last executing test programs: 2.666452304s ago: executing program 1 (id=7409): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000001c0), 0x4) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.461738007s ago: executing program 1 (id=7414): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xfffffffffffffe31, r7, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) r9 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r9, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x40000a0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x7c}}, 0x20000000) 2.18924577s ago: executing program 3 (id=7420): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000004080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x2000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000080)="0433e10b84e846647815eb9815ca3500851c56cba6c2210cfd7120719728f13db60d09edc23f33b555fd81e250b2560d3b24909af7d3dbae6cd80638cd853e5b677e40cb771a7bd6fb5cae0270713549f556b3fdb472d972a52fa998097c1e8f1ef0ab48423705e0bc62fa1eee4774e1ae9b665e3251ebffe56ae0022e1ba74421f9ce44c51c8fe6cf74c0880dfb5259f1fd564578a550dfb32100380d085ec59118d590f6ccfc0e40704b62cb5741ddde983efee95434bd977eca7a634f7229029490f9fe8f872656b0370d2e0ce2d4d5f03dcad39bbba865af33d694b8d8cda2c186ad2b847dbf37ec75099692609fd8e9906ab38e7fc28cb140e96a1e6dc03aa3f6b3b31548653630fd1cc5aa037c6253fff36b46146128d3b323db1605fabca8788aa67f81fa3e720abbe08ab91781bb2765ba3cf0bc9eab4ac0cc5dffe0edcf20bf28b9f54e618dc0fa28010f5a9a51d3f42666a15a14c0f20c8170900126cc5e207f69ba87f77e61ac665a1bf6f6896395e08454164cfc4148ff370930296d8ce48b3fb4a8864c6e30a7e8ab932c664fbdad3c6813ccbadde5243aca052e24e57e7e2c2c4913adfd22a51b043d0ead6f8179f1defca347d601d7f53fcfc92cf4a3af009bd96d27097bab0974585d72066b36716657ed9a89c91283c7ec3afc9fe257a880cf977629dbf3aa97263705b470eca3511cb0a3e4c05840e4754f038ec4f413dcd29d72998e0aa4c0d37c364dad77970bb3a75a7e4fd6153332accc4cb1669b506295f825d8b5d5c0b981ec3873314b2d5630f1f46ef38dda64d990dee232fc2e276d87824566639bfe2ee2e45057c0e3e3b33d5f9d7f22a2148e7b5c57dc6dcb1a70ff5807d7b770151d7c9705e3a075b8f917f0f9d45897d103ff7725d5143aa914cedf91fa56444455b90783b866ed21808c843cb5e54412116d32c7d7291264707bbc4d575984c05be1229af0589fd278bc45079ec3aa232eb9f6b2b87ed29b5e9e66c4494cd7ed6b308b26f49aff81434e293896534e95522bb6cc88c55835cbad2396c465ddb9ea91411888a88733f197af36e35170293f0d95aa3de9b1928dfb06af18991ec20e8e01771828d1745168edfddd7ccdc2680d2f4b3dffbe6264de68ad5bb8ea0923ea96204c2143b512c8cfba918ea3637b079964f7af0a6542a6fb8b00532db34e6afb9170b1bfbbd9ae70ec63d423d5a125969766a0261913b05a2548829f04688d6ec79df0cef3ed2323341edcb12dbe95073e84659ab32a03d2d0838d6f198d2a653161c5d0d8545e8eabeff93731137579303dadb54fae4087ac3dc43fde63e461592e7984262462883ebde75baa8cba02a103aaab7e20ac69ab62babaa1ac914fd7370c951e97a0e666fb527c005bf8141666a84286cdb27ed12142e67bfba2e96408f1d924", 0x3f8}, {&(0x7f0000000000)="84", 0xff80}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000075360c000000140003800c00038008000180840002000400010018000180140002007369743000"], 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x46, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x9c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8, 0x1}}) r9 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x9, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x194, r5, 0x202, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x134, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/&\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff730}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '![\xab}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) 2.007233286s ago: executing program 4 (id=7423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r2, 0x0, 0xffffffff000) (async) recvmmsg(r1, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10122, 0x0) 1.958243664s ago: executing program 4 (id=7424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) r0 = socket(0x2b, 0x80801, 0x1) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x8040) r5 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffc}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000200)=0x14) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@dellinkprop={0x58, 0x6d, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x2008, 0x81}, [@IFLA_ADDRESS={0xa}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x7}, @IFLA_NET_NS_FD={0x8, 0x1c, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x4094}, 0x40010) r12 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') r13 = getpid() socket(0x2b, 0x3, 0xc8dd) sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r13, r8}}}, @rights={{0x18, 0x1, 0x1, [r12, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={r3, r5, r9}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) 1.851152652s ago: executing program 4 (id=7425): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) 1.697989387s ago: executing program 2 (id=7427): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x73, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "3d001c", 0x3d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4e23, 0x4e20, 0x3d, 0x0, @opaque="5bb01a6ec478c13200c76907fda194ebad77934de6d456651a32f9bbefc6666e9f5d1493f2dd714967160c344896be5518fc73a598"}}}}}}, 0x0) 1.697182175s ago: executing program 3 (id=7428): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x14, 0x21, 0x9, 0xffffffff, 0x25dfdbff, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004841) 1.635326731s ago: executing program 1 (id=7429): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x804) 1.454251728s ago: executing program 0 (id=7430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xf8e}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x81}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x2e4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000000002016e86634da242600000000041d00000800020000000000"], 0x1c}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r10}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r10, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) connect(r9, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r6, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x12, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000480)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) 1.441356293s ago: executing program 3 (id=7431): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x184, 0x30, 0x9, 0x70bd2a, 0x0, {}, [{0x170, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0xe4, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffe06, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x184}}, 0x0) 1.231602185s ago: executing program 2 (id=7432): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000070000000100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001000390429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xb1, 0x7, 0x1, 0x0, "809c5f9e54394fc7f4f05ef0ad7b3995e5c0a7be8a395b3f8eba32903c5a337671ce321cc0d82f79e4d7f74f780eed64f42b68d9edffc81a6cf832be47732150d47eaf43f4e5eed1ecba7dc041f8e7983d3bb560ebfe1b1a4af043bdbe8b63eafdd3087b5f4df77e72ca71fe55f69dc41d13748289c822b441bc50923417c8cc50a1619aef3132da9b5c4745b2440738f33bbc593605a61fcd0441922e9cc9e20d601d7c6f64a660daaca21757"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.230550384s ago: executing program 1 (id=7433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r4, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000000580)=@newpolicy={0x1108, 0x13, 0x100, 0x70bd2b, 0x25dfdbfc, {{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x3, 0x4e22, 0x6b, 0xa, 0xa0, 0x80, 0x73, r5}, {0xc, 0x8, 0x4, 0x83c5, 0x1, 0x8, 0x740, 0x4}, {0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffe00, 0x7}, 0x7, 0x6e6bb8, 0x2, 0x0, 0x3, 0x1}, [@etimer_thresh={0x8}, @algo_crypt={0x1048, 0x2, {{'cbc(aes-arm)\x00'}, 0x8000, "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"}}]}, 0x1108}, 0x1, 0x0, 0x0, 0x4068855}, 0xc004) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000000ef9ff106c1b60a6b9d318560b4365841b4812f89707122c63cef37fa48efa9db4ce57baf6b871c82be8c50aa622c4c57fb15008050f8b0095161751166c5ab7ca1db5689bcefb1917a409fb95b4f14eec71bcba81197c9e3404b922d5f5cf266cd3c18b51c83cd251b248626cb154967c4475a9d652c735310d2eaba2cec850b318d23a80704a32ce42a6e120dd627be50227292d67e487f20334baf828b3ebf18cb635e88d254d26b1a4a6aa826848b5ae1d007089e59df0bae5b7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020100"/112], 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xc4, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60191810008e06ff00000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="504100009078"], 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) 1.175067753s ago: executing program 3 (id=7434): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000034c0)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbee, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r7) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r8, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r1, @ANYBLOB="03050000000000003041ce40f4766c616e00200002800a000400aaaaaa95e317f02ff30c00000000453672c4bef0fb33cc00"/65], 0x50}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', r1, 0x1, 0x10, 0x0, 0x7, {{0x19, 0x4, 0x1, 0x1e, 0x64, 0x65, 0x0, 0xf, 0x29, 0x0, @multicast2, @broadcast, {[@end, @noop, @cipso={0x86, 0x3c, 0x3, [{0x0, 0x7, "e695fdab32"}, {0x5, 0x4, "6fe4"}, {0x2, 0xf, "973e0dd015cec21a2b88aee55e"}, {0x1, 0x10, "7d830eb32196aed13f054fc6c868"}, {0x2, 0xc, "255fab0a31af714d56ac"}]}, @generic={0x88, 0x5, "58970d"}, @noop, @timestamp={0x44, 0xc, 0x80, 0x0, 0x3, [0x3, 0x8]}]}}}}}) 1.109547072s ago: executing program 2 (id=7435): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 1.079652786s ago: executing program 3 (id=7436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="3fab000046d43ab2f39252"], 0x14}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) 999.147907ms ago: executing program 1 (id=7437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendto$inet(r1, &(0x7f0000000340)="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"/558, 0x22e, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000040), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 996.329828ms ago: executing program 4 (id=7438): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc04}, 0x0) 995.053761ms ago: executing program 0 (id=7439): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e21, 0x8}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) 986.137519ms ago: executing program 2 (id=7440): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x15, 0x5, 0xc9a9) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x102, 0x0, 0x0) 927.874542ms ago: executing program 3 (id=7441): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c, 0xa}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) close(r3) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000002580)={{r1, &(0x7f0000000140)='net', 0x200040, &(0x7f0000002280)={@_ha_fsid={[0x80, 0x5]}, {0x4000, 0x2, 0x80, 0x4}}, 0x8, &(0x7f00000022c0)={@_ha_fsid}, &(0x7f0000002300)=0x8}, 0x2, &(0x7f0000002540)=[{0x2, 0xe, &(0x7f0000002340)='cgroup.subtree_control\x00', &(0x7f0000002380)="66120079f743cdc8adffe75f79c1adc6d200fe446c71f4cfccb31ce73e76df343b14ea3b1eaa01a2699f88ce5e4f0d44c2f419561c1a85f7d86dc50071773e4190786c0be7f315", 0x47, 0xa}, {0x2, 0x8, &(0x7f0000002400)='\xcb#*^\x00', &(0x7f0000002440)="702d9b47a66ca8b79c1c3a8df8568c4d47476f482c2528282a095f4e41454a607fdbc4d4dd0b400f11c280a671e1cea42543280636ca67c4dd37926f1207b33a2cd3a74e428692526dd0881a22b5cb54b7dbb3bdfc801af169d7d86690b0b3209d97863b4d0482f2aece024e782d37cae387c090c1ad5dd021655d1968e72e9fcded75a8b211501af539610d57bb4a8b686a269f4a4457f281d55cf70f069d613e98ce467cd12fc9eb0619cffd5f23efc3402b6dd2c1d6686fe7dc8bb70759397ab0bd5193c640ce10c0cad467a917db84714981244db06f6089e83e079790c00bd8272a783b62255ce9fc227967783cec53fa0fe95e059604", 0xf9, 0x20}]}) connect$llc(r6, &(0x7f0000002600)={0x1a, 0x335, 0x9, 0xcb, 0xd, 0x6, @link_local}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2b, 'net'}, {0x2d, 'net_cls'}, {0x2d, 'cpuset'}, {0x2a, 'hugetlb'}]}, 0x1f) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000000c0)={0x6536, 0x3, 0xfffffffe}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000002640)={0x10001, [], 0x8, "0001fe3ce3f6c5"}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003580), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000003640)={'wpan0\x00'}) 855.163426ms ago: executing program 4 (id=7442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000e3ff4b000000030a01030000000000000000050000000900010073797a30000000000900030073797a32000000001400048008000240000000000800014000000072"], 0x94}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8a}, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0xffffffffffffffff, {[0xffff0001, 0x4, 0x8, 0x3, 0x2, 0x810b, 0xf71, 0x7]}}, 0x5c) 832.46754ms ago: executing program 0 (id=7443): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x73, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "3d001c", 0x3d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4e23, 0x4e20, 0x3d, 0x0, @opaque="5bb01a6ec478c13200c76907fda194ebad77934de6d456651a32f9bbefc6666e9f5d1493f2dd714967160c344896be5518fc73a598"}}}}}}, 0x0) 764.850169ms ago: executing program 4 (id=7444): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) (async) write(r4, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xce, 0x0, 0x0) bind$tipc(r5, 0x0, 0x0) (async) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) syz_emit_ethernet(0x94, &(0x7f00000001c0)=ANY=[@ANYBLOB="15971ca78a1400000000000081001a0008004c0000820000fffe04119078ffffffff00000000865affffffff07081d597ea783d0000ad0c14bd732954b02000b7ff9478bde68401f800708ed2bbab92eeb06119ca046184fe70030ae05f1eab75dca0203f4000bb679823c1b4bc0ce6a02108293533467decd0b62c004000000000000004e200012907800"/148], 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x11, 0x0, &(0x7f0000000140)) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 741.002354ms ago: executing program 0 (id=7445): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x9151}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x401, 0x8000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x2100, 0x600ac}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004044) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) 615.342251ms ago: executing program 0 (id=7446): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, 0x0, 0x0) 580.510563ms ago: executing program 0 (id=7447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x30b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r4, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010300000000fdffefff05000001eb95c21a8a04f064043d79fb51f8a13326282871d1f78bc16bd39683dfa7fe710d0082120975964b2ddf3b6323bbafc45d5a46235aa4836949054daa7eed2d5ba871eb5a3b7aab731a13c968fca981a8b96efef816dd480ec5585dba835c93eea74a387b2e1e880a55b3"], 0x14}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2ab46354fbdce01a}, 0x894) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800010000000000e6ff0000020000ff0000050008000008000700ac1414230800100000000000"], 0x2c}}, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r12, &(0x7f0000000780)=ANY=[@ANYBLOB="0461346699a27903a304e25a8fbb8d0053f0c9ce7d42696003dae9a0550661560b092e0a8db73531507f1a502d3663a6b7a1d78dcecdcd27a27421797f09145b2703e1e27c0a3c752bd29ebc9860873425723406c0d6bf37d795243b324b98cf829bf7ff81298a38ff731000ff2363844431cbefa5fad66b8c9b0c051a2a7ea51f113d63d1cb271df8d9021cf1c7b2c35f647bfdfccc21485cd73fc2e2d5d9879a2c620068cc6484d3626f8d9f4ef2", @ANYRES8=r11, @ANYRES32, @ANYRES16=r2, @ANYRES64=r9, @ANYRES8=r10, @ANYRESHEX=r7, @ANYRES16], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 158.794547ms ago: executing program 1 (id=7448): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000140)={0x0, 0xdec, 0x833c, 0x7, 0x0, 0x8d, 0x2b, "839bf939b57362abfaad537bda3067fc22f51ecb", "b6f6c857a33c218fa92e44589f8115fc47110400"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x76e}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x10000000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r6, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r8 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r8, &(0x7f0000000940)={0xa, 0x4e22, 0xd99, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000080)=""/255, &(0x7f0000000180)=0xff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) 27.288856ms ago: executing program 2 (id=7449): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80400) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000240)={{0x2, 0x4e33, @broadcast}, {0x5, @random="a9d93a416000"}, 0x2, {0x2, 0x4e22, @empty}, 'bond0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18c4943b8ed7e1000000000000c600000000100000007110b100000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 2 (id=7450): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x80000001, 0x5, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x66, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x17, 0xe8, [@rand_addr=0x64010102, @private=0xa010102, @rand_addr=0x64010102, @private=0xa010100, @empty]}]}}}}}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) read$nci(r3, &(0x7f0000000200)=""/100, 0x64) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0x1, 0x3}, 0xff}, 0x18) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r0, &(0x7f0000000300), 0x10) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x80000001, 0x5, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x66, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x17, 0xe8, [@rand_addr=0x64010102, @private=0xa010102, @rand_addr=0x64010102, @private=0xa010100, @empty]}]}}}}}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) (async) read$nci(r3, &(0x7f0000000200)=""/100, 0x64) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0x1, 0x3}, 0xff}, 0x18) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000) (async) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.3.5976'. [ 646.599873][T28058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5976'. [ 646.839345][T27658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.241483][T27658] veth0_vlan: entered promiscuous mode [ 647.261823][T27658] veth1_vlan: entered promiscuous mode [ 647.309248][T27658] veth0_macvtap: entered promiscuous mode [ 647.325467][T27658] veth1_macvtap: entered promiscuous mode [ 647.357903][T27658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.386042][T27658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.411961][T11546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.421170][T11546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.439215][T11546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.468257][T11546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.854482][T28078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.015448][T28117] netlink: 'syz.3.5988': attribute type 16 has an invalid length. [ 650.041872][T28117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5988'. [ 650.046667][T28123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5990'. [ 650.083010][T28126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5991'. [ 650.095530][T28126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.100652][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5990'. [ 650.149698][T28012] bridge_slave_1: left allmulticast mode [ 650.155548][T28012] bridge_slave_1: left promiscuous mode [ 650.167332][T28012] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.184267][T28012] bridge_slave_0: left allmulticast mode [ 650.190960][T28012] bridge_slave_0: left promiscuous mode [ 650.196820][T28012] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.215489][ T29] audit: type=1107 audit(1781263111.779:7): pid=28130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 650.370778][T28133] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5992'. [ 650.383318][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5992'. [ 650.685574][T28012] bond7 (unregistering): (slave geneve3): Releasing active interface [ 650.812862][T28012] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 650.823075][T28012] bridge2 (unregistering): left promiscuous mode [ 650.963204][T28012] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 650.972246][T28012] bridge5 (unregistering): left promiscuous mode [ 650.978732][T28012] bridge5 (unregistering): left allmulticast mode [ 651.623265][T28012] bond1 (unregistering): Released all slaves [ 651.636947][T28012] bond2 (unregistering): Released all slaves [ 651.653929][T28012] bond3 (unregistering): Released all slaves [ 651.668830][T28012] bond4 (unregistering): Released all slaves [ 651.691509][T28012] bond0 (unregistering): Released all slaves [ 651.705682][T28012] bond5 (unregistering): Released all slaves [ 651.724469][T28012] bond6 (unregistering): Released all slaves [ 651.738728][T28012] bond7 (unregistering): Released all slaves [ 651.764418][T28012] bond8 (unregistering): Released all slaves [ 651.779191][T28012] bond9 (unregistering): Released all slaves [ 651.794729][T28012] bond10 (unregistering): Released all slaves [ 651.809061][T28012] bond11 (unregistering): Released all slaves [ 651.853271][T28126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.883746][T28015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.901753][T28015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.071328][T11551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.074980][T28012] : left promiscuous mode [ 652.087375][T28141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5994'. [ 652.090224][T11551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.195974][T28141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5994'. [ 652.226303][T28149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5997'. [ 652.272266][T28135] tipc: Resetting bearer [ 652.343494][T28135] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 652.369143][T28149] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 652.373056][T28012] : left promiscuous mode [ 652.406226][T28159] netlink: 'syz.0.5999': attribute type 1 has an invalid length. [ 652.416338][T28159] netlink: 'syz.0.5999': attribute type 1 has an invalid length. [ 652.499798][T28012] tipc: Left network mode [ 652.633494][T28165] tunl0: entered promiscuous mode [ 652.678798][T28165] netlink: 'syz.1.6000': attribute type 3 has an invalid length. [ 652.703472][T28165] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6000'. [ 652.891430][ T5647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 652.912848][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 652.923414][T28180] netlink: 'syz.2.6005': attribute type 28 has an invalid length. [ 652.953903][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 652.972822][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 652.976652][T28180] netlink: 'syz.2.6005': attribute type 3 has an invalid length. [ 652.995856][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 653.084838][T28182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6005'. [ 653.120586][T28180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6005'. [ 653.126843][ T3360] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 653.194217][T28180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6005'. [ 653.263104][T28180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6005'. [ 653.543147][T28015] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.563787][T28015] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.586150][T28015] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.675173][T28015] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.555071][T28239] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 654.600651][T28012] hsr_slave_0: left promiscuous mode [ 654.670654][T28012] team0: left allmulticast mode [ 654.682571][T28012] team_slave_0: left allmulticast mode [ 654.688685][T28012] team_slave_1: left allmulticast mode [ 654.694651][T28012] team0: left promiscuous mode [ 654.701326][T28012] team_slave_0: left promiscuous mode [ 654.707291][T28012] team_slave_1: left promiscuous mode [ 654.714706][T28012] veth1_macvtap: left promiscuous mode [ 654.723138][T28012] veth1_vlan: left promiscuous mode [ 654.729633][T28012] veth0_vlan: left promiscuous mode [ 655.104911][T28012] team0 (unregistering): Port device team_slave_1 removed [ 655.112362][ T50] Bluetooth: hci3: command tx timeout [ 655.135354][T28012] team0 (unregistering): Port device team_slave_0 removed [ 655.335303][ T5365] syz0: Port: 1 Link DOWN [ 655.744076][T28283] openvswitch: netlink: Invalid VLAN frame [ 655.819721][T28284] xt_hashlimit: size too large, truncated to 1048576 [ 655.972547][T28177] lo speed is unknown, defaulting to 1000 [ 655.991799][ T3360] smc: removing ib device syz0 [ 656.330933][ T3360] smbdirect: ib_dev[syz0] removed [ 656.450336][T28305] __nla_validate_parse: 6 callbacks suppressed [ 656.450354][T28305] netlink: 788 bytes leftover after parsing attributes in process `syz.2.6035'. [ 656.556217][T28314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6038'. [ 656.565681][T28305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6035'. [ 656.565717][T28305] netlink: 'syz.2.6035': attribute type 5 has an invalid length. [ 656.565730][T28305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6035'. [ 656.715828][T28305] geneve2: entered promiscuous mode [ 656.731142][T28305] geneve2: entered allmulticast mode [ 656.863953][T28014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 656.901954][T28014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 656.945738][T28335] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6041'. [ 657.043432][T28014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 657.096042][T28014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 657.190844][ T50] Bluetooth: hci3: command tx timeout [ 657.297189][T28333] bond10: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 657.343856][T28333] bond10 (unregistering): Released all slaves [ 657.776096][T28334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.404600][T28177] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.437371][T28177] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.474818][T28177] bridge_slave_0: entered allmulticast mode [ 658.514058][T28177] bridge_slave_0: entered promiscuous mode [ 658.633218][T28177] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.659004][T28177] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.677211][T28177] bridge_slave_1: entered allmulticast mode [ 658.722459][T28177] bridge_slave_1: entered promiscuous mode [ 658.815854][T28415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6053'. [ 659.015308][T28426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6054'. [ 659.061882][T28426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6054'. [ 659.133537][T28177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.231282][T28177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.268683][ T50] Bluetooth: hci3: command tx timeout [ 659.847279][T28469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6061'. [ 659.962121][T28464] netlink: 'syz.1.6061': attribute type 39 has an invalid length. [ 659.975777][T28477] netlink: 'syz.4.6064': attribute type 1 has an invalid length. [ 660.021819][T28177] team0: Port device team_slave_0 added [ 660.080647][T28469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6061'. [ 660.216658][T28177] team0: Port device team_slave_1 added [ 660.735233][T28177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.771498][T28177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.858201][T28177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.949048][T28491] ipvlan2: entered promiscuous mode [ 660.980661][T28177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.005856][T28177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.122232][T28177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.348625][ T50] Bluetooth: hci3: command tx timeout [ 661.545693][T28177] hsr_slave_0: entered promiscuous mode [ 661.565461][T28177] hsr_slave_1: entered promiscuous mode [ 661.746968][T28548] __nla_validate_parse: 5 callbacks suppressed [ 661.746985][T28548] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6075'. [ 661.822272][T28548] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 661.958989][T28556] Bluetooth: MGMT ver 1.23 [ 662.036977][T28012] IPVS: stop unused estimator thread 0... [ 662.277592][T28566] bridge1: entered promiscuous mode [ 662.286087][T28566] bridge1: entered allmulticast mode [ 662.845064][T28177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.878580][T28177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.890468][T28177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 663.035800][T28596] bond9 (unregistering): Released all slaves [ 663.077628][T28607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6086'. [ 663.300702][T28177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.325589][T28177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.337855][T28177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 663.563477][T28177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.606729][T28177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.633611][T28177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 663.763582][T28177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.782051][T28177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.816420][T28177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 663.980440][T28644] : entered promiscuous mode [ 664.012694][T28676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6100'. [ 664.212406][T28687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6105'. [ 664.265703][T28011] bond0: (slave bond_slave_1): interface is now down [ 664.372388][T28011] bond0: now running without any active interface! [ 664.455181][T28706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6107'. [ 664.499901][T28709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6108'. [ 664.572046][T28713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6108'. [ 664.692333][T28720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6109'. [ 664.722570][T28720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6109'. [ 665.035039][T28737] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode [ 665.074204][T28737] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode [ 665.174064][T28177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 665.185296][T28177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.210036][T28747] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 665.227536][T28177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 665.242094][T28177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.254422][T28177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 665.295402][T28177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.324606][T28177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 665.390340][T28177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.483369][T28762] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6116'. [ 665.694555][T28777] netlink: 'syz.2.6119': attribute type 1 has an invalid length. [ 665.822286][T28776] macvlan3: entered promiscuous mode [ 665.828449][T28776] macvlan3: entered allmulticast mode [ 665.835063][T28776] bond10: entered promiscuous mode [ 665.847698][T28776] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 665.862430][T28776] bond10: left promiscuous mode [ 665.960231][T28177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.997810][T28177] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.040095][T28011] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.047246][T28011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.102301][T28011] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.109521][T28011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.456900][T28827] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 666.525181][T28833] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 666.567468][T28833] bond11: (slave lo): Enslaving as an active interface with an up link [ 666.582200][T28833] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 666.640001][T28827] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 666.664599][T28827] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 666.872424][T28848] openvswitch: netlink: Multiple metadata blocks provided [ 666.881266][T28849] openvswitch: netlink: Multiple metadata blocks provided [ 667.004181][T28177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.062233][T28177] veth0_vlan: entered promiscuous mode [ 667.082847][T28177] veth1_vlan: entered promiscuous mode [ 667.134913][T28177] veth0_macvtap: entered promiscuous mode [ 667.149453][T28177] veth1_macvtap: entered promiscuous mode [ 667.183168][T28862] __nla_validate_parse: 6 callbacks suppressed [ 667.183197][T28862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6143'. [ 667.186440][T28177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.199532][T28862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6143'. [ 667.199616][T28862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6143'. [ 667.250185][T28177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.294700][T28014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.323016][T28014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.346162][T28014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.393995][T28014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.644421][T11546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.666565][T11546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.878969][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.933109][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.058912][T28893] x_tables: unsorted entry at hook 1 [ 668.473901][T28923] xt_hashlimit: size too large, truncated to 1048576 [ 668.495356][T28930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6157'. [ 668.532141][T28924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6157'. [ 668.731426][T28939] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6160'. [ 668.925415][T28951] netlink: 'syz.4.6163': attribute type 1 has an invalid length. [ 668.934067][T28951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6163'. [ 669.021444][T28953] netlink: 'syz.3.6164': attribute type 1 has an invalid length. [ 669.049228][T28956] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6165'. [ 669.180984][T28962] netlink: 'syz.3.6164': attribute type 10 has an invalid length. [ 669.206513][T28962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6164'. [ 669.232078][T28962] dummy0: entered promiscuous mode [ 669.261681][T28958] dummy0: left promiscuous mode [ 669.359484][T28953] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6164'. [ 669.415588][T28974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.436470][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 669.463577][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 669.472960][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 669.483860][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 669.491998][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.507728][T28973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.809820][T28994] sctp: [Deprecated]: syz.0.6172 (pid 28994) Use of int in maxseg socket option. [ 669.809820][T28994] Use struct sctp_assoc_value instead [ 670.201978][T29008] bond1: option lp_interval: invalid value (0) [ 670.221785][T29008] bond1: option lp_interval: allowed values 1 - 2147483647 [ 670.241913][T29008] bond1 (unregistering): Released all slaves [ 670.334626][ T3360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.356966][ T3360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 670.524525][T29024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 670.592829][ T3360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.625342][ T3360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 670.913945][T29075] veth9: entered allmulticast mode [ 671.127505][ T3360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.178926][ T3360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 671.330171][T28972] lo speed is unknown, defaulting to 1000 [ 671.406792][ T3360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.440902][ T3360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 671.466439][T29112] netlink: 'syz.4.6197': attribute type 1 has an invalid length. [ 671.527046][T29112] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 671.588610][ T50] Bluetooth: hci5: command tx timeout [ 671.759586][T29132] netlink: 'syz.4.6201': attribute type 39 has an invalid length. [ 671.869445][T29135] netlink: 'syz.0.6203': attribute type 2 has an invalid length. [ 671.887289][T29133] ipvlan2: entered promiscuous mode [ 672.063095][T29139] sctp: [Deprecated]: syz.3.6206 (pid 29139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 672.063095][T29139] Use struct sctp_sack_info instead [ 672.064250][T29141] nbd: couldn't find a device at index 0 [ 672.210470][T29148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.226547][ T3360] veth1_to_bridge: left allmulticast mode [ 672.243298][T29151] SET target dimension over the limit! [ 672.255982][ T3360] veth1_to_bridge: left promiscuous mode [ 672.268387][ T3360] bridge0: port 1(veth1_to_bridge) entered disabled state [ 672.292901][ T3360] veth3: left allmulticast mode [ 672.297901][ T3360] veth3: left promiscuous mode [ 672.307869][ T3360] bridge2: port 1(veth3) entered disabled state [ 672.366539][ T3360] pimreg3: left allmulticast mode [ 672.624344][ T3360] tipc: Disabling bearer [ 672.902353][ T3360] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 673.075442][ T3360] bond0 (unregistering): Released all slaves [ 673.085800][ T3360] bond1 (unregistering): Released all slaves [ 673.102395][ T3360] bond2 (unregistering): Released all slaves [ 673.123242][ T3360] bond3 (unregistering): Released all slaves [ 673.137546][ T3360] bond4 (unregistering): Released all slaves [ 673.154451][ T3360] bond6 (unregistering): Released all slaves [ 673.175256][ T3360] bond5 (unregistering): Released all slaves [ 673.190627][ T3360] bond7 (unregistering): Released all slaves [ 673.206733][ T3360] bond8 (unregistering): Released all slaves [ 673.228236][ T3360] bond9 (unregistering): Released all slaves [ 673.242553][ T3360] bond10 (unregistering): Released all slaves [ 673.257417][ T3360] bond11 (unregistering): (slave lo): Releasing backup interface [ 673.272707][ T3360] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 673.285897][ T3360] bond11 (unregistering): Released all slaves [ 673.307377][T29141] syzkaller0: entered promiscuous mode [ 673.313959][T29141] syzkaller0: entered allmulticast mode [ 673.479764][T29170] __nla_validate_parse: 14 callbacks suppressed [ 673.479782][T29170] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6214'. [ 673.525577][ T3360] : left promiscuous mode [ 673.528094][T29170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6214'. [ 673.573110][T29170] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6214'. [ 673.610193][T29170] netlink: 'syz.4.6214': attribute type 2 has an invalid length. [ 673.644571][T29170] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6214'. [ 673.670284][ T50] Bluetooth: hci5: command tx timeout [ 673.731845][ T3360] tipc: Disabling bearer [ 673.774698][ T3360] tipc: Disabling bearer [ 673.796664][ T3360] tipc: Left network mode [ 673.814744][T29178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6214'. [ 673.977324][T29192] netlink: 'syz.3.6218': attribute type 10 has an invalid length. [ 673.988474][T29192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6218'. [ 674.060743][T29192] team0: entered allmulticast mode [ 674.079926][T29192] team_slave_0: entered allmulticast mode [ 674.092719][T29192] team_slave_1: entered allmulticast mode [ 674.126061][T29192] bridge0: port 3(team0) entered blocking state [ 674.174924][T29192] bridge0: port 3(team0) entered disabled state [ 674.193388][T29202] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6220'. [ 674.211143][T29192] team0: entered promiscuous mode [ 674.216346][T29192] team_slave_0: entered promiscuous mode [ 674.222850][T29192] team_slave_1: entered promiscuous mode [ 674.254586][T29192] bridge0: port 3(team0) entered blocking state [ 674.261103][T29192] bridge0: port 3(team0) entered forwarding state [ 674.702759][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6225'. [ 674.831699][T29226] ipvlan2: entered promiscuous mode [ 674.895180][T28972] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.920268][T28972] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.929658][T28972] bridge_slave_0: entered allmulticast mode [ 674.937719][T28972] bridge_slave_0: entered promiscuous mode [ 674.946929][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 674.961582][T28972] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.970550][T28972] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.982802][T28972] bridge_slave_1: entered allmulticast mode [ 674.993049][T28972] bridge_slave_1: entered promiscuous mode [ 675.061190][T28972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.080052][T28972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.176567][T28972] team0: Port device team_slave_0 added [ 675.205527][T29241] --map-set only usable from mangle table [ 675.206053][T28972] team0: Port device team_slave_1 added [ 675.233640][T29243] --map-set only usable from mangle table [ 675.394198][T28972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.421750][T28972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.481230][T29258] netlink: 'syz.1.6231': attribute type 1 has an invalid length. [ 675.489451][T28972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.495422][T28972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.547328][T29258] netlink: 'syz.1.6231': attribute type 3 has an invalid length. [ 675.554808][T28972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.605657][T29258] netlink: 'syz.1.6231': attribute type 7 has an invalid length. [ 675.651078][T28972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.662130][T29258] netlink: 'syz.1.6231': attribute type 8 has an invalid length. [ 675.717661][T29258] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6231'. [ 675.762582][ T50] Bluetooth: hci5: command tx timeout [ 675.771472][T29258] NCSI netlink: No device for ifindex 131092 [ 675.801736][T29253] syzkaller1: entered promiscuous mode [ 675.819818][T29253] syzkaller1: entered allmulticast mode [ 676.279141][T29305] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 676.313804][T28972] hsr_slave_0: entered promiscuous mode [ 676.322672][T28972] hsr_slave_1: entered promiscuous mode [ 676.331793][T28972] debugfs: 'hsr0' already exists in 'hsr' [ 676.337847][T28972] Cannot create hsr debugfs directory [ 676.393897][T29303] erspan0: entered promiscuous mode [ 676.447869][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 676.660582][T29326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6249'. [ 677.012192][T29333] tap0: tun_chr_ioctl cmd 2148553947 [ 677.119263][ T3360] hsr_slave_0: left promiscuous mode [ 677.130944][ T3360] hsr_slave_1: left promiscuous mode [ 677.253858][T29359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.261188][T29359] IPv6: NLM_F_CREATE should be set when creating new route [ 677.766922][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 677.828170][ T50] Bluetooth: hci5: command tx timeout [ 678.057944][T29379] ip6t_srh: unknown srh match flags 4000 [ 678.109317][T29386] netlink: 'syz.4.6264': attribute type 1 has an invalid length. [ 678.193558][T29395] IPv6: NLM_F_CREATE should be specified when creating new route [ 678.264342][T29386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.539811][ T3360] IPVS: stop unused estimator thread 0... [ 678.710620][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.721602][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.960909][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.273588][T29443] xt_cluster: node mask cannot exceed total number of nodes [ 679.461796][T29453] __nla_validate_parse: 1 callbacks suppressed [ 679.461815][T29453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6278'. [ 679.526427][T29460] netlink: 'syz.4.6279': attribute type 28 has an invalid length. [ 679.568789][T29460] netlink: 'syz.4.6279': attribute type 3 has an invalid length. [ 679.608709][T29460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6279'. [ 679.629310][T29457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.990707][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.003777][ T3360] bridge_slave_1: left allmulticast mode [ 680.026780][ T3360] bridge_slave_1: left promiscuous mode [ 680.040796][ T3360] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.060481][T29489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6287'. [ 680.075549][ T3360] bridge_slave_0: left allmulticast mode [ 680.087608][ T3360] bridge_slave_0: left promiscuous mode [ 680.103848][ T3360] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.196957][ T3360] pimreg3: left allmulticast mode [ 680.375236][T29506] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6289'. [ 680.641724][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.029987][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.214981][ T3360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.224412][ T3360] bond_slave_0: left promiscuous mode [ 681.230211][ T3360] bond_slave_0: left allmulticast mode [ 681.241967][ T3360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.251931][ T3360] bond_slave_1: left promiscuous mode [ 681.257429][ T3360] bond_slave_1: left allmulticast mode [ 681.264520][ T3360] bond0 (unregistering): Released all slaves [ 681.271182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.285170][ T3360] bond1 (unregistering): Released all slaves [ 681.299494][ T3360] bond2 (unregistering): Released all slaves [ 681.313802][ T3360] bond3 (unregistering): Released all slaves [ 681.330873][ T3360] bond4 (unregistering): (slave lo): Releasing backup interface [ 681.346278][ T3360] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 681.358397][ T3360] bond4 (unregistering): Released all slaves [ 681.372160][ T3360] bond5 (unregistering): Released all slaves [ 681.386316][ T3360] bond6 (unregistering): Released all slaves [ 681.400288][ T3360] bond7 (unregistering): Released all slaves [ 681.414530][ T3360] bond8 (unregistering): Released all slaves [ 681.446819][ T3360] bond9 (unregistering): Released all slaves [ 681.462464][T28972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 681.473507][T28972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.485707][T29507] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 681.637402][T28972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 681.684919][T28972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 681.694457][T28972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 681.731142][T28972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 681.749850][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.851676][T28972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 681.871094][T28972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 681.895575][T29514] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6292'. [ 681.945914][T29520] netlink: 'syz.4.6290': attribute type 3 has an invalid length. [ 681.972427][T29526] netlink: 'syz.3.6293': attribute type 21 has an invalid length. [ 681.982753][ T5756] IPVS: starting estimator thread 0... [ 682.014990][T29526] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6293'. [ 682.026466][T29528] netlink: 'syz.3.6293': attribute type 21 has an invalid length. [ 682.037296][T29528] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6293'. [ 682.103986][T29538] IPVS: using max 43 ests per chain, 103200 per kthread [ 682.200282][T29526] netlink: 'syz.3.6293': attribute type 4 has an invalid length. [ 682.216275][T29526] netlink: 'syz.3.6293': attribute type 5 has an invalid length. [ 682.241767][T29526] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6293'. [ 682.271575][T29528] netlink: 'syz.3.6293': attribute type 4 has an invalid length. [ 682.293903][T29528] netlink: 'syz.3.6293': attribute type 5 has an invalid length. [ 682.319803][T29528] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6293'. [ 682.360609][T29539] veth1_macvtap: left promiscuous mode [ 682.366372][T29539] macsec0: entered promiscuous mode [ 682.404132][T29539] macsec0: entered allmulticast mode [ 682.904361][T28972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.955051][T28972] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.991248][T29069] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.998522][T29069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.047211][T29069] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.054496][T29069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.644156][T29567] lo speed is unknown, defaulting to 1000 [ 684.159736][ T5636] net_ratelimit: 3 callbacks suppressed [ 684.159752][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.424198][T28972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.542970][T28972] veth0_vlan: entered promiscuous mode [ 684.582669][T28972] veth1_vlan: entered promiscuous mode [ 684.665306][T28972] veth0_macvtap: entered promiscuous mode [ 684.691632][T28972] veth1_macvtap: entered promiscuous mode [ 684.765264][ T3360] hsr_slave_0: left promiscuous mode [ 684.772322][ T3360] hsr_slave_1: left promiscuous mode [ 684.785722][ T3360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.789120][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.800393][ T3360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.814140][ T3360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.836000][ T3360] veth1_macvtap: left promiscuous mode [ 684.841696][ T3360] veth0_macvtap: left promiscuous mode [ 684.847584][ T3360] veth1_vlan: left promiscuous mode [ 684.854392][ T3360] veth0_vlan: left promiscuous mode [ 685.005954][ T3360] batadv1 (unregistering): left promiscuous mode [ 685.015353][ T3360] team0 (unregistering): Port device batadv1 removed [ 685.125375][T29057] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 685.179696][T28017] smc: removing ib device syz2 [ 685.188848][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.405740][ T3360] team_slave_1 (unregistering): left promiscuous mode [ 685.416989][ T3360] team0 (unregistering): Port device team_slave_1 removed [ 685.538529][ T3360] dummy0 (unregistering): left promiscuous mode [ 685.546899][ T3360] team0 (unregistering): Port device dummy0 removed [ 685.567527][T29551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.752768][ T1316] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 685.780136][T28017] smbdirect: ib_dev[syz2] removed [ 685.785501][T28972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.826544][T29644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6304'. [ 685.859216][T29646] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6306'. [ 685.868952][T28972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.092651][T29644] 8021q: adding VLAN 0 to HW filter on device bond9 [ 686.232249][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.257734][T29065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.296980][T29065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.333607][T29065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.414951][T29670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6311'. [ 686.521702][T29065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.866945][T29686] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6314'. [ 687.052558][T29692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6315'. [ 687.066153][T29057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.086793][T29057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.096047][T29693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6316'. [ 687.134162][T29697] netlink: 'syz.1.6317': attribute type 13 has an invalid length. [ 687.148534][T29697] netlink: 'syz.1.6317': attribute type 58 has an invalid length. [ 687.156893][T29696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6315'. [ 687.186899][T29697] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6317'. [ 687.224109][T29070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.249641][T29070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.274551][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.411665][T29706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6318'. [ 687.466123][T29703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6318'. [ 687.480690][T29707] x_tables: duplicate underflow at hook 1 [ 687.636441][T29725] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 687.832226][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.055403][T29746] netlink: 'syz.0.6326': attribute type 21 has an invalid length. [ 688.216868][T29746] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 688.228900][ T50] Bluetooth: hci5: command tx timeout [ 688.301003][T29746] bond10 (unregistering): Released all slaves [ 688.349211][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.610190][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 688.633791][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 688.642650][ T5647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 688.652296][ T5647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 688.665451][ T5647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 688.964829][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.431082][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.934052][T29831] netlink: 'syz.4.6342': attribute type 1 has an invalid length. [ 689.955960][T29831] netlink: 'syz.4.6342': attribute type 1 has an invalid length. [ 690.150007][T29760] lo speed is unknown, defaulting to 1000 [ 690.228927][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.472014][T29857] openvswitch: netlink: IP tunnel TTL not specified. [ 690.480256][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.789409][ T50] Bluetooth: hci4: command tx timeout [ 691.243935][T29888] __nla_validate_parse: 4 callbacks suppressed [ 691.243954][T29888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6352'. [ 691.355202][ T3360] IPVS: stop unused estimator thread 0... [ 691.529728][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.577133][T29881] syzkaller0: entered promiscuous mode [ 691.598102][T29881] syzkaller0: entered allmulticast mode [ 691.721735][T29913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6358'. [ 691.998350][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.186254][T29936] netlink: 'syz.0.6363': attribute type 16 has an invalid length. [ 692.195510][T29936] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6363'. [ 692.588278][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.800047][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.876963][ T50] Bluetooth: hci4: command tx timeout [ 693.442412][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.669446][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.720109][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.948189][ T50] Bluetooth: hci4: command tx timeout [ 695.655167][T29936] veth0_macvtap: entered allmulticast mode [ 695.748841][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.806145][T29978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6367'. [ 695.828483][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.117806][T30000] openvswitch: netlink: IPv4 tun info is not correct [ 696.149947][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6372'. [ 696.172449][T30002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6373'. [ 696.282979][T30001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6372'. [ 696.326459][T29760] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.346798][T29760] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.364032][T29760] bridge_slave_0: entered allmulticast mode [ 696.374118][T29760] bridge_slave_0: entered promiscuous mode [ 696.385693][T29760] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.394427][T29760] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.402511][T29760] bridge_slave_1: entered allmulticast mode [ 696.412687][T29760] bridge_slave_1: entered promiscuous mode [ 696.463246][T29760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.502653][T29760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.563791][T29760] team0: Port device team_slave_0 added [ 696.594649][T29760] team0: Port device team_slave_1 added [ 696.688867][T29760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.712697][T29760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.756027][T30045] openvswitch: netlink: IP tunnel dst address not specified [ 696.784983][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6383'. [ 696.805253][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.815605][T29760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.911864][T29760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.919983][T29760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.966825][T29760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.030850][ T50] Bluetooth: hci4: command tx timeout [ 697.062947][T30064] netlink: 'syz.0.6388': attribute type 11 has an invalid length. [ 697.192732][T30064] netlink: 'syz.0.6388': attribute type 33 has an invalid length. [ 697.210054][T30064] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 697.218506][T30064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6388'. [ 697.230764][T29760] hsr_slave_0: entered promiscuous mode [ 697.245123][T29760] hsr_slave_1: entered promiscuous mode [ 697.253432][T29760] debugfs: 'hsr0' already exists in 'hsr' [ 697.260306][T29760] Cannot create hsr debugfs directory [ 697.275005][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.281188][T30070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6389'. [ 697.292734][T30064] hsr_slave_0: left promiscuous mode [ 697.317335][T30072] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6391'. [ 697.472381][T30077] Bluetooth: MGMT ver 1.23 [ 697.555080][T30082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6394'. [ 697.687022][T29760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.699913][T29760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.752599][T30099] netlink: 83 bytes leftover after parsing attributes in process `syz.3.6397'. [ 697.828968][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.841496][T29760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.853654][T29760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.909178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.142974][T29760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.190346][T29760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.266193][T30115] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6402'. [ 698.314331][T29760] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.325116][T29760] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.634091][T29760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 698.658239][T29760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.667194][T29760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 698.685209][T30144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6410'. [ 698.686122][T29760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.713869][T30140] bridge_slave_0: left allmulticast mode [ 698.719865][T30140] bridge_slave_0: left promiscuous mode [ 698.725761][T30140] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.746577][T30140] bridge_slave_1: left allmulticast mode [ 698.753137][T30140] bridge_slave_1: left promiscuous mode [ 698.760849][T30140] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.783164][T30140] bond0: (slave bond_slave_0): Releasing backup interface [ 698.799479][T30140] bond0: (slave bond_slave_1): Releasing backup interface [ 698.824416][T30140] team0: Port device team_slave_0 removed [ 698.840929][T30140] team0: Port device team_slave_1 removed [ 698.849801][T30140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.857344][T30140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.868988][T30140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.876484][T30140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.888897][T29760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 698.911116][T29760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.925162][T29760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 698.950833][T29760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.074445][T30158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6413'. [ 699.214263][T29760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.240520][T29760] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.254791][T30173] netlink: 'syz.0.6416': attribute type 21 has an invalid length. [ 699.262667][T29058] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.269844][T29058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.293616][T29069] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.300866][T29069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.882702][T30209] netlink: 'syz.0.6427': attribute type 23 has an invalid length. [ 699.919114][ T5636] net_ratelimit: 3 callbacks suppressed [ 699.919130][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.976394][T30212] netlink: 'syz.4.6428': attribute type 1 has an invalid length. [ 700.160939][T30226] openvswitch: netlink: Invalid VLAN frame [ 700.264551][T29760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.341911][T30235] syzkaller0: entered promiscuous mode [ 700.358410][T30235] syzkaller0: entered allmulticast mode [ 700.588521][T29760] veth0_vlan: entered promiscuous mode [ 700.665592][T29760] veth1_vlan: entered promiscuous mode [ 700.691398][T30251] netlink: 'syz.4.6440': attribute type 12 has an invalid length. [ 700.948570][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.354301][T29760] veth0_macvtap: entered promiscuous mode [ 701.373494][T30261] netlink: 'syz.2.6442': attribute type 10 has an invalid length. [ 701.382980][T29760] veth1_macvtap: entered promiscuous mode [ 701.385483][T30261] __nla_validate_parse: 4 callbacks suppressed [ 701.385497][T30261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6442'. [ 701.457782][T29760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.509846][T30261] team0: Port device geneve1 added [ 701.524496][T29760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.563798][T30267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.574222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.601432][T30267] openvswitch: netlink: nsh attr 15107 is out of range max 3 [ 701.620711][T30267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.722366][T30275] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.6448'. [ 701.732665][T30275] openvswitch: netlink: Flow key attr not present in new flow. [ 701.817689][T29067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.826763][T30275] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6448'. [ 701.854739][T30279] syzkaller0: entered promiscuous mode [ 701.870297][T30279] syzkaller0: entered allmulticast mode [ 701.893712][T29067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.904504][T29067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.922187][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.991854][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.054132][T29067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.071296][T30284] xfrm2: entered allmulticast mode [ 702.096279][T30292] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6454'. [ 702.325326][T30299] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6458'. [ 702.348096][T29070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.379655][T29070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.405400][T30307] xt_hl: Unknown Hop Limit match mode: 206 [ 702.407047][T30303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6459'. [ 702.533434][T29058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.562138][T30317] netlink: 'syz.2.6462': attribute type 1 has an invalid length. [ 702.566288][T29058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.627668][T30319] netem: incorrect gi model size [ 702.894987][T30339] ±ÿª¨úrBº“a: renamed from lo (while UP) [ 703.127120][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 703.145896][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 703.162581][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 703.171151][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 703.179264][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 703.482120][T30365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6477'. [ 703.535974][T30365] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 703.574057][T30365] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6477'. [ 703.721822][T30377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6479'. [ 703.790227][T30385] netlink: 'syz.3.6482': attribute type 1 has an invalid length. [ 704.025182][T30399] x_tables: duplicate underflow at hook 3 [ 704.185494][T30411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6489'. [ 704.205133][T30345] lo speed is unknown, defaulting to 1000 [ 704.817578][T30453] netlink: 'syz.4.6497': attribute type 1 has an invalid length. [ 704.875010][T30453] netlink: 'syz.4.6497': attribute type 4 has an invalid length. [ 705.141205][T30345] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.163881][T30345] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.189939][T21723] net_ratelimit: 5 callbacks suppressed [ 705.189955][T21723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.213157][T30345] bridge_slave_0: entered allmulticast mode [ 705.235097][T30345] bridge_slave_0: entered promiscuous mode [ 705.254645][T30345] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.269848][ T5647] Bluetooth: hci2: command tx timeout [ 705.275082][T30345] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.293687][T30345] bridge_slave_1: entered allmulticast mode [ 705.312502][T30345] bridge_slave_1: entered promiscuous mode [ 705.407748][T30345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.457595][T30345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.637265][T30345] team0: Port device team_slave_0 added [ 705.685549][T30345] team0: Port device team_slave_1 added [ 705.716462][T30506] erspan0: entered allmulticast mode [ 705.843904][T30345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.868664][T30345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.901019][T30345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.921512][T30345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.943734][T30345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.991042][T30345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.135498][T30345] hsr_slave_0: entered promiscuous mode [ 706.153089][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.160626][T30345] hsr_slave_1: entered promiscuous mode [ 706.191645][T30345] debugfs: 'hsr0' already exists in 'hsr' [ 706.202873][T30345] Cannot create hsr debugfs directory [ 706.239948][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.494298][T30543] __nla_validate_parse: 9 callbacks suppressed [ 706.494314][T30543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6516'. [ 706.565902][T30551] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6520'. [ 706.581408][T30551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6520'. [ 706.661813][T30556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6521'. [ 706.846978][T30567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6525'. [ 706.870718][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.947329][T30576] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6525'. [ 706.982381][T30345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.003271][T30345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.015324][T30345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 707.054520][T30570] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 707.115631][T29067] tipc: Subscription rejected, illegal request [ 707.158829][T30588] netlink: 'syz.4.6528': attribute type 10 has an invalid length. [ 707.171815][T30588] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6528'. [ 707.234244][T30345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.261387][T30345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.274755][T21723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.289692][T30345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 707.343778][T30597] xt_ecn: cannot match TCP bits for non-tcp packets [ 707.352205][ T5647] Bluetooth: hci2: command tx timeout [ 707.512704][T30345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.526205][T30345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.542653][T30345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 708.104409][T30627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6540'. [ 708.110251][T30345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 708.133357][T30627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6540'. [ 708.139611][T30345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.189727][T30345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 708.217056][T30345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.235346][T30345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 708.264786][T30345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.286000][T30345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 708.312549][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.322278][T30345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.405827][T30640] syzkaller1: entered promiscuous mode [ 708.422616][T30640] syzkaller1: entered allmulticast mode [ 708.455138][T30640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6542'. [ 708.479365][T30640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.484163][T30648] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 708.500494][T30648] bond1 (unregistering): Released all slaves [ 708.533412][T30655] dvmrp0: entered allmulticast mode [ 708.776894][T30676] x_tables: unsorted entry at hook 1 [ 708.801425][T30676] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 708.815432][T30345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.893144][T30345] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.955432][T29044] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.962663][T29044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.065336][T30683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 709.084949][T30690] syzkaller1: entered promiscuous mode [ 709.091471][T30690] syzkaller1: entered allmulticast mode [ 709.109062][T29050] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.116246][T29050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.186848][T30683] syzkaller0: entered promiscuous mode [ 709.199591][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.203212][T30683] syzkaller0: entered allmulticast mode [ 709.300113][T30683] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 709.355624][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.429266][ T5647] Bluetooth: hci2: command tx timeout [ 709.462923][T30715] netlink: 'syz.4.6562': attribute type 1 has an invalid length. [ 709.925271][T30740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.139804][T30755] netlink: 'syz.1.6573': attribute type 1 has an invalid length. [ 710.194522][T30345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.201944][ C1] net_ratelimit: 8 callbacks suppressed [ 710.201963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.209867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.284218][T30345] veth0_vlan: entered promiscuous mode [ 710.302154][T30345] veth1_vlan: entered promiscuous mode [ 710.353028][T30345] veth0_macvtap: entered promiscuous mode [ 710.374159][T30345] veth1_macvtap: entered promiscuous mode [ 710.388385][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.416026][T30345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.435224][T30345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.456437][T30765] netlink: 'syz.4.6575': attribute type 1 has an invalid length. [ 710.471227][T29044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.483280][T29044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.526612][T30765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 710.535460][T29044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.550160][T29052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.620478][T30767] bond3: (slave veth5): Enslaving as an active interface with a down link [ 710.638780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.674366][T30765] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 710.742556][T30767] bond3: (slave veth7): Enslaving as an active interface with a down link [ 710.754507][T30767] netlink: 'syz.4.6575': attribute type 1 has an invalid length. [ 710.772066][T30767] netlink: 'syz.4.6575': attribute type 2 has an invalid length. [ 710.817168][T30740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.990258][T29051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.015350][T29051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.070523][T30785] netlink: 'syz.3.6582': attribute type 17 has an invalid length. [ 711.111477][T29050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.121740][T30788] bridge0: entered promiscuous mode [ 711.123135][T29050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.129129][T30788] bridge0: entered allmulticast mode [ 711.406494][T30805] netlink: 'syz.2.6588': attribute type 1 has an invalid length. [ 711.431904][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.494536][T30805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.508363][ T5647] Bluetooth: hci2: command tx timeout [ 711.647207][T30819] __nla_validate_parse: 10 callbacks suppressed [ 711.647226][T30819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6593'. [ 711.667325][T30817] syzkaller0: entered promiscuous mode [ 711.676323][T30819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6593'. [ 711.693612][T30819] openvswitch: netlink: Flow actions attr not present in new flow. [ 711.712267][T30817] syzkaller0: entered allmulticast mode [ 711.743918][T30827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.754536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.781616][T30827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.902992][T30841] netlink: 'syz.1.6598': attribute type 7 has an invalid length. [ 711.971333][T30841] netlink: 'syz.1.6598': attribute type 7 has an invalid length. [ 711.992485][T30845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6599'. [ 712.021077][T29044] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.030929][T29044] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.062165][T29044] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.075874][T30845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6599'. [ 712.092506][T30849] sctp: [Deprecated]: syz.3.6600 (pid 30849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.092506][T30849] Use struct sctp_sack_info instead [ 712.117096][T29044] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.241376][T30854] sctp: [Deprecated]: syz.1.6602 (pid 30854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.241376][T30854] Use struct sctp_sack_info instead [ 712.270723][T30854] sctp: [Deprecated]: syz.1.6602 (pid 30854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.270723][T30854] Use struct sctp_sack_info instead [ 712.350628][T30861] Cannot find add_set index 46338 as target [ 712.397633][T30863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6606'. [ 712.472285][T30861] syzkaller0: entered promiscuous mode [ 712.490017][T30861] syzkaller0: entered allmulticast mode [ 715.279312][ T5365] net_ratelimit: 11 callbacks suppressed [ 715.279331][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.605085][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.483476][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.631545][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.815038][T30913] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 716.825868][ T5636] IPVS: starting estimator thread 0... [ 716.928376][T30915] IPVS: using max 33 ests per chain, 79200 per kthread [ 716.955126][T30923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6623'. [ 716.983571][T30923] netlink: 'syz.3.6623': attribute type 8 has an invalid length. [ 717.115421][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 717.297252][T30945] tipc: Started in network mode [ 717.332302][T30945] tipc: Node identity ea958ee95e03, cluster identity 4711 [ 717.363790][T30945] tipc: Enabled bearer , priority 0 [ 717.371007][T30947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6633'. [ 717.482050][T30949] syzkaller0: entered promiscuous mode [ 717.503242][T30949] syzkaller0: entered allmulticast mode [ 717.527932][T30949] tipc: Resetting bearer [ 717.546184][T30957] netlink: 'syz.3.6635': attribute type 12 has an invalid length. [ 717.565067][T30957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6635'. [ 717.595680][T30937] tipc: Resetting bearer [ 717.673016][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.733070][T30975] netlink: 'syz.4.6640': attribute type 21 has an invalid length. [ 717.741443][T30975] IPv6: NLM_F_CREATE should be specified when creating new route [ 717.751686][T30975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 717.758968][T30975] IPv6: NLM_F_CREATE should be set when creating new route [ 717.766251][T30975] IPv6: NLM_F_CREATE should be set when creating new route [ 717.773525][T30975] IPv6: NLM_F_CREATE should be set when creating new route [ 718.316669][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.715318][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.764051][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.803250][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.164205][T30937] tipc: Disabling bearer [ 721.175839][T30980] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 721.178563][ T46] tipc: Node number set to 3029765865 [ 721.338250][T31005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6649'. [ 721.350015][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.352979][T31005] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6649'. [ 721.400339][T31010] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.6650'. [ 721.503062][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6647'. [ 721.540536][T31002] syz_tun: entered promiscuous mode [ 721.702185][T31030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6655'. [ 721.828664][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.875119][T31041] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6659'. [ 721.916258][T31034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6656'. [ 721.943966][T31040] netlink: 'syz.2.6657': attribute type 10 has an invalid length. [ 722.069097][T31057] __nla_validate_parse: 1 callbacks suppressed [ 722.069115][T31057] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6663'. [ 722.175194][T31062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.226606][T31064] atomic_op ffff888025bf9998 conn xmit_atomic 0000000000000000 [ 722.238585][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.329978][T31072] syzkaller0: entered promiscuous mode [ 722.358681][T31072] syzkaller0: entered allmulticast mode [ 722.634519][T31079] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.642268][T31079] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.740748][T31098] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.6675'. [ 722.786516][T31101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6676'. [ 722.842522][T31106] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6677'. [ 722.872666][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.902499][T31079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.922069][T31079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.136406][T31098] netlink: 'syz.1.6675': attribute type 5 has an invalid length. [ 723.175850][T29054] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.306849][T29054] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.327906][T31121] ipt_ECN: cannot use operation on non-tcp rule [ 723.364202][T29054] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.405485][T29054] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.516955][T31129] netlink: 'syz.2.6683': attribute type 1 has an invalid length. [ 723.581081][T31129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 723.604850][T31136] vlan2: entered promiscuous mode [ 723.611927][T31136] bond2: entered promiscuous mode [ 723.617219][T31136] vlan2: entered allmulticast mode [ 723.639973][T31136] bond2: entered allmulticast mode [ 723.690865][T31138] netlink: 'syz.4.6686': attribute type 1 has an invalid length. [ 723.702086][T31138] netlink: 'syz.4.6686': attribute type 24 has an invalid length. [ 723.744090][T31129] bond2: (slave bridge1): making interface the new active one [ 723.770494][T31129] bridge1: entered promiscuous mode [ 723.781423][T31129] bridge1: entered allmulticast mode [ 723.797624][T31129] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 723.911290][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.176707][T31169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6690'. [ 724.250290][T31169] bond2: Invalid ad_actor_system MAC address. [ 724.288835][T31169] bond2: option ad_actor_system: invalid value (1) [ 724.331920][T31169] bond2 (unregistering): Released all slaves [ 724.472589][T31186] netlink: 'syz.1.6694': attribute type 21 has an invalid length. [ 724.983711][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.269464][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.603060][T31242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6704'. [ 725.989647][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.046273][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.084682][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.315059][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.635453][T31247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.674047][T31247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.684510][T31247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.695936][T31247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.706985][T31247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.717262][T31247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.743073][T31248] gtp1: entered allmulticast mode [ 728.757564][T31248] gtp1: entered promiscuous mode [ 728.783283][T31248] team0: Device gtp1 is of different type [ 728.794690][T31250] netlink: 'syz.2.6710': attribute type 26 has an invalid length. [ 728.811993][T31247] netlink: 'syz.3.6709': attribute type 9 has an invalid length. [ 728.823163][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6710'. [ 728.837787][T31247] netlink: 'syz.3.6709': attribute type 6 has an invalid length. [ 728.874632][T31250] netlink: 'syz.2.6710': attribute type 26 has an invalid length. [ 728.888966][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6710'. [ 728.906274][T31258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6714'. [ 729.006427][T31263] syzkaller1: entered promiscuous mode [ 729.033762][T31263] syzkaller1: entered allmulticast mode [ 729.113178][T31269] netlink: 'syz.4.6718': attribute type 21 has an invalid length. [ 729.123480][T31273] netlink: 'syz.2.6720': attribute type 4 has an invalid length. [ 729.134717][T31269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6718'. [ 729.145217][T31273] netlink: 'syz.2.6720': attribute type 4 has an invalid length. [ 729.451882][T31292] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6726'. [ 729.748900][T31304] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 729.759621][T31307] nbd: socks must be embedded in a SOCK_ITEM attr [ 729.792064][T31304] bond2 (unregistering): Released all slaves [ 729.846694][T31311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6731'. [ 730.307167][T31341] xt_connbytes: Forcing CT accounting to be enabled [ 730.416587][T31353] macvlan0: entered promiscuous mode [ 730.633357][T31368] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.6747'. [ 730.845554][T31381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6751'. [ 730.875513][T31381] netlink: 'syz.1.6751': attribute type 18 has an invalid length. [ 730.893439][T31381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6751'. [ 730.976794][T31395] netlink: 'syz.0.6753': attribute type 1 has an invalid length. [ 731.071148][T31381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6751'. [ 731.116653][T31381] netlink: 'syz.1.6751': attribute type 18 has an invalid length. [ 731.189285][ T46] net_ratelimit: 13 callbacks suppressed [ 731.189303][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.352754][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.424606][T31419] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 731.606418][T31435] syzkaller0: entered promiscuous mode [ 731.613268][T31435] syzkaller0: entered allmulticast mode [ 731.697376][T31430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.810190][T31449] ip6gre1: entered allmulticast mode [ 731.974887][T31455] xt_hashlimit: size too large, truncated to 1048576 [ 732.230688][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.474733][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.503946][T31486] tipc: Started in network mode [ 732.510239][T31486] tipc: Node identity fe42d5242aa4, cluster identity 4711 [ 732.518933][T31486] tipc: Enabled bearer , priority 0 [ 732.589566][T31486] syzkaller0: entered promiscuous mode [ 732.595090][T31486] syzkaller0: entered allmulticast mode [ 732.602362][T31486] tipc: Resetting bearer [ 732.611482][T31494] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 732.657762][T31498] x_tables: unsorted underflow at hook 3 [ 732.975233][T29054] tipc: Resetting bearer [ 733.270220][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.325756][T31485] tipc: Resetting bearer [ 734.327066][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.359060][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.523835][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.402038][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.979357][T31485] tipc: Disabling bearer [ 737.032497][ T9164] tipc: Node number set to 3571897636 [ 737.154119][T31555] __nla_validate_parse: 7 callbacks suppressed [ 737.154137][T31555] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6791'. [ 737.225498][T31562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6791'. [ 737.250683][T31555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6791'. [ 737.262079][T31563] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6794'. [ 737.296945][T31555] : entered promiscuous mode [ 737.311028][T31567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.323875][T31563] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 737.428903][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.500319][T31581] xt_hashlimit: size too large, truncated to 1048576 [ 737.542154][T31583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6801'. [ 737.744385][T31610] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6806'. [ 737.844383][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 738.044303][T31637] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6812'. [ 738.111558][T31644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6812'. [ 738.201666][T31648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6814'. [ 738.226340][T31650] gtp0: entered promiscuous mode [ 738.236139][T31650] gtp0: entered allmulticast mode [ 738.468946][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.507884][T31667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6818'. [ 738.551010][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.511888][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.549407][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.659855][T31605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.675247][T31688] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 740.857650][T31707] validate_nla: 5 callbacks suppressed [ 740.857669][T31707] netlink: 'syz.3.6829': attribute type 33 has an invalid length. [ 740.985616][T31717] netlink: 'syz.0.6832': attribute type 1 has an invalid length. [ 740.995703][T31707] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 741.021431][T31707] bond2 (unregistering): Released all slaves [ 741.220235][T31738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.253885][T31731] syzkaller0: entered promiscuous mode [ 741.292697][T31731] syzkaller0: entered allmulticast mode [ 741.338323][T31740] netlink: 'syz.3.6836': attribute type 1 has an invalid length. [ 741.415806][T31747] sctp: [Deprecated]: syz.4.6838 (pid 31747) Use of int in max_burst socket option. [ 741.415806][T31747] Use struct sctp_assoc_value instead [ 741.434833][T31748] sctp: [Deprecated]: syz.4.6838 (pid 31748) Use of int in max_burst socket option. [ 741.434833][T31748] Use struct sctp_assoc_value instead [ 741.588543][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.596603][T31745] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 741.608978][T31745] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 741.610497][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.626414][T31745] bond2: (slave ip6gre1): making interface the new active one [ 741.639589][T31745] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 741.842796][T31767] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 741.944575][T31773] netlink: 'syz.3.6845': attribute type 1 has an invalid length. [ 742.014746][T31775] GUP no longer grows the stack in syz.3.6845 (31775): 200000003000-20000000a000 (200000001000) [ 742.055451][T31773] bond3: entered promiscuous mode [ 742.069699][T31775] CPU: 0 UID: 0 PID: 31775 Comm: syz.3.6845 Not tainted syzkaller #0 PREEMPT(full) [ 742.069725][T31775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.069737][T31775] Call Trace: [ 742.069745][T31775] [ 742.069754][T31775] dump_stack_lvl+0xe8/0x150 [ 742.069785][T31775] __get_user_pages+0x2378/0x2730 [ 742.069830][T31775] ? __gup_longterm_locked+0xc4e/0x1630 [ 742.069852][T31775] ? down_read_killable+0x1bb/0x340 [ 742.069962][T31775] __gup_longterm_locked+0xdcf/0x1630 [ 742.069987][T31775] ? lock_acquire+0x106/0x350 [ 742.070040][T31775] gup_fast_fallback+0x1d84/0x20d0 [ 742.070092][T31775] ? __pfx_gup_fast_fallback+0x10/0x10 [ 742.070116][T31775] ? is_valid_gup_args+0x11f/0x200 [ 742.070139][T31775] ? get_user_pages_fast+0x4d/0xb0 [ 742.070162][T31775] __iov_iter_get_pages_alloc+0x370/0xa10 [ 742.070252][T31775] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 742.070302][T31775] iov_iter_get_pages2+0x5e/0xa0 [ 742.070327][T31775] __se_sys_vmsplice+0x7c7/0x1620 [ 742.070369][T31775] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 742.070396][T31775] ? __pfx_futex_wake+0x10/0x10 [ 742.070486][T31775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.070506][T31775] do_syscall_64+0x174/0x580 [ 742.070524][T31775] ? trace_irq_disable+0x3b/0x140 [ 742.070548][T31775] ? clear_bhb_loop+0x40/0x90 [ 742.070573][T31775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.070590][T31775] RIP: 0033:0x7fbd0a99ce59 [ 742.070608][T31775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.070623][T31775] RSP: 002b:00007fbd0b8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 742.070641][T31775] RAX: ffffffffffffffda RBX: 00007fbd0ac16090 RCX: 00007fbd0a99ce59 [ 742.070654][T31775] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 742.070665][T31775] RBP: 00007fbd0aa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 742.070677][T31775] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 742.070687][T31775] R13: 00007fbd0ac16128 R14: 00007fbd0ac16090 R15: 00007ffc19aafb78 [ 742.070722][T31775] [ 742.290406][T31773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 742.376427][T31773] __nla_validate_parse: 4 callbacks suppressed [ 742.376445][T31773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6845'. [ 742.394394][T31783] netlink: 'syz.2.6849': attribute type 1 has an invalid length. [ 742.409227][T31773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6845'. [ 742.432799][T31788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6850'. [ 742.452010][T31788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6850'. [ 742.463522][T31788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6850'. [ 742.475305][T31788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6850'. [ 742.496644][T31788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6850'. [ 742.506013][T31775] bond3: (slave bridge5): making interface the new active one [ 742.506037][T31775] bridge5: entered promiscuous mode [ 742.519271][T31775] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 742.628364][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.721130][T31799] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6854'. [ 742.741434][T31799] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6854'. [ 742.826859][T31797] syzkaller1: entered promiscuous mode [ 742.840139][T31797] syzkaller1: entered allmulticast mode [ 742.976606][T31818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6860'. [ 743.225412][T31827] netlink: 'syz.3.6865': attribute type 3 has an invalid length. [ 743.272547][T31833] netlink: 'syz.2.6866': attribute type 1 has an invalid length. [ 743.277192][T31837] erspan0: entered promiscuous mode [ 743.301377][T31833] netlink: 'syz.2.6866': attribute type 2 has an invalid length. [ 743.410955][T31839] pim6reg: entered allmulticast mode [ 743.493890][T31845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.557108][T31848] openvswitch: netlink: Missing valid actions attribute. [ 743.565325][T31848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.660457][T31841] syzkaller0: entered promiscuous mode [ 743.674921][T31853] xt_hashlimit: overflow, rate too high: 0 [ 743.688172][T31841] syzkaller0: entered allmulticast mode [ 743.731437][T31845] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 743.742239][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.775944][T31845] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 743.843369][T31849] : entered promiscuous mode [ 743.877168][T31856] netlink: 'syz.4.6874': attribute type 1 has an invalid length. [ 744.642161][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.813500][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.835326][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.878939][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.191067][ T1316] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 747.603395][T31883] __nla_validate_parse: 5 callbacks suppressed [ 747.603415][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6879'. [ 747.660217][T31889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.685442][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.713968][T31883] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6879'. [ 747.757406][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6879'. [ 747.791300][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6879'. [ 747.801006][T31899] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6883'. [ 747.822397][T31884] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6879'. [ 747.834257][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6879'. [ 747.889478][T31909] 8021q: VLANs not supported on ip6tnl0 [ 747.913041][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.957809][T31913] netlink: 'syz.4.6887': attribute type 21 has an invalid length. [ 747.972174][T31913] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6887'. [ 747.983939][T31913] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6887'. [ 748.084342][T31924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6891'. [ 748.153692][T29053] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.176857][T29053] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.203638][T29053] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.232214][T29053] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.950242][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.987327][T31985] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 749.109321][T29050] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 749.177123][T31998] netlink: 'syz.3.6912': attribute type 4 has an invalid length. [ 749.245330][T32009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.392588][T32016] syzkaller0: entered promiscuous mode [ 749.401574][T32016] syzkaller0: entered allmulticast mode [ 749.410737][T32007] tipc: Enabled bearer , priority 0 [ 749.521421][T32006] tipc: Disabling bearer [ 749.594855][T32028] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 749.612676][T32028] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 749.621716][T32028] gretap1: entered promiscuous mode [ 749.626978][T32028] gretap1: entered allmulticast mode [ 749.637659][T32028] netlink: 'syz.3.6918': attribute type 83 has an invalid length. [ 749.990237][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.711363][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.055882][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.076447][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.120370][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.594791][T32033] netem: change failed [ 753.751532][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.931399][T32045] __nla_validate_parse: 8 callbacks suppressed [ 753.931416][T32045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6923'. [ 754.003552][T32067] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6928'. [ 754.026215][T32066] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 754.041259][T32067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6928'. [ 754.102645][T32045] hsr_slave_1 (unregistering): left promiscuous mode [ 754.154634][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.271947][T32080] netlink: 'syz.1.6930': attribute type 1 has an invalid length. [ 754.430837][T32092] openvswitch: netlink: EtherType 50a is less than min 600 [ 754.464547][T32086] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 754.706183][T32080] macvlan2: entered promiscuous mode [ 754.712843][T32080] macvlan2: entered allmulticast mode [ 754.721121][T32080] bond2: entered promiscuous mode [ 754.726271][T32080] bridge1: entered promiscuous mode [ 754.732572][T32080] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 754.741055][T32080] bond2: left promiscuous mode [ 754.745854][T32080] bridge1: left promiscuous mode [ 754.922364][T32115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6941'. [ 754.944187][T32116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6941'. [ 754.953405][T32121] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.6943'. [ 754.974292][T32113] netlink: 'syz.4.6940': attribute type 1 has an invalid length. [ 755.001838][T32113] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.6940'. [ 755.188819][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.303188][T32141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6950'. [ 755.504818][T32155] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 755.734990][T32163] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6956'. [ 755.785685][T32162] openvswitch: netlink: IPv4 tunnel dst address is zero [ 755.804884][T32163] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6956'. [ 756.045487][T32154] infiniband syz2: set active [ 756.058789][T32154] infiniband syz2: added veth1_vlan [ 756.137399][T32154] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 756.173997][T32154] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 756.198794][T32154] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 756.216041][T32185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.250841][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.384923][T32154] RDS/IB: syz2: added [ 756.389312][T32154] smc: adding ib device syz2 with port count 1 [ 756.410162][T32154] smc: ib device syz2 port 1 has no pnetid [ 756.651119][T32208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.791135][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.898871][T32217] netlink: 'syz.2.6971': attribute type 1 has an invalid length. [ 756.942101][T32217] netlink: 'syz.2.6971': attribute type 1 has an invalid length. [ 756.974913][T32217] netlink: 'syz.2.6971': attribute type 8 has an invalid length. [ 757.058732][T32228] netlink: 'syz.1.6972': attribute type 3 has an invalid length. [ 757.268792][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.797040][T32259] xt_l2tp: unknown flags: 10 [ 757.864686][T32258] netlink: 'syz.2.6982': attribute type 5 has an invalid length. [ 758.308430][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.651391][T32300] netlink: 'syz.0.6992': attribute type 8 has an invalid length. [ 758.680414][T32300] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.689967][T32300] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.906037][T32304] syzkaller0: entered promiscuous mode [ 758.927777][T32304] syzkaller0: entered allmulticast mode [ 759.167496][T32321] __nla_validate_parse: 16 callbacks suppressed [ 759.167514][T32321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6999'. [ 759.333850][T32331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7000'. [ 759.355078][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.373953][T32337] syz_tun: entered allmulticast mode [ 759.375953][T32331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7000'. [ 759.403087][T32337] bond0: entered promiscuous mode [ 759.421624][T32337] bond_slave_0: entered promiscuous mode [ 759.440374][T32337] bond_slave_1: entered promiscuous mode [ 759.466229][T32331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7000'. [ 759.504544][T32329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7001'. [ 759.676585][T32346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7007'. [ 759.788362][T32357] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7005'. [ 759.830477][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.894263][T32361] openvswitch: netlink: nsh attr 222 is out of range max 3 [ 759.931114][T32361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7009'. [ 760.044139][T32365] tipc: Started in network mode [ 760.054250][T32365] tipc: Node identity ac14140f, cluster identity 4711 [ 760.079621][T32365] tipc: New replicast peer: 255.255.255.255 [ 760.095452][T32365] tipc: Enabled bearer , priority 10 [ 760.105807][T32367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7011'. [ 760.389743][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.180446][T32411] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7020'. [ 761.209192][ T5756] tipc: Node number set to 2886997007 [ 761.405734][T32415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.430751][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.657319][T32435] tipc: Enabling of bearer rejected, failed to enable media [ 761.744680][T32434] veth3: entered allmulticast mode [ 761.775091][T32440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.795598][T32440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.804789][T32440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.810437][T32434] netlink: 'syz.1.7028': attribute type 1 has an invalid length. [ 761.840127][T32434] netlink: 'syz.1.7028': attribute type 1 has an invalid length. [ 761.847938][T32434] netlink: 'syz.1.7028': attribute type 2 has an invalid length. [ 762.072372][T32456] batadv_slave_1: entered promiscuous mode [ 762.079931][T32454] batadv_slave_1: left promiscuous mode [ 762.384531][T32469] syzkaller0: entered promiscuous mode [ 762.401966][T32469] syzkaller0: entered allmulticast mode [ 762.470427][ T46] net_ratelimit: 2 callbacks suppressed [ 762.470443][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.622544][T32481] syzkaller0: entered promiscuous mode [ 762.640198][T32481] syzkaller0: entered allmulticast mode [ 762.870942][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.626780][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.136329][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b2bcc00: rx timeout, send abort [ 764.337110][T32561] bond2: entered promiscuous mode [ 764.370085][T32561] __nla_validate_parse: 4 callbacks suppressed [ 764.370104][T32561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7073'. [ 764.399438][T32561] veth0_macvtap: left promiscuous mode [ 764.630997][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 764.634457][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.645621][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b2be400: rx timeout, send abort [ 764.653855][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b2bcc00: abort rx timeout. Force session deactivation [ 764.950026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.960389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.968791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.997186][T32601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7084'. [ 765.020456][T32597] syzkaller0: entered promiscuous mode [ 765.028966][T32601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7084'. [ 765.040587][T32597] syzkaller0: entered allmulticast mode [ 765.153864][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b2be400: abort rx timeout. Force session deactivation [ 765.251272][T32614] tipc: Enabled bearer , priority 0 [ 765.284210][T32608] syzkaller0: entered promiscuous mode [ 765.316862][T32608] syzkaller0: entered allmulticast mode [ 765.368376][T32608] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 765.447405][T32607] tipc: Resetting bearer [ 765.513392][T32607] tipc: Disabling bearer [ 765.579923][T32630] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 765.670489][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.854544][T32644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7100'. [ 765.933693][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.065281][T32662] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7105'. [ 766.097606][T32655] xt_hashlimit: size too large, truncated to 1048576 [ 766.184594][T32672] x_tables: duplicate underflow at hook 3 [ 766.211744][T32673] syzkaller0: entered promiscuous mode [ 766.223110][T32673] syzkaller0: entered allmulticast mode [ 766.441322][T32677] netlink: 'syz.1.7107': attribute type 83 has an invalid length. [ 766.459217][T32679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.707066][T32697] netlink: 'syz.3.7111': attribute type 12 has an invalid length. [ 766.718968][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.055948][T32716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 767.073415][T32713] netlink: 'syz.3.7115': attribute type 1 has an invalid length. [ 767.355126][T32744] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7126'. [ 767.405489][T32748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7127'. [ 767.423367][T32748] ip6gre1: entered allmulticast mode [ 767.697713][T32758] netlink: 'syz.2.7130': attribute type 9 has an invalid length. [ 767.759031][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.852546][T32763] bridge0: port 3(team0) entered disabled state [ 767.859216][T32763] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.866591][T32763] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.982056][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.002036][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.163230][T29066] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.200810][T29066] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.214645][T29066] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.224540][T29066] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.289338][ T314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7136'. [ 768.354983][ T314] bond6 (unregistering): Released all slaves [ 768.666233][ T336] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 768.702703][ T343] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 768.988290][ T358] syzkaller0: entered promiscuous mode [ 768.989129][ T355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7147'. [ 768.994899][ T356] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 769.004856][ T358] syzkaller0: entered allmulticast mode [ 769.157677][ T355] bond0: left promiscuous mode [ 769.162933][ T355] bond_slave_0: left promiscuous mode [ 769.169243][ T355] bond_slave_1: left promiscuous mode [ 769.176708][ T355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.186458][ T355] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.215089][ T355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.276710][ T355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.286222][ T355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.301099][ T355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 769.311943][ T355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.330475][ T355] veth1_vlan: left promiscuous mode [ 769.337449][ T355] veth0_vlan: left promiscuous mode [ 769.344644][ T355] veth0_vlan: entered promiscuous mode [ 769.355237][ T355] veth1_vlan: entered promiscuous mode [ 769.369905][ T355] veth1_macvtap: left promiscuous mode [ 769.389632][ T355] veth0_macvtap: left promiscuous mode [ 769.405941][ T355] veth0_macvtap: entered promiscuous mode [ 769.415196][ T355] veth1_macvtap: entered promiscuous mode [ 769.438611][ T355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 769.449714][ T355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 769.459333][ T355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.468985][ T355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.525596][ T355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.536663][ T355] vlan2: left promiscuous mode [ 769.543110][ T355] bond2: left promiscuous mode [ 769.548216][ T355] bridge1: left promiscuous mode [ 769.553771][ T355] vlan2: left allmulticast mode [ 769.559511][ T355] bond2: left allmulticast mode [ 769.564487][ T355] bridge1: left allmulticast mode [ 769.579519][ T355] ip6gre1: left allmulticast mode [ 769.585229][ T355] bond0: entered promiscuous mode [ 769.591494][ T355] bond_slave_0: entered promiscuous mode [ 769.597421][ T355] bond_slave_1: entered promiscuous mode [ 769.607622][ T355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 769.670136][T29053] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.677336][T29053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.707562][T29053] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.714767][T29053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.787052][ T383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7151'. [ 769.820329][ T386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7152'. [ 769.837228][ T387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.855146][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.879470][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.967489][ T372] syzkaller0: entered promiscuous mode [ 769.975635][ T372] syzkaller0: entered allmulticast mode [ 769.996379][T29053] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.009868][T29053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.022163][T29053] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.048690][T29053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.142908][ T398] netlink: 'syz.0.7155': attribute type 1 has an invalid length. [ 774.289053][T29053] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.297843][T29053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.307496][ T398] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 774.522775][ T412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 774.663666][ T430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7165'. [ 774.682135][ T430] IPv6: NLM_F_CREATE should be specified when creating new route [ 774.694119][ T429] netlink: 'syz.1.7166': attribute type 1 has an invalid length. [ 774.703909][ T429] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7166'. [ 774.726860][ T429] netlink: 'syz.1.7166': attribute type 1 has an invalid length. [ 774.754159][ T429] netlink: 'syz.1.7166': attribute type 8 has an invalid length. [ 774.770248][ T429] netlink: 606 bytes leftover after parsing attributes in process `syz.1.7166'. [ 774.802744][ T434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7167'. [ 774.871941][ T429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 774.963203][ T5647] Bluetooth: hci2: link tx timeout [ 774.967924][ T441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7169'. [ 774.983426][ T5647] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 775.044854][ T441] tipc: Enabled bearer , priority 10 [ 775.197816][ T453] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7173'. [ 775.211513][ T453] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7173'. [ 775.242666][ T453] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7173'. [ 775.475169][ T464] netlink: 'syz.1.7178': attribute type 1 has an invalid length. [ 775.547748][ T473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7181'. [ 775.613294][ T467] xt_socket: unknown flags 0xe4 [ 775.715679][ T5647] block nbd5: Receive control failed (result -1) [ 775.766093][ T479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7183'. [ 775.846972][ T485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7185'. [ 776.031192][ T492] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7187'. [ 776.121330][ T495] syzkaller0: entered promiscuous mode [ 776.144907][ T500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7189'. [ 776.165385][ T495] syzkaller0: entered allmulticast mode [ 776.167576][ T500] netlink: 'syz.0.7189': attribute type 7 has an invalid length. [ 776.196704][ T500] netlink: 'syz.0.7189': attribute type 8 has an invalid length. [ 776.295909][T29066] tipc: Subscription rejected, illegal request [ 776.591524][ T522] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 776.840887][ T539] veth0_macvtap: entered allmulticast mode [ 776.846982][ T539] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 777.033330][ T5647] Bluetooth: hci2: command 0x0406 tx timeout [ 777.607426][ T573] syzkaller0: entered promiscuous mode [ 777.629449][ T573] syzkaller0: entered allmulticast mode [ 778.205304][ T605] netlink: 'syz.2.7220': attribute type 28 has an invalid length. [ 778.253612][ T605] netlink: 'syz.2.7220': attribute type 3 has an invalid length. [ 778.576334][ T617] can: request_module (can-proto-5) failed. [ 780.000454][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 781.115266][T29059] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 781.649137][ T594] bond0: (slave bond_slave_0): Releasing backup interface [ 781.932141][ T631] __nla_validate_parse: 6 callbacks suppressed [ 781.932159][ T631] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7226'. [ 782.024420][ T637] xt_hashlimit: size too large, truncated to 1048576 [ 782.156989][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7230'. [ 782.521077][ T667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7235'. [ 782.748276][ T676] mac80211_hwsim hwsim64 ÿ: renamed from wlan1 (while UP) [ 783.506443][ T726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7250'. [ 783.519041][ T724] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 783.545031][ T724] syzkaller1: group set to 0 [ 783.585468][ T726] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 783.805388][ T739] tipc: Enabling of bearer rejected, failed to enable media [ 783.859375][ T740] tipc: Enabling of bearer rejected, failed to enable media [ 783.933299][ T749] xt_hashlimit: size too large, truncated to 1048576 [ 784.221522][ T5365] IPVS: starting estimator thread 0... [ 784.331019][ T768] IPVS: using max 31 ests per chain, 74400 per kthread [ 784.389583][ T776] netlink: 4781 bytes leftover after parsing attributes in process `syz.4.7267'. [ 784.405554][ T776] tipc: Enabling of bearer rejected, media not registered [ 784.556520][ T790] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7271'. [ 784.569693][ T792] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7271'. [ 784.673740][ T800] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“a may have been left with an inconsistent configuration, please check. [ 784.698616][ T798] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“a may have been left with an inconsistent configuration, please check. [ 784.752457][ T804] syzkaller0: entered promiscuous mode [ 784.776302][ T804] syzkaller0: entered allmulticast mode [ 785.055736][ T814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7277'. [ 785.173292][ T817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7278'. [ 785.427571][ T826] netlink: 'syz.4.7280': attribute type 10 has an invalid length. [ 785.464607][ T826] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7280'. [ 785.829259][T29066] wlan1: Trigger new scan to find an IBSS to join [ 786.394193][ T864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 786.485346][ T876] netem: change failed [ 786.655927][ T881] veth3: entered promiscuous mode [ 786.668821][ T888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.741786][ T893] openvswitch: netlink: IP tunnel dst address not specified [ 786.827161][ T899] netlink: 'syz.3.7301': attribute type 1 has an invalid length. [ 787.057030][ T911] netlink: 'syz.2.7305': attribute type 1 has an invalid length. [ 787.141026][ T911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 787.156992][ T920] __nla_validate_parse: 6 callbacks suppressed [ 787.157010][ T920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7307'. [ 787.264266][ T932] lo speed is unknown, defaulting to 1000 [ 787.727714][ T968] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7318'. [ 787.949584][ T977] veth0: entered promiscuous mode [ 787.989548][ T981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7323'. [ 788.196285][ T990] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 788.225714][ T990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.237124][ T984] veth0: left promiscuous mode [ 788.351418][ T995] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7326'. [ 788.477851][ T1001] netlink: 4512 bytes leftover after parsing attributes in process `syz.3.7327'. [ 788.507680][ T1001] openvswitch: netlink: Flow key attr not present in new flow. [ 788.686284][ T1007] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7329'. [ 788.795212][T29053] wlan1: Trigger new scan to find an IBSS to join [ 788.955649][ T1014] syzkaller0: entered promiscuous mode [ 788.964434][ T1016] IPVS: length: 96 != 520133856 [ 788.969623][ T1014] syzkaller0: entered allmulticast mode [ 788.992185][ T1014] netlink: 1028 bytes leftover after parsing attributes in process `syz.4.7332'. [ 789.027793][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7330'. [ 789.212849][ T1024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.296217][ T1038] gretap0: entered promiscuous mode [ 789.504652][ T1068] syzkaller0: entered promiscuous mode [ 789.510757][ T1068] syzkaller0: entered allmulticast mode [ 789.734057][ T1086] sctp: [Deprecated]: syz.2.7349 (pid 1086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.734057][ T1086] Use struct sctp_sack_info instead [ 789.755021][ T1086] sctp: [Deprecated]: syz.2.7349 (pid 1086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.755021][ T1086] Use struct sctp_sack_info instead [ 789.789386][ T1086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7349'. [ 789.907049][ T1093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7351'. [ 790.113902][ T1044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 790.477206][ T1123] netlink: 'syz.3.7358': attribute type 28 has an invalid length. [ 790.504680][ T1123] netlink: 'syz.3.7358': attribute type 3 has an invalid length. [ 790.538476][ T1125] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 790.668902][ T1139] syzkaller0: entered promiscuous mode [ 790.684748][ T1139] syzkaller0: entered allmulticast mode [ 790.701155][ T1132] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 790.965639][ T1156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 790.981241][ T1156] IPv6: NLM_F_CREATE should be set when creating new route [ 790.988539][ T1156] IPv6: NLM_F_CREATE should be set when creating new route [ 791.166163][ T1172] xt_hashlimit: size too large, truncated to 1048576 [ 791.240434][ T1174] batadv_slave_1: entered promiscuous mode [ 791.750017][ T1205] x_tables: duplicate underflow at hook 1 [ 791.830276][T29066] wlan1: Trigger new scan to find an IBSS to join [ 792.105068][ T1233] netlink: 'syz.0.7391': attribute type 1 has an invalid length. [ 792.149025][ T1236] syzkaller1: entered promiscuous mode [ 792.173197][ T1236] syzkaller1: entered allmulticast mode [ 792.343728][ T1253] netlink: zone id is out of range [ 792.361055][ T1253] netlink: zone id is out of range [ 792.369261][ T1253] netlink: zone id is out of range [ 792.390459][ T1253] netlink: zone id is out of range [ 792.422240][ T1253] netlink: zone id is out of range [ 792.448911][ T1253] netlink: zone id is out of range [ 792.456211][ T1253] netlink: zone id is out of range [ 792.487342][ T1253] netlink: zone id is out of range [ 792.519013][ T1253] netlink: zone id is out of range [ 792.534222][ T1253] netlink: zone id is out of range [ 792.762679][ T12] wlan1: Creating new IBSS network, BSSID 72:f5:5c:18:1e:4f [ 792.807528][ T1267] siw: device registration error -23 [ 792.835246][ T1270] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 792.892881][ T1270] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 792.916015][ T1270] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 792.950114][ T1270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 792.990299][ T1279] __nla_validate_parse: 18 callbacks suppressed [ 792.990319][ T1279] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7405'. [ 793.052150][ T1285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7405'. [ 793.091021][ T1279] bond3 (unregistering): Released all slaves [ 793.116555][ T1289] xt_addrtype: ipv6 does not support BROADCAST matching [ 793.146528][ T1290] xt_addrtype: ipv6 does not support BROADCAST matching [ 793.338808][ T1297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7409'. [ 793.366619][ T1295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7410'. [ 793.446713][ T1305] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7412'. [ 793.678424][ T1324] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7417'. [ 793.849929][ T1340] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7421'. [ 794.031546][ T1314] nbd6: detected capacity change from 0 to 63 [ 794.043325][ T50] block nbd6: Receive control failed (result -32) [ 794.052874][ T5647] block nbd6: Receive control failed (result -32) [ 794.114498][ T1356] netlink: 'syz.0.7426': attribute type 1 has an invalid length. [ 794.127359][ T1283] block nbd6: Send control failed (result -32) [ 794.156819][ T1356] ip6gretap1: entered promiscuous mode [ 794.162467][ T1356] ip6gretap1: entered allmulticast mode [ 794.174625][ T1356] bond3: (slave ip6gretap1): making interface the new active one [ 794.182649][ T1283] block nbd6: Request send failed, requeueing [ 794.190878][ T1356] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 794.201469][ T1356] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 794.221617][ T1356] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 794.226894][ T2377] block nbd6: Dead connection, failed to find a fallback [ 794.242812][ T2377] block nbd6: shutting down sockets [ 794.248980][ T2377] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.264734][ T2377] Buffer I/O error on dev nbd6, logical block 0, async page read [ 794.273811][ T1283] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.285399][ T1283] Buffer I/O error on dev nbd6, logical block 1, async page read [ 794.295197][ T1283] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.310757][ T1283] Buffer I/O error on dev nbd6, logical block 2, async page read [ 794.319741][ T1283] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.328859][ T1283] Buffer I/O error on dev nbd6, logical block 3, async page read [ 794.336778][ T1283] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.346211][ T1283] Buffer I/O error on dev nbd6, logical block 0, async page read [ 794.355052][ T1283] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.364204][ T1283] Buffer I/O error on dev nbd6, logical block 1, async page read [ 794.377000][ T1283] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.389107][ T1283] Buffer I/O error on dev nbd6, logical block 2, async page read [ 794.404325][ T1283] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.422355][ T1283] Buffer I/O error on dev nbd6, logical block 3, async page read [ 794.432271][ T1283] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.443332][ T1283] Buffer I/O error on dev nbd6, logical block 0, async page read [ 794.452553][ T1283] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 794.484168][ T1283] Buffer I/O error on dev nbd6, logical block 1, async page read [ 794.520696][ T1283] ldm_validate_partition_table(): Disk read failed. [ 794.560764][ T1283] Dev nbd6: unable to read RDB block 0 [ 794.570507][ T1283] nbd6: unable to read partition table [ 794.597894][ T1367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7430'. [ 794.599613][ T1283] ldm_validate_partition_table(): Disk read failed. [ 794.615445][ T1283] Dev nbd6: unable to read RDB block 0 [ 794.625184][ T1370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7432'. [ 794.642553][ T1283] nbd6: unable to read partition table [ 794.764461][ T1378] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7434'. [ 794.774655][ T1378] macvlan0: entered promiscuous mode [ 795.943620][T29059] [ 795.945986][T29059] ====================================================== [ 795.953095][T29059] WARNING: possible circular locking dependency detected [ 795.960245][T29059] syzkaller #0 Not tainted [ 795.964682][T29059] ------------------------------------------------------ [ 795.971740][T29059] kworker/u8:39/29059 is trying to acquire lock: [ 795.978117][T29059] ffffffff8ea85640 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 795.988046][T29059] [ 795.988046][T29059] but task is already holding lock: [ 795.995400][T29059] ffff888081913860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 796.005143][T29059] [ 796.005143][T29059] which lock already depends on the new lock. [ 796.005143][T29059] [ 796.015536][T29059] [ 796.015536][T29059] the existing dependency chain (in reverse order) is: [ 796.024709][T29059] [ 796.024709][T29059] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 796.032706][T29059] lock_sock_nested+0x41/0x100 [ 796.038063][T29059] mptcp_connect+0x4c3/0x830 [ 796.043241][T29059] __inet_stream_connect+0x25a/0xdd0 [ 796.049035][T29059] inet_stream_connect+0x66/0xa0 [ 796.054492][T29059] __sys_connect+0x312/0x450 [ 796.059611][T29059] __x64_sys_connect+0x7a/0x90 [ 796.064896][T29059] do_syscall_64+0x174/0x580 [ 796.069999][T29059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.076442][T29059] [ 796.076442][T29059] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 796.084165][T29059] lock_sock_nested+0x41/0x100 [ 796.089443][T29059] inet_shutdown+0x6a/0x390 [ 796.094455][T29059] nbd_mark_nsock_dead+0x2e9/0x560 [ 796.100186][T29059] recv_work+0x1c2e/0x1d40 [ 796.105108][T29059] process_scheduled_works+0xb5d/0x1860 [ 796.111176][T29059] worker_thread+0xa53/0xfc0 [ 796.116271][T29059] kthread+0x389/0x470 [ 796.120854][T29059] ret_from_fork+0x514/0xb70 [ 796.125983][T29059] ret_from_fork_asm+0x1a/0x30 [ 796.131257][T29059] [ 796.131257][T29059] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 796.138888][T29059] __mutex_lock+0x1a3/0x1550 [ 796.143987][T29059] nbd_queue_rq+0x37b/0x1100 [ 796.149166][T29059] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 796.155314][T29059] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 796.162178][T29059] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 796.168666][T29059] blk_mq_run_hw_queue+0x348/0x4f0 [ 796.174286][T29059] blk_mq_dispatch_list+0xd16/0xe10 [ 796.179993][T29059] blk_mq_flush_plug_list+0x48d/0x570 [ 796.185874][T29059] __blk_flush_plug+0x3ed/0x4d0 [ 796.191320][T29059] __submit_bio+0x28d/0x580 [ 796.196342][T29059] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 796.202500][T29059] block_read_full_folio+0x599/0x830 [ 796.208309][T29059] filemap_read_folio+0x137/0x3b0 [ 796.213888][T29059] do_read_cache_folio+0x358/0x590 [ 796.219518][T29059] read_part_sector+0xb6/0x2b0 [ 796.224814][T29059] adfspart_check_ICS+0xb1/0x960 [ 796.230266][T29059] bdev_disk_changed+0x817/0x1770 [ 796.235803][T29059] blkdev_get_whole+0x380/0x510 [ 796.241264][T29059] bdev_open+0x31e/0xd30 [ 796.246025][T29059] blkdev_open+0x470/0x610 [ 796.250947][T29059] do_dentry_open+0x822/0x13a0 [ 796.256246][T29059] vfs_open+0x3b/0x340 [ 796.260827][T29059] path_openat+0x2e08/0x3860 [ 796.265950][T29059] do_file_open+0x23e/0x4a0 [ 796.270980][T29059] do_sys_openat2+0x113/0x200 [ 796.276180][T29059] __x64_sys_openat+0x138/0x170 [ 796.281541][T29059] do_syscall_64+0x174/0x580 [ 796.286640][T29059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.293066][T29059] [ 796.293066][T29059] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 796.300262][T29059] __mutex_lock+0x1a3/0x1550 [ 796.305363][T29059] nbd_queue_rq+0xc6/0x1100 [ 796.310376][T29059] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 796.316431][T29059] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 796.323266][T29059] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 796.329754][T29059] blk_mq_run_hw_queue+0x348/0x4f0 [ 796.335387][T29059] blk_mq_dispatch_list+0xd16/0xe10 [ 796.341099][T29059] blk_mq_flush_plug_list+0x48d/0x570 [ 796.346980][T29059] __blk_flush_plug+0x3ed/0x4d0 [ 796.352342][T29059] __submit_bio+0x28d/0x580 [ 796.357352][T29059] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 796.363494][T29059] block_read_full_folio+0x599/0x830 [ 796.369291][T29059] filemap_read_folio+0x137/0x3b0 [ 796.374828][T29059] do_read_cache_folio+0x358/0x590 [ 796.380451][T29059] read_part_sector+0xb6/0x2b0 [ 796.385722][T29059] adfspart_check_ICS+0xb1/0x960 [ 796.391167][T29059] bdev_disk_changed+0x817/0x1770 [ 796.396703][T29059] blkdev_get_whole+0x380/0x510 [ 796.402059][T29059] bdev_open+0x31e/0xd30 [ 796.406807][T29059] blkdev_open+0x470/0x610 [ 796.411731][T29059] do_dentry_open+0x822/0x13a0 [ 796.417007][T29059] vfs_open+0x3b/0x340 [ 796.421589][T29059] path_openat+0x2e08/0x3860 [ 796.426704][T29059] do_file_open+0x23e/0x4a0 [ 796.431714][T29059] do_sys_openat2+0x113/0x200 [ 796.436898][T29059] __x64_sys_openat+0x138/0x170 [ 796.442256][T29059] do_syscall_64+0x174/0x580 [ 796.447356][T29059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.453756][T29059] [ 796.453756][T29059] -> #3 (set->srcu){.+.+}-{0:0}: [ 796.460868][T29059] __synchronize_srcu+0xca/0x300 [ 796.466315][T29059] elevator_switch+0x1e8/0x7a0 [ 796.471590][T29059] elevator_change+0x2cc/0x450 [ 796.476870][T29059] elevator_set_default+0x36c/0x430 [ 796.482580][T29059] blk_register_queue+0x3e9/0x4e0 [ 796.488126][T29059] __add_disk+0x677/0xd50 [ 796.492966][T29059] add_disk_fwnode+0xfb/0x480 [ 796.498160][T29059] nbd_dev_add+0x72c/0xb50 [ 796.503099][T29059] nbd_init+0x168/0x1f0 [ 796.507871][T29059] do_one_initcall+0x250/0x870 [ 796.513145][T29059] do_initcall_level+0x104/0x190 [ 796.518690][T29059] do_initcalls+0x59/0xa0 [ 796.523525][T29059] kernel_init_freeable+0x2a6/0x3e0 [ 796.529228][T29059] kernel_init+0x1d/0x1d0 [ 796.534158][T29059] ret_from_fork+0x514/0xb70 [ 796.539260][T29059] ret_from_fork_asm+0x1a/0x30 [ 796.544539][T29059] [ 796.544539][T29059] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 796.552342][T29059] __mutex_lock+0x1a3/0x1550 [ 796.557441][T29059] elevator_change+0x1b3/0x450 [ 796.562709][T29059] elevator_set_none+0xb5/0x140 [ 796.568071][T29059] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 796.574401][T29059] nbd_start_device+0x17f/0xb10 [ 796.579766][T29059] nbd_genl_connect+0x165b/0x1cf0 [ 796.585301][T29059] genl_family_rcv_msg_doit+0x22a/0x330 [ 796.591435][T29059] genl_rcv_msg+0x61c/0x7a0 [ 796.596532][T29059] netlink_rcv_skb+0x232/0x4b0 [ 796.601864][T29059] genl_rcv+0x28/0x40 [ 796.606362][T29059] netlink_unicast+0x75c/0x8e0 [ 796.611651][T29059] netlink_sendmsg+0x813/0xb40 [ 796.616920][T29059] ____sys_sendmsg+0x972/0x9f0 [ 796.622188][T29059] ___sys_sendmsg+0x2a5/0x360 [ 796.627546][T29059] __x64_sys_sendmsg+0x1bd/0x2a0 [ 796.632996][T29059] do_syscall_64+0x174/0x580 [ 796.638105][T29059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.644507][T29059] [ 796.644507][T29059] -> #1 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 796.653096][T29059] blk_alloc_queue+0x546/0x680 [ 796.658373][T29059] __blk_mq_alloc_disk+0x197/0x390 [ 796.664010][T29059] nbd_dev_add+0x499/0xb50 [ 796.668961][T29059] nbd_init+0x168/0x1f0 [ 796.673625][T29059] do_one_initcall+0x250/0x870 [ 796.678892][T29059] do_initcall_level+0x104/0x190 [ 796.684336][T29059] do_initcalls+0x59/0xa0 [ 796.689174][T29059] kernel_init_freeable+0x2a6/0x3e0 [ 796.694882][T29059] kernel_init+0x1d/0x1d0 [ 796.699719][T29059] ret_from_fork+0x514/0xb70 [ 796.704814][T29059] ret_from_fork_asm+0x1a/0x30 [ 796.710088][T29059] [ 796.710088][T29059] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 796.717284][T29059] __lock_acquire+0x15a5/0x2cf0 [ 796.722646][T29059] lock_acquire+0x106/0x350 [ 796.727690][T29059] fs_reclaim_acquire+0x71/0x100 [ 796.733141][T29059] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 796.739458][T29059] __alloc_skb+0x1d0/0x7d0 [ 796.744390][T29059] tcp_stream_alloc_skb+0x3f/0x580 [ 796.750125][T29059] tcp_connect+0x15a9/0x53a0 [ 796.755304][T29059] tcp_v6_connect+0x1295/0x1b10 [ 796.760738][T29059] __inet_stream_connect+0x25a/0xdd0 [ 796.766552][T29059] inet_stream_connect+0x66/0xa0 [ 796.772000][T29059] kernel_connect+0x141/0x1c0 [ 796.777185][T29059] rds_tcp_conn_path_connect+0x6f6/0x930 [ 796.783436][T29059] rds_connect_worker+0x1d8/0x290 [ 796.789049][T29059] process_scheduled_works+0xb5d/0x1860 [ 796.795105][T29059] worker_thread+0xa53/0xfc0 [ 796.800200][T29059] kthread+0x389/0x470 [ 796.804803][T29059] ret_from_fork+0x514/0xb70 [ 796.809902][T29059] ret_from_fork_asm+0x1a/0x30 [ 796.815179][T29059] [ 796.815179][T29059] other info that might help us debug this: [ 796.815179][T29059] [ 796.825391][T29059] Chain exists of: [ 796.825391][T29059] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 796.825391][T29059] [ 796.838366][T29059] Possible unsafe locking scenario: [ 796.838366][T29059] [ 796.846340][T29059] CPU0 CPU1 [ 796.851772][T29059] ---- ---- [ 796.857129][T29059] lock(k-sk_lock-AF_INET6); [ 796.861793][T29059] lock(sk_lock-AF_INET6); [ 796.868807][T29059] lock(k-sk_lock-AF_INET6); [ 796.876002][T29059] lock(fs_reclaim); [ 796.879985][T29059] [ 796.879985][T29059] *** DEADLOCK *** [ 796.879985][T29059] [ 796.888115][T29059] 4 locks held by kworker/u8:39/29059: [ 796.893555][T29059] #0: ffff88803434b940 ((wq_completion)krds_cp_wq#25/0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 796.905499][T29059] #1: ffffc90005157c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 796.918278][T29059] #2: ffff88805b723080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 796.929323][T29059] #3: ffff888081913860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 796.939407][T29059] [ 796.939407][T29059] stack backtrace: [ 796.945281][T29059] CPU: 1 UID: 0 PID: 29059 Comm: kworker/u8:39 Not tainted syzkaller #0 PREEMPT(full) [ 796.945297][T29059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.945306][T29059] Workqueue: krds_cp_wq#25/0 rds_connect_worker [ 796.945326][T29059] Call Trace: [ 796.945332][T29059] [ 796.945338][T29059] dump_stack_lvl+0xe8/0x150 [ 796.945354][T29059] print_circular_bug+0x2e1/0x300 [ 796.945372][T29059] check_noncircular+0x12e/0x150 [ 796.945389][T29059] __lock_acquire+0x15a5/0x2cf0 [ 796.945408][T29059] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 796.945425][T29059] lock_acquire+0x106/0x350 [ 796.945437][T29059] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 796.945454][T29059] ? ip6_dst_check+0xe2/0x7e0 [ 796.945561][T29059] fs_reclaim_acquire+0x71/0x100 [ 796.945578][T29059] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 796.945594][T29059] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 796.945609][T29059] ? ip6_default_advmss+0x80/0x3b0 [ 796.945622][T29059] ? __alloc_skb+0x1d0/0x7d0 [ 796.945641][T29059] __alloc_skb+0x1d0/0x7d0 [ 796.945658][T29059] tcp_stream_alloc_skb+0x3f/0x580 [ 796.945674][T29059] ? __asan_memset+0x22/0x50 [ 796.945691][T29059] tcp_connect+0x15a9/0x53a0 [ 796.945714][T29059] ? __pfx_tcp_connect+0x10/0x10 [ 796.945727][T29059] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 796.945745][T29059] ? lockdep_hardirqs_on+0x7a/0x110 [ 796.945758][T29059] ? ktime_get_with_offset+0x93/0x2d0 [ 796.945774][T29059] ? seqcount_lockdep_reader_access+0xea/0x100 [ 796.945793][T29059] ? __asan_memset+0x22/0x50 [ 796.945809][T29059] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 796.945853][T29059] ? inet6_hash_connect+0xeb/0x170 [ 796.945931][T29059] tcp_v6_connect+0x1295/0x1b10 [ 796.945951][T29059] ? __pfx_tcp_v6_connect+0x10/0x10 [ 796.945966][T29059] ? __bfs+0x153/0x290 [ 796.945978][T29059] ? __bfs+0x153/0x290 [ 796.945989][T29059] ? __pfx_hlock_conflict+0x10/0x10 [ 796.946010][T29059] __inet_stream_connect+0x25a/0xdd0 [ 796.946026][T29059] ? do_raw_spin_lock+0x12b/0x2f0 [ 796.946041][T29059] ? lock_sock_nested+0x6a/0x100 [ 796.946055][T29059] ? __pfx___inet_stream_connect+0x10/0x10 [ 796.946070][T29059] ? inet_stream_connect+0x51/0xa0 [ 796.946083][T29059] ? __local_bh_enable_ip+0xd0/0x130 [ 796.946104][T29059] inet_stream_connect+0x66/0xa0 [ 796.946118][T29059] kernel_connect+0x141/0x1c0 [ 796.946134][T29059] ? __pfx_kernel_connect+0x10/0x10 [ 796.946151][T29059] ? __local_bh_enable_ip+0xd0/0x130 [ 796.946164][T29059] rds_tcp_conn_path_connect+0x6f6/0x930 [ 796.946187][T29059] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 796.946205][T29059] ? process_scheduled_works+0xa70/0x1860 [ 796.946221][T29059] rds_connect_worker+0x1d8/0x290 [ 796.946235][T29059] ? process_scheduled_works+0xa70/0x1860 [ 796.946247][T29059] process_scheduled_works+0xb5d/0x1860 [ 796.946268][T29059] ? __pfx_process_scheduled_works+0x10/0x10 [ 796.946282][T29059] ? assign_work+0x3d5/0x5e0 [ 796.946295][T29059] worker_thread+0xa53/0xfc0 [ 796.946315][T29059] kthread+0x389/0x470 [ 796.946331][T29059] ? __pfx_worker_thread+0x10/0x10 [ 796.946342][T29059] ? __pfx_kthread+0x10/0x10 [ 796.946356][T29059] ret_from_fork+0x514/0xb70 [ 796.946371][T29059] ? __pfx_ret_from_fork+0x10/0x10 [ 796.946383][T29059] ? __switch_to+0xc79/0x1410 [ 796.946399][T29059] ? __pfx_kthread+0x10/0x10 [ 796.946413][T29059] ret_from_fork_asm+0x1a/0x30 [ 796.946432][T29059] [ 798.044884][ T1397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 798.388174][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!