last executing test programs: 1.752034321s ago: executing program 0 (id=5963): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffb1, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8168, 0x14800}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 1.651689563s ago: executing program 0 (id=5966): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x10}, 0x20) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x78) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @empty, 0x4}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x814}, 0x20004000) 1.500046889s ago: executing program 1 (id=5968): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a0001f40000ef000000000081040000000000000000000014000100"], 0x30}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$x25(r3, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x12) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040000000", @ANYRES32=0x0], 0xb8}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb40018"], 0x0, 0x4a}, 0x20) (async) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000b40)={0x13, "dd6e4eaaff9e7199f5b246fb0144c42ce5a861c065a1424a20e8705c8a6d70b593a9c20eddcb4bf2a10b606ce6b400e06c17dc5c2ad6c632a3aa2d50f01ef1293ad45749226b7af96e58d1a92ac1d2ecd704a63548983cf9b60da2d6ce07bb02a3b3e9b1bb016997bff8ff78f44f6371b5c0f58260bf2d27ebbdba58224b0129"}) (async) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x800) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8881}, 0x40844) 1.499211387s ago: executing program 2 (id=5969): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="1713b855c9cc67a9af0473dc4cd4ec", 0xf, 0x85, &(0x7f0000000180)={0x11, 0x1a, r2, 0x1, 0x80, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x0, 0x6, 0x8, 0x0, 0x6, 0x9, 0x7}}, {0x12, 0x2, [0x2, 0x3, 0x0, 0x9, 0x9, 0x7, 0x0]}}, {{0x1c, 0x1, {0x8, 0x4, 0x6, 0x1, 0x2, 0x62, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2, 0xfe, 0x2, 0x3, 0x2, 0x7, 0x40, 0x7}}, {0x12, 0x2, [0x4, 0xe, 0x3, 0xfffe, 0x2, 0x5, 0x10]}}, {{0x1c, 0x1, {0x0, 0x4, 0x1000, 0x5, 0x0, 0x7, 0x4, 0x3}}, {0xa, 0x2, [0x10, 0x6, 0x5a]}}, {{0x1c, 0x1, {0x6, 0x0, 0xa, 0x100, 0x2, 0x8, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0x100]}}, {{0x1c, 0x1, {0x7, 0x8, 0x8f, 0x9fb, 0x3, 0x1000, 0x2, 0x3}}, {0xa, 0x2, [0x7, 0x0, 0xe]}}, {{0x1c, 0x1, {0xf9, 0x8, 0x3, 0x40, 0x1, 0x10001, 0xffffffff, 0x4}}, {0xc, 0x2, [0x6, 0x1, 0x4, 0xe]}}]}, @TCA_STAB={0x4}]}, 0x14c}}, 0x0) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x2, @local}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x15}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r3}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) 1.313681669s ago: executing program 2 (id=5970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r1}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 1.30740945s ago: executing program 1 (id=5971): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a000100000000000000000000000000000000000000ffff00000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0200001000004d33c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088"], 0x104}}, 0x0) (async) r2 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0xa, 0x4e04, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x41) 1.260219062s ago: executing program 4 (id=5972): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003500), &(0x7f0000004e00)=0x4) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@private1, @in=@private}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x32c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x31b, 0x0, 0x0, 0x1, [@nested={0x222, 0x39, 0x0, 0x1, [@generic="eff5ce92e43c9dabcf3cf046de26dd41b99304c92979fbca7153954137be2ef55fb370d5d5d207cc25d36e31732ead006a9c80253e42f4eb73b47cb82fc2677bf9c1da1ed2b7a2297cf9ce3e03dd3a86883234f4fbdde05a02006503301e2abc28d76b82c35825f83070953f8f6c1149b956e0965fff52da8acae8a86df699ddda3ac7cd8691c92f4503a5d18e9dd9977653288a51703d13f0aabfa6", @typed={0x101, 0x3e, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x82}, @generic="6168093dbedb555fd772c8661e7051ddaa31c49761590f6cd461452f9ce1061400a693ad3ecb6774017133bd4cfa3d68c30b0b715d07ead6db8430cc568c9f2f8954b0d2a503390e66b1e25007fcd4a627f7f31e100b26c4973623332fb4142a7f28566b3e82054cc69f55f0b768825001440516c5eaafc3833f"]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778b0004fc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x32c}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x1) 1.245508917s ago: executing program 0 (id=5973): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=""/43, 0x2b}}, 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8, 0x7, 0x6, 0x8, {{0x32, 0x4, 0x1, 0x0, 0xc8, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@cipso={0x86, 0x3a, 0x1, [{0x7, 0x11, "30ed7f70974703ea684fa86ef6018a"}, {0x2, 0x7, "4eff8f7437"}, {0x0, 0xc, "b65d17a8b7ffda96ba92"}, {0x5, 0x10, "8d2d397d4eac190221e17ebf419b"}]}, @cipso={0x86, 0x27, 0x0, [{0x1, 0xe, "fcec9e42a3719ec22c8174ac"}, {0x1, 0x3, "e7"}, {0x0, 0x7, "0613d13a41"}, {0x6, 0x9, "0e439b894eef7a"}]}, @lsrr={0x83, 0x27, 0xfd, [@remote, @remote, @empty, @empty, @broadcast, @local, @local, @multicast2, @empty]}, @rr={0x7, 0xf, 0xdd, [@private=0xa010100, @empty, @private=0xa010100]}, @generic={0x88, 0x6, "3f2fd901"}, @timestamp_addr={0x44, 0x14, 0x54, 0x1, 0x6, [{@empty, 0x7}, {@remote, 0x6}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r2, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000340)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x143) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r8, &(0x7f0000000400), 0x0}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000400)={0x3, 0x18, '\x00', 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) 1.150256494s ago: executing program 4 (id=5974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x24, r1, 0x5, 0x0, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x528, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xc13f}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) 1.055899959s ago: executing program 2 (id=5975): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="4732ede4"], 0x1c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002cc0), r4) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf25130000000c000600020000000000000005001a000100010000000100"/54], 0x3c}}, 0x4000800) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r7) sendmsg$NFC_CMD_ENABLE_SE(r7, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r8, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4008845) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x2, 0x0, 0xfd86) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'wg2\x00'}) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r12, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x52d4d2b86f2b2c5b}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x3ed, 0x200, 0x70bd27, 0x25dfdbfb, "e3b9553448109096a806efcb4780dffbc81881e7fcb4d0687d815fa571053e87bdc095fc94e34806a5cc8b020c0eb117cab7", ["", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000011) 1.055102912s ago: executing program 0 (id=5976): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000003cc00000050000001800000000000000000000000000000095000080000000ec67421ae343a06900"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42b942, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@dellinkprop={0x28, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x4000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="0500"], 0x10) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) accept$netrom(r5, &(0x7f00000002c0)={{0x3, @bcast}, [@null, @null, @default, @default, @null, @remote, @remote, @netrom]}, &(0x7f0000000340)=0x48) 1.033416047s ago: executing program 1 (id=5977): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0xb1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x75}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20044000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000400008510000006"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x828}], 0x1, 0x2000, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000380)) 1.028786318s ago: executing program 3 (id=5978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 905.750289ms ago: executing program 4 (id=5979): socket(0x10, 0x3, 0x0) 688.246495ms ago: executing program 3 (id=5980): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/uts\x00') 681.185171ms ago: executing program 2 (id=5981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_WEIGHT={0x8, 0xf, 0x5}]}, 0x28}}, 0x0) 652.820814ms ago: executing program 4 (id=5982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1d}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x804) (async) r1 = socket(0x10, 0x3, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) bind(r1, &(0x7f0000000000)=@hci={0x1f, 0x0, 0x1}, 0x80) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x4, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x44000) 443.47704ms ago: executing program 0 (id=5983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2a02, 0xf, 0x0, 0xffffffffffff0001, 0x6], 0x1, &(0x7f00000001c0)=[{}], 0x0, [{}]}, 0x88) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x474, 0x24, 0x10, 0x1000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffe0}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x448, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x8}, {0x2, 0x2, 0xfffb, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229b}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x6, 0x5, 0xff, 0x600000, 0x80000001, 0x7fff, 0x3, 0x81, 0x1, 0x7937, 0xa, 0x8, 0x6, 0x8001, 0xf0, 0x7fff, 0x3, 0x7, 0x8, 0x7f62, 0x3e, 0x2, 0x5, 0xc4a, 0x5c, 0xffff, 0x2, 0x1, 0x2, 0xc000, 0x10000, 0x8001, 0x9a8, 0x10000, 0x7, 0x6, 0x5, 0x5, 0x7, 0x7, 0x9, 0x5, 0x0, 0x8, 0x1, 0x6, 0xfffffdfc, 0x5, 0x9, 0x0, 0x1b, 0x200, 0x824, 0x7, 0x5, 0x80000000, 0x7, 0xffffffff, 0x1, 0x0, 0xa, 0x3e, 0x2, 0xc, 0x101, 0x81, 0x7, 0x8000, 0x5, 0x8, 0x5, 0x9, 0x4, 0x2, 0x1c5b044c, 0xfff, 0x9, 0xb, 0x9, 0x0, 0x10000, 0x3, 0x3, 0xa4, 0x8, 0x10001, 0x4, 0x0, 0x2, 0x3, 0x8a, 0x9, 0xc, 0xfffffb63, 0x8, 0x7, 0x2, 0x6, 0x6, 0x0, 0x3, 0x8, 0x9, 0x0, 0x6, 0x9, 0x5, 0x3, 0x7, 0x7, 0x7fffffff, 0x2, 0x0, 0x6, 0x9, 0x7fffffff, 0x9, 0x9, 0x7, 0x2, 0x0, 0x101, 0x9, 0x6, 0x80000001, 0x10, 0x3, 0xff, 0x2, 0x101, 0x8, 0x1ff, 0x7, 0x255, 0xe, 0xa, 0x5, 0x7, 0x978, 0x3000000, 0x4, 0x7, 0x8005, 0x81, 0x0, 0x8, 0x3, 0x5, 0x7, 0x7ff, 0x5, 0x3, 0xfd3, 0xf, 0x400, 0x8, 0x8, 0x3, 0x7f, 0x8, 0x1, 0xa, 0x7, 0x9, 0x101, 0x9, 0x10001, 0xd, 0x4000005, 0xb, 0x1, 0x479, 0xffffffff, 0xe89, 0x200, 0x2, 0x2, 0xf, 0x3766, 0x1, 0x8, 0x0, 0xffff7fff, 0x200, 0xf1bc, 0x7, 0xc15, 0xc1, 0x4, 0x0, 0x2, 0x9, 0xffff, 0x1, 0x3, 0xf93e, 0x40, 0x1, 0x4, 0xe496, 0x9, 0xffffffff, 0x9, 0x1000, 0xd45, 0x82, 0x12, 0x0, 0x1, 0xfffffffd, 0xfffffaf4, 0x7, 0x3b0, 0x3, 0x6, 0x200, 0x4, 0x8, 0xfd54, 0xffff, 0x7, 0x5, 0xca, 0x1ff, 0x7, 0xfffffffc, 0x7fff, 0x1, 0x4, 0x4, 0xd, 0x8, 0x2, 0x8, 0x400, 0x2, 0x0, 0xb2, 0x7, 0x4, 0x4, 0x9, 0x8, 0x5, 0x7, 0x7f, 0x6a2c, 0x5, 0x1ff, 0x1, 0x6, 0x0, 0xf6b, 0x1, 0x6]}, @TCA_TBF_BURST={0x8, 0x6, 0x1}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) close(r4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2a02, 0xf, 0x0, 0xffffffffffff0001, 0x6], 0x1, &(0x7f00000001c0)=[{}], 0x0, [{}]}, 0x88) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x474, 0x24, 0x10, 0x1000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffe0}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x448, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x8}, {0x2, 0x2, 0xfffb, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229b}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x6, 0x5, 0xff, 0x600000, 0x80000001, 0x7fff, 0x3, 0x81, 0x1, 0x7937, 0xa, 0x8, 0x6, 0x8001, 0xf0, 0x7fff, 0x3, 0x7, 0x8, 0x7f62, 0x3e, 0x2, 0x5, 0xc4a, 0x5c, 0xffff, 0x2, 0x1, 0x2, 0xc000, 0x10000, 0x8001, 0x9a8, 0x10000, 0x7, 0x6, 0x5, 0x5, 0x7, 0x7, 0x9, 0x5, 0x0, 0x8, 0x1, 0x6, 0xfffffdfc, 0x5, 0x9, 0x0, 0x1b, 0x200, 0x824, 0x7, 0x5, 0x80000000, 0x7, 0xffffffff, 0x1, 0x0, 0xa, 0x3e, 0x2, 0xc, 0x101, 0x81, 0x7, 0x8000, 0x5, 0x8, 0x5, 0x9, 0x4, 0x2, 0x1c5b044c, 0xfff, 0x9, 0xb, 0x9, 0x0, 0x10000, 0x3, 0x3, 0xa4, 0x8, 0x10001, 0x4, 0x0, 0x2, 0x3, 0x8a, 0x9, 0xc, 0xfffffb63, 0x8, 0x7, 0x2, 0x6, 0x6, 0x0, 0x3, 0x8, 0x9, 0x0, 0x6, 0x9, 0x5, 0x3, 0x7, 0x7, 0x7fffffff, 0x2, 0x0, 0x6, 0x9, 0x7fffffff, 0x9, 0x9, 0x7, 0x2, 0x0, 0x101, 0x9, 0x6, 0x80000001, 0x10, 0x3, 0xff, 0x2, 0x101, 0x8, 0x1ff, 0x7, 0x255, 0xe, 0xa, 0x5, 0x7, 0x978, 0x3000000, 0x4, 0x7, 0x8005, 0x81, 0x0, 0x8, 0x3, 0x5, 0x7, 0x7ff, 0x5, 0x3, 0xfd3, 0xf, 0x400, 0x8, 0x8, 0x3, 0x7f, 0x8, 0x1, 0xa, 0x7, 0x9, 0x101, 0x9, 0x10001, 0xd, 0x4000005, 0xb, 0x1, 0x479, 0xffffffff, 0xe89, 0x200, 0x2, 0x2, 0xf, 0x3766, 0x1, 0x8, 0x0, 0xffff7fff, 0x200, 0xf1bc, 0x7, 0xc15, 0xc1, 0x4, 0x0, 0x2, 0x9, 0xffff, 0x1, 0x3, 0xf93e, 0x40, 0x1, 0x4, 0xe496, 0x9, 0xffffffff, 0x9, 0x1000, 0xd45, 0x82, 0x12, 0x0, 0x1, 0xfffffffd, 0xfffffaf4, 0x7, 0x3b0, 0x3, 0x6, 0x200, 0x4, 0x8, 0xfd54, 0xffff, 0x7, 0x5, 0xca, 0x1ff, 0x7, 0xfffffffc, 0x7fff, 0x1, 0x4, 0x4, 0xd, 0x8, 0x2, 0x8, 0x400, 0x2, 0x0, 0xb2, 0x7, 0x4, 0x4, 0x9, 0x8, 0x5, 0x7, 0x7f, 0x6a2c, 0x5, 0x1ff, 0x1, 0x6, 0x0, 0xf6b, 0x1, 0x6]}, @TCA_TBF_BURST={0x8, 0x6, 0x1}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 441.54876ms ago: executing program 1 (id=5984): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffffc, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) (async) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffffc, 0x4) (async) 440.537369ms ago: executing program 3 (id=5985): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0xfffffffd) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e9, 0x0) connect$phonet_pipe(r1, &(0x7f00000000c0)={0x23, 0x4, 0x2d, 0x2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r5, @ANYRESHEX=r1], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000002000000851000000100000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 439.632151ms ago: executing program 4 (id=5986): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x6, 'net'}]}, 0x5) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x90000000000000, 0xd) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x840, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0xc7a8}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 438.946815ms ago: executing program 2 (id=5987): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4008064) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483c0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x4c}}, 0x8000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) listen(r2, 0x3) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, &(0x7f0000000080)=0x20) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0x2, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x1000c844) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000003"], 0x114}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) writev(r2, &(0x7f0000000280)=[{&(0x7f0000002040)="18a418e4181d8f36b2d931688c2c7e54a74d86cd84fabbf1d96d7edcbc9ea253116601cdafc8e4d252cfc031cbee3640e07553a072b9f608b7e6a44188558bd61ba3320fb3766d1815c9ddaf7d91193d044d06c859610943fb9b7798a776804c1c7af74782a1d88d143d10c1f40c6552848bb08861f1cef0a0b24e5069a002ae1b377488ca852ca8a429d19b717e3f3e1e6825281d9aa6f09b18b4c576cca899dd55b15c101aaed740d94b8212e9dea8e0e40df1e52f89d6aeb63b5c9c84a2f82a9b58809b7a867db064f0b71d875ac37e4b2e959f61ade914459431eda8d819688a3d754c3115d331399502444506ede273580b891f7d2b2495742136d0ff3e7216603cfd3be55103aa9e02b27cbc21c8a8ac7805357f46b581d36d45381947d399ef64c85eace63dfb45fb6d394d0f6fe9864d11fe5953270a59f32229df9f59b35c6167fbfe62528566144fdbe2deabe46bc0038276858a023f828d7eee09de397c32b40ca689f23cb1acb2a2f8580c9fe5b8fc877acf4601a78c8fc70acbb71a4f022ff887d9b7d9fafbb654217360a21c282adabdfe7ee014abd513fd5139ded90fb7a582ae60136b351abc8f00ccb9c712e783de4435f71d6425b3d200768a68d209710a79caf66af1cfaa7af497bcb03eb4eee50f87e317cd61b0f2835fcd95975b858a5ff1e137ee1ec460607330e9496a90be7953c15cd74ee8a54c013b97583fa6725684d5a4b71261d7509fc4d344d4d5ac3a3fe551c77f212cad6d04e628ec008fb67eabfd52146e8eae806033a5529d2e30a1ff3f208417a829f7e72338dcfab712aa00e288c71f666601fa6f3852deeabe71c18df2f63a50fa82c3c883de92b9285ebc6acbaf0cd395576406002d70fe80f771196d4b55f50abe0e6d9580e05acc9f0632737bc507eb410abac1bb25013ebf5b1b8250412b3c1693b2cf9e98f3d3c85b90913dee51019e3fa73371c0e97d4ad7ac13ac9a08ab7bc40149b3c011f38145b812718b06568c2713c9c3d861ab2b1946d492d259962c0b457ac4e1978a39587e884ba0ef11eb84f5b23202762677a5a6adbac65d3db5248df9631967ff539f436ec12c9086310e2d7d88c97d210cbf31413cb45901ebf7456ebf5b535c9f309c6e4fd9e4abf89b99858999e9a4fb13ddebfaec87f639bed67fd768715f69370283668b058a9c50f2ad575a25dba81f211858c75ed87c61376d733730ee6810c33f6eb25b18a32f3cceb95ed86eaa3129af04c954a62e46c8cf5fda573c7c3c6d87a6986464f3455c7f94da3382d7f9f9559c5a65619e9d6b21bcba8854c326706a5e331fd6218254b552141e7dd508de1e102bf8303a1a725c3f184adcbafb845eb5a4f3154b607cfdd12e9057f529d248d97c56bd70db2942c24ab119842614fd29b345ba3848336f5581df156a4d04549c49f229efc594ad58b5b1d639e3dbc06949c72af77c36747d425d9cf770046922932d071099e037ee9242481877b101ebb7a8f1be9c36f95da56bda40b7fdfe1f425c44798e33f50b13f9db853301fbaf5b4cfb272207410f96e1c421c60f506c0bd806c634a93253cab0aab14cd6347a2f17fd9c50a60c431f726fd3bad843619b60c91d895728ce4814571aa8833d1d9277d40761eb1b6c8d0af93cbb5df29e4fc25c4b177d39794becde82ba81c17502c1665c0ed6be00a778f915501966a4ae2da19ae90532480b3d7c3a3fd38d2ae3c04f94411b9fcc3e98414dd369cfb3aaafb224b9f6fcdd2bfa2f5e289c4d0de16797c72b9de567c48971749fa9653f54f05c4dea18d2084854a871fbdf4143ee4a906896f9056d4132fbaee5f7875b72f542eef8c6ea358e35dfe2b08275f428eab92e2463a30f503d6e615e4b44d3454dd4fc0316fadaf52fa433be40499f0f5448c96f4166f7823a71812ce1bbc20d99011fb41c6a5a779534646534d07dfc910915f4b131fbd0ebbd6ae28e13e8d33103f5e1bf6567967c129f6f29281c46475964b60fe0c2b8ed106af7937e2aa489b093dde1c383dded74313e3fc37da4da5eac3ec4d5939f2794fda4d3da88d3da3ec7937c4af53095e109d990881900c7d1d0d6b8bf91217ae8ae63eed8567e8aee955d117a7a247a147ebb5b1068180fa2f780388ad611aed229587d38a873420635334d599fef184c97e50a08985e2b11dea2a06ae726c629b04f19ef6c3b1e85abdbf3391eb71eedf63344ad2b4f8741a36bf59718c5e62a08b4f85bf14be55a95576626eec169c295755c74f818ff851d30736c7bba0a9af23813dc929138430e5d1c991ba85873555ced4b058938907e56299aadb7148da568cf5763aa04a2a3f62ba0c43e1903341ce479ca91c4ef9f2cdb1c0bd371bcc99d6d486a788bc0e898ac1af4bb9472446cf243da76a0b0d39a1ff15965a20f3a408eabce55aba0935670189f444ad8e1d3d84d09a0d0778e6d9fbf6a68a0699be11cf2237ac9e45b28ff8607a578949032a10c6bce53925081797d08841db6d0dbadf95f2a745bba75bab2d6c3ef308caa19f23b69d99e140bf14e0018e82d9db04baeb7c600c5fbe4d5e87624a3006984dc43d32c8ab3c7c67bbf77b6f96bc16002f758db01abfb9967d3c313f54553a502063c58e2ad86323ccdea7732de623eda9bc9e9744c7035027bb4d0627b95d17956cbdd21a1da076389db4ea407594ce348bdfbcb268944415e29e296f63d27ddc37f4d6432c606993bf002ad7a628060b7be1866c1f2b626b5113a77a57b09e60c57bfc1543029fea49c2e2d159f2527b5517378bf65f0057968ef9a06746f100ca85f5fc09445876ce98a01b4bb6fe7c0213ba4c6594dd30756e67a40d9c40938386bd42d9b6a08c23ff5b6e38c23b1ccb1f47fe6703144fc5bf6f94ef40f9e2b9e3a8921997f4a4e52fe58edd45f84a2c516a7a0329156e77e96f9f2072e3865af7e97d19bb3a36609f00d5264585c33c15e1b2011d841f5e4f1cb77271c706b10677df92c34243ee471e61e9dd0ddaa797f5f18e0d48cdcbd02c4cac36d4672faf4fa52ef10a0e9a27af913caafc0e592ea63cc7ccd408141f93b9a3a9df90f97443d6f917fdc59240f0d9fab3583cf0f65a8f98a2c2d88fc5ac442efbef559cfbd9e83f16622a1701cd56add8fe5799d9002cfb14cc21a4df5a282718c702d3e8904f6168e8ab2317c7c3f6f44c674b7ac0102b6c0e54bab028e36d19fe9b152e62a43f2346adedac8a343dd470d74b1c32cbcc64884fd7ed468fa4f7f678b4351a452808f229d61fe05338f83ba6d8149da1c770a97e9929cd639c0adad8e42968d350ed251c04f1fff95d423205ce07862f2f99b3aab0c81859d840664c70115f06ca18a564a7a01a89b52d416d09685c3386ee6e7fb02d4a272c9b6c31814521e7324d1228df4a630617a0f1bfd38fab9f637c4f8160e457b6397a7f294121c9d2a93f78db7383a65fcfa3d9552ea99f03808f952a06d19556044ad3bc028f1122f2cc7fa17ff2f392780ca5abf42440a0eb9f3e2d771d2986b3b57e5b156bf31ddd615d69d68f1fcfbcf55d52e280ab08d3a57edb394c773b9664d0746c21bdfc80950fbd64d587cf1b73156a8cab8a71df918ea7c19526e1f4cc354653373185ce5c4ec212babe9071f7734b8febb11094286088b8cfb057aa39f8f63cce00a6f62ff778174945192a8a86ecec9e65de783e1d9a7a6ca5fd95ade5c59c7b4a6fe5d025d7aa0c26512c135d216bc80fb609ee586b24073509cabf100b40a20a65cb7b93439f95ac177d24d59882ebcf250057ab8a023ee983790b375ca7cd0cc55a9da2a01071c97dfbbf4dab4f22d3caf03d5ed71a904b18c186ba9a5b968921c6c2d3836115338f2312258b43f870af303b8a3b71ac3f9fc94c73d54b33d97f91f5add84516be6631afc3c779bba8cadab17961797a38c3798c9646c736579420c17b111c3a2671eeeea1c16ac6b1569f436d8f830129a6cafac8b2666683c98831cba5a98eebc4cae323df2f53642c9a8a8df3a16ce2d5b9390a4734102b22798cd383908083b74be6914460fcee3c030474a228302cb2231925ac0b4f42a4f1cedbfb4704a0d3c2067530e1df3706c46e1ffdb4e08bcb59129c1156761d27cefc183e8b045a7df20655e81fde53d1e674fa3c7d6d09382247fdc9c1fbcf20122563a08c023836d5bb10f5543dfc3c5f0e48536838dba1ce520bcdccae39add395a1f677351a004612e3b3f2a7ca0010354283a0bb4c601a9f43b6d065efb2ec52545985d4b25740cb0c5764f6d33cebe1771eccacdcf7d0a0d914e9439e51fa538cfcf52fca087752d1b4e06639e823c5eb71f2b1803abcb2aaa4408bf9a4131ee4ed827693a1b370a6ccd6b7076f68c65f32c2d315af8a394e494b1271419df7f46472c13c9fcb169becd7df290ed7f8581cd017bc2a2c1c6b0d762ef96ec112b1d987b00f38254883a24785b1124680769d806de695a0074cd8781354f563133032b873810dc2cc6e1c0d1796b1502f84c10e4b6c04a7fb0c82b6207559f1ddfd0185c28623c2a924ea6837ca375e2fcfde1d21ffcdd4bb80ad70ae9dd20c74e5e26f9e99f7b52b837785cc54338c3c00c60dbc3ee4bf661e3465fd0d958bb388d2294cc2b994f027d6a29f9ae00a87ec66986f683b527817b42461bc3dda8e819780862ad8b72e5c2837cd1e8e8f492aa78d30488b8f31ed3d4b798800baf7495c972640b35ce24deeacb13b29ef9d5a6699b2066cfe3745e1f0a026a95506aea4598139475f5df0c7f4e3dd4bf317597ddebb94b62c515d63132f7349c04309744706999b08cdddc5c4277588b23e9244eab166da32fdfafa08cb5f49540236102c7c32a188d3e66c3bdc4fff8fe106e19f9b494a46cd03923c283a003e33b3254191f2a7eb493f7d8fa45c885e66802541a274b94ce8453029aadccc063a1b06e2be05c1c459ec628cb7a562402c729ad2eb59e31a513ce9ed92f4233f947a8bda682a20fb154e3e12b9cef41a75e0064f2284f50192b9e9d261bfad156e386868c0a63de6637d6be210ae0b3c22e1f9d05c27e93ab2ec18c6616af214314fa1dca7409eae72e5dfd51589a845fd8aea17d3965b42a0992e548c64177c33f6d04b4c094727fa9eaad8d3ed128adc156b41267919e82862ea1b8335d7af80045e9d98b41c090e164dc94d07970fbbc50c35d731565da3722e51bddb88a7a72c24bb7e531a4ae9bad1b1102ab81fb34508f3321bbcead71d217ead1dedf7745589a2dc3b1450d2a9eb71553712089640834d0dbc2ec44656b59c79132d9b104007d540eaa9f1d08a9cc5eacd135c7cc7ab64c953b5c911325485e1bd1875705f2b0e53f91caf786d39f184445452c45578d7366cd21bf7a8045e9803b0c2078765c8c556479e367d22219ca91ddcd54c459a689e8ae97710ee0a8fe2aa80221541886a53ed14be2a71d52aa4e72e14f74d5e0b9bfff4cca74bdce2ab055bcecfa436ea9d2b5b7a873bbdff7c6eaf68aa8f4fa3776bcf3fbeb31c9501b7a11c73a5f17bff20383440aab72a01c510da27919ed624434de63b51c7515dc28e59185c22768a9e389b921edf8ce7bb25f21db5d6c1db415190dbbb71d7b98fcece579e8a2c797b0aeb9f02055bf910f550e2243547825775ae35cd0ae4af0755121a9789d698c4eca21c1aed1201c56c3d552ab93c2b2d97fcda835815241125829cf417a77aec89af7d6e30d5e13d098c51feb6579e3fe9b30aa9623b9482880", 0xff1}], 0x1) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0xa0, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r10, 0x8983, &(0x7f0000000040)={0x8, 'pim6reg0\x00', {'veth0\x00'}, 0xfff4}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 384.073526ms ago: executing program 1 (id=5988): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x96}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x64, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x10, 0xe, 0x400}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r4], &(0x7f0000000280)=[{0x3, 0x4, 0xd, 0x8}], 0x10, 0x1}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c0001e003000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) 336.278836ms ago: executing program 2 (id=5989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @none, 0x7ff}, 0xe) getpeername(r3, 0x0, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x0, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0xe, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYRES64=r4, @ANYBLOB="3ba9a0c7ad19b0fd926b2b6c1445e45e35e27c44c165c9d6f0fa33ff49d053f761c38dbacee6e522d04c2e386ce9c655e493dafc96cfb78e15a79d36ef0837fbdd25e449caf8d349eb4c07ed3e07f88cf04b07ab87dfd18e336981723e2305303504642f4a87bb0ab2900e9f3acc9f88c3ec97ea0a7649d90f357ccb28b161a3a9db0741f1af93d35409d2ce54b90e42c981f412f36cb8f18dcea641d1246114dcd893a92692fac8995db1cd91caf17ca1c09e7ed6153fce6d0541cd1caeee5d9c8705bc81cd"], 0x3888}, 0x1, 0x0, 0x0, 0x4040815}, 0xc000) r6 = socket$inet(0x2, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_int(r8, 0x1, 0x10, 0x0, &(0x7f0000000f00)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffd, 0x6e6bb5}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008840) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$AUTOFS_IOC_READY(r12, 0x9360, 0x75) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r13, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESDEC=r6, @ANYRESDEC=r5, @ANYRESDEC, @ANYBLOB="0c0099cb0000002da3ab40e115773789cdc2221ee85b347a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x40014) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 244.372588ms ago: executing program 3 (id=5990): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0083680f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r1}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x10000007, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x106}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000980)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f803b6f2811032d68bea02b2844f47c285eb2ff3d20c904f9bfaf5eeba9024644942e36ef1ee6db0d1191744909497df00d71d2273b284c3cac17e3bb7700000000000000000000841adf000000"], 0x64}}, 0x0) 116.329482ms ago: executing program 3 (id=5991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8e1, 0x1e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 115.75775ms ago: executing program 0 (id=5992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a310000000009000100730000310000000014000380100000800c00018005000100d1000000140000001100010000000000000000000100000a85fc8b6837284bd69332f19c9ac581f88d4681a3786916b2e83e6d170a05bc92"], 0xa4}}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1}) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000580)={0x5, 0x8, 0x6, 0x2, 0x6}) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r3, 0x13, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="2e0000000000060000000000", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r10], 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 67.725553ms ago: executing program 1 (id=5993): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @default]}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000080)=0x7e8b, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f00000000c0)=""/139, &(0x7f0000000180)=0x8b) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000001c0)='cdg\x00', 0x4) connect$llc(r1, &(0x7f0000000200)={0x1a, 0x308, 0x6, 0x1, 0x4, 0x4, @local}, 0x10) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000640), &(0x7f00000006c0)=0x6e) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x6, 0x0, 0x6}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="6e9bfd5503208d488157d26d61a6664f9535dc500cda7c7009aa7d07e32e9538b4c0a15785743b98b410314f85c0a0ed87c1087224fa57b74438f00fe35783bc7dcca245cc97b87207058dbc6054a1a6caab225b7885c6d7ed15b5202a33d08baf22b9a2e0cbaf02c25ff8b8fbb98518ec2a6dcda03444f9a53018ce9c04611c9f7580c817e33a09212310c1184b4cddfd50abbb1771f932069717588d80e185209a72ce091c5698787063c60e250e207a32dc20c6ab776e9cb1fdffb5e36614b6cf0917af3b3f7a7c253bfbd2382019765eab0c0966697853c39b1fbfd8a60327aeb26ab41e2443dbc0bc8acc4fcb87b025ba7e", 0xf4}, {&(0x7f00000003c0)="5d25a5bdd888d1f9a4855a75bb4fa0b859af833023321fff5673ef", 0x1b}], 0x2, &(0x7f0000000440)=[{0x108, 0x0, 0xfff, "29c167b8749740917d51f14a5fcad69b297aa3fa6c3ad5f4638130d6af37e1f90c4ee531e696a441eab99796d9e25faec20945320efbcbf5540df451db19f0afee05f823b330ca3508fdb6908d8eb78c82b0f519e442c23a640556e45439de7866934e8b4831afe2c7ef0d4a3860803ed7c847cc991285a0bce09aaf0fb46c278da48879510967e02fa2516b70b6e89c1854d99e566977d4695bcace02302a1d548e6ec63f52d2b5197e7d6cc481baf2aae77c990d63e5f3c29267189f472a74a1e7ab6fc347fc934b09632c839f98a7bff375c3fcd76fe8200e3740b9cd3d15b4d838e346dd942f97adc7c305d20e1ee996c6"}, {0x80, 0x10e, 0x1, "700ec985719763e0e0f728a957ff0020d8efac1cb2cfb2af48a1f6164406abd48cb3e1b1074c91bd3fc272229c2535b865ee2dc3bce66f988acf93ea9ba4b80fc43b541d5e079b352e891376abe062b2817f3f4424e2482f8dac3a3eb27bbd74bc23ef4142514d9e597e5aee"}, {0x58, 0x119, 0xffffff81, "89672700e01c2e8fe33dbca46b8c9931caf8a8c26d570f645613f239c7e4f1d6cf3ece45577295a486744b3b0e7b7e22197996c85483cabcb6430a7efb3b667397cc5a"}], 0x1e0}}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x1, 0x2, 0x1}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000780)="78e83922d5b99fddf2dc4a97161be37364a591273fe41ca46d4649707b6df31ebff97ff3d4ca653a66cd6de4d1d600907723573a91d6c2cbbfe45a1f98c75afebd8a5f92b31d31a2bf394228426dcbc7eb2fc392c70c08ac1a88cb105b2ef434e0d975a901acdc57e0701f2a8b30fddb884b584d6ae43dbe88744de2dc1e4ce6dd4b0fe61ae559825754847420be96b9fe8d3ea64701d6798864271f059d144970ff144418ea5c7a14bc0cd73c84d6e5014d3008254154f2be415c7e7eedaca9bda8351dd759", 0xc6}, {&(0x7f0000000880)="15565fbb6895cfac8908bb9fd9ec025736915aceaf95b3dc9e1222abfb6be370ef1470d1ec4d9172a2a09972a1f8bcad44ed96642b5e752e7afc2febfeacf5ab7ca76e8049b66f4833dbe30a5152ad41d8d00d2a7d3382bb8f1a330eeb53dfeb69da947adf9977be58a13ee749", 0x6d}, {&(0x7f0000000900)="d6b58df30917b95db5390b13c9b908a853", 0x11}, {&(0x7f0000000940)="5f8b5fd0cba948297961d2addcd438d0bbff3838f9f849035f6fe88c12b075685a2e150dd086915bd05e8b9f8166356f91dbd1673b2c0955b776fbfe4be66f7e0153054ccb79d3a20155f20d26e76f0fc477a67e39e15b044e9c0ba711789dcae500c7cbf03f5868fa338c07c1f74a89b7424aa1243d714b778ff34b3c9b4bf4b59217be98743545731aba87f77c7d5f9b84c35e8fc6c45f0b658534222e3a1d3c06a51733b1045b73df5dba3f2de3b6285ee336f816ebd5801c77dfc7be835fb8af2831e5bd07aee63a136942", 0xcd}, {&(0x7f0000000a40)="1795bf382c0a6c027397039ddfc6e5f3cea6646d50968c25a052db142c9875779b9b537b3f7569974d8e5b7a3fde161d660766983812c9f2c92263f9fd56df3c782603480aee7e01c95754aff774ea53b32f64dec921382d2003dd2fd6822ce25c79ed0f8cc45a5bc10bc5580c66380c6f2253f4bf76bedf178335df596b7f37d800118fab5e2cf0d4a3142b4f4f2adddb8c63d642cba9680cfbb7947321d4ccbf1ae1a040994005455113fc26ec827a8793cb95fa72a756", 0xb8}], 0x5, &(0x7f0000000b80)=[{0xe0, 0x110, 0x4, "7e8f1b9ff6710e0c6b9d3cf65583509d350ec63584eeea5b4134d7328577a52b77c9eeb8edf419c6166a678c0d5f3066013b2d2973dbb83c453c700c616dd167029460b82aa829bfa1046a4de6414841e7aa45ee75ee3a2f3a9594898183027f7242879083c2ca299c6961c52d0df51bd9e70a8f0a3ca067d643427cdb35e09468fec79fbecddfa06bd628f3e86e3723edf9d05476992c7f049f688636eaf3f8fc2f238100ef46096bfd0b7cd33745b0caaba4e9221c9b0e995a4123297f082dcb8a87991f2b88f24c38dec238d0"}, {0x30, 0x6, 0xd, "e5dc14c45dcf8bcf08d8f587c944e88a2ffad427b127d2f51163d0f195635c"}], 0x110}}, {{&(0x7f0000000cc0)=@caif, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)="5fcc8433624e089d7abd46e93bdca1219170910397f67b7a62b49dd3bc32f93a5c63412bff62f90b19d7f95068e584e0c42144f4b51110a022aad6af846ed84db3bc1dbe1754873af203232005469d48087a72b29fa53d01a0ee1045d10f0546b5ab74a910696957d29b2e98b6b383ceb567ee3e01f80c5291bfa963060c07ae682606e9035eeb35fbf2a50d1a9e9b16e502b2271028a224eebdb2219a418ff06c67581479f264f86d0feba33b898421cf765c141bdf7ee298a7cf4f77bb1a62f932459d5b7a24", 0xc7}, {&(0x7f0000000e40)="8ac1b71af7bd54aafc1929ded188b104c680dbcbb7f651fea6564865ebdad31440f28e7e08b8ef0bb5245e4c71cbe6a8e8e4b376822eb61d2928fdfc9b68cb36a94cba7d80e3dee2", 0x48}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)="767aced6949a0892f53485bd52e7205855ef17731688dc6247581ad59e2136c5ca33b89a91022689251635401ba2948b27b5756ca9f6152fd6e8d3845736ccf1", 0x40}], 0x4, &(0x7f0000000f80)=[{0x58, 0x114, 0xf0, "79f7f57161e3071dcc7c39995e05529d41895812d4c42e7d7286a25b0804186274df9f1ed9ca074834d8db01bf26499b5c415d5f77741d33fccf0faadbe7b12c0c71d4"}, {0x10, 0x104, 0x2}, {0x18, 0x18e, 0xbd76, "6ee505"}, {0x70, 0x84, 0xd7, "1377dbba95b5fa7b9a73fda3c8c4874bc797d2d54d04536109ff33ea8aad2c39effbfb2ec9497d47badf2e957e222618d939c5369756dd8cf5b6b17a8508087cfe0e8a55d906ac02ae4bab0f8922afe49d8576bdda06053569b37442"}], 0xf0}}, {{&(0x7f0000001080)=@l2={0x1f, 0xd, @none, 0x7fff, 0x1}, 0x80, &(0x7f0000001100), 0x0, &(0x7f0000001140)=[{0x30, 0x114, 0x8000, "36d360d446afc177af6290a567297a0283773985a52d94c92e94dc41"}, {0x28, 0x104, 0x8, "83a97aba480f4293ca97111915b8841eb64ea348a355fbf0"}, {0x90, 0x115, 0x4, "64be12663b7742c2498124b3ccfb821ad00a68c9a281538c67fcad0b5a94b08749a2a67c8273a0923a1f4a0bda9f5029bad072ff0c4bf9ed7244f067b959d9a99909f237fec10f3a88035db9a3b72dbb0e3f33b831efa4db11c53a4572634dac3bbd6fac7da2960416daadabe224160956eaafe11b595d77953f5b4e1726"}, {0x28, 0x10f, 0x0, "37692761b8b1c82e2677c67f73ad8bf3cddca8b5da1a755c"}], 0x110}}], 0x4, 0x800) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @null, @rose={'rose', 0x0}, 0x2, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$SIOCNRDECOBS(r0, 0x89e2) r4 = accept4(r0, &(0x7f0000001400)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000001480)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000014c0)=0xfffffc01, 0x4) unshare(0x20000000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001500)={0x0, 0xfd, "d7283446dc1ab191b99aee95b3a6854b7820180224cea8965281bfea79be2af4c218a7d7e74db813bbe04ca917b9501eb63dee060e6bea22392f6a2b78b6281e902b09971345371fc44e33c760f63ccfe98a7b5fd1dabd42ce238d53a8d9db75a78dd3d41fc8437cc7fdc382b3a5820d8ee5319f6f2a54d2cc1e21dd5224c6d2ee3c4eca3a455ec91be1fc17e31aa947cca0779436ebeb8f077b08994ceed7198d036aaa888edb569c1e1c6dbe953c47ef02b80c9a658813820b4da3f80b2aa6956b1907382125f52f719dc74448ba4a800e5579c5b22ead8b655e84c8453cde9e7418bf2b6094ae2ab156825fe91151a456d3ce8701fb4d5224264fc0"}, &(0x7f0000001640)=0x105) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000001680)={r5, 0x7ff, 0x20}, &(0x7f00000016c0)=0xc) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000001700)=0x7, 0x4) unshare(0x800) unshare(0x8020000) recvmmsg$unix(r3, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001740)=""/13, 0xd}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/121, 0x79}, {&(0x7f0000002800)=""/208, 0xd0}], 0x4, &(0x7f0000002940)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000002a00)=""/90, 0x5a}, {&(0x7f0000002a80)=""/234, 0xea}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/169, 0xa9}, {&(0x7f0000003c40)=""/232, 0xe8}, {&(0x7f0000003d40)=""/118, 0x76}], 0x6}}, {{&(0x7f0000003e40)=@abs, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000003ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000004f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000004f80)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000005000)=""/47, 0x2f}], 0x1, &(0x7f0000005080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000005140)=""/48, 0x30}, {&(0x7f0000005180)=""/217, 0xd9}, {&(0x7f0000005280)=""/51, 0x33}, {&(0x7f00000052c0)}, {&(0x7f0000005300)=""/111, 0x6f}, {&(0x7f0000005380)=""/35, 0x23}, {&(0x7f00000053c0)=""/83, 0x53}, {&(0x7f0000005440)=""/144, 0x90}], 0x8, &(0x7f0000005580)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f00000056c0), 0x6e, &(0x7f0000006900)=[{&(0x7f0000005740)=""/27, 0x1b}, {&(0x7f0000005780)=""/54, 0x36}, {&(0x7f00000057c0)=""/117, 0x75}, {&(0x7f0000005840)=""/185, 0xb9}, {&(0x7f0000005900)=""/4096, 0x1000}], 0x5, &(0x7f0000006980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000006a00)=@abs, 0x6e, &(0x7f0000006bc0)=[{&(0x7f0000006a80)=""/222, 0xde}, {&(0x7f0000006b80)=""/44, 0x2c}], 0x2, &(0x7f0000006c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}], 0x7, 0x12002, &(0x7f0000006ec0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000006f00)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000006f40)=""/204, 0xcc, 0x1, &(0x7f0000007040)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffff8, @mcast1, 0x2}}, 0x80) unshare(0xa000400) accept4$unix(r9, 0x0, &(0x7f00000070c0), 0x800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000007140)=@generic={&(0x7f0000007100)='./file0\x00', r7}, 0x18) write$tcp_congestion(r6, &(0x7f0000007180)='nv\x00', 0x3) r10 = accept4$unix(r8, &(0x7f00000071c0)=@abs, &(0x7f0000007240)=0x6e, 0x0) sendto$unix(r10, &(0x7f0000007280)="27b456a1603ef132d8eff4e77dd1e9ca0706058bcbec4e9c433e8b4b7cec19756de9e8078292edebd1cd95da8569105cc2162332fa20de", 0x37, 0x10000, &(0x7f00000072c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 63.911322ms ago: executing program 4 (id=5994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x8, 0x800008}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ldst={0x1, 0x3, 0x0, 0x9, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa787}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x3, 0x7, 0x7, 0x9, 0x4}, @alu={0x4, 0x0, 0x5, 0x2, 0x9, 0x40}, @alu={0x0, 0x1, 0x3, 0x0, 0x5, 0x50, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x59}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xff5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=5995): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x6, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xb, 0x2}}]}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): invalid length. [ 426.407762][T21676] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4485'. [ 426.527736][T21682] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 426.566297][T21688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4489'. [ 426.663258][T21692] gretap0: entered promiscuous mode [ 426.787673][T21696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4492'. [ 426.826466][T21700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4491'. [ 426.842194][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4491'. [ 427.104714][T21714] SET target dimension over the limit! [ 427.156987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.460344][T21731] netlink: 'syz.4.4501': attribute type 16 has an invalid length. [ 427.488110][T21731] netlink: 'syz.4.4501': attribute type 17 has an invalid length. [ 427.577099][T21731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.870613][T21749] netlink: 'syz.3.4510': attribute type 27 has an invalid length. [ 428.053980][T21765] SET target dimension over the limit! [ 428.081004][T21752] tcpmss_tg6_check: 23 callbacks suppressed [ 428.081025][T21752] xt_TCPMSS: Only works on TCP SYN packets [ 428.207795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.941247][T21813] tipc: Enabling of bearer rejected, failed to enable media [ 429.337014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.440684][T21853] netlink: 'syz.1.4540': attribute type 1 has an invalid length. [ 429.637395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.671324][T21860] sctp: [Deprecated]: syz.3.4542 (pid 21860) Use of int in max_burst socket option. [ 429.671324][T21860] Use struct sctp_assoc_value instead [ 430.056356][T21882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.077736][T21885] ipt_REJECT: TCP_RESET invalid for non-tcp [ 430.089634][T21882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.358126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.407444][T21895] tipc: Enabled bearer , priority 0 [ 430.595296][T21906] __nla_validate_parse: 15 callbacks suppressed [ 430.595317][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4558'. [ 430.618729][T21895] syzkaller0: entered promiscuous mode [ 430.627446][T21907] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 430.647626][T21895] syzkaller0: entered allmulticast mode [ 430.654184][T21895] tipc: Resetting bearer [ 430.661013][T21901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4555'. [ 430.685582][T21892] tipc: Resetting bearer [ 431.370710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.721213][ T5151] Bluetooth: hci5: command 0x0406 tx timeout [ 431.972732][T21892] tipc: Disabling bearer [ 432.128555][T21924] syzkaller1: entered promiscuous mode [ 432.139446][T21924] syzkaller1: entered allmulticast mode [ 432.276774][T21939] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4570'. [ 432.324094][T21939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4570'. [ 432.450900][T21950] netlink: 'syz.4.4572': attribute type 10 has an invalid length. [ 432.493137][T21950] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 432.497786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.540344][T21958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4576'. [ 432.768103][T21969] ip6t_rpfilter: unknown options [ 432.785916][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4581'. [ 433.129656][T21991] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 433.147791][T21991] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 433.171920][T21996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4589'. [ 433.192950][T21997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4589'. [ 433.264258][T21995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4589'. [ 433.360595][T22005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4593'. [ 433.418751][T22009] SET target dimension over the limit! [ 433.424346][T22009] FAULT_INJECTION: forcing a failure. [ 433.424346][T22009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.480015][T22009] CPU: 1 UID: 0 PID: 22009 Comm: syz.1.4594 Not tainted syzkaller #0 PREEMPT(full) [ 433.480044][T22009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.480057][T22009] Call Trace: [ 433.480065][T22009] [ 433.480074][T22009] dump_stack_lvl+0x189/0x250 [ 433.480100][T22009] ? __pfx____ratelimit+0x10/0x10 [ 433.480124][T22009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.480145][T22009] ? __pfx__printk+0x10/0x10 [ 433.480179][T22009] should_fail_ex+0x414/0x560 [ 433.480209][T22009] _copy_to_user+0x31/0xb0 [ 433.480231][T22009] simple_read_from_buffer+0xe1/0x170 [ 433.480266][T22009] proc_fail_nth_read+0x1b3/0x220 [ 433.480294][T22009] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.480323][T22009] ? rw_verify_area+0x2a6/0x4d0 [ 433.480348][T22009] ? __lock_acquire+0xab9/0xd20 [ 433.480365][T22009] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.480392][T22009] vfs_read+0x200/0xa30 [ 433.480418][T22009] ? fdget_pos+0x247/0x320 [ 433.480440][T22009] ? __pfx___mutex_lock+0x10/0x10 [ 433.480467][T22009] ? __pfx_vfs_read+0x10/0x10 [ 433.480495][T22009] ? __fget_files+0x2a/0x420 [ 433.480518][T22009] ? __fget_files+0x3a0/0x420 [ 433.480534][T22009] ? __fget_files+0x2a/0x420 [ 433.480562][T22009] ksys_read+0x145/0x250 [ 433.480601][T22009] ? __pfx_ksys_read+0x10/0x10 [ 433.480632][T22009] ? do_syscall_64+0xbe/0xfa0 [ 433.480661][T22009] do_syscall_64+0xfa/0xfa0 [ 433.480684][T22009] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.480708][T22009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.480727][T22009] ? clear_bhb_loop+0x60/0xb0 [ 433.480752][T22009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.480772][T22009] RIP: 0033:0x7f094cd8d8dc [ 433.480789][T22009] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 433.480807][T22009] RSP: 002b:00007f094dbce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.480829][T22009] RAX: ffffffffffffffda RBX: 00007f094cfe5fa0 RCX: 00007f094cd8d8dc [ 433.480844][T22009] RDX: 000000000000000f RSI: 00007f094dbce0a0 RDI: 0000000000000004 [ 433.480857][T22009] RBP: 00007f094dbce090 R08: 0000000000000000 R09: 0000000000000000 [ 433.480868][T22009] R10: 00002000000015c0 R11: 0000000000000246 R12: 0000000000000001 [ 433.480881][T22009] R13: 00007f094cfe6038 R14: 00007f094cfe5fa0 R15: 00007ffc1a8fb488 [ 433.480915][T22009] [ 433.719482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.819563][T22013] netlink: 'syz.2.4595': attribute type 16 has an invalid length. [ 433.828978][T22013] netlink: 'syz.2.4595': attribute type 17 has an invalid length. [ 433.865372][T22013] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 434.358125][T22033] netlink: 'syz.0.4602': attribute type 10 has an invalid length. [ 434.497016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.850613][T22048] geneve3: entered promiscuous mode [ 434.862923][T22048] geneve3: entered allmulticast mode [ 434.896144][T22053] Cannot find add_set index 65532 as target [ 434.983603][T22050] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.018646][T22050] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.058848][T22054] tipc: Enabled bearer , priority 0 [ 435.071055][T22045] tipc: Resetting bearer [ 435.113561][T22050] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.135925][T22050] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.215672][T22056] syzkaller0: entered promiscuous mode [ 435.225302][T22056] syzkaller0: entered allmulticast mode [ 435.284009][T22050] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.344004][T22050] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.423994][T22043] tipc: Resetting bearer [ 435.478766][T22043] tipc: Disabling bearer [ 435.523654][T22050] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.591510][T22050] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.601571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.830569][T22074] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 435.839326][T14303] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 435.850616][T14303] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 435.866041][T21952] syz.3.4573: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 435.884979][T22076] __nla_validate_parse: 6 callbacks suppressed [ 435.884995][T22076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4612'. [ 435.886267][T21952] CPU: 0 UID: 0 PID: 21952 Comm: syz.3.4573 Not tainted syzkaller #0 PREEMPT(full) [ 435.886297][T21952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.886314][T21952] Call Trace: [ 435.886324][T21952] [ 435.886335][T21952] dump_stack_lvl+0x189/0x250 [ 435.886370][T21952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.886397][T21952] ? __pfx__printk+0x10/0x10 [ 435.886423][T21952] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 435.886457][T21952] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 435.886495][T21952] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 435.886534][T21952] warn_alloc+0x214/0x310 [ 435.886581][T21952] ? __pfx_warn_alloc+0x10/0x10 [ 435.886638][T21952] ? __get_vm_area_node+0x28f/0x300 [ 435.886673][T21952] ? translate_table+0x19b/0x2040 [ 435.886713][T21952] __vmalloc_node_range_noprof+0x690/0x12d0 [ 435.886811][T21952] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 435.886845][T21952] ? translate_table+0x19b/0x2040 [ 435.886883][T21952] ? rcu_is_watching+0x15/0xb0 [ 435.886917][T21952] ? translate_table+0x19b/0x2040 [ 435.886951][T21952] __kvmalloc_node_noprof+0x674/0x910 [ 435.886988][T21952] ? translate_table+0x19b/0x2040 [ 435.887018][T21952] ? do_ip6t_set_ctl+0x88a/0xce0 [ 435.887049][T21952] ? nf_setsockopt+0x26f/0x290 [ 435.887081][T21952] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 435.887107][T21952] ? do_syscall_64+0xfa/0xfa0 [ 435.887145][T21952] translate_table+0x19b/0x2040 [ 435.887195][T21952] ? __lock_acquire+0xab9/0xd20 [ 435.887227][T21952] ? __pfx_translate_table+0x10/0x10 [ 435.887263][T21952] ? __might_fault+0xb0/0x130 [ 435.887321][T21952] ? _copy_from_user+0x94/0xb0 [ 435.887349][T21952] do_ip6t_set_ctl+0x970/0xce0 [ 435.887388][T21952] ? rcu_is_watching+0x15/0xb0 [ 435.887416][T21952] ? trace_contention_end+0x39/0x120 [ 435.887446][T21952] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 435.887508][T21952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 435.887554][T21952] ? __pfx_aa_sk_perm+0x10/0x10 [ 435.887598][T21952] nf_setsockopt+0x26f/0x290 [ 435.887632][T21952] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 435.887673][T21952] do_sock_setsockopt+0x17c/0x1b0 [ 435.887705][T21952] __x64_sys_setsockopt+0x13f/0x1b0 [ 435.887741][T21952] do_syscall_64+0xfa/0xfa0 [ 435.887769][T21952] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.887798][T21952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.887823][T21952] ? clear_bhb_loop+0x60/0xb0 [ 435.887854][T21952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.887878][T21952] RIP: 0033:0x7f431778eec9 [ 435.887900][T21952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.887921][T21952] RSP: 002b:00007f43185d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 435.887949][T21952] RAX: ffffffffffffffda RBX: 00007f43179e5fa0 RCX: 00007f431778eec9 [ 435.887967][T21952] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 435.887982][T21952] RBP: 00007f4317811f91 R08: 00000000000003c8 R09: 0000000000000000 [ 435.887998][T21952] R10: 00002000000015c0 R11: 0000000000000246 R12: 0000000000000000 [ 435.888014][T21952] R13: 00007f43179e6038 R14: 00007f43179e5fa0 R15: 00007ffd1864e658 [ 435.888064][T21952] [ 435.888134][T21952] Mem-Info: [ 435.948831][T22076] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4612'. [ 435.951093][T21952] active_anon:6674 inactive_anon:0 isolated_anon:0 [ 435.951093][T21952] active_file:3630 inactive_file:40030 isolated_file:0 [ 435.951093][T21952] unevictable:768 dirty:291 writeback:0 [ 435.951093][T21952] slab_reclaimable:13285 slab_unreclaimable:118360 [ 435.951093][T21952] mapped:31534 shmem:3240 pagetables:1060 [ 435.951093][T21952] sec_pagetables:0 bounce:0 [ 435.951093][T21952] kernel_misc_reclaimable:0 [ 435.951093][T21952] free:1284039 free_pcp:13890 free_cma:0 [ 436.087200][T14303] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.087235][T14303] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.087289][T14303] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.087343][T14303] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.087380][T14303] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.087406][T14303] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.338333][T21952] Node 0 active_anon:25696kB inactive_anon:0kB active_file:14520kB inactive_file:159920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118636kB dirty:1164kB writeback:0kB shmem:10624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15372kB pagetables:4196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 436.371720][T21952] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 436.403057][T21952] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.434300][T21952] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 436.440405][T21952] Node 0 DMA32 free:1213240kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21996kB inactive_anon:0kB active_file:14520kB inactive_file:159920kB unevictable:1536kB writepending:1164kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:52748kB local_pcp:12612kB free_cma:0kB [ 436.520387][T21952] lowmem_reserve[]: 0 0 1 1 1 [ 436.526619][T21952] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.567012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.572872][T21952] lowmem_reserve[]: 0 0 0 0 0 [ 436.587834][T21952] Node 1 Normal free:3903756kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11232kB local_pcp:7136kB free_cma:0kB [ 436.655716][T21952] lowmem_reserve[]: 0 0 0 0 0 [ 436.662568][T21952] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 436.764339][T21952] Node 0 [ 436.770462][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4619'. [ 436.783034][T21952] DMA32: 2*4kB (UE) 2*8kB (UE) 46*16kB (UM) 78*32kB (UME) 127*64kB (UME) 99*128kB (UME) 58*256kB (UM) 40*512kB (UM) 37*1024kB (UM) 7*2048kB (UME) 269*4096kB (M) = 1213432kB [ 436.783431][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4620'. [ 436.801008][T22098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4619'. [ 436.801847][T21952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 436.917506][T21952] Node 1 Normal: 177*4kB (UME) 49*8kB (UME) 38*16kB (UME) 173*32kB (UME) 53*64kB (UME) 7*128kB (UME) 4*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (ME) = 3903756kB [ 436.963874][T22107] SET target dimension over the limit! [ 436.973830][T21952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.002656][T21952] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 437.024843][T22112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4623'. [ 437.034602][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4623'. [ 437.044799][T22112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4623'. [ 437.057615][T21952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.077359][T21952] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 437.089851][T21952] 45033 total pagecache pages [ 437.098919][T21952] 0 pages in swap cache [ 437.106978][T21952] Free swap = 124996kB [ 437.117353][T21952] Total swap = 124996kB [ 437.123381][T21952] 2097051 pages RAM [ 437.131721][T21952] 0 pages HighMem/MovableOnly [ 437.136423][T21952] 424543 pages reserved [ 437.150824][T21952] 0 pages cma reserved [ 437.220720][T22120] syzkaller0: entered promiscuous mode [ 437.226253][T22120] syzkaller0: entered allmulticast mode [ 437.607739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.992598][T22155] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4635'. [ 438.169953][T22166] sctp: [Deprecated]: syz.0.4639 (pid 22166) Use of int in maxseg socket option. [ 438.169953][T22166] Use struct sctp_assoc_value instead [ 438.260069][T22166] tipc: Enabled bearer , priority 0 [ 438.297040][T22166] syzkaller0: entered promiscuous mode [ 438.302569][T22166] syzkaller0: entered allmulticast mode [ 438.374774][T22165] tipc: Resetting bearer [ 438.439334][T22165] tipc: Disabling bearer [ 438.601753][T22181] netlink: 'syz.2.4645': attribute type 1 has an invalid length. [ 438.620530][T22186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4647'. [ 438.687737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.309791][T22193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 439.493369][T22200] syzkaller0: entered promiscuous mode [ 439.510701][T22200] syzkaller0: entered allmulticast mode [ 439.727100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.897142][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.707281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.681224][T22226] tc_dump_action: action bad kind [ 441.820693][T22233] __nla_validate_parse: 3 callbacks suppressed [ 441.820711][T22233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4656'. [ 441.859801][T22233] tipc: Invalid UDP bearer configuration [ 441.860180][T22233] tipc: Enabling of bearer rejected, failed to enable media [ 441.875071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.908004][T22239] SET target dimension over the limit! [ 441.964364][ T5151] Bluetooth: hci2: command 0x0401 tx timeout [ 442.224367][T22262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.231685][T22262] IPv6: NLM_F_CREATE should be set when creating new route [ 442.250097][T22262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4665'. [ 442.299818][T22265] netlink: 'syz.1.4664': attribute type 16 has an invalid length. [ 442.321621][T22265] netlink: 'syz.1.4664': attribute type 17 has an invalid length. [ 442.322509][T22266] netlink: 'syz.2.4663': attribute type 16 has an invalid length. [ 442.347511][T22265] tunl0: left promiscuous mode [ 442.370064][T22265] gre0: left promiscuous mode [ 442.382276][T22266] netlink: 'syz.2.4663': attribute type 17 has an invalid length. [ 442.418199][T22265] gretap0: left promiscuous mode [ 442.426301][T22265] erspan0: left promiscuous mode [ 442.434112][T22265] ip_vti0: left promiscuous mode [ 442.545234][T22265] geneve1: left promiscuous mode [ 442.562382][T22265] ip6erspan0: left allmulticast mode [ 442.573937][T22265] geneve2: left allmulticast mode [ 442.580638][T22265] bridge1: left allmulticast mode [ 442.643297][T22265] batadv0: entered promiscuous mode [ 442.651920][T22265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 442.664515][ T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 442.665977][T22265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.687110][T22265] veth5: left promiscuous mode [ 442.704703][T22265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.724289][T22266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.770950][ T1172] bond0: (slave ip6gretap1): link status up again after 0 ms [ 442.787072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.795661][ T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 442.813284][ T13] bond0: (slave ip6gretap1): link status up again after 0 ms [ 442.848459][T14279] bond0: (slave ip6gretap1): link status up again after 0 ms [ 442.855903][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 442.895793][T14279] bond0: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 442.928464][T14279] bond0: active interface up! [ 443.057702][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 443.293902][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 443.428511][ T1172] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.436895][ T1172] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.457327][T10043] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.521419][T22295] netlink: 'syz.0.4675': attribute type 12 has an invalid length. [ 443.677184][ T5826] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.757846][ T5826] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.825784][T22299] netlink: 'syz.4.4676': attribute type 8 has an invalid length. [ 444.115084][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4678'. [ 444.356192][T22317] SET target dimension over the limit! [ 444.364317][T22317] SET target dimension over the limit! [ 444.521094][T22325] netlink: 'syz.4.4686': attribute type 16 has an invalid length. [ 444.544204][T22325] netlink: 'syz.4.4686': attribute type 3 has an invalid length. [ 444.567185][T22325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4686'. [ 444.945422][T22343] block nbd3: not configured, cannot reconfigure [ 445.006047][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4693'. [ 445.133119][T22349] bond0: (slave bond_slave_1): Releasing backup interface [ 445.285254][T22353] netlink: 'syz.2.4693': attribute type 4 has an invalid length. [ 445.461140][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 445.479910][T22377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4699'. [ 445.492957][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 445.739072][T22389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4703'. [ 445.899552][T22395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4705'. [ 445.983488][T22400] SET target dimension over the limit! [ 446.037361][ T30] audit: type=1800 audit(1760468038.423:3): pid=22385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4701" name="memory.events" dev="tmpfs" ino=1987 res=0 errno=0 [ 446.271540][T22414] 8ÿ: entered promiscuous mode [ 446.634709][T22441] SET target dimension over the limit! [ 447.218746][T22447] __nla_validate_parse: 5 callbacks suppressed [ 447.218766][T22447] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4720'. [ 447.237197][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.444312][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4721'. [ 447.593763][T22459] syzkaller0: entered promiscuous mode [ 447.620868][T22459] syzkaller0: entered allmulticast mode [ 447.717559][T14279] net_ratelimit: 32 callbacks suppressed [ 447.717581][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.848774][T22479] SET target dimension over the limit! [ 447.858481][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.880538][T22483] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4732'. [ 447.977757][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.077012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.097813][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.136462][T22498] netlink: 'syz.4.4734': attribute type 16 has an invalid length. [ 448.157587][T22498] netlink: 'syz.4.4734': attribute type 17 has an invalid length. [ 448.190675][T22498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.250120][T22502] xt_l2tp: missing protocol rule (udp|l2tpip) [ 448.258334][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.377270][ T3500] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.490356][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.607770][ T3500] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.727885][T22532] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4748'. [ 448.824093][T22541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4749'. [ 448.845823][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4749'. [ 449.059554][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4755'. [ 449.102282][T22556] netlink: 'syz.4.4752': attribute type 1 has an invalid length. [ 449.203129][T22563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4757'. [ 449.286521][T22556] bond8: entered promiscuous mode [ 449.314049][T22556] 8021q: adding VLAN 0 to HW filter on device bond8 [ 449.386119][T22561] 8021q: adding VLAN 0 to HW filter on device bond8 [ 449.394371][T22561] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 449.400010][T22575] netlink: 'syz.0.4756': attribute type 16 has an invalid length. [ 449.413974][T22561] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 449.437133][T22561] bond8: (slave wireguard0): making interface the new active one [ 449.444537][T22575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4756'. [ 449.451761][T22561] wireguard0: entered promiscuous mode [ 449.461444][T22561] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 449.479550][T22575] netlink: 'syz.0.4756': attribute type 16 has an invalid length. [ 449.487920][T22575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4756'. [ 449.631527][T22564] bond8 (unregistering): (slave wireguard0): Releasing backup interface [ 449.642555][T22564] wireguard0: left promiscuous mode [ 449.652393][T22564] bond8 (unregistering): Released all slaves [ 449.975748][T22602] netlink: 'syz.4.4763': attribute type 16 has an invalid length. [ 449.991016][T22602] netlink: 'syz.4.4763': attribute type 17 has an invalid length. [ 450.426348][T22614] netlink: 'syz.2.4769': attribute type 1 has an invalid length. [ 450.546666][T22614] 8021q: adding VLAN 0 to HW filter on device bond6 [ 450.585093][T22621] netlink: 'syz.3.4770': attribute type 2 has an invalid length. [ 450.765879][T22627] SET target dimension over the limit! [ 450.809623][T22632] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 451.136039][T22651] syzkaller0: entered promiscuous mode [ 451.160942][T22651] syzkaller0: entered allmulticast mode [ 451.187970][T22649] tipc: Enabled bearer , priority 0 [ 451.280729][T22649] tipc: Resetting bearer [ 451.375805][T22649] tipc: Disabling bearer [ 451.593881][T22675] SET target dimension over the limit! [ 451.603566][T22676] netlink: 'syz.1.4784': attribute type 16 has an invalid length. [ 451.619627][T22676] netlink: 'syz.1.4784': attribute type 17 has an invalid length. [ 451.722246][ T1219] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 451.749252][T22678] bridge0: port 3(syz_tun) entered disabled state [ 451.780635][T22678] syz_tun (unregistering): left allmulticast mode [ 451.798084][T22678] syz_tun (unregistering): left promiscuous mode [ 451.808268][T22678] bridge0: port 3(syz_tun) entered disabled state [ 451.834865][ T1219] syz1: Port: 1 Link DOWN [ 451.896717][ T12] smc: removing ib device syz1 [ 452.202489][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 452.235810][T22693] __nla_validate_parse: 6 callbacks suppressed [ 452.235829][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4791'. [ 452.256223][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4791'. [ 452.309256][T10051] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 452.501402][T22700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4794'. [ 452.532510][T22705] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4795'. [ 452.532995][T22701] netlink: 'syz.2.4793': attribute type 1 has an invalid length. [ 452.552732][T22704] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4795'. [ 452.562304][T22701] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4793'. [ 452.582304][T22704] gretap0: entered promiscuous mode [ 452.592904][T22702] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4793'. [ 452.621310][T22701] NCSI netlink: No device for ifindex 830110067 [ 452.642865][T22705] 0ªî{X¹¦: renamed from gretap0 [ 452.670315][T22705] 0ªî{X¹¦: left promiscuous mode [ 452.675404][T22705] 0ªî{X¹¦: entered allmulticast mode [ 452.712262][T22709] veth1_to_bond: entered promiscuous mode [ 452.728934][ T13] net_ratelimit: 36 callbacks suppressed [ 452.728955][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 452.874101][T22717] ip6t_srh: unknown srh match flags 4000 [ 452.882116][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.037345][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.167453][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.229176][T22732] netlink: 'syz.0.4806': attribute type 11 has an invalid length. [ 453.265387][T22733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 453.284433][T22738] SET target dimension over the limit! [ 453.297252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.378245][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.487871][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.652541][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.815936][T22748] bond6: option min_links: invalid value (18446744073709551614) [ 453.831764][T22748] bond6: option min_links: allowed values 0 - 2147483647 [ 453.845473][T22748] bond6 (unregistering): Released all slaves [ 453.858278][T22756] sctp: [Deprecated]: syz.1.4812 (pid 22756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.858278][T22756] Use struct sctp_sack_info instead [ 454.131419][T22763] validate_nla: 3 callbacks suppressed [ 454.131437][T22763] netlink: 'syz.3.4814': attribute type 10 has an invalid length. [ 454.217325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.288799][T22753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4812'. [ 454.380100][T22763] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 454.417228][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.913696][T22793] sctp: [Deprecated]: syz.1.4821 (pid 22793) Use of int in max_burst socket option deprecated. [ 454.913696][T22793] Use struct sctp_assoc_value instead [ 455.069609][T22801] netlink: 'syz.3.4822': attribute type 16 has an invalid length. [ 455.087104][T22801] netlink: 'syz.3.4822': attribute type 17 has an invalid length. [ 455.128218][T22800] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4823'. [ 455.245490][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 456.077444][T22821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4827'. [ 456.355193][T22835] netlink: 'syz.4.4830': attribute type 1 has an invalid length. [ 456.388705][T22835] nbd: couldn't find device at index 1048576 [ 456.583674][T22842] bridge_slave_1: left allmulticast mode [ 456.589491][T22842] bridge_slave_1: left promiscuous mode [ 456.595276][T22842] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.617631][T22842] bridge_slave_0: left allmulticast mode [ 456.623407][T22842] bridge_slave_0: left promiscuous mode [ 456.629420][T22842] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.045572][T22864] netlink: 'syz.0.4843': attribute type 1 has an invalid length. [ 457.113808][T22862] netlink: 'syz.3.4842': attribute type 16 has an invalid length. [ 457.122029][T22862] netlink: 'syz.3.4842': attribute type 17 has an invalid length. [ 457.146578][T22862] eql: remember to turn off Van-Jacobson compression on your slave devices [ 457.318262][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 457.353476][T22840] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 457.363126][T22840] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 457.521006][T22888] tipc: Invalid UDP bearer configuration [ 457.521061][T22888] tipc: Enabling of bearer rejected, failed to enable media [ 457.550929][T22879] nbd: must specify a size in bytes for the device [ 457.562245][T22840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 457.568395][T22840] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 457.647800][T22840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 457.654800][T22840] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 457.693261][T22840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 457.699530][T22840] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 457.827279][ T1172] net_ratelimit: 19 callbacks suppressed [ 457.827297][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 457.967757][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 458.037345][T22909] __nla_validate_parse: 7 callbacks suppressed [ 458.037364][T22909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4854'. [ 458.088550][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 458.196989][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 458.314086][T22929] netlink: 'syz.3.4861': attribute type 1 has an invalid length. [ 458.322229][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4861'. [ 458.344553][T22921] netlink: 'syz.1.4858': attribute type 16 has an invalid length. [ 458.356994][T22921] netlink: 'syz.1.4858': attribute type 17 has an invalid length. [ 458.377007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.394687][T22926] lo: entered promiscuous mode [ 458.449272][T22930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4861'. [ 458.594572][T22926] tunl0: entered promiscuous mode [ 458.613440][T22926] gre0: entered promiscuous mode [ 458.648667][T22926] 0ªî{X¹¦: entered promiscuous mode [ 458.661850][T22926] erspan0: entered promiscuous mode [ 458.672202][T22926] ip_vti0: entered promiscuous mode [ 458.698942][T22921] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 458.715796][T22930] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4861'. [ 458.731341][T22935] tipc: New replicast peer: 255.255.255.255 [ 458.738816][T22935] tipc: Enabled bearer , priority 10 [ 458.757542][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 458.881214][T22942] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 459.019766][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.237964][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.378228][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.447635][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 459.537989][T22985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4881'. [ 459.742490][T22990] netlink: 'syz.2.4883': attribute type 16 has an invalid length. [ 459.758760][T22990] netlink: 'syz.2.4883': attribute type 17 has an invalid length. [ 459.856994][T10038] tipc: Node number set to 1703915092 [ 460.124056][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4894'. [ 460.134601][T23020] netlink: 'syz.2.4894': attribute type 5 has an invalid length. [ 460.145228][T23020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4894'. [ 460.309446][T23020] geneve4: entered promiscuous mode [ 460.314717][T23020] geneve4: entered allmulticast mode [ 460.322237][ T3500] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 460.345377][ T3500] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 460.373400][ T3500] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 460.385366][ T3500] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 460.511649][T23044] netlink: 'syz.3.4900': attribute type 1 has an invalid length. [ 460.685945][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4903'. [ 460.816249][T23063] netlink: 'syz.2.4904': attribute type 16 has an invalid length. [ 460.873467][T23063] netlink: 'syz.2.4904': attribute type 17 has an invalid length. [ 460.954116][T23077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4908'. [ 461.052931][T23086] netlink: 'syz.0.4908': attribute type 8 has an invalid length. [ 461.168343][T23090] tipc: Enabled bearer , priority 0 [ 461.176389][T23090] syzkaller0: entered promiscuous mode [ 461.183618][T23090] syzkaller0: entered allmulticast mode [ 461.322076][T23089] tipc: Resetting bearer [ 461.364505][T23089] tipc: Disabling bearer [ 461.599852][T23119] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 461.620099][T23121] netlink: 'syz.3.4917': attribute type 1 has an invalid length. [ 461.814595][T23129] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 461.961239][T23131] netlink: 'syz.0.4921': attribute type 16 has an invalid length. [ 461.987376][T23131] netlink: 'syz.0.4921': attribute type 17 has an invalid length. [ 462.492756][T23170] xt_HMARK: proto mask must be zero with L3 mode [ 463.589167][ C1] net_ratelimit: 24 callbacks suppressed [ 463.589183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.957769][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.079482][T23188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.108238][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.184141][T23200] sctp: [Deprecated]: syz.0.4942 (pid 23200) Use of int in max_burst socket option deprecated. [ 464.184141][T23200] Use struct sctp_assoc_value instead [ 464.220903][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.338360][T23213] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 464.386136][T23215] __nla_validate_parse: 2 callbacks suppressed [ 464.386156][T23215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4944'. [ 464.607456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.781900][T23202] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.960527][T23202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.010652][T23202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.186027][T23202] geneve3: left promiscuous mode [ 465.191573][T23202] geneve3: left allmulticast mode [ 465.210168][T23202] geneve4: left promiscuous mode [ 465.215259][T23202] geneve4: left allmulticast mode [ 465.237669][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 465.318204][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4947'. [ 465.350003][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 465.423385][T14303] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 465.440772][T14303] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.451875][T14303] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 256 - 0 [ 465.482116][T14303] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 465.508714][T14303] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.527356][T14303] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 256 - 0 [ 465.544156][T23237] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4949'. [ 465.605314][T14303] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 465.630391][T14303] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.657429][T14303] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 256 - 0 [ 465.716600][T14303] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 465.728654][T23259] sctp: [Deprecated]: syz.2.4954 (pid 23259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.728654][T23259] Use struct sctp_sack_info instead [ 465.745856][T14303] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.756517][T14303] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 256 - 0 [ 465.767002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.778052][T23259] sctp: [Deprecated]: syz.2.4954 (pid 23259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.778052][T23259] Use struct sctp_sack_info instead [ 465.817197][T23255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4955'. [ 465.837303][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 465.879246][T23269] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4957'. [ 465.945605][T23272] netlink: 'syz.2.4958': attribute type 1 has an invalid length. [ 465.967623][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 466.058879][T23277] bond2 (unregistering): Released all slaves [ 466.142798][T23283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4961'. [ 466.181937][T23287] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4964'. [ 466.211922][T23287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4964'. [ 466.245383][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4963'. [ 466.268333][T23290] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4963'. [ 466.312542][T23297] SET target dimension over the limit! [ 466.847651][T23338] SET target dimension over the limit! [ 467.276833][T23357] tipc: Enabled bearer , priority 0 [ 467.287992][T23358] Unsupported ieee802154 address type: 0 [ 467.317712][T23357] syzkaller0: entered promiscuous mode [ 467.323231][T23357] syzkaller0: entered allmulticast mode [ 467.373190][T23357] tipc: Resetting bearer [ 467.405866][T23355] tipc: Resetting bearer [ 467.460785][T23355] tipc: Disabling bearer [ 468.502580][T23443] netlink: 'syz.1.5013': attribute type 32 has an invalid length. [ 468.523976][T23444] netlink: 'syz.1.5013': attribute type 32 has an invalid length. [ 468.568397][T23449] SET target dimension over the limit! [ 468.685876][T23456] xt_TCPMSS: Only works on TCP SYN packets [ 468.688381][T23448] sch_fq: defrate 0 ignored. [ 468.730333][T14279] net_ratelimit: 22 callbacks suppressed [ 468.730352][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 468.817109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.847057][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 468.959694][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.086331][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.192473][T23495] netlink: 'syz.0.5026': attribute type 16 has an invalid length. [ 469.200844][T23484] netlink: 'syz.2.5027': attribute type 16 has an invalid length. [ 469.212665][T23484] netlink: 'syz.2.5027': attribute type 17 has an invalid length. [ 469.265268][T23484] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 469.361088][T23494] bond8: option lp_interval: invalid value (0) [ 469.367518][T23494] bond8: option lp_interval: allowed values 1 - 2147483647 [ 469.376094][T23494] bond8 (unregistering): Released all slaves [ 469.523022][T23496] bond8: option lp_interval: invalid value (0) [ 469.529754][T23496] bond8: option lp_interval: allowed values 1 - 2147483647 [ 469.571856][T23496] bond8 (unregistering): Released all slaves [ 469.647574][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.877565][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 469.906980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.992965][T23519] SET target dimension over the limit! [ 470.007403][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.299452][T23534] tipc: Enabled bearer , priority 0 [ 470.329289][T23534] syzkaller0: entered promiscuous mode [ 470.353252][T23554] __nla_validate_parse: 8 callbacks suppressed [ 470.353271][T23554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5045'. [ 470.373272][T23534] syzkaller0: entered allmulticast mode [ 470.399790][T23534] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 470.494032][T23534] tipc: Resetting bearer [ 470.531249][T23530] tipc: Resetting bearer [ 470.551797][T23569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5047'. [ 470.563569][T23573] netlink: 'syz.3.5049': attribute type 1 has an invalid length. [ 470.572194][T23573] netlink: 'syz.3.5049': attribute type 3 has an invalid length. [ 470.572841][T23530] tipc: Disabling bearer [ 470.581064][T23573] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5049'. [ 470.600300][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.602829][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5049'. [ 470.621660][T23573] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 470.759178][T23578] netlink: 'syz.4.5050': attribute type 33 has an invalid length. [ 470.767303][T23578] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5050'. [ 470.969235][T23589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5056'. [ 471.031881][T23589] lo speed is unknown, defaulting to 1000 [ 471.058359][T23584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5053'. [ 471.074913][T23589] lo speed is unknown, defaulting to 1000 [ 471.076609][T23584] bridge_slave_1: left allmulticast mode [ 471.090092][T23584] bridge_slave_1: left promiscuous mode [ 471.095959][T23584] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.116479][T23584] bridge_slave_0: left allmulticast mode [ 471.123200][T23584] bridge_slave_0: left promiscuous mode [ 471.133997][T23584] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.265445][T23589] lo speed is unknown, defaulting to 1000 [ 471.299440][T23604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.314202][T23604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.332757][T23604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.340561][T23604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.353157][T23589] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 471.389171][T23613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5061'. [ 471.421951][T23589] lo speed is unknown, defaulting to 1000 [ 471.435252][T23589] lo speed is unknown, defaulting to 1000 [ 471.443459][T23589] lo speed is unknown, defaulting to 1000 [ 471.452234][T23589] lo speed is unknown, defaulting to 1000 [ 471.462956][T23589] lo speed is unknown, defaulting to 1000 [ 471.472328][T23589] lo speed is unknown, defaulting to 1000 [ 471.480705][T23589] lo speed is unknown, defaulting to 1000 [ 471.509035][T23616] netlink: 'syz.2.5062': attribute type 1 has an invalid length. [ 471.525939][T23589] lo speed is unknown, defaulting to 1000 [ 471.530622][T23616] netlink: 'syz.2.5062': attribute type 2 has an invalid length. [ 471.549510][T23616] netlink: 'syz.2.5062': attribute type 1 has an invalid length. [ 471.600167][T23616] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5062'. [ 471.751833][T23631] lo speed is unknown, defaulting to 1000 [ 471.801545][T23626] netlink: 'syz.0.5066': attribute type 16 has an invalid length. [ 471.830824][T23626] netlink: 'syz.0.5066': attribute type 17 has an invalid length. [ 472.112073][T23650] syzkaller0: entered promiscuous mode [ 472.118389][T23650] syzkaller0: entered allmulticast mode [ 472.188596][T23642] syzkaller1: entered promiscuous mode [ 472.217037][T23642] syzkaller1: entered allmulticast mode [ 472.405340][T23665] netlink: 'syz.0.5076': attribute type 16 has an invalid length. [ 472.417525][T23665] netlink: 'syz.0.5076': attribute type 17 has an invalid length. [ 472.440307][T23665] 0ªî{X¹¦: left allmulticast mode [ 472.516242][T23664] lo speed is unknown, defaulting to 1000 [ 473.035119][T23683] veth11: entered allmulticast mode [ 473.198210][T23693] lo speed is unknown, defaulting to 1000 [ 473.205578][T23699] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5086'. [ 473.219330][T23700] netlink: 'syz.2.5084': attribute type 16 has an invalid length. [ 473.245174][T23700] netlink: 'syz.2.5084': attribute type 17 has an invalid length. [ 473.436762][T23700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.479528][T23700] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.530854][T23722] netlink: 'syz.4.5092': attribute type 1 has an invalid length. [ 473.737255][ T12] net_ratelimit: 24 callbacks suppressed [ 473.737277][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 473.987034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.137397][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 474.223865][T23764] --map-set only usable from mangle table [ 474.294443][T23770] IPv6: NLM_F_REPLACE set, but no existing node found! [ 474.307355][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 474.399098][T23774] bond8: Unable to set down delay as MII monitoring is disabled [ 474.430132][T23774] bond8 (unregistering): Released all slaves [ 474.534507][T23776] bond8: Unable to set down delay as MII monitoring is disabled [ 474.558456][T23790] Bluetooth: MGMT ver 1.23 [ 474.600210][T23776] bond8 (unregistering): Released all slaves [ 474.797988][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 474.908069][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.039333][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.096965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.227726][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.368116][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.402148][T23838] veth0_macvtap: left promiscuous mode [ 475.409558][T23838] macvtap0: entered allmulticast mode [ 475.419125][T23844] __nla_validate_parse: 8 callbacks suppressed [ 475.419145][T23844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5128'. [ 475.431135][T23838] macvtap0: refused to change device tx_queue_len [ 475.567737][T23857] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5131'. [ 475.591410][T23857] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5131'. [ 475.599687][T23855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5132'. [ 475.804460][T23869] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5135'. [ 475.826694][T23870] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5135'. [ 475.857481][T23871] syzkaller0: entered promiscuous mode [ 475.863092][T23871] syzkaller0: entered allmulticast mode [ 476.028552][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5138'. [ 476.226104][T23899] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5142'. [ 476.388019][T23906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5145'. [ 476.454386][T23912] SET target dimension over the limit! [ 476.516619][T23906] hsr_slave_0 (unregistering): left promiscuous mode [ 476.554994][T23914] IPVS: ip_vs_add_dest(): server weight less than zero [ 476.631770][T23922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5150'. [ 476.890582][T23944] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 477.429951][T23980] xt_bpf: check failed: parse error [ 477.433870][T23977] SET target dimension over the limit! [ 477.930411][T24011] validate_nla: 5 callbacks suppressed [ 477.930438][T24011] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 477.961008][T24004] can: request_module (can-proto-3) failed. [ 477.977344][T24012] netlink: 'syz.3.5171': attribute type 11 has an invalid length. [ 478.223144][T24027] xfrm1: entered promiscuous mode [ 478.245378][T24027] xfrm1: entered allmulticast mode [ 478.771118][T24053] hsr_slave_0 (unregistering): left promiscuous mode [ 478.843647][T24066] netlink: 'syz.4.5188': attribute type 16 has an invalid length. [ 478.851781][T24066] netlink: 'syz.4.5188': attribute type 17 has an invalid length. [ 478.866531][T14280] net_ratelimit: 27 callbacks suppressed [ 478.866551][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 478.911129][T24066] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 478.980107][T24070] lo speed is unknown, defaulting to 1000 [ 479.108400][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 479.237019][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 479.307265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.367415][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 479.389801][T24095] netlink: 'syz.0.5198': attribute type 1 has an invalid length. [ 479.407304][T24095] netlink: 'syz.0.5198': attribute type 1 has an invalid length. [ 479.423202][T24096] netlink: 'syz.0.5198': attribute type 23 has an invalid length. [ 479.518851][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 479.547811][T24106] netlink: 'syz.2.5202': attribute type 1 has an invalid length. [ 479.698344][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 479.817781][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 479.927100][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 480.393838][T24156] syzkaller0: entered promiscuous mode [ 480.399834][T24156] syzkaller0: entered allmulticast mode [ 480.750519][T24180] __nla_validate_parse: 16 callbacks suppressed [ 480.750540][T24180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'. [ 480.801663][T24183] netlink: 'syz.4.5223': attribute type 21 has an invalid length. [ 480.810966][T24183] netlink: 'syz.4.5223': attribute type 22 has an invalid length. [ 480.827132][T24183] netlink: 'syz.4.5223': attribute type 23 has an invalid length. [ 480.828181][T24180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.834972][T24183] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5223'. [ 481.603941][T24212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5231'. [ 482.218347][T24247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5244'. [ 482.260125][T24251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5245'. [ 482.270106][T24251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5245'. [ 482.721748][T24281] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20004 [ 482.945840][T24291] tipc: Enabled bearer , priority 0 [ 482.975068][T24289] syzkaller0: entered promiscuous mode [ 482.983028][T24289] syzkaller0: entered allmulticast mode [ 482.995948][T24301] validate_nla: 1 callbacks suppressed [ 482.995965][T24301] netlink: 'syz.1.5261': attribute type 8 has an invalid length. [ 483.030297][T24289] tipc: Resetting bearer [ 483.046387][T24306] nbd: must specify a device to reconfigure [ 483.097194][T24289] tipc: Disabling bearer [ 483.265127][T24321] netlink: 'syz.0.5265': attribute type 2 has an invalid length. [ 483.285944][T24321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5265'. [ 483.497622][T24331] batadv_slave_0: entered promiscuous mode [ 483.579730][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5272'. [ 483.786654][T24354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5276'. [ 483.837753][T24330] batadv_slave_0: left promiscuous mode [ 483.890537][ T12] net_ratelimit: 33 callbacks suppressed [ 483.890560][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.040605][T24358] bond8: option miimon: invalid value (18446744073709551585) [ 484.048927][T24358] bond8: option miimon: allowed values 0 - 2147483647 [ 484.062917][T24358] bond8 (unregistering): Released all slaves [ 484.120723][T24374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5282'. [ 484.149903][T24366] bond8: option miimon: invalid value (18446744073709551585) [ 484.160621][T24366] bond8: option miimon: allowed values 0 - 2147483647 [ 484.178115][T24366] bond8 (unregistering): Released all slaves [ 484.249266][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.367259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.386967][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.497269][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.567984][T24405] netlink: 'syz.3.5290': attribute type 1 has an invalid length. [ 484.627480][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.737170][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.782938][T24426] netlink: 'syz.4.5294': attribute type 10 has an invalid length. [ 484.845769][T24430] syzkaller0: entered promiscuous mode [ 484.852461][T24430] syzkaller0: entered allmulticast mode [ 484.867006][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 484.910692][T24430] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 484.918818][T24430] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 484.985529][T24434] sch_fq: defrate 0 ignored. [ 485.087395][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 485.197036][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 485.618791][T24477] tipc: Enabling of bearer rejected, failed to enable media [ 485.664739][T24477] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 485.805932][T24491] __nla_validate_parse: 9 callbacks suppressed [ 485.805951][T24491] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5314'. [ 485.952764][T24486] veth5: entered allmulticast mode [ 486.114676][T24508] SET target dimension over the limit! [ 486.187479][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.237473][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.271936][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.297367][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.309804][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.319238][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.328949][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.367210][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.386543][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 486.432089][T24526] xt_l2tp: missing protocol rule (udp|l2tpip) [ 486.444080][T24527] netlink: 'syz.4.5325': attribute type 5 has an invalid length. [ 486.488744][T24531] netlink: 'syz.2.5324': attribute type 4 has an invalid length. [ 486.539893][T24532] netlink: 'syz.2.5324': attribute type 4 has an invalid length. [ 486.599873][T24535] bridge8: entered promiscuous mode [ 486.666488][T24540] lo: entered allmulticast mode [ 486.673368][T24540] lo: left allmulticast mode [ 486.753135][T24543] netlink: 'syz.1.5331': attribute type 1 has an invalid length. [ 486.851576][T24549] SET target dimension over the limit! [ 487.008005][T24557] netlink: 'syz.4.5337': attribute type 21 has an invalid length. [ 487.023664][T24557] IPv6: NLM_F_CREATE should be specified when creating new route [ 487.218268][T24575] syzkaller0: entered promiscuous mode [ 487.223823][T24575] syzkaller0: entered allmulticast mode [ 488.957337][ T1172] net_ratelimit: 37 callbacks suppressed [ 488.957356][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.087353][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.197517][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.327636][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.436343][T24696] tipc: Enabled bearer , priority 0 [ 489.447018][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.459097][T24696] syzkaller0: entered promiscuous mode [ 489.464704][T24696] syzkaller0: entered allmulticast mode [ 489.481555][T24696] tipc: Resetting bearer [ 489.517785][T24696] tipc: Disabling bearer [ 489.596970][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.627151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.707588][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.817056][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 489.927701][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 490.574382][T24758] FAULT_INJECTION: forcing a failure. [ 490.574382][T24758] name failslab, interval 1, probability 0, space 0, times 0 [ 490.589150][T24758] CPU: 1 UID: 0 PID: 24758 Comm: syz.1.5400 Not tainted syzkaller #0 PREEMPT(full) [ 490.589196][T24758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.589210][T24758] Call Trace: [ 490.589220][T24758] [ 490.589230][T24758] dump_stack_lvl+0x189/0x250 [ 490.589276][T24758] ? __pfx____ratelimit+0x10/0x10 [ 490.589326][T24758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.589358][T24758] ? __pfx__printk+0x10/0x10 [ 490.589392][T24758] ? __pfx___might_resched+0x10/0x10 [ 490.589420][T24758] ? fs_reclaim_acquire+0x7d/0x100 [ 490.589478][T24758] should_fail_ex+0x414/0x560 [ 490.589511][T24758] should_failslab+0xa8/0x100 [ 490.589534][T24758] __kmalloc_noprof+0xcb/0x7f0 [ 490.589564][T24758] ? tomoyo_encode+0x28b/0x550 [ 490.589602][T24758] tomoyo_encode+0x28b/0x550 [ 490.589640][T24758] tomoyo_realpath_from_path+0x58d/0x5d0 [ 490.589683][T24758] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 490.589708][T24758] tomoyo_path_number_perm+0x1e8/0x5a0 [ 490.589746][T24758] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.589812][T24758] ? __fget_files+0x2a/0x420 [ 490.589837][T24758] ? __fget_files+0x3a0/0x420 [ 490.589855][T24758] ? __fget_files+0x2a/0x420 [ 490.589878][T24758] security_file_ioctl+0xcb/0x2d0 [ 490.589912][T24758] __se_sys_ioctl+0x47/0x170 [ 490.589940][T24758] do_syscall_64+0xfa/0xfa0 [ 490.589973][T24758] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.589998][T24758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.590019][T24758] ? clear_bhb_loop+0x60/0xb0 [ 490.590045][T24758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.590065][T24758] RIP: 0033:0x7f094cd8eec9 [ 490.590084][T24758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.590103][T24758] RSP: 002b:00007f094dbce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.590126][T24758] RAX: ffffffffffffffda RBX: 00007f094cfe5fa0 RCX: 00007f094cd8eec9 [ 490.590142][T24758] RDX: 0000200000000100 RSI: 000000004004743a RDI: 0000000000000006 [ 490.590155][T24758] RBP: 00007f094dbce090 R08: 0000000000000000 R09: 0000000000000000 [ 490.590167][T24758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.590179][T24758] R13: 00007f094cfe6038 R14: 00007f094cfe5fa0 R15: 00007ffc1a8fb488 [ 490.590215][T24758] [ 490.590739][T24758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.022829][T24782] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 491.039472][T24782] bond8 (unregistering): Released all slaves [ 491.072619][T24790] __nla_validate_parse: 73 callbacks suppressed [ 491.072638][T24790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5409'. [ 491.090601][T24790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5409'. [ 491.470218][T24812] FAULT_INJECTION: forcing a failure. [ 491.470218][T24812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.509379][T24812] CPU: 0 UID: 0 PID: 24812 Comm: syz.2.5417 Not tainted syzkaller #0 PREEMPT(full) [ 491.509409][T24812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.509423][T24812] Call Trace: [ 491.509432][T24812] [ 491.509441][T24812] dump_stack_lvl+0x189/0x250 [ 491.509469][T24812] ? __pfx____ratelimit+0x10/0x10 [ 491.509496][T24812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.509519][T24812] ? __pfx__printk+0x10/0x10 [ 491.509557][T24812] should_fail_ex+0x414/0x560 [ 491.509590][T24812] _copy_to_user+0x31/0xb0 [ 491.509615][T24812] simple_read_from_buffer+0xe1/0x170 [ 491.509653][T24812] proc_fail_nth_read+0x1b3/0x220 [ 491.509685][T24812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.509716][T24812] ? rw_verify_area+0x2a6/0x4d0 [ 491.509745][T24812] ? __lock_acquire+0xab9/0xd20 [ 491.509764][T24812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.509793][T24812] vfs_read+0x200/0xa30 [ 491.509822][T24812] ? fdget_pos+0x247/0x320 [ 491.509847][T24812] ? __pfx___mutex_lock+0x10/0x10 [ 491.509877][T24812] ? __pfx_vfs_read+0x10/0x10 [ 491.509908][T24812] ? __fget_files+0x2a/0x420 [ 491.509933][T24812] ? __fget_files+0x3a0/0x420 [ 491.509952][T24812] ? __fget_files+0x2a/0x420 [ 491.509981][T24812] ksys_read+0x145/0x250 [ 491.510009][T24812] ? __fget_files+0x2a/0x420 [ 491.510030][T24812] ? __pfx_ksys_read+0x10/0x10 [ 491.510064][T24812] ? do_syscall_64+0xbe/0xfa0 [ 491.510104][T24812] do_syscall_64+0xfa/0xfa0 [ 491.510130][T24812] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.510157][T24812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.510179][T24812] ? clear_bhb_loop+0x60/0xb0 [ 491.510206][T24812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.510227][T24812] RIP: 0033:0x7f931018d8dc [ 491.510248][T24812] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 491.510266][T24812] RSP: 002b:00007f93110c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.510290][T24812] RAX: ffffffffffffffda RBX: 00007f93103e5fa0 RCX: 00007f931018d8dc [ 491.510306][T24812] RDX: 000000000000000f RSI: 00007f93110c60a0 RDI: 0000000000000007 [ 491.510320][T24812] RBP: 00007f93110c6090 R08: 0000000000000000 R09: 0000000000000000 [ 491.510334][T24812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.510359][T24812] R13: 00007f93103e6038 R14: 00007f93103e5fa0 R15: 00007ffd11091cb8 [ 491.510396][T24812] [ 491.804373][T24821] SET target dimension over the limit! [ 491.974747][T24830] tipc: Enabled bearer , priority 0 [ 491.981655][T24834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5428'. [ 492.025777][T24833] tipc: Enabled bearer , priority 0 [ 492.038535][T24833] syzkaller0: entered promiscuous mode [ 492.044066][T24833] syzkaller0: entered allmulticast mode [ 492.062499][T24830] syzkaller0: entered promiscuous mode [ 492.068878][T24830] syzkaller0: entered allmulticast mode [ 492.095255][T24829] tipc: Resetting bearer [ 492.120559][T24839] netlink: 'syz.3.5429': attribute type 1 has an invalid length. [ 492.159910][T24829] tipc: Disabling bearer [ 492.172068][T24831] tipc: Resetting bearer [ 492.256625][T24831] tipc: Disabling bearer [ 492.274679][T24839] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 492.326509][T24857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5431'. [ 492.435462][T24856] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.530207][T24856] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.612931][T24856] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.694367][T24868] SET target dimension over the limit! [ 492.713617][T24856] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.767599][T24874] sctp: [Deprecated]: syz.4.5438 (pid 24874) Use of int in max_burst socket option. [ 492.767599][T24874] Use struct sctp_assoc_value instead [ 492.860276][T14280] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.933773][T14280] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.954969][T14280] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.964514][T14280] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.086462][T24896] veth0: entered promiscuous mode [ 493.132258][T24885] veth0: left promiscuous mode [ 493.215160][T24900] lo speed is unknown, defaulting to 1000 [ 493.248750][T24905] SET target dimension over the limit! [ 493.254769][T24898] netlink: 'syz.3.5446': attribute type 16 has an invalid length. [ 493.271019][T24898] netlink: 'syz.3.5446': attribute type 17 has an invalid length. [ 493.357666][T24907] netlink: 'syz.4.5449': attribute type 1 has an invalid length. [ 493.380065][T24908] netlink: 'syz.4.5449': attribute type 1 has an invalid length. [ 493.645834][T24926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5455'. [ 493.701915][T24928] netlink: 'syz.4.5456': attribute type 3 has an invalid length. [ 493.788172][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5457'. [ 493.824008][T24933] SET target dimension over the limit! [ 493.963825][T24935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.052645][T24949] lo speed is unknown, defaulting to 1000 [ 494.060755][ T1172] net_ratelimit: 29 callbacks suppressed [ 494.060774][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.085596][T24944] netlink: 'syz.2.5462': attribute type 16 has an invalid length. [ 494.105855][T24944] netlink: 'syz.2.5462': attribute type 17 has an invalid length. [ 494.134698][T24944] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 494.233332][T24960] xt_time: unknown flags 0xf4 [ 494.247600][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.380106][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.497524][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.550857][T24978] SET target dimension over the limit! [ 494.607584][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.653992][T24983] netlink: 'syz.2.5474': attribute type 1 has an invalid length. [ 494.759605][T24983] 8021q: adding VLAN 0 to HW filter on device bond8 [ 494.777335][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.816172][T24990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5476'. [ 494.856620][T24992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5479'. [ 494.868506][T24993] netlink: 632 bytes leftover after parsing attributes in process `syz.3.5476'. [ 494.875784][T24995] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 494.903111][T24998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5480'. [ 494.927325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.994830][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 495.085997][T25008] netlink: 'syz.2.5483': attribute type 1 has an invalid length. [ 495.124194][T25008] 8021q: adding VLAN 0 to HW filter on device bond9 [ 495.148990][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 495.173851][T25012] bond9: (slave geneve5): making interface the new active one [ 495.185017][T25012] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 495.208765][T14280] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.227104][T14280] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.255762][T14280] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.286389][T14280] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.296020][T25020] SET target dimension over the limit! [ 496.020038][T25052] SET target dimension over the limit! [ 496.151298][T25059] __nla_validate_parse: 2 callbacks suppressed [ 496.151317][T25059] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5501'. [ 496.254539][T25063] ip6tnl4: entered promiscuous mode [ 496.260415][T25063] ip6tnl4: entered allmulticast mode [ 496.365507][T25069] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5506'. [ 496.632173][T25081] bond0: entered promiscuous mode [ 496.648782][T25081] bond_slave_0: entered promiscuous mode [ 496.745979][T25087] SET target dimension over the limit! [ 497.042147][T25107] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 497.064210][T25107] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 497.159125][T25107] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 497.185105][T25107] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 497.260424][T25122] SET target dimension over the limit! [ 497.273582][T25107] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 497.298456][T25107] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 497.361033][T25124] tipc: Enabled bearer , priority 2 [ 497.373993][T25124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.416098][T25107] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 497.429652][T25107] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 497.650001][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 497.672265][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 497.699315][T25146] FAULT_INJECTION: forcing a failure. [ 497.699315][T25146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.728039][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 497.732824][T25146] CPU: 0 UID: 0 PID: 25146 Comm: syz.2.5532 Not tainted syzkaller #0 PREEMPT(full) [ 497.732853][T25146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.732869][T25146] Call Trace: [ 497.732880][T25146] [ 497.732889][T25146] dump_stack_lvl+0x189/0x250 [ 497.732918][T25146] ? __pfx____ratelimit+0x10/0x10 [ 497.732947][T25146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.732971][T25146] ? __pfx__printk+0x10/0x10 [ 497.733009][T25146] should_fail_ex+0x414/0x560 [ 497.733043][T25146] _copy_to_user+0x31/0xb0 [ 497.733068][T25146] simple_read_from_buffer+0xe1/0x170 [ 497.733108][T25146] proc_fail_nth_read+0x1b3/0x220 [ 497.733140][T25146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.733172][T25146] ? rw_verify_area+0x2a6/0x4d0 [ 497.733201][T25146] ? __lock_acquire+0xab9/0xd20 [ 497.733221][T25146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.733258][T25146] vfs_read+0x200/0xa30 [ 497.733288][T25146] ? fdget_pos+0x247/0x320 [ 497.733314][T25146] ? __pfx___mutex_lock+0x10/0x10 [ 497.733346][T25146] ? __pfx_vfs_read+0x10/0x10 [ 497.733378][T25146] ? __fget_files+0x2a/0x420 [ 497.733404][T25146] ? __fget_files+0x3a0/0x420 [ 497.733422][T25146] ? __fget_files+0x2a/0x420 [ 497.733454][T25146] ksys_read+0x145/0x250 [ 497.733487][T25146] ? __pfx_ksys_read+0x10/0x10 [ 497.733522][T25146] ? do_syscall_64+0xbe/0xfa0 [ 497.733555][T25146] do_syscall_64+0xfa/0xfa0 [ 497.733580][T25146] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.733607][T25146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.733631][T25146] ? clear_bhb_loop+0x60/0xb0 [ 497.733658][T25146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.733681][T25146] RIP: 0033:0x7f931018d8dc [ 497.733701][T25146] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 497.733721][T25146] RSP: 002b:00007f93110c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.733746][T25146] RAX: ffffffffffffffda RBX: 00007f93103e5fa0 RCX: 00007f931018d8dc [ 497.733765][T25146] RDX: 000000000000000f RSI: 00007f93110c60a0 RDI: 0000000000000004 [ 497.733780][T25146] RBP: 00007f93110c6090 R08: 0000000000000000 R09: fffffffffffffdfd [ 497.733795][T25146] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 497.733810][T25146] R13: 00007f93103e6038 R14: 00007f93103e5fa0 R15: 00007ffd11091cb8 [ 497.733850][T25146] [ 497.976639][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 498.002040][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 498.011164][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 498.032005][T25158] tipc: Enabled bearer , priority 0 [ 498.046701][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 498.067203][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 498.077351][T25158] syzkaller0: entered promiscuous mode [ 498.084107][T25163] validate_nla: 3 callbacks suppressed [ 498.084123][T25163] netlink: 'syz.3.5538': attribute type 23 has an invalid length. [ 498.086550][T25158] syzkaller0: entered allmulticast mode [ 498.107371][T25161] !€ÿ: renamed from bond_slave_0 [ 498.190760][T25158] tipc: Resetting bearer [ 498.250778][T25158] tipc: Resetting bearer [ 498.268292][T25158] tipc: Disabling bearer [ 498.344156][T25176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5543'. [ 498.419785][T25184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.523345][T25190] unsupported nla_type 52263 [ 498.591030][T25194] netlink: 468 bytes leftover after parsing attributes in process `syz.4.5550'. [ 498.600976][T25194] netlink: 468 bytes leftover after parsing attributes in process `syz.4.5550'. [ 498.611404][T25194] netlink: 468 bytes leftover after parsing attributes in process `syz.4.5550'. [ 498.620986][T25194] netlink: 468 bytes leftover after parsing attributes in process `syz.4.5550'. [ 498.630531][T25194] netlink: 468 bytes leftover after parsing attributes in process `syz.4.5550'. [ 498.640281][T25194] netlink: 468 bytes leftover after parsing attributes in process `syz.4.5550'. [ 498.716127][T25202] SET target dimension over the limit! [ 498.752685][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5553'. [ 499.008672][T25222] xt_SECMARK: invalid mode: 9 [ 499.022680][T25222] xt_SECMARK: invalid mode: 9 [ 499.042608][T25222] xt_SECMARK: invalid mode: 9 [ 499.077127][ C1] net_ratelimit: 31 callbacks suppressed [ 499.077148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.116988][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 499.247748][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 499.273286][T25239] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 499.298583][T25241] SET target dimension over the limit! [ 499.472141][T25257] lo: left promiscuous mode [ 499.479351][T25257] tunl0: left promiscuous mode [ 499.492970][T25257] gre0: left promiscuous mode [ 499.528692][T25257] 0ªî{X¹¦: left promiscuous mode [ 499.538997][T25257] erspan0: left promiscuous mode [ 499.546104][T25257] ip_vti0: left promiscuous mode [ 499.603806][T25257] veth0_macvtap: entered promiscuous mode [ 499.610006][T25257] veth0_macvtap: entered allmulticast mode [ 499.621077][T25257] macvtap0: left allmulticast mode [ 499.626238][T25257] veth0_macvtap: left allmulticast mode [ 499.644979][T25257] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 499.661465][T10042] lo speed is unknown, defaulting to 1000 [ 499.667734][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 499.678312][T10042] syz2: Port: 1 Link ACTIVE [ 499.777418][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 499.890147][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 500.037285][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 500.093369][T25292] syzkaller0: entered promiscuous mode [ 500.135802][T25292] syzkaller0: entered allmulticast mode [ 500.141699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.171734][T25315] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 500.178586][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 500.391334][T25320] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 501.127749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.834563][T25327] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 501.988586][T25362] __nla_validate_parse: 7 callbacks suppressed [ 501.988606][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5594'. [ 502.071590][T25365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5594'. [ 502.100512][T25366] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5593'. [ 502.126240][T25371] tipc: Enabling of bearer rejected, failed to enable media [ 502.470516][T25392] vlan0: entered promiscuous mode [ 502.475815][T25392] bridge0: entered promiscuous mode [ 502.512196][T25394] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.522460][T25394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 502.532682][T25394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.576535][T25394] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.587320][T25394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 502.604424][T25394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.673222][T25394] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.683414][T25394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 502.693782][T25394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.755682][T25394] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.768111][T25394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 502.779302][T25394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.804481][T25402] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5607'. [ 502.928046][ T3537] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.943481][ T3537] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.952247][ T3537] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 502.992255][ T3537] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.001551][ T3537] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.011544][ T3537] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.020247][ T3537] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.031056][ T3537] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.039543][ T3537] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.059402][T14279] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.068394][T14279] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.076828][T14279] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.719800][T25441] syzkaller1: entered allmulticast mode [ 503.911741][T25452] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.923088][T25452] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.996476][T25452] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.013785][T25452] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.117129][T25457] netem: change failed [ 504.129974][ T3537] net_ratelimit: 17 callbacks suppressed [ 504.129993][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.171072][T25463] netlink: 'syz.1.5627': attribute type 13 has an invalid length. [ 504.193092][T25452] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.195547][T25463] netlink: 'syz.1.5627': attribute type 58 has an invalid length. [ 504.216957][T25452] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.225592][T25463] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5627'. [ 504.268158][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.297222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.307741][T25452] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.337466][T25452] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.417977][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.540169][T25481] netlink: 'syz.3.5632': attribute type 1 has an invalid length. [ 504.558290][ T3537] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.572397][ T3537] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.592494][ T3537] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.601834][ T3537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.652239][ T3537] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.668598][ T3537] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.691589][ T3537] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.700432][ T3537] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.731668][T25481] bond9: (slave bridge0): making interface the new active one [ 504.740598][T25481] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 504.843227][T25481] gretap4: entered promiscuous mode [ 504.857907][T25481] gretap4: entered allmulticast mode [ 504.866643][T25481] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 504.945071][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.963989][T25506] netlink: 'syz.0.5639': attribute type 10 has an invalid length. [ 505.011823][T25506] bond0: (slave wlan1): Opening slave failed [ 505.067668][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 505.177856][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 505.246614][T25531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5646'. [ 505.276942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.286081][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5647'. [ 505.347077][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 505.399970][T25540] team_slave_0: entered promiscuous mode [ 505.405818][T25540] team_slave_1: entered promiscuous mode [ 505.422666][T25540] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 505.457919][T25540] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 505.497192][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 505.658423][T25559] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5653'. [ 505.988656][T25579] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 506.035669][T25582] SET target dimension over the limit! [ 506.123872][T25589] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5664'. [ 506.326610][T25597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5668'. [ 506.895740][T25620] tipc: Enabled bearer , priority 0 [ 506.914351][T25620] syzkaller0: entered promiscuous mode [ 506.923528][T25620] syzkaller0: entered allmulticast mode [ 506.966683][T25624] netlink: 'syz.1.5677': attribute type 3 has an invalid length. [ 507.010526][T25620] tipc: Resetting bearer [ 507.051170][T25619] tipc: Resetting bearer [ 507.226201][T25619] tipc: Disabling bearer [ 507.273207][T25636] __nla_validate_parse: 2 callbacks suppressed [ 507.273225][T25636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5680'. [ 507.298518][T25639] team0: No ports can be present during mode change [ 507.344238][T25650] syzkaller0: entered promiscuous mode [ 507.357740][T25650] syzkaller0: entered allmulticast mode [ 507.406317][T25655] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.5686'. [ 507.437841][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5685'. [ 507.564741][T25666] netlink: 'syz.3.5688': attribute type 2 has an invalid length. [ 507.572925][T25666] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5688'. [ 507.650408][T25673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5691'. [ 507.898539][T25695] netlink: 'syz.0.5695': attribute type 3 has an invalid length. [ 507.991602][T25699] netlink: 'syz.3.5697': attribute type 5 has an invalid length. [ 508.036340][T25702] netlink: 'syz.0.5699': attribute type 30 has an invalid length. [ 508.087466][T25702] bond3: option arp_missed_max: invalid value (0) [ 508.093943][T25702] bond3: option arp_missed_max: allowed values 1 - 255 [ 508.103268][T25710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5698'. [ 508.114474][T25702] bond3 (unregistering): Released all slaves [ 508.124521][T25713] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5700'. [ 508.182472][T25712] tipc: Enabled bearer , priority 0 [ 508.196775][T25712] syzkaller0: entered promiscuous mode [ 508.217178][T25712] syzkaller0: entered allmulticast mode [ 508.262115][T25704] pim6reg: entered allmulticast mode [ 508.279878][T25712] tipc: Resetting bearer [ 508.301649][T25711] tipc: Resetting bearer [ 508.331994][T25711] tipc: Disabling bearer [ 508.426681][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5705'. [ 508.538370][T25735] netlink: 'syz.3.5708': attribute type 1 has an invalid length. [ 508.635403][T25733] lo speed is unknown, defaulting to 1000 [ 508.892482][T25758] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5715'. [ 508.938276][T25760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5714'. [ 509.227390][ T1172] net_ratelimit: 25 callbacks suppressed [ 509.227412][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.274456][T25786] Bluetooth: hci0: invalid len left 70, exp >= 111 [ 509.395493][T25798] netlink: 'syz.1.5723': attribute type 16 has an invalid length. [ 509.403916][T25798] netlink: 'syz.1.5723': attribute type 17 has an invalid length. [ 509.487303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.970754][T25816] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 509.984778][T25798] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 510.037652][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 510.147598][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 510.189167][T25824] netlink: 'syz.2.5733': attribute type 39 has an invalid length. [ 510.255165][T25828] siw: device registration error -23 [ 510.267017][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 510.398191][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 510.440398][T25832] IPVS: length: 123 != 24 [ 510.466971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.520398][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 510.578542][T25835] tipc: Enabling of bearer rejected, failed to enable media [ 510.637733][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 510.654756][T25842] smc: net device gre0 applied user defined pnetid SYZ1 [ 510.663195][T25842] smc: net device gre0 erased user defined pnetid SYZ1 [ 511.068651][T25869] C: renamed from lo (while UP) [ 511.464227][T25896] SET target dimension over the limit! [ 511.647374][T25905] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 511.656910][T25914] netlink: 'syz.2.5758': attribute type 1 has an invalid length. [ 511.670272][T25905] bond3 (unregistering): Released all slaves [ 512.214188][T25936] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 512.235485][T25936] bond10 (unregistering): Released all slaves [ 512.377932][T25931] bridge0: port 1(vlan3) entered blocking state [ 512.384441][T25931] bridge0: port 1(vlan3) entered disabled state [ 512.391250][T25931] vlan3: entered allmulticast mode [ 512.401010][T25931] bridge0: entered allmulticast mode [ 512.411267][T25931] vlan3: left allmulticast mode [ 512.416241][T25931] bridge0: left allmulticast mode [ 512.461367][T25947] __nla_validate_parse: 11 callbacks suppressed [ 512.461387][T25947] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5770'. [ 512.652576][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.653529][T25956] xt_connbytes: Forcing CT accounting to be enabled [ 512.669167][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.682403][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.691319][T14280] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.709948][T14280] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.720220][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.729331][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.747149][T25961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5773'. [ 512.774016][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.782195][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.790069][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.799603][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.811362][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.865168][T14280] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.876996][T14280] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.024912][T14280] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.068804][T14280] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.123631][T25958] lo speed is unknown, defaulting to 1000 [ 513.167010][T25979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5777'. [ 513.192155][T25977] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5775'. [ 513.203712][T14280] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.213799][T14280] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.346154][T25982] sit2: entered promiscuous mode [ 513.358706][T25982] sit2: entered allmulticast mode [ 513.431967][T25993] netlink: 'syz.2.5780': attribute type 16 has an invalid length. [ 513.467095][T25993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5780'. [ 513.480291][T25987] syzkaller1: entered promiscuous mode [ 513.485801][T25987] syzkaller1: entered allmulticast mode [ 513.520461][T25987] netlink: 'syz.1.5781': attribute type 1 has an invalid length. [ 513.552078][T25987] netlink: 'syz.1.5781': attribute type 1 has an invalid length. [ 513.571773][T25995] netlink: 'syz.1.5781': attribute type 5 has an invalid length. [ 513.598022][T25996] netlink: 'syz.2.5780': attribute type 1 has an invalid length. [ 513.605789][T25996] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5780'. [ 513.620408][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5780'. [ 513.626772][T26002] netlink: 'syz.3.5785': attribute type 1 has an invalid length. [ 513.744852][T26006] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 513.759537][T26006] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 513.823217][T14280] bridge_slave_0: left allmulticast mode [ 513.835653][T14280] bridge_slave_0: left promiscuous mode [ 513.844129][T14280] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.182888][T14280] dvmrp1 (unregistering): left allmulticast mode [ 514.658530][T14280] bond6 (unregistering): (slave macvlan2): Releasing active interface [ 514.666768][T14280] macvlan2 (unregistering): left promiscuous mode [ 514.682464][T14280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.691992][T14280] bond_slave_0: left promiscuous mode [ 514.700637][T14280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.711274][T14280] bond_slave_1: left promiscuous mode [ 514.720280][T14280] bond0 (unregistering): Released all slaves [ 514.727289][ C1] net_ratelimit: 22 callbacks suppressed [ 514.727308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.740692][T14280] bond1 (unregistering): Released all slaves [ 514.755420][T14280] bond2 (unregistering): Released all slaves [ 514.848734][ T5847] Bluetooth: hci1: command tx timeout [ 514.866046][T14280] bond3 (unregistering): Released all slaves [ 514.880603][T14280] bond4 (unregistering): Released all slaves [ 514.894473][T14280] bond5 (unregistering): Released all slaves [ 514.908894][T14280] bond6 (unregistering): Released all slaves [ 514.924942][T14280] bond7 (unregistering): Released all slaves [ 514.941012][T14280] bond8 (unregistering): Released all slaves [ 514.958858][T14280] bond9 (unregistering): Released all slaves [ 515.017557][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 515.117637][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5790'. [ 515.157110][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 515.271084][T14280] tipc: Left network mode [ 515.277136][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 515.290023][T25958] chnl_net:caif_netlink_parms(): no params data found [ 515.391898][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 515.532619][T26054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5798'. [ 515.542155][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 515.697232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.755681][T25958] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.770631][T25958] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.772520][T26072] netlink: 'syz.1.5802': attribute type 1 has an invalid length. [ 515.785795][T26072] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5802'. [ 515.785973][T25958] bridge_slave_0: entered allmulticast mode [ 515.807440][T25958] bridge_slave_0: entered promiscuous mode [ 515.831668][T26074] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 515.858094][T25958] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.865239][T25958] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.892992][T25958] bridge_slave_1: entered allmulticast mode [ 515.917456][T25958] bridge_slave_1: entered promiscuous mode [ 516.031734][T10042] IPVS: starting estimator thread 0... [ 516.055741][T25958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.073943][T26078] syzkaller1: entered allmulticast mode [ 516.080107][T26084] tipc: Enabling of bearer rejected, failed to enable media [ 516.122944][T14280] hsr_slave_1: left promiscuous mode [ 516.137218][T26087] IPVS: using max 25 ests per chain, 60000 per kthread [ 516.224658][T14280] veth1_macvtap: left promiscuous mode [ 516.237545][T14280] veth0_macvtap: left promiscuous mode [ 516.250240][T14280] veth1_vlan: left promiscuous mode [ 516.262489][T14280] veth0_vlan: left promiscuous mode [ 516.339401][T26107] Bluetooth: hci0: unsupported parameter 2048 [ 516.359678][T26107] Bluetooth: hci0: invalid length 11, exp 2 for type 20 [ 516.761959][T14280] team0 (unregistering): Port device team_slave_1 removed [ 516.769686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.821691][T14280] team0 (unregistering): Port device team_slave_0 removed [ 516.917508][ T5847] Bluetooth: hci1: command tx timeout [ 517.165852][T25958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.238001][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 517.316760][T10042] lo speed is unknown, defaulting to 1000 [ 517.346405][T25958] team0: Port device team_slave_0 added [ 517.362544][T10042] infiniband syz2: ib_query_port failed (-19) [ 517.388590][T25958] team0: Port device team_slave_1 added [ 517.494802][T26123] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 517.534342][T25958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.542265][T25958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.569990][T25958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.628989][T25958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.635975][T25958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.667366][T25958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.680933][T26133] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 517.814914][T25958] hsr_slave_0: entered promiscuous mode [ 517.822168][T25958] hsr_slave_1: entered promiscuous mode [ 517.834404][T26144] __nla_validate_parse: 5 callbacks suppressed [ 517.834419][T26144] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5819'. [ 518.015504][T14280] IPVS: stop unused estimator thread 0... [ 518.228144][T26165] tipc: Enabled bearer , priority 0 [ 518.254898][T26165] syzkaller0: entered promiscuous mode [ 518.261088][T26165] syzkaller0: entered allmulticast mode [ 518.285490][T26165] tipc: Resetting bearer [ 518.335536][T26169] tipc: Resetting bearer [ 518.359632][T26169] tipc: Disabling bearer [ 518.466549][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 518.576480][T26181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5829'. [ 518.683003][T25958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 518.698905][T25958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 518.711648][T25958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 518.729036][T25958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 518.879007][T25958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.952493][T25958] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.997168][ T5847] Bluetooth: hci1: command tx timeout [ 519.003925][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.011119][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.065024][T14303] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.072230][T14303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.214559][T25958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.397578][T26217] delete_channel: no stack [ 519.405271][T26219] tipc: Enabled bearer , priority 0 [ 519.429440][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5838'. [ 519.433510][T26219] syzkaller0: entered promiscuous mode [ 519.460499][T26219] syzkaller0: entered allmulticast mode [ 519.541954][T26219] tipc: Resetting bearer [ 519.563707][T26214] tipc: Resetting bearer [ 519.628474][T26214] tipc: Disabling bearer [ 519.706208][T25958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.717556][T14279] wlan0: Trigger new scan to find an IBSS to join [ 519.724363][ T5847] Bluetooth: hci4: command tx timeout [ 519.738788][T26229] netlink: 'syz.0.5842': attribute type 1 has an invalid length. [ 519.858983][ T12] net_ratelimit: 14 callbacks suppressed [ 519.859004][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 519.906925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.997353][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 520.029069][T26242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5844'. [ 520.138791][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 520.313637][T25958] veth0_vlan: entered promiscuous mode [ 520.346999][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 520.355032][T25958] veth1_vlan: entered promiscuous mode [ 520.463011][T26273] xt_TCPMSS: Only works on TCP SYN packets [ 520.479509][ T3537] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 520.491065][T25958] veth0_macvtap: entered promiscuous mode [ 520.529299][T25958] veth1_macvtap: entered promiscuous mode [ 520.573598][T26275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5852'. [ 520.581696][T25958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.585050][T26275] openvswitch: netlink: Flow key attr not present in new flow. [ 520.603115][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 520.641507][T25958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.685792][ T3537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.718826][ T3537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.759215][ T3537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.806473][ T3537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.885022][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 520.912455][T26294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5856'. [ 520.967046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.077519][ T5847] Bluetooth: hci1: command tx timeout [ 521.110834][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.132520][T26308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5859'. [ 521.144207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.159044][T26308] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5859'. [ 521.168596][T26308] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5859'. [ 521.199024][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.207647][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.233780][T26314] netlink: 'syz.2.5862': attribute type 12 has an invalid length. [ 521.928198][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.940397][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.949184][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.960638][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.971513][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 522.242211][T26366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.360755][T10053] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.381651][T26366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.546250][T26366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.583177][T26380] team_slave_0: left promiscuous mode [ 522.595173][T26380] team0: Port device team_slave_0 removed [ 522.605810][T26380] team_slave_1: left promiscuous mode [ 522.619895][T26380] team0: Port device team_slave_1 removed [ 522.642212][T26348] chnl_net:caif_netlink_parms(): no params data found [ 522.700163][T26366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.760397][ T1172] wlan0: Trigger new scan to find an IBSS to join [ 522.845908][T26348] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.863903][T26348] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.878923][T26348] bridge_slave_0: entered allmulticast mode [ 522.892751][T26348] bridge_slave_0: entered promiscuous mode [ 522.902369][T26348] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.907244][T10053] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.909987][T26348] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.924696][T26348] bridge_slave_1: entered allmulticast mode [ 522.933682][T26348] bridge_slave_1: entered promiscuous mode [ 522.981793][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.009890][T26348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.021118][T26399] __nla_validate_parse: 8 callbacks suppressed [ 523.021135][T26399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5883'. [ 523.031508][T26398] netlink: 'syz.0.5884': attribute type 29 has an invalid length. [ 523.050140][T26348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.060566][T14303] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.073607][T26397] netlink: 'syz.0.5884': attribute type 29 has an invalid length. [ 523.111190][T26402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5885'. [ 523.133664][ T1172] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.182218][T26348] team0: Port device team_slave_0 added [ 523.201253][T14303] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.213862][T26348] team0: Port device team_slave_1 added [ 523.269279][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.270872][T26402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5885'. [ 523.320582][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.330221][T26348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.349401][T26348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.382047][T26348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.393212][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.429616][T26405] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 523.442025][T26348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.456021][T26348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.508926][T26348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.522284][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.538216][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.546189][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.562597][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.651474][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.655658][T26348] hsr_slave_0: entered promiscuous mode [ 523.664901][T26348] hsr_slave_1: entered promiscuous mode [ 523.671515][T26348] debugfs: 'hsr0' already exists in 'hsr' [ 523.678403][T26348] Cannot create hsr debugfs directory [ 523.684000][T26424] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 523.692313][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.700933][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.726786][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.766242][T26405] wlan1 speed is unknown, defaulting to 1000 [ 523.932073][T26348] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.002173][T26442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5894'. [ 524.040193][ T5151] Bluetooth: hci5: command tx timeout [ 524.180319][T26348] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.228167][T26446] macvtap1: entered promiscuous mode [ 524.233646][T26446] vlan0: entered promiscuous mode [ 524.239903][T26446] macvtap1: entered allmulticast mode [ 524.264066][T26446] vlan0: entered allmulticast mode [ 524.270234][T26446] veth0_vlan: entered allmulticast mode [ 524.283060][T26448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.320700][T26348] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.376423][T26448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.444944][T26348] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.484066][T26448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.580236][T26448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.735792][T26348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.763257][T26348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.800438][T26348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 524.818383][T26348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 524.907282][T14295] net_ratelimit: 25 callbacks suppressed [ 524.907302][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 525.103969][T26348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.119672][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 525.137261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.160527][T26348] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.203340][T14303] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.210604][T14303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.272183][T14303] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.279510][T14303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.368984][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 525.442824][T26509] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5912'. [ 525.508735][T26509] bond4 (unregistering): Released all slaves [ 525.553891][T26513] netlink: 'syz.1.5911': attribute type 2 has an invalid length. [ 525.597481][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 525.674124][T26348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.718177][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 525.727262][T14280] wlan0: Trigger new scan to find an IBSS to join [ 525.780475][T26348] veth0_vlan: entered promiscuous mode [ 525.795266][T26348] veth1_vlan: entered promiscuous mode [ 525.863001][T26348] veth0_macvtap: entered promiscuous mode [ 525.891715][T26348] veth1_macvtap: entered promiscuous mode [ 525.932722][T26348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.951202][T26348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.973589][T14295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.984882][T14295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.004534][T26539] ip6gre2: entered allmulticast mode [ 526.012763][T14295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.029041][T14279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.043471][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 526.047471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.121769][ T5151] Bluetooth: hci5: command tx timeout [ 526.324666][T14279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.332690][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 526.340375][T14279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.394636][T14295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.404057][T14295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.457334][T14280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 526.480479][T26546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5922'. [ 526.494184][T26546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5922'. [ 526.625266][T26558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5924'. [ 526.639781][T14280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.766573][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 526.788125][T26565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5927'. [ 526.798975][T26565] netlink: 'syz.2.5927': attribute type 14 has an invalid length. [ 526.807023][T26565] netlink: 'syz.2.5927': attribute type 13 has an invalid length. [ 526.893245][T26574] netlink: 'syz.0.5930': attribute type 13 has an invalid length. [ 527.044758][T14279] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.055360][T14279] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.094723][T14295] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.121348][T14295] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.271919][T26592] : entered promiscuous mode [ 527.345034][T26597] netlink: 'syz.4.5938': attribute type 1 has an invalid length. [ 527.441796][T26601] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 527.449694][T26601] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.705764][T26616] tipc: Started in network mode [ 527.732164][T26616] tipc: Node identity ee172a3afda4, cluster identity 4711 [ 527.755433][T26616] tipc: Enabled bearer , priority 0 [ 527.772932][T26621] syzkaller0: entered promiscuous mode [ 527.810236][T26621] syzkaller0: entered allmulticast mode [ 527.832525][T26624] netlink: 'syz.1.5950': attribute type 1 has an invalid length. [ 527.846723][T26616] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 527.924837][T26616] tipc: Resetting bearer [ 527.984816][T26615] tipc: Resetting bearer [ 528.043168][T26643] netlink: 'syz.0.5955': attribute type 7 has an invalid length. [ 528.078808][T26615] tipc: Disabling bearer [ 528.200138][ T5151] Bluetooth: hci5: command tx timeout [ 528.249070][T26653] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 528.507925][T26676] __nla_validate_parse: 10 callbacks suppressed [ 528.507948][T26676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5964'. [ 528.554261][T26680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5965'. [ 528.800566][T26688] bridge5: entered promiscuous mode [ 528.806015][T26688] bridge5: entered allmulticast mode [ 528.970610][T26709] sctp: [Deprecated]: syz.4.5972 (pid 26709) Use of int in max_burst socket option. [ 528.970610][T26709] Use struct sctp_assoc_value instead [ 529.001841][T26708] --map-set only usable from mangle table [ 529.232195][T26725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5975'. [ 529.660747][T26745] tipc: Enabled bearer , priority 0 [ 529.674506][T26748] tipc: Trying to set illegal importance in message [ 529.687512][T26745] syzkaller0: entered promiscuous mode [ 529.706983][T26745] syzkaller0: entered allmulticast mode [ 529.739057][T26745] tipc: Resetting bearer [ 529.881824][T26760] tipc: Resetting bearer [ 529.961021][T26760] tipc: Disabling bearer [ 530.006951][ T1172] net_ratelimit: 34 callbacks suppressed [ 530.006971][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 530.057314][T26782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.103932][T26782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.146379][T26782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.177161][T26782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.216293][T26793] [ 530.218668][T26793] ====================================================== [ 530.225711][T26793] WARNING: possible circular locking dependency detected [ 530.232762][T26793] syzkaller #0 Not tainted [ 530.237183][T26793] ------------------------------------------------------ [ 530.244208][T26793] syz.1.5993/26793 is trying to acquire lock: [ 530.250288][T26793] ffffffff8f6396d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 530.259467][T26793] [ 530.259467][T26793] but task is already holding lock: [ 530.266844][T26793] ffff88805f42ac70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 530.276127][T26793] [ 530.276127][T26793] which lock already depends on the new lock. [ 530.276127][T26793] [ 530.286527][T26793] [ 530.286527][T26793] the existing dependency chain (in reverse order) is: [ 530.295536][T26793] [ 530.295536][T26793] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 530.303630][T26793] lock_acquire+0x120/0x360 [ 530.308667][T26793] _raw_spin_lock_bh+0x36/0x50 [ 530.313958][T26793] nr_rt_ioctl+0x193/0xd50 [ 530.318901][T26793] sock_do_ioctl+0xd9/0x300 [ 530.323933][T26793] sock_ioctl+0x576/0x790 [ 530.328798][T26793] __se_sys_ioctl+0xfc/0x170 [ 530.333930][T26793] do_syscall_64+0xfa/0xfa0 [ 530.338962][T26793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.345410][T26793] [ 530.345410][T26793] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 530.353247][T26793] lock_acquire+0x120/0x360 [ 530.358276][T26793] _raw_spin_lock_bh+0x36/0x50 [ 530.363599][T26793] nr_rt_device_down+0xa9/0x720 [ 530.368971][T26793] nr_device_event+0x137/0x150 [ 530.374264][T26793] notifier_call_chain+0x1b6/0x3e0 [ 530.379904][T26793] netif_close_many+0x29c/0x410 [ 530.385291][T26793] netif_close+0x158/0x210 [ 530.390239][T26793] dev_close+0x10a/0x220 [ 530.395008][T26793] bpq_device_event+0x377/0x6a0 [ 530.400382][T26793] notifier_call_chain+0x1b6/0x3e0 [ 530.406021][T26793] netif_close_many+0x29c/0x410 [ 530.411402][T26793] netif_close+0x158/0x210 [ 530.416343][T26793] dev_close+0x10a/0x220 [ 530.421099][T26793] bond_setup_by_slave+0x5f/0x3f0 [ 530.426643][T26793] bond_enslave+0x6ca/0x3870 [ 530.431753][T26793] bond_do_ioctl+0x635/0x9b0 [ 530.436881][T26793] dev_ifsioc+0x90b/0xf00 [ 530.441731][T26793] dev_ioctl+0x7b4/0x1150 [ 530.446577][T26793] sock_do_ioctl+0x22c/0x300 [ 530.451695][T26793] sock_ioctl+0x576/0x790 [ 530.456553][T26793] __se_sys_ioctl+0xfc/0x170 [ 530.461661][T26793] do_syscall_64+0xfa/0xfa0 [ 530.466700][T26793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.473111][T26793] [ 530.473111][T26793] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 530.481044][T26793] validate_chain+0xb9b/0x2140 [ 530.486332][T26793] __lock_acquire+0xab9/0xd20 [ 530.491535][T26793] lock_acquire+0x120/0x360 [ 530.496552][T26793] _raw_spin_lock_bh+0x36/0x50 [ 530.501850][T26793] nr_rt_ioctl+0x390/0xd50 [ 530.506786][T26793] sock_do_ioctl+0xd9/0x300 [ 530.511811][T26793] sock_ioctl+0x576/0x790 [ 530.516662][T26793] __se_sys_ioctl+0xfc/0x170 [ 530.521775][T26793] do_syscall_64+0xfa/0xfa0 [ 530.526809][T26793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.533220][T26793] [ 530.533220][T26793] other info that might help us debug this: [ 530.533220][T26793] [ 530.543459][T26793] Chain exists of: [ 530.543459][T26793] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 530.543459][T26793] [ 530.557274][T26793] Possible unsafe locking scenario: [ 530.557274][T26793] [ 530.564712][T26793] CPU0 CPU1 [ 530.570069][T26793] ---- ---- [ 530.575429][T26793] lock(&nr_node->node_lock); [ 530.580190][T26793] lock(nr_node_list_lock); [ 530.587302][T26793] lock(&nr_node->node_lock); [ 530.594590][T26793] lock(nr_neigh_list_lock); [ 530.599279][T26793] [ 530.599279][T26793] *** DEADLOCK *** [ 530.599279][T26793] [ 530.607422][T26793] 2 locks held by syz.1.5993/26793: [ 530.612613][T26793] #0: ffffffff8f639738 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 530.622103][T26793] #1: ffff88805f42ac70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 530.631754][T26793] [ 530.631754][T26793] stack backtrace: [ 530.637639][T26793] CPU: 1 UID: 0 PID: 26793 Comm: syz.1.5993 Not tainted syzkaller #0 PREEMPT(full) [ 530.637659][T26793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.637669][T26793] Call Trace: [ 530.637676][T26793] [ 530.637684][T26793] dump_stack_lvl+0x189/0x250 [ 530.637706][T26793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.637722][T26793] ? __pfx__printk+0x10/0x10 [ 530.637737][T26793] ? stack_trace_save+0x9c/0xe0 [ 530.637763][T26793] print_circular_bug+0x2ee/0x310 [ 530.637784][T26793] check_noncircular+0x134/0x160 [ 530.637805][T26793] validate_chain+0xb9b/0x2140 [ 530.637832][T26793] __lock_acquire+0xab9/0xd20 [ 530.637849][T26793] ? nr_rt_ioctl+0x390/0xd50 [ 530.637864][T26793] lock_acquire+0x120/0x360 [ 530.637877][T26793] ? nr_rt_ioctl+0x390/0xd50 [ 530.637894][T26793] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 530.637917][T26793] ? nr_rt_ioctl+0x390/0xd50 [ 530.637932][T26793] _raw_spin_lock_bh+0x36/0x50 [ 530.637949][T26793] ? nr_rt_ioctl+0x390/0xd50 [ 530.637971][T26793] nr_rt_ioctl+0x390/0xd50 [ 530.637992][T26793] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 530.638007][T26793] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.638029][T26793] ? apparmor_capable+0x137/0x1b0 [ 530.638048][T26793] ? capable+0x89/0xe0 [ 530.638064][T26793] ? nr_ioctl+0x1b1/0x3b0 [ 530.638087][T26793] sock_do_ioctl+0xd9/0x300 [ 530.638110][T26793] ? __pfx_sock_do_ioctl+0x10/0x10 [ 530.638137][T26793] sock_ioctl+0x576/0x790 [ 530.638157][T26793] ? __pfx_sock_ioctl+0x10/0x10 [ 530.638179][T26793] ? __fget_files+0x3a0/0x420 [ 530.638193][T26793] ? __fget_files+0x2a/0x420 [ 530.638208][T26793] ? bpf_lsm_file_ioctl+0x9/0x20 [ 530.638226][T26793] ? __pfx_sock_ioctl+0x10/0x10 [ 530.638246][T26793] __se_sys_ioctl+0xfc/0x170 [ 530.638265][T26793] do_syscall_64+0xfa/0xfa0 [ 530.638284][T26793] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.638301][T26793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.638317][T26793] ? clear_bhb_loop+0x60/0xb0 [ 530.638334][T26793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.638349][T26793] RIP: 0033:0x7f094cd8eec9 [ 530.638364][T26793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.638379][T26793] RSP: 002b:00007f094dbce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.638394][T26793] RAX: ffffffffffffffda RBX: 00007f094cfe5fa0 RCX: 00007f094cd8eec9 [ 530.638406][T26793] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 530.638416][T26793] RBP: 00007f094ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 530.638426][T26793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.638435][T26793] R13: 00007f094cfe6038 R14: 00007f094cfe5fa0 R15: 00007ffc1a8fb488 [ 530.638454][T26793] [ 530.638711][ T5847] Bluetooth: hci5: command tx timeout [ 530.648551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.932796][T26786] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5989'. [ 530.963435][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 530.983298][T26797] xt_hashlimit: size too large, truncated to 1048576 [ 530.991267][T26794] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5989'. [ 531.008303][T26788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'. [ 531.031336][T26788] vlan0 (unregistering): left allmulticast mode [ 531.040102][T26788] veth0_vlan: left allmulticast mode [ 531.072351][T26788] vlan0 (unregistering): left promiscuous mode [ 531.088693][T26786] netlink: 'syz.2.5989': attribute type 2 has an invalid length. [ 531.137538][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 531.166651][T26782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5989'. [ 531.177870][T26782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5989'. [ 531.248476][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 531.266944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.357398][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 531.467451][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 531.577378][T14295] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 531.687483][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.027049][T14303] net_ratelimit: 32 callbacks suppressed [ 535.027073][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.147135][T14279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.257205][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.377158][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.486937][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.516961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.596984][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.707281][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.817009][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.926915][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 540.037739][T14303] net_ratelimit: 40 callbacks suppressed [ 540.037762][T14303] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 540.167233][ T1172] bond0: (slave ip6gretap1): failed to get link speed/duplex