last executing test programs: 1m54.434377254s ago: executing program 1 (id=6490): r0 = socket$inet(0x2, 0x4000000000000001, 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) 1m54.159122779s ago: executing program 1 (id=6495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x1}, 0x28) 1m53.867438272s ago: executing program 1 (id=6498): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000004c0)) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x6, [@func={0x5, 0x0, 0x0, 0xc, 0x4}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x5a, 0x4}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x7}, @volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0x4, 0x100}, {0x8, 0x33}, {0xd, 0x7}, {0x6, 0x6}, {0xa, 0x5}, {0xe, 0xdbf}, {0x8, 0x27}]}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x10, 0xfffffffd}]}, @type_tag={0x200000b, 0x0, 0x0, 0x12, 0x5}, @union={0x9, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x10, 0x0, 0x1000001}]}]}, {0x0, [0x30, 0x0, 0x30, 0x61]}}, &(0x7f0000000140)=""/56, 0xd2, 0x38, 0x0, 0x1, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x20, 0x0, 0x101, 0x4, 0x3089, r5, 0x6, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 1m53.413495379s ago: executing program 1 (id=6504): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004"], 0x0, 0x34}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) ioctl(r0, 0x5, &(0x7f0000000280)="52b0ad4143580cf97c261f43518707c6b9b6212d4a24f95d8a2ec8642774b030a0d2918a3983af38ff06eea72392988a98d39a0ec4b1db779119a14569c23f1a11db14ba76907ef152caacbeb19d686d4c1e75e4c86d33dfbaeda4d0098f9bdc78d0693c61caf0cae5b408cd4c64aa253ab4ef62f69267") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 1m53.284861928s ago: executing program 1 (id=6507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000070f9196e000091109200000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r3 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x20000000, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001600010a00000000000000000a000000f8ffffff0c000900000000000000000060a01eda"], 0x24}}, 0x8080) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25GETUID(r5, 0x891e, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000740)=[@in6={0xa, 0x4e22, 0x61e5, @loopback, 0x9}], 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000001c0)=0x20, 0x4) sendmsg$inet6(r8, &(0x7f0000001dc0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000000)='&', 0x2a000}], 0x1}, 0x85) r9 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r10 = socket(0x2a, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000000c0)={r1}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRES32=r5, @ANYRESDEC=r11, @ANYRESHEX=r9], 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) sendfile(r9, r9, 0x0, 0x6) 1m52.319058382s ago: executing program 1 (id=6523): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e21, @private=0xa010100}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 1m37.206157211s ago: executing program 32 (id=6523): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e21, @private=0xa010100}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 7.799983567s ago: executing program 2 (id=7735): r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="a913eaba4cd2bf", 0x7}, {&(0x7f00000000c0)="c6bd", 0x2}, {&(0x7f0000000280)="3c1ec4007ce96b6286ca1452000c7afaed11000bb1d4c5d7d3d5e1089fea310e7f8f9ca7c85453231851d0a0dfca5570ad79471c926b3bb09cd41667b7f009b0762c7a77ad512b32c70370b6c0f2e0ad06f24538ec994b92cf2b49b26577f0e47fb73b741ac922d65f4e2210c4d76b88706d97b8c57b64951e25ac5e6ae27ad2d3e987fd2436b1cdab25aa52579c2a03d53efe6e96825b84a2fbc5bdfb741a8d1ccc770bcce781f1ef0b565a", 0xac}, {&(0x7f0000000340)="df531744f77baaea7f88343ab8d40193d87e217a38e0025fce6b9d815ea6197cbc7e54d4ccbc5694335ce7c3d64d115192a77b394f04c484538a2a4c583c36844f02c02a5d5ac912a2a1503da6bd66dfa2b1bf17107ee545736c6e13df7a1175046446d20e29e15e1c662817e75e1a048ba6f03f047671e26230f13c08e50dd3e2ff35a46d7aca9027043bf19f82c08cbd6a37b25b8ca5e5ea96ecdfdbb3444201b69ea28d34f59454304ad2a6c3de7b1064", 0xb2}], 0x4}, 0x4008045) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.49365154s ago: executing program 2 (id=7738): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010102, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@private0, 0x3502, 0x3, 0x0, 0x5, 0x400, 0x1, 0x70}, {{@in=@loopback, 0x4d5, 0x32}, 0xf, @in=@multicast2, 0x3504, 0x4, 0x3, 0x0, 0x6, 0x2, 0x8}]}]}, 0x13c}}, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) 7.276275463s ago: executing program 2 (id=7742): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x2d, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1ff, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 6.975931571s ago: executing program 2 (id=7746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x2004d091) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x11e, 0x60, 0x0, &(0x7f0000007cc0)) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x22, 0x80000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x35, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e000004000280080005003a40ed4452316570b3f6ca8c9be94d112c5feac78807b6fcfff78642ec0ea8bf83188ed17b24fde044dbdc15fa00981f6373f09fd14b1e743e93a5655ba281d860a767edf25ea5b383cd5ec7bb8fe2fc434aea7a58162cf9b0580bd7f7072a7833f2f740374e372f23090fff6576aae009afc07e3ab6d6bf6b6e4714b2161f00fb6298918203b4ea58c207a6ef15e93c3b32d6f1c4268108bee858a86a35fbaa9830eb09c9a5b08e58468812bde56e7549340c603fee027f9d9443", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 6.012987589s ago: executing program 2 (id=7751): r0 = socket(0x2a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in=@remote, 0x4e22, 0x8, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x2}, {0x1, 0x3, 0x8, 0x6, 0x2, 0x600d382c, 0x80, 0x4}, {0x17e, 0x9, 0x8, 0xfffffffffffffff8}, 0x100, 0x6e6bbb, 0x0, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x2b}, 0xa, @in6=@mcast1, 0x3503, 0x4, 0x3, 0x7, 0x8, 0x6, 0x400}}, 0xe8) write$tun(r1, &(0x7f0000000e00)=ANY=[@ANYBLOB="000086dd000311082ffffe8000000000000000000000000000aa20010000000000000000000000b60002042088be000000030c000800050086dd88a888be000000021609660501000000000088a8080022eb00020000200cf00802000000000000020004940308006558000000022cce743a6301e80432945dc6953450f7c11a0bed689704bd9e8802a188f5d0da92aea6ad276172ba061e1b55fd338d3edacbd75dab0351bb39d32bd6de05650a0b6f8275e2d29684e0f0c1c6d24bb9f2db3892bb9c6a247c52d142f3ca7d2438515b6fa04af8587b8a03fe13c390e417239efd808ca405d6025f62d6b7a994de712d6fee4f99d6614a0816adff43ad5c142f87c2231b30a9600ffd7f370de63b401b56723c1008dcd6bed8adcc046d9787280415f366c04422db93ac898488dfc3b2e073ab2b00eb2c0ab9a457a4033a22c1c48152445ef6d2df04928e56642e44be67085de3bdb7f52a13b4040acc92d97f45ef5631a5155593a137b2a4d532320c748e957486eea452b0509691d9f87b43761db492fcedc7ea686659366332f31f90e56efb9847ccc85ab9cf0280a3c5cbe43fde3edcde60dc64fd1c8a551ab10932c3f501d6a2a1322d332ef2f44d4c7838b1567c808d93dbe894ce87f0558a8e6c1ef099edb2326076e8012fea12e4f4311bc66528444bfd313564de6537c75531ac6f9bbe770b0fc4a67d7e78525e0d266977ce07a5261f9ddc48d2136dc0a06c1175a4c2dbdc8d78cdf5a64b3b8ce34656c67ad4a22df692815fdeeb9bebb4dee95b67605b2334f3fb68c99ee083774b8b7141e8ac475867e280dc344f9b34be2ab4d05fdbdf1dbebe3b3cfc3bb0924f63a86937620531e24ec86d008d2b9f82b842bcef338417cf1b4243a530aa01bbafde047144834ff872fe4828dfa1afa77f9d68793d5baa43a2a02b957514ae75d98e767f1d6a39a5459a81493eccd557e0b4b6074c00c04c413f837fef89629fa3d4c1a9f6bb07ebc4d08fb377b2bbf36498bd137ed4f900786713cce4200602afc5272e05c40014a35890489c2edd94523b6ab22d9044f86ae8dccac2422c1c067951a3f213bb6dc49fc4a76abac32d683ce18e6771f1f302c0c5d1a4ce82704bfc3f9b90e4b19cf71e209b3976747da1488db1b2dd650feae84b4a11c8cbef499660d4f7cebd2863ceb9661a9b828b7308a119f8f9a6a5343a4867cba64ee97d32516775b19756b794363bd88c3749886219256ed22eea310ddce2d534c21aefcd09f082a7dba9b064a020da1131ac8eecdb2aaa49386e516f80000000000000000000000000aa889ed3b83a931d"], 0x23e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) recvfrom(r5, 0xfffffffffffffffc, 0x0, 0x400100c0, &(0x7f0000000480)=@ethernet={0x1, @broadcast}, 0x80) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc2, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x88S`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000001000eb22e5807d417f8b6f1030b5c3e2caa7ece543c6955510e8250a7e471c5f510ed73efee7303319c09702582f98e53d37ea1271ae053f22e6132de8e76e409ea4b7169c4569890ab8b951948f02eb82f171fa1340bf9e6dd9a73e4e6f2c49bc3e766825b8944b83961ffed78ffde267a7635da00698007410a4f30faf3fa4ec04291e7d91586e4328abc18f9532e58b8f974eb6afdba9e7f1b6460c986e3f0ad33718f52687d8a96b617245774beff3705316adcaa6281f27206fc0cd03d09de024dedcd919974f842f335de46bf91d6cc7c9aabdc159db3012d8caf199330e2000"/246, @ANYRES32=0x0, @ANYBLOB="0000000008440000380012800b00010067656e6576650000280002801400070000000000000000000000000000000001050003000800000005000a000100000008000a00", @ANYRES32=r8, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket(0xd, 0x80000, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x78, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x2, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0xfff, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv0\x00'}]}}]}, 0x78}}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', r3, 0x40, 0x7, 0x2, 0x80, {{0x8, 0x4, 0x0, 0x3a, 0x20, 0x68, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@ssrr={0x89, 0xb, 0xa4, [@empty, @broadcast]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="a8050000", @ANYRES16=r4, @ANYBLOB="5b6925bd7000fedbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="6401028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400010000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="0400028008000100", @ANYRES32=r3, @ANYBLOB="a80102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f800000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006163746976650000000000000000000000000000050003000300000008000400"/52, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="d800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000e000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400810000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040007000b0204000000ff03040300000000fa617c01040000000000090903000000b800011008000000"], 0x5a8}}, 0x44810) 5.197519545s ago: executing program 2 (id=7759): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000031401002cbd7000f9dbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000000000000000900020001000000000000000800410072786500140033006970766c616e300000000000000000008b969da831adfd"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x810) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x600, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x368) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0xf82, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.27826635s ago: executing program 0 (id=7776): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0xfda18651c90bdb7e}, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8001}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x8001, 0x20}, &(0x7f00000001c0)=0xc) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$inet6(0xa, 0x2, 0x0) (async) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x2, 0x6, 0x6}, 0x17}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) (async) r13 = socket(0x400000000010, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r15, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000300)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x84) 1.946038379s ago: executing program 0 (id=7779): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) 1.825159643s ago: executing program 0 (id=7781): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0xffffffffffffff6c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket(0x1, 0x2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x4, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.724587063s ago: executing program 5 (id=7782): r0 = socket(0x1e, 0x80003, 0x1000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x80}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="1491f6f8ada00d894c4eb88683baebe70537a0f5de62fccdd7d6f52a0a8432b0b1202bd440d278a15a77762627db35ab5421f6b5288a55b7dd3d73e26f47dd94c51f9fc48a1c2e9ff34191a5eff4d5ec0e52bb497a8f2b8dd44b155340b2cacb4a97120394f93e06f8ccade81a36ae953b136aa90cc95a90f45509e46b3c8c86981191fee0609b0bc389c94bfb82a1e50dad7e0ed1d240af82766e53dcf4887e8c0375ff620e7201cf72c12a4888df128d12afaf28b1a486243dcff239d22a0de41e97ebf63a5280296e1b1aba", 0xcd}, {&(0x7f00000005c0)="1d648322c5c35adb2ddcc3b4ab3667519b5d2815769ac7e094dd29b111bb8b4706fa0fff251d920ef1e92987d3cdf2294044feece6ac16792b2392fc274c664a0f6fcb22b3d960c5bbe6d7bb56bfa2602bc72822e97942a994efc53c849156d390b1d9cea658c8d90a00c5a82ebc9211a7651f1bb993fb866ec2dcae32caea11596fbc4c4326cbe3d70d8936eae32d675069b9d966d038886e32241f1c9832cea6d55d0726bebc199c696743db6ef6567ee6611fc2913fe7fa55d4be9f1c6c762c5ce33801b2fb9b6b8a8af94fb6505f65e4f62daf13f76235fe4d9f4d3ffb8705d6c2b7bd2121f62c770e783091d1f65ddf88dd73d9ce6f", 0xf8}, {&(0x7f00000006c0)="728828951e0854f67c19c61801e02566852521f3922187877db11b650511b113a2cdf8747d7eee7d7ac7679b42f49b81ddddba7e2354a6391a303646e778b9e6cc9ba7254baefbe98c633dbb96d1f8f2a0ea4668298b4d5b3d310008ce97d76cdf60de3e04b1ffdfdd2530816299a7bba74c23667778ec3cacf1fff1cf2ecb73ecdc69af6bc9e4baf9568f4469557693b55e2498ffa3506769ec51af183190930cf0d5ca329ef15f983b629d105e645c2ea44e49e3eed1a99dda9e5f169113908f1f111a4b78759c8aa917481d246d3844067cb03196cb206e543052efddfc2f79ed24a35eb1212e70bddaa0cb", 0xed}, {&(0x7f0000000200)="8d51170a461f17d956b0fc271ac2da5f29afde260c09c78995a6cd69c3c5289059af14af2e2f9a52d7ddb5d1dc8ba9706108c60601409f96594ff2cae87c7f04f09756760181f3ede08939696bb5b5c5ca65", 0x52}, {&(0x7f00000002c0)="36045661ccd5bc6a2547ab", 0xb}], 0x5, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}], 0x1, 0x4000010) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 1.573721737s ago: executing program 4 (id=7783): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r2, r1, 0x25, 0x8, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x939, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48004) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) 1.458809309s ago: executing program 4 (id=7785): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x3fa, 0x4, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}, ["", ""]}, 0x20}}, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x2}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x20000004}) (async) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044005}, 0x40040) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x19, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f00000100000e00"}}}]}, 0x48}}, 0x0) (rerun: 32) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) getsockopt$inet_opts(r10, 0x0, 0x4, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5609833b0100000000000000030000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x0, r8}, 0x94) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)=""/25, 0x7}) 1.453963722s ago: executing program 5 (id=7786): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20048800) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20048800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8927, &(0x7f0000000040)={0x6, 'wlan0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000500)={0x4, 0x5, 0x2, 0x922b, 0x5, 0x0, [{0x5, 0x2, 0x8, '\x00', 0x1008}, {0xfffffffffffffff7, 0x7, 0x9, '\x00', 0x2f88}, {0x5, 0x2, 0x1, '\x00', 0x100}, {0x9, 0x100000001, 0xb47}, {0x5, 0x29, 0x7, '\x00', 0x401}]}) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x148, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x48050}, 0x20000000) (async) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x148, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x48050}, 0x20000000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, &(0x7f0000000000)) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x9008, @remote, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=@ipv6_newroute={0xf8, 0x18, 0x8, 0x70bd2b, 0x25dfdbfd, {0xa, 0x80, 0x20, 0x0, 0xfd, 0x4, 0xff, 0xa}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_MARK={0x8, 0x10, 0x4}, @RTA_METRICS={0xc9, 0x8, 0x0, 0x1, "de7f34cb285de32f488d233a2d0ac0f182943dc2e3dc55c9ed22e1bafaeaee4e893b3568bfdb0bcd2b99b14f94ff0d54bcaf4ef7668eba709308441ad27788296eddad401c4a1aeeb0af93ee03fd3e30fbca8cd449c7bedddd5e4b7fd6f40187298cf1216a07db33ddb6b0a30b33a4f81c29a713add1c58e3d16356dc22ad368e67b054be72524daf25f7612475b9be02ff4c6f2af5bec63fc53a9f8a710d11baaf83dbe39f4f8521517883a2fb422aa7efc4459e517e4b7bbae58d4a95b840ac8f3c95add"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 1.36168714s ago: executing program 0 (id=7787): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x18, 0x140b, 0x301, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r2 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_getrule={0x1c, 0x22, 0x10, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0xd1118e99da506c0b, 0x7, 0xb, 0x0, 0x0, 0x4, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r10, 0x0, 0x0) mmap(&(0x7f0000a09000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r7, 0x307a3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7000000, 0x0, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x10, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) 1.240844261s ago: executing program 4 (id=7788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080045f800340000000008069078ac1414aaac1414aa00004e2a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c0800ca90781020030331fe06e2d4c3d900000049df4cb048d4cde1f426c054fdeb6e69836b9b770ea8b8e21ba53ad539915cddcfe07fe0f7a8b4852ea59672a3a3f75d0dfc321d0e6fea63daca07bcfe5b96b396913effaa02067abea6b3599d15aaebe54015"], 0x0) listen(r4, 0x8) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e27, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000e1650b3000000000000000000000000a"], 0xfedc}}, 0x0) listen(r5, 0x5) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000200)=0x81, 0x4) (async) listen(r7, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x9) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x8ad, @local, 0x2}}, 0x0, 0x0, 0x26, 0x0, "13abcd9d2debb68a5bfc1c24b50a30e0cb34dde0c1121e78614906563b981f8c4600b8b8f4ccd35ddda70754941e7c6343089a41b19dd068a877fa13dd60be9ce9b50c0a568bce047c3ee863b194c264"}, 0xd8) (async, rerun: 32) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r12, 0x80047453, &(0x7f0000000000)) (async) listen(r11, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4c0008804800b20049f404000a004e2100000000000000000000000000000000000700010000000081c983c8209ee781254b899f8ed90000000023c23ce91c0000000000000073d4fcdc4b1eb61ae60f69990ad0b24e01a4b5ddfc67653ccb11a5315c2eb9a309083cab274f39c44a6a8429c3570bd684880cdb7746e2b78e11f98cebfb71bcde6fa603fee3e890986d1167db515b29819bb8cdc33519f181f2204baa193e8bc7936000c71bb07b904465d5400f55de6d915dff2dfaf421a6a3a9ef3e1e"], 0x68}}, 0x0) 1.234072297s ago: executing program 3 (id=7789): syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x12fa41, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008001}, 0x4001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x110, r5, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x656}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x708d}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffbafa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x20) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, r5, 0xcc071acbf25dbf8f}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000080001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f80080002400000000008000140000000000800034000000000"], 0x58}}, 0x0) 953.927468ms ago: executing program 5 (id=7790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x5e) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) 950.053664ms ago: executing program 3 (id=7791): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003280)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)=ANY=[@ANYBLOB="1c0000005e00010025bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="fc"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x40000007, @vifc_lcl_ifindex=r6, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 905.745813ms ago: executing program 4 (id=7792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000002000000000001000000000000000047"], 0x14}}, 0x4000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7f, r0}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @multicast1}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0xb, 0x9, 0x5, 0x100, 0x6, 0x2, r3}) 733.863211ms ago: executing program 5 (id=7793): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x8) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x8) 733.131777ms ago: executing program 3 (id=7794): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffd38}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 728.630887ms ago: executing program 4 (id=7795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001001700000005001b0000000000b3d45d52682c5b918153c079d02ed3f787836f4aedaa0fe5f81afd8b6be237cb5202efc32946c17aaa3d5405f335445f43516346036436a7c182d9f0c6d1ebdc5bdc2a778e9c4c242eb8cfcb2f87024afa73a17a86b48eff6f020d1e1252238271cd8d26b203da8460973e92c3ac9b4f261b7e5cc534f5a75815f52b38013d0af0caae3838b859f481acafb852bbe2484266c22cb2d46c0d9691b25564f551378aa0cd311d91be3b6612876781451a1a6208eddf"], 0x44}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x12, 0x4) 648.969618ms ago: executing program 0 (id=7796): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x6) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x1}, &(0x7f0000000100)=0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0xc, &(0x7f0000000100)=0xd7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8071, 0xffffffffffffffff, 0x50182000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @loopback}}}], 0x38}, 0x40010) 603.41244ms ago: executing program 5 (id=7797): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 458.067244ms ago: executing program 0 (id=7798): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x3fe, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0, 0x41}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000406, 0x0) 359.360211ms ago: executing program 4 (id=7799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000000280)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780100001a00330628bd7000fddbdf25ac14144200000000e0000002000000000000000000000000000000004e2380010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r9) sendmsg$NFC_CMD_START_POLL(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090127bd7000ffdbdf250600000008000d000000000008000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r9) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0xc48b7a1b56ac5c4b, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000001}, 0x40804) r13 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r13, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r14, {0xb, 0x9}, {}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x800) 350.511531ms ago: executing program 3 (id=7800): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x20, r1, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0xb}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 173.838534ms ago: executing program 5 (id=7801): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d000000030000007f0000000700000040020000", @ANYRES32=0x1, @ANYBLOB='F%\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="feffffff0000000001000000000000000000000000000000000000009960"], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r8, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r8, 0x0, 0x12) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="ad00"], 0x9) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r9, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'syzkaller0\x00', 0x1}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="f84900001000010000000000000000000700000a48000000030a0fdb00000000000800000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000b8ee1058b24363860000140000001100010000000000000000000100000a022d85d0511eefea9ccec0eda74f6f8ef8a71a35c64d6b06da154d3f5ed88aa210276f69c73c4e4aa96cbc77f7c5cfd7766faf56368904ce6abba108a587914ac766cab19d882cf79ee0e4f6a6c6cb34fae3d355a93c8eb2d0b5be52717eda78ba478de7e958fbfec75b1a9f03f69be08d5a0f8c3b29fb637b53386b08bc2aed"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0f000000000000000000000000000000faff0b00", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070020010000000000000000000000000000140035006772653000"/56], 0x50}}, 0x0) 135.788888ms ago: executing program 3 (id=7802): r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="a913eaba4cd2bf", 0x7}, {&(0x7f00000000c0)="c6bd", 0x2}, {&(0x7f0000000280)="3c1ec4007ce96b6286ca1452000c7afaed11000bb1d4c5d7d3d5e1089fea310e7f8f9ca7c85453231851d0a0dfca5570ad79471c926b3bb09cd41667b7f009b0762c7a77ad512b32c70370b6c0f2e0ad06f24538ec994b92cf2b49b26577f0e47fb73b741ac922d65f4e2210c4d76b88706d97b8c57b64951e25ac5e6ae27ad2d3e987fd2436b1cdab25aa52579c2a03d53efe6e96825b84a2fbc5bdfb741a8d1ccc770bcce781f1ef0b565a", 0xac}, {&(0x7f0000000340)="df531744f77baaea7f88343ab8d40193d87e217a38e0025fce6b9d815ea6197cbc7e54d4ccbc5694335ce7c3d64d115192a77b394f04c484538a2a4c583c36844f02c02a5d5ac912a2a1503da6bd66dfa2b1bf17107ee545736c6e13df7a1175046446d20e29e15e1c662817e75e1a048ba6f03f047671e26230f13c08e50dd3e2ff35a46d7aca9027043bf19f82c08cbd6a37b25b8ca5e5ea96ecdfdbb3444201b69ea28d34f59454304ad2a6c3de7b1064", 0xb2}], 0x4}, 0x4008045) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=7803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) listen(r1, 0x800803fc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) shutdown(r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000146c00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000cf3c71fcc7e14811000000000000000024f50d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001060000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000005b8401caca0b7efa307f639a076360314ff2517c173d278fa90ca4b369db2bd66aa40b6f6129230965ecda1486d8ea7fd022547bbee68326740ac538cb58ee63acd0e1d48fd2c5c11d4753891256ed5a3b59c9f121e57d61a722e9ec6f180fb66e24ef1d3ea4ef37e6a19c0fd52626cbde4a50a15ab52545717f50dc9f5865c9ce03a897d83cdd5a5ed530bc900dbd39df04ed2a58253a795405df68bb1ade55a4140ef56d067fb76c82066733b3ae7395022edbd54354c21f64ba5023a17b26ef8562e64b7752287c2cb7f2445936b147ebe13f9765"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) kernel console output (not intermixed with test programs): tipc: Enabled bearer , priority 0 [ 707.871488][T28591] syzkaller0: entered promiscuous mode [ 707.877187][T28591] syzkaller0: entered allmulticast mode [ 707.885959][T28591] tipc: Resetting bearer [ 707.915411][T28590] tipc: Resetting bearer [ 709.148635][T18347] Bluetooth: hci2: command tx timeout [ 709.739656][T28590] tipc: Disabling bearer [ 709.850673][T27524] tipc: Node number set to 1 [ 710.171202][T28647] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 710.187583][T28647] bond7 (unregistering): Released all slaves [ 710.420239][T28574] chnl_net:caif_netlink_parms(): no params data found [ 710.471947][T28661] pim6reg1: entered promiscuous mode [ 710.482413][T28661] pim6reg1: entered allmulticast mode [ 711.084400][T28574] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.106651][T28574] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.121893][T28574] bridge_slave_0: entered allmulticast mode [ 711.153241][T28574] bridge_slave_0: entered promiscuous mode [ 711.195720][T28682] dvmrp0: entered allmulticast mode [ 711.219936][T28574] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.231085][T18347] Bluetooth: hci2: command tx timeout [ 711.251740][T28574] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.278620][T28574] bridge_slave_1: entered allmulticast mode [ 711.287229][T28574] bridge_slave_1: entered promiscuous mode [ 711.368002][T28574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.422398][T28574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.454802][T28690] netlink: 'syz.0.6101': attribute type 1 has an invalid length. [ 711.483112][T28672] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 711.527192][T28574] team0: Port device team_slave_0 added [ 711.528036][T28689] __nla_validate_parse: 7 callbacks suppressed [ 711.528056][T28689] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6102'. [ 711.557216][T28689] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6102'. [ 711.570786][T28574] team0: Port device team_slave_1 added [ 711.577852][T28689] netlink: 'syz.2.6102': attribute type 6 has an invalid length. [ 711.593193][T28689] netlink: 'syz.2.6102': attribute type 5 has an invalid length. [ 711.601800][T28689] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6102'. [ 711.616753][T28692] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.6103'. [ 711.629047][T28690] veth0_to_hsr: entered promiscuous mode [ 711.634908][T28690] veth0_to_hsr: entered allmulticast mode [ 711.780233][T28695] syzkaller0: entered promiscuous mode [ 711.785802][T28695] syzkaller0: entered allmulticast mode [ 711.798090][T28703] netlink: 'syz.0.6106': attribute type 10 has an invalid length. [ 711.840485][T28703] team0: Device veth1_macvtap failed to register rx_handler [ 711.883596][T28574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.891550][T28574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.923272][T28574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.936861][T28574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.945950][T28574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.974685][T28574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.099463][T28711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6108'. [ 712.109825][T28711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6108'. [ 713.303393][T18347] Bluetooth: hci2: command tx timeout [ 713.685419][T28711] geneve4: entered promiscuous mode [ 713.695553][T28711] geneve4: entered allmulticast mode [ 713.714982][ T9020] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.748603][ T9020] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.751430][T28714] netlink: 'syz.1.6109': attribute type 4 has an invalid length. [ 713.784226][ T9020] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.821234][ T9020] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.914808][T28574] hsr_slave_0: entered promiscuous mode [ 713.925555][T28574] hsr_slave_1: entered promiscuous mode [ 713.934150][T28574] debugfs: 'hsr0' already exists in 'hsr' [ 713.940849][T28574] Cannot create hsr debugfs directory [ 714.053590][T28723] Bluetooth: hci1: too big key_count value 32778 [ 714.172334][T28737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6118'. [ 714.191094][T28737] netlink: 'syz.1.6118': attribute type 5 has an invalid length. [ 714.200386][T28736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6117'. [ 714.210111][T28737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6118'. [ 714.221363][T28736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6117'. [ 714.278854][T28737] geneve2: entered promiscuous mode [ 714.284125][T28737] geneve2: entered allmulticast mode [ 714.406097][ T8121] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 714.428619][ T8121] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 714.437340][ T8121] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 714.566728][ T8121] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 714.772180][T28767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.161428][T28785] bridge0: entered promiscuous mode [ 715.169392][T28785] macsec1: entered promiscuous mode [ 715.174817][T28785] macsec1: entered allmulticast mode [ 715.182959][T28785] bridge0: entered allmulticast mode [ 715.198021][T28785] bridge0: port 3(macsec1) entered blocking state [ 715.205972][T28785] bridge0: port 3(macsec1) entered disabled state [ 715.224090][T28785] bridge0: left allmulticast mode [ 715.233055][T28785] bridge0: left promiscuous mode [ 715.381111][T18347] Bluetooth: hci2: command tx timeout [ 715.391224][T28791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.473250][T28791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.690668][T28574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.852933][T28574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.891425][T28574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.931198][T28574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 718.642276][T28803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.909484][T28574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.969232][T28574] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.000849][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.008065][ T8121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.040908][T28869] __nla_validate_parse: 3 callbacks suppressed [ 719.040930][T28869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6147'. [ 719.056758][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.064152][ T8121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.078112][T28873] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6149'. [ 719.094888][T28873] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6149'. [ 719.244291][T28880] x_tables: duplicate underflow at hook 1 [ 719.366778][T28887] tipc: Enabled bearer , priority 0 [ 719.512831][T28887] syzkaller0: entered promiscuous mode [ 719.538456][T28887] syzkaller0: entered allmulticast mode [ 719.551565][T28887] tipc: Resetting bearer [ 719.659631][T28885] tipc: Resetting bearer [ 719.742045][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6154'. [ 719.762479][T28909] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6154'. [ 719.817522][T28912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6156'. [ 721.440175][T28885] tipc: Disabling bearer [ 721.454767][T28896] syzkaller1: entered promiscuous mode [ 721.464215][T28896] syzkaller1: entered allmulticast mode [ 721.478111][T28912] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 721.671732][T28574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.744094][T28921] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6160'. [ 721.840481][T28574] veth0_vlan: entered promiscuous mode [ 721.900205][T28574] veth1_vlan: entered promiscuous mode [ 721.923093][T28927] tipc: Enabled bearer , priority 0 [ 721.977554][T28927] syzkaller0: entered promiscuous mode [ 721.987785][T28927] syzkaller0: entered allmulticast mode [ 721.998035][T28927] tipc: Resetting bearer [ 722.039628][T28926] tipc: Resetting bearer [ 722.357158][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6160'. [ 723.765405][T28926] tipc: Disabling bearer [ 723.775625][T28932] syzkaller0: entered promiscuous mode [ 723.781723][T28932] syzkaller0: entered allmulticast mode [ 723.800761][T28921] netlink: 'syz.1.6160': attribute type 29 has an invalid length. [ 723.943220][T28944] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6166'. [ 723.976334][T28574] veth0_macvtap: entered promiscuous mode [ 723.994583][T28947] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6166'. [ 724.021483][T28574] veth1_macvtap: entered promiscuous mode [ 724.059583][T28949] erspan0: entered promiscuous mode [ 724.110012][T28574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.144666][T28574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.194281][T28954] bond1: option miimon: invalid value (18446744073709551585) [ 724.206980][T28954] bond1: option miimon: allowed values 0 - 2147483647 [ 724.219759][T28954] bond1 (unregistering): Released all slaves [ 724.255555][ T3486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.311258][ T3486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.331367][T28963] tipc: Enabled bearer , priority 0 [ 724.340890][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6169'. [ 724.364026][ T3486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.377257][T28963] +: renamed from syzkaller0 [ 724.414967][T28963] tipc: Disabling bearer [ 724.431811][T28969] netlink: zone id is out of range [ 724.442844][T28969] netlink: get zone limit has 4 unknown bytes [ 724.471285][ T3486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.533394][T28972] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 724.585839][T28972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6173'. [ 724.719316][T19587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.731806][T19587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.813646][T28979] sctp: [Deprecated]: syz.2.6174 (pid 28979) Use of int in max_burst socket option. [ 724.813646][T28979] Use struct sctp_assoc_value instead [ 724.864327][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.874164][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.343462][T27596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 725.354333][T27596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 725.372161][T27596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 725.390848][T27596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 725.409654][T27596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 725.557098][T29008] netlink: 'syz.0.6182': attribute type 39 has an invalid length. [ 725.590225][T29012] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6183'. [ 725.896855][T29022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6184'. [ 726.190876][T29029] netlink: 'syz.0.6187': attribute type 10 has an invalid length. [ 726.220445][T29029] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 726.245217][T29029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.284009][T29031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6187'. [ 726.302500][T29031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6187'. [ 726.318980][T29036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6188'. [ 726.346171][T29033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6189'. [ 726.437707][T29040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6190'. [ 726.493023][T29045] netlink: 'syz.4.6192': attribute type 32 has an invalid length. [ 726.516607][T29045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 726.534781][T29040] sit0: entered promiscuous mode [ 726.540602][T29040] sit0: entered allmulticast mode [ 726.577418][T29045] bond5: option coupled_control: invalid value (3) [ 726.587331][T29045] bond5 (unregistering): Released all slaves [ 726.660772][T29040] syzkaller1: entered promiscuous mode [ 726.696850][T29040] syzkaller1: entered allmulticast mode [ 726.851115][T29004] chnl_net:caif_netlink_parms(): no params data found [ 727.147403][T29004] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.155667][T29004] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.163560][T29004] bridge_slave_0: entered allmulticast mode [ 727.175225][T29004] bridge_slave_0: entered promiscuous mode [ 727.185250][T29004] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.193602][T29004] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.201571][T29004] bridge_slave_1: entered allmulticast mode [ 727.210485][T29004] bridge_slave_1: entered promiscuous mode [ 727.269868][T29004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.288160][T29004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.424689][T29004] team0: Port device team_slave_0 added [ 727.459294][T18347] Bluetooth: hci3: command tx timeout [ 727.506795][T29004] team0: Port device team_slave_1 added [ 727.634750][T29004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.642823][T29004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.670421][T29004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.739274][T29004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.756550][T29004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.784763][T29004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.000588][T29004] hsr_slave_0: entered promiscuous mode [ 728.007228][T29004] hsr_slave_1: entered promiscuous mode [ 728.013969][T29004] debugfs: 'hsr0' already exists in 'hsr' [ 728.021188][T29004] Cannot create hsr debugfs directory [ 728.288690][T29124] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 728.306890][T29124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.472715][T29004] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.633557][T29004] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.503253][T29004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.540421][T18347] Bluetooth: hci3: command tx timeout [ 729.564093][T29004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.718991][T29138] __nla_validate_parse: 1 callbacks suppressed [ 729.719011][T29138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6215'. [ 729.787702][T29139] IPv6: NLM_F_CREATE should be specified when creating new route [ 730.955569][T29107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.000563][T29004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 731.067965][T29004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 731.134454][T29004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 731.168974][T29004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 731.266403][T29162] can: request_module (can-proto-5) failed. [ 731.435678][T29004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.464732][T29184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6225'. [ 731.483408][T29184] netlink: 'syz.4.6225': attribute type 5 has an invalid length. [ 731.496129][T29004] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.508919][T29184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6225'. [ 731.524768][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.532081][ T8121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.576977][T29184] geneve5: entered promiscuous mode [ 731.589472][T29184] geneve5: entered allmulticast mode [ 731.605917][ T8121] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 731.618851][T18347] Bluetooth: hci3: command tx timeout [ 731.630860][ T8121] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 731.640686][ T8121] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 731.694503][ T8121] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 731.713398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.720657][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.793069][T29201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.817761][T29200] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 731.841486][T29201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6229'. [ 732.046787][T29212] netlink: 'syz.0.6231': attribute type 23 has an invalid length. [ 732.057945][T29213] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 732.080701][T29209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6232'. [ 732.216578][T29218] netlink: 388 bytes leftover after parsing attributes in process `syz.1.6235'. [ 732.280918][T29004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.406852][T29224] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 732.421404][T29224] bond1 (unregistering): Released all slaves [ 732.472839][T29223] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 732.490406][T29223] bond1 (unregistering): Released all slaves [ 732.695874][T29004] veth0_vlan: entered promiscuous mode [ 732.742009][T29004] veth1_vlan: entered promiscuous mode [ 732.842282][T29004] veth0_macvtap: entered promiscuous mode [ 732.871383][T29004] veth1_macvtap: entered promiscuous mode [ 732.914365][T29257] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 733.029282][T29261] Can't find ip_set type has(:ip,mark [ 733.041889][T29004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.084132][T29252] syzkaller1: entered promiscuous mode [ 733.090511][T29252] syzkaller1: entered allmulticast mode [ 733.193629][T29004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.212390][ T8121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.229367][ T8121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.255039][ T8121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.308874][ T8121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.454034][T19586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.492029][T19586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.570439][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.584444][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.699236][T18347] Bluetooth: hci3: command tx timeout [ 733.727886][T29287] netlink: 'syz.0.6256': attribute type 1 has an invalid length. [ 733.819944][T29297] netlink: 'syz.3.6258': attribute type 3 has an invalid length. [ 733.849042][T29299] IPVS: set_ctl: invalid protocol: 108 172.30.0.2:20004 [ 733.951022][T29302] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 733.961597][T29302] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 734.010242][T29310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6261'. [ 734.021479][T29302] bond1: (slave xfrm1): making interface the new active one [ 734.041177][T29302] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 734.152754][T29316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6265'. [ 734.256506][T29316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6265'. [ 734.323139][T29328] openvswitch: netlink: IP tunnel TTL not specified. [ 734.366494][T29322] : entered promiscuous mode [ 734.381896][T29320] syzkaller0: entered promiscuous mode [ 734.400683][T29320] syzkaller0: entered allmulticast mode [ 734.444080][T29332] netlink: 'syz.3.6269': attribute type 83 has an invalid length. [ 734.477272][T27529] IPVS: starting estimator thread 0... [ 734.538075][T29335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6270'. [ 734.588519][T29333] IPVS: using max 26 ests per chain, 62400 per kthread [ 734.775285][T29356] __nla_validate_parse: 3 callbacks suppressed [ 734.775304][T29356] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6276'. [ 734.862754][T29356] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.870215][T29356] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.952063][T29364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6275'. [ 734.987663][T29368] netlink: 'syz.1.6279': attribute type 5 has an invalid length. [ 735.127411][T29374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.236473][T29382] Bluetooth: MGMT ver 1.23 [ 735.284333][T29384] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 735.299246][T29384] bond2: entered promiscuous mode [ 735.304409][T29384] bond2: entered allmulticast mode [ 735.310569][T29384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 735.454388][T29393] netlink: 'syz.0.6289': attribute type 39 has an invalid length. [ 735.567447][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6292'. [ 735.577518][T29405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6292'. [ 735.697329][ T8121] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.709375][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6292'. [ 735.719629][ T8121] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.739946][T29405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6292'. [ 735.771517][ T8121] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.794645][ T8121] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.007374][T29423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6296'. [ 736.085681][T29426] netlink: 'syz.4.6297': attribute type 23 has an invalid length. [ 736.153268][T29418] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 736.331668][T29439] netlink: 'syz.3.6301': attribute type 2 has an invalid length. [ 736.352837][T29444] netlink: 'syz.3.6301': attribute type 21 has an invalid length. [ 736.370140][T29442] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6302'. [ 736.382852][T29439] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6301'. [ 736.404645][T29444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6301'. [ 736.413890][T29446] xt_hashlimit: size too large, truncated to 1048576 [ 736.652371][T29456] validate_nla: 1 callbacks suppressed [ 736.652394][T29456] netlink: 'syz.0.6305': attribute type 3 has an invalid length. [ 736.838612][T29469] PKCS7: Unknown OID: [4] (bad) [ 736.843546][T29469] PKCS7: Only support pkcs7_signedData type [ 737.276327][T29502] vcan0: tx address claim with different name [ 738.228158][T29548] syzkaller0: entered promiscuous mode [ 738.248854][T29548] syzkaller0: entered allmulticast mode [ 738.393622][T29567] team0: Device gtp0 is up. Set it down before adding it as a team port [ 740.453631][T29591] pimreg3: entered allmulticast mode [ 740.893904][T29611] tipc: Enabling of bearer rejected, failed to enable media [ 740.906292][T29610] tipc: Enabling of bearer rejected, failed to enable media [ 741.013411][T29620] __nla_validate_parse: 7 callbacks suppressed [ 741.013425][T29620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6344'. [ 741.029709][T29620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6344'. [ 741.046803][T29620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6344'. [ 741.057635][T29620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6344'. [ 741.067834][T29620] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6344'. [ 741.334553][T29635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6349'. [ 741.360341][T29635] netlink: 'syz.0.6349': attribute type 7 has an invalid length. [ 741.382215][T29635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6349'. [ 741.997955][T29668] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6361'. [ 742.146580][T29685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6365'. [ 742.160899][T29690] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.6364'. [ 742.265790][T29685] vxcan2: entered allmulticast mode [ 742.514500][T29709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.570551][T29712] netlink: 'syz.0.6371': attribute type 21 has an invalid length. [ 743.212283][T29753] FAULT_INJECTION: forcing a failure. [ 743.212283][T29753] name failslab, interval 1, probability 0, space 0, times 1 [ 743.268845][T29753] CPU: 0 UID: 0 PID: 29753 Comm: syz.1.6385 Not tainted syzkaller #0 PREEMPT(full) [ 743.268875][T29753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 743.268896][T29753] Call Trace: [ 743.268906][T29753] [ 743.268915][T29753] dump_stack_lvl+0xe8/0x150 [ 743.268948][T29753] should_fail_ex+0x412/0x560 [ 743.269114][T29753] should_failslab+0xa8/0x100 [ 743.269140][T29753] __kmalloc_noprof+0xde/0x7e0 [ 743.269169][T29753] ? tls_get_rec+0xbf/0x670 [ 743.269238][T29753] tls_get_rec+0xbf/0x670 [ 743.269275][T29753] tls_sw_sendmsg+0x4ce/0x2360 [ 743.269299][T29753] ? __lock_acquire+0x6b5/0x2cf0 [ 743.269370][T29753] ? aa_file_perm+0x12d/0x1630 [ 743.269446][T29753] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 743.269477][T29753] ? __pfx_aa_sk_perm+0x10/0x10 [ 743.269518][T29753] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 743.269585][T29753] ? sock_rps_record_flow+0x19/0x400 [ 743.269639][T29753] ? inet_getname+0x3b7/0x3c0 [ 743.269672][T29753] ? inet6_sendmsg+0x101/0x120 [ 743.269715][T29753] sock_write_iter+0x323/0x550 [ 743.269790][T29753] ? __pfx_sock_write_iter+0x10/0x10 [ 743.269848][T29753] do_iter_readv_writev+0x619/0x8c0 [ 743.269877][T29753] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 743.269902][T29753] ? bpf_lsm_file_permission+0x9/0x20 [ 743.269927][T29753] ? security_file_permission+0x75/0x260 [ 743.269986][T29753] ? rw_verify_area+0x255/0x4d0 [ 743.270022][T29753] vfs_writev+0x33c/0x990 [ 743.270056][T29753] ? __pfx_vfs_writev+0x10/0x10 [ 743.270096][T29753] ? __fget_files+0x2a/0x420 [ 743.270124][T29753] ? __fget_files+0x3a0/0x420 [ 743.270153][T29753] ? __fget_files+0x2a/0x420 [ 743.270186][T29753] do_writev+0x154/0x2e0 [ 743.270212][T29753] ? __pfx_do_writev+0x10/0x10 [ 743.270249][T29753] do_syscall_64+0xe2/0xf80 [ 743.270321][T29753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.270342][T29753] ? clear_bhb_loop+0x60/0xb0 [ 743.270368][T29753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.270392][T29753] RIP: 0033:0x7f490879aeb9 [ 743.270413][T29753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.270431][T29753] RSP: 002b:00007f4909724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 743.270453][T29753] RAX: ffffffffffffffda RBX: 00007f4908a15fa0 RCX: 00007f490879aeb9 [ 743.270468][T29753] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 743.270481][T29753] RBP: 00007f4909724090 R08: 0000000000000000 R09: 0000000000000000 [ 743.270494][T29753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.270506][T29753] R13: 00007f4908a16038 R14: 00007f4908a15fa0 R15: 00007ffc43b21678 [ 743.270542][T29753] [ 743.411911][T29755] netlink: 'syz.2.6384': attribute type 1 has an invalid length. [ 743.681172][T29755] bond1: entered promiscuous mode [ 743.687951][T29755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.893278][T29772] netlink: 'syz.1.6389': attribute type 30 has an invalid length. [ 743.948144][T29778] sctp: [Deprecated]: syz.1.6389 (pid 29778) Use of int in max_burst socket option. [ 743.948144][T29778] Use struct sctp_assoc_value instead [ 744.004477][T29772] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 744.237815][T29788] sctp: [Deprecated]: syz.3.6393 (pid 29788) Use of int in max_burst socket option deprecated. [ 744.237815][T29788] Use struct sctp_assoc_value instead [ 744.300766][T29788] Unsupported ieee802154 address type: 0 [ 744.585777][T29812] openvswitch: netlink: Flow actions attr not present in new flow. [ 744.603094][T29810] macsec2: entered promiscuous mode [ 744.696756][T29819] netlink: 'syz.4.6400': attribute type 1 has an invalid length. [ 744.935667][T29822] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 745.014717][T29822] bond2 (unregistering): Released all slaves [ 745.528120][T29877] netlink: 'syz.4.6418': attribute type 1 has an invalid length. [ 745.606705][T29880] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 746.667565][T29950] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 746.674705][T29950] syzkaller1: Refused to change device type [ 746.690695][T29953] __nla_validate_parse: 23 callbacks suppressed [ 746.690715][T29953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6439'. [ 746.900682][T29962] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6442'. [ 746.904151][T29963] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6442'. [ 747.037813][ T9020] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 747.092165][ T9020] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 747.106442][T29975] xt_hashlimit: size too large, truncated to 1048576 [ 747.131907][T29965] xt_hashlimit: size too large, truncated to 1048576 [ 747.132667][ T9020] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 747.168566][T29976] IPv6: Can't replace route, no match found [ 747.184299][ T9020] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 747.204800][T29977] –: renamed from vxcan1 (while UP) [ 747.302503][T29982] syzkaller0: entered promiscuous mode [ 747.321700][T29982] syzkaller0: entered allmulticast mode [ 747.336684][T29984] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6447'. [ 747.801402][T29992] syzkaller0: entered promiscuous mode [ 747.815684][T29992] syzkaller0: entered allmulticast mode [ 749.732517][T30015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6457'. [ 750.449383][T30042] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6464'. [ 750.507122][T30048] netlink: 'syz.1.6465': attribute type 3 has an invalid length. [ 750.532474][T30048] netlink: 'syz.1.6465': attribute type 3 has an invalid length. [ 750.554300][T30048] netlink: 'syz.1.6465': attribute type 3 has an invalid length. [ 750.620820][T30055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6468'. [ 750.661889][T30055] xt_hashlimit: overflow, rate too high: 0 [ 751.039235][T30081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6477'. [ 751.059701][T30082] tipc: Enabled bearer , priority 0 [ 751.517916][T30116] netlink: 'syz.0.6488': attribute type 1 has an invalid length. [ 752.179296][T30147] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6498'. [ 752.236152][T30155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6501'. [ 752.291192][T30155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6501'. [ 752.509826][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 752.991353][T30188] netlink: 'syz.3.6513': attribute type 2 has an invalid length. [ 753.047635][T30190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6512'. [ 753.557864][T30228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6522'. [ 753.627751][T30224] bond2 (unregistering): Released all slaves [ 753.745708][T30226] veth15: entered allmulticast mode [ 753.760001][T30228] bridge_slave_1: left allmulticast mode [ 753.765941][T30228] bridge_slave_1: left promiscuous mode [ 753.778437][T30228] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.811909][T30228] bridge_slave_0: left allmulticast mode [ 753.820508][T30228] bridge_slave_0: left promiscuous mode [ 753.826337][T30228] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.937016][T30243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6524'. [ 754.080651][T30249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6527'. [ 754.237864][T30257] veth3: entered allmulticast mode [ 754.268534][T30259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6532'. [ 754.469552][T30272] netlink: 'syz.2.6533': attribute type 11 has an invalid length. [ 754.510170][T30277] netlink: 'syz.3.6537': attribute type 21 has an invalid length. [ 754.546671][T30277] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6537'. [ 754.781851][T30294] netlink: 'syz.4.6542': attribute type 21 has an invalid length. [ 754.799871][T30295] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6541'. [ 755.092957][T30309] netlink: 'syz.3.6548': attribute type 3 has an invalid length. [ 755.096948][T30310] netlink: zone id is out of range [ 755.128617][T30310] netlink: zone id is out of range [ 755.148700][T30310] netlink: zone id is out of range [ 755.153881][T30310] netlink: zone id is out of range [ 755.181210][T30310] netlink: zone id is out of range [ 755.189961][T30310] netlink: zone id is out of range [ 755.195128][T30310] netlink: zone id is out of range [ 755.220085][T30310] netlink: zone id is out of range [ 755.238766][T30310] netlink: zone id is out of range [ 755.247948][T30312] netlink: 'syz.3.6549': attribute type 83 has an invalid length. [ 755.277838][T30310] netlink: zone id is out of range [ 755.562248][T27596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 755.599128][T27596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 755.611928][T30326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.615563][T27596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 755.640075][T27596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 755.650786][T27596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.697843][T30331] macvlan2: entered promiscuous mode [ 755.731808][T30331] macvlan2: entered allmulticast mode [ 755.737715][T30331] bond2: entered allmulticast mode [ 755.748856][T30331] bond2: entered promiscuous mode [ 755.754761][T30331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 755.765922][T30331] team0: Port device macvlan2 added [ 755.943130][T30338] sit0: left allmulticast mode [ 755.960148][T30337] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 755.984156][T30338] netlink: 'syz.0.6556': attribute type 1 has an invalid length. [ 756.034575][T19588] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.056408][T19588] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 756.089988][T19588] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 756.176536][T30342] team0: Device gtp0 is up. Set it down before adding it as a team port [ 756.326982][T19588] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.378227][T19588] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 756.399324][T19588] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 756.531976][T19588] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.544754][T19588] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 756.555920][T19588] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 756.660915][T19588] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.672961][T19588] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 756.685534][T19588] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 756.965923][T30327] chnl_net:caif_netlink_parms(): no params data found [ 756.985541][T30357] lec:lec_atm_close: lec0: Shut down! [ 757.172210][T30374] netlink: 'syz.2.6563': attribute type 58 has an invalid length. [ 757.188495][T30374] __nla_validate_parse: 40 callbacks suppressed [ 757.188518][T30374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6563'. [ 757.704957][T27596] Bluetooth: hci1: command tx timeout [ 758.049315][T19588] tipc: Disabling bearer [ 758.269302][T19588] bridge0 (unregistering): left allmulticast mode [ 758.766248][T19588] bond0 (unregistering): Released all slaves [ 758.777841][T19588] bond1 (unregistering): (slave veth5): Releasing active interface [ 758.789168][T19588] bond1 (unregistering): Released all slaves [ 758.907146][T19588] bond2 (unregistering): Released all slaves [ 759.023887][T19588] bond3 (unregistering): Released all slaves [ 759.037957][T19588] bond4 (unregistering): Released all slaves [ 759.065098][T30327] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.079182][T30327] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.086902][T30327] bridge_slave_0: entered allmulticast mode [ 759.096220][T30327] bridge_slave_0: entered promiscuous mode [ 759.154064][T30327] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.193817][T30327] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.221601][T30327] bridge_slave_1: entered allmulticast mode [ 759.245532][T30327] bridge_slave_1: entered promiscuous mode [ 759.270602][T19588] 9: left promiscuous mode [ 759.296817][T30413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6569'. [ 759.367969][T30417] xt_hashlimit: size too large, truncated to 1048576 [ 759.385246][T30327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.390500][T19588] tipc: Left network mode [ 759.424722][T30327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.510023][T30327] team0: Port device team_slave_0 added [ 759.560506][T30327] team0: Port device team_slave_1 added [ 759.576322][T30423] bridge_slave_0: left allmulticast mode [ 759.585300][T30423] bridge_slave_0: left promiscuous mode [ 759.594738][T30423] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.616555][T30423] bridge_slave_1: left allmulticast mode [ 759.622743][T30423] bridge_slave_1: left promiscuous mode [ 759.631471][T30423] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.645231][T30423] bond0: (slave bond_slave_0): Releasing backup interface [ 759.665719][T30423] bond0: (slave bond_slave_1): Releasing backup interface [ 759.702126][T30423] team0: Port device team_slave_0 removed [ 759.731175][T30423] team0: Port device team_slave_1 removed [ 759.737961][T30423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.756718][T30423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.767243][T30423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.775231][T30423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.783747][T27596] Bluetooth: hci1: command tx timeout [ 759.955189][T30327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.979571][T30327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.068268][T30327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.135788][T30327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.188251][T30327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.246933][T30327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.307234][T30448] vlan2: entered promiscuous mode [ 760.319555][T30448] bridge0: entered promiscuous mode [ 760.637608][T30466] net_ratelimit: 135 callbacks suppressed [ 760.637630][T30466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 760.766111][T30327] hsr_slave_0: entered promiscuous mode [ 760.827589][T30327] hsr_slave_1: entered promiscuous mode [ 760.874356][T30327] debugfs: 'hsr0' already exists in 'hsr' [ 760.880385][T30327] Cannot create hsr debugfs directory [ 761.092232][T30481] netlink: 'syz.3.6585': attribute type 1 has an invalid length. [ 761.106826][T30481] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6585'. [ 761.197552][T19588] hsr_slave_0: left promiscuous mode [ 761.234596][T19588] hsr_slave_1: left promiscuous mode [ 761.245292][T30486] netlink: 'syz.2.6586': attribute type 16 has an invalid length. [ 761.254568][T30486] netlink: 'syz.2.6586': attribute type 17 has an invalid length. [ 761.859153][T27596] Bluetooth: hci1: command tx timeout [ 762.062445][ T9020] smc: removing ib device syz0 [ 762.361394][T19588] smc: removing net device team0 with user defined pnetid SYZ2 [ 762.457386][T30486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.676509][T30505] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6594'. [ 763.195162][T30519] netlink: 'syz.3.6599': attribute type 13 has an invalid length. [ 763.217793][T30519] netlink: 'syz.3.6599': attribute type 58 has an invalid length. [ 763.240547][T30519] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6599'. [ 763.443898][T30533] netlink: 'syz.2.6604': attribute type 1 has an invalid length. [ 763.523450][T30528] bond3: option min_links: invalid value (18446744073709551614) [ 763.602326][T30528] bond3: option min_links: allowed values 0 - 2147483647 [ 763.630075][T30528] bond3 (unregistering): Released all slaves [ 763.825625][T30533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 763.938775][T27596] Bluetooth: hci1: command tx timeout [ 763.997077][T30539] bond3: (slave gretap1): making interface the new active one [ 764.042614][T30539] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 764.354481][T30560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6608'. [ 764.785621][T30575] netlink: 'syz.3.6612': attribute type 1 has an invalid length. [ 764.875820][T30580] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6612'. [ 764.951764][T30327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 765.005938][T30327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 765.115163][T30327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 765.246839][T30327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 765.658994][T30606] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6618'. [ 765.738539][ T44] lec:lec_start_xmit: lec0:No lecd attached [ 765.755992][T30606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6618'. [ 765.995983][T30327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.021955][T30611] netlink: 'syz.0.6620': attribute type 3 has an invalid length. [ 766.095263][T30327] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.124304][T19586] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.131686][T19586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.227911][T19586] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.235230][T19586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.266236][T19588] IPVS: stop unused estimator thread 0... [ 766.600884][T30633] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 766.654850][T30633] syzkaller0: entered promiscuous mode [ 766.661332][T30633] syzkaller0: entered allmulticast mode [ 766.723221][T30640] tipc: Enabled bearer , priority 0 [ 766.839304][T30630] tipc: Resetting bearer [ 766.884074][T30648] xt_hashlimit: size too large, truncated to 1048576 [ 766.932331][T30650] xt_hashlimit: size too large, truncated to 1048576 [ 766.969713][T30630] tipc: Disabling bearer [ 767.187443][T30327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.107096][T30327] veth0_vlan: entered promiscuous mode [ 768.147087][T30327] veth1_vlan: entered promiscuous mode [ 768.262329][T30681] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 768.286326][T30327] veth0_macvtap: entered promiscuous mode [ 768.315866][T30327] veth1_macvtap: entered promiscuous mode [ 768.404901][T30327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.443569][T30327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.495035][T19586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.512132][T30694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6636'. [ 768.529966][T19586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.590596][T19586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.625235][T19586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.882328][T30704] syzkaller0: entered promiscuous mode [ 768.887871][T30704] syzkaller0: entered allmulticast mode [ 769.069198][T18347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 769.076776][T30710] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 769.078844][T30709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6642'. [ 769.098888][T18347] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 769.110601][T18347] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 769.139007][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.146899][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.155423][T18347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 769.168490][T18347] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 769.226595][T30709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6642'. [ 769.444711][T30726] macvtap1: entered promiscuous mode [ 769.451182][T30726] macvtap1: entered allmulticast mode [ 769.474993][T30726] veth1_vlan: entered allmulticast mode [ 769.497898][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.530161][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.577294][T30733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.590864][T30730] macvtap2: entered promiscuous mode [ 769.606501][T30730] macvtap2: entered allmulticast mode [ 769.671424][T30739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6647'. [ 769.937781][T30754] delete_channel: no stack [ 769.949035][T30750] sctp: [Deprecated]: syz.4.6550 (pid 30750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.949035][T30750] Use struct sctp_sack_info instead [ 770.423326][T30714] chnl_net:caif_netlink_parms(): no params data found [ 770.628684][T30782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6657'. [ 770.731832][T30782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.810974][T30782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.837507][T30782] bond0 (unregistering): Released all slaves [ 770.936958][T30714] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.944778][T30714] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.978246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 770.986763][ C1] lec:lec_tx_timeout: lec0 [ 770.993005][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 771.017341][T30714] bridge_slave_0: entered allmulticast mode [ 771.031083][T30714] bridge_slave_0: entered promiscuous mode [ 771.092438][T30795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6660'. [ 771.119608][T30796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6660'. [ 771.129449][T30714] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.136623][T30714] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.161102][T30714] bridge_slave_1: entered allmulticast mode [ 771.176993][T30714] bridge_slave_1: entered promiscuous mode [ 771.217404][T30806] xt_hashlimit: size too large, truncated to 1048576 [ 771.229477][T18347] Bluetooth: hci0: command tx timeout [ 771.249710][T30795] bond0: entered promiscuous mode [ 771.256428][T30795] bond0: entered allmulticast mode [ 771.263531][T30795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.350436][T30814] xt_hashlimit: size too large, truncated to 1048576 [ 771.397450][T30714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.411614][T30714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.504157][T30714] team0: Port device team_slave_0 added [ 771.534233][T30816] –: renamed from vxcan1 (while UP) [ 771.582916][T30714] team0: Port device team_slave_1 added [ 771.724123][T30714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.769139][T30714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.859879][T30714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.885723][T30714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.908100][T30714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.953165][T30714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.969148][T30833] tipc: Started in network mode [ 771.979035][T30833] tipc: Node identity ac14140f, cluster identity 4711 [ 771.986489][T30833] tipc: New replicast peer: 255.255.255.255 [ 771.993338][T30833] tipc: Enabled bearer , priority 10 [ 772.001387][T30836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6671'. [ 772.010700][T30837] netlink: 'syz.2.6670': attribute type 26 has an invalid length. [ 772.111102][T30714] hsr_slave_0: entered promiscuous mode [ 772.139645][T30714] hsr_slave_1: entered promiscuous mode [ 772.161962][T30714] debugfs: 'hsr0' already exists in 'hsr' [ 772.167843][T30714] Cannot create hsr debugfs directory [ 772.274861][T30854] xt_hashlimit: size too large, truncated to 1048576 [ 772.322441][T30853] GUP no longer grows the stack in syz.2.6673 (30853): 200000003000-20000000a000 (200000001000) [ 772.339554][T30853] CPU: 0 UID: 0 PID: 30853 Comm: syz.2.6673 Not tainted syzkaller #0 PREEMPT(full) [ 772.339605][T30853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 772.339628][T30853] Call Trace: [ 772.339637][T30853] [ 772.339646][T30853] dump_stack_lvl+0xe8/0x150 [ 772.339678][T30853] __get_user_pages+0x2453/0x29d0 [ 772.339730][T30853] ? __gup_longterm_locked+0xc4e/0x1630 [ 772.339760][T30853] ? down_read_killable+0x1bb/0x340 [ 772.339865][T30853] ? try_get_folio+0xec/0x650 [ 772.339900][T30853] __gup_longterm_locked+0xdcf/0x1630 [ 772.339958][T30853] gup_fast_fallback+0x1d82/0x22e0 [ 772.340025][T30853] ? __pfx_gup_fast_fallback+0x10/0x10 [ 772.340058][T30853] ? is_valid_gup_args+0x11f/0x200 [ 772.340089][T30853] ? get_user_pages_fast+0x4d/0xb0 [ 772.340122][T30853] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 772.340192][T30853] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 772.340225][T30853] iov_iter_get_pages2+0x5e/0xa0 [ 772.340260][T30853] __se_sys_vmsplice+0x7b3/0x1490 [ 772.340308][T30853] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 772.340337][T30853] ? __pfx_futex_wake+0x10/0x10 [ 772.340434][T30853] do_syscall_64+0xe2/0xf80 [ 772.340457][T30853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.340477][T30853] ? trace_irq_disable+0x37/0x100 [ 772.340497][T30853] ? clear_bhb_loop+0x60/0xb0 [ 772.340524][T30853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.340544][T30853] RIP: 0033:0x7f1cdb19aeb9 [ 772.340564][T30853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.340583][T30853] RSP: 002b:00007f1cdc0e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 772.340606][T30853] RAX: ffffffffffffffda RBX: 00007f1cdb416090 RCX: 00007f1cdb19aeb9 [ 772.340622][T30853] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 772.340636][T30853] RBP: 00007f1cdb208c1f R08: 0000000000000000 R09: 0000000000000000 [ 772.340650][T30853] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 772.340662][T30853] R13: 00007f1cdb416128 R14: 00007f1cdb416090 R15: 00007ffeb1d7ab68 [ 772.340699][T30853] [ 772.610709][T30856] xt_hashlimit: size too large, truncated to 1048576 [ 772.947536][T30866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.033140][T30866] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6677'. [ 773.042997][T30866] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6677'. [ 773.108282][T27530] tipc: Node number set to 2886997007 [ 773.301478][T18347] Bluetooth: hci0: command tx timeout [ 773.325868][T30714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 773.364484][T30714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 773.386601][T30714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 773.418917][T30714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 773.477914][T30886] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 773.629155][T30896] syzkaller0: entered promiscuous mode [ 773.634683][T30896] syzkaller0: entered allmulticast mode [ 773.996149][T30913] __nla_validate_parse: 4 callbacks suppressed [ 773.996168][T30913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6691'. [ 774.039861][T30913] netlink: 'syz.3.6691': attribute type 7 has an invalid length. [ 774.056628][T30913] netlink: 'syz.3.6691': attribute type 8 has an invalid length. [ 774.071001][T30913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6691'. [ 774.084723][T30714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.108140][T30913] team0: entered promiscuous mode [ 774.119313][T30913] team_slave_0: entered promiscuous mode [ 774.132078][T30913] team_slave_1: entered promiscuous mode [ 774.140964][T30913] bond0: entered promiscuous mode [ 774.146187][T30913] bond_slave_0: entered promiscuous mode [ 774.155539][T30913] bond_slave_1: entered promiscuous mode [ 774.156485][T30923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6692'. [ 774.166705][T30913] bond0: left promiscuous mode [ 774.176201][T30913] bond_slave_0: left promiscuous mode [ 774.183982][T30913] bond_slave_1: left promiscuous mode [ 774.196418][T30913] team0: left promiscuous mode [ 774.201717][T30913] team_slave_0: left promiscuous mode [ 774.207352][T30913] team_slave_1: left promiscuous mode [ 774.285391][T30714] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.306123][T19586] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.313384][T19586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.359331][T30926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 774.371769][T19586] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.379052][T19586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.607981][T30931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6696'. [ 774.797030][T30714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.945428][T30948] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6700'. [ 775.101673][T30956] netlink: 'syz.4.6703': attribute type 3 has an invalid length. [ 775.116223][T30956] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6703'. [ 775.300039][T30968] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6705'. [ 775.380359][T18347] Bluetooth: hci0: command tx timeout [ 775.414667][T30975] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6708'. [ 775.667157][T30984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6713'. [ 775.681997][T30984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6713'. [ 775.734906][T30714] veth0_vlan: entered promiscuous mode [ 775.742142][T30981] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 775.797465][T30714] veth1_vlan: entered promiscuous mode [ 775.875014][T30990] sock: sock_set_timeout: `syz.0.6715' (pid 30990) tries to set negative timeout [ 775.925515][T30714] veth0_macvtap: entered promiscuous mode [ 775.977713][T30714] veth1_macvtap: entered promiscuous mode [ 776.018558][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 776.026639][ C1] lec:lec_tx_timeout: lec0 [ 776.032068][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 776.081759][T30714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.093822][T30714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.140962][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.152338][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.179176][T31000] syzkaller0: entered promiscuous mode [ 776.184778][T31000] syzkaller0: entered allmulticast mode [ 776.264556][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.304767][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.344735][T31000] tipc: Started in network mode [ 776.350008][T31000] tipc: Node identity 063fd20fbeb6, cluster identity 4711 [ 776.369146][T31000] tipc: Enabled bearer , priority 0 [ 776.441071][T31006] tipc: Enabling of bearer rejected, already enabled [ 776.493580][T31016] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 776.688081][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.706068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.765268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.793428][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.810423][T30996] tipc: Resetting bearer [ 776.889983][T30996] tipc: Disabling bearer [ 777.006845][T31024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 777.070473][T31024] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 777.085727][T31024] gretap1: entered promiscuous mode [ 777.128415][T31024] gretap1: entered allmulticast mode [ 777.422576][T27531] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 777.434058][T27531] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 777.443869][T27531] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 777.454772][T27531] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 777.465270][T27531] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 777.471133][T18347] Bluetooth: hci0: command tx timeout [ 777.474621][T27531] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 777.548952][T27531] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 777.729394][T31076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.841752][T31076] +: renamed from syzkaller0 [ 777.885667][T31086] netlink: 'syz.5.6736': attribute type 4 has an invalid length. [ 777.927865][T31087] netlink: 'syz.5.6736': attribute type 4 has an invalid length. [ 778.112855][T31094] netlink: zone id is out of range [ 778.119533][T31094] netlink: zone id is out of range [ 778.124705][T31094] netlink: zone id is out of range [ 778.136219][T31098] wg1: entered promiscuous mode [ 778.145373][T31094] netlink: zone id is out of range [ 778.159794][T31094] netlink: zone id is out of range [ 778.165589][T31098] wg1: entered allmulticast mode [ 778.190635][T31094] netlink: zone id is out of range [ 778.227706][T31094] netlink: zone id is out of range [ 778.234148][T31094] netlink: zone id is out of range [ 778.239654][T31094] netlink: zone id is out of range [ 778.245267][T31094] netlink: zone id is out of range [ 778.269225][T31102] IPVS: length: 8 != 1152 [ 778.816353][T31146] delete_channel: no stack [ 778.903682][T31122] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.911478][T31122] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.270668][T31169] __nla_validate_parse: 7 callbacks suppressed [ 779.270692][T31169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6753'. [ 779.393970][ T5913] IPVS: starting estimator thread 0... [ 779.490475][T31175] IPVS: using max 26 ests per chain, 62400 per kthread [ 779.780259][T31151] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 779.819209][T31151] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 779.976778][T31211] netlink: 'syz.2.6764': attribute type 21 has an invalid length. [ 780.063560][T31151] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 780.071377][T31212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6761'. [ 780.081988][T31151] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 780.180066][T31211] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 780.234784][T31211] bond4 (unregistering): Released all slaves [ 780.401215][T31151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 780.418002][T31151] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 780.552532][T31151] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 780.574274][T31151] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 780.608695][T19588] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 780.825005][T31230] syzkaller0: entered promiscuous mode [ 780.846422][T31230] syzkaller0: entered allmulticast mode [ 780.901167][T31249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6772'. [ 780.981496][T31253] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6772'. [ 781.038204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 781.046308][ C1] lec:lec_tx_timeout: lec0 [ 781.051667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 783.273058][T31151] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 783.288432][T31151] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 783.404153][T31151] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 783.416096][T31151] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 783.429809][T31273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6775'. [ 783.490179][T31277] netlink: 'syz.4.6777': attribute type 7 has an invalid length. [ 783.533649][T31280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6775'. [ 783.977720][T31307] netlink: 1204 bytes leftover after parsing attributes in process `syz.5.6783'. [ 783.995117][T31309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6784'. [ 784.006125][T31310] º: renamed from veth1_vlan (while UP) [ 784.015960][T31309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6784'. [ 784.240369][T31318] netlink: 'syz.4.6787': attribute type 1 has an invalid length. [ 784.264135][T31318] netlink: 'syz.4.6787': attribute type 7 has an invalid length. [ 784.286898][T31318] netlink: 'syz.4.6787': attribute type 8 has an invalid length. [ 784.308077][T31318] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6787'. [ 784.355520][T31322] syz.5.6788 (31322) used obsolete PPPIOCDETACH ioctl [ 784.760025][T31354] tipc: Enabling of bearer rejected, failed to enable media [ 784.782344][T31352] tipc: Enabling of bearer rejected, failed to enable media [ 785.204073][T31380] netlink: 'syz.3.6803': attribute type 29 has an invalid length. [ 785.250542][T31380] netlink: 'syz.3.6803': attribute type 29 has an invalid length. [ 785.263132][T31380] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6803'. [ 785.398537][T31390] netlink: 'syz.2.6804': attribute type 21 has an invalid length. [ 785.429917][T31390] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6804'. [ 785.453498][T31390] netlink: 'syz.2.6804': attribute type 8 has an invalid length. [ 785.507935][T31397] Cannot find add_set index 1 as target [ 785.570324][T31397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6806'. [ 785.596789][T31397] bridge_slave_1: left allmulticast mode [ 785.624703][T31397] bridge_slave_1: left promiscuous mode [ 785.661071][T31397] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.707137][T31397] bridge_slave_0: left allmulticast mode [ 785.716110][T31397] bridge_slave_0: left promiscuous mode [ 785.751793][T31397] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.808067][T31418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6813'. [ 785.880894][T31422] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6813'. [ 785.909490][T31410] tipc: Enabled bearer , priority 11 [ 785.953473][T31418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6813'. [ 786.058185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 786.066277][ C1] lec:lec_tx_timeout: lec0 [ 786.072235][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 786.377463][T31448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6816'. [ 786.940383][T31476] Bluetooth: MGMT ver 1.23 [ 787.158710][ T9] tipc: Node number set to 3096039951 [ 787.189184][T31490] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6824'. [ 787.244823][T31492] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 787.272086][T31494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6826'. [ 787.313080][T31494] geneve2: entered promiscuous mode [ 788.476033][T31561] syzkaller1: entered promiscuous mode [ 788.482269][T31561] syzkaller1: entered allmulticast mode [ 788.805232][T31576] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 789.060393][T31587] can: request_module (can-proto-0) failed. [ 789.098076][T31594] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20004 [ 789.652455][T31619] __nla_validate_parse: 7 callbacks suppressed [ 789.652476][T31619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6855'. [ 789.886566][T31634] netlink: 'syz.4.6859': attribute type 39 has an invalid length. [ 790.074386][T31640] gtp0: entered promiscuous mode [ 790.091448][T31640] gtp0: entered allmulticast mode [ 791.033195][T31684] netlink: 'syz.2.6872': attribute type 29 has an invalid length. [ 791.042342][T31684] netlink: 'syz.2.6872': attribute type 29 has an invalid length. [ 791.055998][T31684] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6872'. [ 791.066097][T31686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6875'. [ 791.088223][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 791.090609][T31686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6875'. [ 791.096821][ C1] lec:lec_tx_timeout: lec0 [ 791.111670][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 791.174162][T31686] netlink: 'syz.3.6875': attribute type 12 has an invalid length. [ 791.222896][T31686] netlink: 'syz.3.6875': attribute type 11 has an invalid length. [ 791.567050][T31715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6881'. [ 791.874576][T31715] team0: Port device team_slave_0 removed [ 792.137961][T31750] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 792.171010][T31750] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 792.275699][T31763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6890'. [ 792.534885][T31773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6893'. [ 793.089480][T31790] netlink: 41356 bytes leftover after parsing attributes in process `syz.0.6897'. [ 793.211534][T31810] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6900'. [ 793.368109][T31818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6901'. [ 793.487309][T31823] geneve2: entered promiscuous mode [ 794.330831][T31854] vlan4: entered allmulticast mode [ 794.336039][T31854] bridge_slave_0: entered allmulticast mode [ 794.472726][T31859] wg1: entered promiscuous mode [ 794.477879][T31859] wg1: entered allmulticast mode [ 794.524354][T31862] netlink: 'syz.4.6912': attribute type 1 has an invalid length. [ 794.545559][T31862] netlink: 'syz.4.6912': attribute type 2 has an invalid length. [ 794.695491][T31869] xt_hashlimit: size too large, truncated to 1048576 [ 794.943763][T31884] __nla_validate_parse: 4 callbacks suppressed [ 794.943784][T31884] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6919'. [ 795.192763][T31892] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6920'. [ 795.223020][T31894] netlink: 'syz.4.6921': attribute type 2 has an invalid length. [ 795.243364][T31894] netlink: 'syz.4.6921': attribute type 2 has an invalid length. [ 795.270081][T31897] net_ratelimit: 378 callbacks suppressed [ 795.270101][T31897] openvswitch: netlink: IP tunnel TTL not specified. [ 795.715702][T31914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6925'. [ 795.729953][T31914] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 796.119068][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 796.127299][ C1] lec:lec_tx_timeout: lec0 [ 796.132222][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 796.140118][T31933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6929'. [ 796.197179][T31933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6929'. [ 796.222171][T31936] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6930'. [ 796.260951][T31933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6929'. [ 796.279717][T31936] openvswitch: netlink: Flow key attr not present in new flow. [ 796.291737][T31941] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6931'. [ 796.344998][T31941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.501957][T31948] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6932'. [ 797.173724][T31979] siw: device registration error -23 [ 797.194745][T31983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6944'. [ 797.773807][T32008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.855725][T32012] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 798.318998][T32009] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 798.350443][T32009] bond1 (unregistering): Released all slaves [ 798.593831][T32034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.302314][T32052] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 799.348757][T32052] syzkaller0: entered promiscuous mode [ 799.358495][T32052] syzkaller0: entered allmulticast mode [ 799.395849][T32073] netlink: 'syz.2.6958': attribute type 1 has an invalid length. [ 801.151144][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 801.159239][ C1] lec:lec_tx_timeout: lec0 [ 801.164609][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 801.572788][T32090] __nla_validate_parse: 2 callbacks suppressed [ 801.572810][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6963'. [ 801.835762][T32108] netlink: 'syz.0.6966': attribute type 10 has an invalid length. [ 801.877826][T32096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.921291][T32113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6966'. [ 801.958888][T32113] netlink: 'syz.0.6966': attribute type 5 has an invalid length. [ 801.974764][T32108] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.983458][T32113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6966'. [ 802.040269][T32108] bond0: (slave team0): Enslaving as an active interface with an up link [ 802.112612][T32120] netlink: 'syz.2.6971': attribute type 1 has an invalid length. [ 802.129405][T32116] syzkaller0: entered promiscuous mode [ 802.145270][T32116] syzkaller0: entered allmulticast mode [ 802.708007][T32148] netlink: 'syz.5.6980': attribute type 13 has an invalid length. [ 802.896736][T32155] mac80211_hwsim hwsim64 wlan0: entered promiscuous mode [ 803.297029][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6992'. [ 803.336901][T32190] Cannot find set identified by id 65535 to match [ 803.351797][T32191] syzkaller0: entered promiscuous mode [ 803.357906][T32191] syzkaller0: entered allmulticast mode [ 803.533057][T32198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6995'. [ 803.550621][T32198] hsr0: entered allmulticast mode [ 803.566698][T32198] hsr_slave_0: entered allmulticast mode [ 803.573365][T32198] hsr_slave_1: entered allmulticast mode [ 803.702396][T32208] netlink: 'syz.2.6998': attribute type 13 has an invalid length. [ 803.820091][T32217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7000'. [ 803.852190][T32208] tipc: Resetting bearer [ 803.920162][T32215] wg1: entered promiscuous mode [ 803.931612][T32215] wg1: entered allmulticast mode [ 804.071551][T32227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7003'. [ 804.089174][T32224] syzkaller1: entered promiscuous mode [ 804.104970][T32224] syzkaller1: entered allmulticast mode [ 804.260724][T32231] tipc: Enabling of bearer rejected, failed to enable media [ 804.282898][T32237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7007'. [ 804.295707][T32231] netlink: 'syz.4.7005': attribute type 6 has an invalid length. [ 804.309402][T32231] netlink: 'syz.4.7005': attribute type 6 has an invalid length. [ 804.344171][T32241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7008'. [ 804.482471][T32245] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7010'. [ 804.605962][T32252] tipc: Started in network mode [ 804.611444][T32252] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 804.629757][T32252] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 804.650068][T32252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.670841][T32252] tipc: Enabled bearer , priority 10 [ 804.788634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.866788][T32266] netlink: 'syz.4.7017': attribute type 21 has an invalid length. [ 804.928479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.068578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.208790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.306741][T32286] syzkaller0: entered promiscuous mode [ 805.320159][T32286] syzkaller0: entered allmulticast mode [ 805.348539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.488618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.628528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.768391][ T9] tipc: Node number set to 1 [ 805.790885][T32315] netlink: 'syz.2.7035': attribute type 1 has an invalid length. [ 805.879913][T32315] bond4: entered promiscuous mode [ 805.885413][T32315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 805.908865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.977216][T32317] gtp0: entered promiscuous mode [ 806.014502][T32315] bond4: (slave bridge4): making interface the new active one [ 806.041928][T32315] bridge4: entered promiscuous mode [ 806.063061][T32315] bridge4: left promiscuous mode [ 806.178376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 806.178791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.186501][ C1] lec:lec_tx_timeout: lec0 [ 806.200607][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 806.800797][T32371] bond0: option ad_select: unable to set because the bond device is up [ 806.825956][T32375] bond0: option ad_select: unable to set because the bond device is up [ 806.916541][T32388] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 806.957616][T32388] tipc: Started in network mode [ 806.975510][T32388] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 806.998457][T32388] tipc: Enabled bearer , priority 10 [ 807.013049][T32394] tipc: New replicast peer: 255.255.255.255 [ 807.021112][T32394] tipc: Enabled bearer , priority 10 [ 807.251228][T32405] __nla_validate_parse: 12 callbacks suppressed [ 807.251249][T32405] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7056'. [ 807.272680][T32408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7058'. [ 807.298848][T32408] netlink: 50 bytes leftover after parsing attributes in process `syz.4.7058'. [ 807.321634][T32408] netlink: 50 bytes leftover after parsing attributes in process `syz.4.7058'. [ 807.344244][T32411] netlink: 'syz.0.7055': attribute type 33 has an invalid length. [ 807.394961][T32401] netlink: 'syz.0.7055': attribute type 2 has an invalid length. [ 807.403286][T32401] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7055'. [ 807.467833][T32411] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 807.514258][T32422] netlink: 408 bytes leftover after parsing attributes in process `syz.5.7060'. [ 807.604914][T32411] bond3 (unregistering): Released all slaves [ 807.689951][T32424] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 808.139737][T27531] tipc: Node number set to 10005162 [ 808.283143][T32475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7074'. [ 808.466673][T32486] Cannot find add_set index 0 as target [ 808.612808][T32496] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7081'. [ 808.641185][T32498] netlink: 'syz.0.7082': attribute type 1 has an invalid length. [ 808.657939][T32500] netlink: 'syz.5.7083': attribute type 1 has an invalid length. [ 808.682114][T32502] netlink: 'syz.5.7083': attribute type 29 has an invalid length. [ 808.701950][T32498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7082'. [ 808.749369][T32498] netlink: 'syz.0.7082': attribute type 6 has an invalid length. [ 809.726440][T32547] ipt_REJECT: TCP_RESET invalid for non-tcp [ 809.744133][T32523] lec:lec_atm_close: lec0: Shut down! [ 809.858449][ C0] net_ratelimit: 6 callbacks suppressed [ 809.858467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.236466][T32574] syzkaller0: entered promiscuous mode [ 810.248689][T32574] syzkaller0: entered allmulticast mode [ 810.262676][T32576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7105'. [ 810.303872][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.333220][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.346423][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.356320][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.373421][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.384418][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.393556][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.406048][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.415413][T32581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.841889][T32611] nbd: device at index 64 is going down [ 811.050474][T31192] udevd[31192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 811.066866][T31017] udevd[31017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 811.122629][T32617] bond1 (unregistering): Released all slaves [ 811.303168][T32629] tipc: Enabled bearer , priority 0 [ 811.356305][T32629] syzkaller0: entered promiscuous mode [ 811.365040][T32629] syzkaller0: entered allmulticast mode [ 811.430599][T32633] veth3: entered allmulticast mode [ 811.450692][T32628] tipc: Resetting bearer [ 811.496199][T32628] tipc: Disabling bearer [ 811.955692][T32666] ipt_ECN: cannot use operation on non-tcp rule [ 812.156440][T32673] netlink: 'syz.2.7135': attribute type 16 has an invalid length. [ 812.177279][T32673] netlink: 'syz.2.7135': attribute type 17 has an invalid length. [ 812.349516][T32682] __nla_validate_parse: 11 callbacks suppressed [ 812.349534][T32682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7137'. [ 812.489830][T32696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7141'. [ 812.547207][T32698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7141'. [ 812.567831][T32696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7141'. [ 812.616351][T32708] bond0: entered allmulticast mode [ 812.622729][T32708] bond_slave_0: entered allmulticast mode [ 812.629091][T32708] bond_slave_1: entered allmulticast mode [ 812.865532][T32723] vlan2: entered allmulticast mode [ 812.898739][T32723] bridge_slave_0: entered allmulticast mode [ 813.202901][T32739] sctp: [Deprecated]: syz.5.7153 (pid 32739) Use of int in max_burst socket option deprecated. [ 813.202901][T32739] Use struct sctp_assoc_value instead [ 813.266395][T32741] netlink: 'syz.3.7154': attribute type 1 has an invalid length. [ 813.727054][ T301] Cannot find add_set index 0 as target [ 813.954707][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 814.043714][ T307] netlink: 'syz.4.7165': attribute type 3 has an invalid length. [ 814.053175][ T307] netlink: 'syz.4.7165': attribute type 3 has an invalid length. [ 814.246281][ T327] : entered promiscuous mode [ 814.547048][ T343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7177'. [ 814.614145][ T347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.631836][ T349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7177'. [ 814.652214][ T343] netdevsim netdevsim2: Direct firmware load for ? failed with error -2 [ 814.661137][ T343] netdevsim netdevsim2: Falling back to sysfs fallback for: ? [ 814.696137][ T352] netlink: 'syz.0.7181': attribute type 10 has an invalid length. [ 814.752705][ T352] team0: Port device dummy0 added [ 814.932529][ T360] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7184'. [ 814.954397][ T360] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7184'. [ 814.978252][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 814.986406][ C1] lec:lec_tx_timeout: lec0 [ 814.993685][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 815.058599][ C0] net_ratelimit: 48 callbacks suppressed [ 815.058618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.106340][ T372] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7188'. [ 815.196420][ T374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7189'. [ 815.301769][ T376] batadv1: entered allmulticast mode [ 815.603947][ T391] netlink: 'syz.5.7194': attribute type 1 has an invalid length. [ 815.666182][ T391] bond1: entered promiscuous mode [ 815.682442][ T391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 815.932281][ T414] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 816.108420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.141309][ T425] xt_hashlimit: size too large, truncated to 1048576 [ 816.225864][ T418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.245632][ T418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.281665][ T418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.327883][ T418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.442151][ T446] netlink: 'syz.5.7201': attribute type 4 has an invalid length. [ 817.115917][ T466] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 817.138494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.289591][ T468] bond3: option mode: invalid value (133) [ 817.302310][ T468] bond3 (unregistering): Released all slaves [ 817.319073][ T476] xt_l2tp: missing protocol rule (udp|l2tpip) [ 817.357760][T19587] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.401613][T19587] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.448420][T19587] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.468640][T19587] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.534306][ T481] __nla_validate_parse: 7 callbacks suppressed [ 817.534325][ T481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7218'. [ 817.662897][ T489] syzkaller0: entered promiscuous mode [ 817.669046][ T489] syzkaller0: entered allmulticast mode [ 817.778588][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.787434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.919394][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7222'. [ 817.972624][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7222'. [ 818.078267][ T506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7224'. [ 818.087377][ T506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7224'. [ 818.099707][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.118960][ T506] netlink: 'syz.3.7224': attribute type 15 has an invalid length. [ 818.178715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.238637][ T499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.280260][ T507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7226'. [ 818.305042][ T506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7224'. [ 818.314734][ T506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7224'. [ 818.323825][ T510] netlink: 'syz.4.7225': attribute type 4 has an invalid length. [ 818.334106][ T506] netlink: 'syz.3.7224': attribute type 15 has an invalid length. [ 818.433586][T19587] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2560 - 0 [ 818.454044][T19587] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2560 - 0 [ 818.490255][ T518] xt_cgroup: invalid path, errno=-2 [ 818.501611][T19587] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2560 - 0 [ 818.585000][T19587] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2560 - 0 [ 818.604467][ T522] netlink: 'syz.5.7230': attribute type 1 has an invalid length. [ 818.622449][ T524] x_tables: duplicate underflow at hook 1 [ 818.736166][ T522] bond2: entered promiscuous mode [ 818.747568][ T522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 818.789524][ T537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7234'. [ 818.821469][ T537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7234'. [ 819.183253][ T554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 819.218436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.332895][ T557] delete_channel: no stack [ 819.338017][ T557] delete_channel: no stack [ 819.343866][ T557] delete_channel: no stack [ 819.349665][ T557] delete_channel: no stack [ 819.357542][ T557] delete_channel: no stack [ 819.395980][ T557] delete_channel: no stack [ 819.430944][ T557] delete_channel: no stack [ 819.454321][ T557] delete_channel: no stack [ 819.500920][ T557] delete_channel: no stack [ 819.505600][ T557] delete_channel: no stack [ 819.545205][ T557] delete_channel: no stack [ 819.559929][ T557] delete_channel: no stack [ 819.568022][ T557] delete_channel: no stack [ 819.601458][ T557] delete_channel: no stack [ 819.862235][ T586] xt_l2tp: v2 tid > 0xffff: 1114244 [ 819.998923][ T593] syzkaller0: entered promiscuous mode [ 820.004485][ T593] syzkaller0: entered allmulticast mode [ 820.025138][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 820.033250][ C1] lec:lec_tx_timeout: lec0 [ 820.038074][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 820.258557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.608019][ T621] nbd: couldn't find a device at index 0 [ 820.943072][ T643] x_tables: duplicate underflow at hook 2 [ 820.978004][ T644] netlink: 'syz.0.7267': attribute type 4 has an invalid length. [ 820.986556][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.040471][ T644] `: renamed from bond0 (while UP) [ 821.276782][ T663] x_tables: unsorted underflow at hook 2 [ 821.298802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.570840][ T685] netlink: 'syz.0.7275': attribute type 2 has an invalid length. [ 821.587161][ T685] netlink: 'syz.0.7275': attribute type 2 has an invalid length. [ 821.767743][ T700] netlink: 'syz.0.7281': attribute type 1 has an invalid length. [ 822.145995][ T718] nbd: couldn't find a device at index 0 [ 822.254338][ T716] team0: Caught tx_queue_len zero misconfig [ 822.338720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.361939][ T8169] IPVS: starting estimator thread 0... [ 822.458317][ T729] IPVS: using max 27 ests per chain, 64800 per kthread [ 822.519947][ T734] lo: Caught tx_queue_len zero misconfig [ 822.534311][ T734] syzkaller1: entered promiscuous mode [ 822.547862][ T734] syzkaller1: entered allmulticast mode [ 822.905164][ T755] netlink: 'syz.5.7298': attribute type 29 has an invalid length. [ 822.913797][ T755] __nla_validate_parse: 18 callbacks suppressed [ 822.913817][ T755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7298'. [ 822.964038][ T762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7298'. [ 823.045847][ T771] netlink: 'syz.0.7302': attribute type 2 has an invalid length. [ 823.193475][ T779] lo speed is unknown, defaulting to 1000 [ 823.202621][ T779] lo speed is unknown, defaulting to 1000 [ 823.211611][ T779] lo speed is unknown, defaulting to 1000 [ 823.258912][ T781] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7307'. [ 823.378563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.402831][ T792] xt_hashlimit: size too large, truncated to 1048576 [ 823.583917][ T779] infiniband syz0: set active [ 823.588892][ T8169] lo speed is unknown, defaulting to 1000 [ 823.594764][ T779] infiniband syz0: added lo [ 823.659562][ T779] RDS/IB: syz0: added [ 823.663668][ T779] smc: adding ib device syz0 with port count 1 [ 823.680246][ T779] smc: ib device syz0 port 1 has no pnetid [ 823.686454][ T8169] lo speed is unknown, defaulting to 1000 [ 823.693908][ T779] lo speed is unknown, defaulting to 1000 [ 823.755511][ T806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7312'. [ 824.071264][ T814] netlink: 'syz.0.7315': attribute type 1 has an invalid length. [ 824.171621][ T814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.202947][ T779] lo speed is unknown, defaulting to 1000 [ 824.418652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.455864][ T827] netlink: 6 bytes leftover after parsing attributes in process `syz.5.7314'. [ 824.645686][ T779] lo speed is unknown, defaulting to 1000 [ 824.667512][ T833] netlink: 'syz.3.7320': attribute type 1 has an invalid length. [ 824.675717][ T834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7320'. [ 824.692529][ T834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7320'. [ 824.722168][ T833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 824.824698][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.833141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.049029][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 825.057186][ C1] lec:lec_tx_timeout: lec0 [ 825.062289][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 825.459729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.472657][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.481660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.492629][ T8146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.544987][ T779] lo speed is unknown, defaulting to 1000 [ 825.594699][ T870] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7328'. [ 825.739449][ T846] erspan0: entered promiscuous mode [ 825.744958][ T846] erspan0: entered allmulticast mode [ 825.827998][ T877] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7330'. [ 825.869409][ T877] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 825.969195][ T861] lo speed is unknown, defaulting to 1000 [ 826.099665][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.400073][ T893] netlink: 'syz.4.7336': attribute type 11 has an invalid length. [ 826.407953][ T893] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7336'. [ 826.424301][ T779] lo speed is unknown, defaulting to 1000 [ 826.498527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.136698][ T779] lo speed is unknown, defaulting to 1000 [ 827.443687][ T935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.523156][ T952] IPv6: sit1: Disabled Multicast RS [ 827.538975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.539188][ T952] sit1: entered allmulticast mode [ 827.649322][ T779] lo speed is unknown, defaulting to 1000 [ 827.676741][ T957] syzkaller0: entered promiscuous mode [ 827.698635][ T957] syzkaller0: entered allmulticast mode [ 828.268546][ T779] lo speed is unknown, defaulting to 1000 [ 828.482576][ T993] __nla_validate_parse: 2 callbacks suppressed [ 828.482596][ T993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7356'. [ 828.502661][ T993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7356'. [ 828.588600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.659066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.668409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.839387][ T1007] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 828.973874][ T779] lo speed is unknown, defaulting to 1000 [ 829.271135][ T1026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7369'. [ 829.319591][ T1026] syzkaller0: entered promiscuous mode [ 829.325129][ T1026] syzkaller0: entered allmulticast mode [ 829.515274][ T779] lo speed is unknown, defaulting to 1000 [ 830.078211][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 830.086271][ C1] lec:lec_tx_timeout: lec0 [ 830.092153][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 830.132657][ T1054] netlink: 'syz.3.7374': attribute type 21 has an invalid length. [ 830.156814][ T1054] netlink: 'syz.3.7374': attribute type 1 has an invalid length. [ 830.208088][ T1056] syzkaller1: entered promiscuous mode [ 830.218315][ T1056] syzkaller1: entered allmulticast mode [ 830.475344][ T1065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7374'. [ 830.595597][ T1074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7377'. [ 830.658465][ C0] net_ratelimit: 4 callbacks suppressed [ 830.658487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.704859][ T1075] netlink: 'syz.4.7377': attribute type 6 has an invalid length. [ 830.742100][ T1075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.752138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.770648][ T1079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7379'. [ 830.829447][ T1080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7378'. [ 831.056377][ T1082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7380'. [ 831.218736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.270452][ T1104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7386'. [ 831.417918][ T1113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7389'. [ 831.428927][ T8146] IPVS: starting estimator thread 0... [ 831.489867][ T1117] ip6gre1: entered allmulticast mode [ 831.528334][ T1115] IPVS: using max 28 ests per chain, 67200 per kthread [ 831.536011][ T1122] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 831.568965][ T1121] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 831.698460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.771619][ T1138] netlink: 'syz.0.7395': attribute type 1 has an invalid length. [ 831.788922][ T1133] netlink: 'syz.0.7395': attribute type 1 has an invalid length. [ 831.861347][T27528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.869905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.894926][ T1138] bond3: entered promiscuous mode [ 831.922117][ T1138] bond3: entered allmulticast mode [ 831.950404][ T1138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 832.060331][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.175362][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.222986][ T1155] ip_vti0: entered promiscuous mode [ 832.738467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.095664][ T9020] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.106490][ T9020] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.121520][ T9020] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.158515][ T9020] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.168674][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.591060][ T1243] can: request_module (can-proto-3) failed. [ 833.634765][ T1243] __nla_validate_parse: 12 callbacks suppressed [ 833.634786][ T1243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7433'. [ 833.659178][ T1243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7433'. [ 833.927427][ T1262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7437'. [ 833.944401][ T1262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7437'. [ 833.955558][ T1262] netlink: 312 bytes leftover after parsing attributes in process `syz.4.7437'. [ 834.259911][ T1256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7435'. [ 834.275201][ T1279] IPVS: length: 66 != 8 [ 834.706479][ T1307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7447'. [ 834.730886][ T1300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7447'. [ 834.778725][ T1306] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7446'. [ 834.939470][ T1325] netlink: 'syz.5.7453': attribute type 4 has an invalid length. [ 834.948270][ T1325] netlink: 193176 bytes leftover after parsing attributes in process `syz.5.7453'. [ 835.013243][ T1331] IPv6: sit1: Disabled Multicast RS [ 835.021974][ T1331] sit1: entered allmulticast mode [ 835.108275][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 835.116554][ C1] lec:lec_tx_timeout: lec0 [ 835.121561][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 835.184671][ T1339] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 835.430017][ T1351] netlink: 'syz.4.7460': attribute type 29 has an invalid length. [ 835.474216][ T1351] netlink: 'syz.4.7460': attribute type 29 has an invalid length. [ 835.562733][ T1362] nbd: couldn't find a device at index 2 [ 835.703318][T27531] net_ratelimit: 14 callbacks suppressed [ 835.703340][T27531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.783896][ T1372] bond2 (unregistering): Released all slaves [ 835.862291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.959199][ T1384] netlink: 'syz.4.7472': attribute type 3 has an invalid length. [ 836.105602][ T1386] syzkaller0: entered promiscuous mode [ 836.112523][ T1386] syzkaller0: entered allmulticast mode [ 836.178635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.340223][T27531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.908586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.941637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.627449][ T1419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.758072][ T1427] __nla_validate_parse: 8 callbacks suppressed [ 838.758094][ T1427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7486'. [ 838.900676][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.909403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.978419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.124279][ T1448] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7491'. [ 839.154162][ T1451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7494'. [ 839.175091][ T1452] netlink: 284 bytes leftover after parsing attributes in process `syz.5.7491'. [ 839.201576][ T1450] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7494'. [ 839.224456][ T1455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7496'. [ 839.290131][ T1460] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7496'. [ 839.346651][ T1460] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7496'. [ 839.389100][ T1460] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7496'. [ 839.642247][ T1473] xt_time: unknown flags 0xf4 [ 839.669422][ T1476] bond0: left promiscuous mode [ 839.674387][ T1476] bond0: left allmulticast mode [ 839.828476][ T1484] ip6tnl0: Caught tx_queue_len zero misconfig [ 839.844813][ T1484] IPv6: NLM_F_CREATE should be specified when creating new route [ 839.859864][ T1484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 839.867170][ T1484] IPv6: NLM_F_CREATE should be set when creating new route [ 839.874546][ T1484] IPv6: NLM_F_CREATE should be set when creating new route [ 839.892237][ T1487] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7505'. [ 840.128944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 840.137016][ C1] lec:lec_tx_timeout: lec0 [ 840.148828][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 840.328696][ T1506] nbd: couldn't find a device at index 0 [ 840.346475][ T1505] nbd: couldn't find a device at index 0 [ 840.439103][ T1508] bond6: entered promiscuous mode [ 840.467141][ T1508] bond6: entered allmulticast mode [ 840.500702][ T1508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 840.738981][ C1] net_ratelimit: 4 callbacks suppressed [ 840.739003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.775729][ T1532] netlink: 'syz.3.7520': attribute type 7 has an invalid length. [ 840.825664][ T1532] netlink: 'syz.3.7520': attribute type 8 has an invalid length. [ 840.938088][ T1537] netlink: 'syz.0.7521': attribute type 7 has an invalid length. [ 841.058416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.100681][ T1544] netlink: 'syz.3.7524': attribute type 1 has an invalid length. [ 841.120583][ T1550] netlink: 'syz.2.7526': attribute type 1 has an invalid length. [ 841.153742][ T1553] netlink: 'syz.0.7527': attribute type 5 has an invalid length. [ 841.222098][ T1550] 8021q: adding VLAN 0 to HW filter on device bond7 [ 841.371881][ T1561] syzkaller0: entered promiscuous mode [ 841.377495][ T1561] syzkaller0: entered allmulticast mode [ 841.415048][ T1570] netlink: 'syz.0.7530': attribute type 1 has an invalid length. [ 841.903597][ T1589] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 842.098713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.410235][ T1624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.430004][ T1624] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 842.475966][ T1630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.484881][ T1630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.515692][ T1630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.583672][ T1636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.955920][ T1654] netlink: 'syz.0.7560': attribute type 2 has an invalid length. [ 843.257701][ T1667] netlink: 'syz.3.7567': attribute type 1 has an invalid length. [ 843.513686][ T1676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 843.834810][ T1697] __nla_validate_parse: 9 callbacks suppressed [ 843.834831][ T1697] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.7578'. [ 843.920906][ T1703] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.7579'. [ 844.031636][ T1705] netlink: 'syz.0.7580': attribute type 1 has an invalid length. [ 844.133552][ T1705] bond4: (slave ip6gretap1): making interface the new active one [ 844.157286][ T1705] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 844.423735][ T1718] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7585'. [ 844.835407][ T1742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7593'. [ 844.875871][ T1744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7595'. [ 844.888082][ T1744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7595'. [ 845.032721][ T1748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7598'. [ 845.086116][ T1751] tls_set_device_offload: netdev not found [ 845.142460][ T1756] bridge_slave_0: invalid flags given to default FDB implementation [ 845.158978][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 845.167053][ C1] lec:lec_tx_timeout: lec0 [ 845.172484][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 845.450440][ T1774] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7605'. [ 845.697449][ T1787] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7609'. [ 845.939146][ T9] net_ratelimit: 8 callbacks suppressed [ 845.939168][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.952998][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.962565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.001078][ T1804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7615'. [ 846.268518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.720714][ T1819] validate_nla: 1 callbacks suppressed [ 846.720733][ T1819] netlink: 'syz.0.7616': attribute type 6 has an invalid length. [ 846.736348][ T1819] netlink: 'syz.0.7616': attribute type 5 has an invalid length. [ 847.301179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.348411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.563650][ T1846] x_tables: duplicate underflow at hook 3 [ 848.791556][ T1864] netlink: 'syz.5.7629': attribute type 5 has an invalid length. [ 848.850580][ T1867] __nla_validate_parse: 4 callbacks suppressed [ 848.850602][ T1867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7629'. [ 848.888016][ T1867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7629'. [ 848.911940][ T1864] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7629'. [ 848.967180][ T1855] team0: Port device team_slave_0 removed [ 849.104440][ T1864] geneve2: entered promiscuous mode [ 849.113219][ T1864] geneve2: entered allmulticast mode [ 849.134896][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 849.238874][ T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 849.247651][ T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 849.309956][ T37] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 849.333204][ T1889] openvswitch: netlink: EtherType 50a is less than min 600 [ 849.378494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.525770][ T1903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 849.852984][ T1922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.018110][ T1926] bond4: entered promiscuous mode [ 850.023900][ T1926] bond4: entered allmulticast mode [ 850.030045][ T1926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 850.189331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 850.197421][ C1] lec:lec_tx_timeout: lec0 [ 850.202919][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 850.607950][ T1959] tipc: Enabling of bearer rejected, already enabled [ 851.056156][ T1988] netlink: 'syz.5.7657': attribute type 1 has an invalid length. [ 851.458480][ C0] net_ratelimit: 55 callbacks suppressed [ 851.458503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.496056][ T2007] IPVS: Error connecting to the multicast addr [ 851.559443][ T2009] x_tables: duplicate underflow at hook 2 [ 851.780684][ T2022] netlink: 'syz.0.7670': attribute type 1 has an invalid length. [ 851.886856][ T2027] bond5: (slave gretap1): making interface the new active one [ 851.895856][ T2027] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 852.164309][ T2052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7679'. [ 852.498557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.521471][ T2073] netlink: 'syz.3.7684': attribute type 1 has an invalid length. [ 852.535776][ T2073] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7684'. [ 852.739479][ T2085] syzkaller0: entered promiscuous mode [ 852.759036][ T2085] syzkaller0: entered allmulticast mode [ 852.778694][ T2080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7687'. [ 852.792358][ T2085] 0: reclassify loop, rule prio 0, protocol 800 [ 852.829128][ T2080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 852.983180][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.991651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.162321][ T2095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7692'. [ 853.538410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.589903][ T2117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7696'. [ 853.643933][ T2117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7696'. [ 853.975440][ T2116] ip_vti0: left promiscuous mode [ 854.650957][ T2116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.099741][ T2116] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 855.230547][ T2116] ip6gre1: left allmulticast mode [ 855.307023][ T2146] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 855.330329][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.370047][ T8121] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.395493][ T8121] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.414772][ T8121] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.440672][ T2151] netlink: 'syz.4.7705': attribute type 2 has an invalid length. [ 855.451557][ T2151] netlink: 'syz.4.7705': attribute type 11 has an invalid length. [ 855.460696][ T2151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7705'. [ 856.018411][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 856.026535][ C1] lec:lec_tx_timeout: lec0 [ 856.032066][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 856.647968][ T2121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.191560][ T2187] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 857.320702][ T2191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7722'. [ 857.357065][ T2191] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7722'. [ 857.393138][ T2191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7722'. [ 857.402771][ T2191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7722'. [ 857.511551][ T2204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7724'. [ 857.540249][ T2204] openvswitch: netlink: Unknown nsh attribute 0 [ 857.587346][ T2209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7726'. [ 857.589878][ T2213] netlink: 'syz.5.7727': attribute type 26 has an invalid length. [ 857.606306][ T2213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7727'. [ 857.620351][ T2213] netlink: 'syz.5.7727': attribute type 26 has an invalid length. [ 857.642253][ T2213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7727'. [ 857.788041][ T2219] ipvlan2: entered allmulticast mode [ 857.794976][ T2219] batadv_slave_1: entered allmulticast mode [ 857.803441][ T2219] batman_adv: batadv0: Adding interface: ipvlan2 [ 857.823286][ T2219] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.876530][ T2219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.889214][ T2219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.901042][ T2219] batman_adv: batadv0: Interface activated: ipvlan2 [ 858.122718][ T2233] netlink: 'syz.0.7734': attribute type 10 has an invalid length. [ 858.132912][ T2234] sock: sock_set_timeout: `syz.3.7733' (pid 2234) tries to set negative timeout [ 858.174282][ T2239] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.7735'. [ 858.175224][ T2233] batman_adv: batadv0: Adding interface: netdevsim0 [ 858.198913][ T2233] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.244520][ T2233] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 858.786072][ T2270] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 858.820759][ T2270] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 858.843042][ T2270] gretap3: entered promiscuous mode [ 858.854833][ T2270] gretap3: entered allmulticast mode [ 858.965590][ T2282] xt_TPROXY: Can be used only with -p tcp or -p udp [ 858.993842][ T2282] netlink: 'syz.2.7746': attribute type 1 has an invalid length. [ 859.239174][ T2277] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.247013][ T2277] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.283795][ T2277] bond0: left allmulticast mode [ 859.295566][ T2277] bond_slave_0: left allmulticast mode [ 859.302012][ T2277] bond_slave_1: left allmulticast mode [ 859.480457][ T2277] wg1: left promiscuous mode [ 859.485104][ T2277] wg1: left allmulticast mode [ 859.560595][ T2277] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 859.655540][ T2286] bond8 (unregistering): Released all slaves [ 859.686963][ T2287] tap0: tun_chr_ioctl cmd 1074025676 [ 859.700835][ T2287] tap0: owner set to 0 [ 859.746579][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 859.757050][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 859.779896][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 859.974010][ T2298] netlink: 'syz.2.7751': attribute type 1 has an invalid length. [ 860.194569][ T2291] infiniband syz2: set down [ 860.218757][ T2291] infiniband syz2: added vxcan1 [ 860.230946][ T2298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 860.250221][ T2138] vxcan1 speed is unknown, defaulting to 1000 [ 860.273763][ T2317] netlink: 'syz.4.7754': attribute type 12 has an invalid length. [ 860.410687][ T2321] openvswitch: netlink: Flow actions attr not present in new flow. [ 860.454257][ T2291] RDS/IB: syz2: added [ 860.469385][ T2327] IPVS: stopping master sync thread 2328 ... [ 860.476833][ T2291] smc: adding ib device syz2 with port count 1 [ 860.486619][ T2328] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 860.512366][ T2291] smc: ib device syz2 port 1 has no pnetid [ 860.532806][T27523] vxcan1 speed is unknown, defaulting to 1000 [ 860.542568][ T2323] lo: entered allmulticast mode [ 860.547628][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 860.557207][ T2323] lo: left allmulticast mode [ 860.722702][ T2334] netlink: 'syz.4.7760': attribute type 8 has an invalid length. [ 860.766769][ T2138] IPVS: starting estimator thread 0... [ 860.860494][ T2339] IPVS: using max 25 ests per chain, 60000 per kthread [ 860.980801][ T2350] __nla_validate_parse: 4 callbacks suppressed [ 860.980825][ T2350] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7762'. [ 861.031616][ T2341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7761'. [ 861.041297][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 861.041334][ C1] lec:lec_tx_timeout: lec0 [ 861.050226][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 861.095367][ T2341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7761'. [ 861.105893][ T2350] bond6 (unregistering): Released all slaves [ 861.227085][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 861.536875][ T2367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7766'. [ 861.551749][ T2368] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7766'. [ 861.691881][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 861.715847][ T2376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7768'. [ 861.933719][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 862.094343][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 862.249899][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 862.412237][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 862.568736][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 862.727294][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 862.887199][ T2291] vxcan1 speed is unknown, defaulting to 1000 [ 863.119572][ T2381] xt_l2tp: missing protocol rule (udp|l2tpip) [ 863.185200][ T2383] netlink: 'syz.3.7771': attribute type 1 has an invalid length. [ 863.256148][ T2383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 863.268082][ T2383] bond5: (slave bond6): making interface the new active one [ 863.281511][ T2383] bond5: (slave bond6): Enslaving as an active interface with an up link [ 863.299649][ T2335] infiniband : set down [ 863.304283][ T2335] infiniband : added ipvlan0 [ 863.311527][ T2335] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 863.313528][ T2335] infiniband : Couldn't open port 1 [ 863.352691][ T2335] RDS/IB: : added [ 863.356614][ T2335] smc: adding ib device  with port count 1 [ 863.419295][ T2335] smc: ib device  port 1 has no pnetid [ 864.279775][ T2428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7782'. [ 864.306396][ T2428] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 864.491138][ T2448] netlink: 'syz.3.7784': attribute type 4 has an invalid length. [ 864.596362][ T2452] netlink: 'syz.0.7787': attribute type 1 has an invalid length. [ 864.666675][ T2452] 8021q: adding VLAN 0 to HW filter on device bond6 [ 864.973527][ T2469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7790'. [ 865.270167][ T2483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7794'. [ 865.310230][ T2482] bond3: option mode: invalid value (23) [ 865.353555][ T2482] bond3 (unregistering): Released all slaves [ 865.405700][ T2489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7797'. [ 865.509240][ T9020] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.540987][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.566409][ T37] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.593465][ T37] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.610693][ T2499] netlink: 'syz.3.7800': attribute type 11 has an invalid length. [ 865.946600][ T2513] [ 865.948999][ T2513] ====================================================== [ 865.956061][ T2513] WARNING: possible circular locking dependency detected [ 865.963091][ T2513] syzkaller #0 Not tainted [ 865.967513][ T2513] ------------------------------------------------------ [ 865.974629][ T2513] syz.3.7803/2513 is trying to acquire lock: [ 865.980622][ T2513] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 865.989937][ T2513] [ 865.989937][ T2513] but task is already holding lock: [ 865.997324][ T2513] ffff8880279d2070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 866.006588][ T2513] [ 866.006588][ T2513] which lock already depends on the new lock. [ 866.006588][ T2513] [ 866.017029][ T2513] [ 866.017029][ T2513] the existing dependency chain (in reverse order) is: [ 866.026076][ T2513] [ 866.026076][ T2513] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 866.034105][ T2513] _raw_spin_lock_bh+0x36/0x50 [ 866.039512][ T2513] nr_rt_device_down+0x153/0x860 [ 866.045049][ T2513] nr_device_event+0x137/0x150 [ 866.050363][ T2513] notifier_call_chain+0x19d/0x3a0 [ 866.056166][ T2513] __dev_notify_flags+0x16d/0x310 [ 866.059602][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 866.061786][ T2513] netif_change_flags+0xe8/0x1a0 [ 866.069903][ C1] lec:lec_tx_timeout: lec0 [ 866.075239][ T2513] dev_change_flags+0x130/0x260 [ 866.085036][ T2513] dev_ioctl+0x7b4/0x1150 [ 866.088509][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 866.089983][ T2513] sock_do_ioctl+0x23e/0x320 [ 866.101007][ T2513] sock_ioctl+0x5c6/0x7f0 [ 866.105888][ T2513] __se_sys_ioctl+0xfc/0x170 [ 866.111025][ T2513] do_syscall_64+0xe2/0xf80 [ 866.116170][ T2513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.122624][ T2513] [ 866.122624][ T2513] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 866.130494][ T2513] _raw_spin_lock_bh+0x36/0x50 [ 866.135826][ T2513] nr_rt_device_down+0xbe/0x860 [ 866.141316][ T2513] nr_device_event+0x137/0x150 [ 866.147158][ T2513] notifier_call_chain+0x19d/0x3a0 [ 866.152812][ T2513] __dev_notify_flags+0x16d/0x310 [ 866.158380][ T2513] netif_change_flags+0xe8/0x1a0 [ 866.163869][ T2513] dev_change_flags+0x130/0x260 [ 866.169267][ T2513] dev_ioctl+0x7b4/0x1150 [ 866.174143][ T2513] sock_do_ioctl+0x23e/0x320 [ 866.179276][ T2513] sock_ioctl+0x5c6/0x7f0 [ 866.184161][ T2513] __se_sys_ioctl+0xfc/0x170 [ 866.189310][ T2513] do_syscall_64+0xe2/0xf80 [ 866.194358][ T2513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.200789][ T2513] [ 866.200789][ T2513] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 866.208733][ T2513] __lock_acquire+0x15a5/0x2cf0 [ 866.214230][ T2513] lock_acquire+0x106/0x330 [ 866.219276][ T2513] _raw_spin_lock_bh+0x36/0x50 [ 866.224594][ T2513] nr_rt_ioctl+0x40c/0xf90 [ 866.229560][ T2513] sock_do_ioctl+0x101/0x320 [ 866.234865][ T2513] sock_ioctl+0x5c6/0x7f0 [ 866.239849][ T2513] __se_sys_ioctl+0xfc/0x170 [ 866.244998][ T2513] do_syscall_64+0xe2/0xf80 [ 866.250053][ T2513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.256514][ T2513] [ 866.256514][ T2513] other info that might help us debug this: [ 866.256514][ T2513] [ 866.266792][ T2513] Chain exists of: [ 866.266792][ T2513] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 866.266792][ T2513] [ 866.280743][ T2513] Possible unsafe locking scenario: [ 866.280743][ T2513] [ 866.288215][ T2513] CPU0 CPU1 [ 866.293621][ T2513] ---- ---- [ 866.299025][ T2513] lock(&nr_node->node_lock); [ 866.303826][ T2513] lock(nr_node_list_lock); [ 866.310963][ T2513] lock(&nr_node->node_lock); [ 866.318271][ T2513] lock(nr_neigh_list_lock); [ 866.322993][ T2513] [ 866.322993][ T2513] *** DEADLOCK *** [ 866.322993][ T2513] [ 866.331156][ T2513] 2 locks held by syz.3.7803/2513: [ 866.336291][ T2513] #0: ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 866.345891][ T2513] #1: ffff8880279d2070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 866.355597][ T2513] [ 866.355597][ T2513] stack backtrace: [ 866.361518][ T2513] CPU: 0 UID: 0 PID: 2513 Comm: syz.3.7803 Not tainted syzkaller #0 PREEMPT(full) [ 866.361545][ T2513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 866.361556][ T2513] Call Trace: [ 866.361564][ T2513] [ 866.361574][ T2513] dump_stack_lvl+0xe8/0x150 [ 866.361601][ T2513] print_circular_bug+0x2e1/0x300 [ 866.361624][ T2513] check_noncircular+0x12e/0x150 [ 866.361644][ T2513] __lock_acquire+0x15a5/0x2cf0 [ 866.361679][ T2513] ? nr_rt_ioctl+0x40c/0xf90 [ 866.361706][ T2513] lock_acquire+0x106/0x330 [ 866.361729][ T2513] ? nr_rt_ioctl+0x40c/0xf90 [ 866.361754][ T2513] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 866.361775][ T2513] ? nr_rt_ioctl+0x40c/0xf90 [ 866.361797][ T2513] _raw_spin_lock_bh+0x36/0x50 [ 866.361823][ T2513] ? nr_rt_ioctl+0x40c/0xf90 [ 866.361845][ T2513] nr_rt_ioctl+0x40c/0xf90 [ 866.361874][ T2513] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 866.361901][ T2513] ? apparmor_capable+0x137/0x1a0 [ 866.361929][ T2513] ? capable+0x88/0xe0 [ 866.361944][ T2513] ? nr_ioctl+0x1b1/0x3b0 [ 866.361964][ T2513] sock_do_ioctl+0x101/0x320 [ 866.361982][ T2513] ? __pfx_sock_do_ioctl+0x10/0x10 [ 866.361996][ T2513] ? do_futex+0x333/0x420 [ 866.362025][ T2513] sock_ioctl+0x5c6/0x7f0 [ 866.362051][ T2513] ? __pfx_sock_ioctl+0x10/0x10 [ 866.362076][ T2513] ? __fget_files+0x2a/0x420 [ 866.362095][ T2513] ? __fget_files+0x3a0/0x420 [ 866.362119][ T2513] ? __fget_files+0x2a/0x420 [ 866.362139][ T2513] ? bpf_lsm_file_ioctl+0x9/0x20 [ 866.362160][ T2513] ? __pfx_sock_ioctl+0x10/0x10 [ 866.362185][ T2513] __se_sys_ioctl+0xfc/0x170 [ 866.362210][ T2513] do_syscall_64+0xe2/0xf80 [ 866.362228][ T2513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.362245][ T2513] ? trace_irq_disable+0x37/0x100 [ 866.362261][ T2513] ? clear_bhb_loop+0x60/0xb0 [ 866.362280][ T2513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.362297][ T2513] RIP: 0033:0x7f55e6d9aeb9 [ 866.362314][ T2513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.362329][ T2513] RSP: 002b:00007f55e7cb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.362355][ T2513] RAX: ffffffffffffffda RBX: 00007f55e7015fa0 RCX: 00007f55e6d9aeb9 [ 866.362369][ T2513] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006 [ 866.362380][ T2513] RBP: 00007f55e6e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 866.362391][ T2513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.362401][ T2513] R13: 00007f55e7016038 R14: 00007f55e7015fa0 R15: 00007fff41b5d7e8 [ 866.362422][ T2513] [ 866.634761][ T2513] __nla_validate_parse: 2 callbacks suppressed [ 866.634779][ T2513] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7803'. [ 871.098618][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 871.106895][ C1] lec:lec_tx_timeout: lec0 [ 871.112009][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 875.382968][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL