last executing test programs: 2.804872761s ago: executing program 3 (id=4903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x60040050) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x24}, 0x20) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x54, &(0x7f0000000100)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c2800000000000000ff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0x809c}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4da, @loopback, 0x3}, 0x1c, &(0x7f0000000140)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) 2.683118765s ago: executing program 3 (id=4905): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002780)="d4424d3d", 0x4}, {&(0x7f00000027c0)="37f8ac0b14417caef14000001b00000000c80e12f48075868f450f9cf15bcbd9", 0x20}, {&(0x7f0000002800)="85e8ba0d2450267963b242c628a4a8438c52908abcc4573b9abac6be08f53f50d065f685b5afc92cf60d87a7575e68b4280fc0f9afd48fd1554e0f6f17ce9d77731ee363942918eca0a511ecd5104537de642d0a9c411aa4b223ac68201e1e19ec40990fc27f94f8dc3563881dc817b9d92ad8dcfe33e18f50c0d12f19131097f5d40b95fb37", 0xfed8}, {&(0x7f00000028c0)="e6936293e8b9b2528528e15ee870568252c69076daaef1a075dfdf3300b155229db70ec0f37f61bf2cc8f66084764489137738d4dd753cb7b8c16b", 0x3b}, {&(0x7f0000002900)="c5fa3758fb0c66be50da020b315caa4e6e082d16976e", 0x16}, {&(0x7f0000002940)="91eb9a474148107afda91c03c391ae8fbea34b6b82", 0x15}, {&(0x7f0000002980)="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", 0xfb1}], 0x7, &(0x7f0000003a80)=ANY=[@ANYBLOB="1400000000000000000000000200000005000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aaac1414aa000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac14143eac1414aa000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010101ac1414340000000014000000000000000000000001000000090000000000000030000000000000000000000007000022441ce40000000049000000f70000000700000004fffffffe0000000a0101000028"], 0xe8}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003bc0)="2a115a2dce6970ff6f0bf146ce173ce12f687967a29d02276b9d4e3cdd50a429a0c1f641dec9ed408f9bc4958685f842ea589ddce19c1589b6919b6c4a3ab8669e880527780846452056966b611d2babd4a0b4ae1401cafdcc0f2843ae7934d907906852922382dcef6e4bc0526595756d44d5ba82df5db9de66a66106b5b4aafc9d28601c00fae6", 0x88}, {&(0x7f0000003c80)="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", 0x9f1}], 0x2}}], 0x3, 0x24000801) 2.33059567s ago: executing program 3 (id=4911): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x88890) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.255164041s ago: executing program 3 (id=4913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611970000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2.1240824s ago: executing program 3 (id=4917): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) r5 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x3f6, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf250000000006401a004e22000005000500000000e40400070002000000050012852cd824506accfde61e000700000006000300bf1319e9a212cd280000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4041) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x159}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x84, &(0x7f0000000740)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf60) recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000000d00)=""/174, 0xae}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/2, 0x2}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/184, 0xb8}, {&(0x7f0000000e80)=""/237, 0xed}, {&(0x7f0000002fc0)=""/106, 0x6a}], 0x8, &(0x7f0000003800)=""/4096, 0x1000}, 0x8}], 0x1, 0x43, &(0x7f00000030c0)={0x77359400}) unshare(0x20400) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f00000031c0)='ns/time_for_children\x00') r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x10, 0x0, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0) r10 = accept$ax25(r2, &(0x7f00000006c0)={{0x3, @netrom}, [@remote, @netrom, @null, @null, @netrom, @netrom, @default, @default]}, &(0x7f0000003180)=0x48) ioctl$SIOCAX25CTLCON(r10, 0x89e8, &(0x7f0000003100)={@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, 0xfff, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.638213523s ago: executing program 3 (id=4928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000001200000000000000000000000902000000000051"], &(0x7f00000005c0)=""/228, 0x40, 0xe4, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000300)=0x10) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @remote}, &(0x7f0000000380)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r7, 0x0, 0x8001) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000800000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'U'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.342089373s ago: executing program 4 (id=4932): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) shutdown(r0, 0x2) 1.294358534s ago: executing program 0 (id=4933): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x8}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @random="df4ed351d36a"}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) socket(0x1, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x8}}) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @random="df4ed351d36a"}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) (async) 1.293761835s ago: executing program 1 (id=4934): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$unix(0x1, 0x1, 0x0) 1.101955646s ago: executing program 4 (id=4935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000cf6ff220500040780000000000000000000009000000005000000000000003e27facfd16a8069af3295249909005a21750fdf2111310af4a9fa00"/81], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.064950267s ago: executing program 0 (id=4936): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @func={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x20) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000540)=0x30) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x198, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r6, {0xd, 0x10}, {0xfff8, 0xffe0}, {0xfff2, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x3ef}, @filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_ACT={0xf4, 0x7, [@m_ctinfo={0xf0, 0x1d, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffc}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7f, 0x7, 0x3, 0x1, 0x6a4f}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10001}]}, {0x8a, 0x6, "e9554cb9fe697e5e142c8397f8fc37d1abbcdd5bfb319cca45c47f34ef93758aa94b390423981e55a48724df9085e620689c465346ee911e61ad6f956cc6caafe175c2da0e0e271f91c0540de24e51f25c20c9dfb0afc50e13974ae183857945331656c99a41a18daf3f6569a532f8ab61c08fe60c6689f39f8d7fb18b8dea63ddee6569e5f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x5e6}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x198}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendto$packet(r3, &(0x7f0000000400)="7374ae47abcfb6f35f899cbd373293a1bdccd27b24ca909a1b81dfef73783d11ecfc8c7f994474893a73e047c61a23893277d133eb4e89466efbb958e5a027f4ed640ab56aec56d8477954a8fe9f6f664f2581b2a66fbe822cde7eaaffe973a8dbfe69b31a98029da6d42017ca977f818c2bc721e21ec81a9de232530ae6d7d763c2b90264e034670541bd6ae73f6ec413a8512a4b2de9d9db7df7ea3a2492cecc16302923eddb8f83fee6711f3f2087354309d9bd133c4cdb728ee8037f685aeb0d3a98f0a428351940b5fc49926e16", 0xd0, 0x0, &(0x7f0000000200)={0x11, 0x1, r6, 0x1, 0x2, 0x6, @remote}, 0x14) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd2e, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 978.669878ms ago: executing program 2 (id=4937): setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="acbc7b94f304bfabc4d6f15c31f664a426eae6a03924846124c6fed3ec5e7c5771e977432ece156e13a15b9342e8a0d9f953196b40486bc708b90ab86b391c1cdbca5e3fba8a7eda5356ee2718b0a74d60195efb201323cd", 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 976.105504ms ago: executing program 1 (id=4938): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='wlan1\x00'}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) write$cgroup_int(r1, &(0x7f0000000240)=0x2, 0x12) 880.51332ms ago: executing program 4 (id=4939): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x3}, 0x10) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r1) 781.68915ms ago: executing program 2 (id=4940): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x4}}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000200), 0xd) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 714.315023ms ago: executing program 4 (id=4941): select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getchain={0x44, 0x66, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf, 0xc}, {0x7, 0x9}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000006c0)={'tunl0\x00', r3, 0x20, 0x20, 0x9, 0x3, {{0x20, 0x4, 0x1, 0xc, 0x80, 0x66, 0x0, 0xad, 0x29, 0x0, @loopback, @loopback, {[@noop, @rr={0x7, 0xf, 0x9b, [@local, @private=0xa010100, @rand_addr=0x64010100]}, @noop, @cipso={0x86, 0x27, 0xdb3b4dc81813b9ba, [{0x5, 0x3, "ca"}, {0x5, 0x6, "24faba41"}, {0x6, 0xd, "04d4fae0719089bc4c5db8"}, {0x2, 0x5, "b68123"}, {0x0, 0x6, "47ffb80d"}]}, @noop, @cipso={0x86, 0x17, 0x3, [{0x5, 0x4, 't-'}, {0x1, 0xd, "2e1aae369280da6e25dc16"}]}, @rr={0x7, 0x17, 0xa, [@remote, @remote, @loopback, @multicast1, @broadcast]}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x164, r8, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x80000}, 0x4000004) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@delqdisc={0x240, 0x25, 0x40c, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0x1e}, {0xffe0, 0x7}}, [@TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x40, 0x4, 0x7fffffff, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x1ef]}}, {{0x1c, 0x1, {0x8, 0xb, 0x5, 0xd3, 0x1, 0x8, 0x5, 0x1}}, {0x6, 0x2, [0x1e]}}, {{0x1c, 0x1, {0x5, 0x2, 0x6, 0x2, 0x2, 0x2, 0x80000001, 0x1}}, {0x6, 0x2, [0x37]}}, {{0x1c, 0x1, {0x4, 0xb5, 0x87b8, 0x3, 0x1, 0x9, 0x40, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x0, 0x4, 0x4, 0x3, 0x1, 0xb10, 0x8, 0x1}}, {0x6, 0x2, [0x610]}}, {{0x1c, 0x1, {0x7, 0x0, 0x5, 0x1, 0x2, 0x80000000, 0xc, 0x4}}, {0xc, 0x2, [0x2, 0xcc, 0x0, 0x4d]}}, {{0x1c, 0x1, {0xc, 0x4, 0x7, 0x50698b2f, 0x2, 0x434, 0x6, 0x9}}, {0x16, 0x2, [0x3, 0x8, 0x1ff, 0x10, 0xb3, 0x8, 0x4, 0x81, 0xe]}}, {{0x1c, 0x1, {0x5, 0x81, 0x8722, 0x9, 0x2, 0x8, 0x2, 0x5}}, {0xe, 0x2, [0x66, 0x1ff, 0x2, 0x0, 0x8]}}, {{0x1c, 0x1, {0x8, 0x0, 0x4d7a, 0x0, 0x0, 0x7, 0x0, 0x3}}, {0xa, 0x2, [0xffff, 0xa, 0x7]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfff}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xaa91}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x9, 0x9, 0x1, 0x3, 0xf, 0x10, 0x3, 0xf, 0x0, 0x4, 0xa, 0xf, 0x8, 0xe, 0x3, 0x8], 0x0, [0x400, 0x8, 0x3, 0x6, 0x1, 0xd30, 0x5, 0xa, 0x7, 0x800, 0xff, 0xff, 0xbb7, 0x7f, 0xea30], [0x1, 0x0, 0xfff, 0xff4, 0x8, 0x0, 0x1, 0x6, 0x1, 0x0, 0x2, 0x4, 0xfff7, 0x8, 0x273d, 0x9]}}]}}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x6, "86bb839c5a0ad85814e083dae89e77b9"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x33c36010}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6ab}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xef0}]}, 0x240}, 0x1, 0x0, 0x0, 0x8010}, 0x4) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d235f45", 0x5}], 0x1}}], 0x1, 0x40060) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 714.005201ms ago: executing program 1 (id=4942): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x7f}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), 0x0}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000500402008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000108000340000000f5080002400000000c0900010073797a3000000000140000001100010000000000000000000000000a"], 0xd4}}, 0x0) 694.26518ms ago: executing program 0 (id=4943): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18, 0x4000000}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="0ccbe85389cd09cfa891327d46f64041f8f7dc4e30c1da67abe932f29a096952b6682c4f05d5846b045c", 0x2a}, {&(0x7f0000000180)="ee6061fae794b9284c93b11e2a04b43be5e63f1e77f5ebbe6b6cd33e09ac3eec34af1a7e4fb9", 0x26}, {&(0x7f0000000200)="818da0a3d4adc1a749d9ec12a0e069998c25102f15d3dfece6b63b44bad8d7e0a6154dc3f9c769c07f846e4081b6495ec95dcf600ab3ecc00997ef27ace7cead28f22eddeb44e0f6151782d7f0897ed04e3dd57e029213194f97ceffaeace1475f429be79495fcbfbe32f03bb1f612beb9107695099f859d43c2206b64ffea6d08d24798dc0d10ae37e81a60eb3c9dc48aa39e5aeb0b049099e1b8a441d6280a401b07ee56", 0xa5}, {&(0x7f00000002c0)="f533a8fee1bfd37b9dd5f7933c3333e5021cb657ed3161d8de8246d4a159a7aba7dc45ef6894272984965587d91265a46f85fb920f77e559908bb3b6bedb83c3735c366b3c665d48f622f222e072c798aa1ab50a5d38ea3ee131fb8f759284c2a789be0ecea2a35a7e4d1b0bf9ea3dcb2e655f90b378d59c595a57c421108e9fd6438486802f19408283b60c2a00f92c22f86a1357ed35b078f4d1ac13074cbc125db9b1eaea1e9f68cce5794a22ca21e129ac4e755bdc055983a8538fce8eda252a2b9d8bc67dc6bcc327ec3c88955831ab9752dec205947ea2796507", 0xdd}, {&(0x7f0000000540)="ac51572edacf89b3831bb3ba81698ae8f1f1852d88c9bec09fefd00f2439f447b0189ba32409ea5a9dcf05db58e33fd7af21b3f6ea29203e7ecc1458d9379bb3ec044e8313cf9771a019c6a9dfeee6a68cbc31affb1e3a9bd314646799361dd01a2f0a12c9d1a0504435952614e2ca978ed6cf625103542cfb238985352ff208c2b6e69d5ee605f30d8ac22d0dbc88c5049f809b5dff637ec22a374efd94f4a71ee4cd8ce0b94d59085eb6182648feef01d12a1840a87cacf2a0aebac166e5df6b407060ff1659a284b6fe7eea003bfbd691ac", 0xd3}, {&(0x7f0000000400)="909f2c086fba270bca13facd3b4d2edff5682a69b3bd266ebb7490616ee67662a624db0a8621b3a64914dca0ec18092821cef24e038319f384aa6a9b780415a87db2a5b2f89efe61609f0073c976b6069a0cfe746dd3a1375243de7e1749", 0x5e}], 0x6, &(0x7f00000006c0)=[@iv={0x50, 0x117, 0x2, 0x38, "b6997054a3fd0a9f5c64ecfce8da4ef4621df75ed4de750c6fb382fe3ca044e8b1a2b6ef9c1d8ea61c1deb99e3c43e726e4f739ec6b6b1d2"}], 0x50}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'wg0\x00', {0x2, 0x4e22, @multicast1}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r5, &(0x7f00000000c0)={0x27, r4, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r3) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 531.574152ms ago: executing program 0 (id=4944): r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) sendmsg$NL80211_CMD_TESTMODE(r0, 0x0, 0x4010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x78, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x2, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0xfff, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x37, 0x8, 'vlan0\x00'}]}}]}, 0x78}}, 0x24040084) 477.197313ms ago: executing program 1 (id=4945): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff}, 0x20) (async) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x8, 0x2, 0x2, 0x5, 0xab14, 0x3}, &(0x7f00000001c0)=0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async) syz_emit_ethernet(0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaacaaaa40bbbbbbbbbbbb08060335655906100003aaaaaaaaaaaa392cd50daec63c7ce79b81a423baf6dbbbbbbbbbbbbb7522f44593c68387db3439a8d202"], &(0x7f0000000080)={0x1, 0x3, [0x91d, 0xfc4, 0x6f3, 0x3f7]}) 474.031987ms ago: executing program 2 (id=4946): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x8005) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01010000000000000000020000000900020073797a32000010000900010073797a30000000001c00038018000380140001006d6163766c616e3000000000000000001400000011002e81d5ae85460702ae010000000000000010000100000a"], 0x70}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0xde8a, 0x5f, &(0x7f0000000340)=""/95, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x2, 0x3, 0x8001, 0x6}, {0x2, 0x1, 0x8, 0x7}, {0x1, 0x1, 0x1, 0xa}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x0, 0xc4, 0x8a, &(0x7f0000000600)="b9cae1ea029d0a321fb6330bec052ee85fb82477667051c6528e26b198bc4dbd60a637e866a4abc69bad095bb93d5930c860d25412908a6f1d3b250dd94931b8580bb5cd30cc57275e0642eb9389d6f62ea0f7bdea4eb7a0e100bc67162f3e8bf5c620f101ca2ed4987e27f1ccb71af2808dd24f0461894f0b8d533f777c39e97ce99f103fb15832323be7099b3948af94a0140a26d533c2396c52fe70b4d10a412f0e49f8f304040436228a687a55c98942f5455103e0f06b8b0e77294414ad522ba50b", &(0x7f0000000700)=""/138, 0xff, 0x0, 0xf4, 0x59, &(0x7f00000007c0)="337c605b4fb3c80416d0f888eb365d0132a7015e12ac79c6cb52e4d428f2d435560764c17b308f314110056bc4a441c357224c2df446cffe2b1f1a74ce0b0d6bdd990fc1380c7bf4c7dfdfd1c0ec4c844023a3f7dce55394e399d407ef770ea6f5df8f2d7d602e0b32672aed9052ed2b6f710efcd3c5753d50b8bd24552243097a878d8a7bb5135e2a0c265b3d41adb590342dcd354584482ae40c0ea449e9ad169a14e1a93af205ca3c40b1c6ad3464454ec321996915a5ff6063724762c86ae19258b9c485fb2862dd2ce0a2cd8fe6c7fdffb48b4326f476bbefc3ce5ea8ec632009bf3de7dfd9db08d54c5ae37d322c063690", &(0x7f00000008c0)="82685d81a8d7043ca5de7254a68b2aa3a6a6c40097b3024f50eeb7fecff3d811e145ce864218533543bf07334fd275610c69aa654e2970c24ec02fe926b2e345c509ecbdb89c108a25a8caae5f8248bd2e6f21bba49af4a746", 0x1, 0x0, 0x81}, 0x50) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000040a030000000000000000000000000108000b4000000000340008800c00014000000000000000000c00024000000000000000000c00014000000000000000000c00024000000000000000000b00070066696c7465720007090001007379093100000000"], 0x68}}, 0x0) 373.572482ms ago: executing program 2 (id=4947): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000003400)="d3", 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 300.595335ms ago: executing program 0 (id=4948): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r1, &(0x7f0000000000)="836bb66f", 0x18, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x48) recvmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x56}, {&(0x7f0000001080)=""/215, 0xd7}], 0x2}}], 0x1, 0x200, 0x0) 250.572585ms ago: executing program 1 (id=4949): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) 241.583828ms ago: executing program 2 (id=4950): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x22c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x218, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x100, 0x0, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xe38cfdd8, 0x0, 0xbcae, 0x6}, 0x1}}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x22c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40800) 205.731153ms ago: executing program 4 (id=4951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0xcc, 0x30, 0x1, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0xb4, 0xc, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5469}]}, {0x69, 0x6, "ef237cc01a3dfa8827c3f8b072bd7c693909d800e328fdf555d72809d7f08a852c35e64186a9549fc09d886ac0114f29c9b524be401b4121b409c441b6344c0b9b1e8c1162d8e8f6f9b803f2d536605918e39abb9d1a673ce8847ac05471d8b9c03a052a57"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xcc}}, 0x0) 81.894923ms ago: executing program 4 (id=4952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 81.150245ms ago: executing program 0 (id=4953): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x4, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4901}, 0x4000040) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0xc3, 0x0, 0x0) 25.770909ms ago: executing program 1 (id=4954): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "f0163901e5a571a8", "130000640824d11b76dd43ad02114549df2db820baf2e486f272602000", "2fea0699", "b8e92e0a413d0620"}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e7c2ec636a335005", "2e732ee592d33aab83718ecbc4ae58b86cf5369fa1636b653b6e979843c0f205", "248d63d2", "da0d6d607e244a81"}, 0x38) recvfrom(r2, 0x0, 0x0, 0xc0012041, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 0s ago: executing program 2 (id=4955): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x0, 0x8010, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [T16637] bridge_slave_0: entered promiscuous mode [ 375.638204][T16637] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.648367][T16637] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.656280][T16637] bridge_slave_1: entered allmulticast mode [ 375.665115][T16637] bridge_slave_1: entered promiscuous mode [ 375.734005][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3007'. [ 375.743308][T16712] netlink: 'syz.4.3008': attribute type 1 has an invalid length. [ 375.776097][T16637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.813197][T16712] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 375.922825][T16720] xt_TCPMSS: Only works on TCP SYN packets [ 375.941934][ T6733] bond_slave_0: left promiscuous mode [ 375.949821][ T6733] @0Ù: left promiscuous mode [ 376.025853][T16724] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 376.349187][ T6733] erspan0 (unregistering): left promiscuous mode [ 376.421318][ T6733] gretap0 (unregistering): left promiscuous mode [ 376.501144][ T6733] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 376.559552][ T6733] dvmrp0 (unregistering): left allmulticast mode [ 376.588563][ T6733] dvmrp6 (unregistering): left allmulticast mode [ 376.717764][ T6733] team0: Port device bridge2 removed [ 377.045779][ T5845] Bluetooth: hci4: command tx timeout [ 377.178059][ T6733] bond5 (unregistering): (slave macvlan0): Releasing active interface [ 377.192855][ T6754] smc: removing ib device syz0 [ 377.200320][ T6733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.211657][ T6733] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 377.221476][ T6733] bond0 (unregistering): Released all slaves [ 377.233202][ T6733] bond1 (unregistering): Released all slaves [ 377.247357][ T6733] bond2 (unregistering): Released all slaves [ 377.341215][ T6733] bond3 (unregistering): (slave bond4): Releasing backup interface [ 377.350018][ T6733] bond3 (unregistering): Released all slaves [ 377.442250][ T6733] bond4 (unregistering): Released all slaves [ 377.534412][ T6733] bond5 (unregistering): Released all slaves [ 377.549429][T16637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.586861][T16637] team0: Port device team_slave_0 added [ 377.689191][T16637] team0: Port device team_slave_1 added [ 377.733017][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3013'. [ 377.905860][T16637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.912951][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.014011][T16637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.048354][T16754] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3013'. [ 378.059189][T16637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.066617][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.095764][T16637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.377169][T16637] hsr_slave_0: entered promiscuous mode [ 378.391611][T16637] hsr_slave_1: entered promiscuous mode [ 378.404451][T16637] debugfs: 'hsr0' already exists in 'hsr' [ 378.411268][T16637] Cannot create hsr debugfs directory [ 378.649160][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660753][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 378.728654][T16712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.990397][T16775] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 379.051275][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 379.135541][ T5845] Bluetooth: hci4: command tx timeout [ 379.566406][ T6733] tipc: Disabling bearer [ 379.572092][T16798] x_tables: duplicate underflow at hook 1 [ 379.588180][T16797] x_tables: duplicate underflow at hook 1 [ 379.624959][ T6733] tipc: Left network mode [ 379.778696][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.897692][T16805] syzkaller0: entered promiscuous mode [ 379.903454][T16805] syzkaller0: entered allmulticast mode [ 380.258742][T16843] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 380.331880][T16846] netlink: 'syz.0.3034': attribute type 17 has an invalid length. [ 380.366435][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'. [ 380.392305][T16846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3034'. [ 381.214829][ T5845] Bluetooth: hci4: command tx timeout [ 381.774913][T16851] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3036'. [ 381.884932][T16856] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3037'. [ 381.945524][T16865] netlink: 'syz.3.3039': attribute type 1 has an invalid length. [ 382.280061][T16637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.338823][T16880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3043'. [ 382.354876][T16872] wg1 speed is unknown, defaulting to 1000 [ 382.462265][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.497167][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.539405][ T6733] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 382.557009][ T6733] batman_adv: batadv0: Removing interface: ipvlan3 [ 382.620127][ T6733] veth1_macvtap: left promiscuous mode [ 382.943282][ T6733] pim6reg527 (unregistering): left allmulticast mode [ 383.456352][ T6733] team0 (unregistering): Port device team_slave_1 removed [ 383.589424][ T6733] team0 (unregistering): Port device team_slave_0 removed [ 383.933542][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 383.941670][ C0] lec:lec_tx_timeout: lec0 [ 384.102568][T16637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.154340][T16637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.206359][T16637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 384.427614][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 384.614171][T16973] ipt_REJECT: TCP_RESET invalid for non-tcp [ 384.626519][T16971] syzkaller1: entered promiscuous mode [ 384.632925][T16971] syzkaller1: entered allmulticast mode [ 384.814391][T16981] bond0: (slave gre0): Error: Device type is different from other slaves [ 384.850778][T16981] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 384.925514][T16637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.977887][T16637] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.008075][T16986] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3059'. [ 385.010253][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.024297][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.088532][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.095737][ T6738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.122073][T16998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3062'. [ 385.135210][T16996] netlink: 'syz.0.3061': attribute type 21 has an invalid length. [ 385.182602][T16986] bond8: (slave erspan0): Device is not bonding slave [ 385.194657][T17000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3062'. [ 385.209746][T16986] bond8: option active_slave: invalid value (erspan0) [ 385.222074][T16986] bond8 (unregistering): Released all slaves [ 385.263673][T17011] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3063'. [ 385.282395][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 385.306581][T17004] delete_channel: no stack [ 385.615692][T17019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3065'. [ 385.668617][T17019] block nbd4: not configured, cannot reconfigure [ 385.709369][T17023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.726145][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3068'. [ 385.860908][T17030] bond8: entered promiscuous mode [ 385.867171][T17030] bond8: entered allmulticast mode [ 385.872765][T17030] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.414230][T16637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.557532][T16637] veth0_vlan: entered promiscuous mode [ 386.602489][T16637] veth1_vlan: entered promiscuous mode [ 386.728571][T16637] veth0_macvtap: entered promiscuous mode [ 386.756355][T16637] veth1_macvtap: entered promiscuous mode [ 386.784355][T16637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.839906][T16637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.878132][ T6754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.909860][ T6754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.942816][ T6754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.979718][ T6754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.176537][T17111] openvswitch: netlink: IP tunnel dst address not specified [ 387.207348][T17111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3083'. [ 387.216797][ T6747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.216826][ T6747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.305502][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3084'. [ 387.341313][ T6747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.359651][ T6747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.542465][T17129] .: renamed from bridge_slave_1 [ 388.074811][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.094641][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.104318][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.117733][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.125465][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.217138][T17146] veth15: entered allmulticast mode [ 388.346072][T17149] wg1 speed is unknown, defaulting to 1000 [ 388.478367][T17168] bond1: entered promiscuous mode [ 388.484074][T17168] bond1: entered allmulticast mode [ 388.489723][T17168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.540422][T17168] macvlan2: entered promiscuous mode [ 388.548844][T17168] macvlan2: entered allmulticast mode [ 388.560107][T17168] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.665077][T17175] syz_tun (unregistering): left allmulticast mode [ 388.671562][T17175] syz_tun (unregistering): left promiscuous mode [ 388.680052][T17175] bridge0: port 3(syz_tun) entered disabled state [ 388.734383][T17179] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.845894][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.864533][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.876991][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.039786][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.056166][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.067662][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.190612][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.236803][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.262941][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.537016][T17221] __nla_validate_parse: 8 callbacks suppressed [ 389.537036][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 389.554188][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 389.584334][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.603748][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.616601][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.655374][T17220] bridge_slave_1: left allmulticast mode [ 389.661291][T17220] bridge_slave_1: left promiscuous mode [ 389.681730][T17220] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.700697][T17220] bridge_slave_0: left allmulticast mode [ 389.764057][T17220] bridge_slave_0: left promiscuous mode [ 389.770831][T17220] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.887037][ T5887] wg1 speed is unknown, defaulting to 1000 [ 389.895928][ T5887] syz2: Port: 1 Link DOWN [ 389.959036][T17149] chnl_net:caif_netlink_parms(): no params data found [ 390.170688][ T5845] Bluetooth: hci1: command tx timeout [ 390.301190][T17254] netlink: 'syz.0.3121': attribute type 1 has an invalid length. [ 390.352684][T17149] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.362880][T17149] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.370804][T17149] bridge_slave_0: entered allmulticast mode [ 390.377175][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 390.382443][T17149] bridge_slave_0: entered promiscuous mode [ 390.396772][T17149] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.407459][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.416109][T17149] bridge_slave_1: entered allmulticast mode [ 390.427793][T17149] bridge_slave_1: entered promiscuous mode [ 390.476155][T17253] syzkaller0: entered promiscuous mode [ 390.481696][T17253] syzkaller0: entered allmulticast mode [ 390.507281][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 390.573163][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 390.590423][T17149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.680808][T17260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.762616][T17277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.787803][T17149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.903937][T17274] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.941550][T17286] sock: sock_set_timeout: `syz.2.3126' (pid 17286) tries to set negative timeout [ 391.059120][ T13] tipc: Resetting bearer [ 391.237657][T17299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3128'. [ 391.685087][T17318] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3131'. [ 391.700940][ T13] bond6 (unregistering): (slave gretap3): Releasing active interface [ 391.722806][ T13] tipc: Disabling bearer [ 391.866737][ T13] bond1 (unregistering): (slave bridge2): Releasing active interface [ 391.875262][ T13] bridge2 (unregistering): left promiscuous mode [ 391.881766][ T13] bridge2 (unregistering): left allmulticast mode [ 392.244033][ T5845] Bluetooth: hci1: command tx timeout [ 392.469800][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.480206][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.492070][ T13] bond0 (unregistering): Released all slaves [ 392.605540][ T13] bond1 (unregistering): Released all slaves [ 392.619891][ T13] bond2 (unregistering): (slave veth3): Releasing active interface [ 392.629747][ T13] bond2 (unregistering): Released all slaves [ 392.741187][ T13] bond3 (unregistering): Released all slaves [ 392.755006][ T13] bond4 (unregistering): Released all slaves [ 392.769046][ T13] bond5 (unregistering): Released all slaves [ 392.785414][ T13] bond6 (unregistering): Released all slaves [ 392.803339][T17149] team0: Port device team_slave_0 added [ 392.837983][T17149] team0: Port device team_slave_1 added [ 393.086863][ T13] : left promiscuous mode [ 393.142684][T17336] netlink: 'syz.0.3137': attribute type 1 has an invalid length. [ 393.172855][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 393.184127][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 393.196562][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 393.209552][T17149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.226618][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.283051][T17149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.330465][T17336] bond8: entered promiscuous mode [ 393.336582][T17336] 8021q: adding VLAN 0 to HW filter on device bond8 [ 393.362907][ T13] tipc: Left network mode [ 393.381047][T17149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.390894][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.419359][T17149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.487334][T17341] syzkaller1: entered promiscuous mode [ 393.492873][T17341] syzkaller1: entered allmulticast mode [ 393.502095][T17349] tipc: Invalid UDP bearer configuration [ 393.502137][T17349] tipc: Enabling of bearer rejected, failed to enable media [ 393.732538][T17149] hsr_slave_0: entered promiscuous mode [ 393.745655][T17149] hsr_slave_1: entered promiscuous mode [ 393.752085][T17149] debugfs: 'hsr0' already exists in 'hsr' [ 393.758341][T17149] Cannot create hsr debugfs directory [ 394.291521][T17385] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 394.299728][T17385] netlink: 'syz.2.3152': attribute type 2 has an invalid length. [ 394.323587][ T5845] Bluetooth: hci1: command tx timeout [ 395.109319][ T13] hsr_slave_0: left promiscuous mode [ 395.135846][ T13] hsr_slave_1: left promiscuous mode [ 395.179362][ T13] veth0_macvtap: left promiscuous mode [ 395.185966][ T13] veth1_vlan: left promiscuous mode [ 395.191436][ T13] veth0_vlan: left promiscuous mode [ 395.799393][ T13] team0 (unregistering): Port device team_slave_1 removed [ 395.839850][ T13] team0 (unregistering): Port device team_slave_0 removed [ 396.285282][T17433] macvlan4: entered promiscuous mode [ 396.290719][T17433] macvlan4: entered allmulticast mode [ 396.298135][T17433] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 396.407468][ T5845] Bluetooth: hci1: command tx timeout [ 396.466502][T17437] __nla_validate_parse: 4 callbacks suppressed [ 396.466521][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'. [ 396.492473][T17437] bond3: option mode: unable to set because the bond device has slaves [ 396.529840][T17437] bond3: (slave veth15): Enslaving as a backup interface with a down link [ 396.677001][ T13] IPVS: stop unused estimator thread 0... [ 397.201367][T17385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.216846][T17426] netlink: 'syz.1.3159': attribute type 1 has an invalid length. [ 397.246113][T17426] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3159'. [ 397.265137][T17426] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3159'. [ 397.296489][T17426] netlink: 'syz.1.3159': attribute type 1 has an invalid length. [ 397.307396][T17426] netlink: 'syz.1.3159': attribute type 8 has an invalid length. [ 397.315314][T17426] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3159'. [ 397.329932][T17149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.397740][T17446] netlink: 'syz.1.3166': attribute type 1 has an invalid length. [ 397.421345][T17149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.442554][T17149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.489428][T17149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.593942][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3166'. [ 397.649322][T17446] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 397.965926][T17149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.053249][T17149] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.088762][T17496] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3174'. [ 398.105905][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.113055][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.165144][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.172346][ T6732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.566925][T17522] IPVS: set_ctl: invalid protocol: 51 172.20.20.137:20004 [ 398.634640][T17527] netlink: 'syz.0.3177': attribute type 1 has an invalid length. [ 398.661016][T17528] netlink: 'syz.1.3180': attribute type 1 has an invalid length. [ 398.714477][T17528] vlan2: entered promiscuous mode [ 398.728142][T17528] vlan1: entered promiscuous mode [ 398.752144][T17528] vlan2: entered allmulticast mode [ 398.768328][T17528] vlan1: entered allmulticast mode [ 398.786130][T17528] veth0_vlan: entered allmulticast mode [ 398.892137][ T8260] lec:lec_start_xmit: lec0:No lecd attached [ 399.474952][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 399.503312][T17545] netlink: 'syz.1.3184': attribute type 3 has an invalid length. [ 399.521308][T17149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.566602][T17549] tipc: Enabling of bearer rejected, already enabled [ 399.638670][T17553] netlink: 'syz.3.3185': attribute type 9 has an invalid length. [ 399.670783][T17553] netlink: 'syz.3.3185': attribute type 11 has an invalid length. [ 399.696577][T17560] netlink: 'syz.0.3186': attribute type 61 has an invalid length. [ 399.715102][T17553] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3185'. [ 399.734187][T17560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3186'. [ 399.755059][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3185'. [ 400.385575][T17609] No such timeout policy "syz0" [ 400.416221][T17149] veth0_vlan: entered promiscuous mode [ 400.479161][T17149] veth1_vlan: entered promiscuous mode [ 400.633281][T17149] veth0_macvtap: entered promiscuous mode [ 400.706992][T17149] veth1_macvtap: entered promiscuous mode [ 400.730989][T17623] syzkaller1: entered promiscuous mode [ 400.759859][T17623] syzkaller1: entered allmulticast mode [ 400.830911][T17149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.974176][T17149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.046188][ T6736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.070806][ T6736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.092919][ T6736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.167271][ T6736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.185189][T17639] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 401.336038][T17609] bond1: entered promiscuous mode [ 401.400513][T17609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.488157][T17650] __nla_validate_parse: 4 callbacks suppressed [ 401.488175][T17650] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3207'. [ 401.553801][ T6733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.561685][ T6733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.716495][T17674] sock: sock_timestamping_bind_phc: sock not bind to device [ 401.725290][ T6738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.748303][ T6738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.316744][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3219'. [ 402.407060][T17715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3222'. [ 402.424349][T17712] veth1_macvtap: left promiscuous mode [ 402.447849][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.464172][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.472500][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.480947][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.491450][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.069780][T17751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3229'. [ 403.184010][T17751] validate_nla: 6 callbacks suppressed [ 403.184032][T17751] netlink: 'syz.4.3229': attribute type 7 has an invalid length. [ 403.245964][T17757] bond1: Unable to set up delay as MII monitoring is disabled [ 403.288684][T17757] bond1 (unregistering): Released all slaves [ 403.307609][T17751] netlink: 'syz.4.3229': attribute type 8 has an invalid length. [ 403.387569][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3229'. [ 403.541677][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3234'. [ 403.555605][T17710] chnl_net:caif_netlink_parms(): no params data found [ 403.600499][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'. [ 403.644491][T17781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3236'. [ 403.654964][T17781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3236'. [ 403.706844][T17781] gretap1: entered promiscuous mode [ 403.712211][T17781] gretap1: entered allmulticast mode [ 403.731841][T17781] syzkaller0: entered promiscuous mode [ 403.751091][T17781] syzkaller0: entered allmulticast mode [ 403.807022][T17793] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3239'. [ 403.933851][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 403.941911][ C0] lec:lec_tx_timeout: lec0 [ 404.017592][T17710] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.045866][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.053178][T17710] bridge_slave_0: entered allmulticast mode [ 404.061059][T17710] bridge_slave_0: entered promiscuous mode [ 404.073206][T17710] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.081173][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.090674][T17710] bridge_slave_1: entered allmulticast mode [ 404.100447][T17710] bridge_slave_1: entered promiscuous mode [ 404.182981][T17710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.241872][T17710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.373990][T17824] block nbd1: Unsupported socket: should be TCP or UNIX. [ 404.391228][T17710] team0: Port device team_slave_0 added [ 404.444128][T17710] team0: Port device team_slave_1 added [ 404.557233][T17710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.565850][ T5838] Bluetooth: hci3: command tx timeout [ 404.574669][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.646593][T17710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.667957][T17710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.700017][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.742935][T17710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.010196][T17710] hsr_slave_0: entered promiscuous mode [ 405.035784][T17710] hsr_slave_1: entered promiscuous mode [ 405.607531][T17710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.633713][T17710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.940559][T17710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.964134][T17710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.218540][T17710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.241456][T17710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.409769][T17710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.424652][T17710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.601781][T17928] __nla_validate_parse: 16 callbacks suppressed [ 406.601799][T17928] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3268'. [ 406.646243][ T5838] Bluetooth: hci3: command tx timeout [ 406.762695][T17710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.799813][T17941] netlink: 'syz.4.3270': attribute type 3 has an invalid length. [ 406.847110][T17710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.926449][T17710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.007311][T17953] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 407.025597][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3271'. [ 407.049702][T17710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.079015][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 407.143028][T17962] vlan0: entered allmulticast mode [ 407.164237][T17962] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 407.282182][T17970] Unsupported ieee802154 address type: 0 [ 407.390390][T17976] netlink: 'syz.1.3276': attribute type 83 has an invalid length. [ 407.479283][T17988] xt_hashlimit: overflow, try lower: 3/0 [ 407.682600][T18000] sctp: [Deprecated]: syz.4.3281 (pid 18000) Use of int in maxseg socket option. [ 407.682600][T18000] Use struct sctp_assoc_value instead [ 407.700906][T17710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.729209][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 407.752699][T18004] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20000 [ 407.769215][T17710] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.795792][T18006] netlink: 'syz.2.3282': attribute type 6 has an invalid length. [ 407.815445][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.822636][ T6732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.854566][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.861775][ T6732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.996311][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3283'. [ 408.531683][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 408.544706][T18046] netlink: 'syz.3.3288': attribute type 1 has an invalid length. [ 408.707210][T18053] bond9: (slave gretap1): making interface the new active one [ 408.725380][ T5838] Bluetooth: hci3: command tx timeout [ 408.748944][T18053] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 408.782737][T18064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3292'. [ 408.844349][T17710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.844792][T18067] netlink: 'syz.4.3290': attribute type 7 has an invalid length. [ 409.021042][T17710] veth0_vlan: entered promiscuous mode [ 409.048131][T18076] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.081190][T17710] veth1_vlan: entered promiscuous mode [ 409.218885][T17710] veth0_macvtap: entered promiscuous mode [ 409.266110][T17710] veth1_macvtap: entered promiscuous mode [ 409.415144][T17710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.458015][T17710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.510450][ T6732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.559121][ T6732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.576725][ T6732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.604797][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.634951][T18101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3299'. [ 409.673838][T18101] nbd: must specify at least one socket [ 409.697033][T18101] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20001 [ 409.757632][T18109] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 409.766168][T18109] syzkaller1: linktype set to 823 [ 409.784817][T18101] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3299'. [ 409.798058][T18106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3300'. [ 409.836403][T18101] netlink: 'syz.4.3299': attribute type 1 has an invalid length. [ 409.848830][T18101] netlink: 'syz.4.3299': attribute type 1 has an invalid length. [ 409.858817][ T6732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.860418][T18101] netlink: 'syz.4.3299': attribute type 8 has an invalid length. [ 409.907606][ T6732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.002409][T18116] netlink: 'syz.1.3304': attribute type 4 has an invalid length. [ 410.014833][T18116] xt_ecn: cannot match TCP bits for non-tcp packets [ 410.027974][ T6733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.050153][ T6733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.138705][T18121] syzkaller0: entered promiscuous mode [ 410.164141][T18121] syzkaller0: entered allmulticast mode [ 410.231402][T18121] bridge10: entered promiscuous mode [ 410.249156][T18121] bridge10: entered allmulticast mode [ 410.317866][T18139] netlink: 'syz.4.3310': attribute type 21 has an invalid length. [ 410.407344][T18139] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 410.437837][T18139] bond1 (unregistering): Released all slaves [ 410.559880][T18148] netlink: 'syz.2.3312': attribute type 11 has an invalid length. [ 410.635658][T18148] nbd: must specify a size in bytes for the device [ 410.797192][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 410.809298][ T5845] Bluetooth: hci3: command tx timeout [ 410.820027][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 410.828706][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 410.861418][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 410.871777][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.225460][T18170] xt_TCPMSS: Only works on TCP SYN packets [ 411.510154][T18154] chnl_net:caif_netlink_parms(): no params data found [ 411.847044][T18154] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.873789][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.881104][T18154] bridge_slave_0: entered allmulticast mode [ 411.905761][T18154] bridge_slave_0: entered promiscuous mode [ 411.930895][T18154] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.951514][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.964276][T18154] bridge_slave_1: entered allmulticast mode [ 411.981081][T18154] bridge_slave_1: entered promiscuous mode [ 412.072974][T18154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.143965][T18213] sctp: [Deprecated]: syz.2.3328 (pid 18213) Use of int in maxseg socket option. [ 412.143965][T18213] Use struct sctp_assoc_value instead [ 412.316400][T18154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.452187][T18226] can: request_module (can-proto-0) failed. [ 412.529878][T18154] team0: Port device team_slave_0 added [ 412.556799][T18154] team0: Port device team_slave_1 added [ 412.649145][T18154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.678602][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.730382][T18154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.745083][T18154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.752172][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.781282][T18154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.942756][T18154] hsr_slave_0: entered promiscuous mode [ 412.956069][T18154] hsr_slave_1: entered promiscuous mode [ 412.962530][T18154] debugfs: 'hsr0' already exists in 'hsr' [ 412.972898][ T5830] Bluetooth: hci2: command tx timeout [ 412.981494][T18154] Cannot create hsr debugfs directory [ 412.990598][T18263] __nla_validate_parse: 11 callbacks suppressed [ 412.990615][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 413.109769][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3349'. [ 413.161644][T18279] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3351'. [ 413.236478][T18285] netlink: 'syz.2.3351': attribute type 1 has an invalid length. [ 413.246014][T18285] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3351'. [ 413.344365][T18288] netlink: 'syz.1.3352': attribute type 1 has an invalid length. [ 413.539577][T18154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.553401][T18154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.580575][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3356'. [ 413.646757][T18154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.657935][T18154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.740602][T18154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.752382][T18154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.770612][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.779262][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.789944][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.812589][T18154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.825138][T18154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.014120][T18314] infiniband syz2: set down [ 414.022120][T18314] infiniband syz2: added ip6_vti0 [ 414.027889][ T5980] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.060564][T18314] RDS/IB: syz2: added [ 414.064812][T18314] smc: adding ib device syz2 with port count 1 [ 414.071376][T18314] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 414.079500][ T5942] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.087581][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.247282][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.400525][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.570562][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.718258][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.867327][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.017315][T18314] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.043712][ T5830] Bluetooth: hci2: command tx timeout [ 416.318561][T18288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.350749][T18154] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.475521][T18154] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.521569][T18333] sctp: [Deprecated]: syz.2.3362 (pid 18333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.521569][T18333] Use struct sctp_sack_info instead [ 416.540237][T18154] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.559951][T18329] syzkaller1: entered promiscuous mode [ 416.573994][T18329] syzkaller1: entered allmulticast mode [ 416.588977][T18154] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.985794][T18362] netlink: 'syz.0.3371': attribute type 116 has an invalid length. [ 417.009167][T18154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.023215][T18360] netlink: 'syz.2.3369': attribute type 10 has an invalid length. [ 417.039826][T18352] netlink: 'syz.4.3366': attribute type 13 has an invalid length. [ 417.070507][T18154] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.126167][ T5830] Bluetooth: hci2: command tx timeout [ 417.189992][T18368] ipvlan2: entered allmulticast mode [ 417.200869][T18368] batadv_slave_1: entered allmulticast mode [ 417.212264][T18368] batman_adv: batadv0: Adding interface: ipvlan2 [ 417.220690][T18368] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.269968][T18368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.306534][T18368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.334692][T18368] batman_adv: batadv0: Interface activated: ipvlan2 [ 417.360201][T18383] netlink: 'syz.4.3375': attribute type 1 has an invalid length. [ 417.395457][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.402643][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.417458][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.424751][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.459083][T18383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.485915][T18380] bond1: (slave geneve2): making interface the new active one [ 417.495409][T18380] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 417.640169][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 418.040844][T18154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.198034][T18154] veth0_vlan: entered promiscuous mode [ 418.205348][T18423] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 418.227386][T18423] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3386'. [ 418.247032][T18154] veth1_vlan: entered promiscuous mode [ 418.312144][T18154] veth0_macvtap: entered promiscuous mode [ 418.339679][T18154] veth1_macvtap: entered promiscuous mode [ 418.347721][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'. [ 418.401016][T18154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.446869][T18154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.538965][ T6738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.549444][ T6738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.574109][ T6738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.582909][ T6738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.625567][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'. [ 418.715394][ T6736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.745279][ T6736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.781101][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'. [ 418.795648][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.810155][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.822353][T18449] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 418.946574][T18450] bond1: option xmit_hash_policy: invalid value (64) [ 418.987894][T18457] netlink: 'syz.0.3392': attribute type 1 has an invalid length. [ 418.999513][T18457] netlink: 'syz.0.3392': attribute type 2 has an invalid length. [ 419.024580][T18450] bond1 (unregistering): Released all slaves [ 419.213125][ T5830] Bluetooth: hci2: command tx timeout [ 419.228437][T18456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 419.268568][T18456] bond3: (slave bond4): making interface the new active one [ 419.305398][T18471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3394'. [ 419.319930][T18456] bond3: (slave bond4): Enslaving as an active interface with an up link [ 419.501612][T18480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3398'. [ 419.559430][T18483] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 419.755895][T18497] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 420.031948][T18522] netlink: zone id is out of range [ 420.039604][T18522] netlink: get zone limit has 4 unknown bytes [ 420.466690][T18538] netlink: 'syz.3.3409': attribute type 21 has an invalid length. [ 420.480487][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'. [ 420.507105][T18538] sctp: [Deprecated]: syz.3.3409 (pid 18538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.507105][T18538] Use struct sctp_sack_info instead [ 422.768892][T18502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.979426][T18558] syzkaller0: entered promiscuous mode [ 422.985895][T18558] syzkaller0: entered allmulticast mode [ 423.121106][T18567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3416'. [ 423.251748][T18577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3419'. [ 423.417104][T18590] syzkaller0: entered promiscuous mode [ 423.426062][T18590] syzkaller0: entered allmulticast mode [ 423.556539][T18593] tipc: Started in network mode [ 423.561574][T18593] tipc: Node identity 5e7c58958285, cluster identity 4711 [ 423.585803][T18593] tipc: Enabled bearer , priority 0 [ 423.646803][T18593] tipc: Resetting bearer [ 423.681978][T18593] tipc: Disabling bearer [ 423.773251][T18604] syzkaller0: entered promiscuous mode [ 423.785172][T18604] syzkaller0: entered allmulticast mode [ 424.012664][T18611] IPVS: persistence engine module ip_vs_pe_À not found [ 424.175815][T18629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'. [ 424.359580][T18637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.407177][T18643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.528680][T18648] ipvlan1: mtu less than device minimum [ 424.756488][T18662] openvswitch: netlink: Flow key attribute not present in set flow. [ 424.787644][T18662] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 424.828583][ T30] audit: type=1800 audit(1770324711.291:4): pid=18668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3449" name="memory.events" dev="tmpfs" ino=418 res=0 errno=0 [ 424.850603][T18666] netlink: 'syz.3.3447': attribute type 29 has an invalid length. [ 424.851004][T18666] netlink: 'syz.3.3447': attribute type 29 has an invalid length. [ 424.852129][T18666] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3447'. [ 424.881377][ T30] audit: type=1804 audit(1770324711.341:5): pid=18668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3449" name="/newroot/79/memory.events" dev="tmpfs" ino=418 res=1 errno=0 [ 424.904400][T18666] unsupported nla_type 58 [ 424.978728][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3448'. [ 424.999615][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3448'. [ 425.265372][T18687] : renamed from bond0 (while UP) [ 425.270868][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 425.326700][T18701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3454'. [ 425.742023][T18730] ip6erspan1: entered allmulticast mode [ 425.875037][T18739] syzkaller0: entered promiscuous mode [ 425.891923][T18739] syzkaller0: entered allmulticast mode [ 426.188912][T18761] 8021q: VLANs not supported on ip6gre0 [ 426.250455][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3477'. [ 426.277451][T18765] netlink: 'syz.1.3478': attribute type 1 has an invalid length. [ 426.296707][T18765] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 426.402063][T18770] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3480'. [ 426.660585][T18778] pim6reg1: entered promiscuous mode [ 426.705486][T18778] pim6reg1: entered allmulticast mode [ 426.734296][T18791] netlink: 'syz.3.3487': attribute type 1 has an invalid length. [ 426.749650][T18791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3487'. [ 427.046565][T18798] netlink: Conntrack attr has 4 unknown bytes [ 427.070922][T18798] tipc: Enabling of bearer rejected, failed to enable media [ 427.108397][T18807] IPVS: ip_vs_add_dest(): server weight less than zero [ 427.115589][ T5948] IPVS: starting estimator thread 0... [ 427.224043][T18810] IPVS: using max 29 ests per chain, 69600 per kthread [ 427.248162][T18797] lec:lec_atm_close: lec0: Shut down! [ 427.340550][T18817] syzkaller0: entered allmulticast mode [ 427.359330][T18817] tipc: Started in network mode [ 427.383871][T18817] tipc: Node identity 4eb56d8e558, cluster identity 4711 [ 427.399205][T18817] tipc: Enabled bearer , priority 0 [ 427.465341][T18816] tipc: Disabling bearer [ 427.503278][T18824] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 428.095646][T18859] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 428.180299][T18865] lo: Caught tx_queue_len zero misconfig [ 428.238483][T18870] netlink: 'syz.1.3511': attribute type 2 has an invalid length. [ 428.274336][T18870] __nla_validate_parse: 3 callbacks suppressed [ 428.274355][T18870] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3511'. [ 428.337531][T18882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.619315][T18895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.637826][ T7063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.668299][T18895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.700722][T18899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3515'. [ 428.776276][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 428.786926][T18901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3513'. [ 428.863400][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3515'. [ 429.023924][T18912] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.446766][T18892] net_ratelimit: 7 callbacks suppressed [ 429.446788][T18892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.691903][T18960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3527'. [ 429.789892][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.801607][T18969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3527'. [ 429.858906][T18974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.868182][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.876673][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.043277][T18968] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.340706][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.725490][T18998] syzkaller0: entered promiscuous mode [ 430.731046][T18998] syzkaller0: entered allmulticast mode [ 430.935576][ T6732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.969677][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.134707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.366696][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.487890][T19026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3541'. [ 431.540947][T19027] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 432.372067][T19030] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 432.543330][T19037] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3544'. [ 432.602592][T19043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3546'. [ 432.752061][T19047] erspan0: entered allmulticast mode [ 432.774317][T19050] syzkaller0: entered promiscuous mode [ 432.780397][T19050] syzkaller0: entered allmulticast mode [ 432.964460][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 432.972541][ C0] lec:lec_tx_timeout: lec0 [ 432.991388][T19065] netlink: 'syz.2.3554': attribute type 1 has an invalid length. [ 433.030655][T19065] netlink: 'syz.2.3554': attribute type 2 has an invalid length. [ 433.090644][T19065] netlink: 'syz.2.3554': attribute type 1 has an invalid length. [ 433.105148][T19065] netlink: 'syz.2.3554': attribute type 2 has an invalid length. [ 433.534778][T19103] netlink: 'syz.4.3567': attribute type 3 has an invalid length. [ 433.557104][T19103] netlink: 'syz.4.3567': attribute type 3 has an invalid length. [ 433.569373][T19103] netlink: 'syz.4.3567': attribute type 3 has an invalid length. [ 433.590402][T19103] netlink: 'syz.4.3567': attribute type 3 has an invalid length. [ 433.614991][T19103] netlink: 'syz.4.3567': attribute type 3 has an invalid length. [ 433.633339][T19103] netlink: 'syz.4.3567': attribute type 3 has an invalid length. [ 433.901150][T19135] __nla_validate_parse: 4 callbacks suppressed [ 433.901165][T19135] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3570'. [ 434.261137][T19154] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.290379][T19154] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.299207][T19154] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 434.312442][T19154] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 434.486350][ T797] net_ratelimit: 9 callbacks suppressed [ 434.486366][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.455040][ T6732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.524921][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.542031][T19107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.565197][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.573362][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.778974][T19167] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 437.001595][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3582'. [ 437.043817][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.062247][T19190] IPVS: length: 8 != 1152 [ 437.074561][T19189] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3584'. [ 437.093233][T19194] IPVS: length: 8 != 1152 [ 437.094816][T19192] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3584'. [ 437.146461][T19189] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3584'. [ 437.169522][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3584'. [ 437.198055][T19192] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 437.207098][T19200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.215957][T19200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.224387][T19200] IPv4: Oversized IP packet from 172.20.20.24 [ 437.241052][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3584'. [ 437.270319][T19189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3584'. [ 437.371288][T19206] syzkaller0: entered promiscuous mode [ 437.377998][T19206] syzkaller0: entered allmulticast mode [ 437.578935][T19215] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 437.616079][T19220] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.690263][T19227] Cannot find add_set index 0 as target [ 437.838695][T19234] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.964757][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3596'. [ 438.004574][T19238] block nbd1: Unsupported socket: should be TCP or UNIX. [ 438.552084][T19274] validate_nla: 48 callbacks suppressed [ 438.552113][T19274] netlink: 'syz.3.3607': attribute type 30 has an invalid length. [ 438.569183][T19277] syzkaller0: entered promiscuous mode [ 438.577179][T19277] syzkaller0: entered allmulticast mode [ 438.958864][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3612'. [ 439.139737][T19300] 8021q: VLANs not supported on lo [ 439.330441][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3618'. [ 439.442502][T19314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3619'. [ 439.514283][T19316] net_ratelimit: 321 callbacks suppressed [ 439.514305][T19316] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.541808][T19317] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3619'. [ 439.569077][T19314] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.624849][T19317] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.632097][T19317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.676573][T19317] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3619'. [ 439.685988][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.717988][T19323] syzkaller0: entered promiscuous mode [ 439.729272][T19323] syzkaller0: entered allmulticast mode [ 439.745240][T19317] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.870157][T19329] netlink: 'syz.1.3625': attribute type 1 has an invalid length. [ 439.881010][T19329] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3625'. [ 439.897376][T19329] netlink: 'syz.1.3625': attribute type 12 has an invalid length. [ 439.908725][T19329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3625'. [ 439.919593][ T7063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.090123][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.099611][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 440.590970][T19357] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3633'. [ 440.628391][T19359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3632'. [ 440.657946][T19359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3632'. [ 440.726717][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.031529][T19366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.064671][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.205062][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.231590][T19396] netlink: 'syz.1.3644': attribute type 1 has an invalid length. [ 441.251895][T19398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.261878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.309766][T19396] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 441.310119][T19393] netlink: 'syz.0.3642': attribute type 29 has an invalid length. [ 441.371276][T19403] netlink: 'syz.0.3642': attribute type 29 has an invalid length. [ 441.414718][T19393] erspan0: entered promiscuous mode [ 441.422174][T19393] gretap0: entered promiscuous mode [ 441.439847][T19393] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 441.465518][T19393] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 441.516353][T19408] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 441.602573][T19413] bridge_slave_0: default FDB implementation only supports local addresses [ 441.614280][T19413] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 441.701445][T19413] bond1: (slave bridge1): making interface the new active one [ 441.734820][T19413] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 441.769466][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.051252][T19447] tipc: Enabled bearer , priority 10 [ 442.073178][T19447] syzkaller0: entered promiscuous mode [ 442.079432][T19447] syzkaller0: entered allmulticast mode [ 442.088934][T19447] netlink: 'syz.3.3660': attribute type 3 has an invalid length. [ 442.097418][T19447] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 442.204447][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.235628][T19447] tipc: Resetting bearer [ 442.277267][T19446] tipc: Resetting bearer [ 442.310190][T19446] tipc: Disabling bearer [ 442.327932][T19469] atomic_op ffff888031b87998 conn xmit_atomic 0000000000000000 [ 442.372271][T19470] syzkaller1: entered promiscuous mode [ 442.378170][T19470] syzkaller1: entered allmulticast mode [ 442.688228][T19491] dvmrp0: entered allmulticast mode [ 442.935188][T19506] netlink: 'syz.4.3679': attribute type 13 has an invalid length. [ 442.958201][T19506] veth0_macvtap: left promiscuous mode [ 442.974265][T19506] macvtap0: entered allmulticast mode [ 442.995315][T19506] macvtap0: refused to change device tx_queue_len [ 443.090425][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c3fc800: rx timeout, send abort [ 443.104024][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c3fc800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.131872][T19508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.177259][T19522] Cannot find add_set index 0 as target [ 443.353028][T19508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.536068][T19536] syzkaller0: entered promiscuous mode [ 443.547613][T19536] syzkaller0: entered allmulticast mode [ 443.595560][T19508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.619166][T19551] Bluetooth: MGMT ver 1.23 [ 443.709636][T19508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.765299][T19555] validate_nla: 3 callbacks suppressed [ 443.765319][T19555] netlink: 'syz.2.3691': attribute type 1 has an invalid length. [ 443.927268][ T6732] wlan1: Trigger new scan to find an IBSS to join [ 444.006224][T19567] __nla_validate_parse: 12 callbacks suppressed [ 444.006244][T19567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3695'. [ 444.030458][T19568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3695'. [ 444.884775][ T9] net_ratelimit: 5 callbacks suppressed [ 444.884797][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.114042][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.122171][ C0] lec:lec_tx_timeout: lec0 [ 445.375003][T19555] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 445.377447][T19556] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 445.565954][ T6747] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.594990][T19583] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 445.605360][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.643493][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3698'. [ 445.662042][T19588] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3700'. [ 445.682891][ T6747] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.714922][ T6747] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.767067][T19593] netlink: 'syz.1.3702': attribute type 64 has an invalid length. [ 445.782525][ T6736] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.929085][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.975170][T19599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3704'. [ 445.984330][T19599] netlink: 'syz.0.3704': attribute type 7 has an invalid length. [ 445.991703][T19603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.992075][T19599] netlink: 'syz.0.3704': attribute type 8 has an invalid length. [ 445.992091][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3704'. [ 446.000903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.236997][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 446.277186][T19609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3707'. [ 446.307463][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 446.317754][T19609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3707'. [ 446.755438][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.938804][T19662] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 446.962654][T19662] syzkaller1: entered promiscuous mode [ 446.969275][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.988351][T19662] syzkaller1: entered allmulticast mode [ 447.109384][T19658] veth0: entered promiscuous mode [ 447.134256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.154281][T19657] veth0: left promiscuous mode [ 447.294584][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.570194][T19732] xt_cgroup: xt_cgroup: no path or classid specified [ 447.632194][T19735] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 447.844671][T19751] xt_TCPMSS: Only works on TCP SYN packets [ 447.888704][T19756] netlink: 'syz.2.3736': attribute type 3 has an invalid length. [ 447.975250][T19712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.118218][T19767] syzkaller0: entered promiscuous mode [ 448.170636][T19767] syzkaller0: entered allmulticast mode [ 448.225455][T19776] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 448.640623][T19798] netlink: 'syz.4.3747': attribute type 2 has an invalid length. [ 448.884840][T19711] wlan1: Trigger new scan to find an IBSS to join [ 449.116313][T19823] __nla_validate_parse: 8 callbacks suppressed [ 449.116332][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3757'. [ 449.198786][T19830] netlink: 'syz.4.3758': attribute type 33 has an invalid length. [ 449.227779][T19830] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3758'. [ 449.407160][T19840] netlink: 'syz.3.3760': attribute type 13 has an invalid length. [ 449.442370][T19844] netlink: 'syz.2.3762': attribute type 4 has an invalid length. [ 449.451952][T19840] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3760'. [ 449.474247][T19840] netlink: 'syz.3.3760': attribute type 13 has an invalid length. [ 449.484045][T19840] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3760'. [ 449.501968][T19845] netlink: 536 bytes leftover after parsing attributes in process `syz.4.3761'. [ 449.627753][T19851] sctp: [Deprecated]: syz.1.3759 (pid 19851) Use of int in maxseg socket option. [ 449.627753][T19851] Use struct sctp_assoc_value instead [ 449.823852][T19866] netlink: 'syz.3.3769': attribute type 11 has an invalid length. [ 449.923438][T19868] net_ratelimit: 13 callbacks suppressed [ 449.923459][T19868] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 450.085973][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.204894][T19703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.349077][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.380349][T19900] team0: Caught tx_queue_len zero misconfig [ 450.469174][T19906] s5ÿÿø: renamed from vlan1 (while UP) [ 450.483975][T19898] netlink: 'syz.2.3777': attribute type 9 has an invalid length. [ 450.740246][T19914] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3780'. [ 450.798336][T19926] nbd: socks must be embedded in a SOCK_ITEM attr [ 450.951891][T19931] netlink: 'syz.1.3784': attribute type 11 has an invalid length. [ 450.966725][ T6749] wlan1: Trigger new scan to find an IBSS to join [ 451.038072][T19931] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 451.078342][T19934] netlink: 'syz.2.3786': attribute type 7 has an invalid length. [ 451.139573][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.175846][T19711] wlan1: Creating new IBSS network, BSSID 8e:9e:c9:78:52:55 [ 451.350314][ T5942] IPVS: starting estimator thread 0... [ 451.356516][T19958] IPVS: ip_vs_add_dest(): server weight less than zero [ 451.383992][T19713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.454956][T19959] IPVS: using max 29 ests per chain, 69600 per kthread [ 451.841064][T19996] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3804'. [ 451.882899][T20002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3807'. [ 451.902632][T20002] netlink: 'syz.3.3807': attribute type 7 has an invalid length. [ 451.911081][T20002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3807'. [ 451.948318][T19997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3805'. [ 451.966319][T20002] erspan0: entered promiscuous mode [ 452.018235][T20002] erspan0: left promiscuous mode [ 452.164038][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.294461][T20019] ip_vti0: entered promiscuous mode [ 452.527334][T19712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.687643][T20052] netlink: 'syz.4.3819': attribute type 61 has an invalid length. [ 453.060012][T20065] can: request_module (can-proto-4) failed. [ 453.129260][T20065] netlink: 'syz.4.3823': attribute type 1 has an invalid length. [ 453.161651][T20074] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 453.205422][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.871625][T20097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.948621][T20110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.080024][T20116] syzkaller0: entered promiscuous mode [ 454.086015][T20116] syzkaller0: entered allmulticast mode [ 454.358230][T20125] __nla_validate_parse: 20 callbacks suppressed [ 454.358265][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'. [ 454.521530][T20130] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 454.529873][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3840'. [ 455.926777][T19713] wlan1: Trigger new scan to find an IBSS to join [ 456.135690][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3840'. [ 456.259331][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3845'. [ 456.388971][T20160] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3847'. [ 456.399564][ T5942] IPVS: starting estimator thread 0... [ 456.515253][T20163] IPVS: using max 28 ests per chain, 67200 per kthread [ 456.557962][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3848'. [ 456.678425][T20178] validate_nla: 1 callbacks suppressed [ 456.678445][T20178] netlink: 'syz.4.3850': attribute type 4 has an invalid length. [ 456.716767][T20182] netlink: 'syz.4.3850': attribute type 4 has an invalid length. [ 457.116897][T20195] syzkaller0: entered promiscuous mode [ 457.122517][T20195] syzkaller0: entered allmulticast mode [ 457.130201][T20199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3855'. [ 457.177247][T20203] xt_cgroup: invalid path, errno=-2 [ 457.759867][T20214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3860'. [ 458.317568][T19711] wlan1: Creating new IBSS network, BSSID 3e:1c:44:03:f5:8e [ 458.793179][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 458.803099][T20219] netlink: 'syz.0.3861': attribute type 5 has an invalid length. [ 458.816192][T20219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3861'. [ 458.845527][T20219] geneve2: entered promiscuous mode [ 458.853646][T20219] geneve2: entered allmulticast mode [ 458.867016][T19709] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 458.880592][T19709] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 458.900096][T19709] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 458.909905][T19709] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 458.997728][T20228] Cannot find add_set index 2 as target [ 459.225562][T20239] netlink: 'syz.2.3870': attribute type 1 has an invalid length. [ 459.377395][T20247] netlink: 'syz.2.3873': attribute type 2 has an invalid length. [ 459.385438][T20247] netlink: 'syz.2.3873': attribute type 1 has an invalid length. [ 459.722854][T20271] dvmrp0: left allmulticast mode [ 459.920287][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3882'. [ 459.955092][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3882'. [ 459.990564][T20287] lo: entered promiscuous mode [ 460.016599][T20287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.094747][T20291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3886'. [ 460.136564][T20298] netlink: 'syz.0.3888': attribute type 21 has an invalid length. [ 460.149191][T20298] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3888'. [ 460.208203][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 460.291292][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3890'. [ 460.384948][T20306] syzkaller0: entered promiscuous mode [ 460.406663][T20306] syzkaller0: entered allmulticast mode [ 460.440786][T20306] tipc: Enabled bearer , priority 0 [ 460.456411][T20312] syzkaller0: entered promiscuous mode [ 460.461946][T20312] syzkaller0: entered allmulticast mode [ 460.473867][T20312] tipc: Started in network mode [ 460.478798][T20312] tipc: Node identity a69829efb7dd, cluster identity 4711 [ 460.489067][T20312] tipc: Enabled bearer , priority 0 [ 460.497531][T20305] tipc: Resetting bearer [ 460.500989][T20312] netlink: 'syz.1.3893': attribute type 2 has an invalid length. [ 460.522116][T20312] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3893'. [ 460.612557][T20326] netlink: 'syz.4.3897': attribute type 10 has an invalid length. [ 460.667426][ T10] IPVS: starting estimator thread 0... [ 460.700380][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3896'. [ 460.765855][T20330] IPVS: using max 34 ests per chain, 81600 per kthread [ 462.033974][T20305] tipc: Disabling bearer [ 462.083393][T20326] veth0_vlan: left promiscuous mode [ 462.096551][T20326] veth0_vlan: entered promiscuous mode [ 462.107162][T20326] team0: Device veth0_vlan failed to register rx_handler [ 462.168666][T20332] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 462.192281][T20311] tipc: Resetting bearer [ 462.213137][T20338] netlink: 'syz.0.3900': attribute type 4 has an invalid length. [ 462.243107][T20338] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3900'. [ 462.293321][T20311] tipc: Disabling bearer [ 462.319926][ T5980] tipc: Node number set to 289745391 [ 462.328566][ T10] tipc: Node number set to 3707328661 [ 462.351873][T20338] `: renamed from  (while UP) [ 462.709038][T20367] netlink: 'syz.0.3909': attribute type 11 has an invalid length. [ 462.742869][T20371] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3908'. [ 462.789847][T20371] netlink: 'syz.1.3908': attribute type 2 has an invalid length. [ 463.003972][T20373] xt_CT: No such helper "snmp_trap" [ 463.043315][T20387] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 463.210350][T20397] netlink: 'syz.4.3915': attribute type 29 has an invalid length. [ 463.239911][T20397] netlink: 'syz.4.3915': attribute type 29 has an invalid length. [ 463.332431][T20397] syzkaller0: entered promiscuous mode [ 463.361805][T20397] syzkaller0: entered allmulticast mode [ 463.408247][ T8260] lec:lec_start_xmit: lec0:No lecd attached [ 463.455754][T20404] netlink: 'syz.4.3915': attribute type 1 has an invalid length. [ 463.952150][T20446] netlink: 'syz.1.3924': attribute type 1 has an invalid length. [ 463.960159][T20446] netlink: 'syz.1.3924': attribute type 11 has an invalid length. [ 465.546767][T20466] __nla_validate_parse: 12 callbacks suppressed [ 465.546789][T20466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3930'. [ 465.587470][T20468] netlink: 'syz.0.3931': attribute type 1 has an invalid length. [ 465.646108][T20466] dvmrp1: entered allmulticast mode [ 465.689040][T20468] syzkaller0: entered promiscuous mode [ 465.704589][T20468] syzkaller0: entered allmulticast mode [ 465.771928][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 465.785990][T20468] tipc: Enabled bearer , priority 0 [ 465.798061][T20467] tipc: Resetting bearer [ 465.867521][T20467] tipc: Disabling bearer [ 465.929148][T20484] netlink: 'syz.3.3938': attribute type 5 has an invalid length. [ 465.938036][T20484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3938'. [ 466.041305][T20493] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 466.062648][T20490] syzkaller0: entered promiscuous mode [ 466.070673][T20490] syzkaller0: entered allmulticast mode [ 466.317282][T20501] pim6reg1: entered promiscuous mode [ 466.364034][T20501] pim6reg1: entered allmulticast mode [ 466.534577][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3952'. [ 466.553685][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3952'. [ 467.107382][T17551] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 467.134052][T17551] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 467.144387][T17551] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 467.151854][T17551] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 467.160165][T17551] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 467.168045][T17551] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 467.178364][T17551] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 467.293226][T20543] validate_nla: 2 callbacks suppressed [ 467.293245][T20543] netlink: 'syz.2.3956': attribute type 1 has an invalid length. [ 467.351462][T20543] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.414653][T20553] bond6: (slave veth0_to_bond): making interface the new active one [ 467.466344][T20553] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 467.538494][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'. [ 467.605461][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'. [ 467.626299][T20569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3964'. [ 467.639976][T20558] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 467.655581][T20558] bond1 (unregistering): Released all slaves [ 467.705815][T20560] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 467.716881][T20560] bond1 (unregistering): Released all slaves [ 467.742827][T20566] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 467.745143][T20575] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3965'. [ 467.765898][T20575] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3965'. [ 467.911476][T20580] gtp0: entered promiscuous mode [ 467.917366][T20580] gtp0: entered allmulticast mode [ 468.068898][T20593] erspan0: entered promiscuous mode [ 468.091823][T20593] netlink: 'syz.3.3973': attribute type 1 has an invalid length. [ 468.367325][T20609] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.963610][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 468.971721][ C0] lec:lec_tx_timeout: lec0 [ 469.029719][T20651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.040044][T20652] netlink: 'syz.0.3988': attribute type 1 has an invalid length. [ 469.056814][T20652] netlink: 'syz.0.3988': attribute type 11 has an invalid length. [ 469.278494][T20660] netlink: 'syz.0.3992': attribute type 4 has an invalid length. [ 469.736699][T20688] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 470.139747][T20714] netlink: 'syz.1.4010': attribute type 7 has an invalid length. [ 470.175284][T19713] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.176188][T20714] netlink: 'syz.1.4010': attribute type 7 has an invalid length. [ 470.204316][T19713] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.220129][T19713] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.239698][T19713] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.323341][T20720] netlink: 'syz.3.4011': attribute type 3 has an invalid length. [ 470.346233][T20720] netlink: 'syz.3.4011': attribute type 3 has an invalid length. [ 470.391676][T20723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.576348][T20736] 8021q: adding VLAN 0 to HW filter on device bond7 [ 470.627844][T20737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 470.635592][T20737] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 470.648829][T20737] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 470.699690][T20740] team0: Device veth0_macvtap failed to register rx_handler [ 470.725700][T20742] bond0: option ad_select: unable to set because the bond device is up [ 470.830715][T20735] veth5: entered promiscuous mode [ 470.856617][T20735] bond7: (slave veth5): Enslaving as an active interface with a down link [ 471.067206][T20764] __nla_validate_parse: 9 callbacks suppressed [ 471.067225][T20764] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4025'. [ 471.215618][T20778] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4028'. [ 471.282939][T20778] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4028'. [ 471.329760][T20778] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4028'. [ 471.715940][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 471.727187][T20812] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4039'. [ 471.739973][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 471.750015][T20812] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4039'. [ 471.978375][T20824] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4044'. [ 471.998099][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4044'. [ 472.066702][T20831] gtp0: entered promiscuous mode [ 472.074097][T20831] gtp0: entered allmulticast mode [ 472.736591][T20866] sctp: [Deprecated]: syz.0.4059 (pid 20866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.736591][T20866] Use struct sctp_sack_info instead [ 472.771246][T20869] macsec2: entered promiscuous mode [ 472.783762][T20869] bridge0: entered promiscuous mode [ 472.799555][T20869] macsec2: entered allmulticast mode [ 472.809518][T20869] bridge0: entered allmulticast mode [ 472.830490][T20869] bridge0: port 3(macsec2) entered blocking state [ 472.845504][T20869] bridge0: port 3(macsec2) entered disabled state [ 472.865573][T20881] validate_nla: 45 callbacks suppressed [ 472.865592][T20881] netlink: 'syz.4.4064': attribute type 2 has an invalid length. [ 473.001183][T20869] bridge0: left allmulticast mode [ 473.013649][T20869] bridge0: left promiscuous mode [ 473.104821][T20891] openvswitch: netlink: IP tunnel dst address not specified [ 473.200683][T20893] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 473.239487][T20900] netlink: 'syz.3.4070': attribute type 3 has an invalid length. [ 473.430024][T20906] block nbd2: server does not support multiple connections per device. [ 473.442276][T20906] block nbd2: shutting down sockets [ 473.469712][T20909] netlink: 'syz.4.4074': attribute type 3 has an invalid length. [ 473.648257][T20918] ipt_REJECT: TCP_RESET invalid for non-tcp [ 474.030396][T20956] syzkaller0: entered promiscuous mode [ 474.040969][T20956] syzkaller0: entered allmulticast mode [ 474.291947][T20972] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 474.483277][T20981] netlink: 'syz.2.4096': attribute type 3 has an invalid length. [ 474.712527][T20993] netlink: 'syz.2.4098': attribute type 2 has an invalid length. [ 474.840082][T20999] netlink: 'syz.4.4100': attribute type 3 has an invalid length. [ 474.850223][T20999] netlink: 'syz.4.4100': attribute type 1 has an invalid length. [ 474.915968][T21000] netlink: 'syz.2.4101': attribute type 9 has an invalid length. [ 475.099346][T21012] netlink: 'syz.0.4104': attribute type 1 has an invalid length. [ 475.457340][T21039] netlink: 'syz.4.4112': attribute type 29 has an invalid length. [ 476.167431][T21079] syzkaller0: entered promiscuous mode [ 476.187354][T21079] syzkaller0: entered allmulticast mode [ 477.750771][T21096] bond0: option ad_select: unable to set because the bond device is up [ 477.910677][T21107] syzkaller0: entered promiscuous mode [ 477.916618][T21107] syzkaller0: entered allmulticast mode [ 477.936781][T21107] __nla_validate_parse: 27 callbacks suppressed [ 477.936802][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4129'. [ 477.962172][T21107] validate_nla: 2 callbacks suppressed [ 477.962189][T21107] netlink: 'syz.1.4129': attribute type 7 has an invalid length. [ 477.978178][T21107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4129'. [ 477.994688][T21105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4127'. [ 478.012524][T21107] ip6gretap0: entered promiscuous mode [ 478.020457][T21107] syz_tun: entered promiscuous mode [ 478.028943][T21107] debugfs: 'hsr1' already exists in 'hsr' [ 478.035330][T21107] Cannot create hsr debugfs directory [ 478.038126][T21113] netlink: 'syz.0.4131': attribute type 1 has an invalid length. [ 478.239981][T21124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.367507][T21129] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4136'. [ 478.393602][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4136'. [ 478.426452][T21129] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4136'. [ 478.454607][T21132] tipc: Started in network mode [ 478.467107][T21132] tipc: Node identity fe2971934469, cluster identity 4711 [ 478.470073][T21129] netlink: 'syz.0.4136': attribute type 2 has an invalid length. [ 478.488364][T21132] tipc: Enabled bearer , priority 0 [ 478.499372][T21129] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4136'. [ 478.586371][T21146] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4140'. [ 478.614014][T21133] syzkaller0: entered promiscuous mode [ 478.620009][T21133] syzkaller0: entered allmulticast mode [ 478.626507][T21133] tipc: Resetting bearer [ 478.635499][T21131] tipc: Resetting bearer [ 478.719975][T21151] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4144'. [ 478.918494][T21161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4146'. [ 480.475797][T21131] tipc: Disabling bearer [ 480.493587][T21161] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 480.543270][T21173] netlink: 'syz.0.4148': attribute type 29 has an invalid length. [ 480.596594][ T9] tipc: Node number set to 3124785555 [ 480.607994][T21186] x_tables: duplicate underflow at hook 1 [ 480.824821][T21200] bond8: Removing last ns target with arp_interval on [ 481.060356][T21214] !: renamed from dummy0 (while UP) [ 481.467383][T21231] netlink: 'syz.2.4166': attribute type 1 has an invalid length. [ 481.777330][T21252] netlink: 'syz.3.4173': attribute type 1 has an invalid length. [ 481.802538][T21254] netlink: 'syz.3.4173': attribute type 1 has an invalid length. [ 481.836601][T21259] Cannot find add_set index 65532 as target [ 481.856426][T21260] netlink: 'syz.1.4175': attribute type 5 has an invalid length. [ 481.886183][T21263] netlink: 'syz.1.4175': attribute type 5 has an invalid length. [ 481.906706][T21259] netlink: 'syz.2.4176': attribute type 3 has an invalid length. [ 482.188099][T21283] openvswitch: netlink: Multiple metadata blocks provided [ 482.374710][T21296] xt_NFQUEUE: number of total queues is 0 [ 482.396833][T21293] openvswitch: netlink: IP tunnel dst address not specified [ 482.982990][T21330] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 483.028750][T21332] sctp: [Deprecated]: syz.4.4198 (pid 21332) Use of int in maxseg socket option. [ 483.028750][T21332] Use struct sctp_assoc_value instead [ 483.082810][T21342] __nla_validate_parse: 23 callbacks suppressed [ 483.082832][T21342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4199'. [ 483.103337][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4202'. [ 483.122889][T21341] netlink: 50 bytes leftover after parsing attributes in process `syz.3.4202'. [ 483.144936][T21342] netlink: 'syz.2.4199': attribute type 12 has an invalid length. [ 483.164286][T21341] netlink: 50 bytes leftover after parsing attributes in process `syz.3.4202'. [ 483.176343][T21342] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.4199'. [ 483.246899][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4204'. [ 483.290281][T21349] vlan3: entered allmulticast mode [ 483.295989][T21349] bridge3: entered allmulticast mode [ 483.322159][T21357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4207'. [ 483.551670][T21367] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.144353][T21397] Bluetooth: MGMT ver 1.23 [ 484.148874][T21397] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 485.026842][T21435] dvmrp0: entered allmulticast mode [ 485.215569][T21444] tipc: Invalid UDP bearer configuration [ 485.215628][T21444] tipc: Enabling of bearer rejected, failed to enable media [ 485.306089][T21444] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 485.511297][T21453] gtp0: entered promiscuous mode [ 485.530450][T21453] gtp0: entered allmulticast mode [ 485.820070][T21467] bond0: Caught tx_queue_len zero misconfig [ 485.909792][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4231'. [ 485.926739][T21473] netlink: zone id is out of range [ 485.946174][T21473] netlink: zone id is out of range [ 485.957346][T21473] netlink: zone id is out of range [ 485.980441][T21473] netlink: del zone limit has 4 unknown bytes [ 486.030438][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'. [ 486.071206][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'. [ 486.151932][T21483] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 486.241018][T21489] netlink: 'syz.3.4236': attribute type 1 has an invalid length. [ 486.250255][T21489] netlink: 'syz.3.4236': attribute type 3 has an invalid length. [ 486.298015][T21489] netlink: 'syz.3.4236': attribute type 12 has an invalid length. [ 486.307600][T21489] netlink: 'syz.3.4236': attribute type 29 has an invalid length. [ 486.331518][T21489] netlink: 'syz.3.4236': attribute type 2 has an invalid length. [ 486.649382][T21511] netlink: 'syz.4.4238': attribute type 2 has an invalid length. [ 486.701003][T21516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.934544][T21522] netlink: 'syz.2.4246': attribute type 29 has an invalid length. [ 487.040787][T21527] syzkaller0: entered promiscuous mode [ 487.048643][T21527] syzkaller0: entered allmulticast mode [ 487.059124][T21529] sctp: [Deprecated]: syz.3.4245 (pid 21529) Use of int in max_burst socket option deprecated. [ 487.059124][T21529] Use struct sctp_assoc_value instead [ 487.070100][T21527] tipc: Enabled bearer , priority 0 [ 487.090113][T21525] tipc: Resetting bearer [ 487.131501][T21525] tipc: Disabling bearer [ 487.645410][T21561] syzkaller0: entered promiscuous mode [ 487.651301][T21561] syzkaller0: entered allmulticast mode [ 487.696919][T21561] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 487.708942][T21561] vlan4: entered allmulticast mode [ 487.716516][T21561] ip6gretap0: entered allmulticast mode [ 488.091053][T19712] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.115814][T19712] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.175294][T19712] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.185713][T19712] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.232502][T21591] __nla_validate_parse: 13 callbacks suppressed [ 488.232520][T21591] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4267'. [ 488.250949][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 488.257220][T21594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4268'. [ 488.270350][T21596] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4267'. [ 488.338161][T19708] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 488.575470][T21612] mac80211_hwsim hwsim35 wlan1: Caught tx_queue_len zero misconfig [ 488.627495][T21618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4277'. [ 488.880718][T21630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4282'. [ 489.113350][T21650] tipc: Enabled bearer , priority 0 [ 489.131348][T21650] syzkaller0: entered promiscuous mode [ 489.137749][T21650] syzkaller0: entered allmulticast mode [ 489.173019][T21650] tipc: Resetting bearer [ 489.198831][T21650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 489.258900][T21648] tipc: Resetting bearer [ 489.277906][T21660] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4289'. [ 489.310709][T21660] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 489.321720][T21648] tipc: Disabling bearer [ 489.996363][T21718] --map-set only usable from mangle table [ 490.315888][T21742] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4313'. [ 490.356282][T21742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4313'. [ 490.817998][T21747] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.825766][T21747] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.351575][T21747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.397055][T21747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.891527][T21766] tipc: Enabled bearer , priority 0 [ 491.919070][T21768] syzkaller0: entered promiscuous mode [ 491.953930][T21768] syzkaller0: entered allmulticast mode [ 491.986919][T19709] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.022981][T19709] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.079465][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4324'. [ 492.105822][T19709] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.125107][T19709] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.218050][T21776] tipc: Resetting bearer [ 492.417389][T21776] tipc: Disabling bearer [ 492.762765][T21815] set match dimension is over the limit! [ 493.928920][T21864] syzkaller0: entered promiscuous mode [ 493.935480][T21864] syzkaller0: entered allmulticast mode [ 494.149083][T21878] __nla_validate_parse: 2 callbacks suppressed [ 494.149105][T21878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4349'. [ 495.719860][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4355'. [ 495.998606][T21921] netlink: 'syz.4.4363': attribute type 1 has an invalid length. [ 496.186771][T21932] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4364'. [ 496.231170][T21925] bond4 (unregistering): Released all slaves [ 496.388105][T21921] bond3: (slave gretap1): making interface the new active one [ 496.436446][T21921] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 496.497430][T21955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4369'. [ 496.648751][T21962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4371'. [ 496.964676][T21983] netlink: 'syz.2.4377': attribute type 1 has an invalid length. [ 497.060030][T21993] xt_CONNSECMARK: invalid mode: 0 [ 497.069870][T21992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4379'. [ 498.583391][T21978] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4376'. [ 498.623047][T21999] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4376'. [ 498.914436][T22024] tc_dump_action: action bad kind [ 498.976642][T22027] netlink: 'syz.4.4388': attribute type 3 has an invalid length. [ 499.036625][T22027] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4388'. [ 499.203412][T22038] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4391'. [ 499.231049][T22034] syzkaller0: entered promiscuous mode [ 499.240194][T22034] syzkaller0: entered allmulticast mode [ 499.266139][T22037] netlink: 'syz.3.4390': attribute type 13 has an invalid length. [ 499.447755][T22054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4393'. [ 499.580969][T22064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4396'. [ 500.171874][T22102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4406'. [ 500.190510][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4407'. [ 500.463038][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4411'. [ 500.524659][T22126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4412'. [ 501.228031][T22168] syzkaller0: entered promiscuous mode [ 501.244371][T22168] syzkaller0: entered allmulticast mode [ 501.305359][T22168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 501.492264][T22178] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 501.529408][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.547131][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 502.169004][T22231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 502.247214][T22239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4443'. [ 502.365478][T22245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 502.529194][T22254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.805693][T22274] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 502.835771][T22273] sctp: [Deprecated]: syz.0.4455 (pid 22273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.835771][T22273] Use struct sctp_sack_info instead [ 502.861702][T22277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.603808][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 503.851065][T22309] tipc: Enabled bearer , priority 0 [ 503.886408][T22325] syzkaller0: entered promiscuous mode [ 503.929458][T22325] syzkaller0: entered allmulticast mode [ 503.987480][T22342] netlink: 'syz.1.4471': attribute type 1 has an invalid length. [ 504.078245][T22309] tipc: Disabling bearer [ 504.253350][T22360] __nla_validate_parse: 9 callbacks suppressed [ 504.253369][T22360] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4477'. [ 504.366421][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4479'. [ 504.405367][T22370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4479'. [ 504.549506][T22378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4482'. [ 504.730947][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4486'. [ 504.928666][T22408] vlan5: entered allmulticast mode [ 504.939875][T22408] geneve1: entered allmulticast mode [ 504.964333][T22409] vlan5: entered allmulticast mode [ 505.182232][T22416] xt_connbytes: Forcing CT accounting to be enabled [ 505.497474][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4500'. [ 505.574282][T22447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4500'. [ 505.583293][T22447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4500'. [ 505.647971][T22444] bond1: entered promiscuous mode [ 505.654696][T22444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.725983][T22452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.754263][T22452] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 505.783982][T22452] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 505.809527][T22451] bridge0: port 3(veth0_to_bridge) entered blocking state [ 505.822559][T22451] bridge0: port 3(veth0_to_bridge) entered disabled state [ 505.831855][T22451] veth0_to_bridge: entered allmulticast mode [ 505.842510][T22451] veth0_to_bridge: entered promiscuous mode [ 505.989951][T22462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4505'. [ 506.041299][T22466] geneve3: entered promiscuous mode [ 506.066274][T19703] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 42785 - 0 [ 506.107807][T22462] netlink: 'syz.3.4505': attribute type 1 has an invalid length. [ 506.134761][T19703] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 42785 - 0 [ 506.173629][T19703] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 42785 - 0 [ 506.182657][T19703] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 42785 - 0 [ 506.342655][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4510'. [ 506.415861][T22486] netlink: 'syz.3.4512': attribute type 1 has an invalid length. [ 506.582196][T22486] bond2: entered promiscuous mode [ 506.593105][T22486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.751429][T22487] hsr_slave_0 (unregistering): left promiscuous mode [ 506.963575][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 506.971709][ C0] lec:lec_tx_timeout: lec0 [ 507.162724][T22533] netlink: 'syz.3.4526': attribute type 7 has an invalid length. [ 507.180897][T22526] IPv6: sit1: Disabled Multicast RS [ 507.211486][T22533] gretap0: entered promiscuous mode [ 507.241567][T22533] debugfs: 'hsr1' already exists in 'hsr' [ 507.271789][T22533] Cannot create hsr debugfs directory [ 507.297182][T22537] netlink: 'syz.4.4528': attribute type 1 has an invalid length. [ 507.305919][T22525] netlink: 'syz.0.4524': attribute type 2 has an invalid length. [ 507.327913][T22535] syzkaller0: entered promiscuous mode [ 507.335621][T22535] syzkaller0: entered allmulticast mode [ 507.376336][T22537] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.467135][T22543] netlink: 'syz.0.4530': attribute type 4 has an invalid length. [ 507.525112][T22542] netlink: 'syz.0.4530': attribute type 4 has an invalid length. [ 507.692470][T22563] netlink: 'syz.2.4533': attribute type 21 has an invalid length. [ 507.722692][T22563] IPv6: NLM_F_CREATE should be specified when creating new route [ 507.911981][T22573] pimreg: entered allmulticast mode [ 507.929339][T19703] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.962031][T19703] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.985542][T19703] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.023270][T19703] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.528085][T22612] netlink: 'syz.3.4549': attribute type 13 has an invalid length. [ 508.562105][T22599] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 508.643664][T22612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.865148][T22620] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.895429][ T5942] IPVS: starting estimator thread 0... [ 509.007425][T22626] IPVS: using max 28 ests per chain, 67200 per kthread [ 509.056139][T22649] validate_nla: 1 callbacks suppressed [ 509.056157][T22649] netlink: 'syz.0.4555': attribute type 11 has an invalid length. [ 509.254255][T22659] ip6tnl0: Caught tx_queue_len zero misconfig [ 509.294703][T22663] __nla_validate_parse: 16 callbacks suppressed [ 509.294735][T22663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4559'. [ 509.324873][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 509.354407][T22663] vxcan2: entered allmulticast mode [ 509.486969][T22672] netlink: 'syz.4.4561': attribute type 2 has an invalid length. [ 509.515753][T22672] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4561'. [ 509.582603][T22678] netlink: 'syz.4.4563': attribute type 11 has an invalid length. [ 509.866737][T22691] netlink: 'syz.3.4567': attribute type 1 has an invalid length. [ 509.878098][T22691] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4567'. [ 509.889504][T22691] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4567'. [ 509.899598][T22691] netlink: 'syz.3.4567': attribute type 1 has an invalid length. [ 509.925131][T22691] netlink: 'syz.3.4567': attribute type 8 has an invalid length. [ 509.932961][T22691] netlink: 582 bytes leftover after parsing attributes in process `syz.3.4567'. [ 510.062845][T22702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4571'. [ 510.207845][T22710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4572'. [ 510.359988][T22718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.858904][T22746] batadv_slave_0: Caught tx_queue_len zero misconfig [ 510.896363][T22750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4584'. [ 511.180518][T22766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4591'. [ 511.196847][T22756] tipc: Enabling of bearer rejected, failed to enable media [ 511.265942][T22764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.968979][T22792] geneve3: entered promiscuous mode [ 511.977881][T19708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 511.991054][T19708] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 512.021912][T19708] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 512.034670][T19708] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 512.049549][T22796] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 512.074378][T22798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.247231][T22807] vlan2: entered allmulticast mode [ 512.264304][T22807] gretap0: entered allmulticast mode [ 512.586165][T22836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.593481][T22836] IPv6: NLM_F_CREATE should be set when creating new route [ 512.595679][T22838] netlink: 'syz.0.4613': attribute type 15 has an invalid length. [ 512.600745][T22836] IPv6: NLM_F_CREATE should be set when creating new route [ 512.615866][T22836] IPv6: NLM_F_CREATE should be set when creating new route [ 512.654592][T22838] netlink: 'syz.0.4613': attribute type 1 has an invalid length. [ 512.695797][T22836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.716299][T22841] ip6_vti0 speed is unknown, defaulting to 1000 [ 512.871463][T22852] macvtap1: entered allmulticast mode [ 512.912018][T22852] veth0_macvtap: entered allmulticast mode [ 513.119627][T22870] openvswitch: netlink: IPv4 tunnel dst address is zero [ 513.143930][T22870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.450201][T22880] syzkaller0: entered promiscuous mode [ 513.456916][T22880] syzkaller0: entered allmulticast mode [ 513.857559][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 514.207268][T22911] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 515.652696][T22924] netlink: 'syz.1.4633': attribute type 1 has an invalid length. [ 515.704272][T22924] __nla_validate_parse: 99 callbacks suppressed [ 515.704291][T22924] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4633'. [ 515.739049][T22924] netlink: 'syz.1.4633': attribute type 1 has an invalid length. [ 515.747716][T22924] netlink: 'syz.1.4633': attribute type 8 has an invalid length. [ 515.764654][T22924] netlink: 606 bytes leftover after parsing attributes in process `syz.1.4633'. [ 515.774059][T22924] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4633'. [ 515.839454][T22935] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4636'. [ 516.460251][T22970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4650'. [ 516.599026][T22992] lo speed is unknown, defaulting to 1000 [ 516.627570][T22992] lo speed is unknown, defaulting to 1000 [ 516.636526][T22992] lo speed is unknown, defaulting to 1000 [ 516.776807][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4656'. [ 516.811809][T23004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4656'. [ 516.967625][T23016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4659'. [ 517.008087][T23016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4659'. [ 517.120215][T22992] infiniband syz0: set down [ 517.126588][ T5887] lo speed is unknown, defaulting to 1000 [ 517.144069][T22992] infiniband syz0: added lo [ 517.239155][T22992] RDS/IB: syz0: added [ 517.259988][T22992] smc: adding ib device syz0 with port count 1 [ 517.280344][T23021] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4660'. [ 517.290762][T22992] smc: ib device syz0 port 1 has no pnetid [ 517.292256][T22992] lo speed is unknown, defaulting to 1000 [ 517.309038][T21779] lo speed is unknown, defaulting to 1000 [ 517.389243][T23027] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 517.667585][T23036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.789814][T22992] lo speed is unknown, defaulting to 1000 [ 518.012948][T23047] netlink: get zone limit has 8 unknown bytes [ 518.019758][T22992] lo speed is unknown, defaulting to 1000 [ 518.255251][T23051] netem: change failed [ 518.288609][T22992] lo speed is unknown, defaulting to 1000 [ 518.459816][T23060] xt_CT: No such helper "pptp" [ 518.838242][T22992] lo speed is unknown, defaulting to 1000 [ 518.995647][T23096] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20000 [ 519.479880][T22992] lo speed is unknown, defaulting to 1000 [ 519.496611][T23113] netlink: 'syz.3.4686': attribute type 7 has an invalid length. [ 519.521152][T23113] netlink: 'syz.3.4686': attribute type 8 has an invalid length. [ 520.008695][T23139] xt_hashlimit: size too large, truncated to 1048576 [ 520.025166][T23140] xt_hashlimit: size too large, truncated to 1048576 [ 520.065794][T22992] lo speed is unknown, defaulting to 1000 [ 520.207618][T23157] netlink: 'syz.2.4702': attribute type 1 has an invalid length. [ 520.220486][T23157] netlink: 'syz.2.4702': attribute type 1 has an invalid length. [ 520.441456][T23164] netlink: 'syz.2.4705': attribute type 1 has an invalid length. [ 520.684191][T23179] syzkaller0: entered promiscuous mode [ 520.689735][T23179] syzkaller0: entered allmulticast mode [ 520.696354][T19713] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 520.816589][T23189] __nla_validate_parse: 11 callbacks suppressed [ 520.816608][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4715'. [ 520.972722][T23196] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4716'. [ 521.436948][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4717'. [ 521.448772][T23193] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 521.457147][T23193] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4717'. [ 521.595394][T23218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 521.720931][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4722'. [ 521.738116][T23223] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4722'. [ 521.842907][T23228] sctp: [Deprecated]: syz.1.4725 (pid 23228) Use of int in max_burst socket option. [ 521.842907][T23228] Use struct sctp_assoc_value instead [ 521.873881][T23229] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4724'. [ 521.885551][T23229] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4724'. [ 521.961483][T23237] Unsupported ieee802154 address type: 0 [ 522.031139][T23239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 522.205910][T23250] netlink: 'syz.4.4729': attribute type 1 has an invalid length. [ 522.233571][T23250] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4729'. [ 522.326036][T23263] tipc: Enabled bearer , priority 0 [ 522.329729][T23249] netlink: 'syz.1.4734': attribute type 11 has an invalid length. [ 522.350676][T23263] syzkaller0: entered promiscuous mode [ 522.365715][T23263] syzkaller0: entered allmulticast mode [ 522.426686][T23263] tipc: Resetting bearer [ 522.469363][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4739'. [ 522.487381][T23266] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 522.506739][T23261] tipc: Resetting bearer [ 522.524925][T23261] tipc: Disabling bearer [ 522.626947][T23277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.665157][T23278] delete_channel: no stack [ 522.811418][T23288] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 523.042369][T23303] syzkaller0: entered promiscuous mode [ 523.052507][T23303] syzkaller0: entered allmulticast mode [ 523.111745][T23309] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20003 [ 523.421342][T19710] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.451037][T19710] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.486678][T19710] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.536986][T19710] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.863034][T23357] team0: Port device team_slave_0 removed [ 524.197883][T23372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.209968][T23386] openvswitch: netlink: IP tunnel dst address not specified [ 524.291416][T23382] bridge3: port 1(veth5) entered blocking state [ 524.299667][T23382] bridge3: port 1(veth5) entered disabled state [ 524.307110][T23382] veth5: entered allmulticast mode [ 524.317104][T23382] veth5: entered promiscuous mode [ 524.500620][T23394] tipc: Failed to remove unknown binding: 66,0,0/289745391:2212996612/2212996614 [ 524.529404][T23394] tipc: Failed to remove unknown binding: 66,0,0/289745391:2212996612/2212996613 [ 524.561332][T23396] tipc: Failed to remove unknown binding: 66,0,0/289745391:2212996612/2212996614 [ 524.572019][T23400] netlink: 'syz.4.4778': attribute type 1 has an invalid length. [ 524.596632][T23400] netlink: 'syz.4.4778': attribute type 2 has an invalid length. [ 524.605147][T23396] tipc: Failed to remove unknown binding: 66,0,0/289745391:2212996612/2212996613 [ 524.922057][T23419] netlink: 'syz.2.4784': attribute type 29 has an invalid length. [ 524.939831][T23423] netlink: 'syz.2.4784': attribute type 29 has an invalid length. [ 524.959479][T23430] netlink: 'syz.3.4785': attribute type 1 has an invalid length. [ 525.031346][T23418] netlink: 'syz.2.4784': attribute type 29 has an invalid length. [ 525.044640][T23418] netlink: 'syz.2.4784': attribute type 29 has an invalid length. [ 525.085563][T23418] netlink: 'syz.2.4784': attribute type 29 has an invalid length. [ 525.097594][T23418] netlink: 'syz.2.4784': attribute type 29 has an invalid length. [ 525.310579][T23450] x_tables: duplicate underflow at hook 1 [ 525.316933][T23450] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20004 [ 526.002768][T23499] __nla_validate_parse: 17 callbacks suppressed [ 526.002787][T23499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4806'. [ 526.120677][T23507] x_tables: ip_tables: ah match: only valid for protocol 51 [ 526.131350][T23508] Cannot find add_set index 1 as target [ 526.241196][T23510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4810'. [ 526.299048][T23505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4809'. [ 526.310411][T23505] tipc: Invalid UDP bearer configuration [ 526.310462][T23505] tipc: Enabling of bearer rejected, failed to enable media [ 526.477130][T23516] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.537794][T23521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4812'. [ 526.589914][T23526] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4812'. [ 526.646956][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4812'. [ 526.966488][ T8260] lec:lec_start_xmit: lec0:No lecd attached [ 527.026210][T23543] 8021q: adding VLAN 0 to HW filter on device bond5 [ 527.169454][T23546] bond5: (slave bridge6): making interface the new active one [ 527.197002][T23546] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 527.218887][T23516] lo speed is unknown, defaulting to 1000 [ 527.230484][T23549] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4818'. [ 527.431361][T23561] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4821'. [ 528.027399][T23592] validate_nla: 3 callbacks suppressed [ 528.027417][T23592] netlink: 'syz.3.4830': attribute type 4 has an invalid length. [ 528.065928][T23592] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4830'. [ 528.259698][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4834'. [ 528.294564][T23606] ip6t_rpfilter: unknown options [ 528.465611][T23610] netlink: 'syz.2.4838': attribute type 30 has an invalid length. [ 528.760360][T23614] syzkaller0: entered promiscuous mode [ 528.767340][T23614] syzkaller0: entered allmulticast mode [ 528.908890][T23631] netlink: 'syz.0.4845': attribute type 7 has an invalid length. [ 529.097035][T23644] netlink: 'syz.2.4848': attribute type 2 has an invalid length. [ 529.116792][T23645] netlink: 'syz.3.4849': attribute type 1 has an invalid length. [ 529.125641][T23645] netlink: 'syz.3.4849': attribute type 11 has an invalid length. [ 529.207839][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 530.850369][T23662] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 531.129425][T23680] __nla_validate_parse: 7 callbacks suppressed [ 531.129446][T23680] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4861'. [ 531.511647][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 531.557756][T23709] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 531.566152][T23713] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4870'. [ 531.950606][T23737] sctp: [Deprecated]: syz.1.4876 (pid 23737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.950606][T23737] Use struct sctp_sack_info instead [ 531.974608][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 531.982749][ C0] lec:lec_tx_timeout: lec0 [ 531.992816][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4877'. [ 532.032198][T23730] syzkaller1: entered promiscuous mode [ 532.038811][T23730] syzkaller1: entered allmulticast mode [ 532.547022][T23770] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4887'. [ 532.587200][T23774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4889'. [ 532.627105][T23776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4889'. [ 532.885204][T23795] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4892'. [ 532.924949][T23792] netlink: 'syz.4.4893': attribute type 25 has an invalid length. [ 533.072082][T23804] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 533.110738][T23806] dvmrp0: entered allmulticast mode [ 533.182286][T23810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4898'. [ 533.223802][T23810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4898'. [ 533.249091][T23810] netlink: 'syz.1.4898': attribute type 2 has an invalid length. [ 533.612129][T23833] netlink: 'syz.3.4905': attribute type 21 has an invalid length. [ 533.622320][T23833] netlink: 'syz.3.4905': attribute type 4 has an invalid length. [ 533.650442][T23833] netlink: 'syz.3.4905': attribute type 5 has an invalid length. [ 533.675239][T23845] netlink: 'syz.3.4905': attribute type 21 has an invalid length. [ 533.697729][T23845] netlink: 'syz.3.4905': attribute type 4 has an invalid length. [ 533.716460][T23845] netlink: 'syz.3.4905': attribute type 5 has an invalid length. [ 534.229494][T23869] netlink: 'syz.3.4917': attribute type 10 has an invalid length. [ 534.291462][T23869] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.321253][T23869] bridge_slave_1: left allmulticast mode [ 534.329475][T23869] bridge_slave_1: left promiscuous mode [ 534.347926][T23869] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.399832][T23869] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 534.802827][T23906] syzkaller0: entered promiscuous mode [ 534.812831][T23906] syzkaller0: entered allmulticast mode [ 534.965816][T23913] vcan1: entered promiscuous mode [ 534.971016][T23913] vcan1: entered allmulticast mode [ 535.051774][T23924] netlink: 'syz.1.4934': attribute type 10 has an invalid length. [ 535.613231][T23951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.208835][T23996] __nla_validate_parse: 17 callbacks suppressed [ 536.208856][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4952'. [ 536.326515][ C0] [ 536.329003][ C0] ============================================ [ 536.335191][ C0] WARNING: possible recursive locking detected [ 536.341381][ C0] syzkaller #0 Not tainted [ 536.345824][ C0] -------------------------------------------- [ 536.351994][ C0] sed/24003 is trying to acquire lock: [ 536.357476][ C0] ffff8880341a6f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 536.366572][ C0] [ 536.366572][ C0] but task is already holding lock: [ 536.373965][ C0] ffff8880341a6f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_prp_supervision_frame+0x195/0x6c0 [ 536.384316][ C0] [ 536.384316][ C0] other info that might help us debug this: [ 536.392408][ C0] Possible unsafe locking scenario: [ 536.392408][ C0] [ 536.399885][ C0] CPU0 [ 536.403187][ C0] ---- [ 536.406480][ C0] lock(&hsr->seqnr_lock); [ 536.411014][ C0] lock(&hsr->seqnr_lock); [ 536.415555][ C0] [ 536.415555][ C0] *** DEADLOCK *** [ 536.415555][ C0] [ 536.423716][ C0] May be due to missing lock nesting notation [ 536.423716][ C0] [ 536.432075][ C0] 12 locks held by sed/24003: [ 536.436787][ C0] #0: ffff88807e71f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x293/0xb30 [ 536.445907][ C0] #1: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5a0 [ 536.455941][ C0] #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 536.465096][ C0] #3: ffff8880341a6f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_prp_supervision_frame+0x195/0x6c0 [ 536.475821][ C0] #4: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2880 [ 536.485310][ C0] #5: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 536.495316][ C0] #6: ffff888054206228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 536.507949][ C0] #7: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 536.517010][ C0] #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1fd/0x14e0 [ 536.526521][ C0] #9: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 536.535578][ C0] #10: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 536.545599][ C0] #11: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 536.554838][ C0] [ 536.554838][ C0] stack backtrace: [ 536.560761][ C0] CPU: 0 UID: 0 PID: 24003 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 536.560786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 536.560802][ C0] Call Trace: [ 536.560810][ C0] [ 536.560818][ C0] dump_stack_lvl+0xe8/0x150 [ 536.560839][ C0] print_deadlock_bug+0x279/0x290 [ 536.560855][ C0] __lock_acquire+0x253f/0x2cf0 [ 536.560877][ C0] ? ndisc_solicit+0x374/0x670 [ 536.560899][ C0] ? __neigh_event_send+0xf05/0x14a0 [ 536.560913][ C0] ? ip6_output+0x340/0x550 [ 536.560928][ C0] ? ip6tunnel_xmit+0x1c5/0x3e0 [ 536.560947][ C0] ? ip6_tnl_xmit+0x24e1/0x2da0 [ 536.560967][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 536.560986][ C0] ? sch_direct_xmit+0x251/0x4c0 [ 536.560999][ C0] ? __dev_queue_xmit+0x1538/0x3850 [ 536.561018][ C0] ? hsr_forward_skb+0x15a0/0x2880 [ 536.561035][ C0] ? send_prp_supervision_frame+0x35b/0x6c0 [ 536.561055][ C0] ? hsr_announce+0x1db/0x370 [ 536.561073][ C0] ? __run_timer_base+0x652/0x8b0 [ 536.561091][ C0] ? run_timer_softirq+0xb7/0x170 [ 536.561109][ C0] ? handle_softirqs+0x22a/0x7c0 [ 536.561123][ C0] ? hsr_dev_xmit+0x237/0x360 [ 536.561141][ C0] lock_acquire+0x106/0x330 [ 536.561160][ C0] ? hsr_dev_xmit+0x237/0x360 [ 536.561182][ C0] ? hsr_dev_xmit+0x237/0x360 [ 536.561200][ C0] _raw_spin_lock_bh+0x36/0x50 [ 536.561222][ C0] ? hsr_dev_xmit+0x237/0x360 [ 536.561239][ C0] hsr_dev_xmit+0x237/0x360 [ 536.561257][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 536.561275][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 536.561297][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.561317][ C0] __dev_queue_xmit+0x168f/0x3850 [ 536.561342][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 536.561365][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 536.561386][ C0] ? neigh_connected_output+0x1ea/0x460 [ 536.561402][ C0] ? eth_header+0x11b/0x200 [ 536.561419][ C0] ? __asan_memcpy+0x40/0x70 [ 536.561449][ C0] ? ip6_output+0x126/0x550 [ 536.561464][ C0] ip6_output+0x340/0x550 [ 536.561480][ C0] ndisc_send_skb+0xbaa/0x14e0 [ 536.561501][ C0] ? ndisc_send_skb+0x1fd/0x14e0 [ 536.561523][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 536.561544][ C0] ? __pfx_dst_output+0x10/0x10 [ 536.561566][ C0] ? ipv6_get_lladdr+0x2b/0x3f0 [ 536.561585][ C0] ? ipv6_get_lladdr+0x2b/0x3f0 [ 536.561604][ C0] ? ipv6_get_lladdr+0x2b/0x3f0 [ 536.561623][ C0] ? ipv6_get_lladdr+0x378/0x3f0 [ 536.561641][ C0] ? ipv6_get_lladdr+0x2b/0x3f0 [ 536.561661][ C0] ndisc_solicit+0x374/0x670 [ 536.561684][ C0] ? __pfx_ndisc_solicit+0x10/0x10 [ 536.561708][ C0] ? __neigh_event_send+0xe9d/0x14a0 [ 536.561724][ C0] ? __pfx_ndisc_solicit+0x10/0x10 [ 536.561744][ C0] __neigh_event_send+0xf05/0x14a0 [ 536.561764][ C0] neigh_resolve_output+0x198/0x750 [ 536.561780][ C0] ? ip6_finish_output2+0xec8/0x1360 [ 536.561801][ C0] ? ip6_output+0x126/0x550 [ 536.561815][ C0] ip6_output+0x340/0x550 [ 536.561832][ C0] ip6tunnel_xmit+0x1c5/0x3e0 [ 536.561854][ C0] ip6_tnl_xmit+0x24e1/0x2da0 [ 536.561882][ C0] ? __pfx_ip6_tnl_xmit+0x10/0x10 [ 536.561901][ C0] ? gre_build_header+0x31f/0xa40 [ 536.561920][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 536.561937][ C0] ? __gre6_xmit+0x1b5/0xd50 [ 536.561954][ C0] __gre6_xmit+0xa4d/0xd50 [ 536.561972][ C0] ? __pfx___gre6_xmit+0x10/0x10 [ 536.561987][ C0] ? ip6_tnl_xmit_ctl+0xeb/0x660 [ 536.562006][ C0] ? ip6_tnl_xmit_ctl+0x46b/0x660 [ 536.562025][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 536.562054][ C0] ip6gre_tunnel_xmit+0xbc9/0x11d0 [ 536.562075][ C0] ? skb_network_protocol+0x528/0x790 [ 536.562093][ C0] ? __pfx_ip6gre_tunnel_xmit+0x10/0x10 [ 536.562112][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 536.562131][ C0] ? netif_skb_features+0xa64/0x1540 [ 536.562154][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 536.562174][ C0] ? __flow_hash_from_keys+0x45b/0x6e0 [ 536.562197][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 536.562222][ C0] sch_direct_xmit+0x251/0x4c0 [ 536.562238][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 536.562254][ C0] __dev_queue_xmit+0x1538/0x3850 [ 536.562279][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 536.562309][ C0] ? rcu_is_watching+0x15/0xb0 [ 536.562322][ C0] ? trace_kmalloc+0x1f/0xb0 [ 536.562332][ C0] ? __kmalloc_node_track_caller_noprof+0x577/0x7f0 [ 536.562346][ C0] ? skb_copy_bits+0xf7/0x8f0 [ 536.562363][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 536.562382][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 536.562399][ C0] ? __asan_memcpy+0x40/0x70 [ 536.562417][ C0] ? skb_copy_expand+0x3a9/0xb90 [ 536.562436][ C0] ? __asan_memcpy+0x40/0x70 [ 536.562458][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 536.562479][ C0] hsr_forward_skb+0x15a0/0x2880 [ 536.562491][ C0] ? __build_skb_around+0x22d/0x3c0 [ 536.562509][ C0] ? hsr_forward_skb+0xb3/0x2880 [ 536.562521][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 536.562532][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.562548][ C0] ? __asan_memset+0x22/0x50 [ 536.562583][ C0] ? __skb_pad+0x405/0x610 [ 536.562605][ C0] send_prp_supervision_frame+0x35b/0x6c0 [ 536.562627][ C0] ? __pfx_send_prp_supervision_frame+0x10/0x10 [ 536.562648][ C0] hsr_announce+0x1db/0x370 [ 536.562667][ C0] ? hsr_announce+0x89/0x370 [ 536.562685][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 536.562702][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.562721][ C0] call_timer_fn+0x192/0x5a0 [ 536.562742][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 536.562760][ C0] ? call_timer_fn+0xd4/0x5a0 [ 536.562780][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 536.562804][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.562824][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 536.562843][ C0] __run_timer_base+0x652/0x8b0 [ 536.562862][ C0] ? ktime_get+0x45/0x200 [ 536.562882][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 536.562904][ C0] ? sched_clock_cpu+0x74/0x440 [ 536.562926][ C0] run_timer_softirq+0xb7/0x170 [ 536.562946][ C0] handle_softirqs+0x22a/0x7c0 [ 536.562959][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 536.562975][ C0] __irq_exit_rcu+0x5f/0x150 [ 536.562987][ C0] irq_exit_rcu+0x9/0x30 [ 536.562998][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 536.563012][ C0] [ 536.563017][ C0] [ 536.563023][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.563047][ C0] RIP: 0010:unwind_next_frame+0x5/0x23c0 [ 536.563065][ C0] Code: e1 07 80 c1 03 38 c1 7c 92 48 89 df e8 84 32 b7 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fe 48 bd 00 [ 536.563077][ C0] RSP: 0018:ffffc90011a07658 EFLAGS: 00000202 [ 536.563090][ C0] RAX: 0000000000000001 RBX: ffffc90011a07720 RCX: 0000000000000000 [ 536.563100][ C0] RDX: dffffc0000000000 RSI: ffffffff813383b0 RDI: ffffc90011a07668 [ 536.563111][ C0] RBP: ffffc90011a076f0 R08: ffffc90011a07730 R09: 000000000000000a [ 536.563121][ C0] R10: ffffc90011a076b8 R11: ffffffff81afb170 R12: ffff88807ba88000 [ 536.563131][ C0] R13: 0000000000000020 R14: ffffffff81afb170 R15: ffffc90011a07668 [ 536.563142][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.563161][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.563179][ C0] ? x64_sys_call+0x2210/0x2210 [ 536.563201][ C0] arch_stack_walk+0x11b/0x150 [ 536.563219][ C0] ? x64_sys_call+0x2210/0x2210 [ 536.563239][ C0] stack_trace_save+0xa9/0x100 [ 536.563256][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 536.563274][ C0] ? stack_depot_save_flags+0x33/0x810 [ 536.563296][ C0] kasan_save_track+0x3e/0x80 [ 536.563308][ C0] ? kasan_save_track+0x3e/0x80 [ 536.563319][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 536.563332][ C0] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 536.563345][ C0] ? kmem_cache_free+0x169/0x610 [ 536.563358][ C0] ? exit_mmap+0x544/0xb30 [ 536.563377][ C0] ? __mmput+0x118/0x430 [ 536.563397][ C0] ? exit_mm+0x168/0x220 [ 536.563414][ C0] ? do_exit+0x62e/0x2310 [ 536.563432][ C0] ? do_group_exit+0x21b/0x2d0 [ 536.563448][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 536.563465][ C0] ? x64_sys_call+0x2210/0x2210 [ 536.563500][ C0] __kasan_kmalloc+0x93/0xb0 [ 536.563515][ C0] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 536.563529][ C0] ? kmem_cache_free+0x169/0x610 [ 536.563541][ C0] ? __phys_addr+0xd3/0x180 [ 536.563560][ C0] kmem_cache_free+0x169/0x610 [ 536.563573][ C0] ? exit_mmap+0x544/0xb30 [ 536.563595][ C0] exit_mmap+0x544/0xb30 [ 536.563615][ C0] ? uprobe_clear_state+0x20f/0x290 [ 536.563635][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 536.563655][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 536.563692][ C0] ? __pfx_exit_aio+0x10/0x10 [ 536.563713][ C0] ? uprobe_clear_state+0x27c/0x290 [ 536.563731][ C0] __mmput+0x118/0x430 [ 536.563754][ C0] exit_mm+0x168/0x220 [ 536.563773][ C0] do_exit+0x62e/0x2310 [ 536.563794][ C0] ? __pfx_do_exit+0x10/0x10 [ 536.563810][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.563831][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.563855][ C0] do_group_exit+0x21b/0x2d0 [ 536.563876][ C0] __x64_sys_exit_group+0x3f/0x40 [ 536.563894][ C0] x64_sys_call+0x2210/0x2210 [ 536.563914][ C0] do_syscall_64+0xe2/0xf80 [ 536.563930][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.563944][ C0] ? trace_irq_disable+0x37/0x100 [ 536.563959][ C0] ? clear_bhb_loop+0x60/0xb0 [ 536.563975][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.563990][ C0] RIP: 0033:0x7fcd1a9c96c5 [ 536.564002][ C0] Code: Unable to access opcode bytes at 0x7fcd1a9c969b. [ 536.564010][ C0] RSP: 002b:00007ffff45936a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 536.564025][ C0] RAX: ffffffffffffffda RBX: 00007fcd1aacafe8 RCX: 00007fcd1a9c96c5 [ 536.564041][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 536.564051][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 536.564060][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 536.564068][ C0] R13: 0000000000000000 R14: 00007fcd1aac9680 R15: 00007fcd1aacb000 [ 536.564086][ C0] [ 537.590731][T24013] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4957'. [ 537.600863][T24013] netlink: 'syz.1.4957': attribute type 2 has an invalid length.