last executing test programs: 4.528358736s ago: executing program 3 (id=3450): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r10, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x2c, 0x2c, 0x601, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x0) r11 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x9) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$cgroup_procs(r13, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) 4.196070968s ago: executing program 3 (id=3454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}]}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x104}}, 0xc008880) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="4a00000011007f0314066f9a70eaa1490675bc58080600", 0x17) r5 = getuid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r7, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20040004) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r7, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x12c, 0x27, 0x301, 0x70bd25, 0x25dfdbff, {0xd}, [@generic="ca8de3d9b383761f33c3f98f104d5a6b9789501011a16ecedb0a74c771082d1b1946df2cc7bd6d987fa2129ba462c3bea674c2d5c912a49ae7eceefeb2f148f026f8752d688e4154a61803a9e9767755dcc80433be93e9345477285035da89b4b53711dd4e2c70f37b03919b832af3aae52ae5da6e3c7a05c89d923ddeccb4d97370836f4199fcc07c22300a42a85753efcc6322b0a427112f2dc5b690f0aa3cd55801eed744b1c3843031312390fd0367e8f454ec0ab761681c9bd83b4d4e4f59dfbfa6bfb94d8df10837ad19db87e264e4507651b37c49ea8da951e212bc41", @nested={0x2c, 0x2d, 0x0, 0x1, [@nested={0x20, 0xd8, 0x0, 0x1, [@nested={0x4, 0x71}, @typed={0x8, 0x12b, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xcf, 0x0, 0x0, @binary="f771272c"}, @typed={0x4, 0xb6}, @nested={0x4, 0x73}]}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r0}]}, @typed={0x4, 0xa5}, @typed={0x5, 0x7e, 0x0, 0x0, @str='\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0x6, 0x0, 0x9, 0x30, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)=@allocspi={0x338, 0x16, 0x2, 0x70bd26, 0x25dfdbff, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e20, 0x0, 0x4e22, 0xfffb, 0xa, 0x0, 0x90, 0x21, r2, r5}, {@in=@loopback, 0x4d5, 0x33}, @in=@loopback, {0x5fc49f1f, 0x8, 0x5, 0x9, 0x4, 0x5ae, 0x7ff, 0x2}, {0x10000, 0x200, 0x2, 0x4}, {0xffffffff, 0xfffffe01, 0x5}, 0x70bd25, 0x3507, 0x2, 0x1, 0x9, 0x8}, 0x9, 0x7}, [@tmpl={0x104, 0x5, [{{@in=@empty, 0x4d6, 0x6c}, 0x2, @in6=@empty, 0x3506, 0x4, 0x3, 0xb3, 0x80, 0x5, 0x4}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x72}, 0x2, @in=@remote, 0x3501, 0x2, 0x3, 0x9, 0x1, 0x7, 0x100}, {{@in6=@remote, 0x4d5, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x1, 0x3, 0xef, 0x9, 0x9}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x4, 0xfff, 0xf, 0x10000}]}, @migrate={0x134, 0x11, [{@in=@empty, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x33, 0x5, 0x0, 0x3504, 0x2, 0x2}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, @in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6c, 0x2, 0x0, 0x3507, 0x0, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@mcast1, @in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x2b, 0x4, 0x0, 0x3506, 0xa, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010100, @in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}]}, @iptfs_reorder_window={0x6, 0x25, 0xf63}]}, 0x338}, 0x1, 0x0, 0x0, 0x20044040}, 0x4051) 3.384755061s ago: executing program 1 (id=3460): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x2010}, 0x50040090) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000240)='wpan0\x00', 0x101b82, &(0x7f0000000280)={@_ha_fsid={[0x7, 0x4]}, {0x3, 0x3, 0x3, 0xc866}}, 0x7, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x4}, {[0x5, 0xabc, 0x805, 0x1]}, 0x6, 0xc, &(0x7f0000000580)=""/12}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x0, 0x10000, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) 2.660490614s ago: executing program 1 (id=3466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x4009, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/148, 0x94, 0x0, &(0x7f0000000480)=""/131, 0x83}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x1c, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffffff67}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x45}, @call={0x85, 0x0, 0x0, 0x31}, @ldst={0x1, 0x1, 0x4, 0x4, 0x7, 0x100, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x38, 0x7, 0x5, 0x1, 0x1ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @cgroup_device, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x0, 0xfffffffb, 0xfffffff8}, 0x10, r2, r1, 0x5, 0x0, &(0x7f0000000640)=[{0x5, 0x4, 0x2, 0x7}, {0x4, 0x4, 0xb, 0xc}, {0x5, 0x2, 0x6, 0xb}, {0x5, 0x3, 0x10, 0x7}, {0x4, 0x800002, 0xa, 0x5}], 0x10, 0x5}, 0x94) 2.632495126s ago: executing program 3 (id=3468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x90) 2.336557595s ago: executing program 2 (id=3470): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x80, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xf7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r1}, &(0x7f00000002c0)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000bf85e820504000000ffffffff00000000", @ANYRES64=r2, @ANYBLOB="000000000000000008002e000000000008001c000dcabb36252fd49de1f1e3c31c3517288818b23c0f615ec8d071921e479ab92f4bdba581d550507171001dc4be1cfa2eaea01b659ca8784be64bd0be1a4bfe55e4929790c40c868b37e0", @ANYBLOB="f051e4a4d7b2686ee2773d7582d4dc2fd35334ab0c7d58375526bc7c04244e2d26031cfc7ed3b2c22df6399ccca2ca89c91889e904687d0bdee0d90b4a28235a7e1cf92fa4b449d5caf99c900c13fe8e99155d4beb3aaa466cd19074e92e5d39", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000899}, 0x800) 2.306347831s ago: executing program 1 (id=3471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/184, 0xb8}, {&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/24, 0x18}], 0x4, &(0x7f0000000540)=""/36, 0x24}, 0x1) 2.180393875s ago: executing program 3 (id=3473): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000ba060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000002340)=@req={0x62a, 0x7, 0x9, 0x10000}, 0x10) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2023f, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'veth1_to_batadv\x00', {0xfffffff8}, 0x7}) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a3100000000080005400000001a0900020073797a310000000008000a40dffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233465566778899aebb0800450000140000000001170000018203040506070800000c00020040002000a93e00000c00030005001100040000dc"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x6a, 0x10, 0x0, &(0x7f0000000080)) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x40, 0x3ff, 0x8000, 0x8008, 0xffffffffffffffff, 0x1, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0xfffffffffffffffd}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r13, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x3}, 0x20) sendto$packet(r7, &(0x7f0000002380)="d34c83d72608e77483d2c479175ad8f8b2b41eea2bfc3772b839c016f9665f8ac27975ae4082029d9ef41738bc12c6808546be802bfc46555cbaad8cd9485b3cdb4d9a839e22abc56b2d48b3fa2856ac0f96be218c078dc2228c07effb679cd3a99e64", 0x63, 0x20040000, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x4c0d0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x1f, r1}]}, 0x44}}, 0x8004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000001800"/40], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$key(0xf, 0x3, 0x2) 2.026785696s ago: executing program 0 (id=3474): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) 2.00849381s ago: executing program 2 (id=3475): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x5e21, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) 1.892450132s ago: executing program 1 (id=3476): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x19, 0x0, &(0x7f0000000080)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x485b, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f00000005c0), 0x0}, 0x20) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x80) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x29, &(0x7f0000000080)={&(0x7f0000000440)=@can_delroute={0x0, 0x19, 0x800, 0x70bd2d, 0x25dfdbfc, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x0, 0x6, {0x1c, 0x6f, 0x3e, 0x3, 0x5, "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", 0x1, "65256689119116e08cb1d64110ac361da5fbe5cc"}}, @CGW_MOD_AND={0x0, 0x1, {{{0x2, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "61fb1a41e653ef8d"}, 0x1}}, @CGW_MOD_AND={0x0, 0x1, {{{0x3}, 0x1, 0x2, 0x0, 0x0, "de56c88b003bda13"}, 0x6}}, @CGW_MOD_UID={0x0, 0xe, r8}, @CGW_MOD_XOR={0x0, 0x3, {{{0x6, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "a7051b01252a4f89"}, 0x3}}]}, 0x30}}, 0x20000084) 1.891877604s ago: executing program 4 (id=3477): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r0, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000080)=0xffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xc, 0x3, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x82}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.81262122s ago: executing program 0 (id=3478): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1.647799705s ago: executing program 2 (id=3479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/70, 0x46, 0x0, &(0x7f0000000100)=""/111, 0x6f}, &(0x7f00000001c0)=0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.53650051s ago: executing program 4 (id=3480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0002ac0f", @ANYRESDEC=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4006095}, 0x4) 1.48904969s ago: executing program 0 (id=3481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2a02c0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(r1) r2 = socket(0x21, 0x800, 0x450f7d25) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) unshare(0x6060600) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r4, 0x0, 0x0, 0x4}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=':\b', 0x2}], 0x1}, 0x3) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd0100fddbdf2501000000080000000841000000140018000000007564703a73797a32000000"], 0x30}}, 0x40) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="fff1ff7f70581a0900001473797a"], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@deltaction={0x234, 0x31, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf4}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x27a4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd58a}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r13) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r13, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r14, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) 1.463344231s ago: executing program 3 (id=3482): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000700000400000000000000aa000000000000100000020000000900010073797a300000000028000000030a01080000000000000000020000000900010073797a3000000000050003009100000014000000020a0900000000000000000000000000140000001100010000000000000000000000000aa822f396681f15c5d0e69efcf12173ad541355bfdf542cb7e924dcc59847078a9dd7a3e773bac9c53254a53c0f71012faedd15b4c57ec64b83438b4c0887dff2d983aa99567ad842b7d5ffbdecb51d7a30114b340999dc081796c500c29e3ce72b0c69335f9890f44f70446ecef19caaeb5b7ecdf56808cc0723605754e0694d66"], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x24040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0xc010) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x9) accept(r4, 0x0, 0x0) close(r1) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1.300498429s ago: executing program 2 (id=3483): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac"], 0xfdef) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.195090777s ago: executing program 3 (id=3484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, 0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async, rerun: 32) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x18, r5, 0x1, 0x83, 0x6, @multicast}, 0x14) (async) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r6, @ANYRESOCT=r2, @ANYRES32=r2], 0xffffffffffffffb1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000028180000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e6ffffffffffffff00000000865b0000004200"], 0x48) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket(0x21, 0x3, 0x2) (async, rerun: 64) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r11, @ANYBLOB="080003"], 0x40}}, 0x0) (async) sendmsg$nl_netfilter(r9, &(0x7f00000015c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001880)={0x268, 0x10, 0xb, 0x101, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x6}, [@generic="3fd14ceffb2048813d660555ca37404922764e6225a5cbc9ce4ba804b17561314d44d5165663310fdb8b28", @nested={0x101, 0x95, 0x0, 0x1, [@generic="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"]}, @typed={0xc, 0x166, 0x0, 0x0, @u64=0x9}, @typed={0x14, 0x15b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0xee, 0xdb, 0x0, 0x0, @binary="5c7dfa3410c26185385b8be46b8b9d074c060d42a1e626d9b0a1a55c48eb56b2316a3cfbc070bcf70e07481687a513c84062348b47545c300bba87a385cd66225bb62665f2487dd1d878a688a4ff0a76bd558bee33a8cd7ea5de519dc4f38e44e4eb05573576a9a471774620454aa84aa52d53447d11c24df4df71a060bec7f2c9d393055686e1f5d5a3d9389a0b4dfa28d212e8f57c33f389bcb9fa6bb8d245cee534b5b7e413e7af77142facd8b18dd7c1599aedfea0d201476ad9c47d2efef29db04a77111c248ba12315317269d0754b90bb08c858bdc7ab305410376ab1e933ddd420ef15307cff"}, @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x7}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4004000}, 0x40841) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000001280)={&(0x7f0000000100), 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000325bd7000fddbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="0a00060000021100e2000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x5) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6020000661e7a00fe800000000000000000f0ff08000000ff020000000000000000000000000001"], 0x0) (rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100000000000000000017000000000001006e657464657673696d0000080f6e657464657673696d300000080003000000000008000b000000000006001600000000000500120000000000000000"], 0x54}}, 0x0) (async) socketpair(0xa, 0x80a, 0x10, &(0x7f0000000080)) 1.02792395s ago: executing program 2 (id=3485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) sendmsg$802154_dgram(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78) 966.837104ms ago: executing program 4 (id=3486): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x8c, 0x12, 0x107, 0x70bd2c, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x70, 0x3, 0x0, 0x1, [@typed={0x6a, 0x9, 0x0, 0x0, @str='[\x00\xbe~\xbfX\x00\x00\x00 i\'\xe3\x91\xa6J2\xba\xf5W@\x00\x00\x00\xe5\xff\xff\xff\xff\xff\xff\xdf\xcd/%\xf2k.\xac\x16#@c\x03\xe5\xd6\xe7(\xb2(\xbe\xcd=^\x84\xcf\xdb\x91`\xcdA\xe9\x01\xd8\xdc\xff,\x03\xb8\xf3(\xa9\xcb\xc0\x18rx\x91_@!\xa1q\x9dWJ\v<\xca\xe2\tE\x95sB\x82\x92$fg:\xfb'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) 965.998206ms ago: executing program 0 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 703.714871ms ago: executing program 4 (id=3488): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) poll(&(0x7f0000000040), 0x55, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delneigh={0x1c, 0x1d, 0x200, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, r7, 0x20, 0xca, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0xc080) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 340.426684ms ago: executing program 1 (id=3489): socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc30e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000400), &(0x7f0000000500)=r3}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff036bd9a3d0392eb005ead97f", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 327.136454ms ago: executing program 0 (id=3490): socket(0x10, 0x3, 0x0) 286.456966ms ago: executing program 2 (id=3491): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x0, @private2, 0xcf}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="780000000000000029000000370000003b0b000000000000c204800000000001000740000000000e09040000000000000000000000000000000000050000000000000006"], 0x78}}], 0x2, 0x4000000) socket$inet6_sctp(0xa, 0x1, 0x84) 273.004852ms ago: executing program 4 (id=3492): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001bc0)={{r2, &(0x7f0000000000)='\x00', 0x8200, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x8]}, {0x8, 0x2, 0xe, 0x7}}, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x8}, 0xa, &(0x7f0000001a80)=[{0x2, 0xd02, &(0x7f0000000100)='\x00', &(0x7f0000000140)="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", 0xfa, 0x10}, {0x1, 0x2, &(0x7f0000000240)='/${#*@{[^*)+\x00', &(0x7f00000002c0)="f9f46fdfdfe79da26b40586012ff7796ead93544bbcadd7e6b62277731018f39bc8ee9963466927b3e51e9a5cbfa0321188ff82a282f2c", 0x37}, {0x3, 0x29, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="f8e95cd5d0dd7b687292cccb6af160320d37833334a85e72411b529e8336673407eb8bf99c494147a801bf4beea9774647704ace08ee73ddf81825d3e6028ad017aad09cccd42e20d1eeb899161d9cbcfe3a323e0fdfca318b2072d07ae7631d6e1e821e533167dd84ba60d0bebd6582cf60c09a86bacbf1c83b0528b23de47b7c1371b6fdfd2eeba49ad6163dba0546c829662a17a4aa6cad", 0x99, 0x20}, {0x3, 0x101, &(0x7f0000001d00)='\x00w\xed\xed\r\xfb\\\x1cNG\xdcd\x12\x95\xbeH\xa1[\x8a\x14\xbf\x1b\x91d\x9dH\xa8t\x01 >\xdci6Cc*{\xdc\xf4\xfc\x9d\x96\xb9\xd4}\xe3b\'yw:^o\xcc\x15\xd0\xde\x05U7\xe9\xdb*U\xdb\xe50P\xa2\x8b4\x97', &(0x7f00000004c0)="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", 0x1000, 0x8}, {0x2, 0x0, &(0x7f00000014c0)='/^[)\x00', &(0x7f0000001500)="3c16ea295ff91bd8e14580e7015af5512ff79f4f149630f38fa9469c622528b41bec0f6cb34d7cb2cbaa9b6d45798731708564caa8da88205cd8a294d0591768a6fd906efbdb67d2a0ef7920964085f5848b416b9ee63190827f3e1632802d965818a20503878aa606374ac68ffbeee6ad8929e60470e7b7fb8d0097a8ecaa12454e4eaf3d5ba4f4f6da86615ffb137c617147fc795bd160dd0d3c4bd36de0027814352c51befdeb7653dad2", 0xac, 0x18}, {0x2, 0x5, &(0x7f0000000480)='\x9c\xe9\xd3\xe3?\xe5P\r\'\x91\xb6\x81\x81\xee>\xbd\xe3\x10\xee\xbf\xf9\xc1\xdd\xbdf\xb0s\'\xacA\xb1p%\xd9\x87\xe8\xb4\x17\xab\x85', &(0x7f0000001600)="de896005e388b209338b92f9e8664ec7b6a72cfc0352a35da78cd33ded06e05a09a81db4d23888a976e3e00d2930976a94dcbbef51ff1b368b729fdc5a9ec28679fe567dff0b2f009c4ec3c49925c6b9bd136d9ff230aff0c1022a6673a6b54c83ff26e619bbd68038bcfb7457cf682fc73ea8053457a5e38bf71739aff5433d8f6e8149ff043810f43617224d4e3e77dd9f0d0ce1", 0x95, 0xa}, {0x1, 0x6, &(0x7f00000016c0)='+:\x00', &(0x7f0000001700)="21b53cdd6e9676e024ba4779b5fcdc47af53278a38ce6223541e45a9f187347a75a13e14c120dd3e425a2a76f2332a3bb63612fa6fb4778e6cffa66a6e9db12c67ea44b846a84cb865a9ddc7182013e8496fb97637", 0x55, 0x10}, {0x3, 0x729, &(0x7f0000001780)='*@\x00', &(0x7f00000017c0)="527278addfcf22c377a64e1e4efaf281a5c9923d437318e79c172a7059444be9a551256b04272634569398b9b820b937a1a549e2c750aa346e8d760bfb2bca2bcf85cd0bf2962515e85f45bcdc7c91ea6910ffc7ea157b8532615d28103765be86e5b772c2b1e617e35d0f351660b4b163882a18e5f98a546207fe0628ba0d29eb63578a5b9ced6d31a02262ed1217cb66340052018ef1801ae173e33028dd00bd228256f5c8e7658884f0543d1c392051e7f7e45036", 0xb6, 0x2}, {0x3, 0x9, &(0x7f0000001880)='\x00', &(0x7f00000018c0)="84c5c85d24c3acbbf54d457a9d4acfa70e04a9f1f944b763b1b1d3b3358ff9428e90e23800d80f764a066163e1b336a5a490ce57c1d95dfa42b1ea733d4cfb3e02c21ed46dc040daf29e46e58ee24836f9a3f70d1c3a70465b787244ab389ecaade9ff2af420c68aecf3dbeb9ca5bc04bdb7987c426b2aecc3339f3248161761db9b8a795d9f8872b7a2c3bb12d3f02ebd061417f5652607cd491e28f781801061ed51ae282c6df03026c1121084375f163ada0e40466150ff274cc43dabb34868cfa7f137d7abce2b", 0xc9, 0x8}, {0x2, 0x5, &(0x7f00000019c0)='\x00', &(0x7f0000001a00)="2269bdb8bfc3e6a73ad50c69f7d45b324c390576d409cef059762d2e57680944328eade7c0f29922af3cc551c020292012bda7b4d74f82e7e445e4455921261e5031554466a4b81f034e656ca08f206a2a15b3b3890745", 0x57, 0x28}]}) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000001c40)=""/87, &(0x7f0000001cc0)=0x57) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x3c}}, 0x8048802) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) 136.396058ms ago: executing program 0 (id=3493): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r1, 0x11, 0x0, 0x3}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[], 0x114}], 0x1, 0x0, 0x43, 0x1}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r5, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x4, @local, 0x7f}, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0xffffffffffffffff, {[0x8001, 0x1, 0xa, 0xfdc, 0x2, 0x4, 0xfffffff9, 0x6]}}, 0x5c) ioctl$sock_SIOCBRDELBR(r9, 0x89a1, &(0x7f0000000100)='vlan0\x00') 53.821362ms ago: executing program 1 (id=3494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x164, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x805) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f00000002c0)={0x10a0, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1004, 0xa9, @random="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"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x7c, 0xa9, @random="7351ef2814a3598ce01224a683850ef4a2c45619ec979aa7df67c5916be6add3152d1212cadb884b07142924c04d9059f563cddff65d01622983e28ddfe953be1ab70ff2f2d5b46d3ed57db57244a41750f630916f8cd61cb45376857431bc1b6692230bd8c19d4bc2a28c2f3e1a8c3d40253e86b6d7ce74"}]}, 0x10a0}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x84, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001900)={r0, &(0x7f0000001800)='0000:00:10.0\x00', 0x1, &(0x7f0000001840)={@_ha_fsid={[0x7, 0x8]}, {0x24, 0x2, 0x3, 0xc}}, 0x1, &(0x7f0000001880), &(0x7f00000018c0)=0x5}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000017c0), r3) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001940)={'vlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x63}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2c6}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x840) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b80), r3) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r9, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001d00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001cc0)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x80, r10, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x31}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f00)={0x1a8, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x164, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010102}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "299bb27e742c6f1a12952abfe8cd93817a4bbafc6d8030dc63ff6de5140805cf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c86c4ad}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1a8}}, 0x20000800) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002180), r3) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x70, r11, 0xb38, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1248}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xeb16}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000890}, 0x8001) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002300), r3) sendmsg$BATADV_CMD_GET_VLAN(r12, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, r13, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x80800) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000025c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002440)={0x10c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xd}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xb3}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdf30}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44880}, 0x40) pipe(&(0x7f0000002600)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x34, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x40, 0x0, 0x2b, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x13}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x85) 0s ago: executing program 4 (id=3495): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="7ec60010c5076fb19568840b5065d5b967cc8b8a1a6bef3e938f8ec08d9936d0874a37f758930a6d2b24fcda71481f6fd7f7c5be360a223070ac320ea63c5a9a5ddf821b049e953fd0b3d69e5a0a33d525ab175b11c2ce99cf30272e8fbde191be409c6f9b5a461c6f1946fcafccf0b7fc67025d012678f0a9855584327044541433f475abfe1dbe60831a6b6df90033696e11cc00"/163, @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250d000000"], 0x14}}, 0x4008104) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd3000fedbdf252e00000008000200", @ANYRES32=0x0, @ANYBLOB="08002c000000000006000600000000000c0005000202aaaaaaaaaaaa0c0005000201aaaaaaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4040080) r7 = accept4(r4, &(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000700)=0x80, 0x80000) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r6, {0x4, 0x5}, {0x0, 0x2}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf28}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc36}]}, 0x34}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$inet(0x2, 0x6, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r8, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r9 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5475c2b1, r4, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "f7de7073ec58f9b9", "d60ac6fc83451a7e3c226f673d2cdac7", "9fc25aaf", "4f98a1a4a445abac"}, 0x28) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket(0x1d, 0xa267f964ef37f54, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001900002928bd7000008000001d01000005000d00080000006558d2f7fadf6b55a4f525d29a534f74bc7aa562a81e02cbd3b2404068da5add7217ac35aebb4482112a02836f4adbdb3e2057806b0427f306a2be3d0a59f52e416acec712f4454c7a61fde137308ee94277cfecc38ea9ae87d5ef04f56a54cc5320cd184095512e499ba34481eadb"], 0x24}}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r11, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x8000, 0x2}, 0x8) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200)=0x8, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x5e21, @broadcast}, 0x10) kernel console output (not intermixed with test programs): cks suppressed [ 299.752600][T14860] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2346'. [ 299.795480][T14860] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2346'. [ 299.795791][T14860] unsupported nlmsg_type 40 [ 299.873104][T14857] bond4: (slave bridge5): making interface the new active one [ 299.873128][T14857] bridge5: entered promiscuous mode [ 299.873292][T14857] bridge5: entered allmulticast mode [ 299.876217][T14857] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 299.927075][T14865] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 299.927407][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 299.927423][T14865] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2346'. [ 300.058724][ T5738] net_ratelimit: 36 callbacks suppressed [ 300.058746][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.218418][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.218706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.258836][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.259034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.298490][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.298769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.099437][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.178284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.178429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.418559][T12112] net_ratelimit: 11 callbacks suppressed [ 305.418582][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.418885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.148731][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.458299][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.458640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.538314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.538511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.538688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.538799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.538898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.618282][T12112] net_ratelimit: 15 callbacks suppressed [ 310.618304][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.618606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.668407][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.668606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.221326][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.708336][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.708658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.178232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.178349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.178441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.828314][ T5724] net_ratelimit: 8 callbacks suppressed [ 315.828335][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.828630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.458258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.458474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.458675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.458807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.458911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.459018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.459119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.858263][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.179725][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.018741][T12112] net_ratelimit: 14 callbacks suppressed [ 321.018764][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.019052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.339283][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.068460][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.068669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.308578][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.098628][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.098938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.178230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.178358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.218247][T12112] net_ratelimit: 12 callbacks suppressed [ 326.218282][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.218581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.538377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.538576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.538744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.538911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.539085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.539274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.268358][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.268566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.790512][T14901] netlink: 'syz.1.2356': attribute type 4 has an invalid length. [ 327.790536][T14901] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2356'. [ 327.969943][T14899] bond8: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 327.971404][T14899] bond8 (unregistering): Released all slaves [ 328.030381][T14907] IPv6: sit3: Disabled Multicast RS [ 328.274891][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2360'. [ 328.569258][T14946] xt_CT: No such helper "netbios-ns" [ 328.595944][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2367'. [ 328.923456][T14984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2373'. [ 329.041417][T14990] dvmrp0: left allmulticast mode [ 329.041515][T14990] pimreg: left allmulticast mode [ 329.321803][T15009] wlan0 speed is unknown, defaulting to 1000 [ 329.357294][T15015] xt_LOG: level 8 >= 8 [ 329.756026][T15013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2381'. [ 329.843003][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 330.041038][T15013] team0: Port device team_slave_0 removed [ 330.265610][T15040] netlink: 'syz.4.2391': attribute type 9 has an invalid length. [ 330.690144][T15049] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 330.744472][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2393'. [ 331.418504][T12112] net_ratelimit: 17 callbacks suppressed [ 331.418527][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.418850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.419370][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.154438][T15001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.416958][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 332.431180][T15067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.431518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.455825][T15067] openvswitch: netlink: Missing key (keys=50, expected=80) [ 332.458437][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.458747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.541847][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.837909][T15084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2399'. [ 332.837934][T15084] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2399'. [ 332.838880][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 333.086412][T15105] netlink: zone id is out of range [ 333.087678][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2406'. [ 333.215134][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 333.503111][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'. [ 333.511470][T15125] hsr_slave_0: left promiscuous mode [ 333.528823][T15125] hsr_slave_1: left promiscuous mode [ 333.565959][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'. [ 333.636146][T15132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2417'. [ 334.028774][T15152] xt_hashlimit: size too large, truncated to 1048576 [ 334.293449][T15158] xt_CT: No such helper "netbios-ns" [ 334.517941][T15176] SET target dimension over the limit! [ 334.805450][T15189] Bluetooth: hci0: unsupported parameter 5135 [ 334.805473][T15189] Bluetooth: hci0: unsupported parameter 8192 [ 334.805485][T15189] Bluetooth: hci0: unsupported parameter 5135 [ 334.805497][T15189] Bluetooth: hci0: unsupported parameter 8192 [ 334.807842][T15189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2432'. [ 334.821480][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'. [ 335.412377][T15224] bond_slave_0: left promiscuous mode [ 335.412399][T15224] bond_slave_0: left allmulticast mode [ 335.996887][T15261] netlink: 'syz.3.2451': attribute type 1 has an invalid length. [ 336.038733][T15261] 8021q: adding VLAN 0 to HW filter on device bond8 [ 336.056443][T15261] bond8: (slave geneve4): making interface the new active one [ 336.057663][T15261] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 336.101658][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.114240][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.115308][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.118558][ T1116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.209849][T15272] x_tables: duplicate underflow at hook 2 [ 336.236993][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.251375][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.264342][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.279824][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.304718][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.317471][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.329669][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.344661][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.354358][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.384933][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.393488][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.398907][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.411414][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.418799][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.425808][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.432769][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.440688][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.445924][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.457256][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.468911][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.474535][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.481215][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.487306][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.494537][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.502615][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.506812][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.514179][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.517590][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.521980][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.531836][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.537492][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.542338][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.548231][ C1] net_ratelimit: 21 callbacks suppressed [ 336.548246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.548459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.548653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.548831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.549006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.549185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.551017][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.555859][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.560583][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.567414][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.574105][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.579339][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.584439][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.589536][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.594345][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.601981][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.605950][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.612599][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.617307][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.636196][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.636523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.642462][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.645759][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.657903][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.671640][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.681638][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.691821][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.699530][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.705836][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.712870][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.722586][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.727284][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.738347][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.742876][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.750336][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.755752][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.763920][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.771647][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.775745][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.784573][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.798937][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.032923][T15286] geneve5: entered allmulticast mode [ 337.094085][T15292] syzkaller0: left promiscuous mode [ 337.094116][T15292] syzkaller0: left allmulticast mode [ 337.356789][T15311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.356806][T15311] IPv6: NLM_F_CREATE should be set when creating new route [ 337.356847][T15311] IPv6: NLM_F_CREATE should be set when creating new route [ 337.356870][T15311] IPv6: NLM_F_CREATE should be set when creating new route [ 337.584965][T15322] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.662841][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.827547][T15338] netlink: 'syz.0.2474': attribute type 1 has an invalid length. [ 337.827567][T15338] netlink: 'syz.0.2474': attribute type 3 has an invalid length. [ 337.827579][T15338] netlink: 'syz.0.2474': attribute type 7 has an invalid length. [ 337.827595][T15338] netlink: 'syz.0.2474': attribute type 8 has an invalid length. [ 337.827609][T15338] NCSI netlink: No device for ifindex 131092 [ 337.907690][T15345] ip6gretap2: entered promiscuous mode [ 338.137109][T15355] __nla_validate_parse: 9 callbacks suppressed [ 338.137127][T15355] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2478'. [ 338.222817][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 338.222838][T15356] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2478'. [ 338.227096][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2480'. [ 338.585063][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 338.704945][T15370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.180183][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'. [ 339.192671][T15408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2485'. [ 339.229810][T15409] netlink: 'syz.0.2490': attribute type 1 has an invalid length. [ 339.244663][T15415] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.290380][T15409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.291921][T15415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2492'. [ 339.297475][T15415] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2492'. [ 339.319784][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 339.319804][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 339.404964][T15421] bond0: (slave veth9): Enslaving as a backup interface with a down link [ 339.424946][T15411] wireguard0: entered promiscuous mode [ 339.441103][T15426] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 339.445800][T15409] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 340.160388][T15467] netlink: 'syz.4.2505': attribute type 1 has an invalid length. [ 340.331503][T15477] wireguard2: entered promiscuous mode [ 340.362084][T15476] wireguard3: entered promiscuous mode [ 340.526037][T15494] netlink: 'syz.1.2510': attribute type 6 has an invalid length. [ 340.874277][T15511] netlink: 'syz.4.2519': attribute type 16 has an invalid length. [ 340.874311][T15511] veth0_macvtap: entered allmulticast mode [ 340.932376][T15513] vlan3: entered promiscuous mode [ 340.932545][T15513] vlan3: entered allmulticast mode [ 340.983852][T15520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.987155][T15520] bond_slave_0: left allmulticast mode [ 341.022905][T15520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.024502][T15520] bond_slave_1: left allmulticast mode [ 341.052086][T15520] bond0 (unregistering): (slave bond2): Releasing backup interface [ 341.052772][T15527] sctp: [Deprecated]: syz.3.2523 (pid 15527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.052772][T15527] Use struct sctp_sack_info instead [ 341.053682][T15520] bond2: left allmulticast mode [ 341.063083][T15520] bond0 (unregistering): Released all slaves [ 341.150519][ T1063] bond6: (slave veth0_to_bond): link status definitely down, disabling slave [ 341.157583][ T1063] bond6: now running without any active interface! [ 341.658395][ T4235] net_ratelimit: 33 callbacks suppressed [ 341.658415][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.818484][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.818797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.917571][T15578] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 342.375692][T15617] batman_adv: batadv0: Adding interface: syzkaller0 [ 342.375709][T15617] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.375738][T15617] batman_adv: batadv0: Interface activated: syzkaller0 [ 342.384931][T15615] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 342.441437][T15615] batman_adv: batadv0: Removing interface: syzkaller0 [ 342.607914][T15632] netlink: 'syz.3.2549': attribute type 4 has an invalid length. [ 342.780294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.783281][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.783472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.783623][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.783780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.783864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.784051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.702611][T15686] netlink: 'syz.4.2563': attribute type 3 has an invalid length. [ 343.702632][T15686] __nla_validate_parse: 53 callbacks suppressed [ 343.702644][T15686] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2563'. [ 343.795544][T15679] tipc: Resetting bearer [ 344.102392][T15704] netlink: 'syz.0.2568': attribute type 1 has an invalid length. [ 344.227022][T15712] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2569'. [ 344.637067][T15731] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 344.681880][T15731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.355941][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 345.371597][T15756] netlink: 'syz.4.2579': attribute type 2 has an invalid length. [ 345.400187][T15754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.986539][T15791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2587'. [ 346.036910][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'. [ 346.162952][T15801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2590'. [ 346.180503][T15801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2590'. [ 346.255590][T15802] bridge12: entered promiscuous mode [ 346.255650][T15802] bridge12: entered allmulticast mode [ 346.314652][T15808] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2595'. [ 346.557932][T15823] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2600'. [ 346.708562][ T1116] net_ratelimit: 47 callbacks suppressed [ 346.708581][ T1116] bond0: (slave dummy0): failed to get link speed/duplex [ 346.720606][T15834] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2604'. [ 346.819702][ T1063] bond0: (slave dummy0): failed to get link speed/duplex [ 346.928895][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 346.938370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.938582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.938825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.939027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.939221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.939425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.939614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.357891][T15856] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 347.506334][T15858] bond11: (slave gretap3): making interface the new active one [ 347.506842][T15858] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 347.534519][T15867] macvtap2: entered promiscuous mode [ 347.534700][T15867] macvtap2: entered allmulticast mode [ 347.534715][T15867] veth1_vlan: entered allmulticast mode [ 348.053015][T15908] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 348.761610][T15942] IPVS: Unknown mcast interface: lo [ 348.782586][T15940] __nla_validate_parse: 5 callbacks suppressed [ 348.782604][T15940] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2633'. [ 348.857223][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2637'. [ 348.861442][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2637'. [ 348.953448][T15956] netlink: 'syz.4.2638': attribute type 1 has an invalid length. [ 349.041617][T15956] bond5: entered promiscuous mode [ 349.046149][T15956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.126082][T15956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.137250][T15956] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 349.137275][T15956] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 349.169404][T15956] bond5: (slave ip6gre1): making interface the new active one [ 349.169430][T15956] ip6gre1: entered promiscuous mode [ 349.174512][T15956] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 349.332868][T15974] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 349.368644][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 349.368668][T15974] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2644'. [ 349.435944][T15974] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2644'. [ 349.560537][T15983] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2647'. [ 349.764727][T15993] batman_adv: batadv0: Adding interface: syzkaller0 [ 349.764750][T15993] batman_adv: batadv0: Interface activated: syzkaller0 [ 350.124846][T16017] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 350.327140][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2662'. [ 350.401817][T16037] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.477220][T16041] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.671165][T16047] geneve2: entered allmulticast mode [ 350.685628][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 351.056876][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 351.197147][T16097] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 351.197176][T16097] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 351.252349][T16094] nbd: device at index 64 is going down [ 351.592803][T14884] udevd[14884]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 351.599252][T14945] udevd[14945]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 351.718866][ T59] net_ratelimit: 81 callbacks suppressed [ 351.718886][ T59] bond0: (slave dummy0): failed to get link speed/duplex [ 351.828555][ T59] bond0: (slave dummy0): failed to get link speed/duplex [ 351.887332][T16130] netlink: 'syz.2.2688': attribute type 1 has an invalid length. [ 351.938830][ T1063] bond0: (slave dummy0): failed to get link speed/duplex [ 352.048530][ T3724] bond0: (slave dummy0): failed to get link speed/duplex [ 352.198361][ T59] bond0: (slave dummy0): failed to get link speed/duplex [ 352.218854][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.233008][T16151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.308871][ T1116] bond0: (slave dummy0): failed to get link speed/duplex [ 352.360389][T16165] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 352.448104][ T59] bond0: (slave dummy0): failed to get link speed/duplex [ 352.458550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.072218][T16215] macvlan4: entered promiscuous mode [ 353.072239][T16215] macvlan4: entered allmulticast mode [ 353.193211][T16225] netlink: 'syz.4.2716': attribute type 12 has an invalid length. [ 353.607548][T16255] bond12 (unregistering): Released all slaves [ 353.841583][T16276] ±ÿª¨úrBº“€: entered promiscuous mode [ 353.881587][T16276] netlink: 'syz.4.2726': attribute type 2 has an invalid length. [ 354.137288][T16297] __nla_validate_parse: 21 callbacks suppressed [ 354.137312][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2730'. [ 354.269793][T12112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.315416][T16306] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2731'. [ 354.730769][T16339] netlink: 'syz.3.2739': attribute type 1 has an invalid length. [ 354.730792][T16339] netlink: 'syz.3.2739': attribute type 2 has an invalid length. [ 354.730805][T16339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2739'. [ 354.878735][ T7571] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 355.061667][T16350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2741'. [ 355.336646][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 355.351781][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 355.352067][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 355.352256][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 355.353602][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 355.353806][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 356.361678][T16434] netlink: 'syz.3.2759': attribute type 34 has an invalid length. [ 356.888674][ T50] net_ratelimit: 47 callbacks suppressed [ 356.888694][ T50] bond0: (slave dummy0): failed to get link speed/duplex [ 356.931982][T16412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.998553][ T3724] bond0: (slave dummy0): failed to get link speed/duplex [ 357.108143][ T50] bond0: (slave dummy0): failed to get link speed/duplex [ 357.121288][T16478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.219751][ T42] bond0: (slave dummy0): failed to get link speed/duplex [ 357.291470][T16491] Bluetooth: hci0: unsupported parameter 5135 [ 357.291492][T16491] Bluetooth: hci0: unsupported parameter 8192 [ 357.291504][T16491] Bluetooth: hci0: unsupported parameter 5135 [ 357.291517][T16491] Bluetooth: hci0: unsupported parameter 8192 [ 357.328228][ T3724] bond0: (slave dummy0): failed to get link speed/duplex [ 357.409501][T16499] netlink: 'syz.4.2777': attribute type 1 has an invalid length. [ 357.498739][ T50] bond0: (slave dummy0): failed to get link speed/duplex [ 357.578428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.578612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.578779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.746611][T16513] bond12: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 357.747750][T16513] bond12 (unregistering): Released all slaves [ 358.134085][T16537] sctp: [Deprecated]: syz.4.2786 (pid 16537) Use of int in max_burst socket option deprecated. [ 358.134085][T16537] Use struct sctp_assoc_value instead [ 358.507384][T16561] ipt_REJECT: TCP_RESET invalid for non-tcp [ 358.789519][T16570] bond0: entered allmulticast mode [ 358.789686][T16570] bond_slave_0: entered allmulticast mode [ 358.789705][T16570] bond_slave_1: entered allmulticast mode [ 359.044478][T16577] netlink: 'syz.3.2800': attribute type 178 has an invalid length. [ 359.089516][T16581] netlink: 'syz.3.2800': attribute type 178 has an invalid length. [ 359.287191][T16590] __nla_validate_parse: 73 callbacks suppressed [ 359.287211][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2802'. [ 359.347799][T16592] sctp: [Deprecated]: syz.3.2805 (pid 16592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.347799][T16592] Use struct sctp_sack_info instead [ 359.503937][T16607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2807'. [ 359.950485][T16630] netlink: 'syz.0.2815': attribute type 2 has an invalid length. [ 359.950506][T16630] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.2815'. [ 360.147186][T16645] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2818'. [ 360.411498][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 360.417026][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 360.417070][T16662] block nbd3: Unsupported socket: should be TCP or UNIX. [ 360.513095][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 360.522208][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 360.522235][T16662] block nbd3: Unsupported socket: should be TCP or UNIX. [ 361.255353][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2830'. [ 361.301723][T16702] netlink: 'syz.3.2831': attribute type 12 has an invalid length. [ 361.303118][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2832'. [ 361.891463][T16746] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 361.891489][T16746] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 361.918232][ T59] net_ratelimit: 55 callbacks suppressed [ 361.918251][ T59] bond0: (slave dummy0): failed to get link speed/duplex [ 362.030850][ T1116] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 362.088496][T16751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.128208][ T3724] bond0: (slave dummy0): failed to get link speed/duplex [ 362.238386][ T59] bond0: (slave dummy0): failed to get link speed/duplex [ 362.348281][ T50] bond0: (slave dummy0): failed to get link speed/duplex [ 362.434295][T16782] netlink: 'syz.0.2856': attribute type 1 has an invalid length. [ 362.434318][T16782] netlink: 'syz.0.2856': attribute type 4 has an invalid length. [ 362.467015][ T42] bond0: (slave dummy0): failed to get link speed/duplex [ 362.570969][ T1116] bond0: (slave dummy0): failed to get link speed/duplex [ 362.678693][ T50] bond0: (slave dummy0): failed to get link speed/duplex [ 362.783112][T16807] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 362.789450][ T3724] bond0: (slave dummy0): failed to get link speed/duplex [ 362.901545][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 363.008637][ T50] bond0: (slave dummy0): failed to get link speed/duplex [ 363.208987][T16838] netlink: 'syz.3.2870': attribute type 4 has an invalid length. [ 363.258743][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.444600][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.452064][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.458837][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.474462][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.475109][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.260955][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.260993][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.519589][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.519625][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.572720][T16905] __nla_validate_parse: 14 callbacks suppressed [ 364.572745][T16905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2882'. [ 364.576959][T16911] lo: entered promiscuous mode [ 364.576980][T16911] lo: entered allmulticast mode [ 364.587391][T16911] tunl0: entered promiscuous mode [ 364.587410][T16911] tunl0: entered allmulticast mode [ 364.614791][T16911] gre0: entered promiscuous mode [ 364.614813][T16911] gre0: entered allmulticast mode [ 364.669956][T16911] gretap0: entered promiscuous mode [ 364.669980][T16911] gretap0: entered allmulticast mode [ 364.762456][T16911] erspan0: entered promiscuous mode [ 364.762480][T16911] erspan0: entered allmulticast mode [ 364.797830][T16911] ip_vti0: entered allmulticast mode [ 364.798198][T16911] ip6_vti0: entered promiscuous mode [ 364.798216][T16911] ip6_vti0: entered allmulticast mode [ 364.831142][T16911] sit0: entered promiscuous mode [ 364.831165][T16911] sit0: entered allmulticast mode [ 364.875176][T16911] ip6tnl0: entered promiscuous mode [ 364.875199][T16911] ip6tnl0: entered allmulticast mode [ 364.924998][T16911] ip6gre0: entered promiscuous mode [ 364.925022][T16911] ip6gre0: entered allmulticast mode [ 364.959822][T16911] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.960717][T16911] bridge0: entered promiscuous mode [ 364.960737][T16911] bridge0: entered allmulticast mode [ 364.979737][T16911] .`: entered promiscuous mode [ 364.979758][T16911] bond_slave_0: entered promiscuous mode [ 364.979899][T16911] bond_slave_1: entered promiscuous mode [ 364.980013][T16911] .`: entered allmulticast mode [ 364.980025][T16911] bond_slave_0: entered allmulticast mode [ 364.980040][T16911] bond_slave_1: entered allmulticast mode [ 364.980350][T16911] team0: entered promiscuous mode [ 364.980363][T16911] team_slave_0: entered promiscuous mode [ 364.980529][T16911] team_slave_1: entered promiscuous mode [ 364.980688][T16911] team0: entered allmulticast mode [ 364.980700][T16911] team_slave_0: entered allmulticast mode [ 364.980713][T16911] team_slave_1: entered allmulticast mode [ 365.010465][T16911] nlmon0: entered promiscuous mode [ 365.010485][T16911] nlmon0: entered allmulticast mode [ 365.025503][T16911] batadv0: entered promiscuous mode [ 365.025524][T16911] batadv0: entered allmulticast mode [ 365.036765][T16911] veth0: entered promiscuous mode [ 365.036784][T16911] veth0: entered allmulticast mode [ 365.051718][T16911] veth1: entered promiscuous mode [ 365.051738][T16911] veth1: entered allmulticast mode [ 365.076056][T16911] wg0: entered promiscuous mode [ 365.076076][T16911] wg0: entered allmulticast mode [ 365.096755][T16911] wg2: entered promiscuous mode [ 365.096775][T16911] wg2: entered allmulticast mode [ 365.113749][T16911] veth0_to_bridge: entered promiscuous mode [ 365.113770][T16911] veth0_to_bridge: entered allmulticast mode [ 365.236530][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 365.262538][T16934] netlink: 'syz.4.2888': attribute type 21 has an invalid length. [ 365.262560][T16934] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2888'. [ 365.286085][T16911] veth1_to_bridge: entered promiscuous mode [ 365.286107][T16911] veth1_to_bridge: entered allmulticast mode [ 365.292641][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 365.299949][T16932] xt_hashlimit: size too large, truncated to 1048576 [ 365.319227][T16911] veth0_to_bond: entered promiscuous mode [ 365.319248][T16911] veth0_to_bond: entered allmulticast mode [ 365.378954][T16911] veth1_to_bond: entered promiscuous mode [ 365.378976][T16911] veth1_to_bond: entered allmulticast mode [ 365.423334][T16911] veth0_to_team: entered promiscuous mode [ 365.423359][T16911] veth0_to_team: entered allmulticast mode [ 365.464303][T16911] veth1_to_team: entered promiscuous mode [ 365.464325][T16911] veth1_to_team: entered allmulticast mode [ 365.515359][T16911] veth0_to_batadv: entered promiscuous mode [ 365.515383][T16911] veth0_to_batadv: entered allmulticast mode [ 365.543885][T16911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.543941][T16911] batadv_slave_0: entered promiscuous mode [ 365.543958][T16911] batadv_slave_0: entered allmulticast mode [ 365.578134][ T5626] Bluetooth: hci5: command tx timeout [ 365.601557][T16911] veth1_to_batadv: entered promiscuous mode [ 365.601579][T16911] veth1_to_batadv: entered allmulticast mode [ 365.630679][T16911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.630733][T16911] batadv_slave_1: entered promiscuous mode [ 365.630748][T16911] batadv_slave_1: entered allmulticast mode [ 365.671939][T16911] xfrm0: entered promiscuous mode [ 365.672964][T16911] xfrm0: entered allmulticast mode [ 365.682444][T16911] veth0_to_hsr: entered promiscuous mode [ 365.682463][T16911] veth0_to_hsr: entered allmulticast mode [ 365.689602][T16911] veth1_to_hsr: entered promiscuous mode [ 365.689716][T16911] veth1_to_hsr: entered allmulticast mode [ 365.696009][T16911] hsr0: entered promiscuous mode [ 365.697177][T16911] veth1_virt_wifi: entered promiscuous mode [ 365.697194][T16911] veth1_virt_wifi: entered allmulticast mode [ 365.702009][T16911] veth0_virt_wifi: entered promiscuous mode [ 365.702027][T16911] veth0_virt_wifi: entered allmulticast mode [ 365.705524][T16911] virt_wifi0: entered promiscuous mode [ 365.705542][T16911] virt_wifi0: entered allmulticast mode [ 365.705994][T16911] veth1_vlan: entered allmulticast mode [ 365.717049][T16911] vlan0: entered allmulticast mode [ 365.730291][T16911] macvlan0: entered promiscuous mode [ 365.730310][T16911] macvlan0: entered allmulticast mode [ 365.741043][T16911] macvlan1: entered promiscuous mode [ 365.741065][T16911] macvlan1: entered allmulticast mode [ 365.743844][T16911] ipvlan0: entered promiscuous mode [ 365.743861][T16911] ipvlan0: entered allmulticast mode [ 365.744184][T16911] ipvlan1: entered promiscuous mode [ 365.744198][T16911] ipvlan1: entered allmulticast mode [ 365.744462][T16911] veth1_macvtap: entered allmulticast mode [ 365.791986][T16911] geneve0: entered promiscuous mode [ 365.792007][T16911] geneve0: entered allmulticast mode [ 365.797928][T16911] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 365.798438][T16911] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 365.798458][T16911] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 365.798607][T16911] veth2: entered promiscuous mode [ 365.798620][T16911] veth2: entered allmulticast mode [ 365.798849][T16911] veth3: entered promiscuous mode [ 365.798862][T16911] veth3: entered allmulticast mode [ 365.799000][T16911] macvlan2: entered promiscuous mode [ 365.799013][T16911] macvlan2: entered allmulticast mode [ 365.799443][T16911] vxlan0: entered promiscuous mode [ 365.799458][T16911] vxlan0: entered allmulticast mode [ 365.801562][T16911] syztnl2: entered promiscuous mode [ 365.801578][T16911] syztnl2: entered allmulticast mode [ 365.801851][T16911] ip6tnl1: entered promiscuous mode [ 365.801864][T16911] ip6tnl1: entered allmulticast mode [ 365.803692][T16911] ip6erspan0: entered promiscuous mode [ 365.803708][T16911] ip6erspan0: entered allmulticast mode [ 365.803887][T16911] sit1: entered promiscuous mode [ 365.803899][T16911] sit1: entered allmulticast mode [ 365.831302][T16911] gretap1: entered promiscuous mode [ 365.831322][T16911] gretap1: entered allmulticast mode [ 365.831449][T16911] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 365.831466][T16911] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 365.831617][T16911] mac80211_hwsim hwsim15 wlan3: entered promiscuous mode [ 365.831634][T16911] mac80211_hwsim hwsim15 wlan3: entered allmulticast mode [ 365.831773][T16911] vlan0000: entered promiscuous mode [ 365.831926][T16911] vlan0000: entered allmulticast mode [ 365.832835][T16911] syztnl0: entered promiscuous mode [ 365.832852][T16911] syztnl0: entered allmulticast mode [ 365.832978][T16911] erspan1: entered promiscuous mode [ 365.832991][T16911] erspan1: entered allmulticast mode [ 365.833098][T16911] veth4: entered promiscuous mode [ 365.833110][T16911] veth4: entered allmulticast mode [ 365.833340][T16911] veth5: entered promiscuous mode [ 365.833354][T16911] veth5: entered allmulticast mode [ 365.836766][T16911] netdevsim netdevsim0 eth0: entered promiscuous mode [ 365.836788][T16911] netdevsim netdevsim0 eth0: entered allmulticast mode [ 365.836944][T16911] netdevsim netdevsim0 eth1: entered promiscuous mode [ 365.836961][T16911] netdevsim netdevsim0 eth1: entered allmulticast mode [ 365.837108][T16911] netdevsim netdevsim0 eth2: entered promiscuous mode [ 365.837125][T16911] netdevsim netdevsim0 eth2: entered allmulticast mode [ 365.837267][T16911] netdevsim netdevsim0 eth3: entered promiscuous mode [ 365.837284][T16911] netdevsim netdevsim0 eth3: entered allmulticast mode [ 365.844245][T16911] bond1: entered promiscuous mode [ 365.844262][T16911] geneve3: entered promiscuous mode [ 365.844431][T16911] bond1: entered allmulticast mode [ 365.844444][T16911] geneve3: entered allmulticast mode [ 365.864194][T16911] bond2: entered promiscuous mode [ 365.864213][T16911] bond2: entered allmulticast mode [ 365.865339][T16911] mac80211_hwsim hwsim6 t: entered promiscuous mode [ 365.865359][T16911] mac80211_hwsim hwsim6 t: entered allmulticast mode [ 365.865505][T16911] macvlan3: entered promiscuous mode [ 365.865525][T16911] macvlan3: entered allmulticast mode [ 365.865760][T16911] macvlan4: entered promiscuous mode [ 365.865772][T16911] macvlan4: entered allmulticast mode [ 365.870815][T16911] bond3: entered promiscuous mode [ 365.870831][T16911] geneve4: entered promiscuous mode [ 365.870964][T16911] bond3: entered allmulticast mode [ 365.870976][T16911] geneve4: entered allmulticast mode [ 365.874607][T16911] vlan1: entered promiscuous mode [ 365.874741][T16911] vlan1: entered allmulticast mode [ 365.876273][T16911] macvlan5: entered promiscuous mode [ 365.876288][T16911] macvlan5: entered allmulticast mode [ 365.880105][T16911] bond4: entered allmulticast mode [ 365.880121][T16911] xfrm1: entered allmulticast mode [ 365.883613][T16911] bridge1: entered promiscuous mode [ 365.883630][T16911] bridge1: entered allmulticast mode [ 365.885772][T16911] bridge2: entered promiscuous mode [ 365.885790][T16911] bridge2: entered allmulticast mode [ 365.889418][T16911] mac80211_hwsim hwsim21 wlan4: entered promiscuous mode [ 365.889438][T16911] mac80211_hwsim hwsim21 wlan4: entered allmulticast mode [ 365.889601][T16911] mac80211_hwsim hwsim22 wlan5: entered promiscuous mode [ 365.889617][T16911] mac80211_hwsim hwsim22 wlan5: entered allmulticast mode [ 365.889863][T16911] syztnl1: entered promiscuous mode [ 365.889876][T16911] syztnl1: entered allmulticast mode [ 365.893250][T16911] dummy0: entered promiscuous mode [ 365.893267][T16911] dummy0: entered allmulticast mode [ 365.895300][T16911] bond5: entered promiscuous mode [ 365.895431][T16911] bond5: entered allmulticast mode [ 365.895583][T16911] mac80211_hwsim hwsim23 wlan6: entered promiscuous mode [ 365.895601][T16911] mac80211_hwsim hwsim23 wlan6: entered allmulticast mode [ 365.895901][T16911] bareudp0: entered promiscuous mode [ 365.895915][T16911] bareudp0: entered allmulticast mode [ 365.899589][T16911] gre1: entered promiscuous mode [ 365.899605][T16911] gre1: entered allmulticast mode [ 365.954355][T16911] bridge3: entered promiscuous mode [ 365.954376][T16911] bridge3: entered allmulticast mode [ 365.956425][T16911] veth6: entered promiscuous mode [ 365.956442][T16911] veth6: entered allmulticast mode [ 365.956604][T16911] veth7: entered promiscuous mode [ 365.956618][T16911] veth7: entered allmulticast mode [ 365.956951][T16911] geneve5: entered promiscuous mode [ 365.969931][T16911] bond0: entered promiscuous mode [ 365.969949][T16911] veth9: entered promiscuous mode [ 365.970232][T16911] bond0: entered allmulticast mode [ 365.970246][T16911] veth9: entered allmulticast mode [ 365.975785][T16911] veth8: entered promiscuous mode [ 365.975801][T16911] veth8: entered allmulticast mode [ 365.984219][T16911] ipip0: entered promiscuous mode [ 365.984237][T16911] ipip0: entered allmulticast mode [ 365.985656][T16911] bridge4: entered promiscuous mode [ 365.985672][T16911] bridge4: entered allmulticast mode [ 365.985803][T16911] macvlan6: entered promiscuous mode [ 365.985816][T16911] macvlan6: entered allmulticast mode [ 365.986031][T16911] gre2: entered promiscuous mode [ 365.986044][T16911] gre2: entered allmulticast mode [ 365.999786][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.999816][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 365.999840][ T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.999878][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.999901][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 365.999924][ T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.999957][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.999995][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 366.000017][ T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.000051][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.000074][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 366.000096][ T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.096735][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.096768][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.218362][T16934] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2888'. [ 366.221707][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 366.229684][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.229738][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.229771][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.229804][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.246115][T16856] wlan0 speed is unknown, defaulting to 1000 [ 366.557009][T16962] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2893'. [ 366.649955][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.649990][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.696902][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 366.696930][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 366.897040][T16980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'. [ 367.662257][ T5626] Bluetooth: hci5: command tx timeout [ 368.221086][ T42] bond11 (unregistering): (slave gretap3): Releasing backup interface [ 368.353761][ T42] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 368.353789][ T42] bridge6 (unregistering): left promiscuous mode [ 368.391560][ T42] bond10 (unregistering): (slave bridge11): Releasing backup interface [ 368.391588][ T42] bridge11 (unregistering): left promiscuous mode [ 368.417552][ T42] bond7 (unregistering): (slave bond0): Releasing active interface [ 368.429397][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.432742][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.434794][ T42] bond0 (unregistering): (slave team0): Releasing backup interface [ 368.436272][ T42] bond0 (unregistering): Released all slaves [ 368.451033][ T42] bond1 (unregistering): Released all slaves [ 368.466147][ T42] bond2 (unregistering): Released all slaves [ 368.486330][ T42] bond3 (unregistering): Released all slaves [ 368.500876][ T42] bond4 (unregistering): Released all slaves [ 368.509811][ T42] bond5 (unregistering): Released all slaves [ 368.522009][ T42] bond6 (unregistering): Released all slaves [ 368.535635][ T42] bond7 (unregistering): Released all slaves [ 368.545769][ T42] bond8 (unregistering): Released all slaves [ 368.562960][ T42] bond9 (unregistering): Released all slaves [ 368.577832][ T42] bond10 (unregistering): Released all slaves [ 368.588413][ T42] bond11 (unregistering): Released all slaves [ 368.620225][T17020] ip6gre2: entered promiscuous mode [ 368.620246][T17020] ip6gre2: entered allmulticast mode [ 368.642599][T17028] netlink: 'syz.2.2902': attribute type 6 has an invalid length. [ 368.850694][T17038] vlan3: entered allmulticast mode [ 368.899802][T17048] netlink: 'syz.4.2906': attribute type 1 has an invalid length. [ 368.899821][T17048] netlink: 'syz.4.2906': attribute type 11 has an invalid length. [ 368.975345][ T42] tipc: Left network mode [ 369.739941][ T5626] Bluetooth: hci5: command tx timeout [ 370.000254][T17106] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 370.140315][T17114] net_ratelimit: 21 callbacks suppressed [ 370.140336][T17114] sock: sock_set_timeout: `syz.4.2918' (pid 17114) tries to set negative timeout [ 370.571366][T16856] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.572572][T16856] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.572725][T16856] bridge_slave_0: entered allmulticast mode [ 370.616823][T16856] bridge_slave_0: entered promiscuous mode [ 370.654905][T16856] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.655078][T16856] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.655214][T16856] bridge_slave_1: entered allmulticast mode [ 370.657451][T16856] bridge_slave_1: entered promiscuous mode [ 370.700725][T16856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.731565][ T42] hsr_slave_0: left promiscuous mode [ 370.733940][ T42] hsr_slave_1: left promiscuous mode [ 370.734804][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.734841][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.737551][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.737570][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.778976][ T42] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 370.778998][ T42] batman_adv: batadv0: Removing interface: ipvlan4 [ 370.780740][ T42] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 370.780758][ T42] batman_adv: batadv0: Removing interface: ipvlan5 [ 370.841222][ T42] veth1_vlan: left promiscuous mode [ 371.151107][T17155] netlink: 'syz.0.2926': attribute type 58 has an invalid length. [ 371.151131][T17155] __nla_validate_parse: 7 callbacks suppressed [ 371.151142][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2926'. [ 371.190472][ T42] team0 (unregistering): Port device team_slave_1 removed [ 371.207274][ T42] team0 (unregistering): Port device team_slave_0 removed [ 371.422723][T17160] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 371.426886][T16856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.559260][T17160] 8021q: adding VLAN 0 to HW filter on device bond10 [ 371.571039][T17166] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2930'. [ 371.670090][T16856] team0: Port device team_slave_0 added [ 371.681644][T16856] team0: Port device team_slave_1 added [ 371.777729][T17175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2932'. [ 371.820497][ T5626] Bluetooth: hci5: command tx timeout [ 371.840838][T16856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.840854][T16856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.840880][T16856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.853327][T16856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.853344][T16856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.853374][T16856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.889872][T17166] netlink: 'syz.2.2930': attribute type 8 has an invalid length. [ 371.889892][T17166] netlink: 'syz.2.2930': attribute type 3 has an invalid length. [ 371.889903][T17166] netlink: 'syz.2.2930': attribute type 4 has an invalid length. [ 371.889916][T17166] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.2930'. [ 371.997488][T17181] blkio.reset_stats is deprecated [ 372.205072][T16856] hsr_slave_0: entered promiscuous mode [ 372.214859][T16856] hsr_slave_1: entered promiscuous mode [ 372.292516][ T42] IPVS: stop unused estimator thread 0... [ 372.387399][ T30] audit: type=1804 audit(1789594693.263:8): pid=17197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2936" name="/newroot/614/cgroup.controllers" dev="tmpfs" ino=3150 res=1 errno=0 [ 372.387452][ T30] audit: type=1800 audit(1789594693.263:9): pid=17197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2936" name="cgroup.controllers" dev="tmpfs" ino=3150 res=0 errno=0 [ 373.045467][T17222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2944'. [ 373.574597][T17248] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 373.715907][T17251] vlan4: entered promiscuous mode [ 373.774457][T17253] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2953'. [ 373.774758][T17253] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2953'. [ 373.775041][T17253] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2953'. [ 373.775328][T17253] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2953'. [ 373.776796][T17253] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2953'. [ 374.327714][T16856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.353544][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.356181][T16856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.386231][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.388602][T16856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.416655][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.420535][T16856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.446269][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.645903][T17292] veth3: entered allmulticast mode [ 374.876673][T16856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.924399][T16856] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.941101][T17320] sctp: [Deprecated]: syz.3.2966 (pid 17320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.941101][T17320] Use struct sctp_sack_info instead [ 374.942868][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.942982][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.997340][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.997443][ T6534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.185177][T17325] TC_ACT_REPEAT abuse ? [ 375.704391][T16856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.774177][T16856] veth0_vlan: entered promiscuous mode [ 375.789410][T16856] veth1_vlan: entered promiscuous mode [ 375.833857][T16856] veth0_macvtap: entered promiscuous mode [ 375.845631][T16856] veth1_macvtap: entered promiscuous mode [ 375.871580][T16856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.888523][T16856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.918882][T17373] netlink: 'syz.2.2980': attribute type 10 has an invalid length. [ 375.922701][T17373] bond6: (slave veth0_to_bond): Releasing active interface [ 375.986314][T14106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.993169][ T6534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.038844][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.039197][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.177697][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.177719][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.329291][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.329312][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.661597][T17399] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 377.258460][ T5633] Bluetooth: hci5: command 0x0405 tx timeout [ 377.321566][T17439] team_slave_1: Caught tx_queue_len zero misconfig [ 377.411797][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.414426][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.417405][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.442689][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.443347][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.762674][ T42] tipc: Resetting bearer [ 377.831066][T17465] __nla_validate_parse: 63 callbacks suppressed [ 377.831086][T17465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2997'. [ 378.007429][T17444] wlan0 speed is unknown, defaulting to 1000 [ 378.136380][T17490] netlink: 'syz.1.3002': attribute type 7 has an invalid length. [ 378.136401][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 378.136430][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 378.239747][T17496] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 378.503928][T17503] syzkaller1: entered promiscuous mode [ 378.503950][T17503] syzkaller1: entered allmulticast mode [ 378.623803][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.674823][T17508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3007'. [ 378.784684][T17512] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3007'. [ 379.184124][T17444] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.184287][T17444] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.184410][T17444] bridge_slave_0: entered allmulticast mode [ 379.186298][T17444] bridge_slave_0: entered promiscuous mode [ 379.189813][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.189965][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.190325][T17444] bridge_slave_1: entered allmulticast mode [ 379.191904][T17444] bridge_slave_1: entered promiscuous mode [ 379.223608][T17444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.226828][T17444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.268186][T17444] team0: Port device team_slave_0 added [ 379.271697][T17444] team0: Port device team_slave_1 added [ 379.332475][T17444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.332491][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.332516][T17444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.340055][T17444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.340069][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.340093][T17444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.498153][ T5633] Bluetooth: hci1: command tx timeout [ 379.519121][T17444] hsr_slave_0: entered promiscuous mode [ 379.519833][T17444] hsr_slave_1: entered promiscuous mode [ 379.520296][T17444] debugfs: 'hsr0' already exists in 'hsr' [ 379.520315][T17444] Cannot create hsr debugfs directory [ 379.624084][T17538] netlink: 'syz.4.3013': attribute type 28 has an invalid length. [ 379.624106][T17538] netlink: 'syz.4.3013': attribute type 3 has an invalid length. [ 379.624119][T17538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3013'. [ 379.965101][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3019'. [ 380.050299][T17563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3019'. [ 380.330615][T17578] team0: Port device team_slave_1 removed [ 380.881057][T17626] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 380.881085][T17626] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 380.920791][T17623] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3037'. [ 381.031090][T17632] veth1_to_bond: entered allmulticast mode [ 381.032345][T17632] veth1_to_bond: entered promiscuous mode [ 381.037809][T17444] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.075267][T17444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.075582][T17632] veth1_to_bond: left promiscuous mode [ 381.075753][T17632] veth1_to_bond: left allmulticast mode [ 381.080069][T17444] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.116308][T17444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.117029][T17444] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.141761][T17444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.144496][T17444] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.154692][T17444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.279471][T17444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.319566][T17444] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.329224][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.329351][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.361584][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.361683][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.579562][ T5633] Bluetooth: hci1: command tx timeout [ 381.888844][T17690] openvswitch: netlink: Key type 170 is out of range max 32 [ 381.890352][T17690] netlink: 'syz.1.3051': attribute type 2 has an invalid length. [ 381.890372][T17690] netlink: 'syz.1.3051': attribute type 2 has an invalid length. [ 381.946778][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 382.849194][T17709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.849264][T17709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.926970][T17444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.985288][T17739] __nla_validate_parse: 3 callbacks suppressed [ 382.985314][T17739] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3059'. [ 383.059598][T17739] bond1 (unregistering): Released all slaves [ 383.127339][T17709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.127378][T17709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.260476][T17709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.260513][T17709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.392085][T17444] veth0_vlan: entered promiscuous mode [ 383.428761][T17709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.428797][T17709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.463658][T17444] veth1_vlan: entered promiscuous mode [ 383.512521][T17444] veth0_macvtap: entered promiscuous mode [ 383.530071][T17444] veth1_macvtap: entered promiscuous mode [ 383.572553][T17444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.595847][T17444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.669853][ T5633] Bluetooth: hci1: command tx timeout [ 383.692861][T14106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.693195][T14106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.693231][T14106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.693264][T14106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.769548][ T59] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.769580][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.834357][T14106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.834379][T14106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.838506][T14109] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.838534][T14109] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.838857][T14109] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.838882][T14109] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.951609][T14109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.951636][T14109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.975295][ T59] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.975327][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.108867][T17777] netlink: 3208 bytes leftover after parsing attributes in process `syz.4.3073'. [ 384.141455][T17783] veth0: entered promiscuous mode [ 384.153258][T17783] veth0: left promiscuous mode [ 384.156687][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'. [ 384.164836][T17778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.527286][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.529950][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.531250][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.532109][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.532645][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.647260][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 384.756990][T17801] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.050785][T17822] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.162723][T17812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.218527][T17821] syzkaller1: entered promiscuous mode [ 385.218541][T17821] syzkaller1: entered allmulticast mode [ 385.371546][T17791] wlan0 speed is unknown, defaulting to 1000 [ 385.519003][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.643017][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3090'. [ 385.724256][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 385.748540][ T5633] Bluetooth: hci1: command tx timeout [ 386.187416][T17876] netlink: 'syz.3.3097': attribute type 1 has an invalid length. [ 386.203643][T17791] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.203805][T17791] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.204172][T17791] bridge_slave_0: entered allmulticast mode [ 386.205928][T17791] bridge_slave_0: entered promiscuous mode [ 386.237679][T17791] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.237829][T17791] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.252521][T17791] bridge_slave_1: entered allmulticast mode [ 386.264661][T17791] bridge_slave_1: entered promiscuous mode [ 386.314511][T17791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.317669][T17791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.354600][T17882] netlink: 380 bytes leftover after parsing attributes in process `syz.3.3098'. [ 386.387003][T17791] team0: Port device team_slave_0 added [ 386.396136][T17791] team0: Port device team_slave_1 added [ 386.456506][T17791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.456523][T17791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.456548][T17791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.459768][T17791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.459780][T17791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.459804][T17791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.508734][T17892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'. [ 386.589545][T17791] hsr_slave_0: entered promiscuous mode [ 386.595052][T17791] hsr_slave_1: entered promiscuous mode [ 386.595463][T17791] debugfs: 'hsr0' already exists in 'hsr' [ 386.595482][T17791] Cannot create hsr debugfs directory [ 386.622914][ T5633] Bluetooth: hci3: command tx timeout [ 386.719085][T17897] netlink: 344 bytes leftover after parsing attributes in process `syz.0.3101'. [ 386.793372][T17903] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 387.059780][T17791] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.059814][T17791] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.147745][T17791] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.147780][T17791] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.283289][T17791] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.283333][T17791] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.391559][T17791] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.391593][T17791] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.437078][T17933] netlink: 'syz.1.3110': attribute type 4 has an invalid length. [ 387.437098][T17933] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3110'. [ 387.473999][T17933] .`: renamed from bond0 (while UP) [ 387.706720][ T13] IPVS: starting estimator thread 0... [ 387.788159][T17946] IPVS: using max 33 ests per chain, 79200 per kthread [ 387.855714][T17950] tipc: Started in network mode [ 387.855736][T17950] tipc: Node identity 4, cluster identity 4711 [ 387.855746][T17950] tipc: Node number set to 4 [ 388.106756][T17965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.107573][T17958] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3115'. [ 388.108710][T17964] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3115'. [ 388.109707][T17960] netlink: 'syz.0.3118': attribute type 4 has an invalid length. [ 388.115698][T17951] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3115'. [ 388.121669][T17953] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3117'. [ 388.256979][T17791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 388.308750][T17791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.310834][T17791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 388.329737][T17791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.333242][T17791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.357814][T17791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.360236][T17791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 388.374815][T17791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.695622][T17791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.699063][ T5633] Bluetooth: hci3: command tx timeout [ 388.745542][T17791] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.802206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.802311][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.810566][T17993] tunl0: entered promiscuous mode [ 388.814992][T17993] netlink: 'syz.0.3124': attribute type 4 has an invalid length. [ 388.815009][T17993] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3124'. [ 388.824145][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.824247][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.937870][T17995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.210212][T17999] syzkaller0: entered promiscuous mode [ 389.210236][T17999] syzkaller0: entered allmulticast mode [ 389.294031][T18014] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.592290][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 389.695764][T18030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3131'. [ 389.695799][T18030] netlink: 'syz.3.3131': attribute type 7 has an invalid length. [ 389.695814][T18030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3131'. [ 390.789114][ T5633] Bluetooth: hci3: command tx timeout [ 391.228428][T18016] syzkaller0: entered promiscuous mode [ 391.228447][T18016] syzkaller0: entered allmulticast mode [ 391.433277][T18041] Bluetooth: MGMT ver 1.23 [ 391.434692][T18041] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 391.434711][T18041] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3133'. [ 391.434726][T18041] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 391.655843][T18046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3136'. [ 392.862855][ T5633] Bluetooth: hci3: command tx timeout [ 393.254371][T18044] batadv0: Caught tx_queue_len zero misconfig [ 393.632825][T18067] ip_tables: iptables: counters copy to user failed while replacing table [ 393.636614][T18066] ip_tables: iptables: counters copy to user failed while replacing table [ 393.820903][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3146'. [ 393.871833][T17791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.945511][T18081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3148'. [ 393.947209][T18081] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3148'. [ 393.984736][T17791] veth0_vlan: entered promiscuous mode [ 394.025490][T17791] veth1_vlan: entered promiscuous mode [ 394.126919][T18089] sctp: [Deprecated]: syz.3.3150 (pid 18089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.126919][T18089] Use struct sctp_sack_info instead [ 394.168736][T17791] veth0_macvtap: entered promiscuous mode [ 394.174553][T18089] sctp: [Deprecated]: syz.3.3150 (pid 18089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.174553][T18089] Use struct sctp_sack_info instead [ 394.176500][T17791] veth1_macvtap: entered promiscuous mode [ 394.254227][T17791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.293439][T17791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.384867][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.422072][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.622981][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.623003][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.623323][T18106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3154'. [ 394.638155][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.638202][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.785303][T15280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.801812][T18113] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.847550][T18113] veth1_macvtap: entered promiscuous mode [ 394.866510][T18113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.884959][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.914708][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 394.916701][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 395.038867][T18113] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 395.040786][T18113] bond2: entered allmulticast mode [ 395.040804][T18113] bridge3: entered allmulticast mode [ 395.042370][T18113] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 395.050316][T18113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.076776][T18113] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 395.086466][T18113] 8021q: adding VLAN 0 to HW filter on device bond6 [ 395.105489][T18113] 8021q: adding VLAN 0 to HW filter on device eth0 [ 395.107702][T18113] 8021q: adding VLAN 0 to HW filter on device eth1 [ 395.127031][T18113] 8021q: adding VLAN 0 to HW filter on device eth2 [ 395.136061][T18113] 8021q: adding VLAN 0 to HW filter on device eth3 [ 395.275023][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.275045][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.286889][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.290745][ T42] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.290789][ T42] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.290823][ T42] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.290856][ T42] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.311185][ T59] ip6_tunnel:  xmit: Local address not yet configured! [ 395.569527][ T1116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.580391][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.614144][T18143] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3161'. [ 395.823361][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.140448][ T42] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.141241][ T42] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.158144][T18141] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.301766][T18150] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.380990][T16917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.432690][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.435178][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 396.436374][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.450795][T18154] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3164'. [ 396.454021][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.465796][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.480660][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.561992][T18179] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.808804][T14106] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.855267][T14106] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.908392][T18188] netlink: zone id is out of range [ 396.908407][T18188] netlink: zone id is out of range [ 397.210755][T14106] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 397.414113][T14106] bond3 (unregistering): (slave geneve4): Releasing active interface [ 397.430560][T14106] bond1 (unregistering): (slave geneve3): Releasing active interface [ 397.593711][T14106] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.596009][T14106] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.597641][T14106] .` (unregistering): Released all slaves [ 397.612175][T14106] bond1 (unregistering): Released all slaves [ 397.628204][T14106] bond2 (unregistering): Released all slaves [ 397.675722][T14106] bond3 (unregistering): Released all slaves [ 397.696046][T14106] bond4 (unregistering): Released all slaves [ 397.712970][T14106] bond5 (unregistering): Released all slaves [ 397.736478][T14106] bond0 (unregistering): (slave veth9): Releasing backup interface [ 397.737636][T14106] bond0 (unregistering): (slave dummy0): Removing an active aggregator [ 397.755018][T14106] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 397.756310][T14106] bond0 (unregistering): Released all slaves [ 397.991873][T14106] tipc: Disabling bearer [ 397.992268][T14106] tipc: Disabling bearer [ 398.003319][T14106] tipc: Left network mode [ 398.334533][T14106] IPVS: stopping master sync thread 13545 ... [ 398.551528][ T5626] Bluetooth: hci4: command tx timeout [ 398.576750][T18177] wlan0 speed is unknown, defaulting to 1000 [ 398.971147][T18256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3177'. [ 398.995564][T18256] net_ratelimit: 10 callbacks suppressed [ 398.995582][T18256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.018358][T15280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.025179][T18258] netlink: 'syz.4.3177': attribute type 4 has an invalid length. [ 399.338367][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.578279][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 399.753238][T18188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.939821][T18287] netlink: 'syz.1.3178': attribute type 1 has an invalid length. [ 399.980182][T18292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3180'. [ 400.031519][T18290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3179'. [ 400.144746][T18298] netlink: 'syz.4.3179': attribute type 1 has an invalid length. [ 400.144769][T18298] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3179'. [ 400.144785][T18298] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.3179'. [ 400.233260][T18287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.269416][T14106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.271283][T14106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.618626][ T5626] Bluetooth: hci4: command tx timeout [ 400.636699][T14106] team0 (unregistering): Port device team_slave_1 removed [ 400.653750][T14106] team0 (unregistering): Port device team_slave_0 removed [ 400.792032][T18288] bond0: (slave geneve2): making interface the new active one [ 400.794260][T18288] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 400.915671][T18320] Bluetooth: MGMT ver 1.23 [ 401.105379][T18329] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 401.190157][ T3661] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.191326][ T3661] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.191990][ T3661] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.193544][ T3661] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.193697][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3185'. [ 401.208955][T18177] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.209059][T18177] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.209195][T18177] bridge_slave_0: entered allmulticast mode [ 401.214326][T18177] bridge_slave_0: entered promiscuous mode [ 401.226033][T18177] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.230232][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.230376][T18177] bridge_slave_1: entered allmulticast mode [ 401.243784][T18177] bridge_slave_1: entered promiscuous mode [ 401.277790][T18340] openvswitch: netlink: Invalid VLAN frame [ 401.346251][T18177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.374732][T18177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.410733][T14106] IPVS: stop unused estimator thread 0... [ 401.444557][T18331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3185'. [ 401.444587][T18331] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 401.533953][T18177] team0: Port device team_slave_0 added [ 401.548720][T18177] team0: Port device team_slave_1 added [ 401.652558][T18352] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 401.653828][T18177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.653843][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.653868][T18177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.721019][T18177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.721035][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.721058][T18177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.785768][T18357] dvmrp8: entered allmulticast mode [ 402.013300][T18177] hsr_slave_0: entered promiscuous mode [ 402.020112][T18177] hsr_slave_1: entered promiscuous mode [ 402.020786][T18177] debugfs: 'hsr0' already exists in 'hsr' [ 402.020804][T18177] Cannot create hsr debugfs directory [ 402.073335][T18371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3196'. [ 402.076061][T18371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3196'. [ 402.102734][T18371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3196'. [ 402.112982][T18374] netlink: 'syz.1.3197': attribute type 1 has an invalid length. [ 402.245828][T18382] sctp: [Deprecated]: syz.4.3199 (pid 18382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.245828][T18382] Use struct sctp_sack_info instead [ 402.517463][T18393] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.542935][T18396] macvlan0: entered promiscuous mode [ 402.699295][ T5626] Bluetooth: hci4: command tx timeout [ 402.725312][T18403] netlink: 'syz.2.3203': attribute type 3 has an invalid length. [ 403.343005][T18429] netlink: 'syz.2.3206': attribute type 3 has an invalid length. [ 404.038422][T18475] netlink: 'syz.0.3212': attribute type 5 has an invalid length. [ 404.370929][T18177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 404.398629][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.403104][T18177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 404.440903][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.446741][T18177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 404.482608][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.485186][T18177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.514692][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.653739][T18496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.653758][T18496] IPv6: NLM_F_CREATE should be set when creating new route [ 404.653785][T18496] IPv6: NLM_F_CREATE should be set when creating new route [ 404.778434][ T5626] Bluetooth: hci4: command tx timeout [ 404.837299][T18177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.051286][T18177] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.052722][T18501] netlink: 'syz.0.3220': attribute type 23 has an invalid length. [ 405.095306][T18141] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.095439][T18141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.170090][T14106] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.170203][T14106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.501178][T18518] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 405.673821][T18527] netlink: 'syz.4.3225': attribute type 4 has an invalid length. [ 405.673844][T18527] __nla_validate_parse: 33 callbacks suppressed [ 405.673857][T18527] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3225'. [ 405.866965][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'. [ 406.129040][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'. [ 406.129063][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'. [ 406.205748][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 406.711684][T18557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3231'. [ 406.786329][T18566] netlink: Conntrack attr has 4 unknown bytes [ 406.786364][T18566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.792372][T18177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.059380][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 408.107054][T18177] veth0_vlan: entered promiscuous mode [ 408.162385][T18177] veth1_vlan: entered promiscuous mode [ 408.335149][T18177] veth0_macvtap: entered promiscuous mode [ 408.357596][T18177] veth1_macvtap: entered promiscuous mode [ 408.433313][T18177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.454974][T18177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.568081][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.581525][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.582856][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.583084][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.699975][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 409.263040][T18621] netlink: 'syz.1.3244': attribute type 4 has an invalid length. [ 409.263439][T18621] netlink: 'syz.1.3244': attribute type 4 has an invalid length. [ 409.263689][T18621] netlink: 'syz.1.3244': attribute type 4 has an invalid length. [ 409.323037][T18621] netlink: 'syz.1.3244': attribute type 4 has an invalid length. [ 409.343743][T18623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.343759][T18623] IPv6: NLM_F_CREATE should be set when creating new route [ 409.585327][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'. [ 409.648220][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.648240][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.859787][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.859809][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.863926][T18635] netlink: 'syz.0.3247': attribute type 1 has an invalid length. [ 410.161984][T18625] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 410.640032][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3166'. [ 410.659621][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'. [ 410.670999][T18661] netlink: 'syz.3.3166': attribute type 16 has an invalid length. [ 410.671017][T18661] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3166'. [ 410.671042][T18661] veth0_macvtap: entered allmulticast mode [ 410.747275][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3166'. [ 410.747307][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'. [ 410.789014][T18667] netlink: 'syz.3.3166': attribute type 16 has an invalid length. [ 410.789036][T18667] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3166'. [ 411.088246][T18675] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 411.217664][T18676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3252'. [ 411.395578][T18675] bond2: entered promiscuous mode [ 411.395998][T18675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.495478][T18682] syzkaller1: entered allmulticast mode [ 411.573966][T18681] netlink: 828 bytes leftover after parsing attributes in process `syz.3.3253'. [ 411.604845][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.619232][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.622096][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.624612][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.628090][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.740432][T18684] netlink: 'syz.0.3254': attribute type 58 has an invalid length. [ 411.740455][T18684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3254'. [ 411.871784][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880297bbc00: rx timeout, send abort [ 411.874277][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880297bbc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 412.151162][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'. [ 412.201802][T18696] netlink: 'syz.1.3255': attribute type 16 has an invalid length. [ 412.359304][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'. [ 412.422088][T18703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3257'. [ 413.174268][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3264'. [ 413.298429][ T13] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 413.460359][T18748] ip_tables: iptables: counters copy to user failed while replacing table [ 413.488033][T18749] ip_tables: iptables: counters copy to user failed while replacing table [ 413.604003][T18686] wlan0 speed is unknown, defaulting to 1000 [ 413.738876][ T5633] Bluetooth: hci0: command tx timeout [ 414.458193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.697578][T18779] validate_nla: 1 callbacks suppressed [ 414.697597][T18779] netlink: 'syz.1.3274': attribute type 16 has an invalid length. [ 414.697611][T18779] netlink: 'syz.1.3274': attribute type 2 has an invalid length. [ 414.697623][T18779] netlink: 'syz.1.3274': attribute type 3 has an invalid length. [ 414.697634][T18779] netlink: 'syz.1.3274': attribute type 2 has an invalid length. [ 414.802404][T18777] wlan0 speed is unknown, defaulting to 1000 [ 415.043974][T18787] xt_l2tp: v2 sid > 0xffff: 1114112 [ 415.462222][T18686] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.462631][T18686] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.462925][T18686] bridge_slave_0: entered allmulticast mode [ 415.505358][T18686] bridge_slave_0: entered promiscuous mode [ 415.515508][T18686] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.515609][T18686] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.515752][T18686] bridge_slave_1: entered allmulticast mode [ 415.548110][T18686] bridge_slave_1: entered promiscuous mode [ 415.683582][T18686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.703803][T18686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.781416][T18686] team0: Port device team_slave_0 added [ 415.784278][T18686] team0: Port device team_slave_1 added [ 415.818166][ T5626] Bluetooth: hci0: command tx timeout [ 415.835623][T18686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.835639][T18686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.835665][T18686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.837672][T18686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.837684][T18686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.837710][T18686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.032899][T18802] __nla_validate_parse: 7 callbacks suppressed [ 416.032919][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'. [ 416.100982][T18806] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20003 [ 416.370449][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'. [ 416.408441][T14106] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.706474][T18828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3284'. [ 416.733726][ T200] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.733772][ T200] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.733807][ T200] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.201713][T18686] hsr_slave_0: entered promiscuous mode [ 417.245308][T18686] hsr_slave_1: entered promiscuous mode [ 417.251199][T18686] debugfs: 'hsr0' already exists in 'hsr' [ 417.251218][T18686] Cannot create hsr debugfs directory [ 417.330019][T18844] syzkaller0: entered promiscuous mode [ 417.330043][T18844] syzkaller0: entered allmulticast mode [ 417.526146][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3286'. [ 417.898176][ T5633] Bluetooth: hci0: command tx timeout [ 418.067162][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3290'. [ 418.076596][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'. [ 418.383199][T18921] netlink: 'syz.0.3292': attribute type 32 has an invalid length. [ 418.383222][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'. [ 418.391109][T18686] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.391141][T18686] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.391166][T18686] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.520833][T18921] bond1: Setting coupled_control to off (0) [ 418.550710][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3294'. [ 418.715675][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 418.813805][T18936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3296'. [ 418.834109][T18686] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.834142][T18686] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.834166][T18686] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.041755][T18932] netlink: 'syz.1.3295': attribute type 1 has an invalid length. [ 419.041776][T18932] netlink: 'syz.1.3295': attribute type 2 has an invalid length. [ 419.234060][T18686] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.234094][T18686] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.234120][T18686] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.469192][T18686] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.469228][T18686] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.469254][T18686] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.526703][T18958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.840499][T18970] tipc: Started in network mode [ 419.840711][T18970] tipc: Node identity ac14140f, cluster identity 4711 [ 419.841716][T18970] tipc: New replicast peer: 255.255.255.255 [ 419.845291][T18970] tipc: Enabled bearer , priority 10 [ 419.978580][ T5633] Bluetooth: hci0: command tx timeout [ 420.437402][T18686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.458908][T18686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.481510][T18686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.503209][T18686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.506911][T18686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.541148][T18686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.553472][T18984] batman_adv: batadv0: Adding interface: syzkaller0 [ 420.553488][T18984] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.553516][T18984] batman_adv: batadv0: Interface activated: syzkaller0 [ 420.572625][T18686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.592319][T18686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.616323][T18982] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 420.727451][T18982] batman_adv: batadv0: Removing interface: syzkaller0 [ 420.891490][T18872] tipc: Node number set to 2886997007 [ 421.078162][T19009] netlink: NAT attribute has 8 unknown bytes [ 421.078198][T19009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.149667][T19008] syzkaller0: entered promiscuous mode [ 421.149845][T19008] syzkaller0: entered allmulticast mode [ 421.201925][T19012] __nla_validate_parse: 7 callbacks suppressed [ 421.201944][T19012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3315'. [ 421.201967][T19012] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 421.486098][T18686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.603447][T18686] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.620083][T19018] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20001 [ 421.684466][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.684568][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.724343][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3320'. [ 421.843749][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.843858][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.946898][T19030] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 421.946918][T19030] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3322'. [ 421.946932][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 422.000218][T19031] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 422.000236][T19031] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3322'. [ 422.000251][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 422.356162][T19041] tipc: Enabled bearer , priority 10 [ 422.381827][T19041] Bluetooth: MGMT ver 1.23 [ 422.773537][T19060] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.774091][T19060] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.844554][T19060] bridge0: entered allmulticast mode [ 423.036255][T19065] x_tables: duplicate underflow at hook 3 [ 423.091854][T19060] bridge_slave_1: left allmulticast mode [ 423.092237][T19060] bridge_slave_1: left promiscuous mode [ 423.096728][T19060] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.210469][T19060] bridge_slave_0: left allmulticast mode [ 423.210678][T19060] bridge_slave_0: left promiscuous mode [ 423.214526][T19060] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.827521][T19088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3335'. [ 423.827549][T19088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3335'. [ 424.182880][T18686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.390479][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 424.527383][T19111] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3339'. [ 424.606539][T19115] syz_tun: entered allmulticast mode [ 425.339245][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 425.707278][T18686] veth0_vlan: entered promiscuous mode [ 425.774392][T18686] veth1_vlan: entered promiscuous mode [ 425.831078][T18686] veth0_macvtap: entered promiscuous mode [ 425.847162][T18686] veth1_macvtap: entered promiscuous mode [ 425.882076][T18686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.906857][T19141] tipc: Enabling of bearer rejected, failed to enable media [ 425.923655][T18686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.979067][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 426.139938][T14106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.140751][T14106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.158222][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.158261][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.573513][T19171] __nla_validate_parse: 2 callbacks suppressed [ 426.573533][T19171] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3356'. [ 426.695263][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.695286][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.907454][ T3661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.907478][ T3661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.490307][T19186] x_tables: duplicate underflow at hook 1 [ 427.887640][T19191] bridge_slave_0: left allmulticast mode [ 427.887665][T19191] bridge_slave_0: left promiscuous mode [ 427.889471][T19191] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.977255][T19191] bridge_slave_1: left promiscuous mode [ 427.977618][T19191] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.096010][T19191] .`: (slave bond_slave_0): Releasing backup interface [ 428.153823][T19191] .`: (slave bond_slave_1): Releasing backup interface [ 428.286032][ T13] IPVS: starting estimator thread 0... [ 428.305034][T19191] team0: Port device team_slave_0 removed [ 428.335906][T19191] team0: Port device team_slave_1 removed [ 428.336719][T19191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.336745][T19191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.366741][T19191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.366857][T19191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.379320][T19209] IPVS: using max 32 ests per chain, 76800 per kthread [ 428.425772][T19191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 428.452311][T19199] batman_adv: batadv0: Adding interface: geneve1 [ 428.452412][T19199] batman_adv: batadv0: The MTU of interface geneve1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.452613][T19199] batman_adv: batadv0: Interface activated: geneve1 [ 428.838743][T19218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3367'. [ 428.878621][T19220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3367'. [ 428.995490][T19226] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3369'. [ 429.022291][T19226] gretap0: entered promiscuous mode [ 429.241568][T19243] No such timeout policy "syz0" [ 429.628963][T19250] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3373'. [ 430.264993][T19272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3378'. [ 431.527443][T19329] netlink: 'syz.1.3389': attribute type 1 has an invalid length. [ 431.677504][T19334] rose0: renamed from bond3 [ 431.687532][T19337] bridge0: port 1(veth1_to_bridge) entered blocking state [ 431.687693][T19337] bridge0: port 1(veth1_to_bridge) entered disabled state [ 431.687841][T19337] veth1_to_bridge: entered allmulticast mode [ 431.717845][T19337] veth1_to_bridge: entered promiscuous mode [ 431.732565][T19329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3389'. [ 431.752668][T19329] 8021q: adding VLAN 0 to HW filter on device rose0 [ 431.767691][T19329] x_tables: duplicate entry at hook 3 [ 432.072492][T19349] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3391'. [ 432.106131][T19349] wg0: entered promiscuous mode [ 432.309549][T19351] xt_hashlimit: size too large, truncated to 1048576 [ 432.498621][T19358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3396'. [ 432.818704][T19370] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3399'. [ 433.621280][T19393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.942415][T19415] netlink: 'syz.3.3407': attribute type 21 has an invalid length. [ 433.942438][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 434.009558][ T3724] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.009603][ T3724] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.009636][ T3724] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.009665][ T3724] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.258810][T19423] bond1: option lp_interval: invalid value (0) [ 434.258835][T19423] bond1: option lp_interval: allowed values 1 - 2147483647 [ 434.267183][T19423] bond1 (unregistering): Released all slaves [ 434.332422][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 434.442277][T19397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.444291][T19406] netlink: 'syz.3.3407': attribute type 1 has an invalid length. [ 434.444311][T19406] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3407'. [ 434.444327][T19406] netlink: 'syz.3.3407': attribute type 1 has an invalid length. [ 434.753017][T19435] nftables ruleset with unbound chain [ 434.799925][T19436] netlink: 'syz.3.3416': attribute type 1 has an invalid length. [ 435.794849][T19455] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3420'. [ 438.439502][T19438] macvtap0: entered allmulticast mode [ 438.440846][T19438] tipc: Resetting bearer [ 439.002746][T19479] sctp: [Deprecated]: syz.3.3426 (pid 19479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.002746][T19479] Use struct sctp_sack_info instead [ 439.570166][T19503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3434'. [ 439.573233][T19503] netlink: 'syz.4.3434': attribute type 1 has an invalid length. [ 439.766809][T19509] sctp: [Deprecated]: syz.4.3436 (pid 19509) Use of int in maxseg socket option. [ 439.766809][T19509] Use struct sctp_assoc_value instead [ 439.817458][T19510] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.064796][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.358590][T19528] ip_tables: iptables: counters copy to user failed while replacing table [ 440.382004][T19536] netlink: 'syz.2.3441': attribute type 11 has an invalid length. [ 440.382024][T19536] netlink: 'syz.2.3441': attribute type 4 has an invalid length. [ 440.382037][T19536] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3441'. [ 440.428541][T19536] netlink: 'syz.2.3441': attribute type 11 has an invalid length. [ 440.428560][T19536] netlink: 'syz.2.3441': attribute type 4 has an invalid length. [ 440.428572][T19536] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3441'. [ 440.485035][T19535] openvswitch: netlink: Missing key (keys=40, expected=100) [ 440.547361][T19541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3442'. [ 440.632765][T19544] netlink: 'syz.2.3443': attribute type 21 has an invalid length. [ 440.633218][T19544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3443'. [ 440.786696][T19541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.991609][ T3661] IPVS: starting estimator thread 0... [ 441.078208][T19556] IPVS: using max 27 ests per chain, 64800 per kthread [ 441.171164][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3449'. [ 441.231733][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3449'. [ 441.361907][T19569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3451'. [ 441.457140][T19569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.472383][T19569] nbd3: detected capacity change from 0 to 63 [ 441.529465][ T5633] block nbd3: Receive control failed (result -32) [ 441.541706][ T4949] block nbd3: Dead connection, failed to find a fallback [ 441.541731][ T4949] block nbd3: shutting down sockets [ 441.541838][ T4949] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.541925][ T4949] Buffer I/O error on dev nbd3, logical block 0, async page read [ 441.591622][ T4949] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.591664][ T4949] Buffer I/O error on dev nbd3, logical block 1, async page read [ 441.591787][ T4949] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.591811][ T4949] Buffer I/O error on dev nbd3, logical block 2, async page read [ 441.591924][ T4949] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.591947][ T4949] Buffer I/O error on dev nbd3, logical block 3, async page read [ 441.593996][ T4949] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.594025][ T4949] Buffer I/O error on dev nbd3, logical block 0, async page read [ 441.594122][ T4949] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.594145][ T4949] Buffer I/O error on dev nbd3, logical block 1, async page read [ 441.594667][ T4949] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.594691][ T4949] Buffer I/O error on dev nbd3, logical block 2, async page read [ 441.594804][ T4949] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.594828][ T4949] Buffer I/O error on dev nbd3, logical block 3, async page read [ 441.596185][ T4949] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.596211][ T4949] Buffer I/O error on dev nbd3, logical block 0, async page read [ 441.596306][ T4949] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.596330][ T4949] Buffer I/O error on dev nbd3, logical block 1, async page read [ 441.792823][T17377] ldm_validate_partition_table(): Disk read failed. [ 441.807400][T17377] Dev nbd3: unable to read RDB block 0 [ 441.825282][T17377] nbd3: unable to read partition table [ 441.892502][T17377] ldm_validate_partition_table(): Disk read failed. [ 441.906554][T17377] Dev nbd3: unable to read RDB block 0 [ 441.916224][T17377] nbd3: unable to read partition table [ 442.017150][T19586] : renamed from bond0 (while UP) [ 442.084549][T19588] netlink: 'syz.4.3456': attribute type 1 has an invalid length. [ 442.084580][T19588] netlink: 'syz.4.3456': attribute type 4 has an invalid length. [ 442.084592][T19588] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3456'. [ 442.084883][T19588] netlink: 'syz.4.3456': attribute type 1 has an invalid length. [ 442.084897][T19588] netlink: 'syz.4.3456': attribute type 4 has an invalid length. [ 442.084908][T19588] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3456'. [ 442.261667][T19603] netlink: 'syz.2.3458': attribute type 39 has an invalid length. [ 442.324845][ T3661] IPVS: starting estimator thread 0... [ 442.419410][T19607] IPVS: using max 29 ests per chain, 69600 per kthread [ 443.926810][T19647] syz_tun: left allmulticast mode [ 443.996288][T19637] openvswitch: netlink: Message has 8 unknown bytes. [ 444.852161][T19689] syz_tun: entered allmulticast mode [ 444.910739][T19690] dvmrp8: entered allmulticast mode [ 444.931557][T19689] __nla_validate_parse: 3 callbacks suppressed [ 444.931575][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'. [ 445.035778][T19686] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 445.116543][T19686] bond1 (unregistering): Released all slaves [ 445.211660][T19688] syz_tun: left allmulticast mode [ 445.694234][T19716] [ 445.696622][T19716] ====================================================== [ 445.703639][T19716] WARNING: possible circular locking dependency detected [ 445.710673][T19716] syzkaller #0 Not tainted [ 445.715081][T19716] ------------------------------------------------------ [ 445.722088][T19716] syz.0.3493/19716 is trying to acquire lock: [ 445.728144][T19716] ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 445.737366][T19716] [ 445.737366][T19716] but task is already holding lock: [ 445.744724][T19716] ffff888034025038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 445.754231][T19716] [ 445.754231][T19716] which lock already depends on the new lock. [ 445.754231][T19716] [ 445.764635][T19716] [ 445.764635][T19716] the existing dependency chain (in reverse order) is: [ 445.773643][T19716] [ 445.773643][T19716] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 445.781204][T19716] __might_fault+0xcb/0x130 [ 445.786244][T19716] _copy_from_iter+0x100/0x1660 [ 445.791751][T19716] tcp_sendmsg_locked+0x20cf/0x5400 [ 445.797555][T19716] tcp_sendmsg+0x2f/0x50 [ 445.802318][T19716] sock_sendmsg_nosec+0x10e/0x180 [ 445.807972][T19716] sock_write_iter+0x2de/0x3e0 [ 445.813258][T19716] vfs_write+0x612/0xba0 [ 445.818038][T19716] ksys_write+0x150/0x270 [ 445.822899][T19716] do_syscall_64+0x166/0x520 [ 445.828099][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.834529][T19716] [ 445.834529][T19716] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 445.842168][T19716] lock_sock_nested+0x41/0x100 [ 445.847504][T19716] inet_shutdown+0x6a/0x390 [ 445.852566][T19716] nbd_mark_nsock_dead+0x2cb/0x550 [ 445.858281][T19716] recv_work+0x1cee/0x1e10 [ 445.863211][T19716] process_scheduled_works+0xc3d/0x1630 [ 445.869299][T19716] worker_thread+0xa47/0xfb0 [ 445.874419][T19716] kthread+0x38b/0x480 [ 445.879034][T19716] ret_from_fork+0x514/0xb70 [ 445.884159][T19716] ret_from_fork_asm+0x1a/0x30 [ 445.889463][T19716] [ 445.889463][T19716] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 445.897105][T19716] __mutex_lock+0x19d/0x1550 [ 445.902325][T19716] nbd_queue_rq+0x373/0xff0 [ 445.907357][T19716] blk_mq_dispatch_rq_list+0x499/0x1990 [ 445.913501][T19716] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 445.920409][T19716] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 445.926921][T19716] blk_mq_run_work_fn+0x16c/0x300 [ 445.932474][T19716] process_scheduled_works+0xc3d/0x1630 [ 445.938546][T19716] worker_thread+0xa47/0xfb0 [ 445.943669][T19716] kthread+0x38b/0x480 [ 445.948260][T19716] ret_from_fork+0x514/0xb70 [ 445.953373][T19716] ret_from_fork_asm+0x1a/0x30 [ 445.958663][T19716] [ 445.958663][T19716] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 445.965877][T19716] __mutex_lock+0x19d/0x1550 [ 445.970983][T19716] nbd_queue_rq+0xc1/0xff0 [ 445.975907][T19716] blk_mq_dispatch_rq_list+0x499/0x1990 [ 445.981967][T19716] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 445.988827][T19716] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 445.995330][T19716] blk_mq_run_work_fn+0x16c/0x300 [ 446.000886][T19716] process_scheduled_works+0xc3d/0x1630 [ 446.006956][T19716] worker_thread+0xa47/0xfb0 [ 446.012075][T19716] kthread+0x38b/0x480 [ 446.016653][T19716] ret_from_fork+0x514/0xb70 [ 446.021751][T19716] ret_from_fork_asm+0x1a/0x30 [ 446.027046][T19716] [ 446.027046][T19716] -> #3 (set->srcu){.+.+}-{0:0}: [ 446.034165][T19716] __synchronize_srcu+0xc9/0x2f0 [ 446.039654][T19716] elevator_switch+0x1e8/0x7b0 [ 446.045006][T19716] elevator_change+0x2fa/0x480 [ 446.050289][T19716] elevator_set_default+0x375/0x440 [ 446.056020][T19716] blk_register_queue+0x3f3/0x4e0 [ 446.061638][T19716] __add_disk+0x6b8/0xdb0 [ 446.066484][T19716] add_disk_fwnode+0x100/0x3a0 [ 446.071770][T19716] nbd_dev_add+0x733/0xb60 [ 446.076701][T19716] nbd_init+0x168/0x1f0 [ 446.081521][T19716] do_one_initcall+0x250/0x870 [ 446.086813][T19716] do_initcall_level+0x10a/0x1a0 [ 446.092291][T19716] do_initcalls+0x59/0xa0 [ 446.097142][T19716] kernel_init_freeable+0x29d/0x3e0 [ 446.102858][T19716] kernel_init+0x22/0x1d0 [ 446.107777][T19716] ret_from_fork+0x514/0xb70 [ 446.112900][T19716] ret_from_fork_asm+0x1a/0x30 [ 446.118207][T19716] [ 446.118207][T19716] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 446.126032][T19716] __mutex_lock+0x19d/0x1550 [ 446.131148][T19716] elevator_change+0x1af/0x480 [ 446.136434][T19716] elevator_set_none+0xb5/0x140 [ 446.141808][T19716] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 446.148139][T19716] nbd_start_device+0x189/0xb30 [ 446.153508][T19716] nbd_genl_connect+0x167d/0x1cd0 [ 446.159129][T19716] genl_family_rcv_msg_doit+0x233/0x340 [ 446.165266][T19716] genl_rcv_msg+0x614/0x7a0 [ 446.170294][T19716] netlink_rcv_skb+0x226/0x4a0 [ 446.175615][T19716] genl_rcv+0x28/0x40 [ 446.180110][T19716] netlink_unicast+0x7bd/0x940 [ 446.185405][T19716] netlink_sendmsg+0x813/0xb40 [ 446.190696][T19716] sock_sendmsg_nosec+0x13a/0x180 [ 446.196241][T19716] ____sys_sendmsg+0x54e/0x850 [ 446.201523][T19716] ___sys_sendmsg+0x2a5/0x360 [ 446.206728][T19716] __x64_sys_sendmsg+0x1b1/0x290 [ 446.212182][T19716] do_syscall_64+0x166/0x520 [ 446.217288][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.223701][T19716] [ 446.223701][T19716] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 446.232321][T19716] blk_alloc_queue+0x544/0x690 [ 446.237600][T19716] __blk_mq_alloc_disk+0x194/0x390 [ 446.243242][T19716] nbd_dev_add+0x494/0xb60 [ 446.248178][T19716] nbd_init+0x168/0x1f0 [ 446.252861][T19716] do_one_initcall+0x250/0x870 [ 446.258155][T19716] do_initcall_level+0x10a/0x1a0 [ 446.263624][T19716] do_initcalls+0x59/0xa0 [ 446.268474][T19716] kernel_init_freeable+0x29d/0x3e0 [ 446.274182][T19716] kernel_init+0x22/0x1d0 [ 446.279028][T19716] ret_from_fork+0x514/0xb70 [ 446.284135][T19716] ret_from_fork_asm+0x1a/0x30 [ 446.289419][T19716] [ 446.289419][T19716] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 446.296631][T19716] __lock_acquire+0x164c/0x2de0 [ 446.302029][T19716] lock_acquire+0x115/0x350 [ 446.307059][T19716] fs_reclaim_acquire+0x71/0x100 [ 446.312521][T19716] prepare_alloc_pages+0x149/0x600 [ 446.318174][T19716] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 446.324520][T19716] alloc_pages_mpol+0x21e/0x390 [ 446.329926][T19716] folio_alloc_mpol_noprof+0x39/0x160 [ 446.335823][T19716] vma_alloc_folio_noprof+0xe1/0x1e0 [ 446.341629][T19716] do_pte_missing+0x173a/0x34b0 [ 446.347013][T19716] handle_mm_fault+0x1a53/0x3750 [ 446.352471][T19716] do_user_addr_fault+0x746/0x1340 [ 446.358128][T19716] exc_page_fault+0x6a/0xc0 [ 446.363165][T19716] asm_exc_page_fault+0x26/0x30 [ 446.368536][T19716] rep_movs_alternative+0x11/0xa0 [ 446.374155][T19716] _copy_to_iter+0x255/0x1810 [ 446.379351][T19716] llc_ui_getsockopt+0x356/0x460 [ 446.384910][T19716] do_sock_getsockopt+0x6ae/0x7e0 [ 446.390460][T19716] __x64_sys_getsockopt+0x1a4/0x240 [ 446.396180][T19716] do_syscall_64+0x166/0x520 [ 446.401295][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.407716][T19716] [ 446.407716][T19716] other info that might help us debug this: [ 446.407716][T19716] [ 446.417942][T19716] Chain exists of: [ 446.417942][T19716] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 446.417942][T19716] [ 446.430468][T19716] Possible unsafe locking scenario: [ 446.430468][T19716] [ 446.437909][T19716] CPU0 CPU1 [ 446.443268][T19716] ---- ---- [ 446.448625][T19716] rlock(&mm->mmap_lock); [ 446.453041][T19716] lock(sk_lock-AF_INET); [ 446.459980][T19716] lock(&mm->mmap_lock); [ 446.466833][T19716] lock(fs_reclaim); [ 446.470829][T19716] [ 446.470829][T19716] *** DEADLOCK *** [ 446.470829][T19716] [ 446.478968][T19716] locks held by syz.0.3493/19716: 2, last CPU#0: [ 446.485291][T19716] #0: ffff88807d071260 (sk_lock-AF_LLC){+.+.}-{0:0}, at: llc_ui_getsockopt+0xb5/0x460 [ 446.494979][T19716] #1: ffff888034025038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 446.504923][T19716] [ 446.504923][T19716] stack backtrace: [ 446.510831][T19716] CPU: 0 UID: 0 PID: 19716 Comm: syz.0.3493 Not tainted syzkaller #0 PREEMPT(full) [ 446.520217][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.530282][T19716] Call Trace: [ 446.533565][T19716] [ 446.536488][T19716] dump_stack_lvl+0xe8/0x150 [ 446.541095][T19716] print_circular_bug+0x2e2/0x300 [ 446.546140][T19716] check_noncircular+0x12f/0x150 [ 446.551088][T19716] __lock_acquire+0x164c/0x2de0 [ 446.555960][T19716] ? __lock_acquire+0x747/0x2de0 [ 446.560905][T19716] lock_acquire+0x115/0x350 [ 446.565409][T19716] ? prepare_alloc_pages+0x149/0x600 [ 446.570700][T19716] ? rcu_is_watching+0x16/0xb0 [ 446.575459][T19716] fs_reclaim_acquire+0x71/0x100 [ 446.580398][T19716] ? prepare_alloc_pages+0x149/0x600 [ 446.585678][T19716] prepare_alloc_pages+0x149/0x600 [ 446.590784][T19716] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 446.596594][T19716] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 446.602924][T19716] ? __pfx_policy_nodemask+0x10/0x10 [ 446.608219][T19716] ? __lock_acquire+0x747/0x2de0 [ 446.613156][T19716] alloc_pages_mpol+0x21e/0x390 [ 446.618009][T19716] folio_alloc_mpol_noprof+0x39/0x160 [ 446.623909][T19716] vma_alloc_folio_noprof+0xe1/0x1e0 [ 446.629196][T19716] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 446.635094][T19716] ? lock_acquire+0x115/0x350 [ 446.639767][T19716] do_pte_missing+0x173a/0x34b0 [ 446.644636][T19716] handle_mm_fault+0x1a53/0x3750 [ 446.649604][T19716] ? handle_mm_fault+0xf1/0x3750 [ 446.654561][T19716] ? __pfx_handle_mm_fault+0x10/0x10 [ 446.659875][T19716] ? __lock_acquire+0x747/0x2de0 [ 446.664820][T19716] ? lock_mm_and_find_vma+0xa7/0x340 [ 446.670107][T19716] do_user_addr_fault+0x746/0x1340 [ 446.675219][T19716] exc_page_fault+0x6a/0xc0 [ 446.679720][T19716] asm_exc_page_fault+0x26/0x30 [ 446.684575][T19716] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 446.690396][T19716] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f [ 446.710010][T19716] RSP: 0018:ffffc900056afa98 EFLAGS: 00050202 [ 446.716086][T19716] RAX: ffffffff84dc2202 RBX: ffffc900056afc60 RCX: 0000000000000004 [ 446.724067][T19716] RDX: 0000000000000000 RSI: ffffc900056afc60 RDI: 00002000000018c0 [ 446.732046][T19716] RBP: ffffc900056afc10 R08: 0000000000000003 R09: 0000000000000004 [ 446.740020][T19716] R10: dffffc0000000000 R11: fffff52000ad5f8c R12: 1ffff92000ad5fba [ 446.747996][T19716] R13: 00002000000018c0 R14: ffffc900056afde0 R15: 0000000000000004 [ 446.755974][T19716] ? _copy_to_iter+0x1a2/0x1810 [ 446.760840][T19716] _copy_to_iter+0x255/0x1810 [ 446.765525][T19716] ? __pfx__copy_to_iter+0x10/0x10 [ 446.770638][T19716] ? llc_ui_getsockopt+0xb5/0x460 [ 446.775677][T19716] ? __local_bh_enable_ip+0xd6/0x140 [ 446.780970][T19716] llc_ui_getsockopt+0x356/0x460 [ 446.785917][T19716] ? __pfx_llc_ui_getsockopt+0x10/0x10 [ 446.791386][T19716] do_sock_getsockopt+0x6ae/0x7e0 [ 446.796416][T19716] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 446.801981][T19716] ? __fget_files+0x3a2/0x420 [ 446.806671][T19716] ? __fget_files+0x2a/0x420 [ 446.811281][T19716] __x64_sys_getsockopt+0x1a4/0x240 [ 446.816502][T19716] do_syscall_64+0x166/0x520 [ 446.821104][T19716] ? trace_irq_disable+0x3b/0x140 [ 446.826187][T19716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.832253][T19716] ? clear_bhb_loop+0x70/0xc0 [ 446.836937][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.842829][T19716] RIP: 0033:0x7f878019e159 [ 446.847248][T19716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.866858][T19716] RSP: 002b:00007f8781019028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 446.875284][T19716] RAX: ffffffffffffffda RBX: 00007f8780425fa0 RCX: 00007f878019e159 [ 446.883261][T19716] RDX: 0000000000000001 RSI: 000000000000010c RDI: 0000000000000009 [ 446.891228][T19716] RBP: 00007f878023506b R08: 00002000000079c0 R09: 0000000000000000 [ 446.899202][T19716] R10: 00002000000018c0 R11: 0000000000000246 R12: 0000000000000000 [ 446.907180][T19716] R13: 00007f8780426038 R14: 00007f8780425fa0 R15: 00007fffd63f2f88 [ 446.915170][T19716] [ 447.098319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog