: hci1: link tx timeout [ 846.226072][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.236437][ T5831] Bluetooth: hci1: link tx timeout [ 846.242520][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.251175][ T5831] Bluetooth: hci1: link tx timeout [ 846.256402][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.265474][ T5831] Bluetooth: hci1: link tx timeout [ 846.271609][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.280224][ T5831] Bluetooth: hci1: link tx timeout [ 846.285448][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.309315][ T5831] Bluetooth: hci1: link tx timeout [ 846.314590][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.324336][ T5831] Bluetooth: hci1: link tx timeout [ 846.330640][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.568631][ T5012] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8663'. [ 846.982500][ T5020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8664'. [ 847.301030][ T30] audit: type=1800 audit(1770258767.163:19): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8665" name="memory.events" dev="tmpfs" ino=2963 res=0 errno=0 [ 847.338625][ T30] audit: type=1804 audit(1770258767.203:20): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.8665" name="/newroot/580/memory.events" dev="tmpfs" ino=2963 res=1 errno=0 [ 847.512509][ T5036] netlink: 'syz.2.8669': attribute type 1 has an invalid length. [ 847.521830][ T5036] netlink: 'syz.2.8669': attribute type 2 has an invalid length. [ 847.531514][ T5036] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8669'. [ 847.681077][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8673'. [ 847.741147][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8673'. [ 847.809566][ T5050] netlink: 'syz.4.8674': attribute type 6 has an invalid length. [ 847.924672][ T5052] atomic_op ffff88804dabd998 conn xmit_atomic 0000000000000000 [ 847.960578][ T5052] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8676'. [ 847.973525][ T5056] block nbd7: Unsupported socket: should be TCP or UNIX. [ 848.022570][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8678'. [ 848.232677][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 848.440087][ T5071] netem: change failed [ 848.709665][ T5094] xt_TCPMSS: Only works on TCP SYN packets [ 848.752696][ T5097] netlink: 'syz.0.8687': attribute type 3 has an invalid length. [ 848.784715][ T5097] netlink: 'syz.0.8687': attribute type 3 has an invalid length. [ 848.809841][ T5097] netlink: 'syz.0.8687': attribute type 3 has an invalid length. [ 848.819657][ T5097] netlink: 'syz.0.8687': attribute type 3 has an invalid length. [ 848.828445][ T5097] netlink: 'syz.0.8687': attribute type 3 has an invalid length. [ 848.846493][ T5103] bridge0: entered allmulticast mode [ 849.001846][ T5114] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 849.244364][ T5127] bridge0: port 3(ipvlan0) entered blocking state [ 849.288377][ T5127] bridge0: port 3(ipvlan0) entered disabled state [ 849.296280][ T5127] ipvlan0: entered allmulticast mode [ 849.304171][ T5127] bridge0: entered allmulticast mode [ 849.324517][ T5127] ipvlan0: left allmulticast mode [ 849.332320][ T5127] bridge0: left allmulticast mode [ 849.535649][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 849.546935][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 849.555803][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.568378][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.577129][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.753769][ T8033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.763417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.772371][T31381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.866867][ T5163] netlink: 'syz.0.8702': attribute type 11 has an invalid length. [ 849.933153][ T5163] __nla_validate_parse: 5 callbacks suppressed [ 849.933171][ T5163] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8702'. [ 850.091389][ T5172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8705'. [ 850.643353][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8714'. [ 850.653302][ T5214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8714'. [ 850.679985][ T5213] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 850.832800][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8718'. [ 850.863414][ T5225] openvswitch: netlink: Flow actions attr not present in new flow. [ 851.023444][ T5235] validate_nla: 31 callbacks suppressed [ 851.023467][ T5235] netlink: 'syz.3.8720': attribute type 3 has an invalid length. [ 851.040412][T23822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.049486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.073856][ T5235] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8720'. [ 851.085570][ T5236] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8720'. [ 851.169538][ T5235] netlink: 'syz.3.8720': attribute type 61 has an invalid length. [ 851.213733][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8720'. [ 851.465131][ T5257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.516638][ T5259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8727'. [ 851.564274][ T5259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8727'. [ 851.671107][T28700] Bluetooth: hci2: command tx timeout [ 851.796194][ T5145] chnl_net:caif_netlink_parms(): no params data found [ 851.946211][ T5277] netlink: 'syz.2.8732': attribute type 178 has an invalid length. [ 852.255250][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.263535][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.271849][ T5145] bridge_slave_0: entered allmulticast mode [ 852.305140][ T5145] bridge_slave_0: entered promiscuous mode [ 852.348574][ T5305] ip6erspan0: entered allmulticast mode [ 852.355097][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.386619][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.418262][ T5145] bridge_slave_1: entered allmulticast mode [ 852.438350][ T5145] bridge_slave_1: entered promiscuous mode [ 852.603167][ T5145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.659718][ T5145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.731063][ T5321] x_tables: duplicate underflow at hook 1 [ 852.819904][ T5145] team0: Port device team_slave_0 added [ 852.863854][ T5145] team0: Port device team_slave_1 added [ 853.100845][ T5338] bond4: invalid ARP target 0.0.0.0 specified for addition [ 853.140040][ T5338] bond4: option arp_ip_target: invalid value (0) [ 853.169182][ T5338] bond4 (unregistering): Released all slaves [ 853.271440][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.292682][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.367670][ T5145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.410337][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.417742][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.445214][ T5145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.748782][T28700] Bluetooth: hci2: command tx timeout [ 853.784249][ T5145] hsr_slave_0: entered promiscuous mode [ 853.792213][ T5145] hsr_slave_1: entered promiscuous mode [ 853.799371][ T5145] debugfs: 'hsr0' already exists in 'hsr' [ 853.805259][ T5145] Cannot create hsr debugfs directory [ 853.941329][ T5385] netlink: 'syz.2.8757': attribute type 1 has an invalid length. [ 854.201488][ T5385] 8021q: adding VLAN 0 to HW filter on device bond8 [ 854.876773][ T8033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.889748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.022699][ T5145] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 855.049476][ T5145] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 855.082520][ T5145] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 855.113805][ T5145] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 855.209640][ T5458] openvswitch: netlink: Message has 4 unknown bytes. [ 855.283653][ T5145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.455337][ T5463] syzkaller0: entered promiscuous mode [ 855.461511][ T5463] syzkaller0: entered allmulticast mode [ 855.704136][ T5145] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.736789][T23822] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.744022][T23822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.793157][ T5480] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:0 [ 855.805395][T23822] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.812630][T23822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.827558][T28700] Bluetooth: hci2: command tx timeout [ 855.943739][ T5480] __nla_validate_parse: 7 callbacks suppressed [ 855.943758][ T5480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8774'. [ 856.072035][ T5495] x_tables: unsorted underflow at hook 4 [ 856.792096][ T3519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.800751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.910144][T28700] Bluetooth: hci2: command tx timeout [ 858.263742][ T5514] x_tables: duplicate underflow at hook 2 [ 858.288222][ T5145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.795097][ T5555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8787'. [ 858.851724][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8788'. [ 858.946762][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8788'. [ 859.102813][ T5145] veth0_vlan: entered promiscuous mode [ 859.141547][ T5145] veth1_vlan: entered promiscuous mode [ 859.227061][ T5145] veth0_macvtap: entered promiscuous mode [ 859.253333][ T5145] veth1_macvtap: entered promiscuous mode [ 859.260915][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8792'. [ 859.325986][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.353839][T31369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.372605][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.441964][ T3519] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.469333][ T3519] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.496872][ T3519] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.525115][ T3519] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.802525][ T8029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.829107][ T8029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.929395][T13002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.963796][ T5611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.977631][T13002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.119387][ T5620] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.8804'. [ 860.149911][ T5620] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 860.397256][ T5625] tipc: Enabled bearer , priority 0 [ 860.439087][ T5625] syzkaller0: entered promiscuous mode [ 860.467712][ T5625] syzkaller0: entered allmulticast mode [ 860.515627][ T5641] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8807'. [ 860.638488][ T3519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.646880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.698484][ T5631] tipc: Resetting bearer [ 860.770275][ T5617] tipc: Resetting bearer [ 860.811443][ T5617] tipc: Disabling bearer [ 860.828962][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8808'. [ 860.894292][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 860.905795][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 860.917972][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 860.926845][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 860.934842][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 861.184662][ T5662] Cannot find set identified by id 0 to match [ 861.474213][ T5672] macvlan0: entered promiscuous mode [ 861.481497][ T5672] macvlan0: entered allmulticast mode [ 861.488474][ T5672] veth1_vlan: entered allmulticast mode [ 861.941476][ T5701] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 862.173303][ T5714] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8826'. [ 862.261215][ T5655] chnl_net:caif_netlink_parms(): no params data found [ 862.534487][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8833'. [ 862.558587][ T8033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.566984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.621492][ T5740] netlink: 'syz.2.8833': attribute type 1 has an invalid length. [ 862.624015][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.670108][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.689064][ T5655] bridge_slave_0: entered allmulticast mode [ 862.696555][ T5655] bridge_slave_0: entered promiscuous mode [ 862.770591][ T5746] bond9: (slave gretap2): making interface the new active one [ 862.780574][ T5746] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 862.796465][ T5747] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 862.818515][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8836'. [ 862.830237][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8836'. [ 862.842123][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.867151][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.879642][ T5655] bridge_slave_1: entered allmulticast mode [ 862.895525][ T5655] bridge_slave_1: entered promiscuous mode [ 863.028200][T28700] Bluetooth: hci6: command tx timeout [ 863.043308][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.089665][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.126515][ T5762] delete_channel: no stack [ 863.216416][ T5767] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8841'. [ 863.222900][ T5769] netlink: 'syz.2.8840': attribute type 1 has an invalid length. [ 863.239072][ T5655] team0: Port device team_slave_0 added [ 863.293527][ T5769] 8021q: adding VLAN 0 to HW filter on device bond10 [ 863.314989][ T5655] team0: Port device team_slave_1 added [ 863.326588][ T5773] vlan4: entered promiscuous mode [ 863.348851][ T5773] bond10: entered promiscuous mode [ 863.360940][ T5773] vlan4: entered allmulticast mode [ 863.369340][ T5773] bond10: entered allmulticast mode [ 863.405966][ T5769] bond10: (slave bridge3): making interface the new active one [ 863.432130][ T5769] bridge3: entered promiscuous mode [ 863.439536][ T5769] bridge3: entered allmulticast mode [ 863.446211][ T5769] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 863.596602][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.604958][ T5788] netlink: 165 bytes leftover after parsing attributes in process `syz.3.8847'. [ 863.615557][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.647313][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.687812][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.695556][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.729937][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.857097][ T5655] hsr_slave_0: entered promiscuous mode [ 863.870064][ T5655] hsr_slave_1: entered promiscuous mode [ 863.896440][ T5655] debugfs: 'hsr0' already exists in 'hsr' [ 863.934245][ T5655] Cannot create hsr debugfs directory [ 864.113362][ T5817] netlink: 'syz.3.8855': attribute type 16 has an invalid length. [ 864.121923][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8855'. [ 864.260665][ T5825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8856'. [ 864.326796][ T5829] netlink: 'syz.3.8858': attribute type 2 has an invalid length. [ 864.368319][ T5823] syzkaller1: entered promiscuous mode [ 864.373871][ T5823] syzkaller1: entered allmulticast mode [ 864.403639][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8856'. [ 864.492661][ T5832] netlink: 'syz.3.8859': attribute type 1 has an invalid length. [ 864.552416][ T5655] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.586114][ T5655] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.705740][ T5832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 864.758190][ T5838] bond4: (slave gretap3): making interface the new active one [ 864.766200][ T5848] netlink: 'syz.5.8861': attribute type 16 has an invalid length. [ 864.797094][ T5838] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 864.809687][ T5848] netlink: 'syz.5.8861': attribute type 17 has an invalid length. [ 864.824969][ T5655] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.876121][ T5655] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.983468][ T5848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.031268][ T5655] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.044461][ T5655] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.083844][ T5860] bridge0: port 1(wlan0) entered blocking state [ 865.090778][ T5860] bridge0: port 1(wlan0) entered disabled state [ 865.111522][T28700] Bluetooth: hci6: command tx timeout [ 865.127704][ T5860] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 865.165793][ T5860] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 865.194126][ T5871] netlink: 'syz.2.8870': attribute type 6 has an invalid length. [ 865.194469][ T5655] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.221615][ T5655] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.529546][ T5655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.558755][ T5655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.604777][ T5655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.656371][ T5655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 865.713447][ T5900] Cannot find add_set index 2 as target [ 865.756735][ T8044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.765409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.796166][ T5915] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 865.975103][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.021382][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.072570][ T5928] netlink: 'syz.2.8881': attribute type 3 has an invalid length. [ 866.095670][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.102888][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.156053][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.163734][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.322768][ T5941] netlink: 'syz.2.8884': attribute type 2 has an invalid length. [ 866.349999][ T5941] : entered promiscuous mode [ 866.394663][ T5655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 866.461049][ T5945] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8886'. [ 866.564572][ T5951] x_tables: duplicate underflow at hook 2 [ 866.984152][ T5977] openvswitch: netlink: IPv6 tunnel dst address is zero [ 867.004518][ T5980] openvswitch: netlink: IPv6 tunnel dst address is zero [ 867.025871][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.069554][ T5982] x_tables: unsorted underflow at hook 2 [ 867.187819][T28700] Bluetooth: hci6: command tx timeout [ 867.214260][ T5655] veth0_vlan: entered promiscuous mode [ 867.235147][ T5655] veth1_vlan: entered promiscuous mode [ 867.301240][ T5989] ip6t_REJECT: ECHOREPLY is not supported [ 867.353845][ T5655] veth0_macvtap: entered promiscuous mode [ 867.369209][ T5994] __nla_validate_parse: 8 callbacks suppressed [ 867.369228][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8897'. [ 867.401251][ T5655] veth1_macvtap: entered promiscuous mode [ 867.405056][ T5994] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 867.489512][ T5999] lo speed is unknown, defaulting to 1000 [ 867.501815][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.522124][ T5999] lo speed is unknown, defaulting to 1000 [ 867.539339][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.552322][ T5999] lo speed is unknown, defaulting to 1000 [ 867.589480][ T5999] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 867.590138][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.613866][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.645249][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.698400][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.730580][ T5999] lo speed is unknown, defaulting to 1000 [ 867.775911][ T5999] lo speed is unknown, defaulting to 1000 [ 867.811655][ T5999] lo speed is unknown, defaulting to 1000 [ 867.819856][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.850052][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.865555][ T5999] lo speed is unknown, defaulting to 1000 [ 867.903070][ T5999] lo speed is unknown, defaulting to 1000 [ 867.926146][ T5999] lo speed is unknown, defaulting to 1000 [ 867.940208][ T7399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.955527][ T5999] lo speed is unknown, defaulting to 1000 [ 867.962624][ T7399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.975542][ T5999] lo speed is unknown, defaulting to 1000 [ 867.995848][ T5999] lo speed is unknown, defaulting to 1000 [ 868.013478][ T5999] lo speed is unknown, defaulting to 1000 [ 868.024168][ T5999] lo speed is unknown, defaulting to 1000 [ 868.036660][ T5999] lo speed is unknown, defaulting to 1000 [ 868.256175][ T6023] tipc: Started in network mode [ 868.274818][ T6023] tipc: Node identity ba6bdda17716, cluster identity 4711 [ 868.294475][ T6023] tipc: Enabled bearer , priority 0 [ 868.308936][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.318122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.349979][ T6029] syzkaller0: entered promiscuous mode [ 868.355519][ T6029] syzkaller0: entered allmulticast mode [ 868.393094][ T6023] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 868.438699][ T6035] xt_l2tp: invalid flags combination: 8 [ 868.450425][ T6023] xt_hashlimit: size too large, truncated to 1048576 [ 868.555955][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8907'. [ 868.632341][ T6041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.939945][ T6052] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8914'. [ 868.964993][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8913'. [ 868.975322][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8913'. [ 869.097293][ T6020] tipc: Resetting bearer [ 869.113993][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8915'. [ 869.157974][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 869.169771][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 869.178816][ T6020] tipc: Disabling bearer [ 869.180638][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 869.196275][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 869.208718][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 869.268425][ T5831] Bluetooth: hci6: command tx timeout [ 869.418545][ T6063] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.8916'. [ 869.773072][ T6072] x_tables: duplicate underflow at hook 1 [ 869.859226][ T6072] syzkaller1: entered promiscuous mode [ 869.888171][ T6072] syzkaller1: entered allmulticast mode [ 869.984966][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8924'. [ 870.026102][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8924'. [ 870.103174][T23822] bond0: (slave netdevsim0): Releasing backup interface [ 870.220500][ T6092] net_ratelimit: 1 callbacks suppressed [ 870.220520][ T6092] openvswitch: netlink: Flow key attr not present in new flow. [ 870.418803][ T6097] netlink: zone id is out of range [ 870.428841][ T6097] netlink: zone id is out of range [ 870.462071][ T6097] netlink: zone id is out of range [ 870.467260][ T6097] netlink: zone id is out of range [ 870.515634][ T6097] netlink: zone id is out of range [ 870.521234][ T6097] netlink: zone id is out of range [ 870.531175][ T6097] netlink: zone id is out of range [ 870.536661][ T6097] netlink: set zone limit has 4 unknown bytes [ 870.604732][ T6104] syzkaller0: entered promiscuous mode [ 870.629209][ T6104] syzkaller0: entered allmulticast mode [ 870.701289][ T6057] lo speed is unknown, defaulting to 1000 [ 870.831956][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8933'. [ 870.890981][ T6119] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 870.923846][ T6116] bridge0: port 3(batadv1) entered blocking state [ 870.969158][ T6116] bridge0: port 3(batadv1) entered disabled state [ 870.975843][ T6116] batadv1: entered allmulticast mode [ 871.013151][ T6116] batadv1: entered promiscuous mode [ 871.170933][T23822] team0: left allmulticast mode [ 871.175861][T23822] team0: left promiscuous mode [ 871.181390][T23822] bridge2: left promiscuous mode [ 871.186747][T23822] bridge0: port 1(team0) entered disabled state [ 871.193617][ T6130] IPv6: NLM_F_CREATE should be specified when creating new route [ 871.224341][T23822] tipc: Resetting bearer [ 871.268017][ T5831] Bluetooth: hci3: command tx timeout [ 871.430108][ T7399] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 871.439530][ T7399] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 871.496641][T23822] bond9 (unregistering): (slave gretap2): Releasing active interface [ 871.509804][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.586828][T23822] bond3 (unregistering): (slave geneve2): Releasing active interface [ 871.697584][T23822] bridge0 (unregistering): left allmulticast mode [ 871.765184][T23822] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 871.822059][T23822] tipc: Disabling bearer [ 871.872292][T23822] team0: Port device bridge2 removed [ 871.913508][T23822] bond10 (unregistering): (slave bridge3): Releasing active interface [ 871.922354][T23822] bridge3 (unregistering): left promiscuous mode [ 871.930899][T23822] bridge3 (unregistering): left allmulticast mode [ 872.030992][T23822] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 872.041758][T23822] bond0 (unregistering): Released all slaves [ 872.168215][T23822] bond1 (unregistering): Released all slaves [ 872.182780][T23822] bond2 (unregistering): Released all slaves [ 872.196788][T23822] bond3 (unregistering): Released all slaves [ 872.218043][T23822] bond4 (unregistering): Released all slaves [ 872.345532][T23822] bond5 (unregistering): Released all slaves [ 872.466710][T23822] bond6 (unregistering): (slave veth3): Releasing active interface [ 872.477808][T23822] bond6 (unregistering): (slave veth5): Releasing active interface [ 872.492209][T23822] bond6 (unregistering): Released all slaves [ 872.507959][T23822] bond7 (unregistering): Released all slaves [ 872.631901][T23822] bond8 (unregistering): Released all slaves [ 872.646183][T23822] bond9 (unregistering): Released all slaves [ 872.780010][T23822] bond10 (unregistering): Released all slaves [ 872.940900][T23822] : left promiscuous mode [ 873.094629][ T6144] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 873.136026][ T6144] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 873.144664][ T6144] gretap1: entered promiscuous mode [ 873.172291][ T6144] gretap1: entered allmulticast mode [ 873.212880][T23822] tipc: Disabling bearer [ 873.268859][T23822] tipc: Disabling bearer [ 873.288413][T23822] tipc: Left network mode [ 873.293067][ T6155] __nla_validate_parse: 3 callbacks suppressed [ 873.293119][ T6155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8942'. [ 873.338260][ T6152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8942'. [ 873.348446][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8946'. [ 873.357815][ T5831] Bluetooth: hci3: command tx timeout [ 873.772622][ T6057] chnl_net:caif_netlink_parms(): no params data found [ 874.622588][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.640255][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.648205][ T6057] bridge_slave_0: entered allmulticast mode [ 874.655769][ T6057] bridge_slave_0: entered promiscuous mode [ 874.680526][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.695929][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.723484][ T6057] bridge_slave_1: entered allmulticast mode [ 874.801161][ T6057] bridge_slave_1: entered promiscuous mode [ 874.817568][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8956'. [ 875.017308][ T6243] netlink: 'syz.4.8961': attribute type 1 has an invalid length. [ 875.046370][ T6243] netlink: 'syz.4.8961': attribute type 1 has an invalid length. [ 875.105849][ T6243] netlink: 'syz.4.8961': attribute type 1 has an invalid length. [ 875.151654][ T6243] netlink: 'syz.4.8961': attribute type 2 has an invalid length. [ 875.160676][ T6243] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8961'. [ 875.173797][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.206201][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.359416][ T1301] net_ratelimit: 3 callbacks suppressed [ 875.359439][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 875.377065][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 875.395724][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8965'. [ 875.431974][ T5831] Bluetooth: hci3: command tx timeout [ 875.496073][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8964'. [ 875.568371][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8964'. [ 875.599822][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8964'. [ 875.637861][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8964'. [ 875.769695][ T6057] team0: Port device team_slave_0 added [ 875.816720][ T6057] team0: Port device team_slave_1 added [ 876.495736][ T3519] smc: removing ib device  [ 877.221699][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.229838][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.258154][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.272310][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.281300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.315158][ T6281] syzkaller0: entered promiscuous mode [ 877.321731][ T6281] syzkaller0: entered allmulticast mode [ 877.508238][ T5831] Bluetooth: hci3: command tx timeout [ 877.539997][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.547701][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.575058][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.832466][ T6318] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 878.245925][ T6319] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 878.356188][ T6057] hsr_slave_0: entered promiscuous mode [ 878.393224][ T6057] hsr_slave_1: entered promiscuous mode [ 878.439487][ T6057] debugfs: 'hsr0' already exists in 'hsr' [ 878.455276][ T6057] Cannot create hsr debugfs directory [ 878.548252][T31369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.563625][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.572997][T31381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.583927][T31379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.063728][ T6366] tc_dump_action: action bad kind [ 879.080014][ T6368] __nla_validate_parse: 7 callbacks suppressed [ 879.080037][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8986'. [ 879.189126][ T8044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.321012][ T6378] netlink: 'syz.4.8990': attribute type 1 has an invalid length. [ 879.735990][ T6394] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8994'. [ 879.822916][ T6403] netlink: 'syz.4.8993': attribute type 13 has an invalid length. [ 879.878146][ T6403] netlink: 'syz.4.8993': attribute type 17 has an invalid length. [ 880.032835][ T6403] gre0: left promiscuous mode [ 880.039938][ T6403] gre0: left allmulticast mode [ 880.066564][ T6407] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.8996'. [ 880.172381][ T6403] bond0: left promiscuous mode [ 880.178115][ T6403] bond_slave_0: left promiscuous mode [ 880.184700][ T6403] bond_slave_1: left promiscuous mode [ 880.191589][ T6403] bridge_slave_1: left promiscuous mode [ 880.198561][ T6403] bond0: left allmulticast mode [ 880.218630][ T6403] bond_slave_0: left allmulticast mode [ 880.224168][ T6403] bond_slave_1: left allmulticast mode [ 880.258138][ T6403] bridge_slave_1: left allmulticast mode [ 880.329363][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8998'. [ 880.947409][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 880.955578][ C1] lec:lec_tx_timeout: lec0 [ 881.043137][ T6433] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 881.704679][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9008'. [ 881.714633][ T6452] netlink: 'syz.0.9008': attribute type 33 has an invalid length. [ 882.083264][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9008'. [ 882.391451][ T8043] net_ratelimit: 4 callbacks suppressed [ 882.391473][ T8043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.405863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.124140][ T6496] netlink: 'syz.4.9015': attribute type 3 has an invalid length. [ 883.159934][ T6496] netlink: 'syz.4.9015': attribute type 3 has an invalid length. [ 883.402802][ T6057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 883.560502][ T6517] netlink: 'syz.0.9019': attribute type 10 has an invalid length. [ 883.594319][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9019'. [ 883.696603][ T6057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 883.737163][ T6057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 883.788964][ T6057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 883.881006][T23822] IPVS: stop unused estimator thread 0... [ 883.925730][ T6535] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 883.954725][ T6535] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 883.985880][ T6541] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9025'. [ 884.075915][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9025'. [ 884.271849][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.311379][T23822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.320422][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.328872][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.337478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.346316][T31381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.371838][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.432346][T23822] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.439636][T23822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.458247][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.465425][ T7400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.695978][ T6574] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9031'. [ 884.727113][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9031'. [ 884.755554][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9031'. [ 884.906195][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9034'. [ 884.938206][ T6593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9035'. [ 884.967991][ T6593] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9035'. [ 885.100455][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9036'. [ 885.338762][ T6613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.346087][ T6613] IPv6: NLM_F_CREATE should be set when creating new route [ 885.353440][ T6613] IPv6: NLM_F_CREATE should be set when creating new route [ 885.408632][ T6613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.454326][ T6616] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9040'. [ 885.494806][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.595005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.674622][ T6057] veth0_vlan: entered promiscuous mode [ 885.810660][ T6057] veth1_vlan: entered promiscuous mode [ 885.913112][ T6057] veth0_macvtap: entered promiscuous mode [ 885.973151][ T6633] netlink: 788 bytes leftover after parsing attributes in process `syz.3.9044'. [ 885.990365][ T6057] veth1_macvtap: entered promiscuous mode [ 886.164632][ T6636] bond4 (unregistering): Released all slaves [ 886.500792][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.523830][ T6657] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9049'. [ 886.552425][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.608641][ T7400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.643478][ T7400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.660505][ T6666] netlink: 'syz.0.9051': attribute type 1 has an invalid length. [ 886.687873][ T7400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.720530][ T6666] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 886.728846][T23822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.086309][ T8033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.115838][ T8033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.345216][ T8033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.355364][T28700] Bluetooth: hci3: command 0x0405 tx timeout [ 887.374062][ T8033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.725877][ T6706] netlink: 'syz.2.8912': attribute type 4 has an invalid length. [ 887.752586][T31394] IPVS: starting estimator thread 0... [ 887.867514][ T6715] IPVS: using max 31 ests per chain, 74400 per kthread [ 888.150035][ T3519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.159154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.376739][T31394] lo speed is unknown, defaulting to 1000 [ 888.855979][ T6767] netlink: 'syz.2.9074': attribute type 1 has an invalid length. [ 889.044308][ T6778] netlink: 'syz.4.9078': attribute type 1 has an invalid length. [ 889.164950][ T6778] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 889.205354][ T6781] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 889.215272][ T6786] syzkaller0: entered promiscuous mode [ 889.223891][ T6786] syzkaller0: entered allmulticast mode [ 889.247168][ T7400] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 889.260592][ T6778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 889.401689][ T8033] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 889.430221][ T8043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.439449][T31381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.450212][T31379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.625781][ T6799] 8021q: VLANs not supported on lo [ 889.631966][ T6803] : renamed from dummy0 (while UP) [ 889.806773][ T6813] netlink: 'syz.5.9089': attribute type 83 has an invalid length. [ 889.880066][ T6821] __nla_validate_parse: 11 callbacks suppressed [ 889.880088][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9091'. [ 889.895993][ T6820] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9092'. [ 890.067825][T23822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.076534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.308232][ T6837] IPv6: NLM_F_CREATE should be specified when creating new route [ 890.359025][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9098'. [ 890.368759][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9098'. [ 890.443219][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9099'. [ 890.466594][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9099'. [ 890.585018][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9101'. [ 890.648488][ T6832] lo speed is unknown, defaulting to 1000 [ 891.378204][ T6860] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9103'. [ 891.431824][ T6860] syzkaller0: entered promiscuous mode [ 891.437924][ T6860] syzkaller0: entered allmulticast mode [ 891.904302][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9110'. [ 891.923185][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9114'. [ 892.158893][ T6913] tipc: Started in network mode [ 892.171833][ T6913] tipc: Node identity ac1414aa, cluster identity 4711 [ 892.184239][ T6913] tipc: Enabled bearer , priority 10 [ 892.559950][ T6933] bridge1: entered promiscuous mode [ 892.565340][ T6933] bridge1: entered allmulticast mode [ 892.574137][ T6938] netlink: 'syz.0.9126': attribute type 8 has an invalid length. [ 892.592195][ T6933] team0: Port device bridge1 added [ 892.902156][ T6951] bridge_slave_1: left allmulticast mode [ 892.918515][ T6951] bridge_slave_1: left promiscuous mode [ 892.932901][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.022160][ T6951] bridge_slave_0: left allmulticast mode [ 893.035151][ T6951] bridge_slave_0: left promiscuous mode [ 893.049308][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.297741][T31379] tipc: Node number set to 2886997162 [ 894.074861][ T7022] vcan0: entered allmulticast mode [ 894.470480][ T7048] net_ratelimit: 1 callbacks suppressed [ 894.470498][ T7048] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 894.775742][ T7067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.001206][ T7081] __nla_validate_parse: 12 callbacks suppressed [ 895.001227][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9169'. [ 895.043794][ T7076] netlink: 'syz.5.9166': attribute type 1 has an invalid length. [ 895.054005][ T7081] gtp0: entered promiscuous mode [ 895.070506][ T7081] gtp0: entered allmulticast mode [ 895.155926][ T7086] veth3: entered promiscuous mode [ 895.189362][ T3519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.198497][T31395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.206838][T31395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.216599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.243286][T31379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.290538][ T7098] netlink: 'syz.3.9171': attribute type 178 has an invalid length. [ 895.301118][ T7098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.449637][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9175'. [ 895.492768][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9175'. [ 895.517498][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9175'. [ 895.558691][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9175'. [ 895.678736][ T7119] sctp: [Deprecated]: syz.4.9178 (pid 7119) Use of int in maxseg socket option. [ 895.678736][ T7119] Use struct sctp_assoc_value instead [ 895.729849][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9178'. [ 895.843402][T23822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.853119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.905168][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9184'. [ 896.344294][ T7157] netlink: 'syz.2.9189': attribute type 32 has an invalid length. [ 896.352759][ T7159] veth1_macvtap: left promiscuous mode [ 896.361096][ T7159] macsec0: entered promiscuous mode [ 896.366542][ T7159] macsec0: entered allmulticast mode [ 896.378738][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9189'. [ 896.406367][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9191'. [ 896.488500][ T7157] bond1: option coupled_control: invalid value (115) [ 896.510651][ T7157] bond1 (unregistering): Released all slaves [ 896.619903][ T7159] veth1_macvtap: entered promiscuous mode [ 896.625711][ T7159] veth1_macvtap: entered allmulticast mode [ 896.652865][ T7159] macsec0: left promiscuous mode [ 896.674193][ T7159] macsec0: left allmulticast mode [ 896.728200][ T7159] veth1_macvtap: left allmulticast mode [ 897.033672][ T7186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9197'. [ 897.088905][ T7192] netlink: 'syz.4.9199': attribute type 1 has an invalid length. [ 897.310856][ T7208] netlink: 'syz.2.9204': attribute type 33 has an invalid length. [ 897.335091][ T7208] netlink: 'syz.2.9204': attribute type 33 has an invalid length. [ 897.338649][ T7211] netlink: 'syz.4.9205': attribute type 11 has an invalid length. [ 897.479660][ T7220] netlink: 'syz.3.9207': attribute type 1 has an invalid length. [ 897.944693][ T7257] netlink: 'syz.4.9218': attribute type 11 has an invalid length. [ 898.068899][ T7263] xt_recent: Unsupported userspace flags (000000b1) [ 898.670632][ T7295] tipc: New replicast peer: 255.255.255.255 [ 898.699071][ T7295] tipc: Enabled bearer , priority 10 [ 899.172815][ T7312] bond1: ARP target 1.0.0.0 is already present [ 899.286015][ T7312] bond1: option arp_ip_target: invalid value (1) [ 899.321518][ T7312] bond1 (unregistering): Released all slaves [ 899.821722][T31369] tipc: Node number set to 3447578017 [ 900.084712][ T7344] veth0: entered promiscuous mode [ 900.129390][ T7341] veth0: left promiscuous mode [ 900.311356][T23822] net_ratelimit: 2 callbacks suppressed [ 900.311377][T23822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.318977][ T7371] warn_alloc: 1 callbacks suppressed [ 900.319020][ T7371] syz.5.9248: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 900.328973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.357632][ T7371] ,cpuset=/,mems_allowed=0-1 [ 900.362335][ T7371] CPU: 0 UID: 0 PID: 7371 Comm: syz.5.9248 Not tainted syzkaller #0 PREEMPT(full) [ 900.362364][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 900.362379][ T7371] Call Trace: [ 900.362387][ T7371] [ 900.362398][ T7371] dump_stack_lvl+0xe8/0x150 [ 900.362431][ T7371] warn_alloc+0x249/0x340 [ 900.362456][ T7371] ? stack_trace_save+0xa9/0x100 [ 900.362488][ T7371] ? __pfx_warn_alloc+0x10/0x10 [ 900.362519][ T7371] ? kasan_save_track+0x4f/0x80 [ 900.362538][ T7371] ? kasan_save_track+0x3e/0x80 [ 900.362556][ T7371] ? __kasan_kmalloc+0x93/0xb0 [ 900.362577][ T7371] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 900.362596][ T7371] ? xskq_create+0x56/0x170 [ 900.362616][ T7371] ? xsk_setsockopt+0x54c/0x990 [ 900.362645][ T7371] ? do_sock_setsockopt+0x17c/0x1b0 [ 900.362671][ T7371] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 900.362697][ T7371] ? do_syscall_64+0xe2/0xf80 [ 900.362724][ T7371] __vmalloc_node_range_noprof+0x132/0x1730 [ 900.362783][ T7371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 900.362813][ T7371] ? __kasan_kmalloc+0x93/0xb0 [ 900.362841][ T7371] vmalloc_user_noprof+0xad/0xe0 [ 900.362863][ T7371] ? xskq_create+0xbf/0x170 [ 900.362884][ T7371] xskq_create+0xbf/0x170 [ 900.362907][ T7371] xsk_init_queue+0xad/0x110 [ 900.362943][ T7371] xsk_setsockopt+0x54c/0x990 [ 900.362978][ T7371] ? __pfx_xsk_setsockopt+0x10/0x10 [ 900.363010][ T7371] ? __pfx_aa_sk_perm+0x10/0x10 [ 900.363039][ T7371] ? aa_sock_opt_perm+0xff/0x1a0 [ 900.363076][ T7371] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 900.363099][ T7371] ? __pfx_xsk_setsockopt+0x10/0x10 [ 900.363132][ T7371] do_sock_setsockopt+0x17c/0x1b0 [ 900.363163][ T7371] __x64_sys_setsockopt+0x13d/0x1b0 [ 900.363197][ T7371] do_syscall_64+0xe2/0xf80 [ 900.363220][ T7371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.363242][ T7371] ? trace_irq_disable+0x37/0x100 [ 900.363263][ T7371] ? clear_bhb_loop+0x60/0xb0 [ 900.363290][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.363311][ T7371] RIP: 0033:0x7f1e5159aeb9 [ 900.363332][ T7371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.363352][ T7371] RSP: 002b:00007f1e524ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 900.363375][ T7371] RAX: ffffffffffffffda RBX: 00007f1e51815fa0 RCX: 00007f1e5159aeb9 [ 900.363392][ T7371] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 900.363405][ T7371] RBP: 00007f1e51608c1f R08: 0000000000000004 R09: 0000000000000000 [ 900.363419][ T7371] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.363433][ T7371] R13: 00007f1e51816038 R14: 00007f1e51815fa0 R15: 00007ffca5c43ab8 [ 900.363469][ T7371] [ 900.363479][ T7371] Mem-Info: [ 900.534080][ T7377] xt_hashlimit: invalid rate [ 900.677506][ T7371] active_anon:9162 inactive_anon:0 isolated_anon:0 [ 900.677506][ T7371] active_file:2763 inactive_file:40727 isolated_file:0 [ 900.677506][ T7371] unevictable:768 dirty:74 writeback:0 [ 900.677506][ T7371] slab_reclaimable:14082 slab_unreclaimable:160181 [ 900.677506][ T7371] mapped:34743 shmem:1378 pagetables:1541 [ 900.677506][ T7371] sec_pagetables:0 bounce:0 [ 900.677506][ T7371] kernel_misc_reclaimable:0 [ 900.677506][ T7371] free:1235460 free_pcp:14464 free_cma:0 [ 900.756836][ T7378] tipc: Enabling of bearer rejected, failed to enable media [ 900.828225][ T7371] Node 0 active_anon:36548kB inactive_anon:0kB active_file:11052kB inactive_file:162708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138972kB dirty:292kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18204kB pagetables:6012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 900.911918][ T7371] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 901.014687][ T7371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.089608][ T7371] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 901.127991][ T7371] Node 0 DMA32 free:1030036kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36952kB inactive_anon:0kB active_file:11052kB inactive_file:162708kB unevictable:1536kB writepending:292kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:42672kB local_pcp:21196kB free_cma:0kB [ 901.189392][ T7371] lowmem_reserve[]: 0 0 1 1 1 [ 901.195387][ T7371] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.247519][ T7371] lowmem_reserve[]: 0 0 0 0 0 [ 901.256815][ T7371] Node 1 Normal free:3898732kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12704kB local_pcp:8512kB free_cma:0kB [ 901.327899][ T7378] syzkaller0: entered promiscuous mode [ 901.335978][ T7378] syzkaller0: entered allmulticast mode [ 901.347246][ T7371] lowmem_reserve[]: 0 0 0 0 0 [ 901.360599][ T7371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 901.374197][ T7371] Node 0 DMA32: 13023*4kB (UME) 7975*8kB (UME) 3995*16kB (UME) 264*32kB (UME) 184*64kB (UME) 113*128kB (UME) 446*256kB (UME) 371*512kB (UME) 220*1024kB (UE) 103*2048kB (UM) 18*4096kB (M) = 1028580kB [ 901.425702][ T7371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 901.439084][ T7371] Node 1 Normal: 193*4kB (UME) 63*8kB (UME) 53*16kB (UME) 241*32kB (UME) 74*64kB (UME) 13*128kB (UME) 6*256kB (UME) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3898732kB [ 901.469173][ T7371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 901.480274][ T7371] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 901.492722][ T7417] netlink: 'syz.3.9258': attribute type 28 has an invalid length. [ 901.502130][ T7371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 901.522220][ T7417] netlink: 'syz.3.9258': attribute type 3 has an invalid length. [ 901.531129][ T7417] __nla_validate_parse: 14 callbacks suppressed [ 901.531144][ T7417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9258'. [ 901.547781][ T7371] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 901.558455][ T7371] 44864 total pagecache pages [ 901.564562][ T7371] 0 pages in swap cache [ 901.571920][ T7371] Free swap = 124996kB [ 901.576138][ T7371] Total swap = 124996kB [ 901.581307][ T7371] 2097051 pages RAM [ 901.585426][ T7371] 0 pages HighMem/MovableOnly [ 901.594723][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.603375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.616063][ T7371] 426622 pages reserved [ 901.621120][ T7371] 0 pages cma reserved [ 902.005030][ T7435] netlink: 'syz.5.9263': attribute type 13 has an invalid length. [ 902.222156][ T7443] netlink: 51 bytes leftover after parsing attributes in process `syz.4.9265'. [ 902.235562][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9265'. [ 902.623219][ T7472] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9275'. [ 902.729579][ T7479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9280'. [ 902.748304][ T7481] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9279'. [ 903.034017][ T7494] netlink: 10 bytes leftover after parsing attributes in process `syz.5.9285'. [ 903.099967][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9285'. [ 903.382061][T28700] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 903.393849][T28700] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 903.402754][T28700] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 903.415637][T28700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 903.424806][T28700] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 903.707079][ T7498] lo speed is unknown, defaulting to 1000 [ 904.099392][ T7518] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 904.244932][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9296'. [ 904.268688][ T7527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 904.291992][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9296'. [ 904.342427][ T7534] Bluetooth: MGMT ver 1.23 [ 904.349518][ T7498] chnl_net:caif_netlink_parms(): no params data found [ 904.714436][ T7558] netlink: 'syz.0.9302': attribute type 1 has an invalid length. [ 904.722344][ T7558] NCSI netlink: No device for ifindex 0 [ 904.798979][T31381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.262070][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.271678][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.283294][ T7498] bridge_slave_0: entered allmulticast mode [ 905.292637][ T7498] bridge_slave_0: entered promiscuous mode [ 905.369065][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.376257][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.405104][ T7498] bridge_slave_1: entered allmulticast mode [ 905.422750][ T7498] bridge_slave_1: entered promiscuous mode [ 905.510012][ T5831] Bluetooth: hci5: command tx timeout [ 905.547007][ T7498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.564367][ T7498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.606600][ T7498] team0: Port device team_slave_0 added [ 905.616576][ T7498] team0: Port device team_slave_1 added [ 905.663335][ T7580] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 905.672248][ T7580] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode [ 905.693214][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.701438][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.728691][ T7498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.762309][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.772440][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.809233][ T7498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.870311][ T7498] hsr_slave_0: entered promiscuous mode [ 905.876930][ T7498] hsr_slave_1: entered promiscuous mode [ 905.883842][T17965] lec:lec_start_xmit: lec0:No lecd attached [ 905.891699][ T7498] debugfs: 'hsr0' already exists in 'hsr' [ 905.898627][ T7498] Cannot create hsr debugfs directory [ 906.032604][ T7498] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.072529][ T8043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.081237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.114720][ T7498] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.163453][ T7498] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.215698][ T7498] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.356212][T23822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.364854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.587784][ T5831] Bluetooth: hci5: command tx timeout [ 907.614389][ T7558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.627021][ T7582] netlink: 'syz.5.9309': attribute type 1 has an invalid length. [ 907.647134][ T7582] __nla_validate_parse: 2 callbacks suppressed [ 907.647155][ T7582] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9309'. [ 907.680536][ T7582] netlink: 'syz.5.9309': attribute type 1 has an invalid length. [ 907.712469][ T7582] netlink: 'syz.5.9309': attribute type 8 has an invalid length. [ 907.731697][ T7582] netlink: 606 bytes leftover after parsing attributes in process `syz.5.9309'. [ 907.763530][ T7582] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9309'. [ 907.786610][ T7498] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 907.819576][ T7498] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 907.852557][ T7498] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 907.890481][ T7498] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 907.947899][ T7595] vlan2: entered promiscuous mode [ 907.954170][ T7595] vlan2: entered allmulticast mode [ 907.963665][ T7595] hsr_slave_1: entered allmulticast mode [ 907.972082][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9313'. [ 908.162285][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9314'. [ 908.189964][ T7599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9314'. [ 908.286774][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.333432][ T7498] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.349031][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.356260][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.385701][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9314'. [ 908.419702][ T7613] nbd: device at index 64 is going down [ 908.433684][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.441203][ T8029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.683666][ T6068] udevd[6068]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 908.805819][ T7632] netlink: 'syz.5.9319': attribute type 1 has an invalid length. [ 908.827610][ T7632] netlink: 'syz.5.9319': attribute type 7 has an invalid length. [ 908.852491][ T7632] netlink: 'syz.5.9319': attribute type 8 has an invalid length. [ 908.862568][ T7634] SET target dimension over the limit! [ 908.874540][ T7634] --map-set only usable from mangle table [ 908.884025][ T7632] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9319'. [ 909.110755][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9321'. [ 909.212050][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9316'. [ 909.275667][ T7616] netlink: 'syz.0.9316': attribute type 1 has an invalid length. [ 909.323394][ T7498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.670255][ T5831] Bluetooth: hci5: command tx timeout [ 909.726448][ T7664] netlink: 'syz.5.9326': attribute type 30 has an invalid length. [ 909.870136][ T7664] bond1: option arp_missed_max: invalid value (0) [ 909.876633][ T7664] bond1: option arp_missed_max: allowed values 1 - 255 [ 909.891186][ T7664] bond1 (unregistering): Released all slaves [ 909.945664][ T7670] : entered promiscuous mode [ 910.032936][ T7498] veth0_vlan: entered promiscuous mode [ 910.070794][ T7498] veth1_vlan: entered promiscuous mode [ 910.181732][ T7498] veth0_macvtap: entered promiscuous mode [ 910.214424][ T7498] veth1_macvtap: entered promiscuous mode [ 910.289003][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.341869][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.431261][ T7684] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 910.442115][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.474109][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.501697][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.525812][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.894429][ T7713] netlink: 'syz.5.9339': attribute type 17 has an invalid length. [ 910.947672][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 910.955867][ C1] lec:lec_tx_timeout: lec0 [ 910.988977][ T7717] netlink: 'syz.3.9342': attribute type 39 has an invalid length. [ 911.183632][ T8033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.253479][ T8033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.436136][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.446352][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.747555][ T5831] Bluetooth: hci5: command tx timeout [ 911.833049][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.843769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.002404][T28700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 912.015821][T28700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 912.024775][T28700] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 912.051274][T28700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 912.059819][T28700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.612101][ T7763] lo speed is unknown, defaulting to 1000 [ 912.870299][ T7792] __nla_validate_parse: 11 callbacks suppressed [ 912.870319][ T7792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9363'. [ 913.109037][T23822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.117534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.192821][ T7763] chnl_net:caif_netlink_parms(): no params data found [ 913.403637][ T7816] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 913.702374][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.728749][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.736308][ T7763] bridge_slave_0: entered allmulticast mode [ 913.770369][ T7763] bridge_slave_0: entered promiscuous mode [ 913.835236][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.885169][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.929286][ T7763] bridge_slave_1: entered allmulticast mode [ 913.954194][ T7763] bridge_slave_1: entered promiscuous mode [ 914.109831][ T7858] validate_nla: 1 callbacks suppressed [ 914.109850][ T7858] netlink: 'syz.0.9371': attribute type 10 has an invalid length. [ 914.153724][T28700] Bluetooth: hci0: command tx timeout [ 914.390792][T31379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.458592][ T7858] team0: Device veth1_macvtap failed to register rx_handler [ 914.706890][ T7763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.730834][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9373'. [ 914.762180][ T7763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.933672][ T7763] team0: Port device team_slave_0 added [ 914.974704][ T7763] team0: Port device team_slave_1 added [ 915.166854][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.196913][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.318483][ T7763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.355651][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.364479][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.402010][ T7894] netlink: 'syz.2.9380': attribute type 3 has an invalid length. [ 915.442788][ T7897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9379'. [ 915.458597][ T7763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.711991][ T7763] hsr_slave_0: entered promiscuous mode [ 915.721953][ T7763] hsr_slave_1: entered promiscuous mode [ 915.734973][ T7909] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9384'. [ 915.764740][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9384'. [ 915.786017][ T7763] debugfs: 'hsr0' already exists in 'hsr' [ 915.806790][ T7763] Cannot create hsr debugfs directory [ 915.865793][ T7915] 8021q: VLANs not supported on ip6_vti0 [ 915.888136][ T7915] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9386'. [ 915.952142][ T7918] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9387'. [ 916.229729][T28700] Bluetooth: hci0: command tx timeout [ 916.434048][ T7763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.456318][ T7940] netlink: 'syz.2.9392': attribute type 2 has an invalid length. [ 916.459840][ T7763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.506238][ T7763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 916.521244][ T7763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 916.733957][ T7763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.751988][ T7763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.765086][ T7763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 916.781035][ T7763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 916.818890][ T7959] lo: entered allmulticast mode [ 916.833582][ T7959] lo: left allmulticast mode [ 916.995354][ T7763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.010179][ T7763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.032021][ T7763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 917.044289][ T7763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 917.089667][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9401'. [ 917.208564][ T7763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.231360][ T7763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.270907][ T7763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 917.308217][ T7763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 917.321372][ T7982] Cannot find add_set index 0 as target [ 917.545118][ T30] audit: type=1800 audit(1770258837.403:21): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9411" name="memory.events" dev="tmpfs" ino=547 res=0 errno=0 [ 917.594259][T13002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.603968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.636329][ T30] audit: type=1804 audit(1770258837.403:22): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9411" name="/newroot/104/memory.events" dev="tmpfs" ino=547 res=1 errno=0 [ 917.675881][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9411'. [ 917.745196][ T7763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 917.782984][ T7763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 917.852893][ T7763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 917.922859][ T7763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 917.938738][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9416'. [ 917.960362][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9416'. [ 917.991981][ T8006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.002340][ T8010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.144816][ T8030] netlink: 696 bytes leftover after parsing attributes in process `syz.5.9418'. [ 918.308155][T28700] Bluetooth: hci0: command tx timeout [ 918.512939][ T7763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.581916][ T7763] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.594461][ T8056] netlink: 'syz.0.9421': attribute type 7 has an invalid length. [ 918.606574][ T8056] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9421'. [ 918.639101][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.646877][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.726813][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.734175][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.870776][T13002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.880461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.306605][ T7763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.410874][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9433'. [ 919.522574][ T7763] veth0_vlan: entered promiscuous mode [ 919.560279][ T7763] veth1_vlan: entered promiscuous mode [ 919.701381][ T8100] veth0: entered promiscuous mode [ 919.709974][ T7763] veth0_macvtap: entered promiscuous mode [ 919.724192][ T7763] veth1_macvtap: entered promiscuous mode [ 919.802515][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.865640][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.964132][ T8099] veth0: left promiscuous mode [ 920.001644][ T8043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.026364][ T8043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.052646][ T8043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.133522][ T8043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.165816][ T8108] tipc: Enabled bearer , priority 0 [ 920.321062][ T8123] netlink: 'syz.4.9444': attribute type 21 has an invalid length. [ 920.343839][ T8123] IPv6: NLM_F_CREATE should be specified when creating new route [ 920.361160][ T8109] syzkaller0: entered promiscuous mode [ 920.366865][ T8123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.374187][ T8123] IPv6: NLM_F_CREATE should be set when creating new route [ 920.381528][ T8123] IPv6: NLM_F_CREATE should be set when creating new route [ 920.388921][ T8123] IPv6: NLM_F_CREATE should be set when creating new route [ 920.390383][T28700] Bluetooth: hci0: command tx timeout [ 920.404545][ T8109] syzkaller0: entered allmulticast mode [ 920.419485][ T8124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 920.420666][ T8109] tipc: Resetting bearer [ 920.502073][ T8127] netlink: 165 bytes leftover after parsing attributes in process `syz.2.9446'. [ 920.546871][ T8108] tipc: Resetting bearer [ 920.633410][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9446'. [ 920.643772][ T8127] openvswitch: netlink: Key type 80 is out of range max 32 [ 922.434500][ T8108] tipc: Disabling bearer [ 922.582874][ T8133] netlink: 'syz.5.9448': attribute type 1 has an invalid length. [ 922.624625][ T8133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.647611][ T8033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.656468][ T8033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.668795][ T8134] syzkaller0: entered promiscuous mode [ 922.674401][ T8134] syzkaller0: entered allmulticast mode [ 922.745071][ T8134] netlink: 'syz.4.9447': attribute type 1 has an invalid length. [ 922.767113][ T8133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.775136][ T8133] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 922.792588][ T8133] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 922.820988][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9448'. [ 922.913254][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9448'. [ 922.923729][ T8144] veth5: entered promiscuous mode [ 922.933360][ T8144] bond1: (slave veth5): Enslaving as an active interface with a down link [ 922.981198][ T8146] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 922.994123][ T8146] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 923.005389][ T8146] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 923.083564][ T8152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 923.101871][ T8145] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 923.208949][ T8162] IPVS: set_ctl: invalid protocol: 60 172.20.20.51:20000 [ 923.222738][ T8033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.234313][ T8033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.244899][ T8145] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9450'. [ 923.252579][T31369] IPVS: starting estimator thread 0... [ 923.361694][ T8043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.372077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.377931][ T8165] IPVS: using max 27 ests per chain, 64800 per kthread [ 923.660569][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9349'. [ 923.677456][ T8185] bridge_slave_1: left allmulticast mode [ 923.738599][ T8185] bridge_slave_1: left promiscuous mode [ 923.768690][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.871013][ T8185] bridge_slave_0: left allmulticast mode [ 923.891126][ T8185] bridge_slave_0: left promiscuous mode [ 923.901959][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.984841][ T8196] netlink: 'syz.4.9459': attribute type 1 has an invalid length. [ 923.995452][T31380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.010165][ T8198] sch_tbf: peakrate 120 is lower than or equals to rate 7881069872879920942 ! [ 924.156305][ T8205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9461'. [ 924.193603][ T8205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9461'. [ 924.239848][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9462'. [ 924.240978][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9462'. [ 924.473413][ T8227] netlink: 'syz.0.9466': attribute type 19 has an invalid length. [ 924.509390][ T8234] netlink: 'syz.4.9468': attribute type 10 has an invalid length. [ 924.550812][ T8234] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 925.019263][ T8261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9477'. [ 925.040829][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9477'. [ 925.053041][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9477'. [ 925.109221][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9477'. [ 925.253338][ T8275] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 925.364064][ T8277] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 926.124175][ T7399] tipc: Subscription rejected, illegal request [ 926.134231][ T8318] --map-set only usable from mangle table [ 926.159417][ T8319] chnl_net:caif_netlink_parms(): no params data found [ 926.283987][T13002] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.336210][T13002] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.363800][T13002] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.382594][T13002] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.408011][ T8329] netlink: 'syz.5.9497': attribute type 39 has an invalid length. [ 926.432757][ T8328] netlink: 'syz.5.9497': attribute type 39 has an invalid length. [ 926.877742][ T8357] tipc: Started in network mode [ 926.905675][ T8357] tipc: Node identity , cluster identity 4711 [ 926.932781][ T8357] tipc: Failed to set node id, please configure manually [ 926.952814][ T8357] tipc: Enabling of bearer rejected, failed to enable media [ 927.051413][ T8363] netlink: 'syz.5.9509': attribute type 1 has an invalid length. [ 927.069875][ T8363] nbd: error processing sock list [ 927.089209][ T8363] block nbd7: shutting down sockets [ 927.120098][ T8370] netlink: 'syz.3.9512': attribute type 1 has an invalid length. [ 927.345985][ T8370] bond0: (slave bond_slave_0): Releasing backup interface [ 927.930403][ T8379] lo speed is unknown, defaulting to 1000 [ 928.289038][ T8415] __nla_validate_parse: 10 callbacks suppressed [ 928.289061][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9526'. [ 928.683409][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9530'. [ 928.720279][ T8434] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9531'. [ 928.740035][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9531'. [ 928.890591][ T8441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.020567][ T8448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.116825][ T3519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.126691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.500354][ T8472] Bluetooth: MGMT ver 1.23 [ 929.987191][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.012780][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.070096][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9543'. [ 930.081415][ T8483] atomic_op ffff888074a02998 conn xmit_atomic 0000000000000000 [ 930.277115][ T8487] 8021q: VLANs not supported on sit0 [ 930.301939][ T8472] ip6gre0: Master is either lo or non-ether device [ 930.382342][ T8029] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.411693][T13002] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.423562][T13002] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.441445][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9546'. [ 930.471769][T13002] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.570574][ T8498] netlink: 'syz.0.9548': attribute type 11 has an invalid length. [ 930.580374][ T8498] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9548'. [ 930.617595][ T8498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9548'. [ 930.669488][ T8499] syzkaller0: entered promiscuous mode [ 930.685105][ T8499] syzkaller0: entered allmulticast mode [ 930.720876][ T8501] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9550'. [ 930.746442][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9550'. [ 931.172313][ T8531] netlink: 'syz.3.9557': attribute type 14 has an invalid length. [ 931.240231][ T8534] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 931.604253][ T8563] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 932.002942][ T8594] netlink: 'syz.4.9573': attribute type 7 has an invalid length. [ 932.018649][ T8594] netlink: 'syz.4.9573': attribute type 8 has an invalid length. [ 932.479882][ T8612] geneve2: entered promiscuous mode [ 932.951611][ T8033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.961406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.999941][ T8642] netlink: 'syz.0.9589': attribute type 11 has an invalid length. [ 933.155012][ T8649] gretap0: entered promiscuous mode [ 933.174332][ T8649] gretap0: left promiscuous mode [ 933.308614][ T8662] netlink: 'syz.2.9597': attribute type 3 has an invalid length. [ 933.592834][T31379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.805623][ T8696] xt_hashlimit: max too large, truncated to 1048576 [ 933.830227][ T8697] xt_hashlimit: max too large, truncated to 1048576 [ 933.950988][ T8701] netlink: 'syz.4.9606': attribute type 11 has an invalid length. [ 934.271612][ T8720] bond2: Removing last ns target with arp_interval on [ 934.290409][ T8726] __nla_validate_parse: 10 callbacks suppressed [ 934.290441][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9613'. [ 934.783077][ T8752] sctp: [Deprecated]: syz.5.9621 (pid 8752) Use of int in max_burst socket option. [ 934.783077][ T8752] Use struct sctp_assoc_value instead [ 934.804121][T31394] IPVS: starting estimator thread 0... [ 934.813942][ T8752] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20000 [ 934.873183][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.881802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.898569][ T8754] IPVS: using max 24 ests per chain, 57600 per kthread [ 935.079625][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9625'. [ 935.171738][ T8767] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.9626'. [ 935.211524][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9622'. [ 935.409815][ T8783] openvswitch: netlink: Unknown key attributes 2 [ 935.430289][ T8785] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9631'. [ 935.473591][ T8785] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9631'. [ 935.496282][ T8791] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9629'. [ 935.804348][ T8812] IPVS: Unknown mcast interface: pim6reg0 [ 935.831925][ T8802] netlink: 'syz.3.9635': attribute type 1 has an invalid length. [ 935.847588][ T8812] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9639'. [ 935.880221][ T8035] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.898591][ T8035] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.931313][ T8035] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.958455][ T8035] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.011801][ T8819] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9640'. [ 936.532008][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9652'. [ 936.559565][ T8861] netlink: 'syz.2.9652': attribute type 33 has an invalid length. [ 936.633005][ T8861] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 936.674683][ T8861] bond1 (unregistering): Released all slaves [ 936.794860][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 936.812082][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 937.061348][ T8888] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 937.170729][ T8890] tipc: Enabled bearer , priority 0 [ 937.719083][ T8924] lo: entered allmulticast mode [ 937.729699][ T8926] x_tables: duplicate underflow at hook 2 [ 937.900734][ T8919] lo: left allmulticast mode [ 937.954341][ T8889] tipc: Disabling bearer [ 938.180773][ T8954] netlink: 'syz.2.9676': attribute type 2 has an invalid length. [ 938.203463][ T8954] : entered promiscuous mode [ 938.386765][ T8964] sctp: [Deprecated]: syz.2.9680 (pid 8964) Use of int in max_burst socket option deprecated. [ 938.386765][ T8964] Use struct sctp_assoc_value instead [ 938.704249][ T8986] netlink: 'syz.3.9682': attribute type 10 has an invalid length. [ 938.720774][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.739941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.761844][ T8981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.784249][ T8981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.816535][ T8981] bond0 (unregistering): Released all slaves [ 938.838191][ T8986] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 938.930563][ T8993] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 939.053651][ T9001] netlink: 'syz.0.9690': attribute type 1 has an invalid length. [ 939.126702][ T9001] bond1: entered promiscuous mode [ 939.134490][ T9001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 939.184349][ T9001] bond1: (slave bridge7): making interface the new active one [ 939.219031][ T9001] bridge7: entered promiscuous mode [ 939.236832][ T9001] bridge7: left promiscuous mode [ 939.417198][ T9022] __nla_validate_parse: 11 callbacks suppressed [ 939.417223][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9696'. [ 939.438309][ T9013] syzkaller0: entered promiscuous mode [ 939.593266][ T9031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9698'. [ 939.603668][ T9031] lo: entered promiscuous mode [ 939.613052][ T9031] netlink: 'syz.0.9698': attribute type 2 has an invalid length. [ 939.675218][ T9031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.948926][ T9051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 939.956228][ T9051] IPv6: NLM_F_CREATE should be set when creating new route [ 939.963535][ T9051] IPv6: NLM_F_CREATE should be set when creating new route [ 939.970886][ T9051] IPv6: NLM_F_CREATE should be set when creating new route [ 939.978273][ T9055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 940.146528][ T9060] netlink: 'syz.2.9710': attribute type 1 has an invalid length. [ 940.170512][ T9068] netlink: 'syz.5.9711': attribute type 2 has an invalid length. [ 940.191654][ T9068] netlink: 'syz.5.9711': attribute type 1 has an invalid length. [ 940.212290][ T9071] netlink: 'syz.0.9712': attribute type 1 has an invalid length. [ 940.571722][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9718'. [ 940.629886][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.638374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.760689][ T9103] tipc: Enabling of bearer rejected, media not registered [ 940.907738][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9725'. [ 941.256068][ T9123] tipc: Failed to obtain node identity [ 941.305323][ T9123] tipc: Enabling of bearer rejected, failed to enable media [ 941.424816][ T9131] netlink: 'syz.3.9735': attribute type 1 has an invalid length. [ 941.551658][ T9131] bond1: entered promiscuous mode [ 941.612294][ T9131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 941.646878][ T9152] netlink: 'syz.4.9738': attribute type 11 has an invalid length. [ 941.662615][ T9152] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9738'. [ 941.693780][ T9139] bond1: (slave bridge0): making interface the new active one [ 941.723012][ T9139] bridge0: entered promiscuous mode [ 941.741756][ T9139] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 941.821110][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9739'. [ 941.975881][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9742'. [ 941.997371][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 942.005648][ C1] lec:lec_tx_timeout: lec0 [ 942.501868][ T9184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.561601][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9745'. [ 942.674475][ T9195] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9750'. [ 942.755033][ T9205] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9749'. [ 943.090007][ T9219] tipc: Invalid UDP bearer configuration [ 943.090061][ T9219] tipc: Enabling of bearer rejected, failed to enable media [ 943.104618][ T8029] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.117123][ T8029] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.126740][ T8029] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.150107][ T8029] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.191539][T31381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.251288][ T9226] dvmrp0: entered allmulticast mode [ 943.376238][ T9231] tipc: Enabled bearer , priority 0 [ 943.422667][ T9231] syzkaller0: entered promiscuous mode [ 943.429136][ T9231] syzkaller0: entered allmulticast mode [ 943.435737][ T9231] tipc: Resetting bearer [ 943.512988][ T37] tipc: Resetting bearer [ 943.523415][ T9230] tipc: Resetting bearer [ 944.479998][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.488462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.446548][ T9230] tipc: Disabling bearer [ 945.699156][ T9255] syzkaller1: entered promiscuous mode [ 945.704877][ T9255] syzkaller1: entered allmulticast mode [ 945.979741][ T9279] validate_nla: 6 callbacks suppressed [ 945.979764][ T9279] netlink: 'syz.5.9771': attribute type 1 has an invalid length. [ 945.994464][ T9279] __nla_validate_parse: 1 callbacks suppressed [ 945.994485][ T9279] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9771'. [ 946.052975][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9769'. [ 946.195921][ T9280] team0: Port device team_slave_0 removed [ 946.236776][ T9293] netlink: 'syz.5.9771': attribute type 12 has an invalid length. [ 946.266833][ T9293] netlink: 'syz.5.9771': attribute type 29 has an invalid length. [ 946.295887][ T9293] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9771'. [ 946.329404][ T9293] netlink: 'syz.5.9771': attribute type 2 has an invalid length. [ 946.352320][ T9293] netlink: 23 bytes leftover after parsing attributes in process `syz.5.9771'. [ 946.391811][ T8033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.401434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.550390][ T9304] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9776'. [ 946.559970][ T9304] 0{X功: renamed from gretap0 (while UP) [ 946.570490][ T9304] 0{X功: entered allmulticast mode [ 946.576600][ T9304] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 946.607780][ T9304] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9776'. [ 946.650039][ T9304] 1{X功: renamed from 30{X功 (while UP) [ 946.666385][ T9304] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 946.800689][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9780'. [ 946.915344][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9779'. [ 946.930798][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9779'. [ 946.982298][ T9337] delete_channel: no stack [ 947.163032][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9784'. [ 947.272171][ T9341] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 947.330935][ T9343] netlink: 'syz.5.9785': attribute type 7 has an invalid length. [ 947.912247][ T9376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.940160][ T9376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 948.013341][ T9380] netlink: 'syz.5.9794': attribute type 10 has an invalid length. [ 948.069290][ T9380] batman_adv: batadv0: Adding interface: netdevsim0 [ 948.077144][ T9380] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.132343][ T9380] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 948.211738][ T9345] lec:lec_atm_close: lec0: Shut down! [ 948.318243][ T9386] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 949.264610][ T9444] bridge0: Device is already in use. [ 949.334606][ T9448] team0: Device gtp1 is up. Set it down before adding it as a team port [ 949.422115][ T9450] bond3: option mode: invalid value (133) [ 949.431734][ T9450] bond3 (unregistering): Released all slaves [ 949.478356][ T9458] netlink: 'syz.3.9820': attribute type 1 has an invalid length. [ 949.516945][ T9458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 949.871112][ T9478] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 949.899229][ T9478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.945916][ T9478] macvlan3: entered promiscuous mode [ 949.956391][ T9478] macvlan3: entered allmulticast mode [ 949.964108][ T9478] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 950.104534][ T9488] netlink: 'syz.2.9828': attribute type 1 has an invalid length. [ 950.229772][ T8043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.239200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.353312][ T9504] set match dimension is over the limit! [ 950.551378][ T9515] netlink: 'syz.2.9837': attribute type 5 has an invalid length. [ 950.772182][ T9526] sctp: [Deprecated]: syz.2.9839 (pid 9526) Use of int in max_burst socket option. [ 950.772182][ T9526] Use struct sctp_assoc_value instead [ 951.039396][ T9545] __nla_validate_parse: 12 callbacks suppressed [ 951.039416][ T9545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9847'. [ 951.134188][ T9553] netlink: 'syz.0.9848': attribute type 1 has an invalid length. [ 951.170029][ T9553] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9848'. [ 951.434405][ T9572] netlink: 'syz.3.9853': attribute type 83 has an invalid length. [ 951.453847][ T9574] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 951.517661][ T9574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.572809][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9855'. [ 951.586017][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9855'. [ 951.758805][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9858'. [ 951.858442][ T9598] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9861'. [ 951.882068][ T9598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9861'. [ 951.968722][ T9601] netlink: 'syz.5.9858': attribute type 1 has an invalid length. [ 952.006248][ T9588] netlink: 'syz.5.9858': attribute type 1 has an invalid length. [ 952.050798][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9858'. [ 952.073426][ T9588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.091680][ T9588] nbd: nbd5 already in use [ 952.167106][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.175827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.565312][ T9633] netlink: 'syz.4.9869': attribute type 1 has an invalid length. [ 952.580514][ T9633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9869'. [ 952.772062][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9871'. [ 952.791976][T31379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.812650][ T9643] netlink: 'syz.3.9870': attribute type 1 has an invalid length. [ 952.861420][ T9639] geneve3: entered promiscuous mode [ 952.862670][ T9643] netlink: 'syz.3.9870': attribute type 1 has an invalid length. [ 952.907951][ T9643] netlink: 'syz.3.9870': attribute type 8 has an invalid length. [ 953.019021][ T9654] Cannot find set identified by id 4 to match [ 953.136615][ T9660] netlink: 'syz.5.9876': attribute type 12 has an invalid length. [ 953.471858][ T9678] netlink: 'syz.5.9881': attribute type 10 has an invalid length. [ 953.546655][ T9678] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 953.987385][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 953.995464][ C1] lec:lec_tx_timeout: lec0 [ 954.211059][ T9672] atomic_op ffff888061d4e198 conn xmit_atomic 0000000000000000 [ 955.161919][ T30] audit: type=1107 audit(1770258875.023:23): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='賸5烑寱%柰U鼳伱速犽0仚l卼枯/ 6驃▕鐩' [ 955.490199][ T9765] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 955.555374][ T9758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 955.575607][ T8033] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 955.674651][ T9780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 955.707248][ T8035] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 955.876415][ T9777] bond2: entered promiscuous mode [ 955.888909][ T9777] bond2: entered allmulticast mode [ 955.894613][ T9777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 955.945224][ T9777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 955.990810][ T8033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.174809][ T9806] __nla_validate_parse: 13 callbacks suppressed [ 956.174831][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9919'. [ 956.230372][ T9777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 956.371949][ T9777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 957.120908][ T9843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9931'. [ 957.502378][ T9866] validate_nla: 1 callbacks suppressed [ 957.502397][ T9866] netlink: 'syz.0.9936': attribute type 1 has an invalid length. [ 957.531845][ T9866] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9936'. [ 957.570836][ T9866] netlink: 'syz.0.9936': attribute type 1 has an invalid length. [ 957.606928][ T9866] netlink: 'syz.0.9936': attribute type 8 has an invalid length. [ 957.636270][ T9866] netlink: 606 bytes leftover after parsing attributes in process `syz.0.9936'. [ 957.673214][ T9866] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9936'. [ 957.745557][ T9873] syzkaller0: entered promiscuous mode [ 957.752922][ T9873] syzkaller0: entered allmulticast mode [ 957.771868][ T9873] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9939'. [ 957.908955][ T8035] net_ratelimit: 1 callbacks suppressed [ 957.908973][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.922956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.072644][ T9901] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9946'. [ 958.100310][ T9903] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9946'. [ 958.141941][T31379] IPVS: starting estimator thread 0... [ 958.237794][ T9907] IPVS: using max 29 ests per chain, 69600 per kthread [ 958.289080][ T9910] x_tables: duplicate underflow at hook 2 [ 958.352675][ T9913] netlink: 'syz.0.9949': attribute type 1 has an invalid length. [ 958.369994][ T9913] netlink: 'syz.0.9949': attribute type 3 has an invalid length. [ 958.390167][ T9913] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9949'. [ 958.501065][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9953'. [ 958.593626][ T9931] openvswitch: netlink: Flow actions attr not present in new flow. [ 958.811584][ T9944] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 958.936961][ T9950] syzkaller0: entered promiscuous mode [ 958.956818][ T9950] syzkaller0: entered allmulticast mode [ 959.045590][ T9950] netlink: 'syz.5.9959': attribute type 10 has an invalid length. [ 959.059018][ T9955] netlink: 'syz.0.9961': attribute type 11 has an invalid length. [ 959.132510][ T9950] team0: Port device dummy0 added [ 959.252723][ T9963] vcan0: entered allmulticast mode [ 959.370719][ T9972] IPv6: sit1: Disabled Multicast RS [ 959.600599][ T9988] netlink: 'syz.3.9970': attribute type 1 has an invalid length. [ 959.620005][ T9988] netlink: 'syz.3.9970': attribute type 4 has an invalid length. [ 959.931083][T10006] netlink: 'syz.5.9977': attribute type 1 has an invalid length. [ 960.560053][T10035] bond3: Unable to set down delay as MII monitoring is disabled [ 960.615206][T10035] bond3 (unregistering): Released all slaves [ 960.707778][ T5831] Bluetooth: hci0: command 0x0405 tx timeout [ 961.074754][T10065] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 961.356367][T10080] netlink: 'syz.2.9998': attribute type 1 has an invalid length. [ 961.375302][T10080] __nla_validate_parse: 11 callbacks suppressed [ 961.375334][T10080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9998'. [ 961.615269][T10094] tipc: Started in network mode [ 961.636787][T10094] tipc: Node identity ae07e7d64cc2, cluster identity 4711 [ 961.646046][T10094] tipc: Enabled bearer , priority 0 [ 961.687668][T10094] syzkaller0: entered promiscuous mode [ 961.694223][T10094] syzkaller0: entered allmulticast mode [ 961.748395][ T3519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.757059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.813279][T10095] tipc: Resetting bearer [ 961.833138][T10100] debugfs: 'K姛u 檆r当K:懀執ポB嵾 摷谵lS窚-!' already exists in 'ieee80211' [ 961.912802][T10093] tipc: Resetting bearer [ 961.953907][T10093] tipc: Disabling bearer [ 961.971507][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10005'. [ 962.218669][T10119] delete_channel: no stack [ 962.261807][T10122] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.10010'. [ 962.376781][T10129] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10013'. [ 962.393739][T31381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.826558][T10161] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.10020'. [ 962.850622][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10019'. [ 962.930759][T10161] netlink: 156 bytes leftover after parsing attributes in process `syz.5.10020'. [ 962.940676][T10161] netlink: 156 bytes leftover after parsing attributes in process `syz.5.10020'. [ 963.123089][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10025'. [ 963.246049][T10184] validate_nla: 2 callbacks suppressed [ 963.246070][T10184] netlink: 'syz.4.10027': attribute type 1 has an invalid length. [ 963.261886][T10184] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10027'. [ 963.341224][T10192] netlink: 'syz.4.10027': attribute type 12 has an invalid length. [ 963.350971][T10192] netlink: 'syz.4.10027': attribute type 29 has an invalid length. [ 963.479609][T10198] netlink: 'syz.5.10032': attribute type 9 has an invalid length. [ 963.548871][T10198] delete_channel: no stack [ 963.674375][ T3519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.683751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.998298][T10231] bond3: option resend_igmp: invalid value (32767) [ 964.004935][T10231] bond3: option resend_igmp: allowed values 0 - 255 [ 964.016718][T10231] bond3 (unregistering): Released all slaves [ 964.212694][T10252] netlink: 'syz.5.10045': attribute type 1 has an invalid length. [ 964.364220][T10264] netlink: 'syz.5.10045': attribute type 12 has an invalid length. [ 964.373622][T10264] netlink: 'syz.5.10045': attribute type 29 has an invalid length. [ 964.612827][T10279] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 964.617014][T10280] x_tables: duplicate entry at hook 1 [ 965.118762][T10271] lo speed is unknown, defaulting to 1000 [ 965.155013][T10308] netlink: 'syz.5.10060': attribute type 1 has an invalid length. [ 965.287244][T10317] netlink: 'syz.5.10060': attribute type 12 has an invalid length. [ 965.321212][T10317] netlink: 'syz.5.10060': attribute type 29 has an invalid length. [ 965.430969][T10323] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 965.905971][T10342] delete_channel: no stack [ 966.174108][T10378] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 966.655129][T10410] __nla_validate_parse: 17 callbacks suppressed [ 966.655151][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10082'. [ 966.829846][T10422] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10086'. [ 966.996337][T10436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10089'. [ 967.026725][T10429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10089'. [ 967.425993][T10464] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 967.498372][T10466] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.10100'. [ 967.510412][ T7400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.510626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.584222][T10469] bond0 (unregistering): Released all slaves [ 967.664106][T10471] bond0 (unregistering): Released all slaves [ 967.743592][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10100'. [ 967.757634][T10470] tipc: Started in network mode [ 967.762729][T10470] tipc: Node identity ac1414aa, cluster identity 4711 [ 967.774245][T10470] tipc: Enabled bearer , priority 10 [ 968.306775][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10111'. [ 968.350066][T10512] block nbd7: Unsupported socket: should be TCP or UNIX. [ 968.366659][T10511] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10114'. [ 968.380967][T10513] block nbd7: Unsupported socket: should be TCP or UNIX. [ 968.382789][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10114'. [ 968.585274][T10524] validate_nla: 6 callbacks suppressed [ 968.585297][T10524] netlink: 'syz.0.10118': attribute type 1 has an invalid length. [ 968.601592][T10524] netlink: 'syz.0.10118': attribute type 1 has an invalid length. [ 968.887881][T31381] tipc: Node number set to 2886997162 [ 969.049463][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10124'. [ 969.096194][T10552] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 969.345221][T10573] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 969.381240][T10573] netlink: 'syz.0.10130': attribute type 83 has an invalid length. [ 969.456813][T10376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.465875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.531200][T10583] team_slave_0: entered promiscuous mode [ 969.537088][T10583] team_slave_1: entered promiscuous mode [ 969.564015][T10589] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 969.570583][T10583] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 969.586366][T10583] team0: Device macvlan2 is already an upper device of the team interface [ 969.630884][T10583] team_slave_0: left promiscuous mode [ 969.636466][T10583] team_slave_1: left promiscuous mode [ 969.799148][T10600] syz_tun: entered allmulticast mode [ 970.908921][T10660] openvswitch: netlink: Flow actions attr not present in new flow. [ 971.091641][T10671] netlink: 'syz.2.10155': attribute type 1 has an invalid length. [ 971.113479][T10671] netlink: 'syz.2.10155': attribute type 2 has an invalid length. [ 971.189728][T10681] ipt_ECN: cannot use operation on non-tcp rule [ 971.283993][T17965] lec:lec_start_xmit: lec0:No lecd attached [ 971.573136][T10706] netlink: 'syz.2.10165': attribute type 17 has an invalid length. [ 971.602763][T10706] netlink: 'syz.2.10165': attribute type 29 has an invalid length. [ 971.695340][T10715] netlink: 'syz.0.10167': attribute type 39 has an invalid length. [ 971.749308][T10716] __nla_validate_parse: 11 callbacks suppressed [ 971.749329][T10716] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10167'. [ 971.809742][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10169'. [ 971.861128][T10716] bond2 (unregistering): Released all slaves [ 971.872096][T10725] netlink: 'syz.5.10170': attribute type 1 has an invalid length. [ 971.924168][T10728] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10170'. [ 971.943452][T10725] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.10170'. [ 971.989028][T31379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.227853][T10733] syzkaller1: entered promiscuous mode [ 972.235540][T10733] syzkaller1: entered allmulticast mode [ 972.288649][T10741] syzkaller0: entered promiscuous mode [ 972.304643][T10741] syzkaller0: entered allmulticast mode [ 972.359130][T10748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.630223][T10374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.639595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.715911][T10764] netlink: 'syz.0.10180': attribute type 1 has an invalid length. [ 972.795060][T10764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 972.840091][T10773] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10183'. [ 972.935780][T10769] bond2: (slave veth11): Enslaving as an active interface with a down link [ 973.003142][T10764] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 973.029403][T10764] bond2: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 973.176627][T10792] openvswitch: netlink: IP tunnel dst address not specified [ 973.241400][T10792] pim6reg527: entered allmulticast mode [ 973.698183][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10198'. [ 973.708260][T10823] chnl_net:caif_netlink_parms(): no params data found [ 973.842762][T10829] xfrm1: entered allmulticast mode [ 974.080835][T10850] netlink: 'syz.0.10203': attribute type 13 has an invalid length. [ 974.093816][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10203'. [ 974.130460][T10850] netlink: 'syz.0.10203': attribute type 13 has an invalid length. [ 974.140222][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10203'. [ 974.453215][T10874] netlink: 'syz.3.10207': attribute type 10 has an invalid length. [ 974.600391][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10211'. [ 974.713040][ T7764] Bluetooth: hci2: command 0x0406 tx timeout [ 974.751520][T10889] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 974.928741][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10220'. [ 975.082548][T10911] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 975.108539][ T4581] unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2 [ 975.126575][ T4581] ref_tracker: netdev@ffff8880656e0618 has 1/1 users at [ 975.126575][ T4581] xfrm_dev_state_add+0x6e7/0xc30 [ 975.126575][ T4581] xfrm_add_sa+0x34ca/0x4230 [ 975.126575][ T4581] xfrm_user_rcv_msg+0x746/0xb20 [ 975.126575][ T4581] netlink_rcv_skb+0x232/0x4b0 [ 975.126575][ T4581] xfrm_netlink_rcv+0x79/0x90 [ 975.126575][ T4581] netlink_unicast+0x80f/0x9b0 [ 975.126575][ T4581] netlink_sendmsg+0x813/0xb40 [ 975.126575][ T4581] ____sys_sendmsg+0xa68/0xad0 [ 975.126575][ T4581] ___sys_sendmsg+0x2a5/0x360 [ 975.126575][ T4581] __x64_sys_sendmsg+0x1bd/0x2a0 [ 975.126575][ T4581] do_syscall_64+0xe2/0xf80 [ 975.126575][ T4581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.126575][ T4581] [ 975.198407][T10370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.207016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.266909][T10914] syzkaller0: entered promiscuous mode [ 975.305576][T10914] syzkaller0: entered allmulticast mode [ 976.947441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 976.955536][ C1] lec:lec_tx_timeout: lec0 [ 977.752427][T10372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.763096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.308175][T10364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.316561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.591517][T31380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.872225][T10366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.881206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog