last executing test programs: 5.462546388s ago: executing program 4 (id=3119): r0 = socket$inet6(0xa, 0x80000, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10011, 0x2, 0x1, 0x0, 0xc}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r1, 0x8b32, &(0x7f0000000040)) 5.151546681s ago: executing program 4 (id=3124): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x5, 0x15}) r2 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r3, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x6fd9, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) 4.395530711s ago: executing program 2 (id=3133): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x80800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000080)=""/80, 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'dvmrp1\x00', 0x1}) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)={'syzkaller0\x00', 0x200}) r2 = socket(0x1d, 0xa, 0x7) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000200)=@l2={0x1f, 0x7d0, @any, 0x9, 0x2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="0ba93b290971352ff5209458cf6d5db6b7948ddb43ae09d1bd588453ded5e3cf04e6bdab2f6adc62b4678b54e32e5a2b1e2fb6ee04745160016f58dd8578232207ab315d72e6b4d0c5f493c8b8d879f06ec1064bf95f9febec251b35891811adbcfb68e2e8922011a356cea18664993dbea15fd6f6eb39cb37", 0x79}, {&(0x7f0000000300)="01e3ee8472c350e0836104c1bd18d2a973e390423104ff6810eef20fdeb51f69aab0ca05d2334c12bfa28f209334820ba606f07bf728757344eeb67c2bbb5faffac1ce9c909237afd605fa28e6e268117935dcf8a9df8449ef12bd1576fe", 0x5e}, {&(0x7f0000000380)="854985da2df0a2a9320f296d95754916487f021f37d580679802ee02db5eb010ee76a36f2adf7cff94ced71ba978eee632fd6dd28446a9fcb535a9e6e684b1b9a160ceac39fb4057ccff8f0c1cd263ced6c11a48b47af532b9f98ceb46951c34a58f124498a5ea2c9e778220baa2a939fd9f21bba9a4ea2657cc", 0x7a}, {&(0x7f0000000400)="94a7d6e6ebe381721113916c278bc95b90ced31eab8c1c05daa6f51aae91b27c6c2b7a06acafa4af5154e7b5054bd0344432d77899da164145530770f10bd44ac39aca5cac960cd858412335ef4c18d3992fad957356adf86bae4a2774e0a1f57f353040302dbe48e3f8fb94875d927e9b315ece413840887908e885ece1a38de3de51c4f155caf0fc6d288df081a33e3dc13789bc81f0ca75e83afe60cdb44adac82266fcbdb3f77df2b8b866e70925c22a349c71bb1ae0cbae7c384136698255d981fce01e", 0xc6}], 0x4, &(0x7f0000000540)=[{0x20, 0x0, 0x0, "68b41437712b8dfa15"}], 0x20}, 0x20000810) (async) accept4$inet6(r2, 0x0, &(0x7f00000005c0), 0x1000) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xffffffff, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) getpeername$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000940)=@raw=[@call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @exit], &(0x7f0000000980)='syzkaller\x00', 0x2, 0x1c, &(0x7f00000009c0)=""/28, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x5, 0x0, 0x401}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000a80)=[{0x2, 0x4, 0x5, 0x5}, {0x4, 0x5, 0xe, 0x7}, {0x1, 0x5, 0x8, 0xb}, {0x1, 0x1, 0x0, 0xb}, {0x1, 0x4, 0x9, 0x6}, {0x2, 0x1, 0x6, 0x9}, {0x2, 0x5, 0x5, 0xc}, {0x5, 0x3, 0x6, 0x9}, {0x4, 0x5, 0xc, 0x4}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x507}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@ifindex=r4, 0x1, 0x0, 0x91, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d80)={0xffffffffffffffff, r4, 0x25, 0x14, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d40)={@fallback=r2, 0xffffffffffffffff, 0x23, 0x2000, r7, @value=r10, @void, @void, @void, r9}, 0x20) (async) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81ea}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9d18}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x8851) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x3c, r11, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2c}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x544}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x100, 0x6}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) write$tun(r1, &(0x7f0000001040)={@val={0x0, 0x22f0}, @val={0x3, 0x1, 0x9, 0x5, 0x6, 0x9}, @x25={0x0, 0x1, 0xf1, "87e98cf1427e2c6f63b9bf900985330c102f40049d443eeaa4b992b256b7b2737da3ea989f2e87b70f9ce30babeff83823be20bf86454d921e63d01f59310adcd7cd6e81aa107bc37ad25d23e0c9a769a1d5dc543f230d394ea4ae56f96c720a92e034581146470e30046713d63bc3408eae3ee47761daa11aca4550c0561d34eee0b1a7e47de49e9e4cf8496c650df9a952a4d3e30b7d86e17015e045009e1f9a2706f8c4707372af83d21bf033"}}, 0xbf) (async) getsockname$packet(r2, &(0x7f0000001100), &(0x7f0000001140)=0x14) r12 = socket(0x26, 0x6, 0x7) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r2) sendmsg$TIPC_NL_PUBL_GET(r12, &(0x7f0000001640)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001200)={0x3dc, r13, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xe000000, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7b}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "14073aefa77130ee77b6f7221ca0180b70543d50ce2cc6da6193656385"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "4ecbf6b746168add4f2227c7f6795ce2b42cd112c72557407389e9aa3451aa8daa42142adb89802bda2454cee01084eb40cb63e62f9ddf1e63da905535afe14324a14dd22b541a4268cb0200e35044"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "9b43c22fac62cdbffc0c6daa75894a488d8f4e21056915c31878e43a02f91493"}}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff6e71}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffff7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6069}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8000}, 0x80c4) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r12) sendmsg$ETHTOOL_MSG_FEATURES_SET(r12, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001700)={0x128, r14, 0xcbf932a7499ac7da, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0xdc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "37b7ee3d1a85a8dc3743c1b109a63ce759cb0d422ddee66bb19c68cbfefc491b883234dd4cd3bb24b2770c0159dd09c186d71138f49b128c1f77bf3786ef5cc07f4a5c426db5b5cd0269143da7d5972f8ba6e54740a58a79d1a8a3e9a8351fc568f40b672af6cca655f3be93279f24eb1aa74a7278585215f00bd441ccaf58132a7981470bb005c864ea67960cc89352cd46bdf302ebbdf0d314aba21de541da98209e94ac09e8ba10996a1e3b84bc22f88860570b81c7c74d34f65ccec49973801ab999277bbad13cb5ef"}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80c0}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x40180, 0x0) 4.366814562s ago: executing program 2 (id=3134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4094, 0xffe}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000001700)=""/117, 0x75}], 0x3}, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004180)=[{{&(0x7f0000000f40)={0xa, 0x4e23, 0xffff061d, @loopback, 0xfffffff9}, 0x1c, 0x0}}, {{&(0x7f00000022c0)={0xa, 0x4e23, 0x800, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002540)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x4, 0x0, 0x0, 0x6}}}], 0x18}}], 0x2, 0xc0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004180)=[{{&(0x7f0000000f40)={0xa, 0x4e23, 0xffff061d, @loopback, 0xfffffff9}, 0x1c, 0x0}}, {{&(0x7f00000022c0)={0xa, 0x4e23, 0x800, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002540)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x4, 0x0, 0x0, 0x6}}}], 0x18}}], 0x2, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) 4.203220688s ago: executing program 4 (id=3136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000000300686163683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000200000005000100060000000c0007800900080000000000"], 0x58}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x20050840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRESHEX=0x0, @ANYRES16=r0], 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x90, 0x2, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x90}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xf634}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x20008080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r9, @ANYBLOB="000000000100000025000400fcffffffbc91101da1000000b702000013000000850000002a080000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 4.008458405s ago: executing program 2 (id=3139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xfffffffffffffff0}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x20, 0x4) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 3.975046993s ago: executing program 2 (id=3140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r2, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x2e, @multicast1, 0x4e20, 0x4, 'lblcr\x00', 0x1, 0x7fffffff, 0x2}, 0x2c) 3.811791032s ago: executing program 4 (id=3142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc00"/252, 0xfc}, {&(0x7f00000006c0)="1d090000000000000000a6546c8bd229bbf8fa504cc3774c0f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f50aa794861c0296ca92cb6c2ef9", 0x47}, {&(0x7f0000000380)="88e584aac45d6d83e65f22e4fbd7c01e397887a1c2e7857149eb55d2c259a747dbdfc0787e87150d7c40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a9a2f5502b", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63da1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xcb}, {&(0x7f0000002180)="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", 0xd91}, {&(0x7f0000000240)="cb1d381f53b138cceb0586fa", 0xc}], 0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e040000001e0106000000fe000071ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0df766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d81866930fca15c8a95d29e5b2ea00000800050091"], 0x154}}, 0x0) 3.771172274s ago: executing program 2 (id=3144): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x4, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x305) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000100), 0x12) writev(r6, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) (async) writev(r6, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) socket$kcm(0x29, 0x2, 0x0) close(r5) (async) close(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000380)={'hsr0\x00', 0x400}) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @empty}}}], 0x20}}], 0x1, 0x8000004) (async) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @empty}}}], 0x20}}], 0x1, 0x8000004) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f0000010000000001000000ac1e0101a58316036d47acd5bf570483d365a947937ac2203baa248511173dda34ae041403b25ac74ed05b793b080db42c3661780303e3c153f4cf21265ef3a389ff14394dc3119013620a46b59c0bd106d371d3e6dcb83cb30b84636527deb8988d71ff9b295cf82fd0c72adbbdaea4d449a3a3bfc1f8d9dcc50a3b8a30e45b924f558e4e882e188f90817d49177ecb679b361f0b09979b4e63acc7f78347e3728067583610b56ca05bc67de68dda"], 0x14) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f0000010000000001000000ac1e0101a58316036d47acd5bf570483d365a947937ac2203baa248511173dda34ae041403b25ac74ed05b793b080db42c3661780303e3c153f4cf21265ef3a389ff14394dc3119013620a46b59c0bd106d371d3e6dcb83cb30b84636527deb8988d71ff9b295cf82fd0c72adbbdaea4d449a3a3bfc1f8d9dcc50a3b8a30e45b924f558e4e882e188f90817d49177ecb679b361f0b09979b4e63acc7f78347e3728067583610b56ca05bc67de68dda"], 0x14) 3.631742202s ago: executing program 4 (id=3146): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.540709065s ago: executing program 4 (id=3148): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0xb}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0)=0x701, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0) 3.378472111s ago: executing program 2 (id=3150): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r4, 0x0, 0x25, 0x12, @val=@tcx={@void, @value=r4}}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r2, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x93}]}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf250900020073797a32000000000800410072786500140033006970365f7674693000bacbd00739a3c600000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 1.891868369s ago: executing program 0 (id=3163): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000090000010000000000000000000a81d5db64114dd00e468669542bd822000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.660948171s ago: executing program 0 (id=3166): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) accept4(r0, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x80000) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$caif_seqpacket(0x25, 0x5, 0x100) read(r4, &(0x7f0000000300)=""/93, 0x5d) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.577328266s ago: executing program 1 (id=3167): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000008, 0x14}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SSID={0x20, 0x34, @random="87c6fcaa405fc3fbef1424295b484ba023df8d4725157ec3dc1857b5"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="9195"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x40840) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/122, &(0x7f0000000280)=0x7a) socket$nl_generic(0x10, 0x3, 0x10) 1.314142343s ago: executing program 0 (id=3168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @bcast, @rose, @default, @netrom, @bcast, @rose]}, &(0x7f0000000100)=0x48) ioctl$SIOCNRDECOBS(r3, 0x89e2) 1.19965794s ago: executing program 1 (id=3170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) socket$netlink(0x10, 0x3, 0x4) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000240)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x20, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x70, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x32, 0x8, "70bd134bc535bbed01b94a3db64aeea7ca1f9c5316c65546687be4d5cd00f030824fd44c522c7580b1cae5490907"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x184, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x140, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "41766e5a8074285397542313802ab43a3a6ad2faea3c8df3f59498bd97e304b3703caa45"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "96b64988c01cb57ae55e2a3b129b6472c17b772ef17f5ec6e6ebf6ec999166fc795e69e7e32b01301a90c9978d604bd1a4e0a6f5324d08dbd525b0c0472d17b1d00ba9a96b0eaac20cdfb6b244e5747520bbade1143370695bc32573c4424f0329bf0cf398be21558134646b4122b4a440498663104de0ae84471a9b9e6c241a29388c539d10cd4180009e1d0dda092e90cb4d6c3e258681dbddaf6232bfbe511f598dbbc345"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWTABLE={0x1b4, 0x0, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xe3, 0x6, "258fae051595f2e0f74959ecaa7b20a24072f6b3ba1040b39d27860d9f184c29947c140f0ff6804b7d5a42ff26997d203f5ef3dc4383eeafa8f76ca24b0b6823b7271435f5ecc3fe706b6d154aac8860a0f03c43c232ca846716e2f6fb895e13fda802e569fd031f7bd095add859a7b18be46fafc33c13c6f97512237b2b3567bfb762fbfb8a71a5309184aafc9d0b8aecec0bded36a5640cc0c1c4c8f2b81e73fceef7bd9ab97cb5b81bcb820d2aa661edfb92f12fe73437afcdd5a9bbc2e3f20559fac47fdd96297e1d725040dfa0abe3253b0a4c99dba96a1ffc3791a1b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x97, 0x6, "d5a391ab664a6ab62ba9007991ee92ddf792f70f48825c0b6a6669fcb984542e654ffe78f0a2f303e0bef5ecdb12e44c524e0299478817473da9f343fafb05e219dce356bb5e9081614b408f0e6c0d1a7b0ff4c91183f1009a70c002ea5ba5ad0a2c881c3e21f455f46e4bb2492278e40e6adb8c03b1a96a73476d115da88e71c762cad4bf6de54c4070ac3af1e428a754e8ae"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0xa24, 0xc, 0xa, 0x603, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa10, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2a0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "54b4c49d211e4f80bf7a75e72747a5cc7019b01ad1937e49e2a987bae16f9c785f305a24cbf61abf4f346bcfffacf50e032e4ae9a0788464174ce9d8417349a70ce3199cdb1fa25423a45b7c35e1ae1113f6d56094b7997d8dad3ee3e4d015c3340956"}, @NFTA_DATA_VALUE={0x16, 0x1, "e56bd7be8e7917056315b30c27c75e740ce4"}, @NFTA_DATA_VALUE={0x94, 0x1, "74e0063ff003178476be410330d6d0b00daabfa1252a1fc5187f4d85a5548674c7ba4196966664ff6d5a632c8236f0e82b1cfed2ffef5b7d205328daee21a4cafb59ea058b9e64887d74d2d7504c5450655dd526456dc9d55bd30514967b7f6af75a6bea9199d7fdf0bea8f5ef7afecc363676f095690faab9c85ba8899a21c7ac35b96018521bb0a5ffee4ea1622e87"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "ad23721e99d10ae6f98d4981501b1a065d881e66ce8ddc0d7f2e976dd72a0f19dadf9632e9f07da872089b399628e5193269b52a078f27d8496caeb3d5a3cc7617bbbe22548c53401152a7b67a84cf387142633c7cf2325578263642b7d27860288bda4c51cc2d72f58b8f4ee7441565d4565e7096056fb331008010401e98bd8bebb05f58dd"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x3fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_EXPRESSIONS={0xf8, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x40, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xd6}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x70, 0x6, 0x1, 0x0, "4a4697e7ef29c6cf7454742c7bdf81df917b52b52b163f7ec239cd0b3f6dde54e1befe5157afb34e4cf2cacaf1dc1f85fa3f341553f1b697c7f56a61504999e6bb6c8b1d18e0e8e66dd07d31f9b5833dcbd661b4bbcc10c3abcb7025e70ad1288cc5beff12c28e14f4e1325b"}, @NFTA_SET_ELEM_KEY={0x20c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "d31afeee0c223910a9bd89257582b92e930be8f8c2f7bfdafabd1047f5136ce8dbc4a7439410b48d3ba4f175383d3890b91c378698ecd424df0bdca167e32539174938960877667d55c415cfcd3f3bf48b8194cf16d71267ccd528723f468a036c412504ada69e38e628e79b6a290004217975b5c0ec547eccd9886a97fd06190d9388cba946d7fd8a7e5b938d945bf6cb431828fe0d218b5d25b6fd14d9aa93a7292a3482699eac4c41bb482452e27e3060d3b6d18bb552a5730cc587b722e7ee2345693aa53d05bdc2210057e9a86d6e7530086054"}, @NFTA_DATA_VALUE={0xee, 0x1, "2ee4027650bd0adf3ededb34b030a8b6b4858c36f2cfed15b2e94858cd23e6c0bb8a3281842f97a5414460fbf4a10709c096b8d5a67153aad81c5768a332f0d749c40dbd08fa4a21081cc666445ca95176c0debc512c68d87a23d0d94530c7010a30c0d34684a36a051f1239eb726a546ee92aecf7f403b4199e9c53cd09f6344b80e014870b1d554b38ff5817ea3f6292d7542138ba4ba66b539d2dc4870ac66363ddad887611e17aa4adc79de356bc307837043183325c7bc6d19411db6cf9e54a1c611d4611b617598588d39ad3798e46815fab17092a9084ff4a13f4d776086ef31f5a28509513b0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x20, 0x1, "c7997527d875998862ef13a4eb49b8e3175853c7c830d395d599974b"}, @NFTA_DATA_VALUE={0x20, 0x1, "858a5dbffd07f5e30fd652ae4510562e6cb605ae741f6f03df4c0b12"}]}]}, {0x2f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x244, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "26099ab80773c56f3b1c6d2903c8df88b4ff3dcdf3a6ca43a943511e34da703511304f5bf6ba1935c5b3000761608d82d83c9e5f9eeb143b82a8ec77870a6e5d816c7dc2f3a57db6fb8baab158b42f30cc5b3a4750249772acdccd3efa1507693112ee4eec5a727c49f62b7f4218e30623340839720c393b048a24f4dc93e71c724b6f4582a37f34df9368b6fcd0e80ed3500f33d861caaafb7d5367a0d934d80b4197bbd3b4d0c7121d4147c32eac9c2e24c824580d5d38eb49712704d2a125cf3001feb154346c5c9ab727c621f37409c1549157ceb9827bed801012e7ecfc0c83a57479d1c74efac4797541ffaad66e8e91ae714d11ea"}, @NFTA_DATA_VALUE={0x95, 0x1, "4bd48d1ff034a0816bee43744b625d644d41dc3d61ed7fcfa4980510b505743b44bcf2db1cc2585166c84a9f2661f58688b546685fbb11fc698e5435b6e0546d738797006fd3d59dab442162a6cc2fa7ea47303869c0c68f991580bb88537ea67dbc0245e0f8e7a7d6e6c017f70911dc592fc259bd28870e991b5ffb0c520d6dd9356520401cf98b5627dcd5a6dbc50c50"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x1b20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1b0c, 0x3, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "aa7114f7f2a4442de32dd909fbb933ec347fa64dd8c7de7f0f0ab6dca46b00835a3011cdbf04faa7c16bd8303046fe1139ed11916a530cb6d80de59def858d3f317d4359761c7bc7504e9263c1ec6e0ee2b20f54beb22572376d4485fc96471b429d77ce1c7b37dfd985caa6e97f91b11a81e137fab068"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x1e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xea, 0x1, "f35ac7601a210dd9036c25057a341e50732bb26c3758d2bfcec6b04c2f9893854057da262187b1e1d7547cb353e83b76957bd5d07a9a0ba3cef65df078c3cea8cbdf70ab2597119d258c68b61279a0f81c2dd311d4a1823b7237439a9ec924825e67f8f2bcadc2bbf62206f03b4b4002536f7e65c482121fdec9b9ef9dc869a5656ce4a5aecb264f3aa3519300e948fd26f8a50a391a64434ed258b8b011214712dd2f8fd83b411444b3414b6d433a23c04154755233ba26fdda146c03456af1e4467c03e22e8d58c84967b4082c89d753db8470872c81cf0339effe88b972bb94ff4f0520e8"}, @NFTA_DATA_VALUE={0xc3, 0x1, "428d2943bd999aa17203be870cb96e29086f561ed933c32d821622632883ea5b32bf367177d57a371454871ad2e107aad3b3d95e32014ff44665a06897ba9c6f6d2c5659481dc0b9f1ffde2bf9a07ed571f3585796673275e1cb64fc1402815dc5aab1b334e83e9fdde1d72572c43f52363c8bd62300afe57b34b337f055d987f96d2927f01202e8a42eb0419bfd30ccc90b148c3038a2e837fd8f42ed352dfc02bc40c96e92d579716bf9cb101acf091c01fc64f4de9d8434b76414785056"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x1778, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x122c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x79, 0x1, "79ea688f8674fcdabdd0773946483d442b430636be84443e3c3e74ac1a91996894d8e9a4542e2ac14bf887be900c325be28bb920f760f5176f3a426f206353215e25489ae4f8c8162205c310033373e9a22f8aec7c262078de55647990fce328b6f3ad8adf98a3e356a48c9a5445cf310a4588197f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x21, 0x1, "41074ab876f089521980dd123d08d09e71a5064934c0c89d33395f84ac"}, @NFTA_DATA_VALUE={0xf8, 0x1, "19a18773ef4e6ec02122fc94f6fe8bc930f1b4fb934ff64936b939841ac04b0684620a11e818a1662203197321425047a911955ebf51c3e68859a10c6a9b22384eadd3af2aa7d96a47f8b37ea1f13bebcf61bb82ca2e15c3581feb5c29f643ae9b393702568e5d456c4fe0d83a5ef86fad388ffb23d20ff01ae1bd06fbe711d642f9f8761d4527ab4bda96d8b29d39a986d6563d0ede0d2a538c05aff14d46ea4447c292e4c6ef142cfdea7c9a0fd14e7a9f3da2459c02e588f351fbb73c305ee74787aa4e8c8b56965481f3de34b8c39b15becd6f4620a7ad9bca450bf3ae073d2341a6c3ab7c3b7cd6edc31a10e21c1b16c594"}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "bf025e1fda88215eeaa3662f5c7a5800d58be84ed4d26b6b5480f1ee7af50ef051620ff9cc36e838e69ca2db3e38c1e99be1e7d0f5c4394f78167a7d10a5c3da3c77b25b3cc5"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4c1cef42df7d5d30}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "701f2d76934ec356c7b6d945101bcb8ffeb02e2002e78514d1906539e541a6551b1118880bd56cea8ad68f72966fd0b6e190"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x29c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "671629eaf4bfc281613f28808a0ae755bc44e9a883261d85022057f27d8406469b49ddebe0dc0523ac34dfcd49326475ea4317b0cdbdbe5b4b65b352701bc42f436b5388f86d7efa5741a17704dd55f045103d28212450190b627cc4be83406d3347b63898d492dfd5ce4066f3ad1090b1c372429324304280aa1d30cca9cdfabca46c871f01c507a9848be47a37be7fd54d3dba00976997625af465b62df7577b240fb4e82d2824ea95a30b9593d53de12fdbc249e672dd3627aaec958ea9ea321b050015b228c4a1149012b24fef728345e7aab62cf49e"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x55, 0x1, "91fd63ca9d92441e6b02640b917831343c052713471a0ba63934af0cd6cd57ba12abf8d2d0c52eb6f6259051c69844aca961a28dd1e015e87497e877d2c59e73e04c6f12f2b744859b3ccc09774bf086c0"}, @NFTA_DATA_VALUE={0x51, 0x1, "6ce3dc3f7dd5cae5287d2418dbfc75d23ebd15d873d69d149fd4d4e74b4e9750a1b568d53afec980e7287b9babe0af38fc0fed78ba84398070b6e993cb59c4b08b97f80ecb7059c3852eeaf178"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xec, 0x6, 0x1, 0x0, "78525a8f9e7133da4b3ae8ed89cdb74ca0f80a60363fdddcde430d55a0e1cbd109d42c766366774559033b580b525cc4db5073d008b2148b563e6784aea551974729df73c893225f860506a8967ba3cde822cae17540a694795c35bbf8ff4603264dcbf02d48edf2ec73829d501a0053faa56103c0690a6fe5c566dd4ae22de3617d89d90fa82dce8724654aef29fa385c657b609c72c2a05d32b9e5c1491a77df6625e5b415e701aa5418670a3d37432b368d271481077beae0491bf03c2ea88762154ab7ffe2f9a37d663aa6c6a35c603130905bf99cb4497cae017f7b26741b783b4ccde6c8ee"}]}]}]}], {0x14}}, 0x2a30}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.092739247s ago: executing program 1 (id=3171): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000008000000042bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0118020003110000400012800b00010065727370616e00003000028004001200060011004e220000050008004000000006000f000600000005000a000100000008000600ac1e0001"], 0x60}, 0x1, 0x0, 0x0, 0x2004d040}, 0x4048014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 1.021770628s ago: executing program 1 (id=3172): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x4008800) 904.545998ms ago: executing program 3 (id=3173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x48, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@private0}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0xffff, 0xfffffff9, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x67, 0x0, 0xb, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1a00}}, 0x1c}}, 0x0) 904.263225ms ago: executing program 0 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="016f08000100000000200000004600003f000000de814b17317eec54ffac1404ea0b55400000ec2c9b77d514aa00000000ee533f6c27c79ad27f1474348143ab1d28c0183756757d521a0573ff07068900", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001309c40005020000fffd000880000002d58838068b91000000"], 0x4e) (rerun: 32) 835.961103ms ago: executing program 3 (id=3175): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x803, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, r6, 0x4}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4010) 737.151596ms ago: executing program 0 (id=3176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x10000}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r6, 0x501, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x1a}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6cf87b9551"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "74ddb764f8"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4030) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'dvmrp0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x4e, 0x2, 0x9}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 679.551843ms ago: executing program 3 (id=3177): r0 = socket$netlink(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x6}, 0x2}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x80, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @remote}, {0x0, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0x31, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x0, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x0, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x0, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x0, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x0, 0x4, @empty}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) (async) socket$inet(0x2, 0x3, 0x2000) 623.821307ms ago: executing program 3 (id=3178): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40, 0x19}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'pimreg1\x00', &(0x7f0000000400)=@ethtool_channels={0x3c, 0x3, 0x5, 0x2, 0x80000000, 0x1, 0x6, 0x9, 0x3}}) (async) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbf8, {0xc}}, 0x14}}, 0x4000000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r7, 0xd7735000) write$nci(r7, &(0x7f00000004c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x0, {0x1}}, 0x6) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'tunl0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @private1, @empty, 0x7, 0x4, 0x0, 0x100, 0x6, 0x4060004, r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r12], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r11, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 420.899669ms ago: executing program 3 (id=3179): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000040)=0x1e) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 292.414265ms ago: executing program 3 (id=3180): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) (async) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff60, 0x0, 0x3, 0x2, 0x7, 0xffff}, &(0x7f00000000c0)=0x20) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x2070}, 0x1, 0x0, 0x0, 0x8054}, 0x80) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x2}, 0xff}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8000, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) (async) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x168, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x80) 210.714825ms ago: executing program 1 (id=3181): socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x14, 0x8, {0x8}}, @RTA_FLOW={0x4, 0x10}]}, 0x30}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x5, &(0x7f0000000340)=""/245, &(0x7f0000000100)=0xf5) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r9, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x64}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000005) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 144.095501ms ago: executing program 0 (id=3182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}}, 0x20000000) 0s ago: executing program 1 (id=3183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x33}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0xa39, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3ff}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x44041}, 0x4010) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r6, 0x820, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xbff, 0x4, 0x3, 0x0, 0x5, 0x9, 0x3, 0x2, 0x6]}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044800}, 0x40) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r8, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000006c0), r0) bind$netlink(r5, &(0x7f0000000700)={0x10, 0x0, 0x25dfdbff, 0x2008}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r5) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x61408000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r10, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x30}}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r12, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IEEE802154_LLSEC_SETPARAMS(r12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}]}, 0x68}}, 0x40000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r2) sendmsg$IEEE802154_SET_MACPARAMS(r12, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r13, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xf3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xd}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan1\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000021}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1b4, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x2}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x146, 0x33, @mgmt_frame=@reassoc_resp={{{}, {0x5}, @device_a, @device_b, @random="6f1ad1495d11", {0x3, 0x94c}}, 0x5000, 0x28, @random=0x6, @val={0x1, 0x8, [{0x2, 0x1}, {0x24}, {0x24}, {0x30}, {0x12}, {0x60}, {0x16}, {0x5}]}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x4, 0x0, {0x3, 0x1201, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x6, 0x2, 0x12}}, [{0xdd, 0x6b, "bc25a21e2b49f6443109e72df283b29d4ef65a982306f68c6bf15bd315f00ba2b32c0936077a03261760b23eafcd4ae6b219f6c09c45c9bf520b5b62b21ff313efac3ad69fdfcee4bec560e6ef7a922484ed76259ec5d327e79cd63c0ee210ef54cabf96bce17f7136c118"}, {0xdd, 0x8f, "31c20ef9fbb67c0c2355b594f1728e4b6a13cd081e6cf4daecee426f0de60d305877d616404eda8f25e827f6d94210b17140814c79ff7768df11dfdf41e30cadea0763a4c08e1137c6f8f73eef385dca36e8972e226d9863f82f881882c9bb2625f48b66ac29b60a6e082bc703c4919e75d98c867d36563075b978b87651c33e396cabecd5a56f42b0e3f071308aa8"}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x10) kernel console output (not intermixed with test programs): process `syz.4.1127'. [ 190.305151][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 190.313359][ C1] lec:lec_tx_timeout: lec0 [ 190.318114][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 190.338666][T10342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.456250][T10342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.600942][T10362] netlink: 'syz.2.1129': attribute type 28 has an invalid length. [ 190.648378][T10362] netlink: 'syz.2.1129': attribute type 3 has an invalid length. [ 190.684729][T10362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1129'. [ 190.751099][T10362] wireguard0: entered promiscuous mode [ 190.787028][T10373] netlink: 'syz.2.1129': attribute type 28 has an invalid length. [ 190.797392][T10362] wireguard0: entered allmulticast mode [ 190.810636][T10373] netlink: 'syz.2.1129': attribute type 3 has an invalid length. [ 190.822976][T10373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1129'. [ 190.834724][T10362] team0: Device wireguard0 is of different type [ 190.873066][T10364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1130'. [ 191.151891][T10384] syzkaller0: entered promiscuous mode [ 191.205305][T10384] syzkaller0: entered allmulticast mode [ 191.780645][T10427] __nla_validate_parse: 2 callbacks suppressed [ 191.780666][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 191.831008][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1146'. [ 191.896647][T10431] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 191.916525][T10431] bond3: entered promiscuous mode [ 191.921808][T10431] bond3: entered allmulticast mode [ 191.936448][T10431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.262692][T10455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.316922][T10458] syzkaller0: entered promiscuous mode [ 192.322492][T10458] syzkaller0: entered allmulticast mode [ 192.571519][T10468] bond1: entered allmulticast mode [ 192.629248][T10471] bridge4: entered promiscuous mode [ 192.636544][T10474] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20002 [ 192.649959][T10471] bridge4: entered allmulticast mode [ 192.662529][T10471] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 193.194684][T10510] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1165'. [ 193.333322][T10512] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 193.386119][T10514] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1168'. [ 193.440636][T10522] sctp: [Deprecated]: syz.0.1170 (pid 10522) Use of int in max_burst socket option deprecated. [ 193.440636][T10522] Use struct sctp_assoc_value instead [ 193.477228][T10521] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1171'. [ 193.544490][T10527] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20000 [ 193.721059][T10531] xt_CT: No such helper "pptp" [ 193.984377][T10542] sctp: [Deprecated]: syz.4.1178 (pid 10542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.984377][T10542] Use struct sctp_sack_info instead [ 194.375342][T10567] nbd: must specify at least one socket [ 194.498500][T10574] nbd: must specify at least one socket [ 194.620434][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 194.879902][T10579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.978973][T10602] tipc: Enabled bearer , priority 0 [ 195.009367][T10602] syzkaller0: entered promiscuous mode [ 195.014911][T10602] syzkaller0: entered allmulticast mode [ 195.061615][T10602] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 195.092159][T10602] tipc: Resetting bearer [ 195.109675][T10601] tipc: Resetting bearer [ 195.127183][T10601] tipc: Disabling bearer [ 195.168158][T10617] netlink: 'syz.1.1197': attribute type 2 has an invalid length. [ 195.176522][T10617] netlink: 'syz.1.1197': attribute type 8 has an invalid length. [ 195.184313][T10617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1197'. [ 195.406285][T10625] sctp: [Deprecated]: syz.1.1200 (pid 10625) Use of int in max_burst socket option. [ 195.406285][T10625] Use struct sctp_assoc_value instead [ 195.447937][T10625] sctp: [Deprecated]: syz.1.1200 (pid 10625) Use of int in max_burst socket option. [ 195.447937][T10625] Use struct sctp_assoc_value instead [ 195.674802][T10642] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1208'. [ 195.727675][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 195.868086][T10648] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 195.878982][T10648] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 195.889928][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 196.135226][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 196.143451][ C1] lec:lec_tx_timeout: lec0 [ 196.148515][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 196.223794][T10674] sctp: [Deprecated]: syz.0.1215 (pid 10674) Use of int in max_burst socket option. [ 196.223794][T10674] Use struct sctp_assoc_value instead [ 196.255630][T10662] syz.1.1213 (10662) used greatest stack depth: 17080 bytes left [ 196.302716][T10678] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 196.381445][T10682] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 196.733116][T10697] bond6: option resend_igmp: invalid value (32767) [ 196.747499][T10697] bond6: option resend_igmp: allowed values 0 - 255 [ 196.787980][T10697] bond6 (unregistering): Released all slaves [ 197.063522][T10726] __nla_validate_parse: 4 callbacks suppressed [ 197.063542][T10726] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1232'. [ 197.429142][T10738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.561115][T10741] netlink: 'syz.3.1236': attribute type 2 has an invalid length. [ 197.587306][T10741] netlink: 'syz.3.1236': attribute type 11 has an invalid length. [ 197.620149][T10741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1236'. [ 198.169061][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 198.194500][T10759] syzkaller0: entered promiscuous mode [ 198.200397][T10762] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1243'. [ 198.200431][T10762] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 198.255738][T10759] syzkaller0: entered allmulticast mode [ 198.398166][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 198.405806][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1246'. [ 198.476054][T10774] netlink: 'syz.4.1247': attribute type 16 has an invalid length. [ 198.484345][T10774] netlink: 'syz.4.1247': attribute type 17 has an invalid length. [ 198.499953][T10772] netlink: 'syz.0.1246': attribute type 2 has an invalid length. [ 198.540735][T10774] gre0: left promiscuous mode [ 198.545925][T10774] gre0: left allmulticast mode [ 198.556896][T10774] sit0: left promiscuous mode [ 198.631302][T10774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.736572][T10780] bridge0: Caught tx_queue_len zero misconfig [ 198.824591][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 198.906924][T10789] syzkaller0: entered promiscuous mode [ 198.925185][T10789] syzkaller0: entered allmulticast mode [ 198.949517][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 199.103614][T10807] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 199.126867][T10807] netlink: 'syz.0.1256': attribute type 2 has an invalid length. [ 199.345696][T10824] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1260'. [ 199.362395][T10824] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1260'. [ 199.660401][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.667145][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.155391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 201.163422][ C1] lec:lec_tx_timeout: lec0 [ 201.168163][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 206.175197][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 206.183255][ C1] lec:lec_tx_timeout: lec0 [ 206.187906][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.195213][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 211.203260][ C1] lec:lec_tx_timeout: lec0 [ 211.208382][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.980700][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 211.986202][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.987971][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 211.992919][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 212.881171][ T5828] Bluetooth: hci4: link tx timeout [ 212.886452][ T5828] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 214.935583][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 216.215295][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 216.223396][ C1] lec:lec_tx_timeout: lec0 [ 216.228604][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 221.235211][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 221.243239][ C1] lec:lec_tx_timeout: lec0 [ 221.248021][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 224.116813][T10943] __nla_validate_parse: 1 callbacks suppressed [ 224.116832][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1262'. [ 224.243278][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 224.318494][T10951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.369275][T10961] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 224.433675][T10964] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1270'. [ 224.490667][T10966] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.517377][ T30] audit: type=1800 audit(1770674855.038:3): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1272" name="memory.events" dev="tmpfs" ino=1407 res=0 errno=0 [ 224.594510][ T30] audit: type=1804 audit(1770674855.068:4): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1272" name="/newroot/272/memory.events" dev="tmpfs" ino=1407 res=1 errno=0 [ 224.765784][T10978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1276'. [ 224.846647][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 225.069746][T10997] batadv_slave_0: Caught tx_queue_len zero misconfig [ 225.990105][T11052] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1294'. [ 226.255150][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 226.263296][ C1] lec:lec_tx_timeout: lec0 [ 226.270486][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 226.468274][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'. [ 226.479410][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'. [ 226.519177][T11080] atomic_op ffff888041ace198 conn xmit_atomic 0000000000000000 [ 226.535562][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 226.574298][T11087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1300'. [ 227.127611][T11105] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 227.515594][T11125] veth1_to_bond: entered allmulticast mode [ 227.813066][T11110] syzkaller1: entered promiscuous mode [ 227.824797][T11110] syzkaller1: entered allmulticast mode [ 227.843418][T11144] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 227.858744][T11144] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 228.335594][T11167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.399355][T11171] netlink: zone id is out of range [ 228.422298][T11171] netlink: zone id is out of range [ 228.449544][T11171] netlink: zone id is out of range [ 228.454869][T11171] netlink: zone id is out of range [ 228.496225][T11171] netlink: zone id is out of range [ 228.516308][T11171] netlink: zone id is out of range [ 228.534881][T11171] netlink: zone id is out of range [ 228.553175][T11171] netlink: zone id is out of range [ 228.575969][T11171] netlink: zone id is out of range [ 229.210268][T11206] __nla_validate_parse: 12 callbacks suppressed [ 229.210288][T11206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1329'. [ 229.337976][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 229.365529][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 229.445024][T11219] syzkaller0: entered promiscuous mode [ 229.481455][T11219] syzkaller0: entered allmulticast mode [ 230.044871][T11245] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 230.056405][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1339'. [ 230.087937][T11245] bond6 (unregistering): Released all slaves [ 230.482599][T11265] syz.3.1340 uses old SIOCAX25GETINFO [ 230.962580][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'. [ 231.111319][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 231.223909][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 231.285166][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 231.293238][ C1] lec:lec_tx_timeout: lec0 [ 231.298185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 231.710972][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 231.963138][T11330] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1358'. [ 232.521087][T11352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1363'. [ 232.653768][T11352] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 232.936721][T11367] netlink: 'syz.0.1365': attribute type 13 has an invalid length. [ 233.319959][T11372] sctp: [Deprecated]: syz.2.1367 (pid 11372) Use of int in maxseg socket option. [ 233.319959][T11372] Use struct sctp_assoc_value instead [ 233.365861][T11372] sctp: [Deprecated]: syz.2.1367 (pid 11372) Use of int in max_burst socket option. [ 233.365861][T11372] Use struct sctp_assoc_value instead [ 233.558092][T11385] bond6: entered promiscuous mode [ 233.590462][T11385] bond6: entered allmulticast mode [ 233.597283][T11385] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.477071][T11426] __nla_validate_parse: 2 callbacks suppressed [ 234.477094][T11426] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1380'. [ 234.689263][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 234.749211][T11435] batadv2: entered allmulticast mode [ 234.798409][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1384'. [ 234.844892][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 235.061442][T11459] syzkaller0: entered promiscuous mode [ 235.081970][T11459] syzkaller0: entered allmulticast mode [ 235.111524][T11459] tipc: Enabled bearer , priority 0 [ 235.136374][T11467] SET target dimension over the limit! [ 235.199678][T11467] netlink: 'syz.0.1390': attribute type 1 has an invalid length. [ 235.222756][T11458] tipc: Resetting bearer [ 235.229858][T11467] net_ratelimit: 46 callbacks suppressed [ 235.229876][T11467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.324143][T11458] tipc: Disabling bearer [ 235.676276][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 235.981112][T11504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1399'. [ 236.228927][T11523] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 236.305100][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 236.313240][ C1] lec:lec_tx_timeout: lec0 [ 236.318597][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 236.437743][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 236.501806][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 236.769967][T11552] netlink: 'syz.2.1408': attribute type 11 has an invalid length. [ 236.798975][T11552] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1408'. [ 237.310522][T11584] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1417'. [ 237.520048][T11592] pim6reg: entered allmulticast mode [ 237.546512][T11592] pim6reg: left allmulticast mode [ 237.623010][T11599] veth1_vlan: Caught tx_queue_len zero misconfig [ 237.781457][T11610] netlink: 'syz.3.1425': attribute type 1 has an invalid length. [ 237.906632][T11610] bond3: entered promiscuous mode [ 237.925028][T11610] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.952640][T11623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.003750][T11619] bond3: (slave bridge6): making interface the new active one [ 238.013249][T11619] bridge6: entered promiscuous mode [ 238.021606][T11619] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 238.234475][T11627] syzkaller0: entered promiscuous mode [ 238.275409][T11627] syzkaller0: entered allmulticast mode [ 240.072112][T11636] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 240.259676][T11659] __nla_validate_parse: 65 callbacks suppressed [ 240.259697][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 240.325364][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 240.391015][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1442'. [ 240.428656][T11668] netlink: 'syz.1.1442': attribute type 1 has an invalid length. [ 240.515295][T11668] bond4: entered promiscuous mode [ 240.545671][T11668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.662513][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1446'. [ 240.742482][T11683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.824901][T11694] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1449'. [ 241.227978][T11707] xt_cgroup: invalid path, errno=-2 [ 241.238866][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 241.265665][T11707] netlink: 'syz.3.1453': attribute type 12 has an invalid length. [ 241.281762][T11707] netlink: 'syz.3.1453': attribute type 29 has an invalid length. [ 241.306170][T11707] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1453'. [ 241.329574][T11707] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1453'. [ 241.499728][T11722] scsi_nl_rcv_msg: discarding partial skb [ 241.519398][T11731] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1460'. [ 242.145126][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 242.153245][ C1] lec:lec_tx_timeout: lec0 [ 242.158796][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.194932][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 242.483316][T11783] tipc: MTU too low for tipc bearer [ 242.508745][T11787] netlink: 'syz.4.1474': attribute type 2 has an invalid length. [ 242.519141][T11783] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 242.542007][T11787] netlink: 'syz.4.1474': attribute type 1 has an invalid length. [ 243.538369][T11822] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig [ 243.626510][T11847] netlink: 'syz.2.1486': attribute type 3 has an invalid length. [ 243.639874][T11847] netlink: 'syz.2.1486': attribute type 2 has an invalid length. [ 244.518698][T11891] tunl0: Caught tx_queue_len zero misconfig [ 244.887422][T11906] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 245.004019][T11906] bond7: entered promiscuous mode [ 245.027046][T11906] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.126814][T11927] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 245.388834][T11941] __nla_validate_parse: 14 callbacks suppressed [ 245.388856][T11941] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1514'. [ 245.461377][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1515'. [ 245.654863][T11956] delete_channel: no stack [ 245.871889][T11965] xt_HMARK: spi-set and port-set can't be combined [ 246.296813][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 246.379891][T11989] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 247.006122][T12011] syzkaller0: entered promiscuous mode [ 247.075943][T12011] syzkaller0: entered allmulticast mode [ 247.119356][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 247.165127][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 247.173273][ C1] lec:lec_tx_timeout: lec0 [ 247.178232][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.199345][T12011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1533'. [ 247.326754][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 247.348243][ T8091] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.365574][T12011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1533'. [ 247.370742][ T8091] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.391995][ T8091] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.424081][ T8091] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.758856][T12052] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 247.787544][T12052] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 247.983026][T12064] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1545'. [ 248.431085][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'. [ 248.590936][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 248.748800][T12102] vlan4: entered promiscuous mode [ 248.754112][T12102] vlan4: entered allmulticast mode [ 248.761211][T12102] hsr_slave_1: entered allmulticast mode [ 248.782136][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 250.573961][T12181] __nla_validate_parse: 1 callbacks suppressed [ 250.573981][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'. [ 250.921338][T12198] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.977212][T12196] nbd: must specify a size in bytes for the device [ 251.024936][T12196] nbd: must specify a size in bytes for the device [ 251.059929][T12196] nbd: must specify a size in bytes for the device [ 251.078932][T12196] nbd: must specify a size in bytes for the device [ 251.105663][T12196] nbd: must specify a size in bytes for the device [ 251.120983][T12196] nbd: must specify a size in bytes for the device [ 251.139582][T12196] nbd: must specify a size in bytes for the device [ 251.154666][T12196] nbd: must specify a size in bytes for the device [ 251.173247][T12196] nbd: must specify a size in bytes for the device [ 251.211708][T12196] nbd: must specify a size in bytes for the device [ 251.255538][T12196] nbd: must specify a size in bytes for the device [ 251.269312][T12196] nbd: must specify a size in bytes for the device [ 251.305472][T12196] nbd: must specify a size in bytes for the device [ 251.312210][T12196] nbd: must specify a size in bytes for the device [ 251.346881][T12196] nbd: must specify a size in bytes for the device [ 251.356817][T12196] nbd: must specify a size in bytes for the device [ 251.385579][T12196] nbd: must specify a size in bytes for the device [ 251.392309][T12196] nbd: must specify a size in bytes for the device [ 251.416080][T12196] nbd: must specify a size in bytes for the device [ 251.423673][T12196] nbd: must specify a size in bytes for the device [ 251.457919][T12196] nbd: must specify a size in bytes for the device [ 251.465008][T12196] nbd: must specify a size in bytes for the device [ 251.506336][T12196] nbd: must specify a size in bytes for the device [ 251.518824][T12196] nbd: must specify a size in bytes for the device [ 251.538790][T12196] nbd: must specify a size in bytes for the device [ 251.558991][T12196] nbd: must specify a size in bytes for the device [ 251.581403][T12196] nbd: must specify a size in bytes for the device [ 251.601210][T12196] nbd: must specify a size in bytes for the device [ 251.619911][T12196] nbd: must specify a size in bytes for the device [ 251.649164][T12196] nbd: must specify a size in bytes for the device [ 251.730162][T12226] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1587'. [ 251.891210][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 252.019618][T12240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1590'. [ 252.063210][T12235] atomic_op ffff8880583ba998 conn xmit_atomic 0000000000000000 [ 252.078288][ T40] IPVS: starting estimator thread 0... [ 252.195415][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 252.203543][ C1] lec:lec_tx_timeout: lec0 [ 252.208489][T12243] IPVS: using max 27 ests per chain, 64800 per kthread [ 252.215408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.232266][T12247] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 252.307762][T12254] netlink: 'syz.2.1596': attribute type 2 has an invalid length. [ 252.399646][T12257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1597'. [ 252.484906][T12259] netlink: 'syz.3.1598': attribute type 19 has an invalid length. [ 252.544181][T12261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.708878][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1601'. [ 253.124039][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 253.137547][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 253.168857][T12288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1607'. [ 253.189220][T12288] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1607'. [ 253.220258][T12288] netlink: 'syz.3.1607': attribute type 5 has an invalid length. [ 253.513397][T12308] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 253.523924][T12308] --map-set only usable from mangle table [ 255.988084][T12283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.388082][T12344] sock: sock_set_timeout: `syz.1.1622' (pid 12344) tries to set negative timeout [ 256.531487][T12350] __nla_validate_parse: 3 callbacks suppressed [ 256.531507][T12350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1625'. [ 257.094323][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 257.105787][T12374] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1632'. [ 257.222599][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1634'. [ 257.231975][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 257.232050][ C1] lec:lec_tx_timeout: lec0 [ 257.241176][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.339883][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 258.370750][T12446] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 258.384991][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 258.403020][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'. [ 258.417165][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 258.497046][T12446] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 258.514582][T12446] bond4 (unregistering): Released all slaves [ 258.593604][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 258.666008][T12449] syzkaller0: left promiscuous mode [ 258.688362][T12449] syzkaller0: left allmulticast mode [ 258.695640][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 258.885593][T12451] syzkaller1: entered promiscuous mode [ 258.891358][T12451] syzkaller1: entered allmulticast mode [ 259.431150][T12492] netlink: 'syz.0.1663': attribute type 6 has an invalid length. [ 259.572220][T12498] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 259.679749][T12507] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 259.960511][T12524] netlink: 'syz.3.1672': attribute type 18 has an invalid length. [ 260.507857][T12556] syzkaller0: entered promiscuous mode [ 260.523161][T12556] syzkaller0: entered allmulticast mode [ 260.704845][T12569] netlink: 'syz.0.1685': attribute type 4 has an invalid length. [ 260.764856][T12569] netlink: 'syz.0.1685': attribute type 4 has an invalid length. [ 261.013075][T12591] bond8: entered promiscuous mode [ 261.019698][T12591] bond8: entered allmulticast mode [ 261.025967][T12591] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.100484][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.115723][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.128053][T12591] macvlan2: entered promiscuous mode [ 261.162235][T12591] macvlan2: entered allmulticast mode [ 261.198874][T12591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.566384][T12610] __nla_validate_parse: 20 callbacks suppressed [ 261.566404][T12610] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1693'. [ 261.800449][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 261.815278][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 261.914882][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.245452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 262.253571][ C1] lec:lec_tx_timeout: lec0 [ 262.259263][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 262.348732][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 262.805915][T12674] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 262.852336][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 262.980266][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 263.099524][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 263.444023][T12694] x_tables: duplicate underflow at hook 3 [ 263.487122][T12698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.542968][T12698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.821427][T12713] Can't find ip_set type bitmap:ip,m [ 264.073387][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 264.142756][T12734] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 264.165616][T12734] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1735'. [ 264.174631][T12734] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1735'. [ 264.219283][T12734] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 264.242292][T12734] netlink: 'syz.4.1735': attribute type 8 has an invalid length. [ 264.373950][T12749] bond0: Caught tx_queue_len zero misconfig [ 264.387596][T12750] x_tables: duplicate underflow at hook 2 [ 264.510405][T12755] netlink: 'syz.2.1741': attribute type 3 has an invalid length. [ 267.277719][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 267.285802][ C1] lec:lec_tx_timeout: lec0 [ 267.290629][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.333526][T12808] lo: Caught tx_queue_len zero misconfig [ 267.366040][T12821] tipc: Enabled bearer , priority 0 [ 267.390747][T12826] syzkaller0: entered promiscuous mode [ 267.406367][T12826] syzkaller0: entered allmulticast mode [ 267.416378][T12827] syzkaller0: entered promiscuous mode [ 267.430150][T12827] syzkaller0: entered allmulticast mode [ 267.549639][T12841] __nla_validate_parse: 5 callbacks suppressed [ 267.549661][T12841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1764'. [ 267.819326][T12854] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1770'. [ 267.828696][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 268.936804][T12905] netlink: 'syz.1.1783': attribute type 7 has an invalid length. [ 268.944853][T12905] netlink: 'syz.1.1783': attribute type 8 has an invalid length. [ 268.957683][T12905] netlink: 'syz.1.1783': attribute type 3 has an invalid length. [ 268.981395][T12880] netlink: 'syz.2.1778': attribute type 4 has an invalid length. [ 270.887264][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 270.896349][T12932] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1790'. [ 270.947145][T12927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.325704][T12930] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 271.367590][T12929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.647052][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1801'. [ 271.690756][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1802'. [ 272.147933][T13001] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1805'. [ 272.271772][T13001] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1805'. [ 272.305108][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 272.313207][ C1] lec:lec_tx_timeout: lec0 [ 272.318431][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 272.360825][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1811'. [ 272.743708][T13030] __nla_validate_parse: 2 callbacks suppressed [ 272.743729][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 272.883585][T13027] IPv6: sit2: Disabled Multicast RS [ 272.916361][T13027] sit2: entered allmulticast mode [ 273.042990][T13034] pim6reg: entered allmulticast mode [ 273.426368][T13063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.454559][T13063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.620225][T13063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.631486][T13063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.654142][T13076] veth1_macvtap: left promiscuous mode [ 273.710197][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 273.807265][T13063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.852608][T13063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.586278][ T5933] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.594942][ T5933] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.867993][ T5933] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.876743][ T5933] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.928367][ T5933] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.945975][ T5933] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.980136][ T5933] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.008310][ T5933] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.222003][T13136] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 275.231598][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.304727][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.314126][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.335969][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.367722][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.428269][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.470253][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.513916][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.539467][T13137] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 275.888636][T13169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.000095][T13180] sctp: [Deprecated]: syz.4.1856 (pid 13180) Use of int in maxseg socket option. [ 276.000095][T13180] Use struct sctp_assoc_value instead [ 276.060904][T13180] sctp: [Deprecated]: syz.4.1856 (pid 13180) Use of int in maxseg socket option. [ 276.060904][T13180] Use struct sctp_assoc_value instead [ 276.076848][T13178] IPVS: set_ctl: invalid protocol: 58 172.20.20.11:20004 [ 276.085300][T13180] sctp: [Deprecated]: syz.4.1856 (pid 13180) Use of int in maxseg socket option. [ 276.085300][T13180] Use struct sctp_assoc_value instead [ 276.210083][T13194] openvswitch: netlink: Flow key attr not present in new flow. [ 276.778252][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 276.807597][T13230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.967442][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 276.980794][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1869'. [ 277.149089][T13247] syzkaller1: entered promiscuous mode [ 277.162169][T13247] syzkaller1: entered allmulticast mode [ 277.244037][T13251] syzkaller1: left promiscuous mode [ 277.262337][T13251] syzkaller1: left allmulticast mode [ 277.337607][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'. [ 277.370929][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1876'. [ 277.411552][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1876'. [ 277.562825][T13266] openvswitch: netlink: Multiple metadata blocks provided [ 277.627386][T13267] xt_hashlimit: size too large, truncated to 1048576 [ 278.135091][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 278.143152][ C1] lec:lec_tx_timeout: lec0 [ 278.148228][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 278.176784][T13286] tipc: Enabled bearer , priority 0 [ 278.202852][T13286] syzkaller0: entered promiscuous mode [ 278.230375][T13286] syzkaller0: entered allmulticast mode [ 278.239436][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 278.296648][T13295] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1887'. [ 278.337373][T13291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1886'. [ 278.377121][T13286] delete_channel: no stack [ 278.387576][T13285] tipc: Resetting bearer [ 278.436118][T13285] tipc: Disabling bearer [ 278.482123][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 278.492850][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1888'. [ 278.832351][T13322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1895'. [ 278.879106][T13322] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1895'. [ 279.059999][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1899'. [ 280.129507][T13381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1912'. [ 280.269927][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 280.518808][T13409] validate_nla: 57 callbacks suppressed [ 280.518832][T13409] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 280.620856][T13411] ip6tnl0: Caught tx_queue_len zero misconfig [ 280.696949][T13409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.787750][T13420] bond3: (slave veth5): Enslaving as an active interface with a down link [ 280.820255][T13424] bond3: (slave veth0_to_bond): making interface the new active one [ 280.840471][T13424] veth0_to_bond: entered promiscuous mode [ 280.850356][T13424] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 280.882063][T13428] xt_HMARK: spi-set and port-set can't be combined [ 281.070252][T13438] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 281.168943][T13444] tipc: Enabled bearer , priority 10 [ 281.221462][T13446] openvswitch: netlink: IP tunnel TTL not specified. [ 281.769109][T13481] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.849508][T13481] netlink: 'syz.2.1941': attribute type 33 has an invalid length. [ 282.296212][ T5914] tipc: Node number set to 3458608525 [ 282.568712][T13519] kthread_run failed with err -4 [ 283.155178][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 283.163244][ C1] lec:lec_tx_timeout: lec0 [ 283.168081][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 288.175330][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.183367][ C1] lec:lec_tx_timeout: lec0 [ 288.188032][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.915518][ T8107] veth0_to_bond: left promiscuous mode [ 293.195181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 293.203379][ C1] lec:lec_tx_timeout: lec0 [ 293.208148][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.215155][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 298.223247][ C1] lec:lec_tx_timeout: lec0 [ 298.227996][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.235564][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.243596][ C1] lec:lec_tx_timeout: lec0 [ 303.248340][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.688022][T13553] __nla_validate_parse: 41 callbacks suppressed [ 303.688054][T13553] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1962'. [ 303.691830][T13551] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20003 [ 303.726958][T13549] netlink: 'syz.4.1965': attribute type 11 has an invalid length. [ 304.079984][T13578] netlink: 'syz.0.1971': attribute type 1 has an invalid length. [ 304.101862][T13578] netlink: 'syz.0.1971': attribute type 3 has an invalid length. [ 304.113656][T13578] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1971'. [ 304.123166][T13578] NCSI netlink: No device for ifindex 813332851 [ 304.588738][T13613] netlink: 'syz.3.1982': attribute type 1 has an invalid length. [ 304.603888][T13612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.647849][T13615] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1983'. [ 304.807221][T13620] bond4: (slave bridge7): making interface the new active one [ 304.817165][T13620] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 304.871002][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1984'. [ 304.880535][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1984'. [ 305.075668][T13637] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1987'. [ 305.085800][T13637] 8021q: VLANs not supported on ip_vti0 [ 305.137659][T13644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1989'. [ 305.303673][T13648] netlink: 'syz.0.1992': attribute type 1 has an invalid length. [ 305.338434][T13651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1993'. [ 305.371347][T13651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1993'. [ 305.902807][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 306.102266][T13698] Cannot find add_set index 4 as target [ 306.257871][T13705] tipc: Enabled bearer , priority 0 [ 306.289362][T13705] syzkaller0: entered promiscuous mode [ 306.296057][T13705] syzkaller0: entered allmulticast mode [ 306.308170][T13707] netdevsim netdevsim2: Direct firmware load for 2. failed with error -2 [ 306.330211][T13705] tipc: Resetting bearer [ 306.351146][T13704] tipc: Resetting bearer [ 306.393397][T13707] netdevsim netdevsim2: Falling back to sysfs fallback for: 2. [ 306.514207][T13704] tipc: Disabling bearer [ 307.118261][T13717] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 307.135475][T13717] netlink: 'syz.4.2013': attribute type 2 has an invalid length. [ 307.296852][T13729] netlink: 'syz.1.2017': attribute type 83 has an invalid length. [ 307.517985][T13736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.708194][T13749] netlink: 'syz.2.2025': attribute type 3 has an invalid length. [ 307.744995][T13749] dummy0: left allmulticast mode [ 307.760643][T13749] bridge0: port 3(dummy0) entered disabled state [ 307.814329][T13749] bridge_slave_0: left promiscuous mode [ 307.846303][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.880440][T13749] bridge_slave_1: left allmulticast mode [ 307.901880][T13749] bridge_slave_1: left promiscuous mode [ 307.921048][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.954040][T13749] bond3: (slave veth0_to_bond): Releasing active interface [ 308.064198][T13749] bond0: (slave bond_slave_0): Releasing backup interface [ 308.117148][T13749] bond0: (slave bond_slave_1): Releasing backup interface [ 308.159258][T13749] team0: Port device team_slave_0 removed [ 308.190621][T13749] team0: Port device team_slave_1 removed [ 308.223193][T13777] openvswitch: netlink: IP tunnel dst address not specified [ 308.228413][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.241443][T13749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.252756][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.260336][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.260373][ C1] lec:lec_tx_timeout: lec0 [ 308.269144][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.281800][T13749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.292833][T13749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.329925][T13772] batadv_slave_0: Caught tx_queue_len zero misconfig [ 308.630556][T13798] tipc: Enabling of bearer rejected, media not registered [ 308.880421][T13810] netlink: 'syz.1.2044': attribute type 2 has an invalid length. [ 308.901673][T13810] netlink: 'syz.1.2044': attribute type 8 has an invalid length. [ 308.931451][T13810] __nla_validate_parse: 10 callbacks suppressed [ 308.931475][T13810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2044'. [ 308.948971][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 308.997378][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 309.376198][T13837] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2052'. [ 309.524336][T13846] netlink: 'syz.3.2056': attribute type 11 has an invalid length. [ 309.532837][T13846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2056'. [ 309.559510][T13840] bond4: entered promiscuous mode [ 309.565446][T13840] bond4: entered allmulticast mode [ 309.571223][T13840] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.581817][T13850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2055'. [ 309.608771][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2055'. [ 309.750236][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 309.772720][T13847] syzkaller1: entered promiscuous mode [ 309.778719][T13847] syzkaller1: entered allmulticast mode [ 309.962249][T13868] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.993063][T13868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2060'. [ 310.067904][ T8115] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 310.296834][T13878] netlink: 'syz.3.2063': attribute type 4 has an invalid length. [ 310.388986][T13882] wireguard0: entered promiscuous mode [ 310.424266][T13882] wireguard0: entered allmulticast mode [ 310.461917][T13882] team0: Device wireguard0 is of different type [ 310.541089][T13896] sctp: [Deprecated]: syz.1.2068 (pid 13896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.541089][T13896] Use struct sctp_sack_info instead [ 310.582197][T13900] x_tables: duplicate underflow at hook 1 [ 310.774782][T13904] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2070'. [ 311.401406][T13940] netlink: 'syz.4.2083': attribute type 2 has an invalid length. [ 311.432052][T13943] syzkaller0: entered promiscuous mode [ 311.452247][T13943] syzkaller0: entered allmulticast mode [ 311.886790][T13973] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 311.964047][T13973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.562758][T14015] tipc: New replicast peer: 255.255.255.255 [ 312.573582][T14015] tipc: Enabled bearer , priority 10 [ 312.692089][T14013] xfrm0: entered promiscuous mode [ 312.700305][T14013] xfrm0: entered allmulticast mode [ 312.777253][T14036] netlink: 'syz.2.2111': attribute type 1 has an invalid length. [ 312.795359][T14036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.925419][T14037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.275101][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.283171][ C1] lec:lec_tx_timeout: lec0 [ 313.288214][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.550024][T14080] xt_NFQUEUE: number of total queues is 0 [ 313.935897][T14106] bridge0: entered allmulticast mode [ 314.250622][T14124] __nla_validate_parse: 15 callbacks suppressed [ 314.250643][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2134'. [ 314.369633][T14132] x_tables: duplicate entry at hook 3 [ 314.691678][T14144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2140'. [ 314.787168][T14144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2140'. [ 314.987437][T14153] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2144'. [ 315.045419][T14158] netlink: 'syz.3.2143': attribute type 5 has an invalid length. [ 315.341251][T14173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.740307][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 315.761222][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 315.977748][T14209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2157'. [ 316.082938][T14218] xt_hashlimit: overflow, rate too high: 0 [ 316.190720][T14222] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2160'. [ 316.257045][T14226] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 316.566888][T14250] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 316.574709][T14250] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.2166'. [ 316.635248][T14250] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2166'. [ 316.735660][T14255] openvswitch: netlink: Missing key (keys=40, expected=80) [ 316.890845][T14265] tipc: Enabling of bearer rejected, already enabled [ 316.980671][T14265] tipc: Resetting bearer [ 317.072707][T14269] erspan0: entered promiscuous mode [ 317.095794][T14269] gretap0: entered promiscuous mode [ 317.162159][T14278] netlink: 'syz.2.2173': attribute type 3 has an invalid length. [ 317.184203][T14280] netlink: 'syz.2.2173': attribute type 3 has an invalid length. [ 317.550569][T14303] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 318.208430][T14345] syzkaller0: entered promiscuous mode [ 318.213988][T14345] syzkaller0: entered allmulticast mode [ 318.295089][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.303302][ C1] lec:lec_tx_timeout: lec0 [ 318.308359][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.530536][T14364] syzkaller0: entered promiscuous mode [ 318.538090][T14364] syzkaller0: entered allmulticast mode [ 318.684742][T14370] veth7: entered allmulticast mode [ 319.090691][T14383] erspan0: entered promiscuous mode [ 319.108299][T14383] erspan0: entered allmulticast mode [ 319.348196][T14395] syzkaller0: entered promiscuous mode [ 319.362187][T14395] syzkaller0: entered allmulticast mode [ 319.544379][T14404] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 319.697932][T14416] __nla_validate_parse: 14 callbacks suppressed [ 319.697956][T14416] netlink: 6052 bytes leftover after parsing attributes in process `syz.4.2217'. [ 319.724314][T14420] netlink: 'syz.3.2218': attribute type 1 has an invalid length. [ 319.765676][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 319.776406][T14424] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.795509][T14420] bond5: entered promiscuous mode [ 319.801283][T14420] 8021q: adding VLAN 0 to HW filter on device bond5 [ 320.194035][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 320.362766][T14459] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2231'. [ 320.379500][T14460] syzkaller1: entered promiscuous mode [ 320.387725][T14460] syzkaller1: entered allmulticast mode [ 320.484046][T14468] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 320.785398][T14483] macsec2: entered promiscuous mode [ 320.796081][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'. [ 320.852681][T14487] syzkaller1: entered promiscuous mode [ 320.867940][T14487] syzkaller1: entered allmulticast mode [ 321.004383][T14498] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2243'. [ 321.020707][T14494] xt_hashlimit: size too large, truncated to 1048576 [ 321.104997][T14503] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 321.145084][T14503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2244'. [ 321.216223][T14505] netlink: 'syz.1.2245': attribute type 4 has an invalid length. [ 321.234308][T14505] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2245'. [ 321.578194][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2252'. [ 321.632233][T14528] chnl_net:caif_netlink_parms(): no params data found [ 321.663294][T14533] tipc: Enabling of bearer rejected, already enabled [ 322.540556][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.547109][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.586263][T14563] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 322.624347][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 322.821414][T14578] netlink: 'syz.3.2270': attribute type 23 has an invalid length. [ 322.840928][T14575] netlink: 'syz.4.2269': attribute type 2 has an invalid length. [ 322.849314][T14574] netlink: 'syz.4.2269': attribute type 2 has an invalid length. [ 322.906762][T14574] 9: entered promiscuous mode [ 323.315357][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 323.323523][ C1] lec:lec_tx_timeout: lec0 [ 323.328222][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 323.679652][T14643] netlink: 'syz.2.2286': attribute type 5 has an invalid length. [ 323.755170][ T798] page_pool_release_retry() stalled pool shutdown: id 50, 1 inflight 60 sec [ 323.793968][T14639] ip6tnl1: entered allmulticast mode [ 323.891821][T14650] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 323.947949][T14656] team0: Device gtp3 is up. Set it down before adding it as a team port [ 329.575198][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 329.583255][ C1] lec:lec_tx_timeout: lec0 [ 329.588201][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.335164][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 335.343302][ C1] lec:lec_tx_timeout: lec0 [ 335.348361][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 341.095129][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 341.103206][ C1] lec:lec_tx_timeout: lec0 [ 341.108022][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 346.135251][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 346.143452][ C1] lec:lec_tx_timeout: lec0 [ 346.148502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.870933][T14682] tipc: Enabling of bearer rejected, already enabled [ 349.080567][T14690] pim6reg: entered allmulticast mode [ 349.177174][T14704] __nla_validate_parse: 7 callbacks suppressed [ 349.177203][T14704] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2307'. [ 349.197653][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'. [ 349.229231][T14705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.257829][T14703] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 349.340550][T14703] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 349.498693][T14726] netlink: 'syz.2.2312': attribute type 11 has an invalid length. [ 349.521373][T14717] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 349.535626][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'. [ 349.637110][T14717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.729180][T14717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.763762][T14731] netem: change failed [ 349.962188][T14744] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2317'. [ 350.007035][T14744] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 350.329010][T14774] netlink: 'syz.2.2325': attribute type 61 has an invalid length. [ 350.437463][T14776] netlink: 4124 bytes leftover after parsing attributes in process `syz.0.2326'. [ 350.467339][T14784] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 350.528835][T14784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.540358][T14791] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2331'. [ 350.710372][T14789] bond6: (slave veth7): Enslaving as an active interface with a down link [ 350.748588][T14784] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 350.784202][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'. [ 350.847628][T14799] bond6: (slave veth9): Enslaving as an active interface with a down link [ 350.879481][T14799] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 350.901078][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'. [ 350.920598][T14799] netlink: 'syz.3.2329': attribute type 2 has an invalid length. [ 350.969125][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 351.134875][T14824] netlink: 'syz.2.2336': attribute type 1 has an invalid length. [ 351.155066][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 351.163183][ C1] lec:lec_tx_timeout: lec0 [ 351.175186][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 351.282913][T14824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.361093][T14828] bond5: (slave veth9): Enslaving as an active interface with a down link [ 351.401360][T14824] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 351.426574][T14824] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 353.374735][T14776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.660639][T14862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.832062][T14857] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 353.851706][T14864] bond6 (unregistering): Released all slaves [ 354.067130][T14857] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.137326][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2352'. [ 354.151502][T14866] veth11: entered promiscuous mode [ 354.309144][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'. [ 354.446980][T14897] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.560134][T14900] delete_channel: no stack [ 356.185114][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 356.193218][ C1] lec:lec_tx_timeout: lec0 [ 356.197914][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.749245][T14872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.013480][T14912] netlink: 'syz.3.2358': attribute type 1 has an invalid length. [ 357.057657][T14916] syzkaller0: entered promiscuous mode [ 357.063317][T14916] syzkaller0: entered allmulticast mode [ 357.384072][T14927] syzkaller0: entered promiscuous mode [ 357.390120][T14927] syzkaller0: entered allmulticast mode [ 357.558717][T14940] netlink: 'syz.0.2370': attribute type 2 has an invalid length. [ 357.669102][T14947] raw_sendmsg: syz.0.2370 forgot to set AF_INET. Fix it! [ 357.703895][T14951] bridge0: entered allmulticast mode [ 357.962526][T14965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2374'. [ 357.976602][T14961] netlink: 'syz.1.2375': attribute type 3 has an invalid length. [ 358.007847][T14965] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2374'. [ 358.180805][T14975] bond8: Unable to set down delay as MII monitoring is disabled [ 358.207028][T14975] bond8 (unregistering): Released all slaves [ 358.251781][T14982] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 358.265334][T14984] netlink: 'syz.1.2381': attribute type 13 has an invalid length. [ 358.361392][T14992] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2384'. [ 358.456346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.551514][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2386'. [ 358.909596][T15010] syzkaller0: entered promiscuous mode [ 358.916678][T15010] syzkaller0: entered allmulticast mode [ 359.009810][T15010] netlink: 'syz.1.2392': attribute type 13 has an invalid length. [ 359.098592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.129744][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 359.598934][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2400'. [ 359.648188][T15051] netlink: 'syz.3.2403': attribute type 1 has an invalid length. [ 359.685168][T15051] netlink: 'syz.3.2403': attribute type 4 has an invalid length. [ 359.695838][T15051] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.2403'. [ 359.815879][T15055] xt_TPROXY: Can be used only with -p tcp or -p udp [ 359.824109][T15055] netlink: 'syz.2.2404': attribute type 64 has an invalid length. [ 359.834586][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 359.870575][T15057] erspan0: entered promiscuous mode [ 359.975978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.385722][T15077] netlink: 'syz.1.2412': attribute type 9 has an invalid length. [ 360.406026][T15073] C: renamed from lo (while UP) [ 360.412768][T15073] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 360.431030][T15077] netlink: 'syz.1.2412': attribute type 11 has an invalid length. [ 360.472483][T15078] tipc: Enabled bearer , priority 0 [ 360.482017][T15077] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2412'. [ 360.507184][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 360.549417][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 360.702490][T15090] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2416'. [ 360.761898][T15090] gretap0: entered promiscuous mode [ 360.871043][T15074] tipc: Disabling bearer [ 361.102968][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 361.189053][T15107] syzkaller0: entered promiscuous mode [ 361.194770][T15107] syzkaller0: entered allmulticast mode [ 361.205084][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 361.213166][ C1] lec:lec_tx_timeout: lec0 [ 361.217818][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 361.259871][T15114] bridge5: port 1(veth9) entered blocking state [ 361.269188][T15114] bridge5: port 1(veth9) entered disabled state [ 361.276975][T15114] veth9: entered allmulticast mode [ 361.284609][T15114] veth9: entered promiscuous mode [ 361.306182][T15118] bridge5: port 2(veth0_to_bond) entered blocking state [ 361.313671][T15118] bridge5: port 2(veth0_to_bond) entered disabled state [ 361.321884][T15118] veth0_to_bond: entered allmulticast mode [ 361.330935][T15118] veth0_to_bond: entered promiscuous mode [ 361.480034][T15122] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 363.116280][T15120] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 363.249256][T15147] validate_nla: 1 callbacks suppressed [ 363.249281][T15147] netlink: 'syz.3.2430': attribute type 10 has an invalid length. [ 363.564200][T15174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2438'. [ 363.594345][T15176] lo: Caught tx_queue_len zero misconfig [ 363.716350][T15181] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 363.725390][T15181] netlink: 476 bytes leftover after parsing attributes in process `syz.1.2441'. [ 363.775603][T15182] netlink: 'syz.1.2441': attribute type 2 has an invalid length. [ 364.137525][ T8085] wlan1: Trigger new scan to find an IBSS to join [ 364.263251][T15216] netlink: 'syz.0.2450': attribute type 2 has an invalid length. [ 364.285788][T15215] syzkaller1: entered promiscuous mode [ 364.291459][T15215] syzkaller1: entered allmulticast mode [ 364.855636][T15245] __nla_validate_parse: 1 callbacks suppressed [ 364.855655][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2459'. [ 364.964334][T15247] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 364.986768][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2460'. [ 365.068280][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 365.119369][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2461'. [ 365.132745][T15259] netlink: 'syz.3.2462': attribute type 10 has an invalid length. [ 365.161555][T15259] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.191200][T15259] bridge_slave_1: left allmulticast mode [ 365.197126][T15259] bridge_slave_1: left promiscuous mode [ 365.218607][T15259] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.417416][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 365.456287][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2466'. [ 365.477343][T15271] openvswitch: netlink: IPv6 tunnel dst address is zero [ 365.610143][T15269] syzkaller0: entered promiscuous mode [ 365.635669][T15269] syzkaller0: entered allmulticast mode [ 365.684440][T15283] netlink: 'syz.4.2470': attribute type 2 has an invalid length. [ 365.779772][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 365.860617][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2473'. [ 365.887632][T15297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2473'. [ 366.225117][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 366.233188][ C1] lec:lec_tx_timeout: lec0 [ 366.238345][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.186228][ T8085] wlan1: Trigger new scan to find an IBSS to join [ 367.883856][T15333] ip6gre2: entered allmulticast mode [ 367.963498][T15336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.031619][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2483'. [ 368.116316][ T8115] wlan1: Creating new IBSS network, BSSID 8e:7e:90:40:e6:f4 [ 368.296023][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2489'. [ 368.305310][T15358] nbd: must specify a size in bytes for the device [ 368.314035][T15358] netlink: 'syz.2.2489': attribute type 10 has an invalid length. [ 368.770606][T15375] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 369.153377][T15404] bridge0: port 4(ipvlan2) entered blocking state [ 369.189042][T15404] bridge0: port 4(ipvlan2) entered disabled state [ 369.203770][T15404] ipvlan2: entered allmulticast mode [ 369.209788][T15404] bridge0: entered allmulticast mode [ 369.221050][T15404] ipvlan2: left allmulticast mode [ 369.228684][T15404] bridge0: left allmulticast mode [ 369.827603][T15443] netlink: 'syz.0.2510': attribute type 7 has an invalid length. [ 369.881231][T15443] __nla_validate_parse: 7 callbacks suppressed [ 369.881251][T15443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'. [ 369.976664][T15443] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 369.988122][T15443] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 369.998071][T15443] debugfs: 'hsr1' already exists in 'hsr' [ 370.004028][T15443] Cannot create hsr debugfs directory [ 370.028346][T15460] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 370.050226][T15460] netlink: 'syz.2.2512': attribute type 4 has an invalid length. [ 370.155423][T15460] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2512'. [ 370.311910][T15470] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2513'. [ 370.358979][T15474] lo: entered promiscuous mode [ 370.391866][T15474] tunl0: entered promiscuous mode [ 370.409633][T15474] gre0: entered promiscuous mode [ 370.450783][T15474] gretap0: entered promiscuous mode [ 370.473052][T15478] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 370.522936][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 370.659874][T15474] ip_vti0: entered promiscuous mode [ 370.693859][T15470] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2513'. [ 371.020050][T15498] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2520'. [ 371.245441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 371.253552][ C1] lec:lec_tx_timeout: lec0 [ 371.261660][T15515] netlink: 'syz.0.2522': attribute type 33 has an invalid length. [ 371.351438][T15515] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2522'. [ 371.416794][T15530] tipc: New replicast peer: 255.255.255.255 [ 371.500224][T15530] tipc: Enabled bearer , priority 10 [ 371.868378][T15553] ip6gre1: entered allmulticast mode [ 371.942871][T15560] netlink: 'syz.1.2532': attribute type 33 has an invalid length. [ 372.039370][T15560] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 372.059811][T15560] bond7 (unregistering): Released all slaves [ 372.100917][T15568] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2534'. [ 372.379526][T15582] netlink: 'syz.1.2537': attribute type 1 has an invalid length. [ 372.545942][T15592] bridge0: port 2(team0) entered blocking state [ 372.552431][T15592] bridge0: port 2(team0) entered disabled state [ 372.595598][T15592] team0: entered allmulticast mode [ 372.605283][T15592] team_slave_0: entered allmulticast mode [ 372.624724][T15592] team_slave_1: entered allmulticast mode [ 372.643751][T15598] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 372.653513][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2540'. [ 372.671201][T15592] team0: entered promiscuous mode [ 372.683313][T15592] team_slave_0: entered promiscuous mode [ 372.701729][T15592] team_slave_1: entered promiscuous mode [ 372.724302][T15592] bridge0: port 2(team0) entered blocking state [ 372.730859][T15592] bridge0: port 2(team0) entered forwarding state [ 372.867259][T15612] netlink: 'syz.1.2542': attribute type 4 has an invalid length. [ 372.946526][T15620] netlink: 'syz.1.2542': attribute type 4 has an invalid length. [ 372.968968][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 373.973735][T15664] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 374.407934][T15690] SET target dimension over the limit! [ 375.111907][T15734] __nla_validate_parse: 7 callbacks suppressed [ 375.111928][T15734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2573'. [ 375.306558][T15744] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 375.321338][T15750] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 375.640504][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2576'. [ 377.929844][T15720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.025558][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 378.377653][T15799] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 378.520290][T15803] netlink: 'syz.1.2590': attribute type 1 has an invalid length. [ 378.637766][T15808] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 378.703573][T15808] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 378.746628][T15803] gretap3: entered promiscuous mode [ 378.804564][T15814] erspan0: left promiscuous mode [ 378.813047][T15814] erspan0: left allmulticast mode [ 378.860807][T15814] bridge0: left allmulticast mode [ 378.862631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.956892][T15823] netlink: 320 bytes leftover after parsing attributes in process `syz.4.2596'. [ 378.978088][T15823] openvswitch: netlink: Flow key attr not present in new flow. [ 379.048230][T15825] netlink: 'syz.2.2598': attribute type 13 has an invalid length. [ 379.090875][T15831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2600'. [ 379.303459][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2603'. [ 379.328813][T15838] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 379.630230][T15853] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 379.867186][T15869] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2613'. [ 379.880364][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 380.136459][ T40] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 380.203228][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2617'. [ 380.576764][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2620'. [ 380.597867][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 380.638575][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2620'. [ 380.675468][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 380.924933][T15918] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 380.935360][T15913] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2622'. [ 381.426188][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 381.594401][T15948] veth1_macvtap: left promiscuous mode [ 381.780725][T15959] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 381.791652][T15959] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2635'. [ 381.802564][T15959] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2635'. [ 381.862076][T15959] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2635'. [ 381.943200][T15957] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 382.024242][T15968] netlink: 'syz.3.2638': attribute type 2 has an invalid length. [ 382.211046][T15978] sctp: [Deprecated]: syz.2.2642 (pid 15978) Use of int in maxseg socket option. [ 382.211046][T15978] Use struct sctp_assoc_value instead [ 382.303128][T15984] openvswitch: netlink: IP tunnel dst address not specified [ 382.596046][T16001] netlink: 'syz.1.2650': attribute type 11 has an invalid length. [ 382.607496][T16001] netlink: 'syz.1.2650': attribute type 11 has an invalid length. [ 382.626435][T16006] netlink: 'syz.2.2651': attribute type 1 has an invalid length. [ 382.892115][T16017] netlink: 'syz.4.2656': attribute type 4 has an invalid length. [ 383.159391][T16034] netlink: 'syz.0.2663': attribute type 21 has an invalid length. [ 383.858073][T16017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.979531][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.988639][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.000638][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 384.627010][ T8099] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.654869][ T8099] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.699620][ T8099] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.759342][ T8099] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.827271][ T8099] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.853880][ T8099] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.900940][ T8099] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.943339][ T8099] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.082557][T16060] bond7 (unregistering): Released all slaves [ 385.283209][T16071] tipc: Enabled bearer , priority 2 [ 385.431917][T16079] __nla_validate_parse: 10 callbacks suppressed [ 385.431942][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 385.711805][T16088] netlink: 'syz.4.2678': attribute type 16 has an invalid length. [ 385.731698][T16088] netlink: 'syz.4.2678': attribute type 17 has an invalid length. [ 385.759967][T16088] gretap0: left promiscuous mode [ 385.799514][T16088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.817004][T16091] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 385.835684][T16088] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.849029][T16088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.896334][T16093] netlink: 'syz.3.2680': attribute type 1 has an invalid length. [ 385.905445][T16093] netlink: 'syz.3.2680': attribute type 1 has an invalid length. [ 385.915913][T16093] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.2680'. [ 386.224398][T16109] veth11: entered allmulticast mode [ 386.340874][T16119] xt_socket: unknown flags 0x50 [ 386.549331][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 386.578782][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2691'. [ 386.599531][T16132] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 386.838901][T16146] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.860858][T16146] netlink: 'syz.1.2693': attribute type 1 has an invalid length. [ 387.077440][T16156] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2696'. [ 387.141368][T16155] xt_hashlimit: size too large, truncated to 1048576 [ 387.332187][T16167] netlink: 'syz.2.2700': attribute type 21 has an invalid length. [ 387.373236][T16167] netlink: 'syz.2.2700': attribute type 6 has an invalid length. [ 387.386554][T16167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2700'. [ 387.413316][T16169] xt_hashlimit: size too large, truncated to 1048576 [ 387.488949][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2702'. [ 387.536175][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2702'. [ 387.661869][T16179] xt_ecn: cannot match TCP bits for non-tcp packets [ 387.841858][T16190] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2705'. [ 389.097439][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 389.105385][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 389.113429][ C1] lec:lec_tx_timeout: lec0 [ 389.478915][T16184] tipc: Disabling bearer [ 389.529608][T16190] gretap0: entered promiscuous mode [ 390.066223][T16224] netlink: 'syz.0.2718': attribute type 2 has an invalid length. [ 390.860210][T16264] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2730'. [ 391.033739][T16273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2733'. [ 391.181410][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'. [ 391.220884][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'. [ 391.803691][T16279] tipc: Bearer : already 2 bearers with priority 10 [ 391.829576][T16279] tipc: Bearer : trying with adjusted priority [ 391.845141][T16279] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 391.906071][T16287] xt_socket: unknown flags 0x50 [ 391.914621][T16284] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 392.249991][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'. [ 392.564315][T16306] openvswitch: netlink: IP tunnel dst address not specified [ 393.451459][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2752'. [ 393.640851][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 393.723710][T16361] openvswitch: netlink: Missing valid actions attribute. [ 393.745159][T16361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.118677][ T798] IPVS: starting estimator thread 0... [ 394.144197][T16378] netlink: 'syz.4.2763': attribute type 9 has an invalid length. [ 394.251294][T16379] IPVS: using max 33 ests per chain, 79200 per kthread [ 394.468977][T16384] syzkaller0: entered promiscuous mode [ 394.495730][T16384] syzkaller0: entered allmulticast mode [ 394.825366][T16405] netlink: 'syz.1.2771': attribute type 9 has an invalid length. [ 394.842756][T16407] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2770'. [ 394.884465][T16405] netlink: 'syz.1.2771': attribute type 11 has an invalid length. [ 394.894587][T16405] netlink: 'syz.1.2771': attribute type 12 has an invalid length. [ 394.913189][T16405] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2771'. [ 394.933642][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2771'. [ 396.883352][T16428] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2776'. [ 397.088373][T16434] tipc: Enabled bearer , priority 10 [ 397.111353][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2779'. [ 397.121733][T16434] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2778'. [ 397.142924][T16434] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 397.291184][T16434] 8021q: adding VLAN 0 to HW filter on device bond8 [ 397.320318][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2780'. [ 397.352869][T16438] xfrm1: entered allmulticast mode [ 397.427295][T16445] bond8: (slave gretap2): making interface the new active one [ 397.438211][T16445] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 398.249850][T16499] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 398.313253][T16499] 8021q: adding VLAN 0 to HW filter on device bond11 [ 398.381809][T16507] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 398.390332][T16503] 8021q: adding VLAN 0 to HW filter on device bond11 [ 398.400905][T16503] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 398.414276][T16503] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 398.479144][T16499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2795'. [ 398.541704][T16499] 8021q: adding VLAN 0 to HW filter on device bond11 [ 398.552096][T16512] netlink: 'syz.1.2798': attribute type 5 has an invalid length. [ 398.580248][T16512] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2798'. [ 398.740520][T16515] netlink: 'syz.2.2799': attribute type 12 has an invalid length. [ 398.792463][T16523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2799'. [ 398.824227][T16522] bridge8: entered promiscuous mode [ 398.842887][T16522] bridge8: entered allmulticast mode [ 398.876233][T16522] team0: Port device bridge8 added [ 398.912297][T16526] bridge0: port 1(team0) entered blocking state [ 398.935495][T16526] bridge0: port 1(team0) entered disabled state [ 398.950403][T16526] team0: entered allmulticast mode [ 398.956464][T16526] team_slave_0: entered allmulticast mode [ 398.962355][T16526] team_slave_1: entered allmulticast mode [ 398.969293][T16526] dummy0: entered allmulticast mode [ 399.006765][T16526] team0: entered promiscuous mode [ 399.012284][T16526] team_slave_0: entered promiscuous mode [ 399.019075][T16526] team_slave_1: entered promiscuous mode [ 399.028934][T16526] dummy0: entered promiscuous mode [ 399.245905][ T798] IPVS: starting estimator thread 0... [ 399.348945][T16552] IPVS: using max 29 ests per chain, 69600 per kthread [ 399.385291][T16557] netlink: 'syz.2.2810': attribute type 16 has an invalid length. [ 399.422055][T16557] netlink: 'syz.2.2810': attribute type 3 has an invalid length. [ 399.450805][T16557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2810'. [ 399.644651][T16570] bond9 (unregistering): Released all slaves [ 399.700351][T16576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2816'. [ 399.767683][T16567] dvmrp8: entered allmulticast mode [ 399.785798][T16567] dvmrp0: left allmulticast mode [ 399.790938][T16567] dvmrp8: left allmulticast mode [ 399.966848][T16581] tipc: Enabled bearer , priority 2 [ 400.068239][T16595] netlink: 'syz.0.2823': attribute type 11 has an invalid length. [ 400.094653][T16595] netlink: 'syz.0.2823': attribute type 11 has an invalid length. [ 400.118144][T16595] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2823'. [ 400.140049][T16597] netlink: 'syz.2.2824': attribute type 3 has an invalid length. [ 400.168100][T16600] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 403.173056][T16602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.440777][T16658] netlink: 'syz.0.2835': attribute type 39 has an invalid length. [ 403.573193][T16674] __nla_validate_parse: 5 callbacks suppressed [ 403.573215][T16674] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2840'. [ 403.634753][T16670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2838'. [ 403.647804][T16670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2838'. [ 403.660617][T16671] lo: left promiscuous mode [ 403.666317][T16671] tunl0: left promiscuous mode [ 403.673050][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 403.685943][T16671] gre0: left promiscuous mode [ 403.692145][T16671] gretap0: left promiscuous mode [ 403.698548][T16677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2843'. [ 403.719152][T16671] ip_vti0: left promiscuous mode [ 403.775555][T16671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.902496][T16683] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2845'. [ 403.948938][T16680] netlink: 'syz.4.2844': attribute type 10 has an invalid length. [ 403.957617][T16680] bridge_slave_1: left allmulticast mode [ 403.963321][T16680] bridge_slave_1: left promiscuous mode [ 404.008673][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.072350][T16680] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 404.106220][T16688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.147114][T16691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2847'. [ 404.197441][T16691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2847'. [ 404.263536][T16694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.305981][T16694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.573274][T16715] xt_l2tp: invalid flags combination: 8 [ 404.886050][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 404.896488][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 404.989562][T16733] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 405.072689][T16733] bond0 (unregistering): Released all slaves [ 405.791986][T16777] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 405.815597][ T5832] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 405.852880][ T8376] lec:lec_start_xmit: lec0:No lecd attached [ 405.867585][T16777] syzkaller1: Refused to change device type [ 406.117976][T16793] 8021q: VLANs not supported on lo [ 406.150875][T16793] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20004 [ 406.196859][T16793] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 406.233836][ T8104] tipc: Resetting bearer [ 406.627817][T16814] x_tables: duplicate underflow at hook 2 [ 406.906218][T16830] bridge9: entered promiscuous mode [ 406.932407][T16830] bridge9: entered allmulticast mode [ 406.964867][T16836] bond0: Caught tx_queue_len zero misconfig [ 407.241175][T16849] netlink: 'syz.2.2893': attribute type 21 has an invalid length. [ 407.688239][T16868] tipc: Enabling of bearer rejected, failed to enable media [ 407.754038][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.764806][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.773550][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.783001][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.793081][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.912000][T16884] netlink: 'syz.3.2900': attribute type 10 has an invalid length. [ 408.698697][T16907] __nla_validate_parse: 9 callbacks suppressed [ 408.698720][T16907] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.2905'. [ 408.774646][T16917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.944359][T16875] chnl_net:caif_netlink_parms(): no params data found [ 409.033354][T16929] netlink: 'syz.2.2912': attribute type 11 has an invalid length. [ 409.142634][T16942] tipc: Bearer : already 2 bearers with priority 10 [ 409.163516][T16942] tipc: Bearer : trying with adjusted priority [ 409.182301][T16942] tipc: Enabling of bearer rejected, failed to enable media [ 409.208337][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 409.285798][T16875] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.293196][T16875] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.305128][T16875] bridge_slave_0: entered allmulticast mode [ 409.313114][T16875] bridge_slave_0: entered promiscuous mode [ 409.324492][T16875] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.332119][T16875] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.341090][T16875] bridge_slave_1: entered allmulticast mode [ 409.349879][T16875] bridge_slave_1: entered promiscuous mode [ 409.390526][T16875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.402988][T16875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.441096][T16875] team0: Port device team_slave_0 added [ 409.449420][T16875] team0: Port device team_slave_1 added [ 409.479843][T16875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.486912][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.514826][T16875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.526844][T16956] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2918'. [ 409.539275][T16875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.546504][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.573103][T16875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.623819][T16875] hsr_slave_0: entered promiscuous mode [ 409.631071][T16875] hsr_slave_1: entered promiscuous mode [ 409.637710][T16875] debugfs: 'hsr0' already exists in 'hsr' [ 409.643514][T16875] Cannot create hsr debugfs directory [ 409.807672][T16875] netdevsim netdevsim0 netdevsim3 (unregistering): left promiscuous mode [ 409.817367][T16875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.906228][ T5828] Bluetooth: hci5: command tx timeout [ 409.918300][T16875] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 409.965620][T16875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.078756][T16875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.200346][T16875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.299602][T16967] ip6gre2: entered promiscuous mode [ 410.326746][T16967] ip6gre2: entered allmulticast mode [ 410.332108][T16967] team0: Device ip6gre2 is of different type [ 410.419847][T16971] syzkaller0: entered promiscuous mode [ 410.436882][T16971] syzkaller0: entered allmulticast mode [ 410.594039][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 410.800615][T16996] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2931'. [ 410.819260][T16875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.838517][T16875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.906035][T17005] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 410.915587][T17005] syzkaller0: entered promiscuous mode [ 410.921121][T17005] syzkaller0: entered allmulticast mode [ 410.954974][T16875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.981486][T16875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.095074][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 411.103204][ C1] lec:lec_tx_timeout: lec0 [ 411.282236][T17029] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 411.299175][T17029] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2938'. [ 411.309128][T17029] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 411.348897][T16875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.391822][T16875] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.426762][ T7633] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.433998][ T7633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.471445][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.478704][ T7633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.820528][T17048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2942'. [ 411.976071][ T5828] Bluetooth: hci5: command tx timeout [ 412.008541][T16875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.068507][T16875] veth0_vlan: entered promiscuous mode [ 412.084024][T16875] veth1_vlan: entered promiscuous mode [ 412.169347][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 412.234162][T17058] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 412.256120][T17058] batadv1: entered promiscuous mode [ 412.261975][T17058] batadv1: entered allmulticast mode [ 412.276522][T17058] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 412.292984][T17058] team0: Failed to send options change via netlink (err -105) [ 412.312769][T17058] team0: Port device batadv1 added [ 412.319126][T17062] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2945'. [ 412.342156][T16875] veth0_macvtap: entered promiscuous mode [ 412.374462][ T8115] bridge0: port 3(team0) entered blocking state [ 412.380939][ T8115] bridge0: port 3(team0) entered forwarding state [ 412.440173][T16875] veth1_macvtap: entered promiscuous mode [ 412.460949][T17065] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2948'. [ 412.543430][T17068] netlink: 'syz.3.2947': attribute type 21 has an invalid length. [ 412.550944][T16875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.633375][T17065] netlink: 'syz.4.2948': attribute type 1 has an invalid length. [ 412.652561][T16875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.715371][ T8099] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 412.724678][ T8099] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 412.762380][ T8087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.777035][ T8087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.852341][ T8087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.903852][ T8087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.303987][ T8099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.339209][ T8099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.459433][ T8115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.486340][ T8115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.912198][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.926628][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.938282][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.980785][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.989623][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.056354][ T5828] Bluetooth: hci5: command tx timeout [ 416.059901][ T5828] Bluetooth: hci0: command tx timeout [ 416.135492][ T5828] Bluetooth: hci5: command tx timeout [ 416.322472][T17153] __nla_validate_parse: 4 callbacks suppressed [ 416.322494][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 416.380673][ T8099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.402431][ T8099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.456570][T17163] macvlan0: entered promiscuous mode [ 416.481327][T17163] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2974'. [ 416.594160][ T8099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.618425][ T8099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.736522][T17176] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2978'. [ 416.790139][ T8099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.816874][ T8099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.227000][ T8099] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.255406][ T8099] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.291224][T17198] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2983'. [ 417.528823][ T8104] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.625680][ T68] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.693324][ T68] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.748598][ T68] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.859766][T17216] xt_cgroup: path and classid specified [ 417.880768][T17218] Cannot find set identified by id 4 to match [ 417.899418][ T8099] tipc: Resetting bearer [ 418.139923][ T5828] Bluetooth: hci0: command tx timeout [ 418.156599][T17232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2994'. [ 418.599869][ T8099] tipc: Disabling bearer [ 418.897115][ T8099] bond1 (unregistering): (slave veth3): Releasing backup interface [ 418.907178][ T8099] bond1 (unregistering): Released all slaves [ 419.016817][ T8099] bond2 (unregistering): Released all slaves [ 419.129666][ T8099] bond3 (unregistering): (slave veth5): Releasing active interface [ 419.139412][ T8099] bond3 (unregistering): Released all slaves [ 419.251995][ T8099] bond4 (unregistering): Released all slaves [ 419.361660][ T8099] bond5 (unregistering): (slave veth9): Releasing active interface [ 419.372756][ T8099] bond5 (unregistering): Released all slaves [ 419.389208][ T8099] bond6 (unregistering): Released all slaves [ 419.417751][T17225] kthread_run failed with err -4 [ 419.651344][ T8099] tipc: Disabling bearer [ 419.658297][ T8099] tipc: Disabling bearer [ 419.692097][ T8099] tipc: Left network mode [ 419.697699][T17123] chnl_net:caif_netlink_parms(): no params data found [ 419.707236][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'. [ 419.753689][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2997'. [ 420.066243][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 420.215338][ T5828] Bluetooth: hci0: command tx timeout [ 420.360925][T17123] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.377058][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.412558][T17123] bridge_slave_0: entered allmulticast mode [ 420.424545][T17123] bridge_slave_0: entered promiscuous mode [ 420.577730][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.596735][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.604062][T17123] bridge_slave_1: entered allmulticast mode [ 420.619342][T17273] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 420.630907][T17123] bridge_slave_1: entered promiscuous mode [ 420.944435][T17123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.964839][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3005'. [ 420.995076][T17284] syzkaller1: entered promiscuous mode [ 421.000614][T17284] syzkaller1: entered allmulticast mode [ 421.052399][T17123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.205883][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3005'. [ 421.238859][T17123] team0: Port device team_slave_0 added [ 421.344577][T17302] openvswitch: netlink: IP tunnel dst address not specified [ 421.358348][T17123] team0: Port device team_slave_1 added [ 421.396984][T17302] TCP: TCP_TX_DELAY enabled [ 421.561142][T17123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.577016][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.626880][T17123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.644407][T17123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.652325][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.681231][T17123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.696963][T17306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3009'. [ 421.732947][T17306] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3009'. [ 421.900461][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 421.941831][T17123] hsr_slave_0: entered promiscuous mode [ 421.948595][T17123] hsr_slave_1: entered promiscuous mode [ 421.957923][T17123] debugfs: 'hsr0' already exists in 'hsr' [ 421.963718][T17123] Cannot create hsr debugfs directory [ 422.295424][ T5828] Bluetooth: hci0: command tx timeout [ 422.360754][T17334] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 422.375751][T17321] netlink: 'syz.0.3011': attribute type 4 has an invalid length. [ 422.396560][T17344] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3013'. [ 422.437633][T17334] bridge0: port 2(team0) entered disabled state [ 422.445392][T17334] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.527146][T17341] tipc: Enabling of bearer rejected, failed to enable media [ 423.150668][ T8099] hsr_slave_0: left promiscuous mode [ 423.163562][ T8099] hsr_slave_1: left promiscuous mode [ 423.180541][ T8099] veth0_macvtap: left promiscuous mode [ 423.188958][ T8099] º: left promiscuous mode [ 424.337198][T17357] netlink: 'syz.3.3017': attribute type 3 has an invalid length. [ 424.579499][T17378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3021'. [ 424.670171][T17123] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.745281][T17385] sctp: [Deprecated]: syz.3.3024 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.745281][T17385] Use struct sctp_sack_info instead [ 424.796377][T17394] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3025'. [ 424.807044][T17394] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 424.831914][T17123] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.907184][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3024'. [ 425.019913][T17400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3026'. [ 425.179499][T17123] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.546981][T17123] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.586700][T17433] netlink: 996 bytes leftover after parsing attributes in process `syz.3.3031'. [ 425.598399][ T8087] nci: nci_ntf_packet: unknown ntf opcode 0x13f [ 425.619207][T17434] C: entered promiscuous mode [ 425.638100][T17434] tunl0: entered promiscuous mode [ 425.654255][T17434] gre0: entered promiscuous mode [ 425.680105][T17434] erspan0: entered promiscuous mode [ 425.708231][T17434] ip_vti0: entered promiscuous mode [ 425.730320][T17432] pim6reg1: entered promiscuous mode [ 425.741082][T17432] pim6reg1: entered allmulticast mode [ 425.762286][ T8099] IPVS: stop unused estimator thread 0... [ 425.923161][T17442] IPVS: length: 8 != 1152 [ 428.437226][T17423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.455788][T17438] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3033'. [ 428.478129][T17123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.567393][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3040'. [ 428.591498][T17123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.640087][T17123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.671572][T17514] syzkaller1: entered promiscuous mode [ 428.686299][T17514] syzkaller1: entered allmulticast mode [ 428.693998][T17123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.740313][T17520] sit2: entered promiscuous mode [ 428.757609][T17520] sit2: entered allmulticast mode [ 428.784856][T17518] openvswitch: netlink: Missing key (keys=40, expected=100) [ 428.821788][T17518] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3042'. [ 428.944385][T17123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.975239][T17123] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.992902][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.000128][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.046177][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.053448][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.067593][T17538] netlink: 'syz.3.3046': attribute type 4 has an invalid length. [ 429.222207][T17546] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3049'. [ 429.249242][T17546] netlink: Unknown conntrack attr (0) [ 429.463096][T17555] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3051'. [ 429.524477][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.532006][T17557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3052'. [ 429.628212][T17123] veth0_vlan: entered promiscuous mode [ 429.659148][T17123] veth1_vlan: entered promiscuous mode [ 429.731030][T17562] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3054'. [ 429.766876][T17123] veth0_macvtap: entered promiscuous mode [ 429.804437][T17123] veth1_macvtap: entered promiscuous mode [ 429.880638][T17123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.942690][T17123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.011087][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 430.034385][ T8085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.061434][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 430.082004][ T8085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.127682][ T8085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.166997][ T8085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.356417][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3058'. [ 430.429213][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.467245][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.537826][T17602] vlan3: entered promiscuous mode [ 430.542948][T17602] geneve1: entered promiscuous mode [ 430.549952][T17602] vlan3: entered allmulticast mode [ 430.558571][T17602] geneve1: entered allmulticast mode [ 430.581459][ T7633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.594652][ T7633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.136293][T17633] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.168072][T17633] netlink: 'syz.0.3070': attribute type 3 has an invalid length. [ 431.240201][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 431.253334][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 431.265218][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 431.304962][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 431.315176][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.408821][T17648] netlink: 'syz.1.3073': attribute type 13 has an invalid length. [ 432.340592][T17687] tipc: Enabled bearer , priority 0 [ 432.481336][T17690] tipc: Disabling bearer [ 432.662285][T17697] IPv6: sit2: Disabled Multicast RS [ 432.669407][T17697] sit2: entered allmulticast mode [ 432.817029][T17698] gtp2: entered promiscuous mode [ 432.832880][T17698] gtp2: entered allmulticast mode [ 433.056935][T17713] netlink: 'syz.2.3093': attribute type 4 has an invalid length. [ 433.132384][T17638] chnl_net:caif_netlink_parms(): no params data found [ 433.303910][T17721] team0: Device ip6gre1 is of different type [ 433.416854][ T5828] Bluetooth: hci4: command tx timeout [ 433.476319][T17638] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.483604][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.491780][T17638] bridge_slave_0: entered allmulticast mode [ 433.500018][T17638] bridge_slave_0: entered promiscuous mode [ 433.513067][T17638] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.520715][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.531774][T17638] bridge_slave_1: entered allmulticast mode [ 433.540648][T17638] bridge_slave_1: entered promiscuous mode [ 433.590500][T17638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.603997][T17638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.636973][T17741] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 433.690966][T17638] team0: Port device team_slave_0 added [ 433.709281][T17638] team0: Port device team_slave_1 added [ 433.842950][T17638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.871719][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.944738][T17638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.980553][T17763] __nla_validate_parse: 4 callbacks suppressed [ 433.980575][T17763] netlink: 166036 bytes leftover after parsing attributes in process `syz.0.3106'. [ 433.990312][T17638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.036435][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.104078][T17638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.156656][T17772] macvlan0: left promiscuous mode [ 434.172344][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 434.253563][T17638] hsr_slave_0: entered promiscuous mode [ 434.261631][T17638] hsr_slave_1: entered promiscuous mode [ 434.268358][T17638] debugfs: 'hsr0' already exists in 'hsr' [ 434.274151][T17638] Cannot create hsr debugfs directory [ 434.410465][T17783] netlink: 'syz.2.3110': attribute type 3 has an invalid length. [ 434.428910][T17783] netlink: 'syz.2.3110': attribute type 1 has an invalid length. [ 434.509613][T17786] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3110'. [ 434.526699][T17638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.540829][T17638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.690693][T17638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.745242][T17638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.778120][T17795] Unsupported ieee802154 address type: 0 [ 434.806342][T17794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.944089][T17638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.969495][T17638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.108805][T17638] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.146857][T17638] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.199122][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'. [ 435.357050][T17822] netlink: 'syz.0.3123': attribute type 21 has an invalid length. [ 435.372249][T17819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3122'. [ 435.466905][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3125'. [ 435.495814][ T5832] Bluetooth: hci4: command tx timeout [ 435.540962][T17638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.560427][T17638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.582264][T17638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.596754][T17832] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3127'. [ 435.607394][T17831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.620328][T17638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.789027][T17638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.829504][T17638] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.849491][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.856753][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.904949][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.912254][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.197434][T17860] bond1 (unregistering): Released all slaves [ 436.274310][T17867] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3136'. [ 436.362215][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 436.582255][T17638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.621020][T17883] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000 [ 436.718217][T17638] veth0_vlan: entered promiscuous mode [ 436.755891][T17638] veth1_vlan: entered promiscuous mode [ 436.813920][T17894] netlink: 'syz.2.3144': attribute type 4 has an invalid length. [ 436.834011][T17891] netlink: 'syz.2.3144': attribute type 4 has an invalid length. [ 436.849559][T17638] veth0_macvtap: entered promiscuous mode [ 436.859269][T17891] netlink: 'syz.2.3144': attribute type 4 has an invalid length. [ 436.906208][T17638] veth1_macvtap: entered promiscuous mode [ 437.063702][T17905] tipc: Started in network mode [ 437.070683][T17905] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 437.081327][T17905] tipc: Enabled bearer , priority 10 [ 437.113876][T17638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.150501][T17638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.193779][ T8107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.230304][ T8107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.271114][ T8107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.371268][ T8107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.384852][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.399288][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.407425][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.451407][T17915] sctp: [Deprecated]: syz.0.3152 (pid 17915) Use of int in maxseg socket option. [ 437.451407][T17915] Use struct sctp_assoc_value instead [ 437.533378][ T7633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.541854][ T7633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.576492][ T5832] Bluetooth: hci4: command 0x040f tx timeout [ 437.606878][ T8107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.625648][ T8107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.721989][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 437.732190][T17922] gretap0: entered promiscuous mode [ 437.767019][T17914] infiniband syz2: set down [ 437.771677][ T5914] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.781158][T17914] infiniband syz2: added ip6_vti0 [ 437.838553][T17914] RDS/IB: syz2: added [ 437.849753][T17914] smc: adding ib device syz2 with port count 1 [ 437.877807][T17914] smc: ib device syz2 port 1 has no pnetid [ 437.884296][ T5914] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.924268][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.156237][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.166996][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.175633][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.183705][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.195761][T16041] tipc: Node number set to 10005162 [ 438.205606][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.906061][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.946345][T17956] x_tables: unsorted entry at hook 3 [ 439.020320][T17965] __nla_validate_parse: 6 callbacks suppressed [ 439.020340][T17965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3167'. [ 439.308094][T17974] IPv6: sit1: Disabled Multicast RS [ 439.317594][T17974] sit1: entered allmulticast mode [ 439.432127][T17977] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 439.458887][T17977] bond1 (unregistering): Released all slaves [ 439.501523][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.669647][ T5828] Bluetooth: hci4: command 0x040f tx timeout [ 439.714502][T17993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3175'. [ 439.798455][T17997] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3177'. [ 439.809718][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 439.823138][T17997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3177'. [ 439.890374][T18000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3176'. [ 439.998609][T18009] bridge_slave_0: left allmulticast mode [ 440.018864][T18009] bridge_slave_0: left promiscuous mode [ 440.024797][T18009] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.079280][T18009] bridge_slave_1: left allmulticast mode [ 440.085597][T18009] bridge_slave_1: left promiscuous mode [ 440.091563][T18009] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.112434][T18009] bond0: (slave bond_slave_0): Releasing backup interface [ 440.131000][T18009] bond0: (slave bond_slave_1): Releasing backup interface [ 440.174144][T18009] team0: Port device team_slave_0 removed [ 440.187725][T18009] team0: Port device team_slave_1 removed [ 440.195838][T18009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.203661][T18009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.214188][T18009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.225302][T18009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.249077][T18009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.281168][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.295981][ T5828] Bluetooth: hci1: command tx timeout [ 440.596120][T17932] chnl_net:caif_netlink_parms(): no params data found [ 440.647062][T18021] [ 440.649459][T18021] ====================================================== [ 440.656507][T18021] WARNING: possible circular locking dependency detected [ 440.663566][T18021] syzkaller #0 Not tainted [ 440.668025][T18021] ------------------------------------------------------ [ 440.675207][T18021] syz.0.3182/18021 is trying to acquire lock: [ 440.681307][T18021] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 440.690942][T18021] [ 440.690942][T18021] but task is already holding lock: [ 440.698351][T18021] ffff8880251f3008 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 440.708691][T18021] [ 440.708691][T18021] which lock already depends on the new lock. [ 440.708691][T18021] [ 440.719167][T18021] [ 440.719167][T18021] the existing dependency chain (in reverse order) is: [ 440.728219][T18021] [ 440.728219][T18021] -> #2 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 440.736869][T18021] blk_alloc_queue+0x52f/0x610 [ 440.742205][T18021] __blk_mq_alloc_disk+0x197/0x390 [ 440.747882][T18021] nbd_dev_add+0x499/0xb50 [ 440.752882][T18021] nbd_init+0x168/0x1f0 [ 440.757613][T18021] do_one_initcall+0x250/0x840 [ 440.762947][T18021] do_initcall_level+0x104/0x190 [ 440.768446][T18021] do_initcalls+0x59/0xa0 [ 440.773356][T18021] kernel_init_freeable+0x2a6/0x3d0 [ 440.779131][T18021] kernel_init+0x1d/0x1d0 [ 440.784022][T18021] ret_from_fork+0x51b/0xa40 [ 440.789173][T18021] ret_from_fork_asm+0x1a/0x30 [ 440.794498][T18021] [ 440.794498][T18021] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 440.801735][T18021] fs_reclaim_acquire+0x71/0x100 [ 440.807220][T18021] prepare_alloc_pages+0x152/0x650 [ 440.812872][T18021] __alloc_frozen_pages_noprof+0x12f/0x380 [ 440.819225][T18021] __alloc_pages_noprof+0xa/0x30 [ 440.824712][T18021] pcpu_populate_chunk+0x182/0xb30 [ 440.830376][T18021] pcpu_alloc_noprof+0xc4a/0x18d0 [ 440.835948][T18021] xt_percpu_counter_alloc+0x161/0x220 [ 440.841961][T18021] translate_table+0x134a/0x2110 [ 440.847448][T18021] ipt_register_table+0x11b/0x7f0 [ 440.853056][T18021] iptable_mangle_table_init+0x41/0x70 [ 440.859167][T18021] xt_find_table_lock+0x30c/0x3e0 [ 440.864760][T18021] xt_request_find_table_lock+0x26/0x100 [ 440.870959][T18021] do_ipt_get_ctl+0x716/0x1240 [ 440.876287][T18021] nf_getsockopt+0x26e/0x290 [ 440.881431][T18021] ip_getsockopt+0x19e/0x230 [ 440.886616][T18021] do_sock_getsockopt+0x2d3/0x3f0 [ 440.892199][T18021] __x64_sys_getsockopt+0x1a4/0x240 [ 440.897946][T18021] do_syscall_64+0xe2/0xf80 [ 440.902996][T18021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.909434][T18021] [ 440.909434][T18021] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 440.917198][T18021] __lock_acquire+0x15a5/0x2cf0 [ 440.922621][T18021] lock_acquire+0x106/0x330 [ 440.927733][T18021] __mutex_lock+0x19f/0x1300 [ 440.932868][T18021] pcpu_alloc_noprof+0x272/0x18d0 [ 440.938566][T18021] sbitmap_init_node+0x1e1/0x640 [ 440.944064][T18021] sbitmap_queue_init_node+0x3e/0x4d0 [ 440.949985][T18021] blk_mq_init_tags+0x15c/0x2d0 [ 440.955402][T18021] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 440.961413][T18021] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 440.967762][T18021] nbd_start_device+0x17f/0xb10 [ 440.973168][T18021] nbd_genl_connect+0x165b/0x1cf0 [ 440.978738][T18021] genl_family_rcv_msg_doit+0x22a/0x330 [ 440.984835][T18021] genl_rcv_msg+0x61c/0x7a0 [ 440.989970][T18021] netlink_rcv_skb+0x232/0x4b0 [ 440.995277][T18021] genl_rcv+0x28/0x40 [ 440.999812][T18021] netlink_unicast+0x80f/0x9b0 [ 441.005123][T18021] netlink_sendmsg+0x813/0xb40 [ 441.010520][T18021] ____sys_sendmsg+0xa68/0xad0 [ 441.015846][T18021] ___sys_sendmsg+0x2a5/0x360 [ 441.021085][T18021] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.026576][T18021] do_syscall_64+0xe2/0xf80 [ 441.031623][T18021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.038061][T18021] [ 441.038061][T18021] other info that might help us debug this: [ 441.038061][T18021] [ 441.048305][T18021] Chain exists of: [ 441.048305][T18021] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 441.048305][T18021] [ 441.062429][T18021] Possible unsafe locking scenario: [ 441.062429][T18021] [ 441.069897][T18021] CPU0 CPU1 [ 441.075280][T18021] ---- ---- [ 441.080668][T18021] lock(&q->q_usage_counter(io)#54); [ 441.086077][T18021] lock(fs_reclaim); [ 441.092627][T18021] lock(&q->q_usage_counter(io)#54); [ 441.100554][T18021] lock(pcpu_alloc_mutex); [ 441.105084][T18021] [ 441.105084][T18021] *** DEADLOCK *** [ 441.105084][T18021] [ 441.113244][T18021] 6 locks held by syz.0.3182/18021: [ 441.118451][T18021] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.126756][T18021] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 441.135751][T18021] #2: ffff8880253399d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 441.147180][T18021] #3: ffff8880253398d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 441.158172][T18021] #4: ffff8880251f3008 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 441.168916][T18021] #5: ffff8880251f3040 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 441.179933][T18021] [ 441.179933][T18021] stack backtrace: [ 441.185863][T18021] CPU: 0 UID: 0 PID: 18021 Comm: syz.0.3182 Not tainted syzkaller #0 PREEMPT(full) [ 441.185889][T18021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 441.185912][T18021] Call Trace: [ 441.185920][T18021] [ 441.185930][T18021] dump_stack_lvl+0xe8/0x150 [ 441.185961][T18021] print_circular_bug+0x2e1/0x300 [ 441.185983][T18021] check_noncircular+0x12e/0x150 [ 441.186003][T18021] __lock_acquire+0x15a5/0x2cf0 [ 441.186035][T18021] ? kernel_text_address+0xa5/0xe0 [ 441.186058][T18021] ? pcpu_alloc_noprof+0x272/0x18d0 [ 441.186075][T18021] lock_acquire+0x106/0x330 [ 441.186098][T18021] ? pcpu_alloc_noprof+0x272/0x18d0 [ 441.186119][T18021] __mutex_lock+0x19f/0x1300 [ 441.186138][T18021] ? pcpu_alloc_noprof+0x272/0x18d0 [ 441.186154][T18021] ? stack_depot_save_flags+0x3f3/0x810 [ 441.186179][T18021] ? kasan_save_track+0x4f/0x80 [ 441.186194][T18021] ? kasan_save_track+0x3e/0x80 [ 441.186208][T18021] ? pcpu_alloc_noprof+0x272/0x18d0 [ 441.186223][T18021] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 441.186239][T18021] ? blk_mq_init_tags+0x83/0x2d0 [ 441.186263][T18021] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 441.186280][T18021] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 441.186302][T18021] ? __pfx___mutex_lock+0x10/0x10 [ 441.186319][T18021] ? genl_rcv+0x28/0x40 [ 441.186340][T18021] ? ____sys_sendmsg+0xa68/0xad0 [ 441.186362][T18021] ? ___sys_sendmsg+0x2a5/0x360 [ 441.186390][T18021] pcpu_alloc_noprof+0x272/0x18d0 [ 441.186414][T18021] sbitmap_init_node+0x1e1/0x640 [ 441.186442][T18021] sbitmap_queue_init_node+0x3e/0x4d0 [ 441.186469][T18021] blk_mq_init_tags+0x15c/0x2d0 [ 441.186494][T18021] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 441.186513][T18021] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.186532][T18021] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 441.186552][T18021] ? kfree+0x1be/0x650 [ 441.186574][T18021] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 441.186597][T18021] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 441.186626][T18021] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 441.186657][T18021] ? sysfs_add_file_mode_ns+0x259/0x300 [ 441.186683][T18021] nbd_start_device+0x17f/0xb10 [ 441.186710][T18021] ? device_create_file+0xf4/0x1b0 [ 441.186737][T18021] nbd_genl_connect+0x165b/0x1cf0 [ 441.186766][T18021] ? __pfx_nbd_genl_connect+0x10/0x10 [ 441.186793][T18021] ? rcu_is_watching+0x15/0xb0 [ 441.186811][T18021] ? __nla_parse+0x40/0x60 [ 441.186835][T18021] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 441.186862][T18021] genl_family_rcv_msg_doit+0x22a/0x330 [ 441.186888][T18021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.186918][T18021] ? __lock_acquire+0x6b5/0x2cf0 [ 441.186944][T18021] genl_rcv_msg+0x61c/0x7a0 [ 441.186968][T18021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.186990][T18021] ? __pfx_nbd_genl_connect+0x10/0x10 [ 441.187019][T18021] netlink_rcv_skb+0x232/0x4b0 [ 441.187036][T18021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.187058][T18021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.187073][T18021] ? genl_rcv+0x19/0x40 [ 441.187101][T18021] ? down_read+0x272/0x2e0 [ 441.187119][T18021] ? genl_rcv+0xd/0x40 [ 441.187140][T18021] genl_rcv+0x28/0x40 [ 441.187160][T18021] netlink_unicast+0x80f/0x9b0 [ 441.187189][T18021] ? __pfx_netlink_unicast+0x10/0x10 [ 441.187214][T18021] ? __alloc_skb+0x193/0x390 [ 441.187233][T18021] ? netlink_sendmsg+0x650/0xb40 [ 441.187250][T18021] ? skb_put+0x11b/0x210 [ 441.187271][T18021] netlink_sendmsg+0x813/0xb40 [ 441.187293][T18021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.187311][T18021] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.187333][T18021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.187352][T18021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.187369][T18021] ____sys_sendmsg+0xa68/0xad0 [ 441.187391][T18021] ? __might_fault+0xaf/0x130 [ 441.187418][T18021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.187444][T18021] ? import_iovec+0x73/0xa0 [ 441.187470][T18021] ___sys_sendmsg+0x2a5/0x360 [ 441.187492][T18021] ? __lock_acquire+0x6b5/0x2cf0 [ 441.187517][T18021] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.187542][T18021] ? futex_wake+0x4ac/0x580 [ 441.187582][T18021] ? __fget_files+0x2a/0x420 [ 441.187600][T18021] ? __fget_files+0x3a0/0x420 [ 441.187622][T18021] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.187650][T18021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.187677][T18021] ? rcu_is_watching+0x15/0xb0 [ 441.187697][T18021] do_syscall_64+0xe2/0xf80 [ 441.187716][T18021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.187732][T18021] ? trace_irq_disable+0x37/0x100 [ 441.187749][T18021] ? clear_bhb_loop+0x60/0xb0 [ 441.187767][T18021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.187791][T18021] RIP: 0033:0x7f483359af79 [ 441.187808][T18021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.187823][T18021] RSP: 002b:00007f48317ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.187843][T18021] RAX: ffffffffffffffda RBX: 00007f4833815fa0 RCX: 00007f483359af79 [ 441.187856][T18021] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 441.187867][T18021] RBP: 00007f48336316e0 R08: 0000000000000000 R09: 0000000000000000 [ 441.187878][T18021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.187888][T18021] R13: 00007f4833816038 R14: 00007f4833815fa0 R15: 00007ffe227adda8 [ 441.187909][T18021] [ 441.734655][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.739989][ T5828] block nbd5: Receive control failed (result -32) [ 441.748400][ T5828] block nbd5: Receive control failed (result -32) [ 441.755076][ T5828] block nbd5: Receive control failed (result -32) [ 441.761717][ T5828] Bluetooth: hci4: command 0x040f tx timeout [ 441.805656][T18021] nbd5: detected capacity change from 0 to 127 [ 441.817106][T14698] block nbd5: Dead connection, failed to find a fallback [ 441.824807][T14698] block nbd5: shutting down sockets [ 441.834634][T14698] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.845050][T14698] Buffer I/O error on dev nbd5, logical block 0, async page read [ 441.852885][T14698] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.863379][T14698] Buffer I/O error on dev nbd5, logical block 1, async page read [ 441.871783][T14698] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.881324][T14698] Buffer I/O error on dev nbd5, logical block 2, async page read [ 441.890000][T14698] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.903140][T14698] Buffer I/O error on dev nbd5, logical block 3, async page read [ 441.911050][T14698] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.920763][T14698] Buffer I/O error on dev nbd5, logical block 0, async page read [ 441.929208][T14698] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.939189][T14698] Buffer I/O error on dev nbd5, logical block 1, async page read [ 441.952704][T14698] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.962830][T14698] Buffer I/O error on dev nbd5, logical block 2, async page read [ 441.970762][T14698] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.980345][T14698] Buffer I/O error on dev nbd5, logical block 3, async page read [ 441.989746][T14698] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 441.999334][T14698] Buffer I/O error on dev nbd5, logical block 0, async page read [ 442.007245][T14698] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.017365][T14698] Buffer I/O error on dev nbd5, logical block 1, async page read [ 442.025880][T14698] ldm_validate_partition_table(): Disk read failed. [ 442.032918][T14698] Dev nbd5: unable to read RDB block 0 [ 442.038993][T14698] nbd5: unable to read partition table [ 442.048579][T14698] ldm_validate_partition_table(): Disk read failed. [ 442.056021][T14698] Dev nbd5: unable to read RDB block 0 [ 442.062040][T14698] nbd5: unable to read partition table [ 442.108536][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.115805][T17932] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.123063][T17932] bridge_slave_0: entered allmulticast mode [ 442.131537][T17932] bridge_slave_0: entered promiscuous mode [ 442.140636][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.151427][T17932] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.159158][T17932] bridge_slave_1: entered allmulticast mode [ 442.167351][T17932] bridge_slave_1: entered promiscuous mode [ 442.196057][T17932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.208254][T17932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.237945][T17932] team0: Port device team_slave_0 added [ 442.245887][T17932] team0: Port device team_slave_1 added [ 442.251569][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.274496][T17932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.281609][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.309853][T17932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.322093][T17932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.329232][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.355757][T17932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.376117][ T5832] Bluetooth: hci1: command tx timeout [ 442.406135][T17932] hsr_slave_0: entered promiscuous mode [ 442.412630][T17932] hsr_slave_1: entered promiscuous mode [ 442.419716][T17932] debugfs: 'hsr0' already exists in 'hsr' [ 442.425552][T17932] Cannot create hsr debugfs directory [ 442.454807][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.557187][T17914] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.731646][T17932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.749992][T17932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.759815][T17932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.769889][T17932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.833860][T17932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.850046][T17932] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.864092][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.871441][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.884900][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.892072][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.024494][T17932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.180322][T17932] veth0_vlan: entered promiscuous mode [ 443.191277][T17932] veth1_vlan: entered promiscuous mode [ 443.212883][T17932] veth0_macvtap: entered promiscuous mode [ 443.222472][T17932] veth1_macvtap: entered promiscuous mode [ 443.238383][T17932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.251488][T17932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.263276][ T8085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.276496][ T8085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.286260][ T8085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.295693][ T8085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.321684][T17932] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 443.348322][ T8099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.353377][T17932] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 443.371261][ T8099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.393182][ T8085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.401468][ T8085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.455767][ T5832] Bluetooth: hci1: command tx timeout [ 445.417908][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.424429][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.432242][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 446.535757][ T5832] Bluetooth: hci1: command tx timeout