last executing test programs: 2.740558735s ago: executing program 2 (id=5043): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000500)=@routing={0x4, 0x0, 0x1, 0xb0}, 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfa}, 0x14}}, 0x240400c0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000500)=@routing={0x4, 0x0, 0x1, 0xb0}, 0x8) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfa}, 0x14}}, 0x240400c0) (async) 2.624186242s ago: executing program 2 (id=5045): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000120000000a000000"], 0x26}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000010025bd7000fadbdf2700000000", @ANYRES32=r4, @ANYBLOB="d380020000000200200012800f000100626f6e645f736c4e766500000c000580060005000090"], 0x40}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) setsockopt(r5, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$igmp6(0xa, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket(0x14, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x7a77}, &(0x7f0000000480)=0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000180)={'veth0_to_team\x00', 0x6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x40, 0x7800, 0xe, 0x3, {{0x28, 0x4, 0x3, 0x1, 0xa0, 0x67, 0x0, 0x7, 0x2f, 0x0, @local, @private=0xa010100, {[@noop, @timestamp_addr={0x44, 0x2c, 0x1f, 0x1, 0xd, [{@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x71}, {@rand_addr=0x64010101, 0xfffffffd}, {@loopback, 0x7}, {@private=0xa010101, 0x9}]}, @ssrr={0x89, 0x1b, 0x2d, [@broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, @empty, @multicast1, @rand_addr=0x64010102]}, @rr={0x7, 0x27, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast]}, @noop, @lsrr={0x83, 0x7, 0xb0, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @generic={0x94, 0x7, "ebaa45151a"}, @generic={0x89, 0xd, "cd3fc30ab0431b0dc7042d"}, @noop]}}}}}) bind$packet(r0, &(0x7f0000000340)={0x11, 0xf6, r8, 0x1, 0x7, 0x6, @remote}, 0x14) 2.508264329s ago: executing program 4 (id=5047): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) (async) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x7, 0x40, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "3eb9d3adfb751535"}}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r7, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) (async) sendmmsg$sock(r7, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r3, @ANYBLOB="08000200e4"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.506653055s ago: executing program 3 (id=5048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="24b8da3a1e1c2a8f94000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x24}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0180c227000008004503006000650000002f90780000000000000000248088a80000000000001080080007ff000000001007e0000100000700000000084022eb00000000200000000200000000fffd00000000004000000000000000"], 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0x20, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x4}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3, 0xfffffff7, 0x1, 0x6, 0x8001, 0x6}}, {0x10, 0x2, [0x6, 0x5, 0x6, 0x7, 0x7, 0x3]}}, {{0x1c, 0x1, {0x7, 0x81, 0xe8, 0x2, 0x1, 0x1, 0x1, 0x6}}, {0x10, 0x2, [0xe, 0x5, 0x80, 0x18, 0xfff8, 0x3ff]}}, {{0x1c, 0x1, {0x7, 0x4, 0xd9b, 0x4, 0x1, 0x5, 0x7e416a73, 0x6}}, {0x10, 0x2, [0x50a3, 0x1, 0x4000, 0x7, 0x3e00, 0x8]}}]}]}, 0xac}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) recvmsg$qrtr(r5, 0xfffffffffffffffc, 0x0, 0x102) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@delqdisc={0x84, 0x25, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0x8}, {0xfff3, 0xa}, {0x3, 0x1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}]}, 0x84}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x2, 0x60, 0x0) 2.199870563s ago: executing program 4 (id=5052): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0xa, 0x5, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0xa0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xb}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008041) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) close(r4) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000180)=0x80000001, 0x4) recvmmsg(r2, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/55, 0x37}, 0x2}], 0x1, 0x40000003, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff2180c2000003f1ff460000cdf047a1571d85c5e2b00fbfa2bf531a20000c907801000000e86ee6bc7ca2c790415ea3286512fa4557ea8d0923cd4957298a43788d9c07b20445eae908c0616357f1d40c69bfb9fb4c5521a1d4c0a3c4c4c8b3552578c2b7a0da9158728804ac5448bbc5bdbaa44d1dd99a6ab46d433a0b046c703557a5163883707382a1cdc0a645af58250a05fea997bc714c94bd3beca455982253b0c820e7379963a59bc361fe0bc50c48005e4891645ae420a24be74e44c434259325920c23be282334efe84763d0f8390375"], 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.052505333s ago: executing program 3 (id=5054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r4], 0xb) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x7ff}, &(0x7f0000000140)=0x8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x20004080) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r7, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x20004080) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000000)={0x9, 0x80000001, 0x7f, 0x3, 0x1, 0x0, 0x4}) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000001fc0)={'dvmrp0\x00', @ifru_settings={0x3, 0x7, @raw_hdlc=&(0x7f0000000180)={0x100, 0x5}}}) close(r0) 1.656619888s ago: executing program 3 (id=5057): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x109, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x200000d4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x18}], 0x1, 0x0, 0x0, 0x96165fb9ac479861}, 0x300) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x10e80, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x0) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.626836658s ago: executing program 0 (id=5058): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008"], 0x4c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x4, 0x11, @mcast1, @empty, 0x7800, 0x8000, 0x1, 0x10000}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x64, r8, 0x103, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4072}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x4000) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r2, 0x80, 0x8000, 0x80, 0x6, {{0xe, 0x4, 0x2, 0x3b, 0x38, 0x67, 0x0, 0x1d, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x1, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}]}, @lsrr={0x83, 0xf, 0x71, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x1, 0x20, 0x7, 0xc, {{0x5, 0x4, 0x1, 0x30, 0x14, 0x67, 0x0, 0x8, 0x4, 0x0, @remote, @private=0xa010102}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1.51580456s ago: executing program 3 (id=5059): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="0021199f6dd1be01000000f69800721d5874f72cf86d", 0x16}], 0x1, 0x7, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000000, 0x22}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008054) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth0_to_hsr\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000040)=0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000680)={r5, &(0x7f0000000340)=':^\x00', 0x20140, &(0x7f0000000380)={@_ha_fsid={[0x6, 0x990]}, {0x7fff, 0x663, 0x0, 0x7fffffffffffffff}}, 0x2, &(0x7f0000000500), &(0x7f0000000640)=0x9}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000247447c600000000000000000000000050001000700ecffae9b35ecdbc876817a0800020073797a300000000005000500020000000c000780050015000200000005000400000000000c000300686173683a697000"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.417728001s ago: executing program 0 (id=5060): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3107000000000700000000000000080001007063690011000200303030303a30303a31302e30000000000800730002000000"], 0x38}, 0x1, 0x2}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r11) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) 1.354080944s ago: executing program 2 (id=5061): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r3, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000c80)={0x1, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, @remote}]}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000200)) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f00000001c0)="25d1151f77a5939c137f3a3ca0fecba1d4cfc77cfdc4d09026dd551cf42b62ac11b29fdc79068928ce8b21023e5f10ee5bdcfca7fdff931711f064ac2a403604a31992029d71505ffa655e437cfc55f6c57385dd16560041b3a8a4705ebe91baf65a8587a35e44d3846c02d8b23c94cfed7503f8a98ef3f757a33be128b206b82c2e12cf7ebaecbb5140b44e4fc67f0f828a9057230e8a16be6d8b3cd1efb12df2ead8aced723e1cc7ceaa2d1749406996794a70ec83cfc34312244530b8752ced3a976c7aecc8d26ea13f1214339c92499a96d7fcdfc46c9d3006b8409c331b9add62ca8c143c33ab0a1af3f0e94f", &(0x7f0000000000)=@tcp6=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r3, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000c80)={0x1, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, @remote}]}) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000200)) (async) socket$inet(0xa, 0x801, 0x84) (async) listen(r7, 0x8) (async) accept4(r7, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f00000001c0)="25d1151f77a5939c137f3a3ca0fecba1d4cfc77cfdc4d09026dd551cf42b62ac11b29fdc79068928ce8b21023e5f10ee5bdcfca7fdff931711f064ac2a403604a31992029d71505ffa655e437cfc55f6c57385dd16560041b3a8a4705ebe91baf65a8587a35e44d3846c02d8b23c94cfed7503f8a98ef3f757a33be128b206b82c2e12cf7ebaecbb5140b44e4fc67f0f828a9057230e8a16be6d8b3cd1efb12df2ead8aced723e1cc7ceaa2d1749406996794a70ec83cfc34312244530b8752ced3a976c7aecc8d26ea13f1214339c92499a96d7fcdfc46c9d3006b8409c331b9add62ca8c143c33ab0a1af3f0e94f", &(0x7f0000000000)=@tcp6=r5}, 0x20) (async) 1.278153347s ago: executing program 3 (id=5062): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x29, 0x0, &(0x7f0000000100)) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000300), 0x0}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000180)={0x1, 'veth0_virt_wifi\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.120627789s ago: executing program 4 (id=5063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000001c00)=ANY=[@ANYBLOB="58aaaaaaaaaa0000000000000802450000610002000000119078000000000000000000004e20004d90780406000000740000fd152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb000"/111], 0x0) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/4096, 0x45}, {0x0}], 0x2}, 0x10001) r5 = socket(0xa, 0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) 1.037981938s ago: executing program 2 (id=5065): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10) (async) sendto$inet(r0, &(0x7f0000000800)='u', 0x1, 0x4801, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) listen(r0, 0xda8c) (async) accept4(r0, 0x0, 0x0, 0x0) 876.523036ms ago: executing program 2 (id=5067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000004f00010000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="234c0b2815f354c53dee8438805c6599f691651a36379083e7f834a956c45910cfcff5cc15a137a154a84d9f86ff512db94c46dbb582388345a764f008fc1642d93cbfc615282167fb66a118cdea48dd9455c0c6648f9daa3f11b652a87bad9565344d622786af2de9262c4542f869714480f22160010261bca17aa1e9006acea62f286862f96ed7ce77346cffbe84dc"], 0x1c}}, 0x8000) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x3, 0x4e23, 0x5, 0x2, 0x20, 0x0, 0x33, r5, r7}, {0x7, 0x8, 0x6, 0x0, 0x2, 0xdab, 0x40}, {0x6, 0x1, 0x3ff, 0x435}, 0xd, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast1, 0x4d6, 0x33}, 0x2, @in=@multicast2, 0x34ff, 0x4, 0x0, 0x1, 0xf, 0x4, 0x10000}}, 0xe8) write$cgroup_int(r3, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r3, r2, 0x0, 0xbdc4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0xe, &(0x7f00000032c0)=ANY=[@ANYRES64=r6], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x3}, 0x10}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r15, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x2, r16, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040027bd7000ff8cdf250500000008000600", @ANYRES32=r16, @ANYBLOB="050038000100000008003c008100000005002a00010000000500300000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20000840) 839.799817ms ago: executing program 3 (id=5069): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x0) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24009a2dcd0000200001032cbd7000ffdb5f25020000000000000510000000080017004e234e23"], 0x24}}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c001000390400000000e7dbdf25000000000000", @ANYRES32=0x0, @ANYBLOB="01980000031700001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000122f01"], 0x18}}, 0x0) unshare(0xc040480) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000002776ec33384646ad6fa06b636cf7ec800", @ANYRES16=r9, @ANYBLOB="00032cbd7000fbdbdf253000000005003400a600000008000200", @ANYRES32=r12, @ANYBLOB="0500330009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) 724.652656ms ago: executing program 0 (id=5070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r4, 0x2, {0x1, 0xff}, 0xfe}, 0x18) (async) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket(0xf, 0x6, 0x5) bind$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000078c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f0000007980)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007900)=ANY=[@ANYBLOB="246f6384", @ANYRES16=r8, @ANYBLOB="39fb25bd7000fddbdf2501000000080001004500000008000300", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x3}, 0x8) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="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", 0x13b}, {&(0x7f00000000c0)="70841253947cd1ecbea38b4a7b696ff28f44cfef70ecb7fb456274005b8637dbf7919214ff5c57fe64de829d29cf4bd2944214030cfcd1d487121334415b7b245d7384ea343c2e0c8e8a696d50f5fd4a7a2bfddcf2bd7c14c14e9a63b33b4c4bd2b8e55eb8dbc0bf68b13fa956f748e0843c318eb6831c1ebd5eae56e63bfb42af8d", 0x6c}], 0x2}, 0x8051) 646.023057ms ago: executing program 1 (id=5071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) 553.012347ms ago: executing program 0 (id=5072): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x27dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x1a9, 0x9b, 0x8, 0x4, 0xfbf, 0x1, 0x1, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) 456.652283ms ago: executing program 1 (id=5073): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x26}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010020173e01f729ff0310fce65f25090000006ac81f63"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x370, 0x3d, 0x200, 0x70bd29, 0x25dfdbfb, {0x1b}, [@generic="b1df9d974dc87d7e45503c138aef2d2b153f828dbb7c6104a9451c2f3397edc4d2c11f632b33dad2605f7a26340d11536ed385aebd535bb3b275ef2a0db755179b6125974fe08e343e3acd5b053a5a36a7c22803ffe5ccec7722b1b0be8782158054e2e2f6f728a635e9700c6451466337de317f31bd263f2955cfd0a23f1298f6", @generic="e37e24bbd3f5caca68aeead7f1e438fe5e2275ecf0e83250855b90f84de9ddfaee941313b15ea87783f12a8e7d1dd8934d82a4013accb3370d7d8e578484f78fc7d286c82ae7ce5ad64cfa8ee9d194a22884258be884addca5d240e9c22ccfe806a15f6988a9bb3c2c500ef03130e599e6ca599371e22e46aa729cb5c0db816539acb24e98998d6cafab518f755ab4e78649483802a62412671597a0dcea9cea6762f7c096c494ab2677017e3d7a597f42e6e9afa111e2dc7aa5debc42b872af8b21eb6b4f1672f2c9f31fb0e1047bca75051a24388ce0a6ac431f", @nested={0xf7, 0xa6, 0x0, 0x1, [@nested={0x4, 0xba}, @typed={0x62, 0x86, 0x0, 0x0, @binary="56f77d53b06a962c8f12d34c9597efcf410acbad2d479ab625fb81deae0d022da32ec1e53a7541f3952fe0f9e47d3b64f916df5f6d3ff55fd0c73f47cf2d8572a64e7e0aa82a094f0fb50411f6b5708a1093371f70b488b6177becaf6be3"}, @nested={0x4, 0x75}, @generic="1f4c1a817f2c43de0f94dc7c256b915895d19f0df361196717f45a923100a05e0f94f1a843a2e39ba4167a6dfb503d8fac6a90461d3f59e0afbc9039f0e409cb3673393167ac7474eb8591fac46603ac46d347ae75e923c2ac26f7bd083037f9032a11c46a5b1ce057b8cb0cbe1d8591cb74d1907e9bc992f2836075759f6a96d96e35514d7996"]}, @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@empty}, @generic="381716c8334d6fa96551d95e27ea8843c5493cc0a4a72458a62cd3c5967a455a3abbab0a133c87d9d5830d3e7527c081a603ab953cc3e70e9634425036ed8877fd28b7dc91d7b90a855c3c285bc6764fdf59e0c758af9da98aaa4f4b9706dad34fe279354cf0758bb51e670aeb99d6f447068155865d171799045e7a1bd8f222453b259cef8282244ebce587ae9b0b192f2646680e1eec661976a0d269b5226c41613c56268a8a3a5461dbbf68de053aa514e6cd89dc0c203566014fb315d4540d3ab5019354bb370478930ed0ee1b3f98d9ec4fdaa996b8eaec46cf94c993a651659a2acd30e25aea2c45652212da2a86"]}, 0x370}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) 398.084487ms ago: executing program 1 (id=5074): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf251e00000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="080001007a0aabe25075f83763d9515c794851da272ee422c7383fd58c377169f15faadbc5c04f4b7e9e527dd536a5790ffcf78baa036a6a209194d7bf8c5b4f9146809afca8e9c21f", @ANYRES32=0x0, @ANYBLOB="08000400ffffffff0800040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r1 = socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@multicast1}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001fc0)={r3, &(0x7f0000001e80), 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 359.623117ms ago: executing program 2 (id=5075): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)=ANY=[@ANYBLOB="0205aa000000000000003245c774c625"], 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x2000001, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x6}, 0x1c) write(0xffffffffffffffff, &(0x7f00000000c0)="010000000000", 0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000340)=""/10, 0xa}], 0x4, &(0x7f0000000400)=""/47, 0x2f}, 0x7}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/211, 0xd3}], 0x1, &(0x7f0000004100)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000c80)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000680)=""/60, 0x3c}, {&(0x7f0000000d00)=""/218, 0xda}, {&(0x7f0000000e00)=""/252, 0xfc}, {&(0x7f0000000f00)=""/253, 0xfd}, {&(0x7f0000001000)=""/78, 0x4e}, {&(0x7f0000001080)=""/228, 0xe4}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/69, 0x45}], 0x8, &(0x7f0000001340)=""/11, 0xb}, 0x8}, {{&(0x7f0000001380)=@nfc, 0x80, &(0x7f0000001640)=[{&(0x7f0000001400)=""/177, 0xb1}, {&(0x7f00000014c0)=""/164, 0xa4}, {&(0x7f0000001580)=""/156, 0x9c}], 0x3, &(0x7f0000001680)=""/4, 0x4}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001740)=""/198, 0xc6}, {&(0x7f0000001840)=""/46, 0x2e}, {&(0x7f0000001880)=""/64, 0x40}], 0x3}, 0xffffffff}], 0x5, 0x40000002, &(0x7f0000001a80)) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="22000000de4904000000080080000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff000000009f080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230800", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000001200)={r7, 0x9, 0xfff8}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r9, &(0x7f0000000a00)=ANY=[@ANYBLOB="0800080006000000000014000000450b031700670000092f"], 0x325) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) 276.018646ms ago: executing program 1 (id=5076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x40, r6, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x4004044) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e40)={0x1238, r6, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10000}, @NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "2bc32956b049d6a9a0240aaec6e6824aa6c25fab3dbc9c11397b457476dd9a7b55f6e1dea6372ad2ccb1b64a97741f376188a2eae8f4dc11f42b18a90efa138899e471caafcafc04e48032967fae9e0d2dc54f739655dc4ecc0f13058f23da389c2ae42d9cf17704f15d1aea2fdb178119823fd0cb817a650061afcd047d120fc3456c701da5a22302e8149617980777b7e2cf74a45a13c8f37b2cadf3796cc58ee25306f3a85d98f8b0ef24f4c5360ef77e1d16da848c922ace4d2cf83b9f6a3b860f3181b0356c1a1564d424298967316dea4f36831c4dcc3cb992e198"}, @NL80211_ATTR_VENDOR_DATA={0xe5, 0xc5, "e1e532170e345407c6821996c07584e9332b26400256c1b47d2cbe7ac52b6ae8b7a4c581ab1d3a4b041989407375cfecb795c5fe8869d71de0d7105dbca027b7421eef345e8fe390b281dab9eb83d6b228974be958a8a8140c2a7490eae1a3736c2c95f63c54c0ec97acd64ec6183ccc851b5bfaf1c1c2ca3c93df97681cd15547f4fe256da24890d17a83f65397a4e39ca4232e577fe4df6785e4f96426fa84b0f8ee70d86406a57a6fba5ab0e4d16586c3301b8aa0918ceff51f05b788742213b7839798a25235f96e9f53a9f5b2926002c16d64938bd1c0c739a93e14060394"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x23, 0xc5, "4f30f65ea376c6743cd30c8c8d7834cab18251c7d6a80ead9ad8900d876050"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1000}]}, 0x1238}, 0x1, 0x0, 0x0, 0x4000810}, 0x24000014) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x124, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xc8f4, 0x77}}]}]}, @IFLA_PHYS_SWITCH_ID={0x24, 0x24, "dd4b326ebf8d754854903c264ec749ff27bd2eafedd3b2e8c6b2a4e52aee2052"}, @IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'ip_vti0\x00'}]}]}, 0x124}}, 0x24040800) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) (async) socket$inet6(0xa, 0x80002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x40, r6, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x4004044) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e40)={0x1238, r6, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10000}, @NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "2bc32956b049d6a9a0240aaec6e6824aa6c25fab3dbc9c11397b457476dd9a7b55f6e1dea6372ad2ccb1b64a97741f376188a2eae8f4dc11f42b18a90efa138899e471caafcafc04e48032967fae9e0d2dc54f739655dc4ecc0f13058f23da389c2ae42d9cf17704f15d1aea2fdb178119823fd0cb817a650061afcd047d120fc3456c701da5a22302e8149617980777b7e2cf74a45a13c8f37b2cadf3796cc58ee25306f3a85d98f8b0ef24f4c5360ef77e1d16da848c922ace4d2cf83b9f6a3b860f3181b0356c1a1564d424298967316dea4f36831c4dcc3cb992e198"}, @NL80211_ATTR_VENDOR_DATA={0xe5, 0xc5, "e1e532170e345407c6821996c07584e9332b26400256c1b47d2cbe7ac52b6ae8b7a4c581ab1d3a4b041989407375cfecb795c5fe8869d71de0d7105dbca027b7421eef345e8fe390b281dab9eb83d6b228974be958a8a8140c2a7490eae1a3736c2c95f63c54c0ec97acd64ec6183ccc851b5bfaf1c1c2ca3c93df97681cd15547f4fe256da24890d17a83f65397a4e39ca4232e577fe4df6785e4f96426fa84b0f8ee70d86406a57a6fba5ab0e4d16586c3301b8aa0918ceff51f05b788742213b7839798a25235f96e9f53a9f5b2926002c16d64938bd1c0c739a93e14060394"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x23, 0xc5, "4f30f65ea376c6743cd30c8c8d7834cab18251c7d6a80ead9ad8900d876050"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1000}]}, 0x1238}, 0x1, 0x0, 0x0, 0x4000810}, 0x24000014) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x124, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xc8f4, 0x77}}]}]}, @IFLA_PHYS_SWITCH_ID={0x24, 0x24, "dd4b326ebf8d754854903c264ec749ff27bd2eafedd3b2e8c6b2a4e52aee2052"}, @IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'ip_vti0\x00'}]}]}, 0x124}}, 0x24040800) (async) 274.87376ms ago: executing program 0 (id=5077): mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="580400"], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r12, &(0x7f0000001480)=""/4096, 0x38) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x9c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad21, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffffc}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000e800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) 189.29134ms ago: executing program 1 (id=5078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x30, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80"}]}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80"}]}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 188.864918ms ago: executing program 4 (id=5079): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x44}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 122.118163ms ago: executing program 4 (id=5080): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67794205}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x72bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 16.438291ms ago: executing program 0 (id=5081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000801b50000000000000000000000030600024080f300000400048005000300010000000900010073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(0x3) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000000c0)={0xe, 0x8, 0x3, 0x9, 0x2a4b}, 0x14) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000003600)) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x34, 0xff, 0xf}, 0x2c) ioctl$sock_SIOCETHTOOL(r3, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0x6, 0x5, 0x3, 0x5, "249523"}}) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700"/16, @ANYRES8=r2, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x60000c1}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000801b50000000000000000000000030600024080f300000400048005000300010000000900010073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async) close(0x3) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000000c0)={0xe, 0x8, 0x3, 0x9, 0x2a4b}, 0x14) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000003600)) (async) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x34, 0xff, 0xf}, 0x2c) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0x6, 0x5, 0x3, 0x5, "249523"}}) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700"/16, @ANYRES8=r2, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x60000c1}, 0x4000010) (async) 299.169µs ago: executing program 1 (id=5082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001200)={@mcast1}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf257900000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x8, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x56e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$PPPIOCSMRU(r8, 0x40047452, &(0x7f0000000340)=0x2) sendmsg$NL80211_CMD_RADAR_DETECT(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r9, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6f}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x80c0) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x10020, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000808}, 0x40080) 0s ago: executing program 4 (id=5083): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000003c0)="a10016", 0x3}], 0x1}}], 0x1, 0x30008001) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000003c0)="a10016", 0x3}], 0x1}}], 0x1, 0x30008001) kernel console output (not intermixed with test programs): etrying later): interface not active [ 416.030016][T17641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.054268][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.145594][T17641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.198018][T17818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3219'. [ 416.383825][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3221'. [ 416.523553][T17803] wg1 speed is unknown, defaulting to 1000 [ 416.622965][T17641] hsr_slave_0: entered promiscuous mode [ 416.641454][T17641] hsr_slave_1: entered promiscuous mode [ 416.654368][T17641] debugfs: 'hsr0' already exists in 'hsr' [ 416.660792][T17641] Cannot create hsr debugfs directory [ 417.019232][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 417.095429][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 417.104524][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 417.104555][ C0] lec:lec_tx_timeout: lec0 [ 417.113100][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 417.166649][T17863] netlink: 'syz.2.3227': attribute type 1 has an invalid length. [ 417.195295][T17860] syzkaller0: entered promiscuous mode [ 417.202910][T17860] syzkaller0: entered allmulticast mode [ 417.356024][T17872] netlink: 'syz.2.3229': attribute type 1 has an invalid length. [ 417.761955][ T5141] Bluetooth: hci3: command tx timeout [ 418.964478][T17872] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 418.998957][T12881] team0: left promiscuous mode [ 419.013333][T12881] team_slave_0: left promiscuous mode [ 419.019074][T12881] team_slave_1: left promiscuous mode [ 419.063814][T12881] hsr_slave_0: left promiscuous mode [ 419.081178][T12881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.088678][T12881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.116397][T12881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.137022][T12881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.153484][T12881] batman_adv: batadv0: Interface deactivated: dummy0 [ 419.181449][T12881] batman_adv: batadv0: Removing interface: dummy0 [ 419.212309][T12881] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 419.229727][T12881] batman_adv: batadv0: Removing interface: ipvlan2 [ 419.461228][T17915] ip6t_srh: unknown srh invflags 4000 [ 419.744938][T12881] team0 (unregistering): Port device team_slave_1 removed [ 419.768484][T12881] team0 (unregistering): Port device team_slave_0 removed [ 419.839598][ T5141] Bluetooth: hci3: command tx timeout [ 420.310523][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 420.513637][T17956] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002 [ 420.837527][T12881] IPVS: stop unused estimator thread 0... [ 420.958360][T17973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3245'. [ 421.007675][T17976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3247'. [ 421.131678][T17641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.162489][T17641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.184747][T17641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.221509][T17641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.571349][T18009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3251'. [ 421.614582][T17641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.680157][T18010] netlink: 'syz.0.3253': attribute type 2 has an invalid length. [ 421.682247][T17641] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.799035][T11067] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.806327][T11067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.839168][T12880] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.846437][T12880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.909598][T18014] can: request_module (can-proto-5) failed. [ 422.021005][T18018] syzkaller0: entered promiscuous mode [ 422.026562][T18018] syzkaller0: entered allmulticast mode [ 422.061109][T18018] 0: reclassify loop, rule prio 0, protocol 800 [ 422.073703][T18024] netlink: 'syz.2.3257': attribute type 5 has an invalid length. [ 422.119368][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 422.127528][ C0] lec:lec_tx_timeout: lec0 [ 422.133030][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 422.471005][T18045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3262'. [ 422.505418][T18046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3262'. [ 422.643948][T17641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.657591][T18056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.754344][T18056] tipc: Enabled bearer , priority 0 [ 422.785544][T18056] syzkaller0: entered promiscuous mode [ 422.835276][T18056] syzkaller0: entered allmulticast mode [ 422.875996][T18065] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 422.941355][T18056] tipc: Resetting bearer [ 422.951743][T18067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3268'. [ 422.976071][T18053] tipc: Resetting bearer [ 423.045462][T18053] tipc: Disabling bearer [ 423.068918][T18081] netlink: 'syz.0.3270': attribute type 32 has an invalid length. [ 423.089474][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'. [ 423.154559][T18081] bond1: option coupled_control: invalid value (52) [ 423.171725][T18081] bond1 (unregistering): Released all slaves [ 423.190205][T18086] "syz.2.3271" (18086) uses obsolete ecb(arc4) skcipher [ 423.508031][T17641] veth0_vlan: entered promiscuous mode [ 423.532276][T17641] veth1_vlan: entered promiscuous mode [ 423.605736][T17641] veth0_macvtap: entered promiscuous mode [ 423.672939][T17641] veth1_macvtap: entered promiscuous mode [ 423.680169][T18117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3275'. [ 423.736101][T18120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3276'. [ 423.749887][T17641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.774610][T17641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.883317][T12880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.917538][T12880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.945372][T12880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.955530][T12880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.178775][T18135] syzkaller0: entered promiscuous mode [ 424.206540][T18135] syzkaller0: entered allmulticast mode [ 424.263993][T12879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.275828][T12879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.390806][T18151] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 424.446330][T18140] syzkaller0: entered promiscuous mode [ 424.489387][T18140] syzkaller0: entered allmulticast mode [ 424.523037][T18158] openvswitch: netlink: IPv6 tunnel dst address is zero [ 424.530985][T18158] netlink: 'syz.3.3283': attribute type 12 has an invalid length. [ 424.581418][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'. [ 426.087197][T18158] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 426.097326][T12879] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.097387][T18159] __nla_validate_parse: 1 callbacks suppressed [ 426.097404][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'. [ 426.156888][T12881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.171781][T18159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3282'. [ 426.191937][T12879] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.206584][T12881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.214512][T12879] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.251492][T12879] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.467735][T18182] "syz.1.3288" (18182) uses obsolete ecb(arc4) skcipher [ 426.535230][T18184] bond1: (slave gretap0): Device is not bonding slave [ 426.545341][T18184] bond1: option active_slave: invalid value (gretap0) [ 426.565048][T18184] bond1 (unregistering): Released all slaves [ 426.658626][T18192] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 426.684748][T18192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3291'. [ 426.733968][T18192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3291'. [ 426.790109][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3291'. [ 426.819968][T18192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3291'. [ 426.913779][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.926578][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.936305][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.949259][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.965087][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.088049][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3295'. [ 427.811454][ T5826] bond9: (slave syz_tun): Releasing backup interface [ 427.919528][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 427.927584][ C0] lec:lec_tx_timeout: lec0 [ 427.932741][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 428.070030][T18251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3302'. [ 428.096054][T18249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3303'. [ 428.278437][T11040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.293976][T11040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.317652][T11040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 428.448738][T18262] xt_CT: No such helper "pptp" [ 428.569109][T11040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.649936][T11040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.699411][T11040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 428.776063][T18286] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 428.795191][T18199] chnl_net:caif_netlink_parms(): no params data found [ 428.965729][T18268] syzkaller0: entered promiscuous mode [ 428.971484][T18268] syzkaller0: entered allmulticast mode [ 429.040786][ T5141] Bluetooth: hci0: command tx timeout [ 429.101075][T11040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.118764][T11040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.131598][T11040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 429.632530][T18319] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3316'. [ 431.032321][T11040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.046041][T11040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.081477][T11040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 431.129208][ T5141] Bluetooth: hci0: command tx timeout [ 431.168092][T18338] netlink: 'syz.0.3319': attribute type 1 has an invalid length. [ 431.259033][T18338] bond1: entered promiscuous mode [ 431.267119][T18338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.451044][T18358] x_tables: ip_tables: ah match: only valid for protocol 51 [ 431.564782][T18354] ip6gre1: entered promiscuous mode [ 431.579439][T18354] ip6gre1: entered allmulticast mode [ 431.612833][T18199] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.637268][T18199] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.667811][T18199] bridge_slave_0: entered allmulticast mode [ 431.684630][T18199] bridge_slave_0: entered promiscuous mode [ 431.703353][T18199] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.720324][T18199] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.733689][T18199] bridge_slave_1: entered allmulticast mode [ 431.752125][T18199] bridge_slave_1: entered promiscuous mode [ 431.823129][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 431.831824][ T5953] IPVS: starting estimator thread 0... [ 431.852507][T18379] __nla_validate_parse: 1 callbacks suppressed [ 431.852547][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'. [ 431.879271][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 431.924141][T18376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.940028][T18378] IPVS: using max 27 ests per chain, 64800 per kthread [ 431.960216][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 431.971048][T18199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.989279][T18199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.141093][T18386] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 432.148154][T18199] team0: Port device team_slave_0 added [ 432.236909][T18199] team0: Port device team_slave_1 added [ 432.245312][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 432.272068][T11040] bridge_slave_0: left allmulticast mode [ 432.277785][T11040] bridge_slave_0: left promiscuous mode [ 432.309344][T11040] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.648058][T18368] infiniband syz2: set active [ 432.710120][T18368] infiniband syz2: added vxcan1 [ 432.858812][T18368] RDS/IB: syz2: added [ 432.870822][T18368] smc: adding ib device syz2 with port count 1 [ 432.887881][T11040] bond2 (unregistering): (slave erspan1): Releasing active interface [ 432.896905][T18368] smc: ib device syz2 port 1 has no pnetid [ 432.911710][T11040] erspan1 (unregistering): left promiscuous mode [ 432.959403][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 432.967632][ C0] lec:lec_tx_timeout: lec0 [ 432.973380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 433.060424][T11040] bond3 (unregistering): (slave geneve2): Releasing active interface [ 433.083311][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'. [ 433.135803][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'. [ 433.167343][T18428] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.199545][ T5839] Bluetooth: hci0: command tx timeout [ 433.465291][T11040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.477157][T11040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.488464][T11040] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 433.501524][T11040] bond0 (unregistering): Released all slaves [ 433.513966][T11040] bond1 (unregistering): Released all slaves [ 433.529093][T11040] bond2 (unregistering): Released all slaves [ 433.546061][T11040] bond3 (unregistering): Released all slaves [ 433.561048][T11040] bond4 (unregistering): Released all slaves [ 433.585025][T11040] bond5 (unregistering): Released all slaves [ 433.600641][T11040] bond6 (unregistering): Released all slaves [ 433.617933][T11040] bond7 (unregistering): Released all slaves [ 433.634266][T11040] bond8 (unregistering): (slave veth7): Releasing active interface [ 433.644825][T11040] bond8 (unregistering): Released all slaves [ 433.670414][T11040] bond9 (unregistering): Released all slaves [ 433.686573][T11040] bond10 (unregistering): Released all slaves [ 433.701493][T11040] bond11 (unregistering): Released all slaves [ 433.717694][T11040] bond12 (unregistering): Released all slaves [ 433.741585][T11040] bond13 (unregistering): (slave veth9): Releasing active interface [ 433.750004][T11040] veth0_to_bond: entered promiscuous mode [ 433.758840][T11040] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface [ 433.774887][T11040] bond13 (unregistering): (slave veth11): Releasing active interface [ 433.785358][T11040] bond13 (unregistering): Released all slaves [ 433.833939][T12455] vxcan1 speed is unknown, defaulting to 1000 [ 433.843552][ T881] vxcan1 speed is unknown, defaulting to 1000 [ 433.886285][T18427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.992190][T18199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.999230][T18199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.041768][T18199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.055458][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 434.055568][T11040] : left promiscuous mode [ 434.157367][T18199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.186622][T18199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.261332][T18199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.316227][T11040] tipc: Left network mode [ 434.706288][T18199] hsr_slave_0: entered promiscuous mode [ 434.715515][T18199] hsr_slave_1: entered promiscuous mode [ 434.727678][T18199] debugfs: 'hsr0' already exists in 'hsr' [ 434.733859][T18199] Cannot create hsr debugfs directory [ 434.745923][T18473] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3345'. [ 434.931920][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 435.279738][ T5839] Bluetooth: hci0: command tx timeout [ 435.522568][T12184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.732827][T18515] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 435.754287][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 435.855975][T18513] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 436.031163][T18528] tipc: Started in network mode [ 436.036125][T18528] tipc: Node identity 9a88b5fcb056, cluster identity 4711 [ 436.066107][T18528] tipc: Enabled bearer , priority 0 [ 436.081867][T18530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3356'. [ 436.083620][T18528] syzkaller0: entered promiscuous mode [ 436.096750][T18528] syzkaller0: entered allmulticast mode [ 436.122738][T18528] tipc: Resetting bearer [ 436.207080][T18527] tipc: Resetting bearer [ 436.237103][T18527] tipc: Disabling bearer [ 436.348351][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 436.563766][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.798348][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3362'. [ 436.935324][T18199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 436.966391][T18199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 437.027178][T18199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 437.068046][T18199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 437.147185][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 437.190309][T18579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.241569][T18565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.334218][T18199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.381867][T18199] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.414992][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.422621][ T6571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.475179][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.482457][ T6571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.521457][T12457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.530981][T12455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.539359][T12455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.548120][T12456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.600952][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.801723][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 437.989350][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 437.997593][ C0] lec:lec_tx_timeout: lec0 [ 438.003252][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 438.163465][T12456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.195574][T18199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.358758][T18199] veth0_vlan: entered promiscuous mode [ 438.425396][T18199] veth1_vlan: entered promiscuous mode [ 438.473246][T18619] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.527688][T18622] netlink: 'syz.2.3371': attribute type 8 has an invalid length. [ 438.546199][T18199] veth0_macvtap: entered promiscuous mode [ 438.588612][T18199] veth1_macvtap: entered promiscuous mode [ 438.697083][T18199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.734697][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 438.737668][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 438.762979][T18199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.806454][ T1702] block nbd1: Possible stuck request ffff888026a28000: control (read@0,1024B). Runtime 90 seconds [ 438.817484][ T1702] block nbd1: Possible stuck request ffff888026a28200: control (read@1024,1024B). Runtime 90 seconds [ 438.829620][ T1702] block nbd1: Possible stuck request ffff888026a28400: control (read@2048,1024B). Runtime 90 seconds [ 438.843521][ T1702] block nbd1: Possible stuck request ffff888026a28600: control (read@3072,1024B). Runtime 90 seconds [ 438.880646][T12881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.919561][T12881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.962396][T18637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3376'. [ 438.976888][T12881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.998040][T12881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.321412][T12881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.348592][T12881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.463089][T12879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.490709][T12879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.600183][T18368] vxcan1 speed is unknown, defaulting to 1000 [ 439.929204][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 440.551910][T18710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3392'. [ 440.603010][T18713] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 440.730328][ T794] net_ratelimit: 5 callbacks suppressed [ 440.730347][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.855552][T18720] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3395'. [ 440.999551][T18720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3395'. [ 441.073650][T18737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.227166][T18736] bond1: Unable to set down delay as MII monitoring is disabled [ 441.351064][T18736] bond1 (unregistering): Released all slaves [ 441.615713][T11040] hsr_slave_0: left promiscuous mode [ 441.654334][T11040] veth1_macvtap: left promiscuous mode [ 441.669941][T11040] veth0_macvtap: left promiscuous mode [ 441.762524][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.839861][T12457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.113655][T11040] pim6reg (unregistering): left allmulticast mode [ 442.146306][T11040] pim6reg527 (unregistering): left allmulticast mode [ 442.348591][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3404'. [ 442.546353][T11040] team0 (unregistering): Port device team_slave_1 removed [ 442.579247][T11040] team0 (unregistering): Port device team_slave_0 removed [ 442.801103][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.009350][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 443.017500][ C0] lec:lec_tx_timeout: lec0 [ 443.022161][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 443.414279][T18834] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3409'. [ 443.570585][T18851] syzkaller0: entered promiscuous mode [ 443.595180][T18851] syzkaller0: entered allmulticast mode [ 443.634273][T11040] IPVS: stop unused estimator thread 0... [ 443.788949][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3416'. [ 443.860261][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.074677][T18874] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.177039][T18882] bridge_slave_0: left allmulticast mode [ 444.183791][T18882] bridge_slave_0: left promiscuous mode [ 444.196239][T18882] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.257909][T18882] bridge_slave_1: left allmulticast mode [ 444.265648][T18882] bridge_slave_1: left promiscuous mode [ 444.273057][T18882] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.323576][T18882] bond0: (slave bond_slave_0): Releasing backup interface [ 444.355382][T18882] bond0: (slave bond_slave_1): Releasing backup interface [ 444.390036][T18882] team0: Port device team_slave_0 removed [ 444.416958][T18882] team0: Port device team_slave_1 removed [ 444.467402][T18882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.490083][T18882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.515628][T18882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.524562][T18901] xt_hashlimit: overflow, rate too high: 0 [ 444.533695][T18882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.542253][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 444.561733][T18882] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.654637][T18883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.682514][T18901] bridge_slave_1: left allmulticast mode [ 444.688607][T18901] bridge_slave_1: left promiscuous mode [ 444.695459][T18901] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.713229][T18901] bridge_slave_0: left allmulticast mode [ 444.731420][T18901] bridge_slave_0: left promiscuous mode [ 444.759920][T18901] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.871919][T18917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3427'. [ 444.881276][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.890704][T12456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.985267][T18911] syzkaller1: entered promiscuous mode [ 444.991269][T18911] syzkaller1: entered allmulticast mode [ 445.087031][T18925] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 445.144644][T18929] netlink: 'syz.4.3433': attribute type 11 has an invalid length. [ 445.157238][T18929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3433'. [ 445.204698][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.212792][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.320962][T18934] macvtap1: entered promiscuous mode [ 445.330878][T18934] macvtap1: entered allmulticast mode [ 445.343875][T18934] veth1_vlan: entered allmulticast mode [ 445.621501][T18949] nbd2: detected capacity change from 0 to 127 [ 445.760635][T18971] netlink: 'syz.2.3447': attribute type 1 has an invalid length. [ 445.768564][T18971] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3447'. [ 445.823000][T18971] netlink: 'syz.2.3447': attribute type 1 has an invalid length. [ 445.835714][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3447'. [ 445.910744][T18978] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3448'. [ 445.923107][ T5953] net_ratelimit: 1 callbacks suppressed [ 445.923126][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.013566][ T5839] block nbd2: Receive control failed (result -104) [ 446.443764][T19010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3455'. [ 446.475144][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 446.704452][T19022] syzkaller0: entered promiscuous mode [ 446.710415][T19022] syzkaller0: entered allmulticast mode [ 446.953039][T19037] bond2 (unregistering): Released all slaves [ 446.962858][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.031808][T19040] vcan1: entered promiscuous mode [ 447.043174][T19040] vcan1: entered allmulticast mode [ 447.301149][T19061] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3470'. [ 447.318519][T19061] vlan2: entered allmulticast mode [ 447.327366][T19061] gretap0: entered allmulticast mode [ 447.760621][T12456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.822132][T19083] syzkaller0: entered promiscuous mode [ 447.827898][T19083] syzkaller0: entered allmulticast mode [ 447.909976][T19089] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 447.932959][T12456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.029408][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 448.037475][ C0] lec:lec_tx_timeout: lec0 [ 448.042279][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 448.064438][T12189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.138772][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.146561][T19094] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.402041][T12458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.119724][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.151287][T19168] netlink: 'syz.3.3496': attribute type 13 has an invalid length. [ 449.221386][T19168] gretap0: refused to change device tx_queue_len [ 449.241331][T19168] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 449.294968][T19172] __nla_validate_parse: 8 callbacks suppressed [ 449.294988][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 449.311167][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 449.334799][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 449.352966][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 449.391861][T19178] netlink: 'syz.4.3501': attribute type 22 has an invalid length. [ 449.432671][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'. [ 449.502647][T19178] netlink: 'syz.4.3501': attribute type 22 has an invalid length. [ 449.523078][T19182] netlink: 'syz.3.3502': attribute type 1 has an invalid length. [ 449.529671][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'. [ 449.548899][T11058] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.565926][T19179] netlink: 'syz.4.3501': attribute type 2 has an invalid length. [ 449.576796][T11058] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.587786][T19179] netlink: 'syz.4.3501': attribute type 1 has an invalid length. [ 449.627914][T19182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.650179][T19178] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3501'. [ 449.661782][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 449.685453][T19178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3501'. [ 449.699191][T19186] bond1: (slave veth0_to_bond): making interface the new active one [ 449.725393][T19195] siw: device registration error -23 [ 449.743832][T19186] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 449.754487][T11058] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.772140][T19182] bond1: entered promiscuous mode [ 449.777461][T19182] veth0_to_bond: entered promiscuous mode [ 449.784802][T19182] bond1: entered allmulticast mode [ 449.794453][T19182] veth0_to_bond: entered allmulticast mode [ 449.859960][T11058] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.874163][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3502'. [ 449.921761][T19200] ksmbd: Unknown IPC event: 3, ignore. [ 449.958438][T19182] : entered promiscuous mode [ 450.147689][T19209] bridge_slave_0: left allmulticast mode [ 450.153859][T19209] bridge_slave_0: left promiscuous mode [ 450.160389][T19209] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.168076][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.183665][T19209] bridge_slave_1: left allmulticast mode [ 450.192660][T19213] xt_socket: unknown flags 0x50 [ 450.193722][T19209] bridge_slave_1: left promiscuous mode [ 450.210628][T19209] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.230762][T19209] bond0: (slave bond_slave_0): Releasing backup interface [ 450.254587][T19209] bond0: (slave bond_slave_1): Releasing backup interface [ 450.274500][T19209] team0: Port device team_slave_0 removed [ 450.290437][T19209] team0: Port device team_slave_1 removed [ 450.307233][T19209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.336826][T19209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.532686][T19222] syzkaller0: entered promiscuous mode [ 450.538298][T19222] syzkaller0: entered allmulticast mode [ 450.965199][T12458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.204240][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.244538][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.456231][T19260] netlink: 'syz.2.3525': attribute type 1 has an invalid length. [ 452.498040][T19259] netlink: 'syz.2.3525': attribute type 1 has an invalid length. [ 452.681241][T19285] netlink: 'syz.0.3532': attribute type 1 has an invalid length. [ 452.692772][T19285] netlink: 'syz.0.3532': attribute type 1 has an invalid length. [ 452.706863][T19285] netlink: 'syz.0.3532': attribute type 8 has an invalid length. [ 453.049374][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 453.057761][ C0] lec:lec_tx_timeout: lec0 [ 453.062541][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 453.126310][T19323] netlink: Unknown conntrack attr (0) [ 453.283796][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.629028][T19364] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20001 [ 454.006693][T19388] "syz.3.3562" (19388) uses obsolete ecb(arc4) skcipher [ 454.014009][T19099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.105862][T19394] vlan2: entered allmulticast mode [ 454.111486][T19394] bridge_slave_0: entered allmulticast mode [ 454.253777][T19406] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 454.275654][T19406] pim6reg1: entered promiscuous mode [ 454.281520][T19406] pim6reg1: entered allmulticast mode [ 454.313568][T19408] __nla_validate_parse: 17 callbacks suppressed [ 454.313588][T19408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3569'. [ 454.331146][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.425717][T19414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3572'. [ 454.505118][T19416] "syz.1.3574" (19416) uses obsolete ecb(arc4) skcipher [ 454.571013][T19422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3575'. [ 454.677398][T19425] netlink: 'syz.2.3576': attribute type 1 has an invalid length. [ 454.771364][T19428] bond3 (unregistering): Released all slaves [ 454.869827][T19433] vcan0: entered allmulticast mode [ 455.031902][T19436] bond2: entered promiscuous mode [ 455.037540][T19436] bond2: entered allmulticast mode [ 455.044617][T19436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.062348][T19437] vxcan1 speed is unknown, defaulting to 1000 [ 455.185156][T19444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3581'. [ 455.316167][T19446] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3582'. [ 455.362132][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.380866][T19450] nft_compat: unsupported protocol 0 [ 455.441181][T19099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.449542][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.523759][T19455] x_tables: duplicate underflow at hook 2 [ 455.591099][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'. [ 455.670075][T19462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.848635][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3594'. [ 455.899995][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 455.950866][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3594'. [ 455.983226][T19482] "syz.3.3596" (19482) uses obsolete ecb(arc4) skcipher [ 456.000357][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 456.399959][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.438118][T19508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.720535][T19099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.440555][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.069414][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 458.077581][ C0] lec:lec_tx_timeout: lec0 [ 458.082492][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 458.479758][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.487987][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.252665][T19497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.280629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.520840][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.531901][T19561] __nla_validate_parse: 2 callbacks suppressed [ 459.531919][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3615'. [ 459.564748][T19567] "syz.1.3616" (19567) uses obsolete ecb(arc4) skcipher [ 459.604636][T19569] netlink: 'syz.3.3619': attribute type 8 has an invalid length. [ 459.612955][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'. [ 459.623248][T19561] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 459.672300][T19569] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3619'. [ 459.823036][T19580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.897689][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'. [ 459.938592][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3623'. [ 459.965785][T19586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3624'. [ 459.992082][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3624'. [ 460.126618][T19588] netlink: 'syz.4.3625': attribute type 2 has an invalid length. [ 460.419508][T19612] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.861978][T19640] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3639'. [ 461.156908][T19654] "syz.0.3643" (19654) uses obsolete ecb(arc4) skcipher [ 461.446669][T19659] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3645'. [ 461.522859][T19099] net_ratelimit: 2 callbacks suppressed [ 461.522880][T19099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.546430][T19665] netlink: 'syz.2.3646': attribute type 9 has an invalid length. [ 461.557309][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 461.578644][T19666] netlink: 'syz.1.3644': attribute type 3 has an invalid length. [ 461.578659][T19665] netlink: 'syz.2.3646': attribute type 9 has an invalid length. [ 461.619534][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.633604][T19668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.719768][T11065] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.736500][T11065] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.767011][T11065] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.797318][T19028] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.864095][T19674] netlink: 'syz.3.3648': attribute type 9 has an invalid length. [ 462.134030][T19689] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 462.295788][T19696] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 462.319524][T19696] netlink: 'syz.2.3655': attribute type 2 has an invalid length. [ 462.340341][T19696] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 462.369509][T19696] netlink: 'syz.2.3655': attribute type 3 has an invalid length. [ 462.649920][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.705135][T19716] bond0: entered promiscuous mode [ 462.710456][T19716] bond_slave_0: entered promiscuous mode [ 462.716448][T19716] bond_slave_1: entered promiscuous mode [ 462.759578][T19727] "syz.1.3662" (19727) uses obsolete ecb(arc4) skcipher [ 463.089399][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 463.097945][ C0] lec:lec_tx_timeout: lec0 [ 463.103143][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 463.403864][T19750] bond3: (slave veth3): Enslaving as an active interface with a down link [ 463.480373][T19759] bond3: (slave veth5): Enslaving as an active interface with a down link [ 463.682128][T12184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.858346][T19789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.056767][T19805] team0: Device veth1_macvtap failed to register rx_handler [ 464.210845][T19817] "syz.1.3686" (19817) uses obsolete ecb(arc4) skcipher [ 464.267285][T19819] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 464.562661][T19099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.724736][T12184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.893772][T19864] __nla_validate_parse: 11 callbacks suppressed [ 464.893793][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 464.989566][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3700'. [ 465.092107][T19868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 465.197590][T19887] syzkaller0: entered promiscuous mode [ 465.205210][T19887] syzkaller0: entered allmulticast mode [ 465.619110][T19907] validate_nla: 1 callbacks suppressed [ 465.619134][T19907] netlink: 'syz.3.3710': attribute type 13 has an invalid length. [ 465.720122][T19907] gretap0: refused to change device tx_queue_len [ 465.734701][T19907] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 465.929559][T19919] "syz.1.3714" (19919) uses obsolete ecb(arc4) skcipher [ 466.100325][T19932] netlink: 'syz.0.3719': attribute type 1 has an invalid length. [ 466.148568][T19932] gretap1: entered promiscuous mode [ 466.168653][T19932] macvlan2: entered promiscuous mode [ 466.174965][T19932] macvlan2: entered allmulticast mode [ 466.182652][T19932] bond2: entered promiscuous mode [ 466.188721][T19932] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 466.191836][T19935] netlink: 'syz.2.3720': attribute type 1 has an invalid length. [ 466.206032][T19932] bond2: left promiscuous mode [ 466.556605][T19949] vxcan1 speed is unknown, defaulting to 1000 [ 466.910502][T19970] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3731'. [ 467.260827][T19976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3732'. [ 467.308244][T19976] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 467.559640][T19998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.733020][T20003] "syz.2.3740" (20003) uses obsolete ecb(arc4) skcipher [ 467.976109][T20021] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3747'. [ 467.991839][T20025] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3747'. [ 468.096304][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3749'. [ 468.119605][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 468.127720][ C0] lec:lec_tx_timeout: lec0 [ 468.133085][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 468.407204][T20049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3756'. [ 468.723129][T20070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3763'. [ 468.900495][ T1702] block nbd1: Possible stuck request ffff888026a28000: control (read@0,1024B). Runtime 120 seconds [ 468.911444][ T1702] block nbd1: Possible stuck request ffff888026a28200: control (read@1024,1024B). Runtime 120 seconds [ 468.922713][ T1702] block nbd1: Possible stuck request ffff888026a28400: control (read@2048,1024B). Runtime 120 seconds [ 468.933830][ T1702] block nbd1: Possible stuck request ffff888026a28600: control (read@3072,1024B). Runtime 120 seconds [ 469.021451][T20091] atomic_op ffff88804ccfd198 conn xmit_atomic 0000000000000000 [ 469.029185][T20091] atomic_op ffff88804ccff198 conn xmit_atomic 0000000000000000 [ 469.098704][T20088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3767'. [ 469.201442][T20101] "syz.1.3771" (20101) uses obsolete ecb(arc4) skcipher [ 469.339170][T20108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.362911][T20108] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.375114][T20108] bond1: (slave macvlan2): making interface the new active one [ 469.384975][T20108] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 469.403118][T20108] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a032:37ff:fe5e:7a14 error=-28 [ 469.589969][T20122] IPVS: set_ctl: invalid protocol: 78 172.20.20.187:20004 [ 469.830424][T20108] infiniband syz0: set down [ 469.837503][T20108] infiniband syz0: added bond0 [ 469.892595][T20142] sock: sock_set_timeout: `syz.2.3782' (pid 20142) tries to set negative timeout [ 469.912286][T20108] RDS/IB: syz0: added [ 469.918410][T20108] smc: adding ib device syz0 with port count 1 [ 469.925227][T20108] smc: ib device syz0 port 1 has no pnetid [ 470.110946][T20148] __nla_validate_parse: 2 callbacks suppressed [ 470.110968][T20148] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3784'. [ 470.250009][T20150] x_tables: duplicate entry at hook 3 [ 470.261831][T20150] netlink: 'syz.1.3784': attribute type 16 has an invalid length. [ 470.299367][T20150] netlink: 'syz.1.3784': attribute type 17 has an invalid length. [ 470.512435][T20150] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.519712][T20150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.527510][T20150] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.534777][T20150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.551911][T20150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.829831][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'. [ 470.891881][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'. [ 471.078825][T20159] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3786'. [ 472.673426][T20128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.853334][T20166] netlink: 'syz.3.3790': attribute type 10 has an invalid length. [ 472.886387][T20166] veth0_vlan: left promiscuous mode [ 472.907493][T20175] Bluetooth: MGMT ver 1.23 [ 472.950203][T20166] veth0_vlan: entered promiscuous mode [ 473.010811][T20166] team0: Device veth0_vlan failed to register rx_handler [ 473.072104][T20167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3791'. [ 473.184497][T20194] "syz.2.3795" (20194) uses obsolete ecb(arc4) skcipher [ 473.220882][T20197] "syz.0.3794" (20197) uses obsolete ecb(arc4) skcipher [ 473.509717][T20221] ip6gretap1: entered promiscuous mode [ 473.515548][T20221] ip6gretap1: entered allmulticast mode [ 473.535867][T20221] pim6reg1: entered promiscuous mode [ 473.541528][T20221] pim6reg1: entered allmulticast mode [ 473.683293][T20228] tipc: Started in network mode [ 473.688339][T20228] tipc: Node identity 12fae51b98c6, cluster identity 4711 [ 473.697529][T20228] tipc: Enabled bearer , priority 0 [ 473.767303][T20228] syzkaller0: entered promiscuous mode [ 473.773304][T20228] syzkaller0: entered allmulticast mode [ 473.780049][T20228] tipc: Resetting bearer [ 473.790454][T20227] tipc: Resetting bearer [ 473.921168][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 473.929316][ C0] lec:lec_tx_timeout: lec0 [ 473.934615][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.215812][T20253] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3809'. [ 474.493395][T20265] openvswitch: netlink: Key type 31 is not supported [ 475.688934][T20227] tipc: Disabling bearer [ 475.717899][T20263] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.728288][T20263] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.809979][T19101] tipc: Node number set to 2319246619 [ 475.921483][T20263] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.933564][ T11] block nbd2: Possible stuck request ffff888026a70000: control (read@0,1024B). Runtime 30 seconds [ 475.944356][ T11] block nbd2: Possible stuck request ffff888026a70200: control (read@1024,1024B). Runtime 30 seconds [ 475.956514][ T11] block nbd2: Possible stuck request ffff888026a70400: control (read@2048,1024B). Runtime 30 seconds [ 475.965097][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.971648][ T11] block nbd2: Possible stuck request ffff888026a70600: control (read@3072,1024B). Runtime 30 seconds [ 475.988368][T20263] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.059684][T20288] "syz.2.3817" (20288) uses obsolete ecb(arc4) skcipher [ 476.071889][T20263] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.094617][T20263] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.188860][T20263] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.200462][T20263] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.272599][T20301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3819'. [ 476.282936][T20301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3819'. [ 476.305913][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3820'. [ 476.350759][T20296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.363415][T20296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.395688][T20301] gretap0: entered promiscuous mode [ 476.404662][T20301] gretap0: left promiscuous mode [ 476.492900][T20296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.504139][T20296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.544862][T11052] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.553471][T11052] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.624036][T20296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.634568][T20296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.671218][T11052] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.691096][T11052] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.772193][T20296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.783482][T20296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.822160][T11050] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.832045][T11050] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.853572][T11050] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.865939][T11050] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.990205][T20316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3825'. [ 477.027095][T11050] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.049665][T11050] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.080365][T20322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3827'. [ 477.118953][T11062] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.133148][T11062] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.171984][T20322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3827'. [ 477.175393][T11062] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.205927][T11062] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.223427][T20322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3827'. [ 477.234301][T20322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3827'. [ 477.264721][T20322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3827'. [ 477.266488][T11058] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.301352][T11058] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.327196][T20322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3827'. [ 477.536953][T20346] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 477.538915][T20344] sctp: [Deprecated]: syz.3.3834 (pid 20344) Use of int in maxseg socket option. [ 477.538915][T20344] Use struct sctp_assoc_value instead [ 477.653016][T20353] "syz.2.3837" (20353) uses obsolete ecb(arc4) skcipher [ 477.927543][T20368] netlink: 'syz.3.3843': attribute type 1 has an invalid length. [ 478.233597][T20385] team_slave_0: entered promiscuous mode [ 478.239404][T20385] team_slave_1: entered promiscuous mode [ 478.250916][T20385] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 478.274901][T20385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.415250][T20389] netlink: 'syz.3.3849': attribute type 9 has an invalid length. [ 478.633122][T20398] sctp: [Deprecated]: syz.3.3852 (pid 20398) Use of int in max_burst socket option. [ 478.633122][T20398] Use struct sctp_assoc_value instead [ 478.659969][T20400] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 478.915870][T20404] tipc: Failed to remove unknown binding: 66,0,0/0:1495321215/1495321217 [ 478.928940][T20410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 478.959473][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 478.967567][ C0] lec:lec_tx_timeout: lec0 [ 478.970959][T20404] tipc: Failed to remove unknown binding: 66,0,0/0:1495321215/1495321216 [ 479.019829][T20404] tipc: Failed to remove unknown binding: 66,0,0/0:1495321215/1495321217 [ 479.039956][T20404] tipc: Failed to remove unknown binding: 66,0,0/0:1495321215/1495321216 [ 479.447151][T20442] netlink: 'syz.4.3866': attribute type 25 has an invalid length. [ 479.508926][T20446] netlink: 'syz.1.3863': attribute type 10 has an invalid length. [ 479.913729][T20468] netlink: 'syz.3.3872': attribute type 4 has an invalid length. [ 479.978878][T20468] `: renamed from bond0 (while UP) [ 480.139155][T20481] syzkaller0: entered promiscuous mode [ 480.158795][T20481] syzkaller0: entered allmulticast mode [ 480.188225][T20468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.214111][T20468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.216222][T20487] openvswitch: netlink: IP tunnel dst address not specified [ 480.443724][ T30] audit: type=1800 audit(1771210809.577:6): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3880" name="memory.events" dev="tmpfs" ino=1032 res=0 errno=0 [ 480.468253][ T30] audit: type=1804 audit(1771210809.597:7): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3880" name="/newroot/200/memory.events" dev="tmpfs" ino=1032 res=1 errno=0 [ 480.857006][T20522] syzkaller0: entered promiscuous mode [ 480.863005][T20522] syzkaller0: entered allmulticast mode [ 481.096056][T20532] syzkaller1: entered allmulticast mode [ 481.221574][T20537] syzkaller0: entered promiscuous mode [ 481.228452][T20537] syzkaller0: entered allmulticast mode [ 481.330805][T20539] __nla_validate_parse: 39 callbacks suppressed [ 481.330825][T20539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3894'. [ 481.347457][T20540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3894'. [ 481.574643][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 481.618650][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3897'. [ 481.735802][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 481.810613][T20559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3901'. [ 481.972173][T20565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3903'. [ 482.066240][T20570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3904'. [ 482.410594][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3910'. [ 482.429590][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3910'. [ 482.996616][T20623] syzkaller1: entered allmulticast mode [ 483.082162][T12458] IPVS: starting estimator thread 0... [ 483.125251][T20627] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 483.134039][T20630] netlink: 'syz.1.3927': attribute type 4 has an invalid length. [ 483.170143][T20628] IPVS: using max 33 ests per chain, 79200 per kthread [ 483.632066][T20653] syzkaller0: entered promiscuous mode [ 483.646985][T20653] syzkaller0: entered allmulticast mode [ 483.663118][T20653] netlink: 'syz.4.3934': attribute type 3 has an invalid length. [ 484.076193][T20686] x_tables: unsorted underflow at hook 1 [ 485.485356][T20689] vxcan1 speed is unknown, defaulting to 1000 [ 485.882632][T20714] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 485.999243][T20721] syzkaller0: entered promiscuous mode [ 486.034560][T20721] syzkaller0: entered allmulticast mode [ 486.066957][T20727] netlink: 'syz.4.3955': attribute type 4 has an invalid length. [ 486.252593][T20727] `: renamed from bond0 [ 486.620436][T20745] __nla_validate_parse: 15 callbacks suppressed [ 486.620456][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3962'. [ 486.658145][T20745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3962'. [ 486.696233][T20745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3962'. [ 486.728602][T20745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3962'. [ 486.972912][T20761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.112957][T20767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.353836][T20778] pimreg: entered allmulticast mode [ 487.470372][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3972'. [ 487.872100][T20803] bond0 (unregistering): Released all slaves [ 488.003976][T20803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3978'. [ 488.139611][T20819] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3983'. [ 488.157622][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3983'. [ 488.410724][T20830] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3986'. [ 488.460054][T20830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3986'. [ 488.481867][T20830] tipc: Invalid UDP bearer configuration [ 488.481929][T20830] tipc: Enabling of bearer rejected, failed to enable media [ 488.531591][T20835] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 488.707739][T20850] ipt_REJECT: TCP_RESET invalid for non-tcp [ 488.904103][T20859] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 488.980962][T20862] netlink: 'syz.1.3995': attribute type 1 has an invalid length. [ 489.010713][T20862] netlink: 'syz.1.3995': attribute type 1 has an invalid length. [ 489.038955][T20862] netlink: 'syz.1.3995': attribute type 1 has an invalid length. [ 489.053162][T20862] netlink: 'syz.1.3995': attribute type 2 has an invalid length. [ 489.205955][T20876] netlink: 'syz.3.4000': attribute type 7 has an invalid length. [ 489.248144][T20877] netlink: 'syz.3.4000': attribute type 7 has an invalid length. [ 489.441879][T20885] netlink: 'syz.2.4003': attribute type 1 has an invalid length. [ 489.461143][T20885] netlink: 'syz.2.4003': attribute type 2 has an invalid length. [ 489.471973][T20885] netlink: 'syz.2.4003': attribute type 1 has an invalid length. [ 489.494191][T20885] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 489.675412][T20902] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 489.776813][T20902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.276287][T20938] syzkaller0: entered promiscuous mode [ 490.282012][T20938] syzkaller0: entered allmulticast mode [ 490.290743][T20938] 0: reclassify loop, rule prio 0, protocol 800 [ 490.897534][T20975] tun0: tun_chr_ioctl cmd 1074025675 [ 490.912749][T20975] tun0: persist disabled [ 490.958465][T20985] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20001 [ 491.001741][T20985] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 491.230445][T21000] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 491.282182][T20993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.358601][T21001] syzkaller0: entered promiscuous mode [ 491.386604][T21001] syzkaller0: entered allmulticast mode [ 491.406841][T11535] lec:lec_start_xmit: lec0:No lecd attached [ 491.427259][T20993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.564741][T20993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.772745][T20993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.787771][T21022] __nla_validate_parse: 15 callbacks suppressed [ 491.787833][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4044'. [ 491.890309][T21026] team0: Port device dummy0 added [ 492.032536][T21032] `: (slave bond_slave_0): Releasing backup interface [ 492.063966][T21032] bond_slave_0: left promiscuous mode [ 492.116207][T21039] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4051'. [ 492.130774][T21032] `: (slave bond_slave_1): Releasing backup interface [ 492.161658][T21032] bond_slave_1: left promiscuous mode [ 492.198108][T21032] team0: Port device team_slave_0 removed [ 492.234577][T21032] team0: Port device team_slave_1 removed [ 492.248711][T21032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.256927][T21032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.266581][T21032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.276454][T21032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.288539][T21032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.332433][T11062] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.382522][T21048] +: renamed from syzkaller0 [ 492.401323][T11062] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.462412][T11052] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.505810][T11058] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.612476][T21058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.632871][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4057'. [ 492.684641][T21065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4059'. [ 492.802941][T21071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.043987][T21088] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4066'. [ 493.057375][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4065'. [ 493.073503][T21088] openvswitch: netlink: Missing key (keys=40, expected=100) [ 493.226017][T21101] sch_fq: defrate 0 ignored. [ 493.246078][T21101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4069'. [ 493.468387][T21112] netlink: zone id is out of range [ 493.474445][T21112] netlink: get zone limit has 4 unknown bytes [ 493.633316][T21117] bond1: entered promiscuous mode [ 493.638839][T21117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.662734][T21123] bond1: (slave bridge3): making interface the new active one [ 493.670411][T21123] bridge3: entered promiscuous mode [ 493.676853][T21123] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 493.686872][T21114] syzkaller0: entered promiscuous mode [ 493.709640][T21114] syzkaller0: entered allmulticast mode [ 493.991207][T21136] validate_nla: 4 callbacks suppressed [ 493.991225][T21136] netlink: 'syz.1.4080': attribute type 5 has an invalid length. [ 494.017739][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4080'. [ 494.029218][T21136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4080'. [ 494.312305][T11058] tipc: Subscription rejected, illegal request [ 494.431597][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4090'. [ 494.511726][T21164] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 494.528380][T21164] bond4 (unregistering): Released all slaves [ 494.814637][T21182] netlink: 'syz.4.4097': attribute type 1 has an invalid length. [ 494.843940][T21182] bond0: entered promiscuous mode [ 494.850146][T21182] bond0: entered allmulticast mode [ 494.855698][T21182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.028717][T21188] tipc: Started in network mode [ 495.035372][T21188] tipc: Node identity ee4fdb627897, cluster identity 4711 [ 495.046808][T21188] tipc: Enabled bearer , priority 11 [ 495.155723][T21190] vxcan1 speed is unknown, defaulting to 1000 [ 495.927357][T21221] veth1_macvtap: left promiscuous mode [ 496.166103][ T5953] tipc: Node number set to 2530794338 [ 496.336532][T21237] syzkaller0: entered promiscuous mode [ 496.345889][T21237] syzkaller0: entered allmulticast mode [ 496.959340][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 496.967435][ C0] lec:lec_tx_timeout: lec0 [ 497.160994][T21275] __nla_validate_parse: 7 callbacks suppressed [ 497.161014][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4123'. [ 497.439673][ T5141] Bluetooth: hci0: command 0x0405 tx timeout [ 497.466924][T21289] veth5: entered allmulticast mode [ 497.540146][T21289] veth7: entered allmulticast mode [ 497.621231][T21289] veth9: entered allmulticast mode [ 497.688618][T21289] veth11: entered allmulticast mode [ 497.754139][T21289] veth13: entered allmulticast mode [ 497.781778][T21289] veth15: entered allmulticast mode [ 497.811236][T21289] veth17: entered allmulticast mode [ 497.818060][T21299] syzkaller0: entered promiscuous mode [ 497.832580][T21299] syzkaller0: entered allmulticast mode [ 497.893299][T21289] veth19: entered allmulticast mode [ 497.918409][T21289] veth21: entered allmulticast mode [ 497.945944][T21289] veth23: entered allmulticast mode [ 497.972210][T21289] veth25: entered allmulticast mode [ 498.037391][T21289] veth27: entered allmulticast mode [ 498.104718][T21289] veth29: entered allmulticast mode [ 498.126438][T21289] veth31: entered allmulticast mode [ 498.145588][T21289] veth33: entered allmulticast mode [ 498.172607][T21321] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 498.252812][T21289] veth35: entered allmulticast mode [ 498.331046][T21329] "syz.3.4138" (21329) uses obsolete ecb(arc4) skcipher [ 498.703419][T21351] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4144'. [ 498.713058][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 498.724526][T21351] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4144'. [ 498.753991][T21351] netlink: 'syz.1.4144': attribute type 2 has an invalid length. [ 498.772104][T21350] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 498.789522][T21351] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4144'. [ 498.969783][ T1702] block nbd1: Possible stuck request ffff888026a28000: control (read@0,1024B). Runtime 150 seconds [ 498.981405][ T1702] block nbd1: Possible stuck request ffff888026a28200: control (read@1024,1024B). Runtime 150 seconds [ 498.993373][ T1702] block nbd1: Possible stuck request ffff888026a28400: control (read@2048,1024B). Runtime 150 seconds [ 499.004627][ T1702] block nbd1: Possible stuck request ffff888026a28600: control (read@3072,1024B). Runtime 150 seconds [ 499.108416][T21377] netlink: 'syz.0.4151': attribute type 13 has an invalid length. [ 499.123392][T21377] netlink: 'syz.0.4151': attribute type 58 has an invalid length. [ 499.143679][T21377] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4151'. [ 499.290439][T21391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4156'. [ 499.339222][T21388] netlink: 'syz.4.4154': attribute type 1 has an invalid length. [ 499.435975][T21388] bond2: entered promiscuous mode [ 499.458488][T21388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.492237][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4156'. [ 499.641567][T21416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.649176][T21416] bond0: (slave ip6tnl4): The slave device specified does not support setting the MAC address [ 499.675750][T21416] bond0: (slave ip6tnl4): Error -95 calling set_mac_address [ 499.748908][T21429] "syz.1.4165" (21429) uses obsolete ecb(arc4) skcipher [ 499.796129][T21424] bridge0: entered promiscuous mode [ 499.801664][T21424] bridge0: entered allmulticast mode [ 499.858491][T21434] netlink: 'syz.3.4166': attribute type 1 has an invalid length. [ 499.995358][T21440] tipc: Enabled bearer , priority 0 [ 500.015402][T21440] syzkaller0: entered promiscuous mode [ 500.031073][T21440] syzkaller0: entered allmulticast mode [ 500.066858][T21440] tipc: Resetting bearer [ 500.077773][T21439] tipc: Resetting bearer [ 500.095336][T21439] tipc: Disabling bearer [ 500.109696][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4169'. [ 500.351261][T21452] pim6reg1: entered promiscuous mode [ 500.356655][T21452] pim6reg1: entered allmulticast mode [ 500.420943][T21460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4173'. [ 500.553320][T21467] openvswitch: netlink: Message has -2 unknown bytes. [ 500.720851][T21477] netlink: 'syz.1.4179': attribute type 1 has an invalid length. [ 500.780779][T21477] bond2: entered promiscuous mode [ 500.789122][T21477] bond2: entered allmulticast mode [ 500.796517][T21477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.805837][T21483] netlink: 'syz.0.4181': attribute type 1 has an invalid length. [ 500.825309][T21486] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 500.866582][T21477] bridge4: entered promiscuous mode [ 500.873650][T21488] openvswitch: netlink: IP tunnel dst address not specified [ 500.880072][T21477] bridge4: entered allmulticast mode [ 500.890302][T11062] wlan1: Trigger new scan to find an IBSS to join [ 500.894000][T11052] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 500.920989][T21477] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 501.029976][T11058] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 501.106328][T21501] IPVS: set_ctl: invalid protocol: 50 172.20.20.56:20001 [ 501.253576][T21513] netlink: 'syz.1.4191': attribute type 26 has an invalid length. [ 501.283521][T21513] netlink: 'syz.1.4191': attribute type 26 has an invalid length. [ 501.307053][T21518] netlink: 'syz.1.4191': attribute type 26 has an invalid length. [ 501.325700][T21509] syz_tun: entered promiscuous mode [ 501.334747][T21518] netlink: 'syz.1.4191': attribute type 26 has an invalid length. [ 501.344168][T21509] syz_tun: left promiscuous mode [ 501.555272][T21527] openvswitch: netlink: Flow key attr not present in new flow. [ 502.214352][T21578] __nla_validate_parse: 21 callbacks suppressed [ 502.214373][T21578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4208'. [ 502.322633][T21586] netlink: 146076 bytes leftover after parsing attributes in process `syz.1.4214'. [ 502.337100][T21587] erspan0: entered allmulticast mode [ 502.641442][T21608] xt_l2tp: invalid flags combination: 8 [ 502.795476][T21614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.962663][T21623] syzkaller0: entered promiscuous mode [ 502.968281][T21623] syzkaller0: entered allmulticast mode [ 503.035699][T21624] veth1_to_team: entered promiscuous mode [ 503.043915][T21624] veth1_to_team: entered allmulticast mode [ 503.125405][T21636] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4230'. [ 503.146716][T21636] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4230'. [ 503.157341][T21640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4228'. [ 503.167257][T21636] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4230'. [ 503.176683][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4229'. [ 503.227643][T19101] IPVS: starting estimator thread 0... [ 503.318210][T21646] tipc: Enabled bearer , priority 10 [ 503.332624][T21644] IPVS: using max 27 ests per chain, 64800 per kthread [ 503.392807][T21646] veth7: entered allmulticast mode [ 503.515042][T21654] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4235'. [ 503.524999][T21654] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4235'. [ 503.552968][T21654] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 503.602521][T21657] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 503.620196][ T5190] udevd[5190]: worker [14602] /devices/virtual/block/nbd1 is taking a long time [ 503.758628][T21665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4240'. [ 503.917453][T21670] bond3: option fail_over_mac: invalid value (16) [ 503.924867][T11059] wlan1: Trigger new scan to find an IBSS to join [ 503.947831][T21670] bond3 (unregistering): Released all slaves [ 504.281207][T21699] "syz.4.4249" (21699) uses obsolete ecb(arc4) skcipher [ 505.706802][T21791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.790389][T21793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.818702][T21793] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 505.845192][T21793] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 505.856192][T21808] Unsupported ieee802154 address type: 0 [ 505.903030][T21757] syzkaller0: entered promiscuous mode [ 505.909240][T21757] syzkaller0: entered allmulticast mode [ 506.009953][ T11] block nbd2: Possible stuck request ffff888026a70000: control (read@0,1024B). Runtime 60 seconds [ 506.021306][ T11] block nbd2: Possible stuck request ffff888026a70200: control (read@1024,1024B). Runtime 60 seconds [ 506.033294][ T11] block nbd2: Possible stuck request ffff888026a70400: control (read@2048,1024B). Runtime 60 seconds [ 506.045146][ T11] block nbd2: Possible stuck request ffff888026a70600: control (read@3072,1024B). Runtime 60 seconds [ 506.180392][T21818] netem: unknown loss type 0 [ 506.185468][T21818] netem: change failed [ 506.296797][T21824] dvmrp0: entered allmulticast mode [ 506.413602][T21831] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 506.482088][T21833] validate_nla: 7 callbacks suppressed [ 506.482106][T21833] netlink: 'syz.2.4288': attribute type 2 has an invalid length. [ 506.649052][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.649697][ T5190] udevd[5190]: worker [16886] /devices/virtual/block/nbd2 is taking a long time [ 506.655959][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.673950][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 506.817405][T21857] xt_TCPMSS: Only works on TCP SYN packets [ 506.831742][T21859] netlink: 'syz.4.4297': attribute type 1 has an invalid length. [ 506.856454][T21857] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 506.877394][T21859] syz.4.4297 (21859) used obsolete PPPIOCDETACH ioctl [ 506.889436][T11058] wlan1: Trigger new scan to find an IBSS to join [ 507.273869][T21882] ip6gre1: entered allmulticast mode [ 507.393269][T21889] tipc: Enabled bearer , priority 0 [ 507.488821][T21898] netlink: 'syz.4.4309': attribute type 1 has an invalid length. [ 507.497412][T21898] __nla_validate_parse: 12 callbacks suppressed [ 507.497431][T21898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4309'. [ 507.550472][T21889] syzkaller0: entered promiscuous mode [ 507.556077][T21889] syzkaller0: entered allmulticast mode [ 507.570623][T21889] tipc: Resetting bearer [ 507.590131][T21899] team_slave_0: left promiscuous mode [ 507.607062][T21899] team_slave_1: left promiscuous mode [ 507.651470][T21899] team0 (unregistering): Port device team_slave_0 removed [ 507.689110][T21899] team0 (unregistering): Port device team_slave_1 removed [ 507.792974][T11050] wlan1: Creating new IBSS network, BSSID 2a:dd:07:cf:bd:20 [ 507.802785][T21888] tipc: Resetting bearer [ 507.886420][T21910] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.936811][T21921] netlink: 'syz.2.4317': attribute type 10 has an invalid length. [ 508.018413][T21927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.064681][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.095163][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.125065][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.152012][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.170087][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.180120][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.190281][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.199950][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.209535][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 508.391365][T21935] netlink: 'syz.0.4319': attribute type 5 has an invalid length. [ 509.656235][T21888] tipc: Disabling bearer [ 509.669522][T21910] veth0: entered promiscuous mode [ 509.678437][T21921] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 509.706214][T21930] veth0: left promiscuous mode [ 509.730764][T21935] geneve2: entered promiscuous mode [ 509.749997][T21935] geneve2: entered allmulticast mode [ 509.778511][T11050] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 509.811787][T11064] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 509.830660][T11064] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 509.839021][T11064] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 510.066813][T21958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 510.073834][T21958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 510.132231][T21959] netlink: 'syz.1.4327': attribute type 30 has an invalid length. [ 510.225906][T21967] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 510.739011][T21996] syzkaller0: entered promiscuous mode [ 510.745178][T21996] syzkaller0: entered allmulticast mode [ 511.919613][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 511.927778][ C0] lec:lec_tx_timeout: lec0 [ 512.350676][T22000] syzkaller0: entered promiscuous mode [ 512.357631][T22000] syzkaller0: entered allmulticast mode [ 512.558194][T22027] netlink: 'syz.1.4340': attribute type 1 has an invalid length. [ 512.587606][T22022] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 512.610088][T22035] netlink: 'syz.4.4339': attribute type 1 has an invalid length. [ 512.652958][T22038] __nla_validate_parse: 29 callbacks suppressed [ 512.652979][T22038] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4340'. [ 512.681846][T22027] bond3: entered promiscuous mode [ 512.686956][T22027] bond3: entered allmulticast mode [ 512.692871][T22027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.725089][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4340'. [ 512.759645][T22036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4341'. [ 512.774415][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4343'. [ 512.803315][T22044] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 512.829424][T22044] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 512.860604][T22044] gretap1: entered promiscuous mode [ 512.871812][T22044] gretap1: entered allmulticast mode [ 512.913828][T22049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4345'. [ 512.929819][T22050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4346'. [ 512.939793][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4346'. [ 512.966101][T22049] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4345'. [ 513.479878][T22077] block nbd3: server does not support multiple connections per device. [ 513.491125][T22077] block nbd3: shutting down sockets [ 513.524861][T22083] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4354'. [ 513.540966][T22089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4356'. [ 513.632763][T22089] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.710869][T22083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.725984][T22098] bridge0: entered allmulticast mode [ 513.739716][T22082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.849551][ T5141] Bluetooth: hci5: command 0x040f tx timeout [ 514.006216][T22117] sctp: [Deprecated]: syz.4.4367 (pid 22117) Use of int in maxseg socket option. [ 514.006216][T22117] Use struct sctp_assoc_value instead [ 514.021954][T22113] netlink: 'syz.2.4363': attribute type 4 has an invalid length. [ 514.113454][T22123] bridge0: entered promiscuous mode [ 514.137629][T22123] macsec1: entered promiscuous mode [ 514.152590][T22123] macsec1: entered allmulticast mode [ 514.158788][T22123] bridge0: port 1(macsec1) entered blocking state [ 514.183185][T22123] bridge0: port 1(macsec1) entered disabled state [ 514.207693][T22123] bridge0: left promiscuous mode [ 514.419543][T22141] netlink: 'syz.2.4374': attribute type 10 has an invalid length. [ 514.493687][T22141] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 514.785557][T22161] bridge8: entered promiscuous mode [ 514.791835][T22161] bridge8: entered allmulticast mode [ 515.407101][T22189] syzkaller0: entered promiscuous mode [ 515.413595][T22189] syzkaller0: entered allmulticast mode [ 515.783602][T22196] macvtap1: entered promiscuous mode [ 515.789092][T22196] vlan0: entered promiscuous mode [ 515.794697][T22196] macvtap1: entered allmulticast mode [ 515.800380][T22196] vlan0: entered allmulticast mode [ 515.805658][T22196] veth0_vlan: entered allmulticast mode [ 515.813343][T22197] tipc: Enabling of bearer rejected, failed to enable media [ 515.945764][T22208] netlink: 'syz.2.4398': attribute type 32 has an invalid length. [ 515.970507][T22209] netlink: 'syz.2.4398': attribute type 32 has an invalid length. [ 516.622789][T22259] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 516.729941][T22265] nbd: must specify a size in bytes for the device [ 516.836719][T22271] "syz.0.4414" (22271) uses obsolete ecb(arc4) skcipher [ 517.363778][T22293] netlink: 'syz.1.4422': attribute type 1 has an invalid length. [ 517.432971][T22293] 8021q: adding VLAN 0 to HW filter on device bond4 [ 517.515841][T22305] bond4: (slave gretap1): making interface the new active one [ 517.528635][T22305] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 517.623179][T22320] ipt_REJECT: ECHOREPLY no longer supported. [ 517.650422][T22320] pim6reg1: entered promiscuous mode [ 517.655852][T22320] pim6reg1: entered allmulticast mode [ 517.774492][T22325] __nla_validate_parse: 24 callbacks suppressed [ 517.774514][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4431'. [ 518.022709][T22339] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4434'. [ 518.044894][T22339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4434'. [ 518.059432][T22339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4434'. [ 518.407201][T22331] "syz.3.4432" (22331) uses obsolete ecb(arc4) skcipher [ 518.444916][T22357] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4441'. [ 518.461499][T22358] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20002 [ 518.493306][T22362] netlink: 'syz.4.4442': attribute type 1 has an invalid length. [ 518.503244][T22352] bond4: Unable to set up delay as MII monitoring is disabled [ 518.514053][T22352] bond4 (unregistering): Released all slaves [ 518.576871][T22363] syzkaller0: entered promiscuous mode [ 518.584645][T22363] syzkaller0: entered allmulticast mode [ 518.619428][T22366] netlink: 'syz.2.4443': attribute type 29 has an invalid length. [ 518.667159][T22367] bond5: (slave gretap1): making interface the new active one [ 518.722017][T22367] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 518.736117][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4442'. [ 518.765290][T22362] gretap2: entered promiscuous mode [ 518.775108][T22362] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 518.971716][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 519.111487][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4447'. [ 519.142309][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'. [ 519.184049][T22374] sctp: [Deprecated]: syz.0.4445 (pid 22374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.184049][T22374] Use struct sctp_sack_info instead [ 519.213424][T22393] vlan2: entered promiscuous mode [ 519.220281][T22393] vlan2: entered allmulticast mode [ 519.225580][T22393] hsr_slave_1: entered allmulticast mode [ 519.399248][T22407] netlink: 'syz.4.4452': attribute type 2 has an invalid length. [ 519.407665][T22407] netlink: 'syz.4.4452': attribute type 1 has an invalid length. [ 520.986907][T22425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4457'. [ 522.107325][T22392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.336480][T22439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4462'. [ 522.459524][T22450] "syz.4.4464" (22450) uses obsolete ecb(arc4) skcipher [ 522.526561][T22450] netlink: 'syz.4.4464': attribute type 5 has an invalid length. [ 522.536970][T22457] tipc: Enabling of bearer rejected, already enabled [ 522.961936][T22477] bond5 (unregistering): Released all slaves [ 523.199036][T22491] __nla_validate_parse: 5 callbacks suppressed [ 523.199057][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4474'. [ 523.230624][T22491] dvmrp6: entered allmulticast mode [ 523.371041][T22496] nbd: must specify an index to disconnect [ 523.514277][T22502] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4478'. [ 523.683150][T22509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.748854][T22516] syzkaller1: entered promiscuous mode [ 523.770175][T22516] syzkaller1: entered allmulticast mode [ 523.860652][T22520] netlink: 'syz.1.4484': attribute type 1 has an invalid length. [ 524.283828][T22553] tipc: Started in network mode [ 524.288916][T22553] tipc: Node identity 9e3d374d35ab, cluster identity 4711 [ 524.297500][T22553] tipc: Enabled bearer , priority 0 [ 524.305353][T22553] syzkaller0: entered promiscuous mode [ 524.311366][T22553] syzkaller0: entered allmulticast mode [ 524.366387][T22553] tipc: Resetting bearer [ 524.381501][T22559] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4496'. [ 524.400561][T22553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 524.418767][T22559] syzkaller0: entered promiscuous mode [ 524.438058][T22559] syzkaller0: entered allmulticast mode [ 524.447754][T22553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.468787][T22553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.536033][T22552] tipc: Resetting bearer [ 524.580070][T22552] tipc: Disabling bearer [ 524.782729][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4501'. [ 525.005455][T22580] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4504'. [ 525.057397][T22580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4504'. [ 525.145649][T22582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4504'. [ 525.337128][T22593] netlink: 'syz.4.4507': attribute type 1 has an invalid length. [ 525.397342][T22593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 525.424449][T22591] bond6: (slave geneve2): making interface the new active one [ 525.433871][T22591] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 525.452234][T11062] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.483846][T11062] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.536769][T22590] syzkaller0: entered promiscuous mode [ 525.546848][T22590] syzkaller0: entered allmulticast mode [ 525.588448][T11062] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.611620][T11062] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.740963][T22614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4512'. [ 525.857616][T22624] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4516'. [ 525.911645][T22624] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.919044][T22624] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.166908][T22649] netlink: 'syz.4.4522': attribute type 11 has an invalid length. [ 526.248873][T22651] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 526.588601][T22659] bond5: (slave veth5): Enslaving as an active interface with a down link [ 526.687587][T22674] bond5: (slave veth7): Enslaving as an active interface with a down link [ 527.073027][T22702] netlink: 'syz.3.4537': attribute type 9 has an invalid length. [ 527.942580][T22766] vxcan1 speed is unknown, defaulting to 1000 [ 528.277532][T22792] "syz.2.4559" (22792) uses obsolete ecb(arc4) skcipher [ 528.358262][T22790] __nla_validate_parse: 4 callbacks suppressed [ 528.358281][T22790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'. [ 528.381444][T22797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4561'. [ 528.474712][T22801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4562'. [ 528.663619][T22811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 528.832143][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4566'. [ 528.961097][T22824] block nbd3: Unsupported socket: should be TCP or UNIX. [ 529.059830][ T1702] block nbd1: Possible stuck request ffff888026a28000: control (read@0,1024B). Runtime 180 seconds [ 529.071196][ T1702] block nbd1: Possible stuck request ffff888026a28200: control (read@1024,1024B). Runtime 180 seconds [ 529.083470][ T1702] block nbd1: Possible stuck request ffff888026a28400: control (read@2048,1024B). Runtime 180 seconds [ 529.094676][ T1702] block nbd1: Possible stuck request ffff888026a28600: control (read@3072,1024B). Runtime 180 seconds [ 529.199378][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 529.371450][T22829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4571'. [ 529.423936][T22843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4571'. [ 529.533806][T22829] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 529.588762][T22829] team0: Port device batadv1 added [ 529.816450][T22866] "syz.0.4583" (22866) uses obsolete ecb(arc4) skcipher [ 529.923439][T22874] netlink: 'syz.3.4586': attribute type 1 has an invalid length. [ 529.983171][T22874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.000068][T22874] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 530.052714][T22874] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 530.089561][T11052] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 530.205679][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 530.215929][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 530.341867][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 530.352914][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 530.469783][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 530.486527][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 530.609832][T11050] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 530.627965][T11050] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 530.660160][T22912] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.757977][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 530.795685][T22917] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4600'. [ 530.805047][T22920] "syz.2.4602" (22920) uses obsolete ecb(arc4) skcipher [ 530.812118][T22917] netlink: 'syz.0.4600': attribute type 12 has an invalid length. [ 530.812181][T22917] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4600'. [ 530.839847][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4601'. [ 531.244588][T22941] syzkaller0: entered promiscuous mode [ 531.261541][T22941] syzkaller0: entered allmulticast mode [ 531.470508][T22947] "syz.4.4610" (22947) uses obsolete ecb(arc4) skcipher [ 531.614048][T22958] netlink: 'syz.3.4614': attribute type 11 has an invalid length. [ 531.677213][T12184] IPVS: starting estimator thread 0... [ 531.782958][T22964] IPVS: using max 28 ests per chain, 67200 per kthread [ 531.887980][T22983] xt_l2tp: unknown flags: 10 [ 531.913407][T22983] xt_l2tp: unknown flags: 10 [ 531.991520][T22990] veth0: entered promiscuous mode [ 532.057357][T22989] veth0: left promiscuous mode [ 532.108707][T23003] netlink: 'syz.0.4628': attribute type 10 has an invalid length. [ 532.126586][T23003] team0: Device veth1_macvtap failed to register rx_handler [ 532.621519][T23033] nbd3: detected capacity change from 0 to 127 [ 532.654836][ T5839] block nbd3: Receive control failed (result -104) [ 532.665068][T14817] block nbd3: Send control failed (result -32) [ 532.705035][T14817] block nbd3: Request send failed, requeueing [ 532.764235][ T11] block nbd3: Dead connection, failed to find a fallback [ 532.773120][ T11] block nbd3: shutting down sockets [ 532.778937][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 532.798570][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 532.808095][T14817] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 532.819013][T14817] Buffer I/O error on dev nbd3, logical block 3, async page read [ 533.053624][T23057] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 533.112360][T23065] "syz.1.4644" (23065) uses obsolete ecb(arc4) skcipher [ 533.407845][T23078] __nla_validate_parse: 7 callbacks suppressed [ 533.407867][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4649'. [ 533.548551][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'. [ 533.571137][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'. [ 533.643221][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4652'. [ 534.056721][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 534.221061][T23136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4668'. [ 534.273095][T23142] tipc: Enabled bearer , priority 11 [ 534.319676][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 534.638535][T23161] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.760800][T23167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4679'. [ 534.790170][T23167] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4679'. [ 534.880161][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4679'. [ 534.950267][T23173] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4680'. [ 535.083632][T23182] netlink: 'syz.4.4684': attribute type 12 has an invalid length. [ 535.092648][T23183] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 535.109389][T11058] net_ratelimit: 91 callbacks suppressed [ 535.109411][T11058] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 535.148953][T11058] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.270203][T11064] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 535.289468][T11064] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.410364][T11064] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 535.429958][T11064] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 535.447828][T11064] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.579948][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 535.587837][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.679571][T23210] netlink: 'syz.4.4695': attribute type 10 has an invalid length. [ 535.732805][T23210] bridge_slave_1: entered promiscuous mode [ 535.739851][T11050] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 535.781792][T23210] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 536.081065][ T11] block nbd2: Possible stuck request ffff888026a70000: control (read@0,1024B). Runtime 90 seconds [ 536.092453][ T11] block nbd2: Possible stuck request ffff888026a70200: control (read@1024,1024B). Runtime 90 seconds [ 536.103449][ T11] block nbd2: Possible stuck request ffff888026a70400: control (read@2048,1024B). Runtime 90 seconds [ 536.115870][ T11] block nbd2: Possible stuck request ffff888026a70600: control (read@3072,1024B). Runtime 90 seconds [ 536.290707][T23251] syzkaller1: entered promiscuous mode [ 536.296444][T23251] syzkaller1: entered allmulticast mode [ 536.458961][T23264] veth0: entered promiscuous mode [ 536.488509][T23262] veth0: left promiscuous mode [ 536.797135][T23284] netlink: 'syz.2.4716': attribute type 13 has an invalid length. [ 536.824170][T23284] macvtap0: entered allmulticast mode [ 536.840498][T23284] macvtap0: refused to change device tx_queue_len [ 537.107610][T23298] veth0_to_bond: entered allmulticast mode [ 537.332906][T23324] veth0: entered promiscuous mode [ 537.527551][T23324] veth0: left promiscuous mode [ 537.808154][T23353] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 537.837775][T23356] netlink: 'syz.1.4740': attribute type 1 has an invalid length. [ 537.853780][T11052] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 538.058444][T23361] "syz.1.4741" (23361) uses obsolete ecb(arc4) skcipher [ 538.368634][T11058] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.379300][T11058] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.426506][T11058] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 538.443456][T23374] __nla_validate_parse: 8 callbacks suppressed [ 538.443478][T23374] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4743'. [ 538.457539][T11058] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.480173][T23375] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4743'. [ 538.486027][T11058] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.501434][T11058] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 538.532161][T11058] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.541764][T11058] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.570512][T11058] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 538.600082][T11058] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.608489][T11058] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.637753][T11058] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 538.687508][T23377] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 538.698418][ T30] audit: type=1800 audit(1771210867.817:8): pid=23377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4744" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 538.720209][T23377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 538.740252][T23377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 538.779227][T23377] syz.1.4744 (23377) used greatest stack depth: 17816 bytes left [ 538.811857][T23391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4747'. [ 538.944691][T23395] wireguard0: entered promiscuous mode [ 538.959797][T23395] wireguard0: entered allmulticast mode [ 538.985148][T23395] team0: Device wireguard0 is of different type [ 538.997591][T23403] delete_channel: no stack [ 539.110172][T23409] SET target dimension over the limit! [ 539.263043][T23419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4754'. [ 539.337160][T23421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4756'. [ 539.521187][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 539.527490][T23335] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 539.539384][T23335] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 540.120689][T11062] net_ratelimit: 111 callbacks suppressed [ 540.120713][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 540.136597][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 540.249452][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 540.257563][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 540.369450][T11058] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 540.388651][T11058] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 540.461219][T23335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 540.470116][T23335] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 540.494905][T23433] xt_hashlimit: max too large, truncated to 1048576 [ 540.499868][T11058] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 540.524272][T23335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.540009][T11058] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 540.548469][T23435] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4760'. [ 540.558990][T23335] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 540.624442][T23335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 540.650458][T23335] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 540.680074][T11064] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 540.709792][T11065] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 540.761664][T23335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 540.767635][T23335] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 540.994128][T23446] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4763'. [ 541.568083][T23469] bond0: Error: Cannot enslave bond to itself. [ 541.672375][T23478] netlink: 'syz.0.4770': attribute type 2 has an invalid length. [ 541.708953][T23478] : entered promiscuous mode [ 541.922891][T23490] syzkaller0: entered promiscuous mode [ 541.950671][T23490] syzkaller0: entered allmulticast mode [ 541.992542][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4778'. [ 542.281604][T23508] netlink: 'syz.0.4781': attribute type 1 has an invalid length. [ 542.486007][T23516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.709121][T23538] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4790'. [ 542.974717][T23552] netlink: 'syz.4.4796': attribute type 1 has an invalid length. [ 543.002792][T23552] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4796'. [ 543.409904][T23572] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 543.446727][T23576] block nbd5: Unsupported socket: should be TCP or UNIX. [ 543.475340][T23579] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 543.553001][T23581] netlink: 'syz.3.4806': attribute type 1 has an invalid length. [ 543.609742][T23581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 543.644843][T23591] netlink: 'syz.0.4809': attribute type 21 has an invalid length. [ 543.653871][T23591] __nla_validate_parse: 2 callbacks suppressed [ 543.653890][T23591] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4809'. [ 543.723982][T23593] syzkaller0: entered promiscuous mode [ 543.732127][T23593] syzkaller0: entered allmulticast mode [ 543.780342][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4810'. [ 543.784978][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4807'. [ 543.801588][T23595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4810'. [ 543.852515][T23586] bond6: Invalid ad_actor_system MAC address. [ 543.858832][T23586] bond6: option ad_actor_system: invalid value (1) [ 543.866881][T23602] netlink: 'syz.0.4810': attribute type 1 has an invalid length. [ 543.887840][T23586] bond6 (unregistering): Released all slaves [ 543.921176][ T5190] udevd[5190]: worker [14602] /devices/virtual/block/nbd1 timeout; kill it [ 543.933875][ T5190] udevd[5190]: seq 18531 '/devices/virtual/block/nbd1' killed [ 544.331557][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4819'. [ 544.341781][T23629] ip6gre0: Master is either lo or non-ether device [ 544.482789][T23634] "syz.1.4822" (23634) uses obsolete ecb(arc4) skcipher [ 544.592095][T23645] netlink: 'syz.4.4826': attribute type 39 has an invalid length. [ 544.644881][T23650] netlink: 'syz.4.4826': attribute type 39 has an invalid length. [ 544.827443][T23656] netlink: 'syz.3.4830': attribute type 4 has an invalid length. [ 545.103243][T23666] can: request_module (can-proto-4) failed. [ 545.169476][T11065] net_ratelimit: 99 callbacks suppressed [ 545.169496][T11065] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 545.194160][T11065] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 545.232006][T23681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.283288][T23681] netlink: 'syz.4.4840': attribute type 12 has an invalid length. [ 545.316778][T11065] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 545.317460][T23681] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4840'. [ 545.353235][T11065] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 545.389944][T19028] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 545.422243][T19028] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 545.450080][T19028] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 545.500159][T23694] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4843'. [ 545.571134][T11065] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 545.580085][T11065] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 545.591183][T23699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4846'. [ 545.620451][T23699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4846'. [ 545.662077][T23699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4846'. [ 547.852502][T11062] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.852717][T23766] validate_nla: 6 callbacks suppressed [ 547.852792][T23766] netlink: 'syz.3.4865': attribute type 7 has an invalid length. [ 547.872921][T11062] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.907306][T11062] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.927736][T11062] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.175638][T23790] "syz.0.4873" (23790) uses obsolete ecb(arc4) skcipher [ 548.598136][T23820] bridge5: entered promiscuous mode [ 548.605962][T23820] bridge5: entered allmulticast mode [ 548.627598][T23824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.635108][T23824] IPv6: NLM_F_CREATE should be set when creating new route [ 548.642532][T23824] IPv6: NLM_F_CREATE should be set when creating new route [ 548.650007][T23824] IPv6: NLM_F_CREATE should be set when creating new route [ 548.658860][T23824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.675294][T23817] tipc: Enabled bearer , priority 0 [ 548.717849][T23816] tipc: Resetting bearer [ 548.792478][T23816] tipc: Disabling bearer [ 548.805504][T23833] __nla_validate_parse: 3 callbacks suppressed [ 548.805523][T23833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4885'. [ 548.833038][T23831] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 549.033183][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4888'. [ 549.198724][T23838] hsr_slave_0 (unregistering): left promiscuous mode [ 549.472147][T23861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4896'. [ 549.502065][T23861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4896'. [ 549.517681][T23862] netlink: 'syz.4.4895': attribute type 21 has an invalid length. [ 549.535562][T23862] netlink: 'syz.4.4895': attribute type 22 has an invalid length. [ 549.555083][T23862] netlink: 'syz.4.4895': attribute type 23 has an invalid length. [ 549.582173][T23862] netlink: 'syz.4.4895': attribute type 25 has an invalid length. [ 549.590328][T23862] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4895'. [ 549.601484][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4896'. [ 549.715494][T23874] netlink: 'syz.0.4898': attribute type 4 has an invalid length. [ 549.796117][T23878] ieee802154 phy0 wpan0: encryption failed: -90 [ 549.834722][T23880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4903'. [ 549.836767][T23882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4902'. [ 549.878994][T23880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4903'. [ 549.894621][T23886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4902'. [ 549.917777][T23880] macvlan0: entered promiscuous mode [ 549.963358][T23889] netlink: 'syz.1.4904': attribute type 3 has an invalid length. [ 550.000682][T23895] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 550.029022][T23895] syzkaller0: entered promiscuous mode [ 550.040045][T23895] syzkaller0: entered allmulticast mode [ 550.191244][T11064] net_ratelimit: 152 callbacks suppressed [ 550.191262][T11064] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 550.250368][T11052] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 550.303097][T11064] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 550.328635][T11064] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 550.440419][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 550.450411][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 550.570400][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 550.586243][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 550.720367][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 550.728815][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 550.791023][T23943] blkio.reset_stats is deprecated [ 550.931778][T23957] syzkaller1: entered promiscuous mode [ 550.937326][T23957] syzkaller1: entered allmulticast mode [ 551.042152][T23954] netlink: 'syz.2.4926': attribute type 1 has an invalid length. [ 551.091016][T23954] netlink: 'syz.2.4926': attribute type 3 has an invalid length. [ 551.535855][T23989] xt_cgroup: path and classid specified [ 552.511640][T24043] netlink: 'syz.4.4951': attribute type 4 has an invalid length. [ 552.738150][T24018] bridge10: entered promiscuous mode [ 552.744758][T24018] bridge10: entered allmulticast mode [ 552.946908][T24064] sch_fq: defrate 0 ignored. [ 552.996287][T24078] "syz.0.4959" (24078) uses obsolete ecb(arc4) skcipher [ 553.247216][T24083] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 553.283734][T24083] bond6 (unregistering): Released all slaves [ 553.522982][T24087] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 553.535328][T24087] bond6 (unregistering): Released all slaves [ 553.893952][T24117] __nla_validate_parse: 16 callbacks suppressed [ 553.893971][T24117] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4972'. [ 553.938471][T24120] syzkaller0: entered promiscuous mode [ 553.945983][T24120] syzkaller0: entered allmulticast mode [ 554.055820][T24132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4973'. [ 554.065981][T24132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4973'. [ 554.077021][T24128] netlink: 'syz.3.4973': attribute type 3 has an invalid length. [ 554.097987][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4976'. [ 554.217830][T24138] 8021q: adding VLAN 0 to HW filter on device bond7 [ 554.290211][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4980'. [ 554.312234][T24145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4980'. [ 554.365052][T24149] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4982'. [ 554.591916][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4988'. [ 554.671526][T24173] `: (slave bridge_slave_1): Releasing backup interface [ 554.788787][T24182] x_tables: unsorted entry at hook 1 [ 555.221777][T11062] net_ratelimit: 110 callbacks suppressed [ 555.221799][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.254890][T11062] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 555.379859][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.410684][T24214] bond7: option resend_igmp: invalid value (822247423) [ 555.419500][T11062] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.446936][T24214] bond7: option resend_igmp: allowed values 0 - 255 [ 555.463817][T11535] lec:lec_start_xmit: lec0:No lecd attached [ 555.470769][T11065] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.502020][T24214] bond7 (unregistering): Released all slaves [ 555.509449][T11064] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.559734][T11064] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.599791][T11052] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.621330][T24236] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20002 [ 555.631922][T19028] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.662540][T19028] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 555.865342][T24227] syzkaller0: entered promiscuous mode [ 555.877981][T24227] syzkaller0: entered allmulticast mode [ 555.940600][T24231] vxcan1 speed is unknown, defaulting to 1000 [ 556.000748][T24251] "syz.1.5002" (24251) uses obsolete ecb(arc4) skcipher [ 556.200574][T24257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5004'. [ 556.299759][T24257] bond0: (slave bridge_slave_1): Releasing backup interface [ 556.307286][T24257] bond0: (slave bridge_slave_1): the permanent HWaddr of slave - 5a:92:f6:71:df:55 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 556.326566][T24264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5007'. [ 556.387275][T24264] netlink: 'syz.4.5007': attribute type 30 has an invalid length. [ 556.430175][T24263] vxcan1 speed is unknown, defaulting to 1000 [ 556.546781][T24264] bond8: option arp_missed_max: invalid value (0) [ 556.580055][T24264] bond8: option arp_missed_max: allowed values 1 - 255 [ 556.645536][T24264] bond8 (unregistering): Released all slaves [ 557.646596][T24328] x_tables: unsorted underflow at hook 4 [ 557.877718][T24334] dvmrp6: left allmulticast mode [ 557.979120][T24343] IPv6: NLM_F_CREATE should be specified when creating new route [ 558.451560][T24367] netlink: 'syz.4.5032': attribute type 6 has an invalid length. [ 558.521028][T24368] netlink: 'syz.4.5032': attribute type 6 has an invalid length. [ 558.632219][T24367] netlink: 'syz.4.5032': attribute type 6 has an invalid length. [ 558.697992][T24368] netlink: 'syz.4.5032': attribute type 6 has an invalid length. [ 558.874239][T24380] syzkaller0: entered promiscuous mode [ 558.895878][T24380] syzkaller0: entered allmulticast mode [ 558.914578][T24387] __nla_validate_parse: 13 callbacks suppressed [ 558.914597][T24387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5039'. [ 558.934826][T24386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5039'. [ 558.964676][T24387] veth1_to_team: left promiscuous mode [ 558.990077][T24387] veth1_to_team: left allmulticast mode [ 559.128966][ T1702] block nbd1: Possible stuck request ffff888026a28000: control (read@0,1024B). Runtime 210 seconds [ 559.141201][ T1702] block nbd1: Possible stuck request ffff888026a28200: control (read@1024,1024B). Runtime 210 seconds [ 559.155592][ T1702] block nbd1: Possible stuck request ffff888026a28400: control (read@2048,1024B). Runtime 210 seconds [ 559.168756][ T1702] block nbd1: Possible stuck request ffff888026a28600: control (read@3072,1024B). Runtime 210 seconds [ 559.290642][T24401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5042'. [ 559.516762][T24418] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5048'. [ 559.901372][T24439] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5054'. [ 560.316555][ T9106] net_ratelimit: 125 callbacks suppressed [ 560.316579][ T9106] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 560.335435][ T9106] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 560.366047][T24456] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5058'. [ 560.451675][T19028] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 560.467370][T19028] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 560.493632][T24460] netlink: 'syz.0.5060': attribute type 1 has an invalid length. [ 560.580230][T19028] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 560.588718][T24460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 560.600447][T19028] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 560.620954][T24460] bond4: (slave bond5): making interface the new active one [ 560.649829][T19028] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 560.666522][T24460] bond4: (slave bond5): Enslaving as an active interface with an up link [ 560.675180][T11058] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 560.676159][T24466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5061'. [ 560.705139][T11058] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 560.720603][T24466] netlink: 'syz.2.5061': attribute type 7 has an invalid length. [ 560.740733][T11058] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 560.752014][T24471] syzkaller0: entered promiscuous mode [ 560.757536][T24471] syzkaller0: entered allmulticast mode [ 560.760094][T24466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5061'. [ 560.806606][T24469] tipc: Enabled bearer , priority 0 [ 560.846185][ T51] block nbd5: Receive control failed (result -32) [ 560.861165][T24468] tipc: Resetting bearer [ 560.877809][T24478] netlink: 'syz.1.5064': attribute type 1 has an invalid length. [ 560.940657][T24468] tipc: Disabling bearer [ 560.959391][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 560.967575][ C0] lec:lec_tx_timeout: lec0 [ 561.234245][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5069'. [ 561.655936][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5075'. [ 561.825676][T24538] vlan3: entered promiscuous mode [ 561.946322][T11050] [ 561.948814][T11050] ============================================ [ 561.955604][T11050] WARNING: possible recursive locking detected [ 561.961806][T11050] syzkaller #0 Not tainted [ 561.966252][T11050] -------------------------------------------- [ 561.972427][T11050] kworker/u8:20/11050 is trying to acquire lock: [ 561.978788][T11050] ffff88806cfa3760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 561.988187][T11050] [ 561.988187][T11050] but task is already holding lock: [ 561.995589][T11050] ffff88806cfa3760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 562.005215][T11050] [ 562.005215][T11050] other info that might help us debug this: [ 562.013312][T11050] Possible unsafe locking scenario: [ 562.013312][T11050] [ 562.020882][T11050] CPU0 [ 562.024185][T11050] ---- [ 562.027486][T11050] lock(k-sk_lock-AF_INET6); [ 562.032190][T11050] lock(k-sk_lock-AF_INET6); [ 562.036972][T11050] [ 562.036972][T11050] *** DEADLOCK *** [ 562.036972][T11050] [ 562.045126][T11050] May be due to missing lock nesting notation [ 562.045126][T11050] [ 562.053644][T11050] 4 locks held by kworker/u8:20/11050: [ 562.059216][T11050] #0: ffff88807b0c7148 ((wq_completion)krds_cp_wq#12/0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 562.071114][T11050] #1: ffffc90004e97c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 562.083929][T11050] #2: ffff88806cfa3760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 562.093972][T11050] #3: ffff88806cfa3908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 562.104365][T11050] [ 562.104365][T11050] stack backtrace: [ 562.110297][T11050] CPU: 1 UID: 0 PID: 11050 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 562.110322][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.110334][T11050] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 562.110366][T11050] Call Trace: [ 562.110373][T11050] [ 562.110387][T11050] dump_stack_lvl+0xe8/0x150 [ 562.110410][T11050] print_deadlock_bug+0x279/0x290 [ 562.110433][T11050] __lock_acquire+0x253f/0x2cf0 [ 562.110451][T11050] ? unwind_next_frame+0xa5/0x23c0 [ 562.110473][T11050] ? lock_acquire+0x106/0x330 [ 562.110491][T11050] ? unwind_next_frame+0xa5/0x23c0 [ 562.110511][T11050] ? lock_acquire+0x106/0x330 [ 562.110528][T11050] ? unwind_next_frame+0xa5/0x23c0 [ 562.110550][T11050] ? inet6_getname+0x15d/0x650 [ 562.110574][T11050] lock_acquire+0x106/0x330 [ 562.110590][T11050] ? inet6_getname+0x15d/0x650 [ 562.110615][T11050] ? unwind_next_frame+0xa5/0x23c0 [ 562.110636][T11050] ? unwind_next_frame+0x1aaf/0x23c0 [ 562.110661][T11050] lock_sock_nested+0x48/0x100 [ 562.110676][T11050] ? inet6_getname+0x15d/0x650 [ 562.110702][T11050] inet6_getname+0x15d/0x650 [ 562.110726][T11050] ? do_raw_spin_lock+0x12b/0x2f0 [ 562.110752][T11050] rds_tcp_conn_slots_available+0x288/0x470 [ 562.110780][T11050] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 562.110813][T11050] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.110833][T11050] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 562.110860][T11050] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 562.110877][T11050] ? rds_send_worker+0x7d/0x2e0 [ 562.110895][T11050] ? process_scheduled_works+0xaec/0x17a0 [ 562.110912][T11050] ? worker_thread+0xa50/0xfc0 [ 562.110934][T11050] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 562.110957][T11050] rds_recv_incoming+0x9f6/0x12d0 [ 562.110978][T11050] ? __pfx_rds_recv_incoming+0x10/0x10 [ 562.110996][T11050] ? skb_copy_bits+0x7e5/0x8f0 [ 562.111019][T11050] rds_tcp_data_recv+0x7f1/0xa40 [ 562.111043][T11050] __tcp_read_sock+0x196/0x970 [ 562.111069][T11050] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 562.111087][T11050] rds_tcp_data_ready+0x369/0x950 [ 562.111102][T11050] ? __pfx_sock_def_readable+0x10/0x10 [ 562.111127][T11050] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 562.111149][T11050] tcp_data_queue+0x1e2e/0x5e50 [ 562.111180][T11050] ? tcp_urg+0x106/0x410 [ 562.111201][T11050] ? __pfx_tcp_data_queue+0x10/0x10 [ 562.111223][T11050] ? __pfx_tcp_urg+0x10/0x10 [ 562.111243][T11050] ? ktime_get+0x45/0x200 [ 562.111263][T11050] ? seqcount_lockdep_reader_access+0x60/0x100 [ 562.111287][T11050] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 562.111312][T11050] tcp_rcv_established+0x1270/0x2670 [ 562.111341][T11050] ? __pfx_tcp_rcv_established+0x10/0x10 [ 562.111362][T11050] ? ip6_dst_check+0x70/0x7e0 [ 562.111387][T11050] ? ip6_dst_check+0xe2/0x7e0 [ 562.111403][T11050] ? ip6_dst_check+0x5e3/0x7e0 [ 562.111418][T11050] ? __pfx_ip6_dst_check+0x10/0x10 [ 562.111435][T11050] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 562.111464][T11050] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 562.111487][T11050] __release_sock+0x1b8/0x3a0 [ 562.111513][T11050] release_sock+0x5f/0x1f0 [ 562.111528][T11050] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 562.111545][T11050] rds_send_xmit+0x207e/0x28d0 [ 562.111580][T11050] ? __pfx_rds_send_xmit+0x10/0x10 [ 562.111597][T11050] ? process_scheduled_works+0xa0f/0x17a0 [ 562.111618][T11050] rds_send_worker+0x7d/0x2e0 [ 562.111638][T11050] ? process_scheduled_works+0xa0f/0x17a0 [ 562.111656][T11050] process_scheduled_works+0xaec/0x17a0 [ 562.111685][T11050] ? __pfx_process_scheduled_works+0x10/0x10 [ 562.111705][T11050] ? assign_work+0x3d5/0x5e0 [ 562.111724][T11050] worker_thread+0xa50/0xfc0 [ 562.111754][T11050] kthread+0x388/0x470 [ 562.111776][T11050] ? __pfx_worker_thread+0x10/0x10 [ 562.111793][T11050] ? __pfx_kthread+0x10/0x10 [ 562.111814][T11050] ret_from_fork+0x51e/0xb90 [ 562.111835][T11050] ? __pfx_ret_from_fork+0x10/0x10 [ 562.111852][T11050] ? __switch_to+0xc7d/0x1400 [ 562.111868][T11050] ? __pfx_kthread+0x10/0x10 [ 562.111890][T11050] ret_from_fork_asm+0x1a/0x30 [ 562.111921][T11050] [ 562.503495][T11050] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 562.512330][T11050] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11050, name: kworker/u8:20 [ 562.521863][T11050] preempt_count: 201, expected: 0 [ 562.526971][T11050] RCU nest depth: 0, expected: 0 [ 562.531956][T11050] INFO: lockdep is turned off. [ 562.537014][T11050] Preemption disabled at: [ 562.537025][T11050] [<0000000000000000>] 0x0 [ 562.545882][T11050] CPU: 1 UID: 0 PID: 11050 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 562.545909][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.545921][T11050] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 562.545946][T11050] Call Trace: [ 562.545954][T11050] [ 562.545961][T11050] dump_stack_lvl+0xe8/0x150 [ 562.545984][T11050] __might_resched+0x378/0x4d0 [ 562.546007][T11050] lock_sock_nested+0x5d/0x100 [ 562.546024][T11050] inet6_getname+0x15d/0x650 [ 562.546049][T11050] ? do_raw_spin_lock+0x12b/0x2f0 [ 562.546075][T11050] rds_tcp_conn_slots_available+0x288/0x470 [ 562.546104][T11050] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 562.546137][T11050] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.546157][T11050] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 562.546183][T11050] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 562.546200][T11050] ? rds_send_worker+0x7d/0x2e0 [ 562.546218][T11050] ? process_scheduled_works+0xaec/0x17a0 [ 562.546235][T11050] ? worker_thread+0xa50/0xfc0 [ 562.546258][T11050] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 562.546282][T11050] rds_recv_incoming+0x9f6/0x12d0 [ 562.546303][T11050] ? __pfx_rds_recv_incoming+0x10/0x10 [ 562.546320][T11050] ? skb_copy_bits+0x7e5/0x8f0 [ 562.546344][T11050] rds_tcp_data_recv+0x7f1/0xa40 [ 562.546367][T11050] __tcp_read_sock+0x196/0x970 [ 562.546394][T11050] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 562.546411][T11050] rds_tcp_data_ready+0x369/0x950 [ 562.546427][T11050] ? __pfx_sock_def_readable+0x10/0x10 [ 562.546452][T11050] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 562.546474][T11050] tcp_data_queue+0x1e2e/0x5e50 [ 562.546512][T11050] ? tcp_urg+0x106/0x410 [ 562.546533][T11050] ? __pfx_tcp_data_queue+0x10/0x10 [ 562.546555][T11050] ? __pfx_tcp_urg+0x10/0x10 [ 562.546575][T11050] ? ktime_get+0x45/0x200 [ 562.546596][T11050] ? seqcount_lockdep_reader_access+0x60/0x100 [ 562.546619][T11050] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 562.546645][T11050] tcp_rcv_established+0x1270/0x2670 [ 562.546674][T11050] ? __pfx_tcp_rcv_established+0x10/0x10 [ 562.546695][T11050] ? ip6_dst_check+0x70/0x7e0 [ 562.546713][T11050] ? ip6_dst_check+0xe2/0x7e0 [ 562.546728][T11050] ? ip6_dst_check+0x5e3/0x7e0 [ 562.546744][T11050] ? __pfx_ip6_dst_check+0x10/0x10 [ 562.546761][T11050] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 562.546790][T11050] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 562.546812][T11050] __release_sock+0x1b8/0x3a0 [ 562.546838][T11050] release_sock+0x5f/0x1f0 [ 562.546853][T11050] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 562.546871][T11050] rds_send_xmit+0x207e/0x28d0 [ 562.546905][T11050] ? __pfx_rds_send_xmit+0x10/0x10 [ 562.546922][T11050] ? process_scheduled_works+0xa0f/0x17a0 [ 562.546944][T11050] rds_send_worker+0x7d/0x2e0 [ 562.546962][T11050] ? process_scheduled_works+0xa0f/0x17a0 [ 562.546980][T11050] process_scheduled_works+0xaec/0x17a0 [ 562.547009][T11050] ? __pfx_process_scheduled_works+0x10/0x10 [ 562.547029][T11050] ? assign_work+0x3d5/0x5e0 [ 562.547048][T11050] worker_thread+0xa50/0xfc0 [ 562.547077][T11050] kthread+0x388/0x470 [ 562.547099][T11050] ? __pfx_worker_thread+0x10/0x10 [ 562.547116][T11050] ? __pfx_kthread+0x10/0x10 [ 562.547138][T11050] ret_from_fork+0x51e/0xb90 [ 562.547158][T11050] ? __pfx_ret_from_fork+0x10/0x10 [ 562.547175][T11050] ? __switch_to+0xc7d/0x1400 [ 562.547191][T11050] ? __pfx_kthread+0x10/0x10 [ 562.547213][T11050] ret_from_fork_asm+0x1a/0x30 [ 562.547243][T11050] [ 562.547255][T11050] BUG: scheduling while atomic: kworker/u8:20/11050/0x00000202 [ 562.889786][T11050] INFO: lockdep is turned off. [ 562.894607][T11050] Modules linked in: [ 562.898540][T11050] Preemption disabled at: [ 562.898552][T11050] [<0000000000000000>] 0x0 [ 562.907479][T11050] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 562.916279][T11050] CPU: 1 UID: 0 PID: 11050 Comm: kworker/u8:20 Tainted: G W syzkaller #0 PREEMPT(full) [ 562.927535][T11050] Tainted: [W]=WARN [ 562.931372][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.941545][T11050] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 562.947548][T11050] Call Trace: [ 562.950843][T11050] [ 562.953800][T11050] vpanic+0x1e0/0x670 [ 562.957823][T11050] panic+0xc5/0xd0 [ 562.961575][T11050] ? __pfx_panic+0x10/0x10 [ 562.966041][T11050] ? __pfx__printk+0x10/0x10 [ 562.970666][T11050] ? vprintk_emit+0x4eb/0x560 [ 562.975377][T11050] ? __pfx_vprintk_emit+0x10/0x10 [ 562.980432][T11050] ? __irq_work_queue_local+0x1f2/0x540 [ 562.986097][T11050] check_panic_on_warn+0x89/0xb0 [ 562.991331][T11050] __schedule_bug+0xf6/0x150 [ 562.995953][T11050] __schedule+0x168c/0x5290 [ 563.000565][T11050] ? __wake_up_klogd+0xe6/0x120 [ 563.005444][T11050] ? vprintk_emit+0x4eb/0x560 [ 563.010143][T11050] ? rcu_is_watching+0x15/0xb0 [ 563.014941][T11050] ? __pfx_vprintk_emit+0x10/0x10 [ 563.020008][T11050] ? unwind_next_frame+0xa5/0x23c0 [ 563.025177][T11050] ? do_raw_spin_lock+0x12b/0x2f0 [ 563.030259][T11050] ? prepare_to_wait_exclusive+0x45/0x240 [ 563.036020][T11050] ? __pfx___schedule+0x10/0x10 [ 563.040894][T11050] ? schedule+0x90/0x360 [ 563.045161][T11050] ? rcu_is_watching+0x15/0xb0 [ 563.050043][T11050] ? rcu_is_watching+0x15/0xb0 [ 563.054852][T11050] ? lock_release+0x4b/0x3a0 [ 563.059478][T11050] ? schedule+0x90/0x360 [ 563.063762][T11050] ? wq_worker_sleeping+0x63/0x250 [ 563.068921][T11050] schedule+0x164/0x360 [ 563.073108][T11050] __lock_sock+0x161/0x2c0 [ 563.077550][T11050] ? __pfx___lock_sock+0x10/0x10 [ 563.082533][T11050] ? do_raw_spin_lock+0x12b/0x2f0 [ 563.087777][T11050] ? __pfx_autoremove_wake_function+0x10/0x10 [ 563.093884][T11050] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 563.099319][T11050] ? lock_sock_nested+0x6a/0x100 [ 563.104283][T11050] lock_sock_nested+0x9f/0x100 [ 563.109064][T11050] inet6_getname+0x15d/0x650 [ 563.113678][T11050] ? do_raw_spin_lock+0x12b/0x2f0 [ 563.118726][T11050] rds_tcp_conn_slots_available+0x288/0x470 [ 563.124651][T11050] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 563.131105][T11050] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.136932][T11050] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 563.143410][T11050] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 563.148564][T11050] ? rds_send_worker+0x7d/0x2e0 [ 563.153452][T11050] ? process_scheduled_works+0xaec/0x17a0 [ 563.159270][T11050] ? worker_thread+0xa50/0xfc0 [ 563.164079][T11050] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 563.169743][T11050] rds_recv_incoming+0x9f6/0x12d0 [ 563.174804][T11050] ? __pfx_rds_recv_incoming+0x10/0x10 [ 563.180289][T11050] ? skb_copy_bits+0x7e5/0x8f0 [ 563.185078][T11050] rds_tcp_data_recv+0x7f1/0xa40 [ 563.190049][T11050] __tcp_read_sock+0x196/0x970 [ 563.194842][T11050] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 563.200321][T11050] rds_tcp_data_ready+0x369/0x950 [ 563.205366][T11050] ? __pfx_sock_def_readable+0x10/0x10 [ 563.210937][T11050] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 563.216506][T11050] tcp_data_queue+0x1e2e/0x5e50 [ 563.221420][T11050] ? tcp_urg+0x106/0x410 [ 563.225731][T11050] ? __pfx_tcp_data_queue+0x10/0x10 [ 563.230978][T11050] ? __pfx_tcp_urg+0x10/0x10 [ 563.235602][T11050] ? ktime_get+0x45/0x200 [ 563.239957][T11050] ? seqcount_lockdep_reader_access+0x60/0x100 [ 563.246140][T11050] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 563.251980][T11050] tcp_rcv_established+0x1270/0x2670 [ 563.257324][T11050] ? __pfx_tcp_rcv_established+0x10/0x10 [ 563.263072][T11050] ? ip6_dst_check+0x70/0x7e0 [ 563.267854][T11050] ? ip6_dst_check+0xe2/0x7e0 [ 563.272637][T11050] ? ip6_dst_check+0x5e3/0x7e0 [ 563.277418][T11050] ? __pfx_ip6_dst_check+0x10/0x10 [ 563.282548][T11050] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 563.287271][T11050] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 563.292450][T11050] __release_sock+0x1b8/0x3a0 [ 563.297159][T11050] release_sock+0x5f/0x1f0 [ 563.301601][T11050] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 563.307869][T11050] rds_send_xmit+0x207e/0x28d0 [ 563.312758][T11050] ? __pfx_rds_send_xmit+0x10/0x10 [ 563.317975][T11050] ? process_scheduled_works+0xa0f/0x17a0 [ 563.323716][T11050] rds_send_worker+0x7d/0x2e0 [ 563.328419][T11050] ? process_scheduled_works+0xa0f/0x17a0 [ 563.334158][T11050] process_scheduled_works+0xaec/0x17a0 [ 563.339752][T11050] ? __pfx_process_scheduled_works+0x10/0x10 [ 563.345769][T11050] ? assign_work+0x3d5/0x5e0 [ 563.350396][T11050] worker_thread+0xa50/0xfc0 [ 563.355047][T11050] kthread+0x388/0x470 [ 563.359148][T11050] ? __pfx_worker_thread+0x10/0x10 [ 563.364297][T11050] ? __pfx_kthread+0x10/0x10 [ 563.368916][T11050] ret_from_fork+0x51e/0xb90 [ 563.373530][T11050] ? __pfx_ret_from_fork+0x10/0x10 [ 563.378668][T11050] ? __switch_to+0xc7d/0x1400 [ 563.383478][T11050] ? __pfx_kthread+0x10/0x10 [ 563.388110][T11050] ret_from_fork_asm+0x1a/0x30 [ 563.392919][T11050] [ 563.396573][T11050] Kernel Offset: disabled [ 563.400927][T11050] Rebooting in 86400 seconds..