last executing test programs: 4.722956606s ago: executing program 0 (id=12046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="23000000050091afc8409774318cc02fabeca2ab1fab5b500000056d1f5beb070dcdba2ba6c13cd78e53d80e00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1ab7153d16fdd34ffecdbc285c3ff8ff00000000bfa100000000000007010000f8ffffffb702000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r6) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 4.444930814s ago: executing program 3 (id=12050): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000640)={0x0, r2, 0xffffffff, 0x80000004, 0x926, 0x80}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRES8=r4], 0x68}}, 0x48810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a0000000300000000000000000000000000000105000000200000020000000000000003000000000200000002000000000000000061002e2e61610061005f"], 0x0, 0x64, 0x0, 0x1}, 0x28) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="80000040", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25020000003c00068008000300ffffffff060005004e200000050002000b00000008000300ac1414aa08000300ac1414bb5dd952dc774f8cf408000600160000000800020004000000080004000600000020000180050002000700000014000400fe880000000000000000000000000101"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000480)={0x0, r5, 0x6, 0x2, 0x6, 0x6}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x1}}}, 0x32) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xb, @sctp_ip6_spec={@loopback, @private2, 0x4e24, 0x8, 0xf}, {0x0, @multicast, 0xff74, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@local, @rand_addr=0x64010101, 0x3, 0x5}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x6, 0x5, [0x7, 0x4]}, 0xff, 0xffffffff}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x3, 0x1, 0x3}}, 0x2e) (async) socket$kcm(0x29, 0x0, 0x0) 4.044281711s ago: executing program 4 (id=12053): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x10, 0x1}, {0x3, 0x3}, {0x6, 0x5}, {0xc}]}]}}, &(0x7f0000000f40)=""/4086, 0x46, 0xff6, 0x8}, 0x28) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="00032bbd7000fcdbdf2509000000340003801400020076657468315f746f5f627269646765001400060000000000000000000000000000000000080003000000000038000180090006006c626c6300000000140003007f0000010000000000000000000000000c000700210000001e0000000800050001000000e127aea9623341411fc12ddc7056ee9a34dd0e7a6b197545e5dc5f14c7976d2ee3489ea7b80756f5f43c77227b77d5f774ef987629f3feb1ce3eb5e67d9b9e7295701f01c845cf5b9eb9392b4777b49a1610398e6daed7adf1c484498ef98e6080e5dcdf1b6f12638ffffd667ecdd2f46b2bf39cecb56a035b1ac7aad9dc4dd24fef2f4bf30d019f776ba7b94e521c45b7f5344c94930622ed5fac463f43"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) 3.763587593s ago: executing program 4 (id=12054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86fe8088000004001400128009000100766c616e00000000040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket(0x0, 0x3, 0xffff) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x2017be01}) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async, rerun: 64) r6 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) socket$inet6(0xa, 0x5, 0x8) (async) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) (async, rerun: 64) r9 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r10, 0x0, 0x8, 0x2, 0xe0000000, 0x4c, @private1, @mcast2, 0x10, 0x78e0, 0x6, 0x4}}) 2.683586341s ago: executing program 3 (id=12056): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000000)="8ce87708703b9503cd66e0b7af5fa2f2c5c241596951be64370f6a05379e27a0203d79cc613245fbf4e830ad89a3befcf4da26bbb3baeb128da379c4f865227a3488398b43fc3d96a10d1b0f65fff31dc3c59adec3e8fe710086ee8f0f0ba32bd6da81a7ad2a271aa3c10216c6938e236ce91eb0c6766f640c507adcd8dad11be54b4b1cce185af1870ed994ee0d6800bdc484133a1ca9999fbeb756f49061e25df5062089fb37f9a9a36e4c1451bee429d921edf3d015ae2cd78f38b92d02c363", &(0x7f0000000100)=""/91, &(0x7f0000000180)="4e445f0d37681e3fe11b57b60034fa625bedef0b1d8802aef7d655f46f0d91ba5c11fc9f8645b3b499b78b3632a73046e9f9c9cbc660cd2128b922bc1de7dc5b126c5437f06c3e1bb7caf734bef2c5545546c803823c13434324925ef707bc653e18937b89be3f287ebccd45eaf8af0f5588bf30e08e7940eded5b2a179c4b8f01c7d758745a55d7390256762f4d633c1e75df615958945fcce7a1d0ee4237474ae616df11bc3c4ac21dfe054b2399be336df59ce2e0ab7191051ce53e45abd0ab353e0b3dc64c2359e7b1c1861187b322a9cc1fa3922cf6d4267a2ed70297a7f7b6aef3a1ab723bd6a24d072ba338c27840f656e83fe21eba93", &(0x7f0000000280)="7468b672021f2ec97b36b84de40116a487723d190dc319be3118d6f499c4837c07fb2dbd3612d8f55cc01f02b4c61c2dcbcfd2c627", 0x480, r1, 0x4}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}, @IFLA_AF_SPEC={0x4}]}, 0x40}}, 0x0) 2.607661603s ago: executing program 1 (id=12057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="16a2a85969e6ffffffffffff88a800008100000288"], 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x6, 0x40c, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x20, 0x80, 0x0, 0x4, 0x0, 0x0, 0x7, 0x17}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)={0x3, 'team_slave_0\x00', {0xffffff81}, 0x89b}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@ipv6_getnetconf={0x24, 0x52, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3}]}, 0x24}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000840)={{r6, &(0x7f0000000200)='\x00', 0x100, &(0x7f0000000380)={@_ha_fsid={[0x1f7, 0x1]}, {0x8001, 0x0, 0x7fff, 0x1}}, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xcd17}, 0x2, &(0x7f00000007c0)=[{0x1, 0x8, &(0x7f0000000440)='-@&\x06,\x00', &(0x7f00000005c0)="ef4daa0001f1d252d2e147e0663999d15edba66978901d6eb345c2b914a3edbcde64e729c23c018242f4e0f8aa15340f978dec71dfb0deb4abfef2f39768679299bd83e0958327422030d3dca9d7a3acc4dfa25e30af3a54393a78892078db7bc589205de98cfb6ec48edcbba21f0f5ec3c98cc1d2f949d8305d5f615dce9a2535e8ea918162cae0c14cd389805853ba433f2fecddfdd3c12e766864a6c34ceca27d2f7074dfc953727085e94877482baf4330042939e71eb1247e5eaad64f759bc79ca1780f6eec83b53886a1526e480e3e8a2873b3796183a45993bb72c7d84f5c3507a42b2fdd", 0xe8, 0x10}, {0x3, 0x800, &(0x7f00000006c0)='/dev/net/tun\x00', &(0x7f0000000700)="156cc235ef7765fd58e3a8971e7a1bd3251313ddbd7f262d1d0e6bb7446edc5a50d9fda0a8f4149f4484ab46af2dba5be18cf47b5b05c62524b08b8b812bfe7d82a10e1815a2d894ef6d13ddd2de0ee6f3acb9387606af059545d282104fdde0861790648324e6b625d34a73d6fa12c7fefdb7cfbe6c57065f7c0c18758aa33c39e928574ec262f6f8fcc853e936baf07ec08ca95e2f67bc4a5ed1928ab737aef89c0012", 0xa4, 0x22}]}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000008c0)=0x1) 2.596367089s ago: executing program 4 (id=12058): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x27}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="040200"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) 2.528067797s ago: executing program 2 (id=12059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}]}}]}, 0x50}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x18, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x13, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}}, 0x20000000) 2.423022718s ago: executing program 3 (id=12060): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x0, 0x36, 0x0, 0x4000}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x47, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xe) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'sed\x00', 0x11, 0x10000004, 0x8}, 0x2c) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$bt_hci(r5, 0x84, 0x3, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r7, {0x9}, {0xffff}, {0x13, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r11 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000f9ec03010000000000000000000300000a14000000f60301000042efa37e4400b4e0696400"], 0x28}}, 0x8004) write(r10, &(0x7f0000000380)="4c000000110020004000000000000000032f8dc5d06d16782ec04e8963945d00000000000000", 0x26) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=@newtclass={0x5c, 0x28, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4, 0x7}, {0xc, 0x6}, {0x7, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x7e, 0x2}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_RATE={0x6, 0x5, {0x90, 0x68}}, @TCA_RATE={0x6, 0x5, {0x81, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) ioctl$sock_proto_private(r10, 0x89e8, &(0x7f0000000600)="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") r12 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000002c0)={{0x33, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0xd, 0x323b, 0x55}, {@remote, 0x4e21, 0x10000, 0x4, 0x12d5c, 0x12d4c}}, 0x44) r13 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r13, 0x114, 0x7, &(0x7f0000000200)={@vsock={0x28, 0x0, 0x0, @host}, {&(0x7f0000000140)=""/102, 0x66}, &(0x7f00000001c0)}, 0xa0) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.387503229s ago: executing program 4 (id=12061): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@set2={{0x28}, {{0x0, 0x4, 0x6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) recvmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011"], 0x64}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000280)='$\x00', 0x8500, &(0x7f00000002c0)={@align=0x7, {0x7fff, 0x200, 0x0, 0x2}}, 0x3, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x2000012, 0xe, 0xffffffffffffff79, &(0x7f0000000680)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0xfffffffffffffed0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000540)={{0x8}, 0x100, './file0\x00'}) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x0) 2.271373265s ago: executing program 0 (id=12062): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001e9ffffffff0100000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="480100001a00330600000000fddbdf250a010101000000000000000000000000ffffffff000000000000000000000000000040004e2480010000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c00000000000000000400000000000004e0000000000000000000000000000000800000000000000000001000000000000000000000000000000000002000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362040000006865725f6e3700000000000000000000000000000000000000000000000000000000050021000200000008002900e37f00"/247], 0x148}}, 0x200080d4) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100100086dd60f53a0400503a01fe8000000000000000000004000000bbff02000000000000000000000000000102009078000005006050835900002c00fc0100000000000000000000000000000000000000000000000000000000000000000000003c0100000000000007080000000100080a00"/138], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001e9ffffffff0100000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="480100001a00330600000000fddbdf250a010101000000000000000000000000ffffffff000000000000000000000000000040004e2480010000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c00000000000000000400000000000004e0000000000000000000000000000000800000000000000000001000000000000000000000000000000000002000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362040000006865725f6e3700000000000000000000000000000000000000000000000000000000050021000200000008002900e37f00"/247], 0x148}}, 0x200080d4) (async) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100100086dd60f53a0400503a01fe8000000000000000000004000000bbff02000000000000000000000000000102009078000005006050835900002c00fc0100000000000000000000000000000000000000000000000000000000000000000000003c0100000000000007080000000100080a00"/138], 0x0) (async) 2.14789945s ago: executing program 4 (id=12063): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x8, 0x9d5f}, {0xf26, 0x9}, 0xfffe, [0xde9a, 0x8e9, 0x20c, 0x3, 0x3, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffe, 0x9, 0x5, 0x6, 0xf760425, 0x7, 0x1]}) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x2, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) 2.146789588s ago: executing program 3 (id=12064): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040000) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c000180080106fe", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x26f13}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfd, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x4, 0x4, 0x0, 0x0, 0x0, 0x6ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x9, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe7cf, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r6, r6, r6, r6], 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280)}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000011c0)={@private2}, 0x14) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32, @ANYBLOB="1400027c8151d33053e1680000000000000000011400090002"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x44800) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000001200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x9, 0x198, 0x400, 0x6d, 0x84040094}) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000000010002", 0x7) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.134582145s ago: executing program 2 (id=12065): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="62c437363c", 0x5}, 0x1, 0x0, 0x0, 0x40}, 0x20008801) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008060}, 0x4000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r4, 0x200, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x48}}, 0x4000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c00028008000300ffffffeac4d58266682cdf4379ba7ecad3f588a05bed00fcdcadf86aff57e5b825d062012007000000a1d5d81931"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x20008004}, 0x20040040) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000011", @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf25050000000c00028008000600080000000800040008000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f00000006c0), &(0x7f00000001c0), 0x2000000}, 0x20) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000940)=[{&(0x7f0000000740)="4397d266409d80792159ac512fb297b8a8d67b60dc27b1c3e9e60e6e84ff9c6b82a249d5d80ce789a8569c00b61070cb58462cd56b1e37d5ce5ec34a1f19f7a60ff0afd59adac8bd9e806c26b6844b25f51aa9f852cc9e44923fb57e30395131cf94f6bb22", 0x65}, {&(0x7f00000007c0)="e4bcd1141e5e24347a16fd1e5f023b5eae06f1aaeb0b52ef3118ab23abae23b17a026cc3731e66b5243a19a1bc508c7ef07376ef41626893d51627322cf716e8c216344bfc0a5e9ea0812a279bc82b4a8f6c454b829aa9a4bbaaf21a189b83057163b4c329e5ba02f1289f9928c922736bca1486cab328869dba", 0x7a}, {&(0x7f0000000840)="8abb5a439049a7da4cde08b0bce90dc2825eb616e5d093dcbf4344928e391c3c25daa68d00ce4c14e552eaebe959e913b7aa4ec9e1d9d0fc3d15b8ea0d94154afae56946cf77aa65fee544770942f71c79543f69c354dd15229f2a40cc550a42e304716096b0c6356093b5afc42aa441274e2d612126c4df4f81257cd6b84d5053527463d2911b9bae40e058aebaa0508b7bb917618bfa9063596d2d91a25c2a54f0", 0xa2}, {&(0x7f0000000900)="ca4df796300c6100000000000000", 0xe}], 0x4, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000580)={r2, r8}) socket$rxrpc(0x21, 0x2, 0xa) r9 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f00000005c0)={0xe, 0x4, 0x4, 0x9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.890642948s ago: executing program 0 (id=12066): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0x13, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0xa00}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x80800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={r3, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000017c0)=r4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002e0007012cbd7000fddbdf25027c00000c0001800800ec00", @ANYRES32, @ANYBLOB="ce8bca1b3d0f8bb56722ee43539699911f15cc3311ed70bae131f63a35e11bd2c15b800c4ca19cb0c375605bf860e135f554a822c43353e9dc34160f"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_VOICE(r0, 0x11, 0x13, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0xa00}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x80800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) (async) close(r3) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={r3, 0x58, &(0x7f0000000600)}, 0x10) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000017c0)=r4) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002e0007012cbd7000fddbdf25027c00000c0001800800ec00", @ANYRES32, @ANYBLOB="ce8bca1b3d0f8bb56722ee43539699911f15cc3311ed70bae131f63a35e11bd2c15b800c4ca19cb0c375605bf860e135f554a822c43353e9dc34160f"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x10) (async) 1.811647976s ago: executing program 1 (id=12067): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000180), 0x8, 0x60, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r4) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x19, 0x0, &(0x7f00000000c0)=0x9b) (async) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x70}}, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) (async) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000100)=0xffffffff, 0x4) (async) syz_emit_ethernet(0x200000, 0x0, 0x0) 1.516605293s ago: executing program 0 (id=12068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r2) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x149000, &(0x7f0000000040)={@align=0x32ea, {0xbdd4, 0x4, 0xfffffffe, 0x2}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000100)=0x800}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000200001002abd7000fbdbdf2502000004000000011b00000008000200fffffff7"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x2004c080) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r4}, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000000000ffffac1e0001fe8000000000000000000000907800000000fe8000000000000000000000000000aa000000000000"], 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000300)={0x7, &(0x7f0000000a80)=[{0x262, 0xd3, &(0x7f0000000480)="4e5b89727780bd70482e44a844556dd69e83c03b5604c29204bdd924d34b9058879c974c6badadcd2146064a35947e14474cb67eed2f2ed793f4d431027bf9f671f63d5e9ba235ef889496d5c1f03985f01830c845ed30518bbb311de1f5cc5a46d78fcb75bb01d8c13b7597117896be9458b0d0e47071e1c31b1245195b70ce1f3a73fbb33367812e0d12ea333df38eb8edfa20e2ed943c4c11a6a6c4dfe0f19e293b416d347a420d02cdd73d581eaaeb86c5050db1b83229933d58c95829da9eb26edde366bbdf94528b995e9a4686746d40"}, {0xfffff800, 0xdf, &(0x7f0000000580)="e9d5a953f9e3e62eee6b240cd83195e2e8548eebcb6be5d2987260111fa8d1f13d755d2741fe7e0c70fcfe281335a74ef7a33b550b058fac3d5df70d53112e81b229b500df3e7a1be6e8163f7d5f63e76b00334e8f8a32be872d3667584db96ca2e2adf527876612082c016a7fe8b45b0c0b1b2798fe73257f6c7e4e6f6e768b101ccf1442165118aff60a085efd44947198aae7c4f9d897b613b149562c4854257ee5029b0af8dc354d793c379f0ae17d2d5baf6a51c1c57cde7c4f7976a393781163be11f36ba75ba5bf6447a10c578f18bf6fb27fc8a93a5ef03d6e44b5", 0x1, 0x1}, {0x4, 0x24, &(0x7f0000000680)="7b726c5ebffec0af1bd954c81ef9fd77c1f9fcc7251127cd3386100104955fd4ff8c9ffc", 0x0, 0x1}, {0x9, 0x71, &(0x7f00000006c0)="5501eabcd71f4c46576191ea4c54dcd004ff87d95c7bc901f9f2749573e73771c5955f36f65a2df9dcb549fc4f7bd08e622aacfec0160aa6725876637db7671167dc7b5df3f25f34197d54496c41"}, {0x3ff, 0xe9, &(0x7f0000000840)="9da9087da6a0aa69f1413fbaf1ee0e2e6d15cb5afe00d51a7883fd11d9d6cd0c73d52cbf6f79953bad166db6ef454012b2ff02cf948042bc91c3ca9d1eef2ed56173b6ec97f31317c75867d9fbe44991413ff9f349ee3e28268b1140a3b804e628f0470325bc4ed7afdaed8ccc11aae359cde3810bf31d5aae8d391437b8ce921266019f2dd1a0413406e109bcbf744d325afb7df7c134cab92edb0c6b615ea02596e69ecd5804da82453eb1451337812e95dc7558fdf547206b6a5ed65f0c0c0165d4bbfead385ab3d6a2466e795a1525dce9a137678b3d154e6aa01568354d6900c23ccba6910748", 0x1, 0x1}, {0x0, 0x41, &(0x7f0000000940)="56d855d25f4efbed80268a625e133e2c77a404a300cb6983cf85bf47fb050492d4f2758d497b21cdb69b4c32b24bba42bd5a30f238613cdf15a0d7963e582df147"}, {0x8000, 0xad, &(0x7f00000009c0)="93dfe034414784577dbf4a9438a7885f034f9df4bde14754f1434a7537934ea47113dcadb1e01b7669833ac4c72f55dc359cf61dd2705f384932fa8297b1d3c0f1f7262b2375eeb82566e6ceddf8d14cc651bc3b881d88904b39eb3b764ffa36b682cb382edd180a8030f2f2d37647e0043d71f42e11d5f6b4d573cfbeee44e8907b85a492921d02696a1bd3acc4faaf8f93e37e539666b74ee5d0f46f01e6f8268da7ec35a15a691bac63c2c2", 0x0, 0x1}]}) 1.434525173s ago: executing program 1 (id=12069): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8948, &(0x7f00000002c0)={'bond0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x14, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa0c0090781200183f25000000000000000001000008055fdfdd9a82cf6ed87f0000017f000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.21174317s ago: executing program 2 (id=12070): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x9f3a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0xbf, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0xc895) 1.185202297s ago: executing program 3 (id=12071): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x2, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x88, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0xfdef, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) sendmsg$key(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000c40)={0x2, 0xa, 0x1, 0x8, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0xc012) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01002000000000000000000000000000000009000000002e00610002"], 0x0, 0x21, 0x0, 0x1}, 0x28) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8000}, 0x1c) listen(r5, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x2, 0x3, 0xd, 0x4101}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.061267249s ago: executing program 2 (id=12072): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x52, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 727.648002ms ago: executing program 1 (id=12073): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x9, &(0x7f0000000080)=@raw=[@generic={0xbf, 0x2, 0xa, 0x100}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4, 0x0, 0x0, 0xfffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x91}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x7d, 0x1, 0x0, 0x20}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 659.113365ms ago: executing program 4 (id=12074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500600601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="8016ffff90"], 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a82600810030000800452800400064000000069078ac14143eac1414bb0000000000000000000000000000000000004e2000004e2400000006000000030000000000000001000000040b40223a00f1d1a59ca5c5f74e7bbd20c0bbe653c617035636c9b49769"], 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 492.565013ms ago: executing program 2 (id=12075): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x22, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES32, @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x57}, 0x94) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r5], 0x50}, 0x4, 0x700000000000000}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x8, 0xa, 0x8, 0x1446, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0xe}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={r0, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r8, &(0x7f0000001ac0)='!\x00', 0x101000, &(0x7f0000001b00)={@_ha_fsid={[0x2, 0x1]}, {0xffff, 0x7f, 0x6, 0xffffffff}}, 0x3, &(0x7f0000001b40), &(0x7f0000001b80)=0x437}, {[0xd90, 0x1, 0x56e0, 0xf7]}, 0x0, 0x73, &(0x7f0000001bc0)=""/115}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d00)={0x0, 0x1, 0x8}, 0xc) (async) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r17}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r17, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x15, &(0x7f0000000580)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], &(0x7f0000000640)='GPL\x00', 0xe, 0x1000, &(0x7f0000000800)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x25, r14, 0x8, &(0x7f00000018c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0xc, 0x8001, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001d40)=[r10, r10, r11, r12, r13, r14, r15, r16, r17], &(0x7f0000001d80)=[{0x0, 0x1, 0x1, 0xa}, {0x0, 0x1, 0x7, 0x6}, {0x2, 0x2, 0x1, 0xa}, {0x0, 0x4, 0x12}], 0x10, 0x4867}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r0, 0xffffffffffffffff, 0x12}, 0x14) (async) syz_emit_ethernet(0xe7, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x16, 0x4, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0x37, 0xbc, [@dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102, @private=0xa010100, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0xb, 0x88, [@multicast2, @local]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x80, "91afb09c919b3d0c1733b5d71203e423c6f55cbc806f8eff1413e66351585fad08f044105e8080235aafbe24fcf70a3c141726f19c950c54e50ff626208bccea83359733f4fd93f1860bf0a2a4e3789010d4f5465924b7bcfc9dd5266882dfad25689d2242ab779a1d0deb9e73abe92509be3f1fb6ab21065e"}}}}}, 0x0) (async) r18 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r18, 0x0, 0xc8, &(0x7f00000000c0), 0x4) r19 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r19, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 459.370393ms ago: executing program 0 (id=12076): sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000005a00)={0x0, 0x0, &(0x7f00000059c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="5a000300010003", 0x7) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) connect$inet6(r1, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xaf, @dev={0xfe, 0x80, '\x00', 0xf}, 0x9}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) (async) sendmmsg$inet6(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 412.795922ms ago: executing program 3 (id=12077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002140)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x38}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), 0x4) sendto$inet6(r4, &(0x7f00000002c0)="03", 0x1, 0x20008840, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 247.076882ms ago: executing program 0 (id=12078): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003", 0x39}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@routing={0x84, 0x0, 0x1, 0x4}]}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 246.177248ms ago: executing program 1 (id=12079): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1}, 0x20000040) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}], 0x1, 0x739, 0x1) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0xa, 0x6) 132.395834ms ago: executing program 2 (id=12080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0xc8}}, 0x0) 0s ago: executing program 1 (id=12081): r0 = socket$inet6(0xa, 0x4, 0xf60) unshare(0x36030800) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) unshare(0x40020000) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="9104e325ad7ce1efecc527373ec6c8a04d035d313cabb81fe3696dd850b9979984db3a42c2cfcac284630789038760e27ae6d97d7b0d42590b3cb411b03ac096e267216c56c40a622b860742220d4d2d129d672a6229ca5e9648ba3c469858afb55556b2006fefaef7d6071f15e996fe10d9c670605352a2927c984a89a2cab3f08a01efad4f52ed40884de548b79ff9bd37bbefc9edfc84c62124044b39ba5334dea1fb1050e4ab50c929aff9d629c820417aa8", 0xb4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x83, 0x90, 0xb}, [@NDA_CACHEINFO={0x14, 0x3, {0x2, 0x10000, 0xb725, 0x1}}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r3, &(0x7f0000000980)=[{&(0x7f0000002600)=""/4115, 0x1013}], 0x1) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 0s ago: executing program 3 (id=12085): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390400000000fcffffff00000000", @ANYRES32=r1, @ANYBLOB="019800002ee76260a1e67132c14cae32a72670000000002800128008000100677265001c000280080007000a01010005"], 0x48}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7ff, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000640)=""/187, 0xbb}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/194, 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000b40)=""/57, 0x39}, {&(0x7f0000002000)=""/154, 0x9a}, {&(0x7f0000001f40)=""/133, 0x85}, {&(0x7f0000005940)=""/4083, 0xff3}], 0x4}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000300)=""/26, 0x1a}, {&(0x7f00000009c0)=""/248, 0xf8}, {&(0x7f00000034c0)=""/97, 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000740)=""/238, 0xee}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}}], 0x6, 0x400123a0, 0x0) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) unshare(0x2c020400) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, 0x0, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000409b4a5f3400000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="0500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.4.10681'. [ 1553.993736][T20711] wg2 speed is unknown, defaulting to 1000 [ 1553.995291][T20711] lo speed is unknown, defaulting to 1000 [ 1554.240786][ T1392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.242956][ T1390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.800515][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1555.301224][T20755] sock: sock_timestamping_bind_phc: sock not bind to device [ 1555.373576][T20765] sock: sock_timestamping_bind_phc: sock not bind to device [ 1555.570261][T20770] netlink: 'syz.3.10692': attribute type 10 has an invalid length. [ 1555.590321][T20770] netlink: 'syz.3.10692': attribute type 10 has an invalid length. [ 1555.597107][T20770] netlink: 'syz.3.10692': attribute type 10 has an invalid length. [ 1555.625581][T20770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.642454][T20770] team0: Port device bond0 added [ 1556.682241][T20771] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10690'. [ 1556.682280][T20771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10690'. [ 1557.062999][T20813] __nla_validate_parse: 2 callbacks suppressed [ 1557.063018][T20813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10700'. [ 1557.138629][T20809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10700'. [ 1557.478778][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10704'. [ 1557.547710][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10704'. [ 1557.596124][T20835] netlink: zone id is out of range [ 1557.596137][T20835] netlink: zone id is out of range [ 1557.596145][T20835] netlink: zone id is out of range [ 1557.596153][T20835] netlink: zone id is out of range [ 1557.596161][T20835] netlink: zone id is out of range [ 1557.596170][T20835] netlink: zone id is out of range [ 1557.596181][T20835] netlink: zone id is out of range [ 1557.647584][T20840] netlink: 'syz.0.10705': attribute type 16 has an invalid length. [ 1557.647603][T20840] netlink: 'syz.0.10705': attribute type 17 has an invalid length. [ 1558.002624][T20840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.209984][T20840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1558.210007][T20840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1558.213226][T20840] veth1_vlan: left promiscuous mode [ 1558.213250][T20861] xt_bpf: check failed: parse error [ 1558.215985][T20840] veth0_vlan: left promiscuous mode [ 1558.227075][T20840] veth0_vlan: entered promiscuous mode [ 1558.261065][T20840] veth1_vlan: entered promiscuous mode [ 1558.291099][T20840] veth1_macvtap: left promiscuous mode [ 1558.297074][T20840] veth0_macvtap: left promiscuous mode [ 1558.306249][T20840] veth0_macvtap: entered promiscuous mode [ 1558.311891][T20863] xt_hashlimit: size too large, truncated to 1048576 [ 1558.322496][T20840] veth1_macvtap: entered promiscuous mode [ 1558.375479][T20840] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1558.386227][T20840] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1558.406960][T20840] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1558.429130][T20840] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1558.634238][T20840] macsec1: left promiscuous mode [ 1558.635784][T20840] ip6tnl1: left promiscuous mode [ 1558.635803][T20840] ip6tnl1: left allmulticast mode [ 1558.654981][T20840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1558.658043][T20840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1558.683513][T20840] geneve3: left promiscuous mode [ 1558.683531][T20840] geneve3: left allmulticast mode [ 1558.683978][T20840] bond3: left promiscuous mode [ 1558.683993][T20840] erspan1: left promiscuous mode [ 1558.684120][T20840] bond3: left allmulticast mode [ 1558.684779][T20840] erspan1: left allmulticast mode [ 1558.686467][T20840] geneve4: left promiscuous mode [ 1558.785078][T20856] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10705'. [ 1559.056201][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10712'. [ 1559.080008][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10711'. [ 1559.142134][T20881] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1559.279398][ T1402] net_ratelimit: 499 callbacks suppressed [ 1559.279416][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.361639][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.485896][T20893] sctp: [Deprecated]: syz.3.10718 (pid 20893) Use of int in maxseg socket option. [ 1559.485896][T20893] Use struct sctp_assoc_value instead [ 1559.994104][T30971] block nbd8: Receive control failed (result -32) [ 1560.010165][ T1388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.106882][T20901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10722'. [ 1560.175404][T20925] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10725'. [ 1560.708094][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10728'. [ 1561.157625][T20960] netlink: 'syz.4.10734': attribute type 14 has an invalid length. [ 1561.862686][T20959] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1561.863869][T20958] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1562.210673][T20995] __nla_validate_parse: 4 callbacks suppressed [ 1562.210694][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10742'. [ 1562.288773][T20993] netlink: 136 bytes leftover after parsing attributes in process `syz.3.10743'. [ 1562.288796][T20993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10743'. [ 1563.118601][T30971] Bluetooth: hci1: command 0x0406 tx timeout [ 1563.365122][T21059] netlink: 'syz.1.10756': attribute type 1 has an invalid length. [ 1563.560259][T21059] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1563.581499][T21059] syz_tun: left promiscuous mode [ 1563.594678][T21059] bond8: (slave syz_tun): Enslaving as a backup interface with an up link [ 1563.689440][ T1390] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1563.820724][ T1390] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1564.163839][T21082] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 1564.392400][T21088] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10764'. [ 1564.479398][ T1390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.918099][T21133] netlink: 'syz.2.10771': attribute type 1 has an invalid length. [ 1564.918126][T21133] netlink: 'syz.2.10771': attribute type 1 has an invalid length. [ 1565.015594][T21138] netlink: 'syz.2.10771': attribute type 1 has an invalid length. [ 1565.015620][T21138] netlink: 'syz.2.10771': attribute type 1 has an invalid length. [ 1565.120414][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.121582][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.121793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.198984][T30971] Bluetooth: hci1: command 0x0406 tx timeout [ 1565.376057][T21154] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10777'. [ 1565.449589][T21159] hsr0: entered promiscuous mode [ 1565.716341][T21158] hsr0: left promiscuous mode [ 1565.760586][ T1388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.928445][T21188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10787'. [ 1566.275226][T21222] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10788'. [ 1566.335849][T21214] syzkaller0: entered promiscuous mode [ 1566.335873][T21214] syzkaller0: entered allmulticast mode [ 1566.456788][T21233] netlink: 'syz.4.10792': attribute type 1 has an invalid length. [ 1566.499702][T21233] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1566.547840][T21233] macvlan2: entered promiscuous mode [ 1566.547860][T21233] macvlan2: entered allmulticast mode [ 1566.551750][T21233] bond8: entered promiscuous mode [ 1566.553567][T21233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1566.580382][T21233] bond8: left promiscuous mode [ 1566.752377][T21189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1566.794191][T21221] netlink: 'syz.1.10791': attribute type 1 has an invalid length. [ 1566.794211][T21221] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10791'. [ 1566.794227][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10791'. [ 1566.975480][T21246] xt_hashlimit: max too large, truncated to 1048576 [ 1566.975499][T21246] xt_hashlimit: overflow, try lower: 0/0 [ 1567.454573][T21274] netlink: 4128 bytes leftover after parsing attributes in process `syz.4.10797'. [ 1567.804233][T21281] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10798'. [ 1569.607443][T16236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.169114][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.247607][T21256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10796'. [ 1570.311576][T21253] wg2 speed is unknown, defaulting to 1000 [ 1570.313324][T21253] lo speed is unknown, defaulting to 1000 [ 1570.483167][T21295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10803'. [ 1570.493828][T21292] gre0: left promiscuous mode [ 1570.493868][T21292] gre0: left allmulticast mode [ 1570.880561][ T1388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.880734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.203574][ T13] bond8: (slave syz_tun): link status up again after 0 ms [ 1571.219770][ T13] bond8: (slave syz_tun): link status up again after 0 ms [ 1571.221819][T21296] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1571.248517][ T13] bond8: (slave syz_tun): link status up again after 0 ms [ 1571.269697][ T13] bond8: (slave syz_tun): link status up again after 0 ms [ 1571.288535][ T13] bond8: (slave syz_tun): link status up again after 0 ms [ 1571.308828][ T13] bond8: (slave syz_tun): link status up again after 0 ms [ 1571.313969][T21330] hsr0: entered promiscuous mode [ 1571.361093][T21325] Bluetooth: MGMT ver 1.23 [ 1571.518639][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1571.957303][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1571.957848][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1571.958188][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1571.988737][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1571.991747][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1572.051007][ T84] nci: nci_rx_work: unknown MT 0x6 [ 1572.055032][T21358] netlink: 'syz.3.10814': attribute type 4 has an invalid length. [ 1572.055051][T21358] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10814'. [ 1572.149835][T21329] hsr0: left promiscuous mode [ 1572.504017][T21377] syzkaller0: entered promiscuous mode [ 1572.504031][T21377] syzkaller0: entered allmulticast mode [ 1574.688600][ T84] net_ratelimit: 35 callbacks suppressed [ 1574.688623][ T84] bond8: (slave syz_tun): failed to get link speed/duplex [ 1574.798984][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1574.918906][ T13] bond8: (slave syz_tun): failed to get link speed/duplex [ 1574.934883][T21352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1575.030843][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1575.149744][ T13] bond8: (slave syz_tun): failed to get link speed/duplex [ 1575.259609][ T13] bond8: (slave syz_tun): failed to get link speed/duplex [ 1575.299560][ T1390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.370236][T16236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.377427][ T1399] bond8: (slave syz_tun): failed to get link speed/duplex [ 1575.479908][ T1403] bond8: (slave syz_tun): failed to get link speed/duplex [ 1575.560239][T21403] __nla_validate_parse: 2 callbacks suppressed [ 1575.560255][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1575.940316][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10834'. [ 1575.940352][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10834'. [ 1576.015954][T21435] syzkaller0: entered promiscuous mode [ 1576.015973][T21435] syzkaller0: entered allmulticast mode [ 1576.018327][T21432] netlink: 'syz.3.10835': attribute type 1 has an invalid length. [ 1576.075722][T21432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1576.078139][T21435] tipc: Enabled bearer , priority 0 [ 1576.138022][T21438] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1576.322817][T21445] netlink: 7323 bytes leftover after parsing attributes in process `syz.0.10837'. [ 1576.412022][T21449] netlink: 'syz.3.10839': attribute type 30 has an invalid length. [ 1576.415230][T21450] netlink: 'syz.3.10839': attribute type 30 has an invalid length. [ 1576.571821][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10841'. [ 1576.876903][T21474] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10842'. [ 1577.199166][ T5717] tipc: Node number set to 3667743479 [ 1578.143710][T21502] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10848'. [ 1578.222017][T21500] tipc: Enabling of bearer rejected, already enabled [ 1578.223241][T21499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10846'. [ 1578.569004][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10850'. [ 1578.701611][T21509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10851'. [ 1579.030447][T21534] xt_check_table_hooks: 23 callbacks suppressed [ 1579.030466][T21534] x_tables: duplicate underflow at hook 1 [ 1579.439522][T21551] tipc: Enabling of bearer rejected, already enabled [ 1579.614492][T21556] xt_socket: unknown flags 0x8 [ 1579.698744][T21554] tc_dump_action: action bad kind [ 1579.714761][ T1392] net_ratelimit: 44 callbacks suppressed [ 1579.714778][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1579.819868][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1579.936993][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1580.051590][ T1402] bond8: (slave syz_tun): failed to get link speed/duplex [ 1580.073489][T21571] xfrm0: entered allmulticast mode [ 1580.073652][T21571] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1580.165707][T16236] bond8: (slave syz_tun): failed to get link speed/duplex [ 1580.238503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.279608][ T84] bond8: (slave syz_tun): failed to get link speed/duplex [ 1580.365827][T21580] sctp: [Deprecated]: syz.3.10868 (pid 21580) Use of int in max_burst socket option. [ 1580.365827][T21580] Use struct sctp_assoc_value instead [ 1580.391000][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1580.629417][T16236] bond8: (slave syz_tun): failed to get link speed/duplex [ 1580.733579][T21599] __nla_validate_parse: 5 callbacks suppressed [ 1580.733594][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10872'. [ 1580.764032][T21598] wg2 speed is unknown, defaulting to 1000 [ 1580.776499][T21598] lo speed is unknown, defaulting to 1000 [ 1580.847052][T21607] sit0: left promiscuous mode [ 1581.006826][T21607] team_slave_0: left allmulticast mode [ 1581.025019][T21607] xfrm0: left allmulticast mode [ 1581.054636][T21607] macvlan3: left promiscuous mode [ 1581.055058][T21607] gretap0: left promiscuous mode [ 1581.094812][T21607] bond3: left promiscuous mode [ 1581.094831][T21607] bond3: left allmulticast mode [ 1581.639093][T21627] netlink: 'syz.0.10877': attribute type 10 has an invalid length. [ 1581.639114][T21627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10877'. [ 1581.666418][T21629] syzkaller0: entered promiscuous mode [ 1581.666435][T21629] syzkaller0: entered allmulticast mode [ 1581.695948][T21628] smc: net device lo applied user defined pnetid SYZ2 [ 1581.697366][T21627] smc: net device lo erased user defined pnetid SYZ2 [ 1581.712784][T21627] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10877'. [ 1582.086805][T21644] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1582.122959][T21644] bond9 (unregistering): Released all slaves [ 1582.159337][T21650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10883'. [ 1582.285317][T21644] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1582.312741][T21644] bond9 (unregistering): Released all slaves [ 1582.379093][ T1392] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.379154][ T1392] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.379189][ T1392] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.379225][ T1392] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.491548][T21644] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1582.495120][T21644] bond9 (unregistering): Released all slaves [ 1582.661410][T21644] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1582.664421][T21644] bond9 (unregistering): Released all slaves [ 1583.012470][T21688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10890'. [ 1583.133419][T21698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10892'. [ 1583.134805][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10890'. [ 1583.394640][T21700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10892'. [ 1583.593916][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10894'. [ 1583.657505][T21719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10896'. [ 1583.753853][T21719] bridge1: entered promiscuous mode [ 1583.815762][T21723] bridge1: entered promiscuous mode [ 1583.906017][T21730] sctp: [Deprecated]: syz.0.10898 (pid 21730) Use of int in maxseg socket option. [ 1583.906017][T21730] Use struct sctp_assoc_value instead [ 1584.151716][T21744] syzkaller1: entered promiscuous mode [ 1584.151737][T21744] syzkaller1: entered allmulticast mode [ 1584.276980][T16236] IPVS: starting estimator thread 0... [ 1584.358455][T21753] IPVS: using max 30 ests per chain, 72000 per kthread [ 1584.375459][T21751] IPVS: Error connecting to the multicast addr [ 1584.522545][T21756] netlink: 'syz.3.10906': attribute type 2 has an invalid length. [ 1584.728505][ T1392] net_ratelimit: 29 callbacks suppressed [ 1584.728523][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1584.908740][ T13] bond8: (slave syz_tun): failed to get link speed/duplex [ 1585.166749][T21788] netlink: 'syz.0.10912': attribute type 10 has an invalid length. [ 1585.169164][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1585.330129][T21795] x_tables: unsorted entry at hook 1 [ 1585.430263][T21787] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1585.434000][T21787] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1585.438699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.470040][ T1403] bond8: (slave syz_tun): failed to get link speed/duplex [ 1585.599644][ C1] tipc: Duplicate 8ac7274 using eth(66:e1:79:7b:59:fd) seen on [ 1585.604368][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1585.773021][ T1403] bond8: (slave syz_tun): failed to get link speed/duplex [ 1585.817719][T21803] Set syz1 is full, maxelem 2076 reached [ 1585.881533][ T1403] bond8: (slave syz_tun): failed to get link speed/duplex [ 1585.979922][T21830] __nla_validate_parse: 5 callbacks suppressed [ 1585.979937][T21830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10923'. [ 1585.986381][T21830] netlink: 'syz.0.10923': attribute type 2 has an invalid length. [ 1585.986397][T21830] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10923'. [ 1585.986413][T21830] netlink: 'syz.0.10923': attribute type 2 has an invalid length. [ 1585.986426][T21830] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10923'. [ 1585.993004][T16236] bond8: (slave syz_tun): failed to get link speed/duplex [ 1586.051823][T21834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10923'. [ 1586.055126][T21830] netlink: 'syz.0.10923': attribute type 2 has an invalid length. [ 1586.055143][T21830] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10923'. [ 1586.055158][T21830] netlink: 'syz.0.10923': attribute type 2 has an invalid length. [ 1586.055171][T21830] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10923'. [ 1586.236960][T21843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10927'. [ 1586.327062][T21844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10926'. [ 1586.809451][T21870] syzkaller0: entered promiscuous mode [ 1586.809474][T21870] syzkaller0: entered allmulticast mode [ 1587.938070][T21914] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1588.076621][T21917] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10944'. [ 1588.176476][T21925] bond4: option ad_user_port_key: invalid value (65535) [ 1588.176499][T21925] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 1588.199524][T21930] netlink: 'syz.3.10947': attribute type 16 has an invalid length. [ 1588.199544][T21930] netlink: 'syz.3.10947': attribute type 17 has an invalid length. [ 1588.202880][T21925] bond4 (unregistering): Released all slaves [ 1588.510824][T21930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.517014][T21930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.534956][T21930] tipc: Resetting bearer [ 1588.535137][T21930] tipc: Resetting bearer [ 1588.558030][T21930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1588.576640][T21930] batman_adv: batadv0: Interface activated: veth0 [ 1588.612417][T21947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10950'. [ 1588.734412][T21930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.736310][T21930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.751920][T21930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1588.752003][T21930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1588.754895][T21930] veth1_vlan: left promiscuous mode [ 1588.758011][T21930] veth0_vlan: left promiscuous mode [ 1588.765106][T21930] veth0_vlan: entered promiscuous mode [ 1588.772511][T21930] veth1_vlan: entered promiscuous mode [ 1588.786070][T21930] veth1_macvtap: left promiscuous mode [ 1588.791499][T21930] veth0_macvtap: left promiscuous mode [ 1588.820495][T21930] veth0_macvtap: entered promiscuous mode [ 1588.823320][T21930] geneve0: left promiscuous mode [ 1588.841868][T21930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1588.843040][T21930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1588.844340][T21930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1588.846075][T21930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1588.846936][T21930] geneve0: entered promiscuous mode [ 1588.856770][T21930] batman_adv: batadv0: Interface activated: macvlan2 [ 1588.912687][T21930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1588.925558][T21930] bridge0: entered promiscuous mode [ 1588.952592][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.952714][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.966741][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.967001][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.099749][ T84] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.099776][ T84] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.099917][ T84] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.100025][ T84] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.101299][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.101324][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.238676][ T84] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.238706][ T84] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.245849][T21962] sch_fq: defrate 8 ignored. [ 1589.670512][T21994] netlink: 'syz.3.10964': attribute type 62 has an invalid length. [ 1589.672924][T21997] netlink: 'syz.3.10964': attribute type 62 has an invalid length. [ 1589.819775][ T1402] net_ratelimit: 31 callbacks suppressed [ 1589.819792][ T1402] bond8: (slave syz_tun): failed to get link speed/duplex [ 1589.930683][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1590.038995][ T84] bond8: (slave syz_tun): failed to get link speed/duplex [ 1590.149426][ T84] bond8: (slave syz_tun): failed to get link speed/duplex [ 1590.259618][ T1402] bond8: (slave syz_tun): failed to get link speed/duplex [ 1590.369380][ T1402] bond8: (slave syz_tun): failed to get link speed/duplex [ 1590.499526][ T1402] bond8: (slave syz_tun): failed to get link speed/duplex [ 1590.608877][ T1402] bond8: (slave syz_tun): failed to get link speed/duplex [ 1590.638517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.719758][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1592.383383][T21966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1592.681132][T22035] __nla_validate_parse: 8 callbacks suppressed [ 1592.681153][T22035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10974'. [ 1592.939267][T22048] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10978'. [ 1592.946952][T22048] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10978'. [ 1593.040493][T22058] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10979'. [ 1593.040988][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10979'. [ 1593.355526][T22075] netlink: 'syz.1.10985': attribute type 1 has an invalid length. [ 1593.355546][T22075] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10985'. [ 1593.395485][T22078] netlink: 'syz.1.10985': attribute type 1 has an invalid length. [ 1593.395503][T22078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10985'. [ 1593.501524][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10986'. [ 1593.841640][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10988'. [ 1593.841665][T22088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10988'. [ 1593.995036][T22091] geneve2: entered promiscuous mode [ 1594.029171][ T50] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 38278 - 0 [ 1594.030829][ T1402] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 38278 - 0 [ 1594.030867][ T1402] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 38278 - 0 [ 1594.030897][ T1402] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 38278 - 0 [ 1594.917144][T22140] batman_adv: batadv0: Adding interface: macvlan2 [ 1594.917164][T22140] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.917193][T22140] batman_adv: batadv0: Interface activated: macvlan2 [ 1594.929552][ T13] net_ratelimit: 45 callbacks suppressed [ 1594.929589][ T13] bond8: (slave syz_tun): failed to get link speed/duplex [ 1595.040309][ T13] bond8: (slave syz_tun): failed to get link speed/duplex [ 1595.148827][ T1402] bond8: (slave syz_tun): failed to get link speed/duplex [ 1595.258854][ T50] bond8: (slave syz_tun): failed to get link speed/duplex [ 1595.340382][T22176] xt_bpf: check failed: parse error [ 1595.370281][ T50] bond8: (slave syz_tun): failed to get link speed/duplex [ 1595.404109][T22173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.453406][T22180] netlink: 'syz.3.11009': attribute type 8 has an invalid length. [ 1595.471902][T22181] netlink: 'syz.3.11009': attribute type 8 has an invalid length. [ 1595.486338][ T84] bond8: (slave syz_tun): failed to get link speed/duplex [ 1595.589351][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1595.698594][T16236] bond8: (slave syz_tun): failed to get link speed/duplex [ 1595.738127][T22193] netlink: 'syz.0.11013': attribute type 4 has an invalid length. [ 1595.814217][ C1] tipc: Duplicate 8ac7274 using eth(66:e1:71:7a:59:fd) seen on [ 1595.814282][ C1] tipc: Duplicate 8ac7274 using eth(66:e1:71:7b:59:dd) seen on [ 1595.840820][T22196] netlink: 'syz.3.11015': attribute type 2 has an invalid length. [ 1595.848832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.850477][ T1399] bond8: (slave syz_tun): failed to get link speed/duplex [ 1596.293877][T22199] tipc: Resetting bearer [ 1596.344123][T22216] syz_tun: entered allmulticast mode [ 1596.385011][T22215] dvmrp6: entered allmulticast mode [ 1596.547795][T22221] syz_tun: left allmulticast mode [ 1597.075759][ C0] tipc: Duplicate 8ac7274 using eth(66:e1:71:7b:5b:fd) seen on [ 1597.120868][T22252] sctp: [Deprecated]: syz.4.11031 (pid 22252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1597.120868][T22252] Use struct sctp_sack_info instead [ 1597.170946][T22254] nbd: socks must be embedded in a SOCK_ITEM attr [ 1597.831910][T22290] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1597.907098][T22295] __nla_validate_parse: 16 callbacks suppressed [ 1597.907116][T22295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11043'. [ 1598.120754][T22303] netlink: 'syz.2.11045': attribute type 1 has an invalid length. [ 1598.297500][T22303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1598.572255][T22319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11047'. [ 1599.998483][ C0] net_ratelimit: 32 callbacks suppressed [ 1599.998508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.049304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.057075][T22309] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1601.092260][T22311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.110748][T22311] bond4: (slave batadv0): making interface the new active one [ 1601.111931][T22311] batadv0: entered promiscuous mode [ 1601.144452][T22311] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 1601.170103][ T84] bond8: (slave syz_tun): failed to get link speed/duplex [ 1601.281410][ T84] bond8: (slave syz_tun): failed to get link speed/duplex [ 1601.371441][T22336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11051'. [ 1601.418216][T22343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11054'. [ 1601.418234][T22343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11054'. [ 1601.425931][ T1403] bond8: (slave syz_tun): failed to get link speed/duplex [ 1601.532897][ T84] bond8: (slave syz_tun): failed to get link speed/duplex [ 1601.638520][ T1403] bond8: (slave syz_tun): failed to get link speed/duplex [ 1601.750415][ T1399] bond8: (slave syz_tun): failed to get link speed/duplex [ 1601.861228][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1601.969697][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1602.710429][T22390] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11066'. [ 1602.711483][T22393] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11066'. [ 1603.108604][T22409] netlink: 'syz.3.11069': attribute type 1 has an invalid length. [ 1603.264419][T22409] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1603.395174][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.395386][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.395539][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.395705][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.395856][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.396071][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.396224][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.396407][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.396554][T22422] netlink: 'syz.0.11071': attribute type 12 has an invalid length. [ 1603.628888][T22428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11074'. [ 1603.758995][T13257] Bluetooth: hci2: command 0x0405 tx timeout [ 1603.848113][T22441] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:19999 [ 1604.092213][T22461] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11081'. [ 1604.099815][T22461] gretap0: left allmulticast mode [ 1604.121768][T22461] siw: device registration error -23 [ 1604.127576][T22461] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11081'. [ 1604.127655][T22461] 0ªî{X¹¦: renamed from gretap0 [ 1604.149490][T22461] 0ªî{X¹¦: left promiscuous mode [ 1604.149503][T22461] 0ªî{X¹¦: entered allmulticast mode [ 1604.323171][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11084'. [ 1604.325157][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11084'. [ 1604.510847][T22487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11087'. [ 1604.775515][T22498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11089'. [ 1604.905477][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11090'. [ 1605.109107][ T1392] net_ratelimit: 32 callbacks suppressed [ 1605.109127][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1605.198450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.219492][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1605.340132][ T1402] bond8: (slave syz_tun): failed to get link speed/duplex [ 1605.452615][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1605.466375][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1605.587819][T22522] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1605.616257][T16236] bond8: (slave syz_tun): failed to get link speed/duplex [ 1605.718963][ T50] bond8: (slave syz_tun): failed to get link speed/duplex [ 1605.829321][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1605.926940][T22547] syzkaller0: left promiscuous mode [ 1605.926958][T22547] syzkaller0: left allmulticast mode [ 1605.939446][T16236] bond8: (slave syz_tun): failed to get link speed/duplex [ 1606.048744][ T13] bond8: (slave syz_tun): failed to get link speed/duplex [ 1606.139017][T22559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11104'. [ 1606.424337][T22559] bridge0: left promiscuous mode [ 1606.567056][T22571] ip6gre3: entered allmulticast mode [ 1606.575578][ T1399] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1606.638844][ C0] tipc: Duplicate 8ac7274 using eth(66:e1:71:7b:59:f9) seen on [ 1607.237521][T22605] veth2: entered allmulticast mode [ 1607.387459][T22619] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1607.487796][T22607] bond0: (slave bond_slave_1): Releasing backup interface [ 1608.223189][T22668] SET target dimension over the limit! [ 1608.681367][T22683] validate_nla: 31 callbacks suppressed [ 1608.681386][T22683] netlink: 'syz.2.11137': attribute type 10 has an invalid length. [ 1609.006715][T22694] netlink: 'syz.0.11140': attribute type 21 has an invalid length. [ 1609.006736][T22694] __nla_validate_parse: 13 callbacks suppressed [ 1609.006748][T22694] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11140'. [ 1609.006812][T22694] netlink: 'syz.0.11140': attribute type 4 has an invalid length. [ 1609.006827][T22694] netlink: 'syz.0.11140': attribute type 3 has an invalid length. [ 1609.006840][T22694] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11140'. [ 1609.263376][T22711] syzkaller0: entered promiscuous mode [ 1609.263498][T22711] syzkaller0: entered allmulticast mode [ 1609.948395][ C0] tipc: Duplicate 8ac7274 using eth(66:e1:71:6b:59:fd) seen on [ 1609.966978][T22724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11146'. [ 1609.967033][T22724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11146'. [ 1610.002814][T22732] netlink: 'syz.3.11148': attribute type 1 has an invalid length. [ 1610.148842][ T13] net_ratelimit: 37 callbacks suppressed [ 1610.148860][ T13] bond8: (slave syz_tun): failed to get link speed/duplex [ 1610.258600][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1610.262754][T22740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11152'. [ 1610.293153][T22744] netlink: 'syz.4.11151': attribute type 1 has an invalid length. [ 1610.293173][T22744] netlink: 228 bytes leftover after parsing attributes in process `syz.4.11151'. [ 1610.390341][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1610.398418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.425073][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11154'. [ 1610.466470][T22748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11154'. [ 1610.502509][ T50] bond8: (slave syz_tun): failed to get link speed/duplex [ 1610.594008][T22763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11156'. [ 1610.594205][T22763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11156'. [ 1610.609769][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1610.718511][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1610.733541][ T1392] bond8: (slave syz_tun): failed to get link speed/duplex [ 1610.838881][ T1388] bond8: (slave syz_tun): failed to get link speed/duplex [ 1611.009158][ T1409] bond8: (slave syz_tun): failed to get link speed/duplex [ 1611.120790][ T1409] bond8: (slave syz_tun): failed to get link speed/duplex [ 1611.470724][T22797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.591290][ T1388] bond8: (slave syz_tun): link status definitely up, 10 Mbps full duplex [ 1611.591686][ T1388] bond8: active interface up! [ 1611.736575][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f275400: rx timeout, send abort [ 1611.736808][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f275400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1611.814635][T22806] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1611.815897][T22809] syzkaller0: entered promiscuous mode [ 1611.815915][T22809] syzkaller0: entered allmulticast mode [ 1611.860399][T22812] tipc: Enabled bearer , priority 0 [ 1611.888828][T22812] tipc: Resetting bearer [ 1611.897392][T22808] tipc: Resetting bearer [ 1611.955085][T22808] tipc: Disabling bearer [ 1611.984484][T22817] SET target dimension over the limit! [ 1612.154177][T22832] tcf_pedit_act: 7 callbacks suppressed [ 1612.154194][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.154207][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.154219][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.154231][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.154243][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.154254][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.155029][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.155043][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.155055][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.155067][T22832] tc action pedit 'at' offset 5 out of bounds [ 1612.350705][ T1388] batadv0: left promiscuous mode [ 1612.483355][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1612.547475][T22844] netlink: 'syz.3.11179': attribute type 1 has an invalid length. [ 1613.214931][T22882] bond11: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 1613.214951][T22882] bond11: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1613.214965][T22882] bond11: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1613.249697][T22882] bond11 (unregistering): Released all slaves [ 1613.550775][T22888] syzkaller0: entered promiscuous mode [ 1613.550800][T22888] syzkaller0: entered allmulticast mode [ 1614.473074][T22936] __nla_validate_parse: 26 callbacks suppressed [ 1614.473093][T22936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1614.599851][T30971] Bluetooth: hci2: link tx timeout [ 1614.599869][T30971] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1615.100607][ C0] tipc: Duplicate 8ac7274 using eth(66:e1:71:5b:59:fd) seen on [ 1615.357748][T22976] net_ratelimit: 10 callbacks suppressed [ 1615.357768][T22976] openvswitch: netlink: Flow actions attr not present in new flow. [ 1615.385830][T22976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11209'. [ 1615.406365][T22976] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11209'. [ 1615.512732][ T6650] hid-generic 0005:0008:0009.0005: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1615.661484][T22992] fido_id[22992]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 1616.017057][T23007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1616.639330][T30971] Bluetooth: hci2: command 0x0405 tx timeout [ 1616.861846][T23025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11218'. [ 1617.014524][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11220'. [ 1617.048794][ C0] tipc: Duplicate 8ac7274 using eth(66:e1:71:7b:59:ed) seen on [ 1617.134995][T23037] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1617.162392][T23037] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1617.195451][T23032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11219'. [ 1617.195513][T23032] netlink: 35 bytes leftover after parsing attributes in process `syz.1.11219'. [ 1617.195530][T23032] netlink: 'syz.1.11219': attribute type 5 has an invalid length. [ 1617.195543][T23032] netlink: 'syz.1.11219': attribute type 6 has an invalid length. [ 1617.195555][T23032] netlink: 35 bytes leftover after parsing attributes in process `syz.1.11219'. [ 1617.446952][T23054] syz_tun: entered promiscuous mode [ 1617.480773][T23053] syz_tun: left promiscuous mode [ 1617.718726][T23070] sock: sock_timestamping_bind_phc: sock not bind to device [ 1618.224707][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11229'. [ 1618.378046][T23107] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11231'. [ 1619.077043][T23148] netlink: 'syz.4.11239': attribute type 1 has an invalid length. [ 1619.077064][T23148] netlink: 'syz.4.11239': attribute type 7 has an invalid length. [ 1619.077077][T23148] netlink: 'syz.4.11239': attribute type 8 has an invalid length. [ 1619.077092][T23148] NCSI netlink: No device for ifindex 1073545264 [ 1619.077244][T23150] netlink: 'syz.4.11239': attribute type 1 has an invalid length. [ 1619.077258][T23150] netlink: 'syz.4.11239': attribute type 7 has an invalid length. [ 1619.077295][T23150] netlink: 'syz.4.11239': attribute type 8 has an invalid length. [ 1619.077309][T23150] NCSI netlink: No device for ifindex 1073545264 [ 1619.518630][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1619.555686][T23166] x_tables: unsorted underflow at hook 3 [ 1619.601692][T23168] syzkaller1: entered promiscuous mode [ 1619.601712][T23168] syzkaller1: entered allmulticast mode [ 1620.081706][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.111363][T23177] bond_slave_0: entered promiscuous mode [ 1620.111382][T23177] bond_slave_0: entered allmulticast mode [ 1620.164218][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.164730][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.164943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.223084][T23189] xt_policy: output policy not valid in PREROUTING and INPUT [ 1620.365618][T23197] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1620.723021][T23219] __nla_validate_parse: 6 callbacks suppressed [ 1620.723040][T23219] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11252'. [ 1620.747551][T23219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.748003][T23219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.765061][T23219] bridge0: entered allmulticast mode [ 1620.994152][T23231] syzkaller0: entered promiscuous mode [ 1620.994181][T23231] syzkaller0: entered allmulticast mode [ 1621.126371][T23240] tcf_pedit_act: 7 callbacks suppressed [ 1621.126391][T23240] tc action pedit 'at' offset 5 out of bounds [ 1621.127279][T23239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11253'. [ 1621.170169][T23239] netlink: 'syz.1.11253': attribute type 8 has an invalid length. [ 1621.591751][T23224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1621.685835][T23266] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11261'. [ 1621.938257][T23272] netlink: 'syz.0.11263': attribute type 21 has an invalid length. [ 1621.938304][T23272] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11263'. [ 1621.956791][T23272] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11263'. [ 1622.153711][T23277] tipc: Enabled bearer , priority 0 [ 1622.155361][T23277] syzkaller0: entered promiscuous mode [ 1622.155381][T23277] syzkaller0: entered allmulticast mode [ 1622.196415][T23275] tipc: Resetting bearer [ 1622.299181][T23292] validate_nla: 2 callbacks suppressed [ 1622.299199][T23292] netlink: 'syz.3.11266': attribute type 2 has an invalid length. [ 1622.299622][T23293] netlink: 'syz.3.11266': attribute type 2 has an invalid length. [ 1622.299638][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11266'. [ 1622.301778][T23275] tipc: Disabling bearer [ 1622.682877][T23314] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1622.932367][T23317] tipc: Enabling of bearer rejected, failed to enable media [ 1623.016963][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11271'. [ 1624.779887][T23360] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11278'. [ 1625.014088][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11282'. [ 1625.014836][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11282'. [ 1625.085483][T23386] netlink: 'syz.0.11281': attribute type 2 has an invalid length. [ 1625.120947][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.281737][ T1391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.281861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.290769][T23395] syzkaller1: entered allmulticast mode [ 1625.382365][T23402] netlink: 'syz.2.11288': attribute type 1 has an invalid length. [ 1625.467781][T23402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1625.593804][T23406] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1625.801078][T23426] veth0_to_bond: left promiscuous mode [ 1625.801101][T23426] veth0_to_bond: entered allmulticast mode [ 1625.927814][ T1391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.052036][T23438] __nla_validate_parse: 3 callbacks suppressed [ 1626.052053][T23438] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11298'. [ 1626.081139][T23431] bridge4: entered promiscuous mode [ 1626.081158][T23431] bridge4: entered allmulticast mode [ 1626.197886][T23445] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11300'. [ 1626.211392][T23445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11300'. [ 1626.267062][T23449] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11300'. [ 1626.301933][T23452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11300'. [ 1626.453512][T23455] x_tables: duplicate underflow at hook 2 [ 1626.499655][T23441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1626.641703][T23458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11305'. [ 1626.646774][T23458] netlink: NAT attribute has 8 unknown bytes [ 1626.646803][T23458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1626.690356][T23461] syzkaller0: entered promiscuous mode [ 1626.690375][T23461] syzkaller0: entered allmulticast mode [ 1626.720753][T23463] ip6tnl2: entered allmulticast mode [ 1626.782502][T23468] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11306'. [ 1626.786549][T23468] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11306'. [ 1626.971018][T23471] netlink: 'syz.1.11304': attribute type 4 has an invalid length. [ 1626.971040][T23471] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11304'. [ 1627.209488][T16244] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1627.209695][T16244] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1627.242771][ T6650] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1627.570602][ T5744] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1627.650428][ T5744] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1627.844782][T16248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.845455][T23497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11311'. [ 1628.022564][T23503] netlink: 'syz.3.11314': attribute type 1 has an invalid length. [ 1628.089208][T23507] sctp: [Deprecated]: syz.0.11315 (pid 23507) Use of int in max_burst socket option. [ 1628.089208][T23507] Use struct sctp_assoc_value instead [ 1628.137604][T23503] bond10: entered promiscuous mode [ 1628.137968][T23503] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1628.262898][T23517] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1628.264222][T23517] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1628.264242][T23517] bond10: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1628.283075][T23514] netlink: 'syz.3.11314': attribute type 1 has an invalid length. [ 1628.390135][T23517] bond10: (slave wireguard1): making interface the new active one [ 1628.390155][T23517] wireguard1: entered promiscuous mode [ 1628.398205][T23517] bond10: (slave wireguard1): Enslaving as an active interface with an up link [ 1628.577457][T23520] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1628.636538][T23520] bond10: (slave wireguard2): Enslaving as a backup interface with an up link [ 1628.705873][T23531] netlink: 'syz.2.11317': attribute type 4 has an invalid length. [ 1629.871922][T23575] netlink: 'syz.2.11323': attribute type 1 has an invalid length. [ 1630.027278][T23575] veth5: entered allmulticast mode [ 1630.062462][T23575] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1630.084407][T23581] bond5: (slave veth0_to_bond): making interface the new active one [ 1630.099183][T23581] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1630.154508][T23575] macvlan3: entered promiscuous mode [ 1630.154526][T23575] macvlan3: entered allmulticast mode [ 1630.157536][T23575] bond5: entered promiscuous mode [ 1630.157555][T23575] veth0_to_bond: entered promiscuous mode [ 1630.194341][T23575] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1630.195219][T23575] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1630.195306][T23575] bond5: left promiscuous mode [ 1630.195320][T23575] veth0_to_bond: left promiscuous mode [ 1630.292154][T23603] tipc: Enabled bearer , priority 10 [ 1630.330632][T23595] netlink: 'syz.4.11328': attribute type 3 has an invalid length. [ 1630.330650][T23595] netlink: 'syz.4.11328': attribute type 7 has an invalid length. [ 1630.404310][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.404490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.622446][T23609] tipc: Failed to remove unknown binding: 66,1,1/2276652347:1109440015/1109440017 [ 1630.622474][T23609] tipc: Failed to remove unknown binding: 66,1,1/2276652347:1109440015/1109440017 [ 1630.628595][T23609] netlink: 'syz.2.11331': attribute type 1 has an invalid length. [ 1630.662057][T23615] netlink: 'syz.2.11331': attribute type 1 has an invalid length. [ 1631.038783][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.518647][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1631.549486][T23638] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1631.549523][T23638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1631.552645][T23631] tipc: Enabling of bearer rejected, already enabled [ 1631.595406][T23641] __nla_validate_parse: 135 callbacks suppressed [ 1631.595424][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11341'. [ 1631.689796][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.791521][T23643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11342'. [ 1631.851450][T23647] syzkaller0: entered promiscuous mode [ 1631.851477][T23647] syzkaller0: entered allmulticast mode [ 1631.857912][T23651] tipc: Enabling of bearer rejected, already enabled [ 1631.895396][T23651] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1631.934451][T23647] tipc: Enabling of bearer rejected, already enabled [ 1631.949983][T23651] syzkaller0: mtu less than device minimum [ 1632.034212][T23656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11348'. [ 1632.034353][T23656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11348'. [ 1632.420497][T23684] netlink: 'syz.0.11352': attribute type 2 has an invalid length. [ 1632.459158][T23686] wg0: left allmulticast mode [ 1632.502745][T23689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11354'. [ 1632.505854][T23689] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1632.656744][T23696] xt_ipcomp: unknown flags 1D [ 1632.667616][T23692] bridge0: port 1(bond0) entered blocking state [ 1632.670898][T23692] bridge0: port 1(bond0) entered disabled state [ 1632.671333][T23692] bond0: entered allmulticast mode [ 1632.689625][T23692] bond0: left allmulticast mode [ 1632.693606][T23692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11355'. [ 1632.786509][T23692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11355'. [ 1632.911872][T23710] netlink: 596 bytes leftover after parsing attributes in process `syz.4.11359'. [ 1632.912884][T23710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1633.005853][T23712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.021337][T23712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.146854][T23720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11363'. [ 1633.163456][T23702] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11357'. [ 1633.600734][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.895045][T23757] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 1633.962258][T23750] ip6tnl3: entered allmulticast mode [ 1633.963724][T16244] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1633.963928][T16244] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1633.990504][ T5709] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1633.996421][T23764] IPVS: Unknown mcast interface: lo [ 1634.057070][T23766] netlink: 'syz.0.11374': attribute type 1 has an invalid length. [ 1634.095779][T23766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1634.339788][ T5709] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1634.612992][T23766] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1634.671586][T23776] netlink: 'syz.4.11376': attribute type 1 has an invalid length. [ 1634.739678][T23776] bond12: entered promiscuous mode [ 1634.740112][T23776] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1634.879144][T24310] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1635.519670][T16246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.519943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.158510][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1636.799512][T16246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.072959][T23778] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1637.073353][T23778] bond12: (slave gre1): The slave device specified does not support setting the MAC address [ 1637.073372][T23778] bond12: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1637.135533][T23778] bond12: (slave gre1): making interface the new active one [ 1637.135555][T23778] gre1: entered promiscuous mode [ 1637.160713][T23778] bond12: (slave gre1): Enslaving as an active interface with an up link [ 1637.186777][T23776] bond12 (unregistering): (slave gre1): Releasing backup interface [ 1637.186800][T23776] gre1: left promiscuous mode [ 1637.202924][T23776] bond12 (unregistering): Released all slaves [ 1637.441117][T16241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.842529][T23811] __nla_validate_parse: 10 callbacks suppressed [ 1637.842549][T23811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11385'. [ 1637.972736][T23818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11380'. [ 1638.318981][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1638.497340][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11387'. [ 1638.497371][T23828] netlink: 'syz.1.11387': attribute type 30 has an invalid length. [ 1638.527123][T23828] vxlan2: entered promiscuous mode [ 1638.527142][T23828] vxlan2: entered allmulticast mode [ 1638.552067][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11387'. [ 1638.552095][T23830] netlink: 'syz.1.11387': attribute type 30 has an invalid length. [ 1638.587224][T23830] vxlan2: entered promiscuous mode [ 1638.587242][T23830] vxlan2: entered allmulticast mode [ 1638.627990][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11387'. [ 1638.628016][T23828] netlink: 'syz.1.11387': attribute type 30 has an invalid length. [ 1638.694746][T23828] vxlan2: entered promiscuous mode [ 1638.696311][T23828] vxlan2: entered allmulticast mode [ 1638.721450][T16248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.635392][T23867] bridge0: port 3(syz_tun) entered blocking state [ 1639.635537][T23867] bridge0: port 3(syz_tun) entered disabled state [ 1639.635702][T23867] syz_tun: entered allmulticast mode [ 1639.637297][T23867] syz_tun: entered promiscuous mode [ 1639.787792][T23871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11399'. [ 1639.816389][T23880] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11400'. [ 1639.822475][T23879] siw: device registration error -23 [ 1639.833715][T23880] 0ªî{X¹¦: entered promiscuous mode [ 1639.998565][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1640.191667][T23894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11405'. [ 1640.239280][T23894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1640.375437][T23903] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1640.612060][T23907] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11410'. [ 1640.663435][T23909] netlink: 124 bytes leftover after parsing attributes in process `syz.1.11410'. [ 1640.736369][T23919] netlink: 'syz.3.11412': attribute type 4 has an invalid length. [ 1640.934484][T23928] netlink: 'syz.4.11413': attribute type 4 has an invalid length. [ 1641.147750][T23942] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1641.281105][T16248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.281302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.457094][T23956] netlink: 'syz.3.11420': attribute type 2 has an invalid length. [ 1641.480286][T23956] : entered promiscuous mode [ 1642.571997][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.895417][T24033] __nla_validate_parse: 8 callbacks suppressed [ 1642.895436][T24033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11440'. [ 1642.895456][T24033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11440'. [ 1642.895518][T24033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11440'. [ 1643.106461][T24043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11442'. [ 1643.156225][T24043] ip_tables: iptables: counters copy to user failed while replacing table [ 1643.201569][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11442'. [ 1643.211240][T16241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.400467][T24057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11443'. [ 1643.446627][T24060] sctp: [Deprecated]: syz.2.11444 (pid 24060) Use of int in max_burst socket option. [ 1643.446627][T24060] Use struct sctp_assoc_value instead [ 1643.787340][T24072] macsec1: entered promiscuous mode [ 1644.480168][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.859650][T24033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1646.932684][T24170] macsec0: entered promiscuous mode [ 1646.956664][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11453'. [ 1646.980258][T24170] veth1_macvtap: left promiscuous mode [ 1647.010720][T24170] macsec0 (unregistering): left promiscuous mode [ 1647.053056][T24176] erspan0: left promiscuous mode [ 1647.053075][T24176] erspan0: left allmulticast mode [ 1647.076110][T16241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.076284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.301857][T24183] netlink: 'syz.1.11455': attribute type 29 has an invalid length. [ 1647.301879][T24183] netlink: 'syz.1.11455': attribute type 31 has an invalid length. [ 1647.302840][T24183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11455'. [ 1647.511396][T24187] bond5: option fail_over_mac: invalid value (127) [ 1647.512941][T24187] bond5 (unregistering): Released all slaves [ 1647.679495][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1647.680390][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.139701][T24218] ovs-s: entered promiscuous mode [ 1648.581502][T24240] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11469'. [ 1648.667113][T24244] bond10: entered promiscuous mode [ 1648.667144][T24244] bond10: entered allmulticast mode [ 1648.860581][T24262] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11470'. [ 1648.903007][T24263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11474'. [ 1648.959879][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.073023][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11474'. [ 1649.433600][T24281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11477'. [ 1650.033297][T24307] tipc: Enabling of bearer rejected, already enabled [ 1650.058054][T24304] openvswitch: netlink: Flow actions attr not present in new flow. [ 1650.074979][T24306] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1650.199128][T24312] netlink: 'syz.1.11485': attribute type 1 has an invalid length. [ 1650.199149][T24312] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11485'. [ 1650.241843][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.396241][T24318] x_tables: duplicate underflow at hook 2 [ 1650.507472][T24321] geneve0: Device is already in use. [ 1650.544020][T24321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11490'. [ 1652.800603][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.800782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.214079][T24360] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11498'. [ 1653.283172][T24369] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11501'. [ 1653.311915][T16244] nci: nci_rx_work: unknown MT 0x1 [ 1653.337225][T24373] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11502'. [ 1653.438818][ C0] ip6_tunnel: L xmit: Local address not yet configured! [ 1653.442179][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.447203][T24382] openvswitch: ovs-system: Dropping previously announced user features [ 1653.565492][T24389] netlink: 'syz.3.11506': attribute type 1 has an invalid length. [ 1653.565504][T24389] netlink: 'syz.3.11506': attribute type 2 has an invalid length. [ 1653.991583][T24357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1654.010800][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.032503][T24404] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1654.414433][T24418] wg2 speed is unknown, defaulting to 1000 [ 1654.431093][T24418] lo speed is unknown, defaulting to 1000 [ 1654.431493][T24419] netlink: 'syz.1.11513': attribute type 1 has an invalid length. [ 1654.527441][T24419] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1654.589121][T24427] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 1654.694930][T24426] veth11: entered promiscuous mode [ 1654.828743][T24436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1655.236016][T24455] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1655.999406][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1656.003299][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.293026][T24494] tipc: Invalid UDP bearer configuration [ 1656.293067][T24494] tipc: Enabling of bearer rejected, failed to enable media [ 1656.873032][T24518] geneve3: entered allmulticast mode [ 1657.344940][T24547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1657.392016][T24548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1657.503246][T24550] netlink: 'syz.0.11540': attribute type 1 has an invalid length. [ 1657.503285][T24550] __nla_validate_parse: 1 callbacks suppressed [ 1657.503298][T24550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11540'. [ 1657.922827][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.922999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.972532][T24575] netlink: 'syz.1.11546': attribute type 16 has an invalid length. [ 1657.972551][T24575] netlink: 'syz.1.11546': attribute type 17 has an invalid length. [ 1657.972661][T24575] lo: left promiscuous mode [ 1657.976759][T24575] tunl0: left promiscuous mode [ 1658.009421][T24575] gre0: left promiscuous mode [ 1658.015202][T24575] erspan0: left promiscuous mode [ 1658.017211][T24575] ip_vti0: left promiscuous mode [ 1658.037572][T24575] ip6_vti0: left promiscuous mode [ 1658.048098][T24575] sit0: left promiscuous mode [ 1658.097239][T24575] ip6tnl0: left promiscuous mode [ 1658.120553][T24575] ip6gre0: left promiscuous mode [ 1658.123377][T24575] ip6gretap0: left promiscuous mode [ 1658.126100][T24575] vcan0: left promiscuous mode [ 1658.127356][T24575] bond0: left promiscuous mode [ 1658.195528][T24575] nlmon0: left promiscuous mode [ 1658.221084][T24575] batadv0: left promiscuous mode [ 1658.222782][T24575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.234687][T24575] vxcan0: left promiscuous mode [ 1658.250744][T24575] vxcan1: left promiscuous mode [ 1658.258911][T24575] veth0: left promiscuous mode [ 1658.265653][T24575] veth1: left promiscuous mode [ 1658.326352][T24575] wg0: left promiscuous mode [ 1658.377149][T24575] wg1: left promiscuous mode [ 1658.385411][T24575] wg2: left promiscuous mode [ 1658.387558][T24575] veth0_to_bridge: left promiscuous mode [ 1658.403011][T24575] veth1_to_bridge: left promiscuous mode [ 1658.404173][T24575] bridge_slave_1: left promiscuous mode [ 1658.404813][T24575] veth0_to_bond: left allmulticast mode [ 1658.405960][T24575] bond_slave_0: left promiscuous mode [ 1658.406665][T24575] veth1_to_bond: left promiscuous mode [ 1658.407819][T24575] bond_slave_1: left promiscuous mode [ 1658.482176][T24575] veth1_to_team: left promiscuous mode [ 1658.483003][T24575] tipc: Resetting bearer [ 1658.483123][T24575] tipc: Resetting bearer [ 1658.483384][T24575] team_slave_1: left promiscuous mode [ 1658.516191][T24575] veth0_to_batadv: left promiscuous mode [ 1658.536495][T24575] batadv_slave_0: left promiscuous mode [ 1658.550423][T24575] xfrm0: left promiscuous mode [ 1658.557558][T24575] veth1_virt_wifi: left promiscuous mode [ 1658.567731][T24588] xt_bpf: check failed: parse error [ 1658.582887][T24575] veth0_virt_wifi: left promiscuous mode [ 1658.583965][T24575] virt_wifi0: left promiscuous mode [ 1658.605878][T24575] veth1_macvtap: left promiscuous mode [ 1658.606790][T24575] veth0_macvtap: left promiscuous mode [ 1658.619513][T24575] veth0_macvtap: entered promiscuous mode [ 1658.627395][T24575] macvtap0: left promiscuous mode [ 1658.637336][T24575] veth1_macvtap: entered promiscuous mode [ 1658.646726][T24575] macsec0: left promiscuous mode [ 1658.647825][T24575] geneve0: left promiscuous mode [ 1658.661173][T24575] geneve1: left promiscuous mode [ 1658.691121][T24575] mac80211_hwsim hwsim137 wlan1: left promiscuous mode [ 1658.696223][T24575] bond1: left promiscuous mode [ 1658.711949][T24575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1658.712739][T24575] vti0: left promiscuous mode [ 1658.714649][T24575] bridge1: left promiscuous mode [ 1658.716661][T24575] bridge2: left promiscuous mode [ 1658.745363][T24575] bridge3: left promiscuous mode [ 1658.747131][T24575] bond2: left promiscuous mode [ 1658.747552][T24575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1658.767478][T24575] bridge4: left promiscuous mode [ 1658.775368][T24575] bareudp0: left promiscuous mode [ 1658.777253][T24575] bond3: left promiscuous mode [ 1658.777689][T24575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1658.800112][T24575] bond4: left promiscuous mode [ 1658.800425][T24575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1658.814466][T24575] ip6erspan0: left promiscuous mode [ 1658.814507][T24575] ip6erspan0: left allmulticast mode [ 1658.849330][T24575] gtp0: left promiscuous mode [ 1658.854543][T24575] bridge5: left promiscuous mode [ 1658.889630][T24575] bridge6: left promiscuous mode [ 1658.893089][T24575] vlan0004: left promiscuous mode [ 1658.893106][T24575] bridge_slave_0: left promiscuous mode [ 1658.895127][T24575] ipvlan0: left promiscuous mode [ 1658.896345][T24575] ipvlan1: left promiscuous mode [ 1658.897353][T24575] vxlan0: left promiscuous mode [ 1658.928838][T24575] ip6tnl1: left promiscuous mode [ 1658.942631][T24575] ieee802154 phy2 wpan3: left promiscuous mode [ 1658.943152][T24575] ieee802154 phy2 wpan0: left promiscuous mode [ 1658.943171][T24575] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check. [ 1658.990652][T24573] syzkaller0: left promiscuous mode [ 1658.990665][T24573] syzkaller0: left allmulticast mode [ 1659.062748][T24591] netlink: 'syz.2.11549': attribute type 1 has an invalid length. [ 1659.075511][T24591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11549'. [ 1659.202775][T16248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.203646][T16248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.597659][T24616] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1659.629314][T24610] netlink: 'syz.0.11554': attribute type 23 has an invalid length. [ 1659.669683][T24610] syzkaller1: entered promiscuous mode [ 1659.669702][T24610] syzkaller1: entered allmulticast mode [ 1659.830929][T24618] netlink: 'syz.1.11556': attribute type 10 has an invalid length. [ 1660.234072][T24637] x_tables: duplicate underflow at hook 1 [ 1660.596776][T24646] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1661.426193][T24656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11565'. [ 1661.548232][T24660] netlink: 260 bytes leftover after parsing attributes in process `syz.1.11566'. [ 1661.567700][T24660] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11566'. [ 1661.567722][T24660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11566'. [ 1661.567736][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11566'. [ 1661.759365][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.796828][T24668] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1661.796856][T24668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1661.831743][T24669] netlink: 'syz.2.11569': attribute type 3 has an invalid length. [ 1661.831761][T24669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11569'. [ 1661.831931][T24668] netlink: 'syz.2.11569': attribute type 3 has an invalid length. [ 1661.831945][T24668] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11569'. [ 1662.134947][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11571'. [ 1663.172186][T24724] netlink: 'syz.4.11580': attribute type 1 has an invalid length. [ 1663.281757][T24724] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1663.411703][T24737] openvswitch: netlink: Flow actions attr not present in new flow. [ 1663.536285][T24745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11583'. [ 1663.646801][T24751] batman_adv: batadv0: Adding interface: syzkaller0 [ 1663.646818][T24751] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 1663.647032][T24751] batman_adv: batadv0: Interface activated: syzkaller0 [ 1663.715986][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.716210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.814419][ T1402] bridge_slave_1: left allmulticast mode [ 1663.814681][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.843712][ T1402] bridge_slave_0: left allmulticast mode [ 1663.843935][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.436216][ T1402] bond9 (unregistering): (slave erspan1): Releasing active interface [ 1664.576450][ T1402] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1664.667527][ T1402] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1664.690086][ T1402] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1664.785534][ T1402] bond0 (unregistering): Released all slaves [ 1664.811257][ T1402] bond1 (unregistering): Released all slaves [ 1664.829527][ T1402] bond2 (unregistering): Released all slaves [ 1664.855542][ T1402] bond3 (unregistering): Released all slaves [ 1664.875475][ T1402] bond4 (unregistering): Released all slaves [ 1664.897933][ T1402] bond5 (unregistering): Released all slaves [ 1664.912993][ T1402] bond6 (unregistering): Released all slaves [ 1664.926468][ T1402] bond7 (unregistering): Released all slaves [ 1664.950748][ T1402] bond8 (unregistering): Released all slaves [ 1664.961125][ T1392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.963046][ T1392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.970733][ T1402] bond9 (unregistering): Released all slaves [ 1665.003346][ T1402] bond10 (unregistering): Released all slaves [ 1665.023771][ T1402] bond11 (unregistering): Released all slaves [ 1665.051763][ T1402] bond12 (unregistering): (slave bond13): Releasing backup interface [ 1665.052395][ T1402] bond12 (unregistering): Released all slaves [ 1665.093469][ T1402] bond13 (unregistering): Released all slaves [ 1665.314760][ T1402] tipc: Disabling bearer [ 1665.314867][ T1402] tipc: Disabling bearer [ 1665.314956][ T1402] tipc: Left network mode [ 1665.576104][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11597'. [ 1665.598540][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1665.942600][T24825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11600'. [ 1665.971916][T24814] syzkaller1: entered promiscuous mode [ 1665.971939][T24814] syzkaller1: entered allmulticast mode [ 1665.977172][T24825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11600'. [ 1665.977203][T24825] bond0: ARP target 0.0.0.2 is already present [ 1665.977221][T24825] bond0: option arp_ip_target: invalid value (33554432) [ 1666.223348][T24832] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20001 [ 1666.742813][T24866] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1667.146588][T24876] netlink: 'syz.3.11609': attribute type 5 has an invalid length. [ 1667.234763][T24877] netlink: 'syz.3.11609': attribute type 10 has an invalid length. [ 1667.234784][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11609'. [ 1667.234969][T24879] netlink: 'syz.3.11609': attribute type 10 has an invalid length. [ 1667.234985][T24879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11609'. [ 1667.366489][ T30] audit: type=1800 audit(1790012861.242:63): pid=24875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11608" name="memory.events" dev="tmpfs" ino=2650 res=0 errno=0 [ 1667.521526][T16248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.800801][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 1668.066010][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11610'. [ 1668.068178][T24872] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1668.319731][T24894] netlink: 'syz.3.11612': attribute type 32 has an invalid length. [ 1668.374810][T24892] dvmrp8: entered allmulticast mode [ 1668.410525][T24892] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11613'. [ 1668.456291][T16244] nci: nci_rx_work: unknown MT 0x6 [ 1668.457044][T16244] nci: nci_rx_work: unknown MT 0x6 [ 1668.476838][T24902] netlink: 'syz.2.11611': attribute type 4 has an invalid length. [ 1668.476856][T24902] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11611'. [ 1668.520981][T24902] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1668.675756][T24909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11615'. [ 1668.675791][T24909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11615'. [ 1668.800495][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1669.440091][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.440218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.719413][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.720236][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.153487][T24884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1671.443121][T24928] block nbd0: reconnected socket [ 1671.705206][T24938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11617'. [ 1671.726322][T13257] block nbd0: Receive control failed (result -32) [ 1671.804488][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11619'. [ 1671.834712][T24943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11617'. [ 1671.853787][T24947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11623'. [ 1672.103818][T24955] netlink: 'syz.2.11624': attribute type 1 has an invalid length. [ 1672.175660][T24955] bond6: entered promiscuous mode [ 1672.177496][T24955] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1672.273770][T24957] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1672.286951][T24957] bond6: (slave gre3): The slave device specified does not support setting the MAC address [ 1672.286973][T24957] bond6: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 1672.323004][T24957] bond6: (slave gre3): making interface the new active one [ 1672.323024][T24957] gre3: entered promiscuous mode [ 1672.344023][T24957] bond6: (slave gre3): Enslaving as an active interface with an up link [ 1672.432601][T24955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11624'. [ 1672.645649][T16236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.214073][T24991] netlink: 'syz.3.11631': attribute type 1 has an invalid length. [ 1673.280349][T24991] bond11: entered promiscuous mode [ 1673.280680][T24991] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1673.352397][T24991] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1673.352771][T24991] bond11: (slave gre1): The slave device specified does not support setting the MAC address [ 1673.352790][T24991] bond11: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1673.404274][T24991] bond11: (slave gre1): making interface the new active one [ 1673.404294][T24991] gre1: entered promiscuous mode [ 1673.407643][T24991] bond11: (slave gre1): Enslaving as an active interface with an up link [ 1673.444323][T24996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11632'. [ 1673.444350][T24996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11632'. [ 1673.523211][T24998] syzkaller1: entered promiscuous mode [ 1673.523229][T24998] syzkaller1: entered allmulticast mode [ 1673.593166][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11635'. [ 1673.752564][T25017] netlink: 'syz.2.11639': attribute type 4 has an invalid length. [ 1673.755149][T25015] netlink: 452 bytes leftover after parsing attributes in process `syz.1.11635'. [ 1674.121979][T25026] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11642'. [ 1674.791959][T25049] ipvlan2: entered allmulticast mode [ 1674.791980][T25049] macvlan1: entered allmulticast mode [ 1674.791992][T25049] veth1_vlan: entered allmulticast mode [ 1675.042936][T25057] ipvlan2: entered allmulticast mode [ 1675.709537][T25089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11651'. [ 1675.770872][T25089] netlink: 'syz.2.11651': attribute type 39 has an invalid length. [ 1676.010484][T25115] netlink: 'syz.2.11655': attribute type 1 has an invalid length. [ 1676.216982][T25109] smc: adding net device vlan1 with user defined pnetid SYZ2 [ 1676.222508][T25109] vlan1: entered allmulticast mode [ 1676.222553][T25109] bond0: entered allmulticast mode [ 1676.481745][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.481971][ T1402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.594125][T25130] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3040 [ 1676.610106][T25125] xt_hashlimit: size too large, truncated to 1048576 [ 1676.762885][T25130] netlink: 112 bytes leftover after parsing attributes in process `syz.1.11658'. [ 1677.049418][T25140] vcan0: entered allmulticast mode [ 1677.049630][T25140] vcan0: left allmulticast mode [ 1677.690031][T25158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11665'. [ 1677.822619][T25163] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1677.823761][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11667'. [ 1677.853322][T25163] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1677.875965][T25163] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1677.893335][ T5730] lo speed is unknown, defaulting to 1000 [ 1677.953517][ T1407] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1677.955698][T25164] netlink: 'syz.4.11668': attribute type 3 has an invalid length. [ 1677.955916][T25164] netlink: 'syz.4.11668': attribute type 3 has an invalid length. [ 1677.961264][T25158] syzkaller0: entered promiscuous mode [ 1677.961309][T25158] syzkaller0: entered allmulticast mode [ 1678.076533][T25186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11671'. [ 1678.382417][T25184] bridge2: entered promiscuous mode [ 1678.407436][ T1401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.432215][T25193] netlink: 'syz.1.11673': attribute type 1 has an invalid length. [ 1678.432234][T25193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11673'. [ 1678.742484][T25223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11675'. [ 1678.825666][T25227] syzkaller1: entered promiscuous mode [ 1678.825688][T25227] syzkaller1: entered allmulticast mode [ 1679.018016][T25239] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11680'. [ 1679.263679][T25239] netlink: 'syz.3.11680': attribute type 4 has an invalid length. [ 1679.263701][T25239] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.11680'. [ 1679.289674][T25253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11682'. [ 1679.290038][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11682'. [ 1679.293425][T25255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11682'. [ 1679.307578][T25256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11682'. [ 1679.774861][T25280] Bluetooth: hci0: unsupported parameter 5135 [ 1679.774880][T25280] Bluetooth: hci0: unsupported parameter 8192 [ 1679.774891][T25280] Bluetooth: hci0: unsupported parameter 5135 [ 1679.774901][T25280] Bluetooth: hci0: unsupported parameter 8192 [ 1679.862704][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11690'. [ 1679.932719][T25291] netlink: 'syz.1.11690': attribute type 3 has an invalid length. [ 1680.064893][T25300] syzkaller0: entered promiscuous mode [ 1680.064915][T25300] syzkaller0: entered allmulticast mode [ 1680.272002][T25307] syzkaller0: entered promiscuous mode [ 1680.272024][T25307] syzkaller0: entered allmulticast mode [ 1680.470135][T25326] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11697'. [ 1680.473518][T25325] wg2 speed is unknown, defaulting to 1000 [ 1680.489293][T25325] lo speed is unknown, defaulting to 1000 [ 1680.696448][T25330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1681.115941][T25343] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 1681.142762][T25343] tipc: Enabling of bearer rejected, failed to enable media [ 1681.378114][T25355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11704'. [ 1681.785306][T25363] netlink: 'syz.3.11705': attribute type 3 has an invalid length. [ 1681.787334][T25363] netlink: 'syz.3.11705': attribute type 4 has an invalid length. [ 1681.787352][T25363] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11705'. [ 1681.998540][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1682.081443][T25363] xt_CT: No such helper "snmp_trap" [ 1682.241312][ T1393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.242557][ T1401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.366832][T25387] netlink: 'syz.1.11709': attribute type 1 has an invalid length. [ 1682.794661][T25387] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1682.851957][T25389] bond12: (slave geneve4): making interface the new active one [ 1682.870953][T25389] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 1683.115286][T25416] xt_CT: No such helper "snmp_trap" [ 1683.410583][T25431] bond7: entered allmulticast mode [ 1683.433783][T25431] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1683.435588][T25431] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 1683.503649][T25438] ip6erspan0: entered allmulticast mode [ 1683.520760][ T1407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.584309][T25440] netlink: Failed to add helper -22 [ 1683.584356][T25440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1683.846297][T25452] bond5: option lacp_rate: invalid value (3) [ 1683.847836][T25452] bond5 (unregistering): Released all slaves [ 1684.110844][T25468] netlink: 'syz.1.11725': attribute type 1 has an invalid length. [ 1684.110865][T25468] __nla_validate_parse: 4 callbacks suppressed [ 1684.110877][T25468] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11725'. [ 1684.263372][T25476] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11724'. [ 1684.406698][T25481] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11728'. [ 1684.621857][T25488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11729'. [ 1685.014352][T25503] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11731'. [ 1685.109464][T25510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1685.206074][T25515] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11733'. [ 1685.206093][T25515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11733'. [ 1685.443884][T25520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11735'. [ 1685.568991][T25535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11738'. [ 1685.610796][T25534] xt_policy: output policy not valid in PREROUTING and INPUT [ 1685.667154][ T5280] veth1_vlan: left promiscuous mode [ 1686.406401][T25581] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1686.736353][T25543] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1686.925748][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11750'. [ 1687.101579][T25604] veth7: entered allmulticast mode [ 1687.358800][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1687.366187][ T1388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.366760][ T1388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.642058][ T1404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.649483][T12006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.649637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.773610][T25663] netlink: 'syz.2.11767': attribute type 21 has an invalid length. [ 1688.915350][T25661] lo: left promiscuous mode [ 1688.917839][T25661] tunl0: left promiscuous mode [ 1688.947175][T25661] ip_vti0: left promiscuous mode [ 1688.947862][T25661] ip6_vti0: left promiscuous mode [ 1688.964631][T25661] sit0: left promiscuous mode [ 1688.965458][T25661] ip6tnl0: left promiscuous mode [ 1688.981543][T25661] ip6gre0: left promiscuous mode [ 1688.986349][T25661] syz_tun: left promiscuous mode [ 1689.003099][T25661] bridge0: left promiscuous mode [ 1689.013846][T25661] bond0: left promiscuous mode [ 1689.020606][T25661] team0: left promiscuous mode [ 1689.037308][T25661] dummy0: left promiscuous mode [ 1689.083260][T25661] nlmon0: left promiscuous mode [ 1689.087043][T25661] batadv0: left promiscuous mode [ 1689.087851][T25661] veth0: left promiscuous mode [ 1689.094782][T25661] veth1: left promiscuous mode [ 1689.102234][T25661] wg0: left promiscuous mode [ 1689.117695][T25661] wg1: left promiscuous mode [ 1689.124221][T25661] wg2: left promiscuous mode [ 1689.124928][T25661] veth0_to_bridge: left promiscuous mode [ 1689.125632][T25661] bridge_slave_0: left promiscuous mode [ 1689.126269][T25661] veth1_to_bridge: left promiscuous mode [ 1689.164420][T25661] veth0_to_bond: left promiscuous mode [ 1689.179736][T25661] bond_slave_0: left promiscuous mode [ 1689.180503][T25661] veth1_to_bond: left promiscuous mode [ 1689.232134][T25661] bond_slave_1: left promiscuous mode [ 1689.232784][T25661] veth1_to_team: left promiscuous mode [ 1689.246001][T25661] team_slave_1: left promiscuous mode [ 1689.272739][T25661] veth1_to_batadv: left promiscuous mode [ 1689.297726][T25661] batadv_slave_1: left promiscuous mode [ 1689.314594][T25661] xfrm0: left promiscuous mode [ 1689.342924][T25661] veth0_to_hsr: left promiscuous mode [ 1689.366825][T25661] veth1_to_hsr: left promiscuous mode [ 1689.396550][T25661] hsr0: left promiscuous mode [ 1689.413911][T25661] veth1_virt_wifi: left promiscuous mode [ 1689.416403][T25661] veth0_virt_wifi: left promiscuous mode [ 1689.448160][T25661] macvlan0: left promiscuous mode [ 1689.740766][T25661] bond6: left promiscuous mode [ 1689.745618][T25691] sctp: [Deprecated]: syz.1.11768 (pid 25691) Use of int in maxseg socket option. [ 1689.745618][T25691] Use struct sctp_assoc_value instead [ 1689.816891][T25661] geneve2: left promiscuous mode [ 1689.850562][T25695] __nla_validate_parse: 6 callbacks suppressed [ 1689.850578][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11771'. [ 1689.852445][T25696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11771'. [ 1689.854947][T25661] veth11: left promiscuous mode [ 1689.918152][T25698] netlink: 'syz.0.11772': attribute type 21 has an invalid length. [ 1689.918652][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1689.938124][T25700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1690.048114][T25698] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11772'. [ 1690.155984][T25707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11773'. [ 1690.156012][T25707] netlink: 'syz.4.11773': attribute type 1 has an invalid length. [ 1690.192952][T25707] geneve3: entered promiscuous mode [ 1692.487472][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.044500][T25744] gtp1: entered promiscuous mode [ 1693.044522][T25744] gtp1: entered allmulticast mode [ 1693.062086][T25744] netlink: 51 bytes leftover after parsing attributes in process `syz.3.11785'. [ 1693.123043][ T1388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.148255][T12006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.148273][T12006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.219879][T25746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11784'. [ 1693.230198][T25748] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11784'. [ 1693.324078][T25754] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11789'. [ 1693.325533][T25754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11789'. [ 1693.375802][T25768] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11789'. [ 1693.610503][T25775] veth0_to_bridge: entered allmulticast mode [ 1693.749441][T25789] netlink: Only one type of NAT may be specified [ 1693.749470][T25789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1693.792683][T25791] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1694.046550][T25781] netlink: 'syz.1.11791': attribute type 1 has an invalid length. [ 1694.219426][T25781] bond13: entered promiscuous mode [ 1694.219766][T25781] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1694.400853][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.401021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.401554][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.781262][T25837] xfrm0: entered promiscuous mode [ 1694.786517][T25837] team0: Port device xfrm0 added [ 1694.914406][T25851] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 1695.055355][T25857] __nla_validate_parse: 9 callbacks suppressed [ 1695.055374][T25857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11808'. [ 1695.055453][T25851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11808'. [ 1695.480078][T25873] netlink: 'syz.1.11811': attribute type 1 has an invalid length. [ 1695.480101][T25873] netlink: 756 bytes leftover after parsing attributes in process `syz.1.11811'. [ 1695.485117][T25879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1695.485809][T25879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1695.697140][T25900] netlink: 'syz.0.11814': attribute type 39 has an invalid length. [ 1695.828084][T25903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11817'. [ 1696.380549][T25938] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11822'. [ 1696.415078][T25942] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 1696.415147][T25941] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 1696.674392][T25951] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1696.690874][T25956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11827'. [ 1696.696045][T25951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11828'. [ 1696.853363][T25954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11826'. [ 1696.855638][T25954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11826'. [ 1696.858059][T25954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11826'. [ 1697.087845][T25978] netlink: 'syz.2.11834': attribute type 10 has an invalid length. [ 1697.194435][T25978] netlink: 'syz.2.11834': attribute type 10 has an invalid length. [ 1697.225625][T25978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1697.272296][T25978] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1697.365329][T25987] lo speed is unknown, defaulting to 1000 [ 1697.365384][T25987] lo speed is unknown, defaulting to 1000 [ 1697.366063][T25987] lo speed is unknown, defaulting to 1000 [ 1697.377420][T25987] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1697.377500][T25987] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1697.377596][T25987] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1697.460820][ T5717] lo speed is unknown, defaulting to 1000 [ 1697.518266][T25987] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1697.563763][T25987] lo speed is unknown, defaulting to 1000 [ 1697.575946][T25987] lo speed is unknown, defaulting to 1000 [ 1697.590547][T25987] lo speed is unknown, defaulting to 1000 [ 1697.592262][T25987] lo speed is unknown, defaulting to 1000 [ 1697.594381][T25987] lo speed is unknown, defaulting to 1000 [ 1697.596028][T25987] lo speed is unknown, defaulting to 1000 [ 1697.597689][T25987] lo speed is unknown, defaulting to 1000 [ 1697.661440][T25987] lo speed is unknown, defaulting to 1000 [ 1697.663083][T25987] lo speed is unknown, defaulting to 1000 [ 1697.664790][T25987] lo speed is unknown, defaulting to 1000 [ 1697.666446][T25987] lo speed is unknown, defaulting to 1000 [ 1698.136126][T26016] syzkaller0: entered promiscuous mode [ 1698.136147][T26016] syzkaller0: entered allmulticast mode [ 1698.249676][ T1404] net_ratelimit: 6 callbacks suppressed [ 1698.249695][ T1404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.251669][ T1404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.556389][T26054] netlink: 'syz.1.11850': attribute type 10 has an invalid length. [ 1698.569554][T26054] netlink: 'syz.1.11850': attribute type 10 has an invalid length. [ 1698.836877][T26076] netlink: Unknown NAT attribute (type=1137, max=9) [ 1698.836911][T26076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1699.186130][T26082] vxcan0: entered allmulticast mode [ 1699.336775][T26086] bond8: Removing last ns target with arp_interval on [ 1699.519119][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1699.734258][T26108] netlink: 'syz.0.11864': attribute type 2 has an invalid length. [ 1700.003408][T26126] netlink: 'syz.3.11870': attribute type 7 has an invalid length. [ 1700.163393][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.165567][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.165732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.263605][T26114] __nla_validate_parse: 72 callbacks suppressed [ 1700.263622][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11868'. [ 1700.745577][T26164] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1700.767429][T26164] netlink: 'syz.4.11877': attribute type 2 has an invalid length. [ 1700.768188][T26167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11878'. [ 1700.855218][T26167] ip6gre4: entered promiscuous mode [ 1700.855261][T26167] ip6gre4: entered allmulticast mode [ 1700.857340][T23117] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1700.857532][T23117] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1700.886077][ T5717] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1700.894882][T26167] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1700.964526][T26169] netlink: 'syz.0.11878': attribute type 2 has an invalid length. [ 1700.992877][T26188] wg2 speed is unknown, defaulting to 1000 [ 1700.994421][T26188] lo speed is unknown, defaulting to 1000 [ 1700.995935][T26188] lo speed is unknown, defaulting to 1000 [ 1700.998130][T26192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11883'. [ 1701.303967][ T5717] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1701.555821][T26217] ip_tunnel: non-ECT from 10.1.1.1 with TOS=0x2 [ 1701.573973][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11889'. [ 1701.574045][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11889'. [ 1701.680684][T18605] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1701.793961][T26226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11891'. [ 1702.120154][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11895'. [ 1702.120465][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11895'. [ 1702.571962][T26262] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1702.591130][T26261] ªªªªªª: renamed from vlan0 (while UP) [ 1702.649110][T26262] tc_dump_action: action bad kind [ 1702.670800][T26272] tc_dump_action: action bad kind [ 1702.971645][T26285] netlink: 'syz.3.11902': attribute type 1 has an invalid length. [ 1703.095880][T26285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11902'. [ 1703.132790][T26285] macvlan4: entered promiscuous mode [ 1703.132811][T26285] macvlan4: entered allmulticast mode [ 1703.136359][T26285] bond13: entered promiscuous mode [ 1703.177158][T26288] nbd: must specify a size in bytes for the device [ 1703.177637][T26285] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1703.264023][T26285] bond13: left promiscuous mode [ 1704.000374][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.003020][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.172410][T26327] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11910'. [ 1704.450771][ T152] nci: nci_ntf_packet: unknown ntf opcode 0xc24 [ 1704.696888][T26294] veth1_vlan: left allmulticast mode [ 1704.951762][T26339] netlink: 'syz.1.11911': attribute type 7 has an invalid length. [ 1704.951784][T26339] netlink: 'syz.1.11911': attribute type 8 has an invalid length. [ 1704.975270][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1705.229509][T26294] tipc: Resetting bearer [ 1705.342667][T26309] __nla_validate_parse: 2 callbacks suppressed [ 1705.342687][T26309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1705.342704][T26309] netlink: 11 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1705.342722][T26309] netlink: 11 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1705.342736][T26309] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1705.451142][T23117] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 37655 - 0 [ 1705.451173][T23117] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1705.451210][T23117] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 37655 - 0 [ 1705.451235][T23117] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1705.451269][T23117] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 37655 - 0 [ 1705.451293][T23117] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1705.569034][ T1393] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 37655 - 0 [ 1705.569065][ T1393] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1705.647893][T26349] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20001 [ 1705.919116][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1705.920719][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.920892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.921666][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.072087][T26345] ip6gretap0: entered promiscuous mode [ 1706.072112][T26345] ip6gretap0: entered allmulticast mode [ 1706.379219][T26380] netlink: 'syz.1.11919': attribute type 61 has an invalid length. [ 1707.096577][T26331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1707.392398][T26397] netlink: 'syz.3.11922': attribute type 34 has an invalid length. [ 1707.392418][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11922'. [ 1707.483022][T26397] bond14: option lacp_strict: invalid value (236) [ 1707.505020][T26397] bond14 (unregistering): Released all slaves [ 1707.614738][T26419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11928'. [ 1707.769860][T26416] tipc: Enabling of bearer rejected, failed to enable media [ 1708.065700][T26439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11932'. [ 1709.031602][T26492] netlink: 'syz.0.11938': attribute type 8 has an invalid length. [ 1709.123561][T26149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.345017][T26506] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1709.381758][T26506] bond5 (unregistering): Released all slaves [ 1709.535026][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11943'. [ 1709.740048][T26529] tc_dump_action: action bad kind [ 1709.762518][T26149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.281778][T26552] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11949'. [ 1710.284718][T26551] netlink: 67 bytes leftover after parsing attributes in process `syz.0.11948'. [ 1710.285690][T26552] netlink: 'syz.1.11949': attribute type 15 has an invalid length. [ 1710.363426][T26546] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check. [ 1710.366917][T26549] netlink: 'syz.1.11949': attribute type 3 has an invalid length. [ 1710.367128][T26549] netlink: 'syz.1.11949': attribute type 3 has an invalid length. [ 1710.470518][T26551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.712677][T26551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1710.712702][T26551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1710.747279][T26551] veth1_vlan: left promiscuous mode [ 1710.756018][T26551] veth0_vlan: left promiscuous mode [ 1710.766114][T26551] veth0_vlan: entered promiscuous mode [ 1710.777442][T26551] veth1_vlan: entered promiscuous mode [ 1710.785877][T26551] veth1_vlan: entered allmulticast mode [ 1710.820689][T26551] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1710.822930][T26551] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1710.825113][T26551] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1710.827609][T26551] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1710.901112][T26551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1710.902194][T26551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1710.907213][T26551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1710.971389][T26551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1711.010353][T26151] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.010389][T26151] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 55670 - 0 [ 1711.010805][T26151] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.010830][T26151] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 55670 - 0 [ 1711.011007][T26151] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.011031][T26151] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 55670 - 0 [ 1711.011064][T26151] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.011088][T26151] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 55670 - 0 [ 1711.047191][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.160163][T26552] netlink: 'syz.1.11949': attribute type 15 has an invalid length. [ 1711.329822][T26567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11952'. [ 1711.451734][T26561] gre0: entered promiscuous mode [ 1711.451753][T26561] gre0: entered allmulticast mode [ 1711.685148][T26150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.685350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.933864][T26149] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1711.934713][T26149] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1711.935500][T26149] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1711.935679][T26149] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1711.964811][ T1212] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1711.993365][ T1212] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1712.229787][T13257] Bluetooth: hci2: ACL packet too small [ 1712.878981][ T1212] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1713.630315][T26652] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11966'. [ 1713.894433][T26147] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1714.146023][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11969'. [ 1714.331973][T26691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11971'. [ 1714.331997][T26691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11971'. [ 1714.332183][T26691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11971'. [ 1714.332199][T26691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11971'. [ 1714.570456][T26700] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1714.574889][T26700] bond9 (unregistering): Released all slaves [ 1714.882292][T16240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.883214][T26149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.838843][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1715.998483][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1716.078588][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1716.160649][T16240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.624031][T26659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1716.850753][T26744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11979'. [ 1717.337632][T26776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11983'. [ 1717.440089][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.440290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.785562][T26798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11987'. [ 1718.152663][T26816] netlink: 'syz.1.11991': attribute type 1 has an invalid length. [ 1718.225380][T26822] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11993'. [ 1718.244421][T26823] gretap3: entered allmulticast mode [ 1718.255344][T26823] bond14: (slave gretap3): making interface the new active one [ 1718.256074][T26823] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 1718.347028][T26828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11994'. [ 1718.371577][T26828] netlink: zone id is out of range [ 1718.371590][T26828] netlink: zone id is out of range [ 1718.371599][T26828] netlink: zone id is out of range [ 1718.371608][T26828] netlink: zone id is out of range [ 1718.371616][T26828] netlink: zone id is out of range [ 1718.591821][T26797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1719.252540][T26853] bridge0: port 3(wlan0) entered disabled state [ 1719.253105][T26856] gretap0: entered allmulticast mode [ 1719.256179][T26856] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12002'. [ 1719.893796][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12008'. [ 1720.042166][T26878] veth9: entered promiscuous mode [ 1720.042186][T26878] veth9: entered allmulticast mode [ 1720.042996][T26878] bridge6: port 1(veth9) entered blocking state [ 1720.043148][T26878] bridge6: port 1(veth9) entered disabled state [ 1720.045871][T26878] bridge6: port 1(veth9) entered blocking state [ 1720.045986][T26878] bridge6: port 1(veth9) entered forwarding state [ 1720.156650][T26882] veth11: entered promiscuous mode [ 1720.156668][T26882] veth11: entered allmulticast mode [ 1720.173310][T26882] bridge6: port 2(veth11) entered blocking state [ 1720.173415][T26882] bridge6: port 2(veth11) entered disabled state [ 1720.202151][T26882] bridge6: port 2(veth11) entered blocking state [ 1720.202272][T26882] bridge6: port 2(veth11) entered forwarding state [ 1720.333284][T26885] veth13: entered promiscuous mode [ 1720.333304][T26885] veth13: entered allmulticast mode [ 1720.341678][T26885] bridge6: port 3(veth13) entered blocking state [ 1720.341908][T26885] bridge6: port 3(veth13) entered disabled state [ 1720.367156][T26885] bridge6: port 3(veth13) entered blocking state [ 1720.367259][T26885] bridge6: port 3(veth13) entered forwarding state [ 1720.406472][ T1393] bridge6: port 1(veth9) entered disabled state [ 1720.426795][ T1393] bridge6: port 2(veth11) entered disabled state [ 1720.435246][ T1393] bridge6: port 3(veth13) entered disabled state [ 1720.456702][T26889] tipc: Enabling of bearer rejected, already enabled [ 1720.488699][T26889] netlink: 'syz.1.12010': attribute type 29 has an invalid length. [ 1720.488716][T26889] netlink: 'syz.1.12010': attribute type 1 has an invalid length. [ 1720.489759][T26889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12010'. [ 1720.496690][T26891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12011'. [ 1720.605707][T26891] netlink: 'syz.0.12011': attribute type 1 has an invalid length. [ 1720.605728][T26891] netlink: 200 bytes leftover after parsing attributes in process `syz.0.12011'. [ 1720.639258][ T50] net_ratelimit: 437 callbacks suppressed [ 1720.639275][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.639956][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.704939][T26905] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 1720.708144][T26905] batman_adv: batadv0: Adding interface: gretap0 [ 1720.708160][T26905] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.708190][T26905] batman_adv: batadv0: Interface activated: gretap0 [ 1721.543215][T26944] gretap0: left allmulticast mode [ 1721.692580][T26951] netlink: 'syz.4.12025': attribute type 18 has an invalid length. [ 1721.693268][T26950] netlink: 'syz.4.12025': attribute type 18 has an invalid length. [ 1721.694667][T26951] netlink: 'syz.4.12025': attribute type 18 has an invalid length. [ 1721.697258][T26951] netlink: 'syz.4.12025': attribute type 18 has an invalid length. [ 1721.697790][T26950] netlink: 'syz.4.12025': attribute type 18 has an invalid length. [ 1721.743018][T26950] netlink: 'syz.4.12025': attribute type 18 has an invalid length. [ 1721.921417][T26147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.984506][T26964] __nla_validate_parse: 55 callbacks suppressed [ 1721.984524][T26964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12027'. [ 1722.015479][T26957] netlink: 165 bytes leftover after parsing attributes in process `syz.1.12024'. [ 1722.167301][T26974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12030'. [ 1722.213467][T26971] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1723.196405][T27000] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12039'. [ 1723.196431][T27000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12039'. [ 1723.196447][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12039'. [ 1723.213651][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.214077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.251577][T27000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12039'. [ 1723.287095][T27005] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12038'. [ 1723.287240][T27005] 0·: renamed from hsr0 (while UP) [ 1723.418530][T27005] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1723.561620][T27017] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12039'. [ 1723.838480][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1723.951401][T27031] sctp: [Deprecated]: syz.4.12043 (pid 27031) Use of int in maxseg socket option. [ 1723.951401][T27031] Use struct sctp_assoc_value instead [ 1724.002121][T13257] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1724.092368][T27044] validate_nla: 22 callbacks suppressed [ 1724.092384][T27044] netlink: 'syz.1.12049': attribute type 4 has an invalid length. [ 1724.092397][T27044] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12049'. [ 1724.094434][T27044] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1724.156647][T27033] syzkaller1: entered promiscuous mode [ 1724.156668][T27033] syzkaller1: entered allmulticast mode [ 1724.278098][T27050] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 1724.398990][T27056] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1724.488649][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1724.488839][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1726.277783][T27107] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 1726.280787][T27107] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1726.400738][T26147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.401270][T26147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.477506][T27123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1726.478190][T27123] netlink: 'syz.3.12064': attribute type 2 has an invalid length. [ 1726.593820][T27123] þ: entered promiscuous mode [ 1726.693605][T27131] netlink: 'syz.2.12065': attribute type 11 has an invalid length. [ 1726.799680][T27134] netlink: 'syz.0.12066': attribute type 1 has an invalid length. [ 1726.823483][T27129] bond9: option miimon: invalid value (18446744073357230079) [ 1726.823509][T27129] bond9: option miimon: allowed values 0 - 2147483647 [ 1726.826866][T27129] bond9 (unregistering): Released all slaves [ 1726.894431][T27119] wg2 speed is unknown, defaulting to 1000 [ 1726.896663][T27119] lo speed is unknown, defaulting to 1000 [ 1726.916884][T27119] lo speed is unknown, defaulting to 1000 [ 1727.046922][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.397026][T27160] sctp: [Deprecated]: syz.2.12070 (pid 27160) Use of int in max_burst socket option deprecated. [ 1727.397026][T27160] Use struct sctp_assoc_value instead [ 1727.487543][T27163] ip_tables: iptables: counters copy to user failed while replacing table [ 1727.635107][T27163] tipc: Resetting bearer [ 1727.635621][T27163] tipc: Resetting bearer [ 1727.681192][T27166] netlink: 'syz.3.12071': attribute type 1 has an invalid length. [ 1727.681211][T27166] __nla_validate_parse: 7 callbacks suppressed [ 1727.681222][T27166] netlink: 232 bytes leftover after parsing attributes in process `syz.3.12071'. [ 1727.681237][T27166] netlink: 'syz.3.12071': attribute type 1 has an invalid length. [ 1727.704723][T27166] netlink: 'syz.3.12071': attribute type 16 has an invalid length. [ 1727.704785][T27166] netlink: 'syz.3.12071': attribute type 17 has an invalid length. [ 1727.769487][T26147] tipc: Resetting bearer [ 1727.779434][ T6648] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1727.818440][T27166] gre0: left promiscuous mode [ 1727.818458][T27166] gre0: left allmulticast mode [ 1727.851563][T27166] 0ªî{X¹¦: left promiscuous mode [ 1727.866154][T27166] bridge0: port 3(syz_tun) entered blocking state [ 1727.866283][T27166] bridge0: port 3(syz_tun) entered forwarding state [ 1727.866682][T27166] bridge0: left allmulticast mode [ 1727.895223][T27166] tipc: Resetting bearer [ 1727.909575][T27166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.909709][T27166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1727.911753][T27166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.911869][T27166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1727.978179][T27166] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1728.030087][ T5737] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1728.246404][T27184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12075'. [ 1728.293223][T27189] sctp: [Deprecated]: syz.3.12077 (pid 27189) Use of int in max_burst socket option deprecated. [ 1728.293223][T27189] Use struct sctp_assoc_value instead [ 1728.346021][T27189] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12077'. [ 1728.472749][T27197] netlink: 'syz.0.12078': attribute type 1 has an invalid length. [ 1728.472772][T27197] netlink: 'syz.0.12078': attribute type 4 has an invalid length. [ 1728.472787][T27197] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.12078'. [ 1728.615051][T27203] wg2 speed is unknown, defaulting to 1000 [ 1728.616665][T27203] lo speed is unknown, defaulting to 1000 [ 1728.618246][T27203] lo speed is unknown, defaulting to 1000 [ 1728.772122][T27210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12085'. [ 1728.779459][T27210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12085'. [ 1728.827553][T27210] [ 1728.829916][T27210] ====================================================== [ 1728.836985][T27210] WARNING: possible circular locking dependency detected [ 1728.844027][T27210] syzkaller #0 Not tainted [ 1728.848460][T27210] ------------------------------------------------------ [ 1728.855514][T27210] syz.3.12085/27210 is trying to acquire lock: [ 1728.861678][T27210] ffff88802b499f18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1728.870577][T27210] [ 1728.870577][T27210] but task is already holding lock: [ 1728.877956][T27210] ffff8880203946b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1728.887491][T27210] [ 1728.887491][T27210] which lock already depends on the new lock. [ 1728.887491][T27210] [ 1728.897909][T27210] [ 1728.897909][T27210] the existing dependency chain (in reverse order) is: [ 1728.906935][T27210] [ 1728.906935][T27210] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1728.914765][T27210] __mutex_lock+0x19d/0x1550 [ 1728.919920][T27210] elevator_change+0x1af/0x480 [ 1728.925234][T27210] elevator_set_none+0xb5/0x140 [ 1728.930637][T27210] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1728.937066][T27210] nbd_start_device+0x189/0xb30 [ 1728.942499][T27210] nbd_genl_connect+0x167d/0x1cd0 [ 1728.948083][T27210] genl_family_rcv_msg_doit+0x233/0x340 [ 1728.954191][T27210] genl_rcv_msg+0x614/0x7a0 [ 1728.959249][T27210] netlink_rcv_skb+0x226/0x4a0 [ 1728.964585][T27210] genl_rcv+0x28/0x40 [ 1728.969111][T27210] netlink_unicast+0x7bd/0x940 [ 1728.974436][T27210] netlink_sendmsg+0x813/0xb40 [ 1728.979750][T27210] sock_sendmsg_nosec+0x13a/0x180 [ 1728.982342][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.982709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.001431][T27210] ____sys_sendmsg+0x54e/0x850 [ 1729.006741][T27210] ___sys_sendmsg+0x2a5/0x360 [ 1729.011963][T27210] __x64_sys_sendmsg+0x1b1/0x290 [ 1729.017455][T27210] do_syscall_64+0x166/0x520 [ 1729.022587][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.029021][T27210] [ 1729.029021][T27210] -> #5 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1729.037650][T27210] blk_alloc_queue+0x544/0x690 [ 1729.042957][T27210] __blk_mq_alloc_disk+0x194/0x390 [ 1729.048714][T27210] nbd_dev_add+0x494/0xb60 [ 1729.053662][T27210] nbd_init+0x168/0x1f0 [ 1729.058356][T27210] do_one_initcall+0x250/0x870 [ 1729.063673][T27210] do_initcall_level+0x10a/0x1a0 [ 1729.069166][T27210] do_initcalls+0x59/0xa0 [ 1729.074058][T27210] kernel_init_freeable+0x29d/0x3e0 [ 1729.079798][T27210] kernel_init+0x22/0x1d0 [ 1729.084678][T27210] ret_from_fork+0x514/0xb70 [ 1729.089833][T27210] ret_from_fork_asm+0x1a/0x30 [ 1729.095264][T27210] [ 1729.095264][T27210] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1729.102499][T27210] fs_reclaim_acquire+0x71/0x100 [ 1729.107978][T27210] __kmalloc_cache_node_noprof+0x66/0x620 [ 1729.114241][T27210] create_worker+0x112/0x7c0 [ 1729.119370][T27210] workqueue_prepare_cpu+0xe4/0x170 [ 1729.125127][T27210] cpuhp_invoke_callback+0x434/0x810 [ 1729.130963][T27210] _cpu_up+0x2ce/0x5b0 [ 1729.135576][T27210] cpu_up+0x1d2/0x220 [ 1729.140109][T27210] cpuhp_bringup_mask+0xb2/0x1a0 [ 1729.145594][T27210] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1729.151941][T27210] bringup_nonboot_cpus+0x17/0x30 [ 1729.157520][T27210] smp_init+0x32/0x110 [ 1729.162145][T27210] kernel_init_freeable+0x27f/0x3e0 [ 1729.167895][T27210] kernel_init+0x22/0x1d0 [ 1729.172778][T27210] ret_from_fork+0x514/0xb70 [ 1729.177908][T27210] ret_from_fork_asm+0x1a/0x30 [ 1729.183226][T27210] [ 1729.183226][T27210] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1729.190985][T27210] cpus_read_lock+0x42/0x160 [ 1729.196118][T27210] static_key_slow_inc+0x12/0x30 [ 1729.201594][T27210] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1729.207890][T27210] nbd_genl_foreach_sock+0x265/0x450 [ 1729.213719][T27210] nbd_genl_reconfigure+0xbbb/0x1040 [ 1729.219563][T27210] genl_family_rcv_msg_doit+0x233/0x340 [ 1729.225673][T27210] genl_rcv_msg+0x614/0x7a0 [ 1729.230722][T27210] netlink_rcv_skb+0x226/0x4a0 [ 1729.236035][T27210] genl_rcv+0x28/0x40 [ 1729.240559][T27210] netlink_unicast+0x7bd/0x940 [ 1729.245909][T27210] netlink_sendmsg+0x813/0xb40 [ 1729.251222][T27210] sock_sendmsg_nosec+0x13a/0x180 [ 1729.256790][T27210] ____sys_sendmsg+0x54e/0x850 [ 1729.262102][T27210] ___sys_sendmsg+0x2a5/0x360 [ 1729.267348][T27210] __x64_sys_sendmsg+0x1b1/0x290 [ 1729.272869][T27210] do_syscall_64+0x166/0x520 [ 1729.278001][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.284543][T27210] [ 1729.284543][T27210] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1729.292210][T27210] __mutex_lock+0x19d/0x1550 [ 1729.297349][T27210] nbd_queue_rq+0x373/0xff0 [ 1729.302399][T27210] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1729.308488][T27210] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1729.315428][T27210] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1729.321960][T27210] blk_mq_run_work_fn+0x16c/0x300 [ 1729.327533][T27210] process_scheduled_works+0xc3d/0x1630 [ 1729.333639][T27210] worker_thread+0xa47/0xfb0 [ 1729.338792][T27210] kthread+0x38b/0x480 [ 1729.343406][T27210] ret_from_fork+0x514/0xb70 [ 1729.348636][T27210] ret_from_fork_asm+0x1a/0x30 [ 1729.353949][T27210] [ 1729.353949][T27210] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1729.361188][T27210] __mutex_lock+0x19d/0x1550 [ 1729.366359][T27210] nbd_queue_rq+0xc1/0xff0 [ 1729.371322][T27210] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1729.377425][T27210] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1729.384296][T27210] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1729.390822][T27210] blk_mq_run_work_fn+0x16c/0x300 [ 1729.396418][T27210] process_scheduled_works+0xc3d/0x1630 [ 1729.402507][T27210] worker_thread+0xa47/0xfb0 [ 1729.407648][T27210] kthread+0x38b/0x480 [ 1729.412279][T27210] ret_from_fork+0x514/0xb70 [ 1729.417405][T27210] ret_from_fork_asm+0x1a/0x30 [ 1729.422715][T27210] [ 1729.422715][T27210] -> #0 (set->srcu){.+.+}-{0:0}: [ 1729.429857][T27210] __lock_acquire+0x164c/0x2de0 [ 1729.435247][T27210] lock_sync+0xb3/0x130 [ 1729.439942][T27210] __synchronize_srcu+0xc9/0x2f0 [ 1729.445433][T27210] elevator_switch+0x1e8/0x7b0 [ 1729.450744][T27210] elevator_change+0x2fa/0x480 [ 1729.456042][T27210] elevator_set_default+0x375/0x440 [ 1729.461826][T27210] blk_register_queue+0x3f3/0x4e0 [ 1729.467442][T27210] __add_disk+0x6b8/0xdb0 [ 1729.472318][T27210] add_disk_fwnode+0x100/0x3a0 [ 1729.477631][T27210] nbd_dev_add+0x733/0xb60 [ 1729.482586][T27210] nbd_genl_connect+0x96c/0x1cd0 [ 1729.488064][T27210] genl_family_rcv_msg_doit+0x233/0x340 [ 1729.494215][T27210] genl_rcv_msg+0x614/0x7a0 [ 1729.499265][T27210] netlink_rcv_skb+0x226/0x4a0 [ 1729.504578][T27210] genl_rcv+0x28/0x40 [ 1729.509102][T27210] netlink_unicast+0x7bd/0x940 [ 1729.514412][T27210] netlink_sendmsg+0x813/0xb40 [ 1729.519744][T27210] sock_sendmsg_nosec+0x13a/0x180 [ 1729.525338][T27210] ____sys_sendmsg+0x54e/0x850 [ 1729.530667][T27210] ___sys_sendmsg+0x2a5/0x360 [ 1729.535891][T27210] __x64_sys_sendmsg+0x1b1/0x290 [ 1729.541386][T27210] do_syscall_64+0x166/0x520 [ 1729.546610][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.553058][T27210] [ 1729.553058][T27210] other info that might help us debug this: [ 1729.553058][T27210] [ 1729.563289][T27210] Chain exists of: [ 1729.563289][T27210] set->srcu --> &q->q_usage_counter(io)#53 --> &q->elevator_lock [ 1729.563289][T27210] [ 1729.576965][T27210] Possible unsafe locking scenario: [ 1729.576965][T27210] [ 1729.584463][T27210] CPU0 CPU1 [ 1729.589839][T27210] ---- ---- [ 1729.595216][T27210] lock(&q->elevator_lock); [ 1729.599832][T27210] lock(&q->q_usage_counter(io)#53); [ 1729.607751][T27210] lock(&q->elevator_lock); [ 1729.614869][T27210] sync(set->srcu); [ 1729.618780][T27210] [ 1729.618780][T27210] *** DEADLOCK *** [ 1729.618780][T27210] [ 1729.626938][T27210] locks held by syz.3.12085/27210: 6, last CPU#1: [ 1729.633444][T27210] #0: ffffffff902c46a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1729.641695][T27210] #1: ffffffff902c44e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1729.650689][T27210] #2: ffff8880484a69c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1729.661077][T27210] #3: ffff888020394740 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1729.670950][T27210] #4: ffff8880203941c8 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1729.681854][T27210] #5: ffff8880203946b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1729.691764][T27210] [ 1729.691764][T27210] stack backtrace: [ 1729.697684][T27210] CPU: 1 UID: 0 PID: 27210 Comm: syz.3.12085 Not tainted syzkaller #0 PREEMPT(full) [ 1729.707162][T27210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1729.717226][T27210] Call Trace: [ 1729.720528][T27210] [ 1729.723475][T27210] dump_stack_lvl+0xe8/0x150 [ 1729.728094][T27210] print_circular_bug+0x2e2/0x300 [ 1729.733142][T27210] check_noncircular+0x12f/0x150 [ 1729.738115][T27210] __lock_acquire+0x164c/0x2de0 [ 1729.743000][T27210] ? lockdep_unlock+0x5c/0xd0 [ 1729.747721][T27210] ? __lock_acquire+0x1511/0x2de0 [ 1729.752916][T27210] lock_sync+0xb3/0x130 [ 1729.757114][T27210] ? __synchronize_srcu+0xb5/0x2f0 [ 1729.762241][T27210] ? __synchronize_srcu+0xb5/0x2f0 [ 1729.767369][T27210] __synchronize_srcu+0xc9/0x2f0 [ 1729.772336][T27210] ? __pfx___synchronize_srcu+0x10/0x10 [ 1729.777892][T27210] ? do_raw_spin_lock+0x12b/0x2f0 [ 1729.782937][T27210] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1729.788769][T27210] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1729.794340][T27210] ? synchronize_srcu+0x20a/0x260 [ 1729.799382][T27210] elevator_switch+0x1e8/0x7b0 [ 1729.804164][T27210] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1729.809646][T27210] elevator_change+0x2fa/0x480 [ 1729.814424][T27210] ? do_raw_spin_unlock+0xf5/0x200 [ 1729.819553][T27210] elevator_set_default+0x375/0x440 [ 1729.824795][T27210] ? __pfx_elevator_set_default+0x10/0x10 [ 1729.830543][T27210] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1729.837653][T27210] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1729.843523][T27210] blk_register_queue+0x3f3/0x4e0 [ 1729.848562][T27210] __add_disk+0x6b8/0xdb0 [ 1729.852912][T27210] add_disk_fwnode+0x100/0x3a0 [ 1729.857700][T27210] nbd_dev_add+0x733/0xb60 [ 1729.862127][T27210] ? __pfx_nbd_dev_add+0x10/0x10 [ 1729.867088][T27210] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1729.872900][T27210] ? bpf_lsm_capable+0x9/0x20 [ 1729.877593][T27210] ? security_capable+0x7e/0x2c0 [ 1729.882632][T27210] ? radix_tree_lookup+0x25c/0x290 [ 1729.887783][T27210] nbd_genl_connect+0x96c/0x1cd0 [ 1729.892754][T27210] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1729.898147][T27210] ? rcu_is_watching+0x16/0xb0 [ 1729.902934][T27210] ? trace_kmalloc+0x2a/0xf0 [ 1729.907547][T27210] ? __kmalloc_noprof+0x38c/0x720 [ 1729.912680][T27210] ? __nla_parse+0x40/0x60 [ 1729.917115][T27210] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1729.923464][T27210] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1729.929823][T27210] genl_family_rcv_msg_doit+0x233/0x340 [ 1729.935401][T27210] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1729.941519][T27210] ? __lock_acquire+0x747/0x2de0 [ 1729.946504][T27210] genl_rcv_msg+0x614/0x7a0 [ 1729.951038][T27210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1729.956087][T27210] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1729.961490][T27210] netlink_rcv_skb+0x226/0x4a0 [ 1729.966284][T27210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1729.971330][T27210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1729.976635][T27210] ? down_read+0x2be/0x330 [ 1729.981067][T27210] genl_rcv+0x28/0x40 [ 1729.985072][T27210] netlink_unicast+0x7bd/0x940 [ 1729.989871][T27210] netlink_sendmsg+0x813/0xb40 [ 1729.994661][T27210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.000074][T27210] ? apparmor_socket_sendmsg+0x98/0x360 [ 1730.005636][T27210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.010939][T27210] sock_sendmsg_nosec+0x13a/0x180 [ 1730.015971][T27210] ____sys_sendmsg+0x54e/0x850 [ 1730.020758][T27210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1730.026077][T27210] ? import_iovec+0x73/0xa0 [ 1730.030601][T27210] ___sys_sendmsg+0x2a5/0x360 [ 1730.035311][T27210] ? __lock_acquire+0x747/0x2de0 [ 1730.040273][T27210] ? __pfx____sys_sendmsg+0x10/0x10 [ 1730.045583][T27210] ? futex_wait+0x2a2/0x390 [ 1730.050113][T27210] ? __fget_files+0x2a/0x420 [ 1730.054718][T27210] ? __fget_files+0x3a2/0x420 [ 1730.059414][T27210] __x64_sys_sendmsg+0x1b1/0x290 [ 1730.064367][T27210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1730.069851][T27210] do_syscall_64+0x166/0x520 [ 1730.074457][T27210] ? trace_irq_disable+0x3b/0x140 [ 1730.079495][T27210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.085578][T27210] ? clear_bhb_loop+0x70/0xc0 [ 1730.090281][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.096204][T27210] RIP: 0033:0x7feafff9e159 [ 1730.100653][T27210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.120284][T27210] RSP: 002b:00007feb00ec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1730.128705][T27210] RAX: ffffffffffffffda RBX: 00007feb00225fa0 RCX: 00007feafff9e159 [ 1730.136699][T27210] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 1730.144687][T27210] RBP: 00007feb0003506b R08: 0000000000000000 R09: 0000000000000000 [ 1730.152665][T27210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1730.160646][T27210] R13: 00007feb00226038 R14: 00007feb00225fa0 R15: 00007ffe80ff6728 [ 1730.168632][T27210] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1730.503317][T27212] syzkaller0: mtu less than device minimum [ 1730.853489][T27232] bridge0: port 3(syz_tun) entered disabled state [ 1730.908218][T27232] syz_tun (unregistering): left allmulticast mode [ 1730.908241][T27232] syz_tun (unregistering): left promiscuous mode [ 1730.908328][T27232] bridge0: port 3(syz_tun) entered disabled state [ 1730.964942][T16240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1730.964974][T16240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1730.964997][T16240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.965019][T16240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38278 - 0 [ 1731.126035][T27227] bond8: (slave syz_tun): Removing an active aggregator [ 1731.126283][T27227] bond8: (slave syz_tun): Releasing backup interface [ 1731.183378][T16240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.183408][T16240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1731.183433][T16240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.183457][T16240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38278 - 0 [ 1731.262524][T16240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.262556][T16240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1731.262581][T16240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.262606][T16240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38278 - 0 [ 1731.329650][T16240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.329689][T16240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1731.329714][T16240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.329739][T16240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38278 - 0 [ 1731.438013][T16240] dvmrp8: left allmulticast mode [ 1731.449418][T16240] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1731.449687][T16240] batman_adv: batadv0: Interface deactivated: gretap0 [ 1731.520653][T26150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.564713][T16240] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1731.701821][T16240] batman_adv: batadv0: Removing interface: gretap0 [ 1731.740953][T16240] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1731.787049][T16240] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1731.796655][T16240] batman_adv: batadv0: Removing interface: macvlan2 [ 1731.882039][T16240] bond0 (unregistering): Released all slaves [ 1731.884565][T16240] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1731.886635][T16240] bond1 (unregistering): Released all slaves [ 1731.897407][T16240] bond2 (unregistering): Released all slaves [ 1731.914473][T16240] bond3 (unregistering): Released all slaves [ 1731.941871][T16240] bond4 (unregistering): Released all slaves [ 1731.955812][T16240] bond5 (unregistering): Released all slaves [ 1731.967843][T16240] bond6 (unregistering): Released all slaves [ 1731.981140][T16240] bond7 (unregistering): Released all slaves [ 1731.984665][T16240] bond8 (unregistering): Released all slaves [ 1732.001314][T16240] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1732.001761][T16240] bond9 (unregistering): Released all slaves [ 1732.006538][T16240] bond10 (unregistering): Released all slaves [ 1732.026640][T16240] bond11 (unregistering): Released all slaves [ 1732.038039][T16240] bond12 (unregistering): Released all slaves [ 1732.051761][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1732.157979][T16240] IPVS: stopping master sync thread 15249 ... [ 1732.159810][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.440328][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1732.735215][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1732.801717][T26149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.828494][T16240] hsr_slave_0: left promiscuous mode [ 1732.829042][T16240] hsr_slave_1: left promiscuous mode [ 1732.829532][T16240] batman_adv: batadv0: Interface deactivated: veth0 [ 1732.829548][T16240] batman_adv: batadv0: Removing interface: veth0 [ 1732.855449][T16240] veth1_vlan: left promiscuous mode [ 1733.183933][ T25] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 1733.184849][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1733.185158][ T152] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 1733.425063][T16240] IPVS: stop unused estimator thread 0... [ 1733.547659][T16240] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.547691][T16240] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 55670 - 0 [ 1733.604666][T16240] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.604698][T16240] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 55670 - 0 [ 1733.664256][T16240] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.664287][T16240] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 55670 - 0 [ 1733.724082][T16240] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.724113][T16240] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 55670 - 0 [ 1734.006855][T16240] bond3 (unregistering): (slave erspan1): Releasing active interface [ 1734.074865][T16240] bond0 (unregistering): Released all slaves [ 1734.077754][T16240] bond1 (unregistering): Released all slaves [ 1734.107395][T16240] bond2 (unregistering): Released all slaves [ 1734.117043][T16240] bond3 (unregistering): Released all slaves [ 1734.128120][T16240] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1734.151052][T16240] bond4 (unregistering): Released all slaves [ 1734.498532][T16240] tipc: Disabling bearer [ 1734.511905][T16240] tipc: Left network mode [ 1734.533398][T16240] IPVS: stopping master sync thread 16951 ... [ 1734.533526][T16240] IPVS: stopping backup sync thread 18327 ... [ 1734.730077][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.730208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.834277][T16240] hsr_slave_0: left promiscuous mode [ 1734.834669][T16240] hsr_slave_1: left promiscuous mode [ 1734.850455][T16240] veth1_vlan: left allmulticast mode [ 1734.850475][T16240] veth1_vlan: left promiscuous mode [ 1734.850501][T16240] veth0_vlan: left promiscuous mode [ 1735.191938][T16240] IPVS: stop unused estimator thread 0... [ 1735.484813][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1735.712712][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1735.980263][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1736.215250][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1737.278937][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.278961][T23117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog