last executing test programs: 1m23.08635921s ago: executing program 4 (id=11706): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'netpci0\x00', 0x1}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) 1m22.700404376s ago: executing program 4 (id=11711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1m22.459432852s ago: executing program 4 (id=11716): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x6912223a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fd7, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0xffdb, &(0x7f00000004c0)='\x00'/14, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1m21.490640714s ago: executing program 4 (id=11723): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 1m17.168378319s ago: executing program 4 (id=11733): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101010200000000000000000a000005300002802c00018014000300fc"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) 1m16.989298255s ago: executing program 4 (id=11736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='7', 0x1}], 0x1}, 0x4) 1m1.559997301s ago: executing program 32 (id=11736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='7', 0x1}], 0x1}, 0x4) 6.761416236s ago: executing program 3 (id=12542): socket$rds(0x15, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="892950e2", 0x4}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 6.284655625s ago: executing program 0 (id=12545): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.368079632s ago: executing program 3 (id=12549): socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 3.308949212s ago: executing program 0 (id=12550): socket(0x10, 0x80002, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.240740661s ago: executing program 3 (id=12552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xfffffdff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.17899379s ago: executing program 5 (id=12553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.08754058s ago: executing program 3 (id=12556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 2.915021112s ago: executing program 5 (id=12559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x4) 2.802403601s ago: executing program 5 (id=12560): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="f06295784eb8440ee32ac821af6af296796d", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) unshare(0x40000000) r1 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto$x25(r1, &(0x7f0000000180), 0x0, 0x40000, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000280)) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)={'c', ' *:* ', 'w\x00'}, 0x8) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000300)={0x4, 0x80000000, 0x2}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004011) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x44004) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=@setlink={0x60, 0x13, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x80}, @IFLA_NET_NS_FD={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000008c0)=@x25, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/213, 0xd5}, {&(0x7f0000000a40)=""/161, 0xa1}, {&(0x7f0000000b00)=""/250, 0xfa}, {&(0x7f0000000c00)=""/51, 0x33}], 0x4, &(0x7f0000000c80)=""/8, 0x8}, 0x9}], 0x1, 0x1, &(0x7f0000000d00)={0x77359400}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x6, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x14, 0x5}, @enum64={0x6, 0x5, 0x0, 0x13, 0x1, 0x6, [{0xa, 0x200, 0x1960}, {0xd, 0x9, 0x613}, {0xc, 0x3, 0x1b50}, {0x4, 0x5, 0x9}, {0x5, 0x3, 0x6}]}]}, {0x0, [0x61, 0x61, 0x6d613aae96dcb703, 0x30]}}, &(0x7f0000000e00)=""/17, 0x86, 0x11, 0x1, 0x2}, 0x28) sendmsg$inet(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)=[{0x0}], 0x1}, 0x40000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000001000)={'veth1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001100)={'ip6_vti0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x0, 0x5, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7, 0x1, 0x4}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001140)={0x0, @dev, @broadcast}, &(0x7f0000001180)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001240)={'gre0\x00', &(0x7f00000011c0)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x127c, 0x4, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@ssrr={0x89, 0x3, 0x2d}, @end]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000012c0)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) 2.607501137s ago: executing program 3 (id=12563): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8}, 0xb7de}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)=""/103, 0x67}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/33, 0x21}], 0x1}, 0x10001}], 0x5, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003700e409000000000000020080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000000001060000000000001100010000000000000000000600000a00e7d9600900000000000000be2126e6bcc40bc525ebe02b1ea1619a3ba585a5bbe3bee6311fdbf5b83e1fde3cc7bf8c36d2554d6ee858cb035ca1289617c89eb726500a"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2.033694912s ago: executing program 3 (id=12569): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x404c000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7105026b01cba1f99371"], 0x1a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 1.965529224s ago: executing program 2 (id=12570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 1.888099657s ago: executing program 2 (id=12571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x400b4) 1.878771862s ago: executing program 2 (id=12572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.85607066s ago: executing program 5 (id=12573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 1.807680676s ago: executing program 1 (id=12574): socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x42, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0x3}]}}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.675435541s ago: executing program 2 (id=12575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x104}}, 0x0) 1.667226403s ago: executing program 1 (id=12576): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.651107777s ago: executing program 5 (id=12577): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x51, 0xb619, '.\x00'}}) 1.564032665s ago: executing program 2 (id=12578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 1.529950414s ago: executing program 1 (id=12579): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8}, 0xb7de}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)=""/103, 0x67}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/33, 0x21}], 0x1}, 0x10001}], 0x5, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000600)=0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003700e409000000000000020080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000000001060000000000001100010000000000000000000600000a00e7d9600900000000000000be2126e6bcc40bc525ebe02b1ea1619a3ba585a5bbe3bee6311fdbf5b83e1fde3cc7bf8c36d2554d6ee858cb035ca1289617c89eb726500a"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.525561464s ago: executing program 5 (id=12580): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x200c4050) syz_emit_ethernet(0xbe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0xdc, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x94, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001, 0x8}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x24}}]}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0xdc}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(r1, 0x0, 0x0) tee(r1, r1, 0x7, 0x3) sendmsg$TIPC_NL_NODE_GET(r1, 0x0, 0x2004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 1.176548358s ago: executing program 2 (id=12581): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.094338714s ago: executing program 1 (id=12582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 1.008801869s ago: executing program 1 (id=12583): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="f06295784eb8440ee32ac821af6af296796d", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) unshare(0x40000000) r1 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto$x25(r1, &(0x7f0000000180), 0x0, 0x40000, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000280)) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)={'c', ' *:* ', 'w\x00'}, 0x8) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000300)={0x4, 0x80000000, 0x2}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004011) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x44004) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=@setlink={0x60, 0x13, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x80}, @IFLA_NET_NS_FD={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000008c0)=@x25, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/213, 0xd5}, {&(0x7f0000000a40)=""/161, 0xa1}, {&(0x7f0000000b00)=""/250, 0xfa}, {&(0x7f0000000c00)=""/51, 0x33}], 0x4, &(0x7f0000000c80)=""/8, 0x8}, 0x9}], 0x1, 0x1, &(0x7f0000000d00)={0x77359400}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x6, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x14, 0x5}, @enum64={0x6, 0x5, 0x0, 0x13, 0x1, 0x6, [{0xa, 0x200, 0x1960}, {0xd, 0x9, 0x613}, {0xc, 0x3, 0x1b50}, {0x4, 0x5, 0x9}, {0x5, 0x3, 0x6}]}]}, {0x0, [0x61, 0x61, 0x6d613aae96dcb703, 0x30]}}, &(0x7f0000000e00)=""/17, 0x86, 0x11, 0x1, 0x2}, 0x28) sendmsg$inet(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)=[{0x0}], 0x1}, 0x40000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000001000)={'veth1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001100)={'ip6_vti0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x0, 0x5, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7, 0x1, 0x4}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001140)={0x0, @dev, @broadcast}, &(0x7f0000001180)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001240)={'gre0\x00', &(0x7f00000011c0)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x127c, 0x4, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@ssrr={0x89, 0x3, 0x2d}, @end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) 234.619458ms ago: executing program 0 (id=12584): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000003800)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}, {{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x0) 199.754988ms ago: executing program 0 (id=12585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xb}, {0xffff, 0xffee}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x20000000) 133.474429ms ago: executing program 0 (id=12586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x32, 0x1, 0x80, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x8000) 103.702046ms ago: executing program 1 (id=12587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 0s ago: executing program 0 (id=12588): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) kernel console output (not intermixed with test programs): netlink: 3 bytes leftover after parsing attributes in process `syz.3.9013'. [ 424.662055][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9018'. [ 424.725277][ C0] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 424.832778][T24616] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 424.963967][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9024'. [ 425.447992][T24654] netlink: 'syz.0.9040': attribute type 9 has an invalid length. [ 425.783081][ C0] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 426.203844][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9057'. [ 426.225469][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9057'. [ 426.528047][T24705] netlink: 284 bytes leftover after parsing attributes in process `syz.4.9065'. [ 426.804904][ C1] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 426.861104][T24726] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9075'. [ 426.999025][T24735] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9080'. [ 427.019125][T24738] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9081'. [ 427.845015][ C0] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 428.888481][ C1] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 429.010317][T24834] netlink: 'syz.1.9127': attribute type 2 has an invalid length. [ 429.034625][T24834] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9127'. [ 429.246645][T24846] xt_hashlimit: size too large, truncated to 1048576 [ 429.773662][T24875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9145'. [ 429.805540][T24875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9145'. [ 429.926501][ C0] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 430.040459][T24895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9155'. [ 430.052404][T24897] bridge0: port 3(gretap0) entered disabled state [ 430.060954][T24897] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.127219][T24895] vlan2: entered allmulticast mode [ 430.151836][T24895] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 430.634385][T24931] netem: change failed [ 430.966338][ C1] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 430.981921][T24953] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.007029][T24953] netlink: 'syz.0.9182': attribute type 1 has an invalid length. [ 432.021176][ T10] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 432.106710][T25028] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 432.833312][T25073] __nla_validate_parse: 2 callbacks suppressed [ 432.833333][T25073] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9237'. [ 432.896920][T25076] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9238'. [ 433.048648][ T10] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 433.118476][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9245'. [ 433.173730][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9247'. [ 433.201517][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9247'. [ 433.279679][T25100] netlink: 'syz.0.9248': attribute type 8 has an invalid length. [ 433.288451][T25100] sch_fq: defrate 0 ignored. [ 433.923261][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9270'. [ 433.997981][T25142] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 434.086196][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 434.263368][T25157] IPVS: persistence engine module ip_vs_pe_À not found [ 434.300325][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9281'. [ 434.311383][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9281'. [ 434.332309][T25166] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9281'. [ 434.356798][T25166] veth1_to_bridge: entered allmulticast mode [ 434.363277][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9281'. [ 435.126637][ T10] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 436.062634][T25272] netlink: 'syz.0.9329': attribute type 4 has an invalid length. [ 436.172782][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 436.333727][T25287] netlink: 'syz.4.9334': attribute type 83 has an invalid length. [ 437.215866][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 437.679872][T25368] sctp: [Deprecated]: syz.2.9364 (pid 25368) Use of int in max_burst socket option deprecated. [ 437.679872][T25368] Use struct sctp_assoc_value instead [ 437.762083][ T5288] veth0_macvtap: left promiscuous mode [ 438.018583][T25386] __nla_validate_parse: 7 callbacks suppressed [ 438.018604][T25386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9373'. [ 438.246541][ T10] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 438.294631][T25402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9378'. [ 438.309034][T25404] netlink: 'syz.0.9379': attribute type 3 has an invalid length. [ 439.238030][T25461] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 439.303695][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 440.027007][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9419'. [ 440.155551][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9424'. [ 440.172759][T25514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9424'. [ 440.339665][ T24] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 440.462451][T25531] netlink: 'syz.4.9433': attribute type 2 has an invalid length. [ 440.630681][T25544] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9438'. [ 440.646593][ T30] audit: type=1804 audit(1777514770.514:4): pid=25545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9436" name="/newroot/1935/cgroup.controllers" dev="tmpfs" ino=9723 res=1 errno=0 [ 440.708984][ T30] audit: type=1800 audit(1777514770.514:5): pid=25545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9436" name="cgroup.controllers" dev="tmpfs" ino=9723 res=0 errno=0 [ 441.376945][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 441.832568][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9473'. [ 442.346712][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9489'. [ 442.421359][ T24] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 442.487030][ C0] tipc: RX(ac14140f): key[1] is activated [ 443.276809][T25713] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9516'. [ 443.449264][ T24] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 443.672298][T25733] syzkaller1: entered promiscuous mode [ 443.688051][T25733] syzkaller1: entered allmulticast mode [ 444.467955][T25776] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 444.497354][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 444.667855][T25788] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 445.163450][T25820] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9568'. [ 445.276452][T25826] netlink: 'syz.4.9571': attribute type 1 has an invalid length. [ 445.493130][T25845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9579'. [ 445.528077][ T10] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 445.567174][T25845] netlink: 'syz.2.9579': attribute type 1 has an invalid length. [ 445.585557][T25845] netlink: 'syz.2.9579': attribute type 2 has an invalid length. [ 446.442017][T25896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9603'. [ 446.565820][ T5869] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 447.288752][T25942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 447.311510][T25942] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.330857][T25942] gretap1: entered promiscuous mode [ 447.347223][T25942] gretap1: entered allmulticast mode [ 447.362294][T25944] veth0_macvtap: Caught tx_queue_len zero misconfig [ 447.390989][T25946] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9627'. [ 447.517324][T25950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9631'. [ 447.533735][T25950] gtp2: entered promiscuous mode [ 447.542004][T25950] gtp2: entered allmulticast mode [ 447.592161][T25953] syzkaller1: entered promiscuous mode [ 447.606375][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 447.620026][T25953] syzkaller1: entered allmulticast mode [ 448.124842][T25986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9645'. [ 448.232246][T25994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9649'. [ 448.651700][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 448.827599][T26031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9667'. [ 449.333181][T26062] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9682'. [ 449.519732][T26073] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9688'. [ 449.533540][T26071] netlink: 'syz.2.9687': attribute type 11 has an invalid length. [ 449.597393][T26077] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.9690'. [ 449.656032][T26080] netlink: 'syz.2.9691': attribute type 4 has an invalid length. [ 449.686018][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 449.911362][T26091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9696'. [ 449.935654][T26091] block nbd3: Unsupported socket: should be TCP or UNIX. [ 449.993176][T26094] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.9698'. [ 450.120093][T26104] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9699'. [ 450.149222][T26104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9699'. [ 450.227132][T26107] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9704'. [ 450.740229][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 451.108793][T26156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9720'. [ 451.451590][T26164] syzkaller1: entered promiscuous mode [ 451.469930][T26164] syzkaller1: entered allmulticast mode [ 451.767171][ T10] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 452.218198][T26203] nbd: must specify a size in bytes for the device [ 452.238143][T26203] block nbd1: NBD_DISCONNECT [ 452.255915][T26203] block nbd1: Send disconnect failed -32 [ 452.283469][T26203] block nbd1: shutting down sockets [ 452.630097][T26227] macvlan0: entered promiscuous mode [ 452.816188][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 453.218163][T26253] sctp: [Deprecated]: syz.1.9756 (pid 26253) Use of int in max_burst socket option deprecated. [ 453.218163][T26253] Use struct sctp_assoc_value instead [ 453.339821][T26263] netlink: 'syz.0.9760': attribute type 7 has an invalid length. [ 453.364150][T26263] netlink: 'syz.0.9760': attribute type 8 has an invalid length. [ 453.478802][ T30] audit: type=1800 audit(1777514783.354:6): pid=26269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9764" name="memory.events" dev="tmpfs" ino=9552 res=0 errno=0 [ 453.848186][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 454.020625][T26302] __nla_validate_parse: 6 callbacks suppressed [ 454.020646][T26302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9778'. [ 454.433924][T26329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9791'. [ 454.465593][T26329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.576315][T26329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.888192][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 455.009024][T26360] netlink: 'syz.2.9804': attribute type 1 has an invalid length. [ 455.017019][T26360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9804'. [ 455.876173][T26399] veth0: entered promiscuous mode [ 455.882306][T26398] veth0: left promiscuous mode [ 455.927742][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 456.331393][T26426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9832'. [ 456.364411][T26426] netlink: 'syz.0.9832': attribute type 30 has an invalid length. [ 456.388467][T26431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9832'. [ 456.413187][T26431] netlink: 'syz.0.9832': attribute type 30 has an invalid length. [ 456.967624][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 457.093983][T26455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9842'. [ 457.368174][T26476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9850'. [ 457.810148][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9864'. [ 457.879304][T26507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9866'. [ 458.019096][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 458.084807][T26514] block nbd1: server does not support multiple connections per device. [ 458.095125][T26514] block nbd1: shutting down sockets [ 458.552201][T26547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9884'. [ 458.909233][T26571] erspan0: entered promiscuous mode [ 458.936763][T26573] sctp: [Deprecated]: syz.1.9895 (pid 26573) Use of int in max_burst socket option. [ 458.936763][T26573] Use struct sctp_assoc_value instead [ 458.978099][T26571] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 459.046969][ T5869] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 459.443836][T26594] team0: Port device gretap2 added [ 459.570145][T26602] netlink: 'syz.0.9910': attribute type 1 has an invalid length. [ 459.578957][T26602] __nla_validate_parse: 1 callbacks suppressed [ 459.578976][T26602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9910'. [ 460.067188][T26634] netlink: 'syz.1.9925': attribute type 1 has an invalid length. [ 460.087725][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 460.531399][T26656] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9934'. [ 460.552128][T26656] netlink: ct family unspecified [ 460.630538][T26660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9936'. [ 460.767176][T26662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9936'. [ 460.813851][T26662] nbd: device at index 64 is going down [ 461.002254][T26523] udevd[26523]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 461.052233][T26669] udevd[26669]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 461.064683][T26679] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.9939'. [ 461.106026][T26681] erspan0: entered promiscuous mode [ 461.131307][T26681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9943'. [ 461.182128][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 461.217210][T26685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9946'. [ 461.256351][T26685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9946'. [ 461.272871][T26685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9946'. [ 461.297127][T26685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9946'. [ 461.333176][T26691] bridge0: port 1(veth0_to_bridge) entered blocking state [ 461.359404][T26691] bridge0: port 1(veth0_to_bridge) entered disabled state [ 461.383384][T26691] veth0_to_bridge: entered allmulticast mode [ 461.407567][T26691] veth0_to_bridge: entered promiscuous mode [ 461.523813][T26702] IPv6: NLM_F_CREATE should be specified when creating new route [ 461.701823][ T5956] IPVS: starting estimator thread 0... [ 461.717973][T26707] bridge0: port 1(veth0_to_bridge) entered blocking state [ 461.725360][T26707] bridge0: port 1(veth0_to_bridge) entered listening state [ 461.795872][T26715] IPVS: using max 28 ests per chain, 67200 per kthread [ 461.838000][T26707] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 461.924711][T26725] pim6reg1: entered promiscuous mode [ 461.937580][T26725] pim6reg1: entered allmulticast mode [ 462.166195][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 462.573300][T26757] xt_hashlimit: size too large, truncated to 1048576 [ 462.626679][T26763] macvtap1: entered promiscuous mode [ 462.648294][T26763] macvtap1: entered allmulticast mode [ 462.658418][T26763] veth1_vlan: entered allmulticast mode [ 462.700701][T26765] macvtap2: entered promiscuous mode [ 462.706613][T26765] macvtap2: entered allmulticast mode [ 463.217063][ T10] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 463.269185][T26799] xt_hashlimit: size too large, truncated to 1048576 [ 463.871897][T26829] syzkaller1: entered promiscuous mode [ 463.885333][T26829] syzkaller1: entered allmulticast mode [ 464.120575][T26833] vlan1 (unregistering): left allmulticast mode [ 464.188216][T26832] syzkaller1: entered promiscuous mode [ 464.193972][T26832] syzkaller1: entered allmulticast mode [ 464.281023][ T10] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 464.784653][T26876] netlink: 'syz.4.10027': attribute type 39 has an invalid length. [ 464.935752][T26885] __nla_validate_parse: 2 callbacks suppressed [ 464.935772][T26885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10029'. [ 465.113228][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10033'. [ 465.142861][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10033'. [ 465.300219][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 466.108429][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10061'. [ 466.335673][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 466.583562][T26982] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.10076'. [ 466.724711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.734996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.983251][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10086'. [ 467.494000][T27028] erspan0: left promiscuous mode [ 467.499222][ T5906] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 468.430274][ T5956] tipc: Duplicate ac14140f using eth(aa:aa:aa:aa:aa:32) seen on [ 468.504080][T27028] tipc: Resetting bearer [ 468.522542][T27028] tipc: Resetting bearer [ 468.747028][T27028] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 468.804147][T27028] bond2: left promiscuous mode [ 468.814992][T27028] bridge4: left promiscuous mode [ 468.828822][T27028] gtp0: left promiscuous mode [ 468.841328][T27028] gtp2: left promiscuous mode [ 468.955330][T27042] wg1 speed is unknown, defaulting to 1000 [ 468.992021][T27042] syz2: Port: 1 Link DOWN [ 469.041465][ T1040] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.107605][ T1040] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.127588][ T1040] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.159685][ T1040] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.194012][ T1040] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.228473][ T1040] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.249374][T27083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10108'. [ 469.266951][ T1040] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.291905][ T1040] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.327992][T27083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10108'. [ 470.115782][T27129] sctp: [Deprecated]: syz.4.10123 (pid 27129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.115782][T27129] Use struct sctp_sack_info instead [ 470.451329][T27149] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10130'. [ 470.837728][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10141'. [ 470.859661][T27174] pim6reg1: entered promiscuous mode [ 470.874187][T27174] pim6reg1: entered allmulticast mode [ 470.978180][T27183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10143'. [ 471.494158][T27209] macvlan0: left promiscuous mode [ 471.504947][T27209] netlink: 'syz.0.10152': attribute type 2 has an invalid length. [ 472.444079][T27263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10169'. [ 472.484546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.585585][T27270] netlink: 'syz.3.10172': attribute type 12 has an invalid length. [ 472.603210][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10172'. [ 472.616078][T27273] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10173'. [ 472.622473][T27270] netlink: 'syz.3.10172': attribute type 12 has an invalid length. [ 472.634921][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10172'. [ 472.899405][T27286] atomic_op ffff8880565b2198 conn xmit_atomic 0000000000000000 [ 472.997741][T27294] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.10182'. [ 473.138895][T27302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10187'. [ 473.154086][T27302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10187'. [ 473.657041][T27329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.055926][T27358] netlink: 'syz.3.10212': attribute type 20 has an invalid length. [ 474.165333][T27358] netlink: 'syz.3.10212': attribute type 20 has an invalid length. [ 474.913108][T27402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.778729][T27447] bridge_slave_0: invalid flags given to default FDB implementation [ 475.802617][T27448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.052949][T27460] netlink: 'syz.2.10242': attribute type 1 has an invalid length. [ 476.080131][T27460] __nla_validate_parse: 4 callbacks suppressed [ 476.080151][T27460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10242'. [ 476.100255][T27468] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.10245'. [ 476.116391][T27467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10246'. [ 476.510511][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10254'. [ 476.562655][T27491] ip6erspan0: entered promiscuous mode [ 476.892151][T27509] netlink: 'syz.1.10263': attribute type 1 has an invalid length. [ 476.998416][T27509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.006754][T27522] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10266'. [ 477.018936][T27522] netlink: Conntrack attr has 3 unknown bytes [ 477.058484][ C0] bridge0: port 1(veth0_to_bridge) entered learning state [ 477.096838][T27518] bond2: (slave ip6erspan0): making interface the new active one [ 477.107838][T27518] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 477.323078][T27535] netlink: 'syz.2.10273': attribute type 7 has an invalid length. [ 477.356117][T27535] netlink: 'syz.2.10273': attribute type 7 has an invalid length. [ 477.372651][T27539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10275'. [ 477.392862][T27539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10275'. [ 477.470450][T27543] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.10277'. [ 477.614446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.649200][T27558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10284'. [ 478.273589][T27596] team0: No ports can be present during mode change [ 478.301809][T27592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10301'. [ 479.075042][T27638] trusted_key: syz.0.10322 sent an empty control message without MSG_MORE. [ 479.171927][T27647] netlink: 'syz.1.10326': attribute type 29 has an invalid length. [ 479.194879][T27647] netlink: 'syz.1.10326': attribute type 29 has an invalid length. [ 479.420119][T27662] netlink: 'syz.3.10331': attribute type 15 has an invalid length. [ 479.438626][T27662] netlink: 'syz.3.10331': attribute type 15 has an invalid length. [ 479.438674][ T12] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 479.457635][ T12] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 479.468698][ T12] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 479.480545][ T12] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 479.720795][T27673] netlink: 'syz.1.10336': attribute type 15 has an invalid length. [ 479.747399][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 479.761656][T27673] netlink: 'syz.1.10336': attribute type 15 has an invalid length. [ 479.775797][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 479.788207][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 479.800389][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 480.172336][T27698] syzkaller1: entered promiscuous mode [ 480.184788][T27698] syzkaller1: entered allmulticast mode [ 480.193822][T27694] IPVS: Scheduler module ip_vs_sip not found [ 480.392762][T27713] netlink: 'syz.2.10348': attribute type 25 has an invalid length. [ 480.443254][ T56] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 480.461173][ T56] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.495875][ T56] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.533172][ T56] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.669108][T27723] pimreg: left allmulticast mode [ 481.462160][T27767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.515342][T27772] bond4: (slave geneve3): making interface the new active one [ 481.539162][T27772] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 481.565572][ T58] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 481.588156][ T58] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 481.597270][ T58] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 481.610181][ T58] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 481.682909][T27781] __nla_validate_parse: 13 callbacks suppressed [ 481.682929][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10377'. [ 482.132807][T27812] netlink: 33 bytes leftover after parsing attributes in process `syz.0.10389'. [ 482.151275][T27812] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10389'. [ 482.167756][T27811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10391'. [ 482.475436][T27830] xt_hashlimit: size too large, truncated to 1048576 [ 483.321299][T27866] validate_nla: 7 callbacks suppressed [ 483.321320][T27866] netlink: 'syz.1.10412': attribute type 21 has an invalid length. [ 483.355894][T27866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10412'. [ 483.374563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.386368][T27866] netlink: 'syz.1.10412': attribute type 21 has an invalid length. [ 483.407491][T27866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10412'. [ 483.421581][T27868] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 483.551515][T27878] veth0: entered promiscuous mode [ 483.576071][T27878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10418'. [ 483.968690][T27904] netlink: 'syz.1.10428': attribute type 11 has an invalid length. [ 484.202270][T27920] netlink: 'syz.1.10435': attribute type 11 has an invalid length. [ 484.211372][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10435'. [ 484.222027][T27920] netlink: 'syz.1.10435': attribute type 11 has an invalid length. [ 484.230467][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10435'. [ 484.371875][T27928] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10439'. [ 484.892385][T27956] netlink: 'syz.1.10452': attribute type 1 has an invalid length. [ 486.216070][T28029] netlink: 'syz.0.10484': attribute type 22 has an invalid length. [ 486.277130][T28029] netlink: 'syz.0.10484': attribute type 22 has an invalid length. [ 486.538501][T28038] "syz.2.10489" (28038) uses obsolete ecb(arc4) skcipher [ 486.710177][T28055] syzkaller1: entered promiscuous mode [ 486.726792][T28055] syzkaller1: entered allmulticast mode [ 486.881315][T28068] netlink: 'syz.3.10497': attribute type 3 has an invalid length. [ 486.963004][T28072] netlink: 'syz.2.10500': attribute type 4 has an invalid length. [ 486.986783][T28072] netlink: 'syz.2.10500': attribute type 4 has an invalid length. [ 487.013937][T28073] __nla_validate_parse: 6 callbacks suppressed [ 487.013954][T28073] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10501'. [ 487.048699][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10502'. [ 487.060413][T28073] netlink: 320 bytes leftover after parsing attributes in process `syz.4.10501'. [ 487.078256][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10502'. [ 487.250001][T28086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10507'. [ 487.716149][T28117] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10518'. [ 487.788390][T28117] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.819013][T28117] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.853042][T28117] .` (unregistering): Released all slaves [ 487.938926][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10525'. [ 487.972936][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10525'. [ 488.009308][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10525'. [ 488.044851][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10525'. [ 489.513917][T28207] validate_nla: 2 callbacks suppressed [ 489.513937][T28207] netlink: 'syz.4.10553': attribute type 9 has an invalid length. [ 489.612905][ T1106] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.622192][T28207] netlink: 'syz.4.10553': attribute type 9 has an invalid length. [ 489.642827][ T1106] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.659150][ T1106] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.269464][T28279] bridge0: entered promiscuous mode [ 491.287525][T28279] bridge0: entered allmulticast mode [ 491.313933][T28279] team0: Port device bridge0 added [ 491.330939][T28282] bridge0: port 1(team0) entered blocking state [ 491.346994][T28282] bridge0: port 1(team0) entered disabled state [ 491.353618][T28282] team0: entered allmulticast mode [ 491.360814][T28282] team_slave_0: entered allmulticast mode [ 491.367882][T28282] team_slave_1: entered allmulticast mode [ 491.374084][T28282] dummy0: entered allmulticast mode [ 491.386923][T28282] team0: left allmulticast mode [ 491.391954][T28282] team_slave_0: left allmulticast mode [ 491.399013][T28282] team_slave_1: left allmulticast mode [ 491.405951][T28282] dummy0: left allmulticast mode [ 491.783445][T28300] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 491.809165][T28300] bond3: (slave lo): Enslaving as an active interface with an up link [ 491.822517][T28300] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 491.839284][T27060] lo speed is unknown, defaulting to 1000 [ 491.845404][T27066] lo speed is unknown, defaulting to 1000 [ 491.852259][T27066] syz0: Port: 1 Link ACTIVE [ 492.408279][ C0] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 492.417320][ C0] bridge0: topology change detected, propagating [ 492.467730][T28341] __nla_validate_parse: 10 callbacks suppressed [ 492.467781][T28341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10609'. [ 492.520881][T28341] netlink: 'syz.4.10609': attribute type 18 has an invalid length. [ 492.549280][T28346] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.10613'. [ 492.552458][T28341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10609'. [ 492.628690][T28341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10609'. [ 492.660669][T28341] netlink: 'syz.4.10609': attribute type 18 has an invalid length. [ 492.681473][T28341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10609'. [ 492.713887][T28350] netlink: 51 bytes leftover after parsing attributes in process `syz.3.10615'. [ 492.816490][T28356] af_packet: tpacket_rcv: packet too big, clamped from 4408 to 3952. macoff=96 [ 492.971865][T28363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10622'. [ 492.991529][T28363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10622'. [ 493.251273][T28375] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10626'. [ 493.801147][T28393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10632'. [ 493.862151][T28393] bond0: entered promiscuous mode [ 493.881185][T28393] bond_slave_0: entered promiscuous mode [ 493.908322][T28393] bond_slave_1: entered promiscuous mode [ 493.930543][T28393] H: entered promiscuous mode [ 493.957409][T28393] hsr1: entered promiscuous mode [ 494.010386][T28401] netlink: 'syz.4.10636': attribute type 3 has an invalid length. [ 495.164973][T28450] netlink: 'syz.4.10648': attribute type 4 has an invalid length. [ 495.203129][T28453] veth0_to_bridge: left allmulticast mode [ 495.233352][T28453] veth0_to_bridge: left promiscuous mode [ 495.262116][T28453] bridge0: port 1(veth0_to_bridge) entered disabled state [ 495.370492][T28453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 495.716468][T28472] netlink: 'syz.2.10657': attribute type 1 has an invalid length. [ 495.824044][T28472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.919386][T28477] bond0: (slave geneve2): making interface the new active one [ 495.940793][T28477] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 495.971312][ T1106] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 6081 - 0 [ 495.988017][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.022777][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.054651][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.530197][T28497] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 496.657091][T28510] netlink: Unknown conntrack attr (type=2304, max=9) [ 497.739832][T28557] netlink: 'syz.2.10690': attribute type 1 has an invalid length. [ 497.859407][T28557] bond4: entered promiscuous mode [ 497.865869][T28557] 8021q: adding VLAN 0 to HW filter on device bond4 [ 497.952401][T28559] bond4: (slave bridge5): making interface the new active one [ 497.973284][T28559] bridge5: entered promiscuous mode [ 498.001806][T28559] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 498.076069][T28563] netlink: 'syz.1.10692': attribute type 1 has an invalid length. [ 498.178007][T28563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.241660][T28567] bond3: (slave geneve2): making interface the new active one [ 498.268818][T28567] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 498.782207][T28592] gretap3: entered promiscuous mode [ 498.797420][T28592] batman_adv: batadv0: Adding interface: gretap3 [ 498.805904][T28592] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 498.829546][T28592] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 500.068730][T28647] __nla_validate_parse: 8 callbacks suppressed [ 500.068780][T28647] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.10722'. [ 500.644544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.652895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.661276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.669606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.677968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.686272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.694577][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.702835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.711138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.719484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.127164][T28677] netlink: 'syz.1.10728': attribute type 22 has an invalid length. [ 501.167635][T28677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10728'. [ 501.230617][T28677] netlink: 'syz.1.10728': attribute type 22 has an invalid length. [ 501.261080][T28677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10728'. [ 501.308959][T28683] syzkaller1: entered promiscuous mode [ 501.315749][T28683] syzkaller1: entered allmulticast mode [ 501.759719][T28703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10741'. [ 503.271810][T28761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10763'. [ 503.353875][T28761] team1: entered promiscuous mode [ 503.361966][T28761] team1: entered allmulticast mode [ 504.020749][T28779] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 504.214519][T28795] GUP no longer grows the stack in syz.3.10776 (28795): 200000003000-20000000a000 (200000001000) [ 504.247243][T28795] CPU: 0 UID: 0 PID: 28795 Comm: syz.3.10776 Not tainted syzkaller #0 PREEMPT(full) [ 504.247271][T28795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 504.247309][T28795] Call Trace: [ 504.247320][T28795] [ 504.247329][T28795] dump_stack_lvl+0xe8/0x150 [ 504.247359][T28795] __get_user_pages+0x2378/0x2720 [ 504.247388][T28795] ? __gup_longterm_locked+0xc4e/0x1630 [ 504.247429][T28795] ? __gup_longterm_locked+0xc4e/0x1630 [ 504.247454][T28795] ? down_read_killable+0x1bb/0x340 [ 504.247498][T28795] __gup_longterm_locked+0xdcf/0x1630 [ 504.247526][T28795] ? lock_acquire+0x106/0x350 [ 504.247581][T28795] gup_fast_fallback+0x1d84/0x20d0 [ 504.247638][T28795] ? __pfx_gup_fast_fallback+0x10/0x10 [ 504.247675][T28795] ? is_valid_gup_args+0x11f/0x200 [ 504.247701][T28795] ? get_user_pages_fast+0x4d/0xb0 [ 504.247728][T28795] __iov_iter_get_pages_alloc+0x370/0xa10 [ 504.247765][T28795] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 504.247803][T28795] iov_iter_get_pages2+0x5e/0xa0 [ 504.247854][T28795] __se_sys_vmsplice+0x7c7/0x1620 [ 504.247908][T28795] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 504.247936][T28795] ? taprio_dequeue+0x26/0x540 [ 504.247962][T28795] ? lock_acquire+0x106/0x350 [ 504.247986][T28795] ? taprio_dequeue+0x26/0x540 [ 504.248025][T28795] ? taprio_dequeue+0x26/0x540 [ 504.248049][T28795] ? taprio_dequeue+0x26/0x540 [ 504.248091][T28795] ? sched_clock_cpu+0x74/0x440 [ 504.248140][T28795] ? __irq_exit_rcu+0xca/0x220 [ 504.248167][T28795] ? handle_softirqs+0x715/0x840 [ 504.248200][T28795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.248225][T28795] do_syscall_64+0x15f/0xf80 [ 504.248253][T28795] ? clear_bhb_loop+0x40/0x90 [ 504.248281][T28795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.248303][T28795] RIP: 0033:0x7ffb9db9cdd9 [ 504.248323][T28795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.248342][T28795] RSP: 002b:00007ffb9ea3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 504.248366][T28795] RAX: ffffffffffffffda RBX: 00007ffb9de15fa0 RCX: 00007ffb9db9cdd9 [ 504.248383][T28795] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 504.248398][T28795] RBP: 00007ffb9dc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 504.248411][T28795] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 504.248425][T28795] R13: 00007ffb9de16038 R14: 00007ffb9de15fa0 R15: 00007ffda1483b98 [ 504.248462][T28795] [ 504.871619][T28817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10788'. [ 505.035678][T28824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10791'. [ 505.049858][T28824] bridge: RTM_NEWNEIGH with invalid ether address [ 505.061303][T28824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10791'. [ 505.072462][T28824] bridge: RTM_NEWNEIGH with invalid ether address [ 505.180464][T28832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10795'. [ 505.212465][T28832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10795'. [ 505.289121][T28837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10798'. [ 505.322849][T28839] syzkaller1: entered promiscuous mode [ 505.335025][T28839] syzkaller1: entered allmulticast mode [ 505.346968][T28837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10798'. [ 505.626528][T28853] netlink: 'syz.4.10805': attribute type 21 has an invalid length. [ 505.650388][T28853] netlink: 'syz.4.10805': attribute type 22 has an invalid length. [ 505.658408][T28853] netlink: 'syz.4.10805': attribute type 23 has an invalid length. [ 505.666857][T28853] netlink: 'syz.4.10805': attribute type 25 has an invalid length. [ 505.675820][T28853] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10805'. [ 505.717759][T28855] sctp: [Deprecated]: syz.1.10806 (pid 28855) Use of int in maxseg socket option. [ 505.717759][T28855] Use struct sctp_assoc_value instead [ 506.283138][T28884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10819'. [ 506.413859][T28884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10819'. [ 506.759896][T28901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10825'. [ 506.909028][T28910] netlink: 320 bytes leftover after parsing attributes in process `syz.3.10828'. [ 507.010648][T28918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10832'. [ 507.020259][T28918] netlink: 'syz.0.10832': attribute type 7 has an invalid length. [ 507.029489][T28918] netlink: 'syz.0.10832': attribute type 8 has an invalid length. [ 507.446780][T28942] net_ratelimit: 6 callbacks suppressed [ 507.446798][T28942] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 507.473392][T28938] policy can only be matched on NF_INET_PRE_ROUTING [ 507.473416][T28938] unable to load match [ 507.592463][T28947] bridge0: entered allmulticast mode [ 507.785620][T28958] netlink: 'syz.1.10851': attribute type 29 has an invalid length. [ 507.806025][T28958] netlink: 'syz.1.10851': attribute type 29 has an invalid length. [ 508.315121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.323532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.331842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.047996][T29018] netlink: 'syz.1.10869': attribute type 1 has an invalid length. [ 509.133610][T29018] bond4: (slave gretap4): making interface the new active one [ 509.142155][T29018] bond4: (slave gretap4): Enslaving as an active interface with an up link [ 510.811441][T29084] __nla_validate_parse: 8 callbacks suppressed [ 510.811458][T29084] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.10895'. [ 511.502458][T29118] netlink: 'syz.3.10912': attribute type 2 has an invalid length. [ 512.471368][T29152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10926'. [ 512.504759][T29152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 512.530465][T29152] bond5: (slave hsr0): The slave device specified does not support setting the MAC address [ 512.541841][T29152] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 512.555642][T29152] bond5: (slave hsr0): Error -22 calling dev_set_mtu [ 512.934610][T29168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.083088][T29175] syzkaller0: entered promiscuous mode [ 513.088749][T29175] syzkaller0: entered allmulticast mode [ 513.855564][T29211] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.10941'. [ 514.039024][T29216] netlink: 'syz.1.10943': attribute type 1 has an invalid length. [ 515.397151][T29190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10937'. [ 515.459004][T29216] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 515.498662][T29218] erspan3: entered allmulticast mode [ 515.574853][T29225] netlink: 'syz.2.10947': attribute type 1 has an invalid length. [ 515.607797][T29225] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.655889][T29225] bond5: (slave gretap1): making interface the new active one [ 515.679770][T29225] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 515.943095][T29242] netlink: 'syz.0.10953': attribute type 1 has an invalid length. [ 515.987263][T29242] bond5: entered promiscuous mode [ 515.992697][T29242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.252018][T29242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.264256][T29242] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 516.280147][T29242] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 516.294412][T29242] bond5: (slave vti0): making interface the new active one [ 516.301650][T29242] vti0: entered promiscuous mode [ 516.334957][T29242] bond5: (slave vti0): Enslaving as an active interface with an up link [ 518.394853][T29305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10982'. [ 518.613171][T29318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10987'. [ 519.685584][T29353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10999'. [ 520.281739][T29368] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11008'. [ 520.323487][T29370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11009'. [ 520.335335][T29370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11009'. [ 520.806580][T29399] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11023'. [ 520.852024][T29399] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.859786][T29399] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.894649][T29399] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11023'. [ 520.974254][T29404] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 521.068748][T29409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11028'. [ 521.224857][T29418] netlink: 'syz.0.11032': attribute type 1 has an invalid length. [ 521.233000][T29418] netlink: 'syz.0.11032': attribute type 1 has an invalid length. [ 521.331837][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11033'. [ 525.440939][T29543] __nla_validate_parse: 4 callbacks suppressed [ 525.440960][T29543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11076'. [ 525.469502][T29543] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11076'. [ 525.635426][T29547] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11077'. [ 525.816521][T29554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11081'. [ 526.322602][T29572] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 526.668873][T29590] netlink: 'syz.4.11094': attribute type 4 has an invalid length. [ 526.713679][T29590] netlink: 'syz.4.11094': attribute type 4 has an invalid length. [ 526.803535][T29592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11095'. [ 526.849197][T29592] veth1_macvtap: left promiscuous mode [ 527.299533][T29580] lo speed is unknown, defaulting to 1000 [ 527.335047][T29580] wg1 speed is unknown, defaulting to 1000 [ 527.385450][T29604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11100'. [ 527.660929][T29611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11104'. [ 527.695335][T29609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.713092][T29611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11104'. [ 527.728404][T29609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.640829][T29630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11110'. [ 529.599619][T29632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11112'. [ 529.668292][T29636] netlink: 'syz.3.11113': attribute type 1 has an invalid length. [ 529.776933][T29636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.923834][T29638] bond4: (slave veth0_to_bond): making interface the new active one [ 529.964111][T29638] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 530.002948][T29642] bond4: entered promiscuous mode [ 530.019499][T29642] veth0_to_bond: entered promiscuous mode [ 530.029859][T29642] bond4: entered allmulticast mode [ 530.036414][T29642] veth0_to_bond: entered allmulticast mode [ 530.447458][T29662] netlink: 'syz.1.11122': attribute type 1 has an invalid length. [ 530.453261][T29660] __nla_validate_parse: 2 callbacks suppressed [ 530.453309][T29660] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11123'. [ 530.515210][T29662] bond6: entered promiscuous mode [ 530.520751][T29662] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.538345][T29660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11123'. [ 530.567132][T29662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11122'. [ 530.576379][T29662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11122'. [ 530.606370][T29662] bond6: (slave bridge4): making interface the new active one [ 530.613872][T29662] bridge4: entered promiscuous mode [ 530.621041][T29662] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 530.696399][T29668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11125'. [ 530.727278][T29668] veth1_macvtap: left promiscuous mode [ 531.476640][T29691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11135'. [ 531.521259][T29691] netlink: 'syz.3.11135': attribute type 1 has an invalid length. [ 531.716184][T29699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11138'. [ 531.800967][T29702] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.11140'. [ 531.921786][T29710] netlink: 'syz.0.11143': attribute type 30 has an invalid length. [ 531.931439][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11143'. [ 532.017194][T29710] netlink: 'syz.0.11143': attribute type 30 has an invalid length. [ 532.025177][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11143'. [ 532.509127][T29722] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 532.883073][T29738] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 533.694976][T29770] syzkaller0: entered promiscuous mode [ 533.700534][T29770] syzkaller0: entered allmulticast mode [ 536.459064][T29823] netlink: 'syz.2.11181': attribute type 1 has an invalid length. [ 536.467098][T29823] netlink: 'syz.2.11181': attribute type 4 has an invalid length. [ 536.474980][T29823] __nla_validate_parse: 6 callbacks suppressed [ 536.475000][T29823] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11181'. [ 536.822124][T29834] netdevsim netdevsim4 : renamed from netdevsim0 [ 537.236558][T29848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11192'. [ 537.688991][T29869] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.11200'. [ 538.022745][T29881] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.11204'. [ 538.111150][T29885] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 538.132787][T29886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11205'. [ 538.150788][T29885] xt_hashlimit: size too large, truncated to 1048576 [ 538.598787][T29894] tipc: Failed to remove unknown binding: 66,1,1/2886997007:996002181/996002183 [ 538.766377][T29897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11210'. [ 538.820789][T29895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11209'. [ 539.064214][T29907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11215'. [ 539.229320][T29913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11217'. [ 539.366016][T29915] syzkaller1: entered promiscuous mode [ 539.381791][T29915] syzkaller1: entered allmulticast mode [ 539.563705][T29924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.005866][T29919] lo speed is unknown, defaulting to 1000 [ 540.013327][T29919] wg1 speed is unknown, defaulting to 1000 [ 540.406184][T29951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11231'. [ 540.900797][T29969] bridge_slave_0 (unregistering): left allmulticast mode [ 540.935477][T29969] bridge_slave_0 (unregistering): left promiscuous mode [ 540.946100][T29969] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.231772][T30015] __nla_validate_parse: 2 callbacks suppressed [ 542.231792][T30015] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.11255'. [ 542.247525][T30015] netlink: Unknown conntrack attr (type=2304, max=9) [ 542.257214][T30011] netlink: 'syz.3.11253': attribute type 1 has an invalid length. [ 542.337663][T30011] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 542.347893][T30011] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 542.363682][T30011] bond5: (slave vxcan3): making interface the new active one [ 542.373417][T30011] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 542.503936][T30011] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 542.551907][T30011] bond5: (slave vxcan5): Enslaving as a backup interface with an up link [ 542.593960][T30025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11258'. [ 542.667036][T30027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11259'. [ 543.141913][T30043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11265'. [ 543.153870][T30043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11265'. [ 543.185291][T30046] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 543.475295][T30055] syzkaller1: entered promiscuous mode [ 543.484218][T30055] syzkaller1: entered allmulticast mode [ 543.640087][T30067] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 543.647695][T30067] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 543.655504][T30067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 543.879058][T30078] bond7: entered promiscuous mode [ 543.900362][T30078] macvlan0: entered promiscuous mode [ 543.925884][T30078] macvlan0: entered allmulticast mode [ 543.948866][T30078] bond7: (slave macvlan0): Opening slave failed [ 545.012733][T30124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11299'. [ 545.444105][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11304'. [ 545.467820][T30137] syzkaller1: entered promiscuous mode [ 545.473367][T30137] syzkaller1: entered allmulticast mode [ 545.851202][T30149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11310'. [ 545.860237][T30149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11310'. [ 545.953576][T30152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11311'. [ 547.566382][T30224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11340'. [ 547.812020][T30214] lo speed is unknown, defaulting to 1000 [ 547.820006][T30214] wg1 speed is unknown, defaulting to 1000 [ 548.355275][T30256] tipc: Started in network mode [ 548.365406][T30256] tipc: Node identity 368cd0e2cbca, cluster identity 4711 [ 548.381628][T30256] tipc: Enabled bearer , priority 0 [ 548.553628][T30259] syzkaller0: entered promiscuous mode [ 548.575403][T30259] syzkaller0: entered allmulticast mode [ 548.582657][T30259] tipc: Resetting bearer [ 548.595785][T30273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11357'. [ 548.657712][T30273] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.677915][T30250] tipc: Resetting bearer [ 550.758662][T30250] tipc: Disabling bearer [ 550.773343][T30273] ipvlan3: entered allmulticast mode [ 550.778851][T30273] bond7: entered allmulticast mode [ 550.891494][T30281] geneve4: entered allmulticast mode [ 550.902557][T30281] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 550.959803][T27060] tipc: Node number set to 4249276642 [ 551.053976][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11362'. [ 552.080600][T30310] syzkaller0: entered promiscuous mode [ 552.088619][T30310] syzkaller0: entered allmulticast mode [ 552.473990][T30314] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 552.840225][T30332] bond6: entered promiscuous mode [ 553.249431][T30348] ip6erspan1: entered allmulticast mode [ 553.292198][T30350] tipc: Enabled bearer , priority 0 [ 553.373043][T30350] syzkaller0: entered promiscuous mode [ 553.384113][T30350] syzkaller0: entered allmulticast mode [ 553.396373][T30350] tipc: Resetting bearer [ 553.458995][T30349] tipc: Resetting bearer [ 553.861761][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11395'. [ 553.871126][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11395'. [ 554.050755][T30375] netlink: 'syz.3.11398': attribute type 1 has an invalid length. [ 555.843401][T30349] tipc: Disabling bearer [ 555.881237][T30375] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 555.902058][T30387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11399'. [ 557.267309][T30424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11413'. [ 559.728069][T30457] syzkaller1: entered promiscuous mode [ 559.733705][T30457] syzkaller1: entered allmulticast mode [ 559.829741][T30459] tipc: Started in network mode [ 559.834682][T30459] tipc: Node identity 529d51127e84, cluster identity 4711 [ 559.850521][T30459] tipc: Enabled bearer , priority 0 [ 559.972976][T30466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11430'. [ 560.012985][T30472] netlink: 'syz.2.11431': attribute type 1 has an invalid length. [ 560.028613][T30459] syzkaller0: entered promiscuous mode [ 560.034109][T30459] syzkaller0: entered allmulticast mode [ 560.040399][T30459] tipc: Resetting bearer [ 560.074645][T30472] 8021q: adding VLAN 0 to HW filter on device bond7 [ 560.091817][T30458] tipc: Resetting bearer [ 560.223308][T30478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11432'. [ 560.426223][T30487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11432'. [ 562.163285][T30458] tipc: Disabling bearer [ 562.183367][T30476] bond7: (slave bridge9): making interface the new active one [ 562.191690][T30476] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 562.288032][T27060] tipc: Node number set to 739856658 [ 562.401360][T30499] tipc: Failed to remove unknown binding: 66,0,0/2236549798:1906915862/1906915863 [ 562.425560][T30499] tipc: Failed to remove unknown binding: 66,0,0/2236549798:1906915862/1906915863 [ 562.678365][T30515] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11445'. [ 562.733282][T30515] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.746267][T30515] .`¹ (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.765814][T30515] .`¹ (unregistering): Released all slaves [ 563.462150][T30544] netlink: 'syz.3.11457': attribute type 39 has an invalid length. [ 563.910571][T30552] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11460'. [ 563.954118][T30554] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 563.967260][T30554] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 564.037324][T30559] syzkaller0: entered promiscuous mode [ 564.043393][T30559] syzkaller0: entered allmulticast mode [ 564.527978][T30575] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11469'. [ 564.549091][T30575] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11469'. [ 564.583765][T30578] tipc: Enabled bearer , priority 0 [ 564.592940][T30578] tipc: Resetting bearer [ 564.693190][T30582] dvmrp0: entered allmulticast mode [ 564.712599][T30584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11473'. [ 564.906909][T30596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.993388][T30598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11480'. [ 565.051713][T30596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.109087][T30601] syzkaller0: entered promiscuous mode [ 565.115039][T30601] syzkaller0: entered allmulticast mode [ 565.120126][T30596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.339152][T30610] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 565.677796][T30619] netlink: 576 bytes leftover after parsing attributes in process `syz.1.11487'. [ 565.797911][T30622] tipc: Enabled bearer , priority 0 [ 565.882903][T30622] syzkaller0: entered promiscuous mode [ 565.888449][T30622] syzkaller0: entered allmulticast mode [ 565.895345][T30622] tipc: Resetting bearer [ 565.925137][T30627] syzkaller0: entered promiscuous mode [ 565.963272][T30627] syzkaller0: entered allmulticast mode [ 565.975597][T30620] tipc: Resetting bearer [ 566.695292][T30644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11495'. [ 566.734065][T30644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11495'. [ 568.104003][T30620] tipc: Disabling bearer [ 568.324936][T30658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11499'. [ 568.412140][T30660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11500'. [ 568.479150][T30660] bond0: entered promiscuous mode [ 568.492751][T30660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.698047][T30678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11507'. [ 568.757152][T30678] netlink: 'syz.1.11507': attribute type 5 has an invalid length. [ 568.774462][T30678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11507'. [ 568.928252][T30684] netlink: 'syz.0.11509': attribute type 10 has an invalid length. [ 568.942748][T30684] netlink: 228 bytes leftover after parsing attributes in process `syz.0.11509'. [ 570.187273][T30723] xt_hashlimit: size too large, truncated to 1048576 [ 570.640180][T30735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11527'. [ 570.799596][T30743] syzkaller0: entered promiscuous mode [ 570.807273][T30743] syzkaller0: entered allmulticast mode [ 570.971398][T30748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.978679][T30748] IPv6: NLM_F_CREATE should be set when creating new route [ 570.986020][T30748] IPv6: NLM_F_CREATE should be set when creating new route [ 571.856816][T30768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.883291][T30769] team0: No ports can be present during mode change [ 571.897668][T30772] netlink: 'syz.3.11540': attribute type 1 has an invalid length. [ 571.947051][T30772] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.992430][T30772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11540'. [ 572.001454][T30772] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 572.041207][T30772] bond6: entered allmulticast mode [ 572.079569][T30772] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 572.600822][T30799] vlan3: entered promiscuous mode [ 572.615392][T30799] 0·: entered promiscuous mode [ 572.620580][T30799] vlan3: entered allmulticast mode [ 572.632991][T30795] syzkaller0: entered promiscuous mode [ 572.642949][T30795] syzkaller0: entered allmulticast mode [ 573.305905][T30822] syzkaller0: entered promiscuous mode [ 573.321792][T30822] syzkaller0: entered allmulticast mode [ 573.456482][T30829] syzkaller0: entered promiscuous mode [ 573.549263][T30829] syzkaller0: entered allmulticast mode [ 573.650654][T30837] syzkaller0: entered promiscuous mode [ 573.656503][T30837] syzkaller0: entered allmulticast mode [ 573.665967][T30837] syzkaller0: tun_net_xmit 64726 [ 573.779683][T30843] syzkaller1: entered promiscuous mode [ 573.785488][T30843] syzkaller1: entered allmulticast mode [ 573.918224][T30846] syzkaller0: entered promiscuous mode [ 573.923774][T30846] syzkaller0: entered allmulticast mode [ 573.978746][T30849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11567'. [ 574.627888][T30866] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 574.636108][T30866] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 574.901860][T30872] netlink: 'syz.1.11572': attribute type 1 has an invalid length. [ 576.290786][T30872] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.336145][T30873] bond8: (slave veth13): Enslaving as an active interface with a down link [ 576.352265][T30874] bond8: (slave veth0_to_bond): making interface the new active one [ 576.362886][T30874] veth0_to_bond: entered promiscuous mode [ 576.369381][T30874] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 576.394239][T30875] bond8: (slave veth15): Enslaving as an active interface with a down link [ 576.403086][T30875] netlink: 'syz.1.11572': attribute type 1 has an invalid length. [ 576.411055][T30875] netlink: 'syz.1.11572': attribute type 2 has an invalid length. [ 576.487714][T30878] syzkaller0: entered promiscuous mode [ 576.496555][T30878] syzkaller0: entered allmulticast mode [ 576.597228][T30881] syzkaller0: entered promiscuous mode [ 576.602760][T30881] syzkaller0: entered allmulticast mode [ 576.695088][T30887] netlink: 'syz.0.11577': attribute type 2 has an invalid length. [ 576.818544][T30891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11579'. [ 577.087768][T30899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11582'. [ 577.113753][T30901] syzkaller1: entered promiscuous mode [ 577.119743][T30901] syzkaller1: entered allmulticast mode [ 577.266453][T30907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11586'. [ 577.457537][T30918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11591'. [ 577.486369][T30918] bond7: entered promiscuous mode [ 577.491475][T30918] bond7: entered allmulticast mode [ 577.542360][T30911] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 580.686619][T30985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11608'. [ 581.001986][T31001] netlink: 'syz.1.11614': attribute type 9 has an invalid length. [ 581.296990][T31017] syzkaller0: entered promiscuous mode [ 581.297011][T31018] netlink: 'syz.3.11621': attribute type 1 has an invalid length. [ 581.302619][T31017] syzkaller0: entered allmulticast mode [ 581.360003][T31018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 581.398201][T31020] bond4: (slave veth0_to_bond): Releasing active interface [ 581.405618][T31020] veth0_to_bond: left promiscuous mode [ 581.411241][T31020] veth0_to_bond: left allmulticast mode [ 581.421518][T31020] bond8: (slave veth0_to_bond): making interface the new active one [ 581.446871][T31020] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 581.470070][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11622'. [ 581.558373][T31018] 8021q: adding VLAN 0 to HW filter on device bond9 [ 581.567306][T31018] bond8: (slave bond9): Enslaving as an active interface with a down link [ 581.576529][T31022] netlink: 'syz.2.11622': attribute type 1 has an invalid length. [ 581.821144][T31039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11626'. [ 581.939520][T31039] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 581.960903][T31039] macvlan2: entered promiscuous mode [ 581.966420][T31039] macvlan2: entered allmulticast mode [ 581.972763][T31039] bond8: entered promiscuous mode [ 581.998646][T31039] bridge10: entered promiscuous mode [ 582.006188][T31039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.026210][T31039] bond8: left promiscuous mode [ 582.033592][T31039] bridge10: left promiscuous mode [ 582.059295][T31044] syzkaller0: entered promiscuous mode [ 582.074484][T31044] syzkaller0: entered allmulticast mode [ 582.392369][T31055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11633'. [ 582.407108][T31057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11634'. [ 582.470615][T31061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11635'. [ 582.503788][T31057] bond8: entered promiscuous mode [ 582.508907][T31057] bond8: entered allmulticast mode [ 582.517829][T31063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11636'. [ 584.039928][T31100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11649'. [ 584.119899][T31103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11648'. [ 584.192067][T31103] vlan5: entered allmulticast mode [ 584.227292][T31103] bridge10: entered allmulticast mode [ 584.243860][T31109] netlink: 'syz.2.11653': attribute type 1 has an invalid length. [ 584.289897][T31103] bridge10: port 1(bond10) entered blocking state [ 584.302865][T31103] bridge10: port 1(bond10) entered disabled state [ 584.315084][T31103] bond10: entered allmulticast mode [ 584.326862][T31103] bond10: entered promiscuous mode [ 584.414766][T31109] 8021q: adding VLAN 0 to HW filter on device bond9 [ 584.485634][T31113] macvlan2: entered promiscuous mode [ 584.501684][T31113] macvlan2: entered allmulticast mode [ 584.525095][T31122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.608963][T31122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.672087][T31127] ip6_vti0: entered promiscuous mode [ 584.704948][T31127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11657'. [ 584.740243][T31125] tipc: Enabling of bearer rejected, already enabled [ 584.912243][T31137] netlink: 'syz.2.11660': attribute type 1 has an invalid length. [ 584.983242][T31137] bond10: entered promiscuous mode [ 584.995210][T31137] 8021q: adding VLAN 0 to HW filter on device bond10 [ 585.151655][T31137] bond10: (slave bridge11): making interface the new active one [ 585.170646][T31137] bridge11: entered promiscuous mode [ 585.199607][T31137] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 585.254779][T31147] syzkaller0: entered promiscuous mode [ 585.263697][T31147] syzkaller0: entered allmulticast mode [ 585.413798][T31156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11668'. [ 585.455424][T31158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11670'. [ 585.488724][T31156] smbdirect: ib_dev[syz2] removed [ 585.517163][T31158] 8021q: adding VLAN 0 to HW filter on device bond9 [ 585.530331][T31152] netlink: 'syz.2.11667': attribute type 1 has an invalid length. [ 585.576519][T31156] netlink: 'syz.0.11668': attribute type 1 has an invalid length. [ 585.608802][T31156] netlink: 228 bytes leftover after parsing attributes in process `syz.0.11668'. [ 585.625979][T31161] syzkaller0: entered promiscuous mode [ 585.631808][T31161] syzkaller0: entered allmulticast mode [ 585.637917][T31158] netlink: 'syz.1.11670': attribute type 10 has an invalid length. [ 585.950278][T31174] netlink: 'syz.0.11675': attribute type 1 has an invalid length. [ 586.195372][T31184] netlink: 'syz.3.11679': attribute type 1 has an invalid length. [ 586.308028][T31190] syzkaller0: entered promiscuous mode [ 586.313605][T31190] syzkaller0: entered allmulticast mode [ 588.724960][T31184] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 588.988261][ T1106] veth0_to_bond: left promiscuous mode [ 589.035806][T31210] netlink: 'syz.2.11684': attribute type 1 has an invalid length. [ 589.114388][T31210] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 589.125468][T31210] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 589.248566][T31223] bond11: (slave bridge12): Enslaving as an active interface with a down link [ 589.279664][T31223] macvlan3: entered promiscuous mode [ 589.286585][T31223] macvlan3: entered allmulticast mode [ 589.293456][T31223] bond11: entered promiscuous mode [ 589.299392][T31223] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 589.309191][T31223] bond11: left promiscuous mode [ 589.338734][T31221] syzkaller0: entered promiscuous mode [ 589.344769][T31221] syzkaller0: entered allmulticast mode [ 590.079473][T31260] netlink: 'syz.1.11703': attribute type 3 has an invalid length. [ 590.706183][T31278] syzkaller0: entered promiscuous mode [ 590.712059][T31278] syzkaller0: entered allmulticast mode [ 591.065208][T31290] syzkaller0: entered promiscuous mode [ 591.070779][T31290] syzkaller0: entered allmulticast mode [ 591.157743][T31294] syzkaller0: entered promiscuous mode [ 591.163346][T31294] syzkaller0: entered allmulticast mode [ 591.606473][T31296] netlink: 'syz.0.11717': attribute type 16 has an invalid length. [ 591.614728][T31296] netlink: 'syz.0.11717': attribute type 17 has an invalid length. [ 591.626794][T31296] tunl0: left promiscuous mode [ 591.662459][T31296] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.669678][T31296] bridge0: port 2(bridge_slave_1) entered listening state [ 591.677098][T31296] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.684282][T31296] bridge0: port 1(bridge_slave_0) entered listening state [ 591.723873][T31296] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 592.127184][T31321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.134554][T31321] IPv6: NLM_F_CREATE should be set when creating new route [ 592.500013][T31334] __nla_validate_parse: 4 callbacks suppressed [ 592.500034][T31334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11728'. [ 594.570813][T31321] lo: entered allmulticast mode [ 594.576259][T31321] tunl0: entered allmulticast mode [ 594.587569][T31321] gre0: entered allmulticast mode [ 594.609489][T31321] gretap0: entered allmulticast mode [ 594.646790][T31321] erspan0: entered allmulticast mode [ 594.671093][T31321] ip_vti0: entered allmulticast mode [ 594.691826][T31321] ip6_vti0: entered allmulticast mode [ 594.701880][T31321] sit0: entered allmulticast mode [ 594.715872][T31321] ip6tnl0: entered allmulticast mode [ 594.736058][T31321] ip6gre0: entered allmulticast mode [ 594.765620][T31363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11732'. [ 594.779124][T31321] team0: entered allmulticast mode [ 594.784522][T31321] team_slave_0: entered allmulticast mode [ 594.790583][T31321] team_slave_1: entered allmulticast mode [ 594.805998][T31321] nlmon0: entered allmulticast mode [ 594.813190][T31321] batadv0: entered allmulticast mode [ 594.821340][T31321] veth0: entered allmulticast mode [ 594.828819][T31321] veth1: entered allmulticast mode [ 594.875892][T31321] wg0: entered allmulticast mode [ 594.886028][T31321] wg2: entered allmulticast mode [ 594.945927][T31321] veth0_to_bridge: entered allmulticast mode [ 594.986222][T31321] veth0_to_bond: entered allmulticast mode [ 594.995406][T31321] bond_slave_0: entered allmulticast mode [ 595.001696][T31321] veth1_to_bond: entered allmulticast mode [ 595.014578][T31321] bond_slave_1: entered allmulticast mode [ 595.021045][T31321] veth0_to_team: entered allmulticast mode [ 595.040360][T31321] veth1_to_team: entered allmulticast mode [ 595.060696][T31321] veth0_to_batadv: entered allmulticast mode [ 595.091617][T31321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.100546][T31321] batadv_slave_0: entered allmulticast mode [ 595.109967][T31321] xfrm0: entered allmulticast mode [ 595.117874][T31321] veth0_to_hsr: entered allmulticast mode [ 595.126312][T31321] hsr_slave_0: entered allmulticast mode [ 595.135296][T31321] veth1_to_hsr: entered allmulticast mode [ 595.142031][T31371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11732'. [ 595.156211][T31321] hsr_slave_1: entered allmulticast mode [ 595.176210][T31321] hsr0: entered allmulticast mode [ 595.203121][T31321] veth1_virt_wifi: entered allmulticast mode [ 595.212708][T31321] veth0_virt_wifi: entered allmulticast mode [ 595.221304][T31321] virt_wifi0: entered allmulticast mode [ 595.227265][T31321] veth1_vlan: entered allmulticast mode [ 595.235330][T31321] veth0_vlan: entered allmulticast mode [ 595.250122][T31321] vlan0: entered allmulticast mode [ 595.255542][T31321] vlan1: entered allmulticast mode [ 595.261125][T31321] macvlan0: entered allmulticast mode [ 595.269230][T31321] macvlan1: entered allmulticast mode [ 595.277317][T31321] ipvlan0: entered allmulticast mode [ 595.311433][T31321] ipvlan1: entered allmulticast mode [ 595.355845][T31321] veth1_macvtap: entered allmulticast mode [ 595.431061][T31321] veth0_macvtap: entered allmulticast mode [ 595.445640][T31321] macvtap0: entered allmulticast mode [ 595.455962][T31321] macsec0: entered allmulticast mode [ 595.470910][T31321] geneve0: entered allmulticast mode [ 595.492356][T31321] geneve1: entered allmulticast mode [ 595.501384][T31321] netdevsim netdevsim4 : left promiscuous mode [ 595.508236][T31321] netdevsim netdevsim4 : entered allmulticast mode [ 595.532417][T31321] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 595.545216][T31321] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 595.568304][T31321] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 595.587390][T31321] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 595.602031][T31321] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 595.611850][T31321] erspan1: entered allmulticast mode [ 595.663362][T31321] bond1: entered allmulticast mode [ 595.675420][T31321] bond2: entered allmulticast mode [ 595.682542][T31321] syztnl1: entered allmulticast mode [ 595.688073][T31321] veth2: entered allmulticast mode [ 595.693380][T31321] veth3: left promiscuous mode [ 595.698224][T31321] veth3: entered allmulticast mode [ 595.703536][T31321] bridge1: entered allmulticast mode [ 595.708993][T31321] bond3: entered allmulticast mode [ 595.714718][T31321] bond4: left promiscuous mode [ 595.721991][T31321] geneve2: entered allmulticast mode [ 595.728197][T31321] bridge2: entered allmulticast mode [ 595.745269][T31321] vcan1: entered allmulticast mode [ 595.752142][T31321] ip6tnl1: entered allmulticast mode [ 595.759808][T31321] ip6tnl2: entered allmulticast mode [ 595.766218][T31321] ip6gre1: entered allmulticast mode [ 595.771790][T31321] : entered allmulticast mode [ 595.787968][T31321] wireguard0: entered allmulticast mode [ 595.796207][T31321] vlan0.4: entered allmulticast mode [ 595.801803][T31321] ipvlan2: entered allmulticast mode [ 595.807677][T31321] : entered allmulticast mode [ 595.812787][T31321] batadv0.5: entered allmulticast mode [ 595.819000][T31321] macsec1: entered allmulticast mode [ 595.824824][T31321] mac80211_hwsim hwsim8 rose0: entered allmulticast mode [ 595.832225][T31321] mac80211_hwsim hwsim9 pimreg: entered allmulticast mode [ 595.840110][T31321] vlan2: entered allmulticast mode [ 595.858711][T31321] ip6tnl3: entered allmulticast mode [ 595.864257][T31321] ip6tnl4: entered allmulticast mode [ 595.869879][T31321] gretap1: left promiscuous mode [ 595.886838][T31321] mac80211_hwsim hwsim31 wlan2: entered allmulticast mode [ 595.894253][T31321] gre1: entered allmulticast mode [ 595.912464][T31321] @: entered allmulticast mode [ 595.924394][T31321] sit1: entered allmulticast mode [ 596.029312][T31321] xfrm1: entered allmulticast mode [ 596.060096][T31321] gtp0: entered allmulticast mode [ 596.111099][T31321] gre2: entered allmulticast mode [ 596.145350][T31321] veth4: entered allmulticast mode [ 596.150704][T31321] veth5: entered allmulticast mode [ 596.174649][T31321] : entered allmulticast mode [ 596.197886][T31321] veth6: entered allmulticast mode [ 596.203228][T31321] veth7: entered allmulticast mode [ 596.208529][T31321] veth8: entered allmulticast mode [ 596.213921][T31321] veth9: entered allmulticast mode [ 596.219220][T31321] veth10: entered allmulticast mode [ 596.224577][T31321] veth11: entered allmulticast mode [ 596.231324][T31321] bridge3: entered allmulticast mode [ 596.248755][T31321] bond0: left promiscuous mode [ 596.253601][T31321] bond0: entered allmulticast mode [ 596.475679][T31377] netlink: 'syz.1.11734': attribute type 1 has an invalid length. [ 596.650830][ T1106] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.667146][ T1106] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.712182][T31377] 8021q: adding VLAN 0 to HW filter on device bond10 [ 596.762050][T31382] vlan1: entered allmulticast mode [ 596.767348][T31382] bond10: entered allmulticast mode [ 596.775452][ T1106] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.792509][ T1106] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.809619][ T1106] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.823852][ T1106] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.886046][T31388] syzkaller0: entered promiscuous mode [ 596.891577][T31388] syzkaller0: entered allmulticast mode [ 596.899487][T31392] syzkaller0: entered promiscuous mode [ 596.908726][T31392] 0: reclassify loop, rule prio 0, protocol 800 [ 599.240996][T31407] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.248362][T31407] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.302196][T31407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.316193][T31407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.326433][T31407] tipc: Resetting bearer [ 599.492235][T10126] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.512279][T10126] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.521744][T10126] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 599.540465][T10126] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 599.554268][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.565112][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.574713][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 599.583731][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 599.592740][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.601637][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.610547][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 599.702645][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 599.711707][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.721208][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.780219][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 599.789340][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 600.021003][T31434] syzkaller0: entered promiscuous mode [ 600.027756][T31434] syzkaller0: entered allmulticast mode [ 602.897731][T31466] Cannot find map_set index 135 as target [ 603.182673][T31469] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11756'. [ 604.003497][T31469] bond0: (slave H): Releasing backup interface [ 604.010382][T31469] H (unregistering): left promiscuous mode [ 604.016237][T31469] H (unregistering): left allmulticast mode [ 604.115178][T31474] syzkaller0: entered promiscuous mode [ 604.120714][T31474] syzkaller0: entered allmulticast mode [ 604.190101][T31476] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 604.198795][T31476] tipc: Enabled bearer , priority 0 [ 604.206194][T31476] syzkaller0: entered promiscuous mode [ 604.211836][T31476] syzkaller0: entered allmulticast mode [ 604.222838][T31476] tipc: Resetting bearer [ 604.232183][T31475] tipc: Resetting bearer [ 604.293698][T31475] tipc: Disabling bearer [ 604.464373][T31487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11763'. [ 604.496633][T31485] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 604.506505][T31485] syzkaller0: entered promiscuous mode [ 604.512035][T31485] syzkaller0: entered allmulticast mode [ 604.548685][T31485] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 604.891490][T31506] syzkaller0: entered promiscuous mode [ 604.897117][T31506] syzkaller0: entered allmulticast mode [ 605.386202][T31526] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.532821][T31526] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 605.578077][T31530] tipc: Resetting bearer [ 605.636214][T31530] tipc: Resetting bearer [ 605.900532][T31539] geneve0: entered promiscuous mode [ 605.953611][T31541] bond12: entered allmulticast mode [ 605.981093][T31541] veth5: entered allmulticast mode [ 605.993270][T31541] bond12: (slave veth5): Enslaving as an active interface with an up link [ 606.176342][T31548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11782'. [ 606.205189][T31548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11782'. [ 606.890315][T31574] netlink: 'syz.0.11789': attribute type 13 has an invalid length. [ 606.958486][T31574] mac80211_hwsim hwsim13 syzkaller0: Caught tx_queue_len zero misconfig [ 607.107958][T31568] lo speed is unknown, defaulting to 1000 [ 607.312940][T31583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11792'. [ 607.434185][T31590] bond11: entered allmulticast mode [ 607.454496][T31590] veth19: entered allmulticast mode [ 607.462612][T31590] bond11: (slave veth19): Enslaving as an active interface with an up link [ 607.670463][T31595] syzkaller0: entered promiscuous mode [ 607.676371][T31595] syzkaller0: entered allmulticast mode [ 608.122306][T31608] vlan1: Caught tx_queue_len zero misconfig [ 608.336830][T31617] bond9: entered allmulticast mode [ 608.519548][T31617] veth5: entered allmulticast mode [ 608.527858][T31617] bond9: (slave veth5): Enslaving as an active interface with an up link [ 608.941867][T31644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11815'. [ 609.274052][T31663] erspan0: left promiscuous mode [ 609.337442][T31663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.459142][T31663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.625358][T31663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.648118][T31663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.675294][T31663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.685689][T31663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.767913][T31663] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 609.787635][T10116] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.794992][T10116] bridge0: port 1(bridge_slave_0) entered listening state [ 609.806321][T10116] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.813564][T10116] bridge0: port 2(bridge_slave_1) entered listening state [ 609.968861][T31682] bond12: entered allmulticast mode [ 609.989690][T31688] bond12 (unregistering): Released all slaves [ 610.208298][T31691] syzkaller0: entered promiscuous mode [ 610.213853][T31691] syzkaller0: entered allmulticast mode [ 612.155224][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 612.169777][ T5777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 612.220838][ T5777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 612.255634][ T5777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 612.336495][ T5777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 612.397283][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 612.405645][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 612.416586][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 612.425393][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 612.433141][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 613.509001][T31766] bond11: entered allmulticast mode [ 613.522444][T31773] bond11 (unregistering): Released all slaves [ 613.560099][T31772] syzkaller0: entered promiscuous mode [ 613.566679][T31772] syzkaller0: entered allmulticast mode [ 613.590632][T31772] 0: reclassify loop, rule prio 0, protocol 800 [ 614.073838][T31736] lo speed is unknown, defaulting to 1000 [ 614.204647][T31786] syzkaller0: entered promiscuous mode [ 614.210322][T31786] syzkaller0: entered allmulticast mode [ 614.484436][ T5776] Bluetooth: hci5: command tx timeout [ 614.702749][T31808] bond10: entered allmulticast mode [ 614.738902][T31808] bond10 (unregistering): Released all slaves [ 614.893326][T31810] syzkaller0: entered promiscuous mode [ 614.905854][T31810] syzkaller0: entered allmulticast mode [ 614.929145][T31736] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.948000][T31736] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.965291][T31736] bridge_slave_0: entered allmulticast mode [ 614.974796][T31736] bridge_slave_0: entered promiscuous mode [ 615.015349][T31736] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.028220][T31736] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.036168][T31736] bridge_slave_1: entered allmulticast mode [ 615.073576][T31736] bridge_slave_1: entered promiscuous mode [ 615.093589][T31820] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 615.118121][T31736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.130623][T31736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.247818][T31736] team0: Port device team_slave_0 added [ 615.256360][T31736] team0: Port device team_slave_1 added [ 615.302330][T31736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.309326][T31736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.312598][T31798] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 615.335225][T31736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.339880][T31736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.379076][T31798] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 615.400010][T31736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.426038][T31736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.485553][T31736] hsr_slave_0: entered promiscuous mode [ 615.559947][T31736] hsr_slave_1: entered promiscuous mode [ 615.763883][T31840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11873'. [ 616.104860][T31736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 616.127935][T31736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.157643][T31736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.265085][T31736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.311139][T31736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 616.338223][T31736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.346208][T31736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 616.403002][T31736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.495250][T31871] vlan6: entered allmulticast mode [ 616.514259][T31871] bond0: entered allmulticast mode [ 616.530722][T31871] bond_slave_0: entered allmulticast mode [ 616.544420][T31871] bond_slave_1: entered allmulticast mode [ 616.666177][T31879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11886'. [ 616.811991][T31879] team0 (unregistering): Port device gretap2 removed [ 616.865797][T31736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.892675][T31736] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.905663][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.912866][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.936570][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.957610][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.027439][T31873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.081277][T31736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.091715][T31736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.161901][T31893] : renamed from bond0 (while UP) [ 617.217802][T31893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11893'. [ 617.863286][T31938] syzkaller0: entered promiscuous mode [ 617.901017][T31938] syzkaller0: entered allmulticast mode [ 617.969794][T31736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.440778][T31736] veth0_vlan: entered promiscuous mode [ 618.455300][T31966] sctp: [Deprecated]: syz.0.11913 (pid 31966) Use of int in max_burst socket option. [ 618.455300][T31966] Use struct sctp_assoc_value instead [ 618.500214][T31736] veth1_vlan: entered promiscuous mode [ 618.557144][T31736] veth0_macvtap: entered promiscuous mode [ 618.581947][T31736] veth1_macvtap: entered promiscuous mode [ 618.638638][T31736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.652492][T31736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.681216][ T1040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.702511][ T1040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.806735][ T1040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.876210][ T1040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.288815][T31998] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.11927'. [ 619.298404][T31998] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 619.431693][T32004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11930'. [ 621.301316][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.309664][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.409031][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.417199][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.802142][T32033] syzkaller0: entered promiscuous mode [ 621.807715][T32033] syzkaller0: entered allmulticast mode [ 622.551358][T32079] xt_hashlimit: size too large, truncated to 1048576 [ 622.586218][T32082] xt_hashlimit: size too large, truncated to 1048576 [ 622.639186][T32085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11961'. [ 623.086097][T32100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11968'. [ 623.825178][T32150] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11989'. [ 624.200144][T32170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11996'. [ 624.315869][T32176] netlink: 'syz.1.12000': attribute type 4 has an invalid length. [ 624.372670][T32178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12001'. [ 624.446933][T32182] netlink: 'syz.0.12002': attribute type 12 has an invalid length. [ 624.469172][T32182] netlink: 'syz.0.12002': attribute type 29 has an invalid length. [ 624.495753][T32182] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12002'. [ 624.515315][T32182] netlink: 'syz.0.12002': attribute type 1 has an invalid length. [ 624.533987][T32182] netlink: 'syz.0.12002': attribute type 2 has an invalid length. [ 624.601971][ T30] audit: type=1804 audit(1777514954.474:7): pid=32190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.12006" name="/newroot/14/cgroup.controllers" dev="tmpfs" ino=88 res=1 errno=0 [ 624.651501][ T30] audit: type=1800 audit(1777514954.504:8): pid=32190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12006" name="cgroup.controllers" dev="tmpfs" ino=88 res=0 errno=0 [ 625.154322][ T30] audit: type=1804 audit(1777514955.024:9): pid=32220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.12018" name="/newroot/17/cgroup.controllers" dev="tmpfs" ino=106 res=1 errno=0 [ 625.182353][ T30] audit: type=1800 audit(1777514955.024:10): pid=32220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12018" name="cgroup.controllers" dev="tmpfs" ino=106 res=0 errno=0 [ 625.226174][T32215] bond11: entered allmulticast mode [ 625.252518][T32215] veth7: entered allmulticast mode [ 625.262265][T32215] bond11 (unregistering): Released all slaves [ 625.581167][T32238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12027'. [ 625.773427][ T30] audit: type=1804 audit(1777514955.644:11): pid=32253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.12034" name="/newroot/2326/cgroup.controllers" dev="tmpfs" ino=11701 res=1 errno=0 [ 625.825931][ T30] audit: type=1800 audit(1777514955.644:12): pid=32253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12034" name="cgroup.controllers" dev="tmpfs" ino=11701 res=0 errno=0 [ 626.023185][T32263] ±ÿª¨úrBº“: renamed from lo (while UP) [ 626.348015][ T30] audit: type=1804 audit(1777514956.224:13): pid=32281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.12047" name="/newroot/2375/cgroup.controllers" dev="tmpfs" ino=11951 res=1 errno=0 [ 626.411820][ T30] audit: type=1800 audit(1777514956.244:14): pid=32281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12047" name="cgroup.controllers" dev="tmpfs" ino=11951 res=0 errno=0 [ 626.566254][T32289] lo: Caught tx_queue_len zero misconfig [ 627.001975][ T30] audit: type=1804 audit(1777514956.874:15): pid=32315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.12061" name="/newroot/28/cgroup.controllers" dev="tmpfs" ino=164 res=1 errno=0 [ 627.103687][ T30] audit: type=1800 audit(1777514956.874:16): pid=32315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12061" name="cgroup.controllers" dev="tmpfs" ino=164 res=0 errno=0 [ 627.468107][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.478260][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.486462][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.495500][T31361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.504937][T31361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.597058][T32336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.627262][T32336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.737984][T32336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.746294][T32336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.755715][T32336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.430865][T32364] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12079'. [ 629.119648][T32390] veth1_mac: renamed from veth0_vlan [ 630.047931][ T30] audit: type=1804 audit(1777514959.924:17): pid=32446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12109" name="/newroot/2399/cgroup.controllers" dev="tmpfs" ino=12082 res=1 errno=0 [ 630.124381][ T30] audit: type=1800 audit(1777514959.944:18): pid=32446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12109" name="cgroup.controllers" dev="tmpfs" ino=12082 res=0 errno=0 [ 630.248605][ T5288] veth1_mac: left promiscuous mode [ 630.273007][ T5288] veth1_mac: entered promiscuous mode [ 630.713851][T32479] xt_hashlimit: size too large, truncated to 1048576 [ 630.727294][ T30] audit: type=1804 audit(1777514960.604:19): pid=32476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.12122" name="/newroot/2342/cgroup.controllers" dev="tmpfs" ino=11784 res=1 errno=0 [ 630.807458][ T30] audit: type=1800 audit(1777514960.604:20): pid=32476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12122" name="cgroup.controllers" dev="tmpfs" ino=11784 res=0 errno=0 [ 631.196361][T32500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 631.602686][T32522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12134'. [ 631.615121][T32522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12134'. [ 631.626720][ T30] audit: type=1804 audit(1777514961.504:21): pid=32519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.12135" name="/newroot/45/cgroup.controllers" dev="tmpfs" ino=252 res=1 errno=0 [ 631.696994][ T30] audit: type=1800 audit(1777514961.504:22): pid=32519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12135" name="cgroup.controllers" dev="tmpfs" ino=252 res=0 errno=0 [ 631.845465][T32530] syzkaller1: entered promiscuous mode [ 631.851039][T32530] syzkaller1: entered allmulticast mode [ 632.548880][ T56] net_ratelimit: 68 callbacks suppressed [ 632.550365][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.658500][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.669595][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.690148][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.311898][T32607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.337670][T32607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.346056][T32607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.355860][T32607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.364283][T32607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.373118][T32607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.863459][T32627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12177'. [ 633.957629][T32631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12179'. [ 634.038003][T32635] netlink: 'syz.2.12181': attribute type 10 has an invalid length. [ 634.133156][T32639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12183'. [ 634.310566][T32648] xt_hashlimit: size too large, truncated to 1048576 [ 634.733299][T32664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12194'. [ 634.742740][T32664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.784786][T32664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.923927][T32676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12198'. [ 635.644476][T32705] netlink: 'syz.0.12209': attribute type 25 has an invalid length. [ 635.792564][T32712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12212'. [ 636.642512][T32743] syzkaller1: entered promiscuous mode [ 636.651443][T32743] syzkaller1: entered allmulticast mode [ 638.084520][ T5897] net_ratelimit: 17 callbacks suppressed [ 638.084539][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.351062][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.359897][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.372434][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.381334][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.592000][ T336] syzkaller1: entered promiscuous mode [ 638.609509][ T336] syzkaller1: entered allmulticast mode [ 638.809965][ T351] "syz.1.12252" (351) uses obsolete ecb(arc4) skcipher [ 638.893997][ T358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.905361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.967386][ T358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.447503][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.750405][ T392] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 640.091694][ T408] vcan0: tx address claim with different name [ 640.244288][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 640.251685][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 640.516966][ T428] netlink: 208 bytes leftover after parsing attributes in process `syz.0.12280'. [ 640.635752][ T434] xt_hashlimit: size too large, truncated to 1048576 [ 641.320821][ T454] syzkaller1: entered promiscuous mode [ 641.329057][ T454] syzkaller1: entered allmulticast mode [ 641.344341][ T454] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 641.887915][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f3e7c00: rx timeout, send abort [ 642.138763][ T461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12294'. [ 642.444583][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f3e7c00: abort rx timeout. Force session deactivation [ 642.686010][ T489] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12306'. [ 643.134876][ T509] netlink: 7 bytes leftover after parsing attributes in process `syz.1.12314'. [ 643.173925][ T515] netlink: 'syz.5.12318': attribute type 1 has an invalid length. [ 643.228228][ T515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.287840][ T515] bond1: (slave gretap1): making interface the new active one [ 643.296299][ T515] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 643.347606][ T522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12319'. [ 643.604584][ T5956] net_ratelimit: 4 callbacks suppressed [ 643.604605][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.889432][ T543] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 643.918446][ T543] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 644.086387][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.113078][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.122428][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.132571][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.167140][ T552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12328'. [ 644.963894][ T569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12330'. [ 645.221543][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.351414][ T579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12333'. [ 645.803633][ T587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12335'. [ 645.808609][ T594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12336'. [ 645.822015][ T587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12335'. [ 646.029187][ T601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12339'. [ 646.061534][ T604] openvswitch: netlink: IP tunnel TTL not specified. [ 646.245106][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.583584][ T622] bond2: entered allmulticast mode [ 646.645399][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.698773][ T622] veth3: entered allmulticast mode [ 646.910722][ T631] syzkaller1: entered promiscuous mode [ 646.924436][ T631] syzkaller1: entered allmulticast mode [ 647.195073][ T638] syzkaller0: entered promiscuous mode [ 647.202576][ T638] syzkaller0: entered allmulticast mode [ 647.285359][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.754212][ T660] bond12: entered allmulticast mode [ 647.815058][ T660] veth21: entered allmulticast mode [ 648.069467][ T672] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.12368'. [ 648.131310][ T673] syzkaller0: entered promiscuous mode [ 648.146609][ T673] syzkaller0: entered allmulticast mode [ 648.519987][ T692] netlink: 'syz.2.12372': attribute type 62 has an invalid length. [ 648.733890][ T30] audit: type=1804 audit(1777514978.604:23): pid=697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.12376" name="/newroot/2386/cgroup.controllers" dev="tmpfs" ino=12009 res=1 errno=0 [ 648.792459][ T30] audit: type=1800 audit(1777514978.604:24): pid=697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12376" name="cgroup.controllers" dev="tmpfs" ino=12009 res=0 errno=0 [ 648.914037][ T699] bond0: entered allmulticast mode [ 648.945073][ T699] veth7: entered allmulticast mode [ 649.325515][ T707] veth1_mac: renamed from veth0_vlan [ 649.374873][T27061] net_ratelimit: 3 callbacks suppressed [ 649.374891][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.707012][ T728] netlink: 'syz.5.12388': attribute type 29 has an invalid length. [ 649.747912][ T728] netlink: 'syz.5.12388': attribute type 29 has an invalid length. [ 649.778469][ T728] netlink: 548 bytes leftover after parsing attributes in process `syz.5.12388'. [ 649.845794][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.854785][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.862947][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.872847][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.051333][ T740] syzkaller0: entered promiscuous mode [ 650.072205][ T740] syzkaller0: entered allmulticast mode [ 650.450122][ T754] syzkaller1: entered promiscuous mode [ 650.458680][ T754] syzkaller1: entered allmulticast mode [ 650.613013][ T767] syzkaller0: entered promiscuous mode [ 650.619343][ T767] syzkaller0: entered allmulticast mode [ 650.912900][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.592384][ T792] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 651.670975][ T813] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 651.926338][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.999295][ T822] bond5: entered allmulticast mode [ 652.004497][ T822] vti0: entered allmulticast mode [ 652.026426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.036997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.128916][ T828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12416'. [ 652.147413][ T821] bond5: left allmulticast mode [ 652.152339][ T821] vti0: left allmulticast mode [ 652.183470][ T828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12416'. [ 653.229576][ T865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12429'. [ 653.241284][ T865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12429'. [ 653.337239][ T865] bridge11: port 1(vlan7) entered blocking state [ 653.345854][ T865] bridge11: port 1(vlan7) entered disabled state [ 653.355266][ T865] vlan7: entered allmulticast mode [ 653.364025][ T865] bridge11: entered allmulticast mode [ 653.381912][ T865] vlan7: left allmulticast mode [ 653.393358][ T865] bridge11: left allmulticast mode [ 654.395117][ T880] syzkaller1: entered promiscuous mode [ 654.430887][ T880] syzkaller1: entered allmulticast mode [ 655.044570][T27061] net_ratelimit: 3 callbacks suppressed [ 655.044589][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.477621][ T887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.606462][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.615512][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.624088][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.638263][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.272735][ T942] netlink: 'syz.5.12454': attribute type 1 has an invalid length. [ 656.299973][ T942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.343700][ T942] bond3: (slave geneve2): making interface the new active one [ 656.353319][ T942] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 656.448733][ T946] netlink: 'syz.0.12456': attribute type 1 has an invalid length. [ 656.745670][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.445738][ T989] tipc: Enabling of bearer rejected, already enabled [ 657.764515][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.971297][ T992] netlink: 'syz.0.12469': attribute type 29 has an invalid length. [ 657.988909][ T992] netlink: 'syz.0.12469': attribute type 29 has an invalid length. [ 658.096878][ T1013] syzkaller0: entered promiscuous mode [ 658.106565][ T1013] syzkaller0: entered allmulticast mode [ 658.317524][ T1025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12480'. [ 658.366481][ T1025] bond13: entered promiscuous mode [ 658.372108][ T1025] 8021q: adding VLAN 0 to HW filter on device bond13 [ 658.417035][ T1025] 8021q: adding VLAN 0 to HW filter on device bond13 [ 658.437904][ T1025] bond13: (slave sit1): The slave device specified does not support setting the MAC address [ 658.450312][ T1025] bond13: (slave sit1): Error -95 calling set_mac_address [ 658.777254][ T1042] syzkaller0: entered promiscuous mode [ 658.799159][ T1042] syzkaller0: entered allmulticast mode [ 658.805285][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.817525][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.926440][ T1048] bond13: entered allmulticast mode [ 658.982778][ T1050] veth21: entered allmulticast mode [ 658.991636][ T1050] bond13: (slave veth21): Enslaving as an active interface with an up link [ 659.060987][ T1054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12488'. [ 659.092706][ T1057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12489'. [ 659.163154][ T1060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12490'. [ 659.844591][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.582090][ T997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.725187][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.733797][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.743526][ T1094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12497'. [ 660.882948][ T5776] block nbd3: Receive control failed (result -1) [ 660.902903][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.462619][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.471825][T31361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.480509][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.034563][ T1108] syzkaller0: entered promiscuous mode [ 662.043431][ T1108] syzkaller0: entered allmulticast mode [ 662.107021][ T1119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12501'. [ 662.116556][ T1119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12501'. [ 662.205937][ T1122] syzkaller0: entered promiscuous mode [ 662.211507][ T1122] syzkaller0: entered allmulticast mode [ 662.565767][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.629896][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058098400: rx timeout, send abort [ 662.754106][ T1145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12512'. [ 662.848404][ T1148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12513'. [ 662.857622][ T1148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12513'. [ 663.130167][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805809ac00: rx timeout, send abort [ 663.138736][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058098400: abort rx timeout. Force session deactivation [ 663.288551][ T1164] syzkaller0: entered promiscuous mode [ 663.294353][ T1164] syzkaller0: entered allmulticast mode [ 663.608635][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.638605][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805809ac00: abort rx timeout. Force session deactivation [ 663.748449][ T1182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12527'. [ 663.757824][ T1182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12527'. [ 663.845751][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12530'. [ 664.057765][ T1191] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 664.109372][ T1191] syzkaller0: entered promiscuous mode [ 664.115008][ T1191] syzkaller0: entered allmulticast mode [ 664.649336][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.670628][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.487732][ T58] net_ratelimit: 1 callbacks suppressed [ 666.487751][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.547887][ T1214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12535'. [ 666.653878][ T1214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12535'. [ 666.727409][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.052933][ T1227] syzkaller0: entered promiscuous mode [ 667.063900][ T1227] syzkaller0: entered allmulticast mode [ 667.768926][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.807294][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.846276][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.043405][ T1268] syzkaller0: entered promiscuous mode [ 670.048953][ T1268] syzkaller0: entered allmulticast mode [ 670.058296][ T1272] tipc: Enabled bearer , priority 0 [ 670.076151][ T1264] tipc: Resetting bearer [ 670.100056][ T1264] tipc: Disabling bearer [ 670.327592][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.334955][ C1] bridge0: topology change detected, propagating [ 670.341628][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.348910][ C1] bridge0: topology change detected, propagating [ 670.382909][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.519225][ T1300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12556'. [ 670.549540][ T1300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12556'. [ 670.623154][ T1308] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 670.630481][ T1308] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 670.829875][ T1316] syzkaller0: entered promiscuous mode [ 670.835418][ T1316] syzkaller0: entered allmulticast mode [ 670.903925][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.069845][ T1310] lo speed is unknown, defaulting to 1000 [ 671.333915][ T1329] syzkaller0: entered promiscuous mode [ 671.339512][ T1329] syzkaller0: entered allmulticast mode [ 671.476182][ T1331] tipc: Can't bind to reserved service type 0 [ 671.760581][ T1343] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12573'. [ 671.777650][ T1343] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12573'. [ 671.924496][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.247339][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.632292][ T1368] lo speed is unknown, defaulting to 1000 [ 672.964430][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.422988][ T1380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12587'. [ 673.467253][ T1380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12587'. [ 673.608198][ T48] [ 673.610619][ T48] ====================================================== [ 673.617667][ T48] WARNING: possible circular locking dependency detected [ 673.624722][ T48] syzkaller #0 Not tainted [ 673.629155][ T48] ------------------------------------------------------ [ 673.636194][ T48] kworker/u8:3/48 is trying to acquire lock: [ 673.642209][ T48] ffffffff8ea85460 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 673.652172][ T48] [ 673.652172][ T48] but task is already holding lock: [ 673.659567][ T48] ffff888053ba9d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 673.668504][ T48] [ 673.668504][ T48] which lock already depends on the new lock. [ 673.668504][ T48] [ 673.678933][ T48] [ 673.678933][ T48] the existing dependency chain (in reverse order) is: [ 673.687967][ T48] [ 673.687967][ T48] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 673.695902][ T48] lock_sock_nested+0x41/0x100 [ 673.701213][ T48] do_ipv6_setsockopt+0x851/0x3150 [ 673.706874][ T48] ipv6_setsockopt+0x59/0x170 [ 673.712103][ T48] mptcp_setsockopt+0xe7f/0x35d0 [ 673.717592][ T48] do_sock_setsockopt+0x17c/0x1b0 [ 673.723154][ T48] __x64_sys_setsockopt+0x13d/0x1b0 [ 673.728898][ T48] do_syscall_64+0x15f/0xf80 [ 673.734026][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.740457][ T48] [ 673.740457][ T48] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 673.748211][ T48] lock_sock_nested+0x41/0x100 [ 673.753533][ T48] inet_shutdown+0x6a/0x390 [ 673.758573][ T48] nbd_mark_nsock_dead+0x2e9/0x560 [ 673.764222][ T48] recv_work+0x1c2e/0x1d40 [ 673.769198][ T48] process_scheduled_works+0xb5d/0x1860 [ 673.775283][ T48] worker_thread+0xa53/0xfc0 [ 673.780486][ T48] kthread+0x388/0x470 [ 673.785091][ T48] ret_from_fork+0x514/0xb70 [ 673.790212][ T48] ret_from_fork_asm+0x1a/0x30 [ 673.795515][ T48] [ 673.795515][ T48] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 673.803171][ T48] __mutex_lock+0x1a3/0x1550 [ 673.808825][ T48] nbd_queue_rq+0x37b/0x1100 [ 673.813983][ T48] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 673.820075][ T48] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 673.826970][ T48] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 673.833503][ T48] blk_mq_run_hw_queue+0x348/0x4f0 [ 673.839164][ T48] blk_mq_dispatch_list+0xd16/0xe10 [ 673.844910][ T48] blk_mq_flush_plug_list+0x48d/0x570 [ 673.850935][ T48] __blk_flush_plug+0x3ed/0x4d0 [ 673.856343][ T48] __submit_bio+0x28d/0x580 [ 673.861394][ T48] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 673.867577][ T48] block_read_full_folio+0x599/0x830 [ 673.873399][ T48] filemap_read_folio+0x137/0x3b0 [ 673.878966][ T48] do_read_cache_folio+0x358/0x590 [ 673.884621][ T48] read_part_sector+0xb6/0x2b0 [ 673.889938][ T48] adfspart_check_ICS+0xb1/0x960 [ 673.895428][ T48] bdev_disk_changed+0x817/0x1770 [ 673.901007][ T48] blkdev_get_whole+0x380/0x510 [ 673.906411][ T48] bdev_open+0x31e/0xd30 [ 673.911198][ T48] blkdev_open+0x470/0x610 [ 673.916146][ T48] do_dentry_open+0x785/0x14e0 [ 673.921449][ T48] vfs_open+0x3b/0x340 [ 673.926063][ T48] path_openat+0x2e08/0x3860 [ 673.931199][ T48] do_file_open+0x23e/0x4a0 [ 673.936238][ T48] do_sys_openat2+0x113/0x200 [ 673.941459][ T48] __x64_sys_openat+0x138/0x170 [ 673.946856][ T48] do_syscall_64+0x15f/0xf80 [ 673.952001][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.958429][ T48] [ 673.958429][ T48] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 673.965668][ T48] __mutex_lock+0x1a3/0x1550 [ 673.970811][ T48] nbd_queue_rq+0xc6/0x1100 [ 673.975844][ T48] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 673.981934][ T48] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 673.988802][ T48] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 673.995331][ T48] blk_mq_run_hw_queue+0x348/0x4f0 [ 674.001003][ T48] blk_mq_dispatch_list+0xd16/0xe10 [ 674.006747][ T48] blk_mq_flush_plug_list+0x48d/0x570 [ 674.012664][ T48] __blk_flush_plug+0x3ed/0x4d0 [ 674.018059][ T48] __submit_bio+0x28d/0x580 [ 674.023114][ T48] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 674.029291][ T48] block_read_full_folio+0x599/0x830 [ 674.035120][ T48] filemap_read_folio+0x137/0x3b0 [ 674.040691][ T48] do_read_cache_folio+0x358/0x590 [ 674.046345][ T48] read_part_sector+0xb6/0x2b0 [ 674.051652][ T48] adfspart_check_ICS+0xb1/0x960 [ 674.057140][ T48] bdev_disk_changed+0x817/0x1770 [ 674.062710][ T48] blkdev_get_whole+0x380/0x510 [ 674.068112][ T48] bdev_open+0x31e/0xd30 [ 674.072916][ T48] blkdev_open+0x470/0x610 [ 674.077877][ T48] do_dentry_open+0x785/0x14e0 [ 674.083291][ T48] vfs_open+0x3b/0x340 [ 674.087917][ T48] path_openat+0x2e08/0x3860 [ 674.093045][ T48] do_file_open+0x23e/0x4a0 [ 674.098092][ T48] do_sys_openat2+0x113/0x200 [ 674.103323][ T48] __x64_sys_openat+0x138/0x170 [ 674.108741][ T48] do_syscall_64+0x15f/0xf80 [ 674.113882][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.120304][ T48] [ 674.120304][ T48] -> #3 (set->srcu){.+.+}-{0:0}: [ 674.127475][ T48] __synchronize_srcu+0xca/0x300 [ 674.132945][ T48] elevator_switch+0x1e8/0x7a0 [ 674.138244][ T48] elevator_change+0x2cc/0x450 [ 674.143557][ T48] elevator_set_default+0x36c/0x430 [ 674.149304][ T48] blk_register_queue+0x3e9/0x4e0 [ 674.154996][ T48] __add_disk+0x677/0xd50 [ 674.159877][ T48] add_disk_fwnode+0xfb/0x480 [ 674.165092][ T48] nbd_dev_add+0x72c/0xb50 [ 674.170057][ T48] nbd_init+0x168/0x1f0 [ 674.174757][ T48] do_one_initcall+0x250/0x870 [ 674.180049][ T48] do_initcall_level+0x104/0x190 [ 674.185523][ T48] do_initcalls+0x59/0xa0 [ 674.190425][ T48] kernel_init_freeable+0x2a6/0x3e0 [ 674.196156][ T48] kernel_init+0x1d/0x1d0 [ 674.201026][ T48] ret_from_fork+0x514/0xb70 [ 674.206173][ T48] ret_from_fork_asm+0x1a/0x30 [ 674.211483][ T48] [ 674.211483][ T48] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 674.219318][ T48] __mutex_lock+0x1a3/0x1550 [ 674.224466][ T48] elevator_change+0x1b3/0x450 [ 674.229774][ T48] elevator_set_none+0xb5/0x140 [ 674.235175][ T48] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 674.241504][ T48] nbd_start_device+0x17f/0xb10 [ 674.246881][ T48] nbd_genl_connect+0x165b/0x1cf0 [ 674.252445][ T48] genl_family_rcv_msg_doit+0x22a/0x330 [ 674.258531][ T48] genl_rcv_msg+0x61c/0x7a0 [ 674.263588][ T48] netlink_rcv_skb+0x232/0x4b0 [ 674.268884][ T48] genl_rcv+0x28/0x40 [ 674.273412][ T48] netlink_unicast+0x75c/0x8e0 [ 674.278706][ T48] netlink_sendmsg+0x813/0xb40 [ 674.284008][ T48] ____sys_sendmsg+0x972/0x9f0 [ 674.289327][ T48] ___sys_sendmsg+0x2a5/0x360 [ 674.294564][ T48] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.300044][ T48] do_syscall_64+0x15f/0xf80 [ 674.305201][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.311646][ T48] [ 674.311646][ T48] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 674.320274][ T48] blk_alloc_queue+0x546/0x680 [ 674.325590][ T48] __blk_mq_alloc_disk+0x197/0x390 [ 674.331256][ T48] nbd_dev_add+0x499/0xb50 [ 674.336200][ T48] nbd_init+0x168/0x1f0 [ 674.340897][ T48] do_one_initcall+0x250/0x870 [ 674.346197][ T48] do_initcall_level+0x104/0x190 [ 674.351674][ T48] do_initcalls+0x59/0xa0 [ 674.356561][ T48] kernel_init_freeable+0x2a6/0x3e0 [ 674.362286][ T48] kernel_init+0x1d/0x1d0 [ 674.367169][ T48] ret_from_fork+0x514/0xb70 [ 674.372294][ T48] ret_from_fork_asm+0x1a/0x30 [ 674.377592][ T48] [ 674.377592][ T48] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 674.384813][ T48] __lock_acquire+0x15a5/0x2cf0 [ 674.390199][ T48] lock_acquire+0x106/0x350 [ 674.395239][ T48] fs_reclaim_acquire+0x71/0x100 [ 674.400710][ T48] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 674.407510][ T48] __alloc_skb+0x1d0/0x7d0 [ 674.412558][ T48] tcp_send_active_reset+0x8a/0x5a0 [ 674.418302][ T48] tcp_disconnect+0x171/0x1ea0 [ 674.423608][ T48] __tcp_close+0x679/0xfe0 [ 674.428584][ T48] tcp_close+0x28/0x110 [ 674.433273][ T48] inet_release+0x143/0x190 [ 674.438443][ T48] sock_release+0x85/0x150 [ 674.443495][ T48] rds_tcp_accept_one+0x641/0xd70 [ 674.449055][ T48] rds_tcp_accept_worker+0x1d/0x70 [ 674.454712][ T48] process_scheduled_works+0xb5d/0x1860 [ 674.460792][ T48] worker_thread+0xa53/0xfc0 [ 674.465915][ T48] kthread+0x388/0x470 [ 674.470532][ T48] ret_from_fork+0x514/0xb70 [ 674.475653][ T48] ret_from_fork_asm+0x1a/0x30 [ 674.480945][ T48] [ 674.480945][ T48] other info that might help us debug this: [ 674.480945][ T48] [ 674.491196][ T48] Chain exists of: [ 674.491196][ T48] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 674.491196][ T48] [ 674.504202][ T48] Possible unsafe locking scenario: [ 674.504202][ T48] [ 674.511662][ T48] CPU0 CPU1 [ 674.517035][ T48] ---- ---- [ 674.522407][ T48] lock(k-sk_lock-AF_INET6); [ 674.527190][ T48] lock(sk_lock-AF_INET6); [ 674.534230][ T48] lock(k-sk_lock-AF_INET6); [ 674.541462][ T48] lock(fs_reclaim); [ 674.545465][ T48] [ 674.545465][ T48] *** DEADLOCK *** [ 674.545465][ T48] [ 674.553622][ T48] 4 locks held by kworker/u8:3/48: [ 674.558737][ T48] #0: ffff88803222d140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 674.569643][ T48] #1: ffffc90000b87c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 674.582883][ T48] #2: ffff88802755fe60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xa9/0xd70 [ 674.593614][ T48] #3: ffff888053ba9d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 674.602945][ T48] [ 674.602945][ T48] stack backtrace: [ 674.608845][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 674.608865][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 674.608878][ T48] Workqueue: krdsd rds_tcp_accept_worker [ 674.608897][ T48] Call Trace: [ 674.608905][ T48] [ 674.608914][ T48] dump_stack_lvl+0xe8/0x150 [ 674.608935][ T48] print_circular_bug+0x2e1/0x300 [ 674.608960][ T48] check_noncircular+0x12e/0x150 [ 674.608986][ T48] __lock_acquire+0x15a5/0x2cf0 [ 674.609006][ T48] ? __lock_acquire+0x6b5/0x2cf0 [ 674.609028][ T48] ? kasan_quarantine_put+0xbb/0x1f0 [ 674.609064][ T48] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 674.609084][ T48] lock_acquire+0x106/0x350 [ 674.609100][ T48] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 674.609132][ T48] ? lock_acquire+0x106/0x350 [ 674.609149][ T48] fs_reclaim_acquire+0x71/0x100 [ 674.609170][ T48] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 674.609189][ T48] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 674.609210][ T48] ? __alloc_skb+0x1d0/0x7d0 [ 674.609225][ T48] ? __local_bh_enable_ip+0xd0/0x130 [ 674.609241][ T48] __alloc_skb+0x1d0/0x7d0 [ 674.609259][ T48] tcp_send_active_reset+0x8a/0x5a0 [ 674.609281][ T48] tcp_disconnect+0x171/0x1ea0 [ 674.609296][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 674.609339][ T48] __tcp_close+0x679/0xfe0 [ 674.609356][ T48] ? __local_bh_enable_ip+0xd0/0x130 [ 674.609373][ T48] tcp_close+0x28/0x110 [ 674.609388][ T48] inet_release+0x143/0x190 [ 674.609410][ T48] sock_release+0x85/0x150 [ 674.609433][ T48] rds_tcp_accept_one+0x641/0xd70 [ 674.609450][ T48] ? process_scheduled_works+0xa70/0x1860 [ 674.609466][ T48] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 674.609487][ T48] rds_tcp_accept_worker+0x1d/0x70 [ 674.609501][ T48] ? process_scheduled_works+0xa70/0x1860 [ 674.609516][ T48] process_scheduled_works+0xb5d/0x1860 [ 674.609545][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.609563][ T48] ? assign_work+0x3d5/0x5e0 [ 674.609580][ T48] worker_thread+0xa53/0xfc0 [ 674.609607][ T48] kthread+0x388/0x470 [ 674.609627][ T48] ? __pfx_worker_thread+0x10/0x10 [ 674.609642][ T48] ? __pfx_kthread+0x10/0x10 [ 674.609662][ T48] ret_from_fork+0x514/0xb70 [ 674.609679][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 674.609695][ T48] ? __switch_to+0xc79/0x1410 [ 674.609718][ T48] ? __pfx_kthread+0x10/0x10 [ 674.609738][ T48] ret_from_fork_asm+0x1a/0x30 [ 674.609763][ T48] [ 674.915676][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.926949][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.935466][ T1333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 675.924846][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.086089][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.968703][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.364704][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.005072][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.044384][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.084827][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.127831][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.205871][ T600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.164962][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.125035][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.208710][T27061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog