last executing test programs: 12.104655131s ago: executing program 4 (id=9097): sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4979b7ce0825a7b7f6e25db87125fdbc03e68f33a591556b118b6a613e137feb729cd9572c62f874d56166c224a13a721200f31e830d3caca6ced2a833ea6831aad795368bd1d678d75acb03283a2881c1b63343bce7e6e40d9122f1498b3e77740ce4013f635a0c721de258e1f645b1eac5ac4ffa7b071251db65c67ecb1e68f7f1d66d075400f9ccfd09a0378536ee8f6d274c257044ad2ae55b49d88758f79bc4f3ec606afb12a62020e7d12715f51b8ffd20d87d42149096cca62ed47942992288f8b4b8f25a4cbe5ce355816104e3c9116862d82528d4bc4de6bc246c34f50b2d802551a2e7f4f8dab8f92b086f8427edac030180", 0xf7, 0xc051, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, 0x12, 0x0, 0x70bd2b, 0x25dfdbfd, {0x9, 0x1, 0x5, 0x5, {0x4e20, 0x4e24, [0x323, 0x4, 0x4, 0xb], [0xb0, 0xcc1, 0x3c, 0x5], r1, [0x3, 0x5]}, 0x0, 0xc}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "2afa097925ec671dcae6a8bea6e747b496d43937a10bc6f512dcd8221d621382f913c596cddb58b96e8b7c3a322a88707545f01611b80bc859a2ae7e878963c9c41618935a69e6f6bdc152d970ec4d8f32345f07"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5d982595ad8495c1}, 0x2400000c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newlinkprop={0x60, 0x6c, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2a0, 0x81}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x32e8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "f5e4dca063831232a0b889f0d42dd737"}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x800) writev(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)="1bf42bb6d53794431328a84ef4d31ed40728bfd1f38ecda91fb7be80ec579ba32a1b5edd7c99f110deb615699128e46c17f68b15ea86", 0x36}], 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x1405, 0x4, 0x70bd28, 0x25dfdbfc, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0xbfc1968ee1054822}, 0x2000c020) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x18c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000940)) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000980), &(0x7f00000009c0)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000c00)={r8, &(0x7f0000000b00)='nicvf0\x00', 0x4acee6e436f925a2, &(0x7f0000000b40)={@align=0x9, {0x3, 0xfcc7, 0x6, 0x3}}, 0x4, &(0x7f0000000b80), &(0x7f0000000bc0)=0xe9}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r5) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x80, r10, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x60}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000040) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x88, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x17}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x40}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x4804) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001100)={'erspan0\x00', &(0x7f0000001080)={'gretap0\x00', r3, 0x8000, 0x20, 0x6, 0x3c3, {{0xb, 0x4, 0x2, 0x2, 0x2c, 0x68, 0x0, 0xbb, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ssrr={0x89, 0x17, 0x2e, [@rand_addr=0x64010102, @rand_addr=0x64010102, @loopback, @remote, @local]}]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)=@newqdisc={0x70, 0x24, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xffff, 0x8}, {0xb, 0x3}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x7e, 0xc}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x2, 0x9, 0xcf5, 0x6, 0x7, 0x8000, 0x5c, 0xfffffff8}}}}, @TCA_RATE={0x6, 0x5, {0x9d, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x40012}, 0x1) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x12, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x51101027}, [@map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x5, 0xa, 0xffffffffffffffc0, 0x8}, @jmp={0x5, 0x1, 0xe, 0xb, 0x1, 0xfffffffffffffff4, 0xfffffffffffffff7}]}, &(0x7f0000001300)='syzkaller\x00', 0x1, 0x7f, &(0x7f0000001340)=""/127, 0x41000, 0x0, '\x00', r3, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x4, 0x8, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001400)=[0xffffffffffffffff], &(0x7f0000001440)=[{0x3, 0x4, 0xf, 0xd}, {0x2, 0x2, 0x8}, {0x5, 0x4, 0xa, 0xa}, {0x1, 0x4, 0x6, 0xc}, {0x1, 0x5, 0xb, 0x2}, {0x5, 0x5, 0x4, 0x5}], 0x10, 0xdfef}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@deltaction={0x28, 0x31, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x84) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={r9, 0x20, &(0x7f0000001b40)={&(0x7f00000019c0)=""/180, 0xb4, 0x0, &(0x7f0000001a80)=""/130, 0x82}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x10, 0x10, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000001800)='GPL\x00', 0x0, 0xfc, &(0x7f0000001840)=""/252, 0x41100, 0x82, '\x00', 0x0, @fallback=0x1a, r2, 0x8, &(0x7f0000001940)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x2, 0xc, 0x7, 0x81}, 0x10, r13, r12, 0xa, &(0x7f0000001bc0)=[r9], &(0x7f0000001c00)=[{0x1, 0x4, 0xd, 0x4}, {0x4, 0x2, 0xc, 0xb}, {0x1, 0x2, 0x10}, {0x2, 0x1, 0xc, 0x7}, {0x2, 0x3, 0x8, 0x1}, {0x2, 0x5, 0x10}, {0x4, 0x2, 0x0, 0x3}, {0x1, 0x5, 0x3}, {0x4, 0x1, 0x0, 0x7}, {0x4, 0x5, 0x10, 0x4}], 0x10, 0x3}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000001f40)=[{0xfffffffffffffffe}, {&(0x7f0000001d80)=""/165, 0xa5}, {&(0x7f0000001e40)=""/226, 0xe2}], 0x3, 0x8, 0x1e9e066b) 11.905075348s ago: executing program 4 (id=9101): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x74, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb55a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000002300)="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", 0xf11}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 11.705070466s ago: executing program 4 (id=9108): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @broadcast}, 0x10) accept(r0, &(0x7f0000000100)=@ethernet={0x0, @dev}, &(0x7f00000001c0)=0x80) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt(r1, 0x1, 0x45, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000001000004f9f3d5f273e0007012bbd7000000000"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x48}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, 0x0}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000240)="5d31e10fb6136af080dbbc6795677c01d3a701b658a29a2e6ad86b8ea53620af7d3e68abca465efd510423e71585dea9d81c74ff91ea0e4a8c706762361e32c0dae5aa8589c495b3b3fb83937c4acedffd3cd295d36481efac5c4c56479c8630e62f4f5371aefb238c61f23538d43ef9f967f9b6b665a50e7ca2a3973098efd18469a1", &(0x7f0000000300)=""/60}, 0x20) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800080003000400001014000000451e002800680000520690780a010102ffffffff4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010001090780006eb168a382e2cba6ba6158775353b9ab96297e79cda0cac123fb1fdad14fbe87b1b6dc1b1e8cf98720612b171593d611597"], 0x36) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000380)=0xffffffff7fffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000005c0)={{&(0x7f00000007c0)=""/242, 0xf2}, &(0x7f0000000580), 0x60}, 0x20) socket(0x2, 0x3, 0x6) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @broadcast}, 0x10) (async) accept(r0, &(0x7f0000000100)=@ethernet={0x0, @dev}, &(0x7f00000001c0)=0x80) (async) socket$rds(0x15, 0x5, 0x0) (async) getsockopt(r1, 0x1, 0x45, 0x0, &(0x7f0000000300)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000001000004f9f3d5f273e0007012bbd7000000000"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x48}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, 0x0}, 0x1c) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000240)="5d31e10fb6136af080dbbc6795677c01d3a701b658a29a2e6ad86b8ea53620af7d3e68abca465efd510423e71585dea9d81c74ff91ea0e4a8c706762361e32c0dae5aa8589c495b3b3fb83937c4acedffd3cd295d36481efac5c4c56479c8630e62f4f5371aefb238c61f23538d43ef9f967f9b6b665a50e7ca2a3973098efd18469a1", &(0x7f0000000300)=""/60}, 0x20) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800080003000400001014000000451e002800680000520690780a010102ffffffff4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010001090780006eb168a382e2cba6ba6158775353b9ab96297e79cda0cac123fb1fdad14fbe87b1b6dc1b1e8cf98720612b171593d611597"], 0x36) (async) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000380)=0xffffffff7fffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000005c0)={{&(0x7f00000007c0)=""/242, 0xf2}, &(0x7f0000000580), 0x60}, 0x20) (async) 3.664362697s ago: executing program 2 (id=9190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x10, 0x7, 0xa, 0xfffffffffffffffe}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x10, 0x7, 0xa, 0xfffffffffffffffe}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.512527784s ago: executing program 2 (id=9192): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000001c0)=0x6) 3.122043862s ago: executing program 2 (id=9195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0x6, 0x1, '$\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60081}, 0x4000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_GETNSID={0x44, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2040000) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001900010000000000000000001cfd06000000000000000000"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe8f}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000014}, 0x40820) 2.888672513s ago: executing program 1 (id=9197): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @loopback}, 0x10, &(0x7f00000003c0)=[{0x0, 0x2e}, {&(0x7f0000001540)="b14fd5c9ed46fc05cb05337b620526fc93357903607902406c5d3113ad5b3117cd7ab604fe18c0a4717acb86bf141c9d67389bb77368bab92cc5ffd0cee540eb78e1ba67d3b806dfabdb7397045f6b9b274e5525f7685e2ae80f938f72c8a4bb80730d3f371777a8464d4ff0526a6d5e300099595dbee7f24a46262e74f3890bde0dba4022fb79c1d4d4c9f4c432db8abd757945bf17ae5d8fd2414637caa26ebbcdd4a00f50eb0be0abcae38a496dce098e3b9e27f3b13a20fc8f1dce38ef24fe458f326f04e84a1ab657c0b0a78aa1a3dde94aa7ad52e782c71174a62360ab7304b18180060d63b70a00"/247, 0xf7}, {&(0x7f0000001440)="0140af782ea71510ebcfd5c3880daaca30eb4ddfd1190f01dac5cc2160550208aa8f6f3c85bd65169dd45f5caa4788465ee417f77820ecf053694578f4867b3474351de79f8d6fe29167a9168e3f94eab347cffbe1e10e26f78e07aa5e55d5300d47fa5f4cd6fdebbc910784cdecd67f3dcfb16a337b249cbedf778670aced7949755b01ee9933dcbda88acabaf582364493745c5af709eb3e35f80ef0b74520bcae499942abf3409df984a6ba8bfe41ed05bfc6fe67b2e8d0a572c6d17bb59b9da76db7da7aae8f27ce8f3602a3f3c0637fb866ead3d15676c2c265ed72839d6f901fa4af56b6d778d7bb9cd9a7d1c1da8e0490d9", 0xf5}], 0x3}, 0x20008890) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xac880000) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @loopback}, 0x10, &(0x7f00000003c0)=[{0x0, 0x2e}, {&(0x7f0000001540)="b14fd5c9ed46fc05cb05337b620526fc93357903607902406c5d3113ad5b3117cd7ab604fe18c0a4717acb86bf141c9d67389bb77368bab92cc5ffd0cee540eb78e1ba67d3b806dfabdb7397045f6b9b274e5525f7685e2ae80f938f72c8a4bb80730d3f371777a8464d4ff0526a6d5e300099595dbee7f24a46262e74f3890bde0dba4022fb79c1d4d4c9f4c432db8abd757945bf17ae5d8fd2414637caa26ebbcdd4a00f50eb0be0abcae38a496dce098e3b9e27f3b13a20fc8f1dce38ef24fe458f326f04e84a1ab657c0b0a78aa1a3dde94aa7ad52e782c71174a62360ab7304b18180060d63b70a00"/247, 0xf7}, {&(0x7f0000001440)="0140af782ea71510ebcfd5c3880daaca30eb4ddfd1190f01dac5cc2160550208aa8f6f3c85bd65169dd45f5caa4788465ee417f77820ecf053694578f4867b3474351de79f8d6fe29167a9168e3f94eab347cffbe1e10e26f78e07aa5e55d5300d47fa5f4cd6fdebbc910784cdecd67f3dcfb16a337b249cbedf778670aced7949755b01ee9933dcbda88acabaf582364493745c5af709eb3e35f80ef0b74520bcae499942abf3409df984a6ba8bfe41ed05bfc6fe67b2e8d0a572c6d17bb59b9da76db7da7aae8f27ce8f3602a3f3c0637fb866ead3d15676c2c265ed72839d6f901fa4af56b6d778d7bb9cd9a7d1c1da8e0490d9", 0xf5}], 0x3}, 0x20008890) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xac880000) (async) 2.404071929s ago: executing program 1 (id=9203): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000080)={r3, 0xf371}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x7, 0x7}}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r0, 0xb15, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10041}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000002f80), r1) 1.938438194s ago: executing program 1 (id=9208): socket$kcm(0xa, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x8014) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/121, 0x79}, {&(0x7f0000000400)=""/84, 0x54}], 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="50000000090601020000000000006500020000840900020073797a31000000000067e1de000000000025608458cd1456435164000028e906800c00018008000140fffffff70500070088000000060087fee25665447ac364be0e381008c3f0aea0a3e6e5a1d72ca9aa77b269fade81fa6645fb1dbb550bea88d6d2f8a4de36fe4df7f30cb204fcbc2f11394fe461987b7a4ac4fc3fd5130ae07561790b710f7ca8c61390fcc745f4f4cf2230be70c7cc80c13fdadf0f65b664dddf8366834ba288cf6006a87cc98bbac4176511f62d4d95d2382e334952f200e5cd16fd50c0f097ffff77c9647b5a2265ac3a"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000f4ff080000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000080}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r9], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0x0, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {0x2, 0xe}, {0xe, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4056) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 1.937732924s ago: executing program 2 (id=9209): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r3, 0x8, 0x3267a81747c57577, 0x9}, &(0x7f0000000180)=0x18) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe8, 0x13, 0x300, 0x70bd2c, 0x25dfdbfe, {{'xts(sm4-ce)\x00'}, '\x00', '\x00', 0x2000}, [{0x8, 0x1, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x20044080) (async) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe8, 0x13, 0x300, 0x70bd2c, 0x25dfdbfe, {{'xts(sm4-ce)\x00'}, '\x00', '\x00', 0x2000}, [{0x8, 0x1, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x20044080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x4, 0x1, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b1cd704b4296"}]}, 0x2c}}, 0x44000) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x4, 0x1, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b1cd704b4296"}]}, 0x2c}}, 0x44000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9a}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000000) recvmsg(r2, &(0x7f0000000880)={&(0x7f0000000680)=@xdp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/39, 0x27}, {&(0x7f0000000740)=""/7, 0x7}], 0x2, &(0x7f00000007c0)=""/131, 0x83}, 0x102) (async) recvmsg(r2, &(0x7f0000000880)={&(0x7f0000000680)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/39, 0x27}, {&(0x7f0000000740)=""/7, 0x7}], 0x2, &(0x7f00000007c0)=""/131, 0x83}, 0x102) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a80)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x7, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x815}]}, &(0x7f0000000b80)='syzkaller\x00', 0x10000, 0xa0, &(0x7f0000000bc0)=""/160, 0x40f00, 0x36, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0x6, 0x1ff, 0xe2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000d00)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d40)=[{0x4, 0x3, 0x2}, {0x1, 0x3, 0x10, 0x3}, {0x2, 0x3, 0x3, 0x8}, {0x5, 0x1, 0x9, 0x6}, {0x0, 0x1, 0xf, 0x3}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@ifindex=r7, 0xb, 0x0, 0x5, &(0x7f0000000e80)=[0x0], 0x1, 0x0, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000001040), 0x8) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000001040), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000fc0)={@map=r13, r11, 0x5, 0x0, 0x0, @void, @value=r14, @void, @void, r12}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000fc0)={@map=r13, r11, 0x5, 0x0, 0x0, @void, @value=r14, @void, @void, r12}, 0x20) ioctl$BTRFS_IOC_ENCODED_READ(r11, 0x80809440, &(0x7f0000001380)={&(0x7f0000001340)=[{&(0x7f0000001080)="661646ff91dcc856d3aea2a74d58bab5a43f6352ef16ecc57496234620e0904fb0768c961a12138324ec4e55846abb9464d8b0d7bce948364072731fa36956e90125d22a44ab53f731f5260e38b8077adfc91708f7314945ddd6fc951cd5fea4502ad32f1a18ba4c1966446d043d6067b50357464271c1c18254df9dd7f5ccce2dee720d4bbad55ea29e4abda3637386cdce62d4b0e56098eff7f48ffabdcfe6978a1960ca4a223b0ef27abf314d47ede6a00d6c98db7dbe70c87d093df7980d004ddfe669283e8dd74f0c5869983ba396d9", 0xd2}, {&(0x7f0000001180)="8a647b3bf72adf80d8243ad4ff93354473b99a84327485dcc9872b37acdd4f7c45ef2ae1599f6bed6d5fb20473a6f1755ad2e6e9a08ef8ca3ecd28ece1", 0x3d}, {&(0x7f00000011c0)="698c59b72875852ffcde345606f6d2865f1330ba9fe39e5f9cb5c87503cb80efbe20f6a0303b87f33f1cceacdc124bea0b3a1c892d99aec0f299c6d80945533a08d7c30185dbc703167ec09c0dd6a7a2794802394e115044986e140fab55dad6677a5658cc0feb6e36d35cb243f55bae1d39b04d9f513b631fbbdffee5c1da8b54d2eda5b95e61aa5e", 0x89}, {&(0x7f0000001280)="ebb5269d141c827e81554d26f006e81be34e128ad12e1340f04974a65bb528f12b085b6237b2cc82f9ff6c6c2977bd08d964c0723cef6eb7d24652f6d2f58958d593057d980f617d3a8e9a87b663f36cd7a05f1822703a399f870589b83926faa01ed82c6c318737d8dafc08f274938cdcede236eef4a2316b6654d56e2f6daf5c704bdfdc47c811e889303811cd00239c683e07", 0x94}], 0x4, 0x7, 0x0, 0x101, 0x2, 0x7fffffffffffffff, 0x8, 0x3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r15, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r15, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) setsockopt$sock_int(r14, 0x1, 0x13, &(0x7f0000001500)=0xffffffff, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000001540), r8) 1.73726775s ago: executing program 2 (id=9212): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x1c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x0, 0x20}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001200010a000000000000000007020000100000800c000000000000000000000038baac21541043d71bfe13a1c254e30aad1d7d88f08e8063260cc4c600e5062fdb257c28e62d1f7d5081550f6a808d42ad5d2afb1a83229112172934e72e0d064c15f86459622b8dda9f8b8784f2753631b7de36215aaaef50c49df62c4ac672905c78bfda3c9e95a0185941622d20aa13c03e83cbdfc73c2fa5210e0ffe8b187f09a1f115292ac1151b"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a000000140007800800114000000000050015000500000011000300686188683a69702c6d61726b00000000"], 0x60}}, 0x840) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.634799274s ago: executing program 0 (id=9213): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}]}, 0x60}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000380)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r5, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x145b600, 0x76}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) recvmsg(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) 1.569518271s ago: executing program 3 (id=9214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff3d, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x2, 0x1, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) (async) readv(r2, &(0x7f0000000080)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000240)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001980"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000001540)=""/4096, 0x1000, 0x0, &(0x7f0000002540)=""/239, 0xef}}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002640)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002680)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x7f852e07, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0x10, 0x200, 0xd, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0xf}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) 1.429004096s ago: executing program 1 (id=9215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)={0x30, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)={0x30, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}, 0x8}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}, 0x8}, 0x1c, 0x0}}], 0x1, 0x20004855) 1.428623921s ago: executing program 2 (id=9216): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) 1.428171665s ago: executing program 4 (id=9114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0x2}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r8, &(0x7f0000000100)={0x10}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r10) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090127bd7000ffdbdf250600000008000d000000000008000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r12, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x20, r9, 0xa13, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000058}, 0x20004010) socket$kcm(0x11, 0x3, 0x0) 1.408451539s ago: executing program 0 (id=9217): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x78, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYBLOB="cc638982054d618c1cb3362e6211aca2040f828e9fd7974408eea6c9e89183114b9bab9331d14a9915dfbd07cc844498a6d129f85ff9ba5168262ae9254306d8"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.210001109s ago: executing program 1 (id=9219): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r6, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a08000640000000010800044000000002140000001100010000000000000000000000000a72dcd551611c08c6cd48a0bc2492e5f2de"], 0x94}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb4c71ccaf771150e}, 0x20008080) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x4004) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket(0x1e, 0x80000, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x28, r12, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x28}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.20537788s ago: executing program 3 (id=9220): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x9}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x9}]}}]}, 0x3c}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b000000e9000000000000000700000000000000002cbd4dad0edf2e525d16e3ffe017b2c4ad61ca05426f3e9e14f92dbbe0eaa049b4b7beabba16b021500a29adecf3ecbdf95a749f6f600fe64374251c007fdfd64892256f2a1763691402da1b4a8dd704ca0a7b7f31f5e06a8c4a412e8f52eb2c013aeba9a2ab17be9b6a5c582ddee8101579dc8e93e1", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="02000000000000000500"/28], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@enum64={0xf, 0x2, 0x0, 0x13, 0x1, 0xa, [{0x2, 0x3, 0x400000}, {0xd, 0x9, 0x2}]}, @float={0x7, 0x0, 0x0, 0x10, 0x8}, @var={0x3, 0x0, 0x0, 0xe, 0x5, 0x2}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x1000}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000540)=""/207, 0x8b, 0xcf, 0x1, 0xe, 0x8b8231e52289a5b9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x13, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @ldst={0x3, 0x2, 0x3, 0x0, 0x7, 0x4, 0x10}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9d1}}, @jmp={0x5, 0x1, 0x3, 0x0, 0x0, 0x6, 0xfffffffffffffffc}, @cb_func, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0xf, 0x33, &(0x7f0000000280)=""/51, 0x41000, 0x28, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000680)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xa, 0x81, 0x10}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x4, 0x1, 0x3, 0x2}, {0x1, 0x1, 0x5, 0xb}, {0x4, 0x1, 0x6, 0x8}], 0x10, 0x9}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000001c0)={'pimreg1\x00', 0x8001}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'c', ' *:* ', 'rwm\x00'}, 0xa) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2d, 0x1}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r9, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) (async) getsockopt$sock_buf(r9, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xf}, {}, {0xfff1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x4) 1.0240526s ago: executing program 0 (id=9221): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x13d4, 0x12, 0x400, 0x70bd25, 0x25dfdbfd, {0x1f, 0x7, 0x7, 0x1, {0x4e22, 0x4e23, [0xc9a, 0x5, 0x1ff, 0x3ff], [0x7f, 0x2, 0x7ff, 0x10000], r1, [0x1, 0xa22]}, 0x10001, 0x7fffffff}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "f95974118db77ce009c346a24be51a4f59437e42ea37eafe6d262a56ed83d503a949199bad30bcca34c9454eeb"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "0e69d13b2ecdf212944830ad8bbc5a11a99b0f74d825025018b8b1385c8e20f2eca4c0148a790f2b84abb2c563eab10d6e46e4f829b01cd7d5a4a990f18f3493169eaf651cee65c8c50aba15170a8e19b341d894c220718fee86e34b76067b50257784ce486da2fa475980009cef67da99426a972b365c632a0079d8bc5d0c158e5617fc930eba834a755455fe600b1d5cec5dfdd04c96aadd7d79b6acc4f51233ab392a4859fdb74ac00f6e8fed680b6b04cfb27ec6823305e52c5adf"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "acb0e601dac99e8bfc8e128a1ef2abb63782ee7a3758ed11743b9901ae8b70740041e5b3f6374a9867ea79bca04023d8319e5fd1c1ad0278f37476d4dc2bcdf0c941d3032d55d39f6de41093f11ca0ff44c044c588d8ae270f06d42aae02fc16928844728856dfddac547fdc728c29caeadf5a80295c97f00fa47deb12ffc25cc2b7d69fe74df06f5f43d5bc9ed87ab148aaa9646ce92618798735c2000dfa07c6120116d217181ef2db5fdec78d2a51cf3a7ebcf9e06fd261533c1a2dbe2a58206ae2"}, @INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "5e87890d4d47b3637a0e6fd5985e5b8f495f11b385ee00c1"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "36a757590e048666143059bcb11ab4f71388ad464ab34f342a238cd19afccb82cd3292de901ee54123cf869de6e6c8f08df1"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "d0bd96b41f20a8476593360669073d853a2643fe62c48da25597fbd7b4a7e282c181992ce2dca906975a776da14f0ac8a0028e0389d4d7be840c94d55231b97f7ac7564a842e3d0765540960493c3cb978f79b4c8b15d43cf92c0697fe1f5dc314c9580585d717df6cf3b8ee9686bf307f27f6801ceed3b512fcdbc993cb07aab6e0159cbbf9b51ad3a436e1466b9b1d6edfeb15522f8ac8507a80fc52cb6b4d3fdb484aaa41a59234354b04498873a22281d087b9b67f81a80ca7931b9fabfdacd052dfd634df"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "c4f45e83c3e135057395ed7eadaed2aa347c0b355d9dfbb7f87435f8b0781521e3f5bacb5559e835c4fc455b8a8f9ff41f74fd3db7dd4121305c1d458c516078cafddbc4a1092d5ffd9d21fe12582c189db377af827f41b6ac849c11e48463e320abb23540481b5fe7c1d6607725fb0de665cd7451e88fdd52"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "f345dc70b6fdb6d182dd1c4e7ca1ed0b0ed5acb0babadd4e42c3606ca4e4a6"}]}, 0x13d4}, 0x1, 0x0, 0x0, 0xc805}, 0x4000) 944.388014ms ago: executing program 1 (id=9222): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080010000800000000000c0015"], 0xe0}}, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000009c0)=0x81) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket(0x2d, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f262959b03a57f6d6775a7", @ANYRES16=0x0, @ANYBLOB="000825bd7000fedbdf250b000000040007801c0003800800020008000000080001000700000008000100be0e0000100007800c000400260700000000000014000380080001000000000008000100030000005000078008000100950c000008000200070000000c00040001010000000000000c00040001000000000000000c0003006d020000000000000c00030003000000000000000c0003000300000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="18002f80050002"], 0x34}}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="0c0006000200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10044}, 0x40) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0x5c, r8, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x10) 902.015757ms ago: executing program 4 (id=9223): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xe, 0xffff}, {0x9, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x44820}, 0x0) 844.92702ms ago: executing program 3 (id=9224): syz_emit_ethernet(0x42, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x10, 0x0, 0x0, 0xd0a, 0x2c, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2005}]}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000000000009110bb00000000009500000000001627"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 844.512096ms ago: executing program 0 (id=9225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="77690addcfbe1fbb66ec5f84e1671b6064e2a55bda8c0489bdf48e881fa715683b6da20ab90fbd8bd40ddb4aa5f35844b3d04166efaf9f5498e5b75de8db3cff4fdb4328cd0cdfe36ebb74adba32a0c354a06aa7e8abf1b07791fd627b39bb5bb2f2ea948a50338aa8b135f8419711a3a9232b0300ec4697af69342cc5e7a54516b67df6134ef25f9d68c49de2e9776b2991809acfc03e0b28e0909d2b1cd44d7f99d596f77bed02e123d9d72ba79d0ab3a9c884a76493359babe7c80534ea9bf6fc4566fdfe4b711a1c264a56a79c73cbfa357b7d1c38956ca0", 0xda}], 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000d40), 0x0}, 0x20) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0xff, 0x67, 0x3, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) 672.850571ms ago: executing program 0 (id=9226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0x143, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 497.371877ms ago: executing program 0 (id=9227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r2, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) 444.843353ms ago: executing program 3 (id=9228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xf909}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2330248a}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x3, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xf909}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2330248a}}, 0xe8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) (async) close(r4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) (async) 435.919717ms ago: executing program 4 (id=9229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004d40)=@newtfilter={0xa30, 0x2c, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0x1, 0xffe0}, {0xfff1, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x503}, @filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x3d}, @TCA_FLOW_POLICE={0x840, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x401, 0x8, 0x1ff, 0x9, 0xee, 0x100, 0x5, 0x5, 0x8, 0x5, 0xffff, 0x6, 0x400, 0x0, 0x1000, 0xfffffffb, 0x8, 0x647, 0x3, 0x80000001, 0x3fc5, 0x5, 0x9, 0x800, 0xe28, 0x0, 0x4, 0x8, 0xffffff48, 0xc8c5, 0x0, 0x7, 0x8001, 0x0, 0x6, 0x7, 0x1, 0x3, 0x2, 0x2, 0x42d, 0x8, 0xca9, 0x1a3, 0x0, 0x5, 0x1, 0x3, 0x9, 0x6, 0xa9, 0xde000000, 0x1000, 0x4, 0x31c, 0x0, 0xfb6e, 0x5, 0x6b, 0xe, 0x3, 0x7ff, 0xa, 0x1, 0xfc000000, 0x40, 0x3, 0x2, 0xb9, 0x9e6, 0x8, 0x4, 0x1, 0x2, 0x1, 0xffffffa2, 0x8, 0x6, 0xffffffff, 0x1, 0xfffffff1, 0xffff, 0x8, 0xf5e, 0x6e, 0x6, 0x0, 0xffffff01, 0x4, 0x1, 0xffff, 0x80000000, 0x4c, 0x9, 0xcf, 0x6b41, 0xe, 0x0, 0x2571, 0x8, 0xe52, 0x1000, 0x40, 0x91f, 0xe, 0x4, 0xfffffffa, 0x0, 0x101, 0xfffffffb, 0x8, 0x9, 0x0, 0xf8, 0x8, 0x54e, 0x2, 0x80000000, 0x4938, 0x7fff, 0x9, 0x1cdb, 0x8, 0x5, 0x8, 0x800000, 0x101, 0x2, 0x40, 0x85a, 0x1, 0x3, 0x4, 0x401, 0x1, 0x5, 0x6, 0xffffffff, 0x8001, 0x1, 0xfffffffd, 0x4, 0x7, 0x8, 0x2f, 0xa39, 0x6, 0xf0, 0x80, 0x4, 0x8000, 0x7c07, 0x0, 0x2, 0x5, 0x8, 0x80000000, 0x7, 0x8, 0x7, 0x6, 0x7fff, 0x7, 0xf6, 0x7, 0xff, 0x96, 0x5, 0x88, 0x8, 0x9, 0x49, 0x2, 0x0, 0x4, 0x8, 0x10, 0x3, 0xffff, 0x7fff, 0x80, 0x6, 0x7, 0xb4d5, 0x3, 0x5815, 0x3, 0xe, 0x5dab, 0xc, 0x8, 0xc, 0x5, 0x28, 0xffffffff, 0x6, 0x6, 0x6, 0x100, 0x9, 0x3, 0xe, 0x6, 0x5, 0x35bd, 0xc254, 0x2, 0x0, 0x1, 0x2, 0x8, 0x7, 0x6, 0x1, 0x3, 0x3, 0x8, 0x0, 0x1, 0x2a62, 0xffffff81, 0xfffffff8, 0x1, 0xb3d, 0x81, 0x18000000, 0xe, 0xb, 0x6, 0x8, 0x6, 0x6, 0x8, 0x40, 0x8, 0x2, 0x8, 0xf, 0xfff, 0x8, 0x0, 0x4, 0x65, 0x1000, 0x3, 0x5, 0x6, 0xfffffffd, 0x5, 0x4, 0x870, 0xd, 0x0, 0x4, 0x3ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x800, 0x3, 0x8001, 0x6, 0x7, 0xffffff00, 0x9, 0x1000, 0x8, 0xb, 0x80000000, 0x40, 0x3, 0x39, 0x5c1, 0x7, 0x100, 0x0, 0x9, 0x8000, 0x6c, 0x6, 0x9, 0x1ff8000, 0xfffffff9, 0x0, 0x7fffffff, 0x1e4, 0x6, 0x5, 0xd8e, 0x7, 0xc21a, 0x5d4a, 0x6, 0x8000, 0x9, 0x10001, 0x35, 0xff, 0xff, 0x4, 0x8, 0x80000000, 0x4, 0xfffffffe, 0x1ff, 0x6, 0x1, 0x1, 0x40, 0xfffff000, 0x6, 0xffffffff, 0xe, 0x6, 0x4e, 0x6, 0x9, 0x9, 0x8, 0x0, 0x1, 0x2, 0x4, 0x6, 0xea, 0x80, 0xffffff77, 0xff, 0x7f, 0xbe, 0x9, 0xb, 0x80, 0xffc2, 0x80, 0xe3, 0x6, 0x81, 0x8, 0xd, 0xffffff2c, 0xc, 0x80000000, 0x9, 0x1, 0x15d1, 0x7fff, 0x8000, 0x10001, 0x7ff, 0x1, 0x8, 0x4807, 0x4, 0xfffffffd, 0x0, 0x7, 0x800, 0x3, 0x1, 0x0, 0xfffffff7, 0x6, 0x4, 0x9, 0x1, 0x1, 0xffff, 0xffffffff, 0xb7b0, 0x380000, 0x10001, 0x702, 0x1ff, 0x4, 0x0, 0x6, 0x5b, 0x7, 0xd9e, 0x9, 0x5, 0x5, 0x0, 0xfff, 0xffffffff, 0x4, 0x1, 0xa, 0x11, 0x40, 0x10000, 0xffff4010, 0xe9800000, 0x2, 0x1, 0x410e, 0x77f, 0xfffffbbf, 0x88, 0xd, 0xd1, 0xff, 0x7f, 0x3, 0x8, 0x7f, 0x4, 0x2, 0x6, 0x5, 0x8, 0x4, 0xcd9a, 0x800, 0x1d, 0xc, 0xa9, 0x2, 0xd9a, 0x4, 0x4, 0x4, 0x9, 0x0, 0xdfcd, 0x101, 0x0, 0x0, 0x5, 0x8001, 0x80, 0xfffffff7, 0xc, 0x3, 0x9, 0x8f2, 0x0, 0x10, 0x6, 0x5, 0xa8, 0x9, 0x2, 0x65d, 0xfff, 0x58d, 0x0, 0x5, 0x1, 0x7b0f0eac, 0x100, 0xffffffff, 0x4, 0x2e7, 0x5, 0x1, 0xe2, 0x4, 0x7f, 0x2, 0x7, 0x1, 0x400, 0x9d, 0x2, 0x4, 0x8001, 0x9, 0x82, 0xe, 0x9, 0x1ff, 0x8, 0x6, 0x4, 0x4, 0x7, 0x7, 0x0, 0x1, 0x9, 0x78, 0x2ffe, 0xff, 0x9, 0x4, 0x5f, 0x5, 0x800, 0x7f, 0x9, 0x6, 0x7, 0x8000, 0x0, 0xfffffff7, 0x3, 0x8, 0x2, 0x3, 0x40, 0x0, 0x81, 0x7fffffff, 0x800, 0x3e7, 0x1, 0xe, 0x2, 0x8, 0x1, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x78f}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_CHAIN={0x8, 0xb, 0xd}, @filter_kind_options=@f_cgroup={{0xb}, {0x188, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa9e}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdfa6}}]}, @TCA_CGROUP_ACT={0x164, 0x1, [@m_xt={0xb0, 0xa, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x75, 0x6, "43eb6a0e24ae2bbd9901cd66e0580f00845152f705235b931248ab301559502bd2478b01d9fd33d9d354979ccaa926b16d7f88d069e21077719ee929b7b8c3fe4b46007c5843c4267a0b89453d0451337081caeeb757d8633f5bd71fa0ee20460f6babb289f68026be65039a63807887fd"}, {0xc, 0x7, {0x5ad198ef153aa5b4, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb0, 0x12, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "f62059b82fe894327c865b1017a963b7"}]}, {0x71, 0x6, "c3101d392209915c931bfe7a7e67864e99926e5ed6fbc1a92239badd7c0615c4cebe757215ab741e14dc8edceebd6c50d9d268f0ee1e5a00ff56760f2328727139cbfafab9e5826c02db4c1678c52966659a61245aff6f9f33249b07f2888ba05748bd11b119b4a3632338ab3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0xa30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4002) 233.303216ms ago: executing program 3 (id=9230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x140a, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c8"], 0x150}, 0x1, 0x0, 0x0, 0x2400c014}, 0x404a854) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000081) 0s ago: executing program 3 (id=9231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x40, {0x3}}, 0x14}}, 0x24040000) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x10, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@alu={0x7, 0x1, 0x0, 0xb, 0xa, 0x10, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082cbd7000fbdbdf2505008008000100657468400700010069620000070001006962000008000100756670100c58458008000100190000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0xcc04}, 0x4040140) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000206030000000000070000040d000300686173683a6d6163000000000902020073797a320000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1401feff25ecba61e1e1adc9cdffbfff01000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000280), 0x3) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000000)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x3, 0x78, 0xfff9, 0x100, 0xc, 0x444000fc}) getsockopt$bt_hci(r4, 0x11a, 0x4, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r11, 0x0, 0x0, &(0x7f0000000140)="f71723859449e88eec2d2c16b476647ccb9c66d34fbfb76e9bf52e35255eca1486d17d2e1200b4945cb878a1d1c75ae1b0635168a079ce419db257ef0170f69242b6ec57ea126d98fcbbeab5f191fee2975f716f11344b482bbc2b501fae3969698678bbe6df9f0b7371489a519583253dba1bde23f62e900596154f197dd70fbd", 0x81) kernel console output (not intermixed with test programs): promiscuous mode [ 860.102692][ T395] syzkaller0: entered allmulticast mode [ 860.971343][ T457] netlink: 'syz.0.7258': attribute type 10 has an invalid length. [ 860.988248][ T457] team0: Port device vxcan1 added [ 861.027182][ T455] IPv6: sit1: Disabled Multicast RS [ 861.036827][ T455] sit1: entered allmulticast mode [ 861.392475][ T472] nbd3: detected capacity change from 0 to 63 [ 861.422635][ T483] block nbd3: NBD_DISCONNECT [ 861.427408][ T483] block nbd3: Disconnected due to user request. [ 861.434587][ T483] block nbd3: shutting down sockets [ 861.453319][ C0] blk_print_req_error: 138 callbacks suppressed [ 861.453345][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.469224][ C0] buffer_io_error: 138 callbacks suppressed [ 861.469244][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 861.495978][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.505542][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 861.513408][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.522947][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 861.530792][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.540298][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 861.560669][ T489] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.570238][ T489] Buffer I/O error on dev nbd3, logical block 0, async page read [ 861.578838][ T488] block nbd0: not configured, cannot reconfigure [ 861.593680][ T489] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.616547][ T493] netlink: 'syz.0.7269': attribute type 1 has an invalid length. [ 861.630248][ T489] Buffer I/O error on dev nbd3, logical block 1, async page read [ 861.638787][ T494] x_tables: duplicate underflow at hook 1 [ 861.691299][ T489] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.720898][ T489] Buffer I/O error on dev nbd3, logical block 2, async page read [ 861.753947][ T489] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.770292][ T493] bond5: entered promiscuous mode [ 861.776501][ T493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 861.784655][ T489] Buffer I/O error on dev nbd3, logical block 3, async page read [ 861.792850][ T489] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.804130][ T489] Buffer I/O error on dev nbd3, logical block 0, async page read [ 861.812067][ T489] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 861.821754][ T489] Buffer I/O error on dev nbd3, logical block 1, async page read [ 861.830366][ T489] ldm_validate_partition_table(): Disk read failed. [ 861.838101][ T489] Dev nbd3: unable to read RDB block 0 [ 861.844224][ T489] nbd3: unable to read partition table [ 861.889502][ T489] ldm_validate_partition_table(): Disk read failed. [ 861.916823][ T489] Dev nbd3: unable to read RDB block 0 [ 861.939577][ T489] nbd3: unable to read partition table [ 861.962653][ T507] bond5: (slave bridge4): making interface the new active one [ 861.970185][ T507] bridge4: entered promiscuous mode [ 862.047701][ T507] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 862.057118][ T6339] net_ratelimit: 134 callbacks suppressed [ 862.057136][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.100080][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.120460][ T522] netlink: 'syz.1.7276': attribute type 1 has an invalid length. [ 862.130217][ T522] netlink: 'syz.1.7276': attribute type 1 has an invalid length. [ 862.592132][ T553] netlink: 'syz.1.7287': attribute type 1 has an invalid length. [ 862.631750][ T560] __nla_validate_parse: 15 callbacks suppressed [ 862.631772][ T560] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7286'. [ 862.674285][ T553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 862.744297][ T563] bond5: (slave geneve3): making interface the new active one [ 862.753936][ T563] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 862.786998][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.812828][ T553] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7287'. [ 862.855961][ T553] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 862.893188][ T563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7287'. [ 862.938577][ T570] pim6reg: entered allmulticast mode [ 863.117380][ T584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7295'. [ 863.152527][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7295'. [ 863.177132][ T584] netlink: 'syz.4.7295': attribute type 15 has an invalid length. [ 863.221306][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.230051][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.299967][ T599] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7298'. [ 863.332975][ T584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7295'. [ 863.350802][ T6356] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 863.390144][ T6356] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 863.431712][ T6356] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 863.441431][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7295'. [ 863.465382][ T6356] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 863.486134][ T607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7300'. [ 863.540097][ T607] bond4: entered promiscuous mode [ 863.548578][ T607] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.586250][ T607] bridge3: entered promiscuous mode [ 863.599684][ T607] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 863.660797][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.829052][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.960360][ T631] validate_nla: 1 callbacks suppressed [ 863.960382][ T631] netlink: 'syz.1.7305': attribute type 1 has an invalid length. [ 863.988663][ T631] netlink: 'syz.1.7305': attribute type 4 has an invalid length. [ 863.997044][ T631] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.7305'. [ 864.043873][ T633] netlink: 'syz.0.7306': attribute type 10 has an invalid length. [ 864.277402][ T641] netlink: 'syz.1.7308': attribute type 3 has an invalid length. [ 864.361538][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.390214][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.501444][ T658] netlink: 'syz.1.7314': attribute type 1 has an invalid length. [ 864.603948][ T658] bond6: entered promiscuous mode [ 864.637653][ T658] 8021q: adding VLAN 0 to HW filter on device bond6 [ 864.699047][ T679] xt_hashlimit: size too large, truncated to 1048576 [ 864.703155][ T676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 864.756141][ T676] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 864.790273][ T676] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 864.792133][ T684] netlink: 'syz.3.7320': attribute type 5 has an invalid length. [ 864.817823][ T684] netlink: 'syz.3.7320': attribute type 6 has an invalid length. [ 864.836027][ T676] bond6: (slave vti0): making interface the new active one [ 864.861756][ T676] vti0: entered promiscuous mode [ 864.951059][ T676] bond6: (slave vti0): Enslaving as an active interface with an up link [ 865.088276][ T688] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 865.121611][ T686] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 865.339450][ T700] IPVS: Error connecting to the multicast addr [ 866.190935][ T737] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 866.307922][ T740] netlink: 'syz.1.7337': attribute type 5 has an invalid length. [ 866.373107][ T746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.691876][ T769] bond4: entered allmulticast mode [ 866.706821][ T769] bridge6: entered promiscuous mode [ 866.712397][ T769] bridge6: entered allmulticast mode [ 866.736681][ T769] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 866.748882][ T776] netlink: 'syz.0.7349': attribute type 21 has an invalid length. [ 866.757399][ T776] IPv6: NLM_F_CREATE should be specified when creating new route [ 867.134700][ T804] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 867.178587][ T809] syzkaller0: entered promiscuous mode [ 867.185767][T31914] Bluetooth: hci3: command 0x0406 tx timeout [ 867.191304][ T809] syzkaller0: entered allmulticast mode [ 867.503085][ T821] netlink: 'syz.2.7366': attribute type 24 has an invalid length. [ 867.671981][ T831] bridge_slave_1: left allmulticast mode [ 867.683821][ T831] bridge_slave_1: left promiscuous mode [ 867.698326][ T831] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.712650][ T6356] net_ratelimit: 13 callbacks suppressed [ 867.712672][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.740896][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.753179][ T831] bridge_slave_0: left allmulticast mode [ 867.758936][ T831] bridge_slave_0: left promiscuous mode [ 867.765797][ T831] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.805708][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.816590][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.833567][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.875091][ T837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.921783][ T837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.954204][ T837] syzkaller0: entered promiscuous mode [ 867.959865][ T837] syzkaller0: entered allmulticast mode [ 867.988250][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.007671][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.019653][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.144104][ T842] 8021q: adding VLAN 0 to HW filter on device bond5 [ 868.233113][ T856] __nla_validate_parse: 19 callbacks suppressed [ 868.233136][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7375'. [ 868.243681][ T848] dummy0: left promiscuous mode [ 868.252806][ T856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7375'. [ 868.317851][ T853] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7371'. [ 868.345033][ T848] bond5: (slave dummy0): Enslaving as an active interface with a down link [ 868.390087][ T856] geneve2: entered promiscuous mode [ 868.411919][ T856] geneve2: entered allmulticast mode [ 868.429958][ T853] bond5: (slave dummy0): Releasing active interface [ 868.477386][T18085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.503588][T18085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.600747][T18085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.614701][T18085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.899499][T18085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.918542][T18085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.038417][ T908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.160080][ T924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7390'. [ 869.171523][ T924] validate_nla: 3 callbacks suppressed [ 869.171540][ T924] netlink: 'syz.0.7390': attribute type 1 has an invalid length. [ 869.423801][ T947] tipc: Enabling of bearer rejected, failed to enable media [ 869.466184][ T953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7395'. [ 869.490499][ T954] netlink: 'syz.0.7394': attribute type 1 has an invalid length. [ 869.550806][ T953] syzkaller0: entered allmulticast mode [ 869.576063][ T948] syzkaller0: left allmulticast mode [ 870.001162][ T993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7409'. [ 870.058302][ T993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7409'. [ 870.232130][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.238915][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.268093][ T1009] x_tables: duplicate underflow at hook 2 [ 870.604815][ T1038] netlink: 'syz.2.7417': attribute type 12 has an invalid length. [ 870.637782][ T1038] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.7417'. [ 870.687317][ T1039] syzkaller1: entered promiscuous mode [ 870.706856][ T1039] syzkaller1: entered allmulticast mode [ 870.903668][ T1070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7423'. [ 871.174884][ T1088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7429'. [ 871.226218][T18085] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.252395][T18085] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.283131][T18085] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.335160][T18085] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.357024][ T1099] macsec0: entered promiscuous mode [ 871.363908][ T1099] macsec0: entered allmulticast mode [ 871.406415][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.429704][ T1090] netlink: 'syz.3.7429': attribute type 4 has an invalid length. [ 871.453804][ T1105] veth1_macvtap: entered allmulticast mode [ 871.459956][ T1105] macsec0: left promiscuous mode [ 871.466671][ T1105] macsec0: left allmulticast mode [ 871.473067][ T1105] veth1_macvtap: left allmulticast mode [ 871.545433][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.554818][ T1090] netlink: 'syz.3.7429': attribute type 4 has an invalid length. [ 871.595176][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.612550][ T1090] netlink: 'syz.3.7429': attribute type 4 has an invalid length. [ 871.631382][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.649798][ T1090] netlink: 'syz.3.7429': attribute type 4 has an invalid length. [ 871.658825][ T1116] netlink: 'syz.4.7437': attribute type 14 has an invalid length. [ 871.693261][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.712126][ T1116] netlink: 'syz.4.7437': attribute type 14 has an invalid length. [ 871.713205][ T6339] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 871.720792][ T1090] netlink: 'syz.3.7429': attribute type 4 has an invalid length. [ 871.755728][ T6339] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 871.772875][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.783429][ T1119] syzkaller1: entered promiscuous mode [ 871.789067][ T1119] syzkaller1: entered allmulticast mode [ 871.796088][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.799874][ T6339] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 871.822155][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.834600][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.846753][ T1090] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 871.895380][ T1124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.905447][ T6339] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 872.228299][ T1150] bond6: entered allmulticast mode [ 872.244562][ T1150] vti0: entered allmulticast mode [ 872.402395][ T1149] bond6: left allmulticast mode [ 872.407744][ T1149] vti0: left allmulticast mode [ 872.448301][ T1169] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 872.864679][ T1198] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 872.893638][ T1198] bond7 (unregistering): Released all slaves [ 873.239377][ T1231] bond6: (slave ip6gretap1): making interface the new active one [ 873.259638][ T1231] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 873.321784][T18085] net_ratelimit: 33 callbacks suppressed [ 873.321803][T18085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.366058][T18085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.384400][ T1242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.435859][ T1245] __nla_validate_parse: 79 callbacks suppressed [ 873.435879][ T1245] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7470'. [ 873.455010][ T1236] syzkaller1: entered promiscuous mode [ 873.473669][ T1236] syzkaller1: entered allmulticast mode [ 873.492227][ T1247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7471'. [ 873.529673][ T1247] hsr_slave_0: left promiscuous mode [ 873.542799][ T1247] hsr_slave_1: left promiscuous mode [ 873.839541][ T1265] vlan2: entered allmulticast mode [ 873.857736][ T1269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7478'. [ 874.025989][ T1278] : entered promiscuous mode [ 874.035601][ T1277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7481'. [ 874.286006][ T1289] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 874.514560][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.549528][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.861206][ T1331] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7494'. [ 874.874077][ T1331] syzkaller0: entered promiscuous mode [ 874.879592][ T1331] syzkaller0: entered allmulticast mode [ 874.896108][ T1331] tc action pedit offset must be on 32 bit boundaries [ 874.955944][ T1336] validate_nla: 62 callbacks suppressed [ 874.955967][ T1336] netlink: 'syz.4.7495': attribute type 3 has an invalid length. [ 874.974533][ T1336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.025219][ T1339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7496'. [ 875.066416][ T1339] veth3: entered promiscuous mode [ 875.072053][ T1339] veth3: entered allmulticast mode [ 875.144037][ T1344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7498'. [ 875.289423][ T1352] netlink: 'syz.0.7501': attribute type 1 has an invalid length. [ 875.489502][ T1369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7505'. [ 875.546103][ T1369] bond0: (slave bridge0): Releasing backup interface [ 875.691294][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.711800][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.713853][ T1377] netlink: 'syz.4.7507': attribute type 33 has an invalid length. [ 875.839699][ T1377] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 875.862139][ T1390] netlink: 'syz.1.7510': attribute type 3 has an invalid length. [ 875.881812][ T1391] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7507'. [ 875.893527][ T1377] bond5 (unregistering): Released all slaves [ 875.980626][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 875.988711][ C0] lec:lec_tx_timeout: lec0 [ 875.997716][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.061980][ T1391] bond5 (unregistering): Released all slaves [ 876.282485][ T1408] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 876.313655][ T1414] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7515'. [ 876.321897][ T1411] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 876.526726][ T1421] netlink: 'syz.2.7517': attribute type 1 has an invalid length. [ 876.798874][ T1447] IPVS: Error connecting to the multicast addr [ 876.842074][T18085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.976634][ T1460] netlink: 'syz.2.7528': attribute type 30 has an invalid length. [ 877.096204][ T1460] bond6: option arp_missed_max: invalid value (0) [ 877.107993][ T1460] bond6: option arp_missed_max: allowed values 1 - 255 [ 877.139573][ T1460] bond6 (unregistering): Released all slaves [ 877.199375][ T1475] syzkaller0: entered promiscuous mode [ 877.205646][ T1475] syzkaller0: entered allmulticast mode [ 877.287998][ T1482] netlink: 'syz.3.7534': attribute type 1 has an invalid length. [ 877.334862][ T1482] bond5: entered promiscuous mode [ 877.340336][ T1482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 877.370196][ T1482] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 877.384205][ T1482] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 877.395061][ T1482] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 877.421404][T31914] Bluetooth: hci4: command 0x0406 tx timeout [ 877.524749][ T1490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.156392][ T1525] bond6: option xmit_hash_policy: invalid value (64) [ 878.182363][ T1525] bond6 (unregistering): Released all slaves [ 878.547074][ T5918] net_ratelimit: 7 callbacks suppressed [ 878.547094][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.562197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.577277][ T1546] __nla_validate_parse: 12 callbacks suppressed [ 878.577348][ T1546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7554'. [ 878.722839][ T1555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7557'. [ 878.868830][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.963800][ T1572] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7562'. [ 879.086540][ T1570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7561'. [ 879.086567][ T1576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7563'. [ 879.097073][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.120383][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.235168][ T1582] team0: No ports can be present during mode change [ 879.367638][ T1595] bridge_slave_1: entered promiscuous mode [ 879.633507][ T1616] IPVS: set_ctl: invalid protocol: 0 172.20.20.24:20001 [ 879.645060][ T1616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7575'. [ 879.714954][ T1620] sctp: [Deprecated]: syz.1.7574 (pid 1620) Use of int in max_burst socket option deprecated. [ 879.714954][ T1620] Use struct sctp_assoc_value instead [ 879.814634][ T1626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7576'. [ 879.939797][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7577'. [ 880.292234][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.326677][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.361721][ T1660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.370395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.481287][ T1666] syzkaller0: entered promiscuous mode [ 880.486822][ T1666] syzkaller0: entered allmulticast mode [ 880.516499][ T1672] netlink: 'syz.4.7587': attribute type 1 has an invalid length. [ 880.559761][ T1682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7589'. [ 880.584770][ T1682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7589'. [ 880.719075][ T1690] netlink: 'syz.3.7591': attribute type 10 has an invalid length. [ 880.779529][ T1690] hsr0: mtu greater than device maximum [ 880.798807][ T1693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.228441][ T1719] bond0: (slave rose0): Enslaving as an active interface with an up link [ 881.495121][ T1749] wireguard0: entered promiscuous mode [ 881.505342][ T1749] wireguard0: entered allmulticast mode [ 883.650863][ T6336] net_ratelimit: 4 callbacks suppressed [ 883.650886][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.665119][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.187570][ T1722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 884.312486][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.321888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.538921][ T1784] sctp: [Deprecated]: syz.2.7620 (pid 1784) Use of int in max_burst socket option. [ 884.538921][ T1784] Use struct sctp_assoc_value instead [ 884.744577][ T1801] netlink: 'syz.4.7622': attribute type 1 has an invalid length. [ 884.783673][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.794491][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.845358][ T1803] __nla_validate_parse: 9 callbacks suppressed [ 884.845378][ T1803] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7624'. [ 884.933746][ T1810] bond7: Removing last arp target with arp_interval on [ 885.170201][ T1829] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7631'. [ 885.186497][ T1829] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7631'. [ 885.211656][ T1827] nbd0: detected capacity change from 0 to 127 [ 885.223153][ T5832] block nbd0: Receive control failed (result -32) [ 885.234733][ T1094] block nbd0: Dead connection, failed to find a fallback [ 885.424026][ T1841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7634'. [ 885.534099][ T1847] netlink: 'syz.1.7635': attribute type 83 has an invalid length. [ 885.584269][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.609422][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.618771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.711219][ T1855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7638'. [ 885.739896][ T1855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7638'. [ 885.780449][ T1855] xfrm1: entered promiscuous mode [ 885.807410][ T1856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7638'. [ 885.838668][ T1855] xfrm1: entered allmulticast mode [ 885.924300][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.156758][ T1866] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7643'. [ 886.185084][ T1868] netlink: 'syz.4.7642': attribute type 1 has an invalid length. [ 886.233878][ T1868] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7642'. [ 886.266397][ T1872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7645'. [ 886.302857][ T1868] netlink: 'syz.4.7642': attribute type 16 has an invalid length. [ 886.332006][ T1868] netlink: 'syz.4.7642': attribute type 17 has an invalid length. [ 886.387740][ T1868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.405153][ T1868] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.418104][ T1868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.470906][ T1868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.495397][ T1868] veth0_macvtap: left promiscuous mode [ 886.502468][ T1868] veth0_macvtap: entered promiscuous mode [ 886.573661][ T1868] ip6tnl1: left promiscuous mode [ 886.584680][ T1868] bond1: left promiscuous mode [ 886.589646][ T1868] bond1: left allmulticast mode [ 886.596041][ T1868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.605071][ T1868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 886.621815][ T1868] bond4: left allmulticast mode [ 886.627943][ T1868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 886.636612][ T1868] bridge6: left promiscuous mode [ 886.642449][ T1868] bridge6: left allmulticast mode [ 886.648595][ T1868] geneve2: left promiscuous mode [ 886.659725][ T1868] geneve2: left allmulticast mode [ 886.822837][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.845153][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.853080][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.951105][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 887.058252][ T1896] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 887.414325][ T1927] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 887.503386][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 887.844190][ T1954] netlink: 'syz.0.7669': attribute type 21 has an invalid length. [ 887.862676][ T1954] 8021q: VLANs not supported on wlan0 [ 887.877215][ T1954] pim6reg: left allmulticast mode [ 888.413347][ T1988] tipc: Started in network mode [ 888.418395][ T1988] tipc: Node identity ac14140f, cluster identity 4711 [ 888.426278][ T1988] tipc: New replicast peer: 255.255.255.255 [ 888.433711][ T1988] tipc: Enabled bearer , priority 5 [ 888.837656][ T2007] nla_validate_range_unsigned: 55 callbacks suppressed [ 888.837677][ T2007] netlink: 'syz.3.7685': attribute type 11 has an invalid length. [ 888.985375][ T2020] delete_channel: no stack [ 889.208134][ T2034] syzkaller0: entered promiscuous mode [ 889.214255][ T2034] syzkaller0: entered allmulticast mode [ 889.241766][ T2034] xt_hashlimit: size too large, truncated to 1048576 [ 889.283665][ T6336] net_ratelimit: 13 callbacks suppressed [ 889.283687][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.312410][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.329097][ T2044] netlink: 'syz.0.7695': attribute type 1 has an invalid length. [ 890.443488][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.452373][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.461223][ T5832] Bluetooth: hci0: command 0x0405 tx timeout [ 890.941967][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 891.181393][ T5945] tipc: Node number set to 2886997007 [ 891.460112][ T2086] tipc: Enabling of bearer rejected, failed to enable media [ 891.528553][ T2086] can: request_module (can-proto-0) failed. [ 891.564701][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.591121][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.854217][ T2101] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 891.981395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.033495][ T2110] __nla_validate_parse: 13 callbacks suppressed [ 892.033517][ T2110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7712'. [ 892.074737][ T2113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.177134][ T2116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 892.184420][ T2116] IPv6: NLM_F_CREATE should be set when creating new route [ 892.191722][ T2116] IPv6: NLM_F_CREATE should be set when creating new route [ 892.258533][ T2119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7716'. [ 892.631973][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.782270][ T2066] Bluetooth: hci1: command 0x0406 tx timeout [ 892.789049][ T2066] Bluetooth: hci5: command 0x0406 tx timeout [ 893.405886][ T2186] bond5: entered promiscuous mode [ 893.412196][ T2186] bond5: entered allmulticast mode [ 893.419103][ T2186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 893.473924][ T2191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7736'. [ 894.387599][ T2248] netlink: 'syz.4.7749': attribute type 1 has an invalid length. [ 894.412414][ T2251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7751'. [ 894.457764][ T2259] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7750'. [ 894.480151][ T2259] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7750'. [ 894.516537][ T2259] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7750'. [ 894.537814][ T2248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7749'. [ 894.551021][ T2259] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7750'. [ 894.560315][ T2252] net_ratelimit: 7 callbacks suppressed [ 894.560331][ T2252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.575420][ T2252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.596915][ T2259] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7750'. [ 894.610342][ T2257] bond6: (slave geneve3): making interface the new active one [ 894.623906][ T2257] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 894.658232][ T2248] 8021q: adding VLAN 0 to HW filter on device bond6 [ 894.682183][T18085] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 894.704550][T18085] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 894.734074][T18085] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 894.766880][T18085] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 894.905069][ T2282] veth0: entered promiscuous mode [ 894.911823][ T2281] veth0: left promiscuous mode [ 894.925453][T18085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.934124][T18085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.181767][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.537416][ T2329] netlink: zone id is out of range [ 895.543311][ T2329] netlink: zone id is out of range [ 895.548481][ T2329] netlink: zone id is out of range [ 895.555915][ T2329] netlink: zone id is out of range [ 895.561663][ T2329] netlink: zone id is out of range [ 895.941161][ T2353] netlink: 'syz.0.7774': attribute type 12 has an invalid length. [ 896.277498][ T2374] syzkaller0: entered promiscuous mode [ 896.283222][ T2374] syzkaller0: entered allmulticast mode [ 896.419075][ T2388] bridge_slave_0: invalid flags given to default FDB implementation [ 896.557077][ T2394] batadv0: left allmulticast mode [ 896.585256][ T2394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.936831][ T2427] ip6erspan1: entered allmulticast mode [ 896.996528][ T2424] netlink: 'syz.1.7795': attribute type 4 has an invalid length. [ 897.082316][ T2439] vxcan1 speed is unknown, defaulting to 1000 [ 897.161061][ T2443] xt_hashlimit: overflow, try lower: 3/0 [ 897.468293][ T2472] tunl0: entered promiscuous mode [ 897.482695][ T2473] __nla_validate_parse: 8 callbacks suppressed [ 897.482716][ T2473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7804'. [ 897.502851][ T2472] netlink: 'syz.0.7805': attribute type 3 has an invalid length. [ 897.514389][ T2472] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7805'. [ 897.528061][ T2473] batadv0: entered allmulticast mode [ 897.536106][ T2473] team_slave_0: left promiscuous mode [ 897.544145][ T2473] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 897.552421][ T2473] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 897.598271][ T2473] mac80211_hwsim hwsim75 wlan0: left promiscuous mode [ 897.605761][ T2473] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 897.627169][ T2473] veth0_to_batadv: entered allmulticast mode [ 897.649017][ T2473] bond0: left promiscuous mode [ 897.665213][ T2473] : entered allmulticast mode [ 897.673165][ T2473] bond3: entered allmulticast mode [ 897.678650][ T2473] vxcan2: entered allmulticast mode [ 897.692774][ T2473] bridge2: entered allmulticast mode [ 897.708484][ T2473] bond4: left promiscuous mode [ 897.713761][ T2473] bridge3: left promiscuous mode [ 897.719177][ T2473] bond4: entered allmulticast mode [ 897.726849][ T2473] bridge3: entered allmulticast mode [ 897.746588][ T2473] bridge4: entered allmulticast mode [ 897.763857][ T2473] bond5: entered allmulticast mode [ 897.782890][ T2473] veth6: entered allmulticast mode [ 897.789558][ T2473] veth7: entered allmulticast mode [ 897.804897][ T2473] bond6: entered allmulticast mode [ 897.817242][ T2473] bridge5: entered allmulticast mode [ 897.835735][ T2480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7806'. [ 897.845538][ T2481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7806'. [ 897.869759][ T6339] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.881855][ T2489] netlink: 'syz.3.7810': attribute type 16 has an invalid length. [ 897.895333][ T6339] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.901750][ T2489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7810'. [ 897.932153][ T6339] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.973376][ T6339] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.014120][ T2492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7812'. [ 898.422561][ T2528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7820'. [ 898.464753][ T2534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7821'. [ 898.882065][ T2552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7825'. [ 899.018286][ T2564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7826'. [ 899.018987][ T2560] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 899.027478][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 899.048367][ T2560] bond7 (unregistering): Released all slaves [ 899.203817][ T2571] vlan2: entered allmulticast mode [ 899.570986][ T2602] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 899.589570][ T2602] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 900.108260][ T2636] netlink: 'syz.4.7846': attribute type 1 has an invalid length. [ 900.124211][ T2636] net_ratelimit: 10 callbacks suppressed [ 900.124250][ T2636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.417457][ T2660] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 900.532395][ T2665] netlink: 'syz.4.7851': attribute type 2 has an invalid length. [ 900.765897][ T2680] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 900.813264][ T2680] bond8 (unregistering): Released all slaves [ 901.052760][ T2697] netlink: 'syz.0.7859': attribute type 10 has an invalid length. [ 901.083355][ T2699] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20002 [ 901.495639][ T2715] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 901.507291][ T2715] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 901.524600][ T2715] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.537370][ T2715] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 901.743615][ T2715] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 901.777671][ T2715] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 901.810671][ T2715] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.849372][ T2715] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 901.995540][ T2715] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 902.016388][ T2715] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 902.027854][ T2715] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.048520][ T2715] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 902.162052][ T2761] netlink: 'syz.0.7873': attribute type 1 has an invalid length. [ 902.173623][ T2715] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 902.179283][ T2761] netlink: 'syz.0.7873': attribute type 2 has an invalid length. [ 902.200621][ T2715] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 902.221314][ T2715] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.260669][ T2715] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 902.396973][ T2775] netlink: 'syz.3.7876': attribute type 11 has an invalid length. [ 902.474125][ T2777] netlink: 'syz.3.7876': attribute type 11 has an invalid length. [ 902.491422][ T2777] __nla_validate_parse: 14 callbacks suppressed [ 902.491441][ T2777] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.7876'. [ 902.594657][ T1002] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.606364][ T1002] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 902.624056][ T1002] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 902.634855][ T1002] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 902.701971][ T6339] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.745918][ T2785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7881'. [ 902.756658][ T6339] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 902.770630][ T6339] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 902.788137][ T6339] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 902.841458][ T6339] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.849678][ T6339] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 902.879163][ T6339] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 902.897325][ T6339] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 902.938494][ T8089] lec:lec_start_xmit: lec0:No lecd attached [ 902.960593][ T6339] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.982693][ T6339] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 903.008895][ T6339] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 903.022036][ T2798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7883'. [ 903.040892][ T6339] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 903.291539][ T2811] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7887'. [ 903.394836][ T2824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7889'. [ 903.624897][ T2844] xt_l2tp: invalid flags combination: 0 [ 903.963786][ T2881] netlink: 'syz.2.7900': attribute type 1 has an invalid length. [ 904.034595][ T2881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 904.059555][ T2874] vlan2: entered promiscuous mode [ 904.065177][ T2874] bond7: entered promiscuous mode [ 904.070714][ T2874] vlan2: entered allmulticast mode [ 904.076197][ T2874] bond7: entered allmulticast mode [ 904.144279][ T2874] bond7: (slave bridge6): making interface the new active one [ 904.153432][ T2891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7902'. [ 904.181538][ T2874] bridge6: entered promiscuous mode [ 904.198613][ T2874] bridge6: entered allmulticast mode [ 904.219788][ T2874] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 904.645552][ T2916] netlink: 'syz.3.7907': attribute type 1 has an invalid length. [ 904.707613][ T2921] netlink: 'syz.0.7909': attribute type 12 has an invalid length. [ 905.482034][ T2959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7925'. [ 905.581680][ T2963] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7918'. [ 905.659548][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7927'. [ 907.980763][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 907.988822][ C0] lec:lec_tx_timeout: lec0 [ 914.380738][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 929.238936][ T2996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7932'. [ 929.294065][ T3008] bond6: option mode: invalid value (133) [ 929.314985][ T3008] bond6 (unregistering): Released all slaves [ 929.344711][ T3006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7932'. [ 929.554316][ T3024] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 929.644701][ T3029] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 929.692170][ T3029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.739962][ T3038] netlink: 408 bytes leftover after parsing attributes in process `syz.4.7943'. [ 929.796581][ T3043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7944'. [ 929.820428][ T3043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7944'. [ 929.855743][ T3036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7942'. [ 930.142675][ T3067] netlink: 'syz.4.7949': attribute type 1 has an invalid length. [ 930.326998][ T3082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.345699][ T3082] xt_ecn: cannot match TCP bits for non-tcp packets [ 930.466126][ T3089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7954'. [ 930.495170][ T3090] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7953'. [ 930.564174][ T3095] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7956'. [ 930.667918][ T3100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7957'. [ 931.649232][ T3119] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 931.668358][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.676249][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 933.381975][ T3084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 933.661214][ T5832] Bluetooth: hci0: command 0x0405 tx timeout [ 934.475423][ T3196] __nla_validate_parse: 6 callbacks suppressed [ 934.475444][ T3196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7983'. [ 934.585463][ T3202] netlink: 'syz.4.7987': attribute type 3 has an invalid length. [ 934.630950][ T3202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7987'. [ 934.668966][ T3202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7987'. [ 934.718467][ T3210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7989'. [ 934.811576][ T3214] xt_CONNSECMARK: invalid mode: 0 [ 935.212754][ T3241] netlink: 'syz.3.7999': attribute type 2 has an invalid length. [ 935.249917][ T3239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7998'. [ 935.276454][ T3239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7998'. [ 935.451524][ T3255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8001'. [ 935.479514][ T3256] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 935.656419][ T3272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8009'. [ 935.671054][ T3272] openvswitch: netlink: Flow key attr not present in new flow. [ 935.671780][ T3270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8008'. [ 935.747904][ T3279] netlink: 208 bytes leftover after parsing attributes in process `syz.0.8005'. [ 935.796113][ T3283] 8021q: adding VLAN 0 to HW filter on device bond6 [ 935.883742][ T3287] syzkaller0: entered promiscuous mode [ 935.889275][ T3287] syzkaller0: entered allmulticast mode [ 936.024759][ T3292] netlink: 'syz.1.8015': attribute type 5 has an invalid length. [ 936.045056][ T3292] geneve4: entered promiscuous mode [ 936.050938][ T3292] geneve4: entered allmulticast mode [ 936.062282][ T3294] netlink: 'syz.3.8016': attribute type 6 has an invalid length. [ 936.070307][ T6336] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 936.083010][ T6336] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 936.097444][ T6336] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 936.115772][ T6336] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 936.868789][ T3340] Cannot find del_set index 4 as target [ 937.021011][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 937.029110][ C0] lec:lec_tx_timeout: lec0 [ 938.525259][ T3263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.734446][ T3355] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 939.194761][ T3400] tunl0: left promiscuous mode [ 939.234900][ T3400] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 939.270887][ T3381] syzkaller0: entered promiscuous mode [ 939.589035][ T3429] netlink: 'syz.0.8059': attribute type 1 has an invalid length. [ 939.598526][ T3429] netlink: 'syz.0.8059': attribute type 2 has an invalid length. [ 939.621612][ T3425] SET target dimension over the limit! [ 939.698532][ T3427] __nla_validate_parse: 9 callbacks suppressed [ 939.698562][ T3427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8058'. [ 939.716762][ T3427] openvswitch: netlink: Flow key attr not present in new flow. [ 939.774835][ T3439] netlink: 'syz.0.8062': attribute type 2 has an invalid length. [ 939.784129][ T3432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8060'. [ 939.823252][ T3435] vxcan1 speed is unknown, defaulting to 1000 [ 939.836908][ T3436] syzkaller0: entered promiscuous mode [ 939.844964][ T3436] syzkaller0: entered allmulticast mode [ 939.872608][ T3432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8060'. [ 939.957845][ T3432] gretap1: entered promiscuous mode [ 939.977207][ T3432] gretap1: entered allmulticast mode [ 940.312904][ T3468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8070'. [ 940.571226][ T3474] syzkaller0: entered promiscuous mode [ 940.576911][ T3474] syzkaller0: entered allmulticast mode [ 940.592556][ T3474] netlink: 'syz.0.8073': attribute type 10 has an invalid length. [ 940.759461][ T3486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8074'. [ 942.740940][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8080'. [ 942.783051][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8082'. [ 942.824795][ T3505] netlink: 'syz.1.8081': attribute type 1 has an invalid length. [ 942.949583][ T3513] netlink: 'syz.0.8080': attribute type 8 has an invalid length. [ 942.958502][ T3513] sch_fq: defrate 0 ignored. [ 942.965740][ T3505] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 942.978891][ T3510] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8082'. [ 943.001586][ T3512] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8079'. [ 943.030062][ T3519] netlink: 'syz.4.8082': attribute type 10 has an invalid length. [ 943.038906][ T3510] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8082'. [ 943.062773][ T3504] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 943.093063][ T3504] bond8 (unregistering): Released all slaves [ 943.248243][ T3532] bridge_slave_0: entered promiscuous mode [ 944.125500][ T3586] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 944.244979][ T3593] netlink: 'syz.2.8108': attribute type 61 has an invalid length. [ 944.392520][ T3603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 944.432143][ T3601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13 [ 944.461408][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 944.650289][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.965621][ T3638] __nla_validate_parse: 15 callbacks suppressed [ 944.965644][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8118'. [ 945.148053][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8118'. [ 945.257551][ T3645] vxcan1 speed is unknown, defaulting to 1000 [ 945.538532][ T3670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8129'. [ 945.555180][ T3672] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8130'. [ 945.570750][ T3672] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8130'. [ 945.755280][ T3682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8134'. [ 945.899912][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8136'. [ 945.978173][ T3693] bond8: entered promiscuous mode [ 946.011294][ T3693] 8021q: adding VLAN 0 to HW filter on device bond8 [ 946.079881][ T3696] bridge6: entered promiscuous mode [ 946.086181][ T3696] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 946.102981][ T3701] macvlan1: entered promiscuous mode [ 946.108439][ T3701] macvlan1: entered allmulticast mode [ 946.115433][ T3701] bond8: (slave macvlan1): Error -98 calling set_mac_address [ 946.141968][ T3703] ip6gre1: entered allmulticast mode [ 946.574694][ T3729] netlink: 'syz.3.8146': attribute type 21 has an invalid length. [ 946.582829][ T3729] IPv6: NLM_F_CREATE should be specified when creating new route [ 946.705920][ T3733] netlink: 'syz.3.8147': attribute type 2 has an invalid length. [ 946.753788][ T3735] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 946.844724][ T3743] bridge0: port 2(wlan0) entered blocking state [ 946.881756][ T3743] bridge0: port 2(wlan0) entered disabled state [ 946.889582][ T3743] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 947.070300][ T3755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8154'. [ 947.267552][ T3763] netlink: 'syz.2.8156': attribute type 1 has an invalid length. [ 947.294217][ T3763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8156'. [ 947.314099][ T3763] netlink: 658 bytes leftover after parsing attributes in process `syz.2.8156'. [ 947.325174][ T3763] netlink: 'syz.2.8156': attribute type 1 has an invalid length. [ 947.455106][ T3773] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 947.923786][ T3799] syzkaller0: entered promiscuous mode [ 947.929433][ T3799] syzkaller0: entered allmulticast mode [ 949.672290][ T5195] udevd[5195]: worker [1094] /devices/virtual/block/nbd0 is taking a long time [ 949.950710][ T3844] netlink: 'syz.0.8178': attribute type 10 has an invalid length. [ 950.024248][ T3844] team0 (unregistering): Port device vxcan1 removed [ 950.264414][ T3868] __nla_validate_parse: 4 callbacks suppressed [ 950.264438][ T3868] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8184'. [ 950.316204][ T3868] bond0 (unregistering): Released all slaves [ 950.351325][ T3869] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 950.461224][ T3873] netlink: 'syz.3.8185': attribute type 83 has an invalid length. [ 950.721382][ T3899] Cannot find set identified by id 65534 to match [ 950.853633][ T3906] netlink: 'syz.4.8194': attribute type 1 has an invalid length. [ 950.913003][ T3906] netlink: 'syz.4.8194': attribute type 1 has an invalid length. [ 950.978438][ T3912] delete_channel: no stack [ 951.071466][ T3921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8198'. [ 951.133654][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8198'. [ 951.409198][ T3942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8202'. [ 951.440120][ T3942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8202'. [ 951.598929][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8205'. [ 951.670058][ T3950] syzkaller0: entered promiscuous mode [ 951.698082][ T3950] syzkaller0: entered allmulticast mode [ 951.724584][ T3957] netlink: 'syz.0.8207': attribute type 1 has an invalid length. [ 951.841671][ T3957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.949101][ T3967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8210'. [ 951.970690][ T3967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8210'. [ 951.999059][ T3962] bond0: (slave veth7): Enslaving as an active interface with a down link [ 952.055393][ T3963] vlan5: entered allmulticast mode [ 952.069839][ T3963] veth0_to_bond: entered allmulticast mode [ 952.100828][ T3963] bond0: (slave vlan5): Opening slave failed [ 952.229296][ T3975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.255590][ T3986] netlink: 'syz.1.8214': attribute type 11 has an invalid length. [ 952.291560][ T3986] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8214'. [ 952.325270][ T3992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8215'. [ 952.595004][ T4006] netlink: 'syz.1.8220': attribute type 1 has an invalid length. [ 952.924655][ T4029] netlink: 'syz.1.8226': attribute type 1 has an invalid length. [ 953.600345][ T4077] netlink: 'syz.1.8239': attribute type 8 has an invalid length. [ 953.627280][ T4077] sch_fq: defrate 0 ignored. [ 953.986525][ T4104] netlink: 'syz.3.8247': attribute type 3 has an invalid length. [ 954.062692][ T4113] openvswitch: netlink: EtherType 53b is less than min 600 [ 954.433491][ T4140] netlink: 'syz.2.8253': attribute type 12 has an invalid length. [ 954.724595][ T4154] openvswitch: netlink: Unknown key attributes 2 [ 954.806779][ T4163] IPv6: sit1: Disabled Multicast RS [ 954.818618][ T4163] sit1: entered allmulticast mode [ 955.008094][ T4170] bond9: option fail_over_mac: invalid value (16) [ 955.016654][ T4180] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 955.042016][ T4170] bond9 (unregistering): Released all slaves [ 955.175820][ T4190] tap0: tun_chr_ioctl cmd 2148553947 [ 955.195982][T31914] Bluetooth: hci0: command 0x0405 tx timeout [ 955.204465][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 955.570759][ T4212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 955.609408][ T4216] openvswitch: netlink: Tunnel attr 321 out of range max 16 [ 955.631330][ T4184] __nla_validate_parse: 13 callbacks suppressed [ 955.631348][ T4184] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8266'. [ 955.654490][ T4184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8266'. [ 956.192665][ T4248] x_tables: duplicate underflow at hook 2 [ 956.277311][ T4254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8284'. [ 956.546168][ T4273] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 956.694683][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8293'. [ 956.723779][ T4282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8295'. [ 956.784339][ T4284] delete_channel: no stack [ 956.899784][ T4287] syzkaller0: entered promiscuous mode [ 956.906338][ T4287] syzkaller0: entered allmulticast mode [ 957.234226][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8303'. [ 957.245618][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8303'. [ 958.701301][ T4312] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 958.711580][ T4306] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 958.836879][ T4329] netlink: 'syz.0.8306': attribute type 2 has an invalid length. [ 958.866697][ T4331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8305'. [ 958.996749][ T4340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8308'. [ 959.013117][ T4341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8307'. [ 959.075847][ T4343] netlink: 'syz.3.8309': attribute type 29 has an invalid length. [ 959.115657][ T4345] netlink: 'syz.3.8309': attribute type 29 has an invalid length. [ 959.267996][ T4359] 8021q: VLANs not supported on wlan0 [ 960.099783][ T4410] netlink: 'syz.0.8329': attribute type 1 has an invalid length. [ 960.167330][ T4410] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 960.325713][ T4434] netlink: 'syz.1.8334': attribute type 1 has an invalid length. [ 960.383823][ T4439] netlink: 'syz.2.8335': attribute type 2 has an invalid length. [ 960.581066][ T4458] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 960.697137][ T4468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 960.704438][ T4468] IPv6: NLM_F_CREATE should be set when creating new route [ 960.711775][ T4468] IPv6: NLM_F_CREATE should be set when creating new route [ 960.719042][ T4468] IPv6: NLM_F_CREATE should be set when creating new route [ 960.871189][ T4483] netlink: 'syz.2.8344': attribute type 16 has an invalid length. [ 960.890790][ T4483] netlink: 'syz.2.8344': attribute type 17 has an invalid length. [ 960.936169][ T4483] lo: left allmulticast mode [ 960.994374][ T4483] tunl0: left allmulticast mode [ 961.006701][ T4483] gre0: left allmulticast mode [ 961.015455][ T4483] gretap0: left allmulticast mode [ 961.095459][ T4483] erspan0: left allmulticast mode [ 961.104377][ T4483] ip_vti0: left allmulticast mode [ 961.109677][ T4493] __nla_validate_parse: 10 callbacks suppressed [ 961.109695][ T4493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8350'. [ 961.109839][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8347'. [ 961.124952][ T4483] ip6_vti0: left allmulticast mode [ 961.143912][ T4483] sit0: left allmulticast mode [ 961.153079][ T4483] ip6tnl0: left allmulticast mode [ 961.164170][ T4483] ip6gre0: left allmulticast mode [ 961.172485][ T4483] syz_tun: left allmulticast mode [ 961.180909][ T4483] ip6gretap0: left allmulticast mode [ 961.189745][ T4483] bridge0: left allmulticast mode [ 961.196527][ T4483] : left allmulticast mode [ 961.203061][ T4483] 8021q: adding VLAN 0 to HW filter on device  [ 961.211553][ T4483] nlmon0: left allmulticast mode [ 961.218036][ T4483] caif0: left allmulticast mode [ 961.223815][ T4483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 961.287004][ T4493] bond8: entered promiscuous mode [ 961.293106][ T4493] 8021q: adding VLAN 0 to HW filter on device bond8 [ 961.427417][ T4496] vlan4: entered allmulticast mode [ 961.441766][ T4496] bond8: entered allmulticast mode [ 961.600435][ T4515] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8354'. [ 961.695560][ T4520] netlink: 'syz.2.8358': attribute type 14 has an invalid length. [ 961.711507][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8358'. [ 961.733755][ T4520] netlink: 'syz.2.8358': attribute type 14 has an invalid length. [ 961.768490][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8358'. [ 961.802267][ T4520] netlink: 340 bytes leftover after parsing attributes in process `syz.2.8358'. [ 962.081495][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8365'. [ 962.091629][ T4549] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8363'. [ 962.213686][ T4559] pim6reg1: entered promiscuous mode [ 962.219189][ T4559] pim6reg1: entered allmulticast mode [ 962.483195][ T4575] openvswitch: netlink: IP tunnel dst address not specified [ 962.500221][ T4576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8375'. [ 962.512931][ T4580] openvswitch: netlink: IP tunnel dst address not specified [ 962.539040][ T4578] syzkaller0: entered promiscuous mode [ 962.581484][ T4578] syzkaller0: entered allmulticast mode [ 962.595904][ T4585] 0: reclassify loop, rule prio 0, protocol 800 [ 962.668315][ T4589] sctp: [Deprecated]: syz.2.8378 (pid 4589) Use of int in max_burst socket option deprecated. [ 962.668315][ T4589] Use struct sctp_assoc_value instead [ 962.698536][ T4590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8377'. [ 962.817445][ T4597] erspan0: entered promiscuous mode [ 962.823051][ T4597] erspan0: entered allmulticast mode [ 962.889621][ T4602] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 962.997292][ T4609] netlink: 'syz.3.8385': attribute type 11 has an invalid length. [ 963.025570][ T4609] team0: Device vxcan1 is of different type [ 963.062899][ T4613] x_tables: duplicate underflow at hook 1 [ 963.089655][ T4610] bond0: entered promiscuous mode [ 963.118230][ T4610] bond_slave_0: entered promiscuous mode [ 963.139382][ T4610] bond_slave_1: entered promiscuous mode [ 963.155714][ T4610] bridge_slave_1: entered promiscuous mode [ 963.185410][ T4610] gretap0: entered promiscuous mode [ 963.213548][ T4610] hsr1: entered promiscuous mode [ 963.279614][ T4628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 963.451838][ T4639] ip6t_srh: unknown srh invflags 4000 [ 964.449533][ T4721] SET target dimension over the limit! [ 964.542119][ T4731] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 964.552648][ T4730] vxcan1 speed is unknown, defaulting to 1000 [ 964.714578][ T4736] tipc: Started in network mode [ 964.755497][ T4736] tipc: Node identity ac14140f, cluster identity 4711 [ 964.763868][ T4736] tipc: New replicast peer: 255.255.255.255 [ 964.770665][ T4736] tipc: Enabled bearer , priority 5 [ 965.049063][ T4754] Cannot find add_set index 65532 as target [ 965.183813][ T4758] vxcan1 speed is unknown, defaulting to 1000 [ 965.526305][ T4782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.701839][ T4788] validate_nla: 11 callbacks suppressed [ 965.701859][ T4788] netlink: 'syz.2.8435': attribute type 1 has an invalid length. [ 965.881972][ T5904] tipc: Node number set to 2886997007 [ 966.133018][ T4815] IPv6: NLM_F_CREATE should be specified when creating new route [ 966.257075][ T4806] __nla_validate_parse: 12 callbacks suppressed [ 966.257096][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8439'. [ 966.424134][ T4821] syzkaller1: entered promiscuous mode [ 966.429943][ T4821] syzkaller1: entered allmulticast mode [ 966.592266][ T4831] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 966.745021][ T4843] netlink: 'syz.4.8448': attribute type 1 has an invalid length. [ 966.795558][ T4844] IPv6: sit3: Disabled Multicast RS [ 966.806563][ T4844] sit3: entered allmulticast mode [ 966.893511][ T4843] bond10: entered promiscuous mode [ 966.900246][ T4843] 8021q: adding VLAN 0 to HW filter on device bond10 [ 966.947553][ T4853] bond10: (slave bridge9): making interface the new active one [ 966.988227][ T4853] bridge9: entered promiscuous mode [ 967.005802][ T4853] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 967.076285][ T4860] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 967.091142][ T4860] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 967.194395][ T8089] lec:lec_start_xmit: lec0:No lecd attached [ 967.338684][ T4872] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8454'. [ 967.389536][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8455'. [ 967.561058][ T4885] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8458'. [ 967.609378][ T4885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8458'. [ 967.650405][ T4889] nftables ruleset with unbound set [ 967.952219][ T4907] set match dimension is over the limit! [ 967.955432][ T4906] set match dimension is over the limit! [ 968.403040][ T4940] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 968.518606][ T4945] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 968.548034][ T4945] bond7: (slave lo): Enslaving as an active interface with an up link [ 968.564032][ T4945] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 968.680214][ T4955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8481'. [ 968.738846][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8480'. [ 968.865960][ T4974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 969.055044][ T4977] vxcan1 speed is unknown, defaulting to 1000 [ 969.070006][ T4981] netlink: 'syz.3.8485': attribute type 2 has an invalid length. [ 969.535376][ T5010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8492'. [ 969.936932][ T5025] bond9: invalid ARP target 0.0.0.0 specified for addition [ 969.940362][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8496'. [ 969.946562][ T5025] bond9: option arp_ip_target: invalid value (0) [ 969.994920][ T5025] bond9 (unregistering): Released all slaves [ 970.089331][ T5038] netlink: 'syz.2.8497': attribute type 39 has an invalid length. [ 970.387178][ T5052] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20002 [ 970.493401][ T5062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8507'. [ 970.917865][ T5076] netlink: 'syz.2.8511': attribute type 1 has an invalid length. [ 970.992829][ T5076] bond8: entered promiscuous mode [ 970.998537][ T5076] 8021q: adding VLAN 0 to HW filter on device bond8 [ 971.044129][ T5083] syzkaller0: entered promiscuous mode [ 971.063325][ T5083] syzkaller0: entered allmulticast mode [ 971.187165][ T5076] 8021q: adding VLAN 0 to HW filter on device bond8 [ 971.211129][ T5076] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 971.258552][ T5076] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 971.318390][ T5076] bond8: (slave ip6gre2): making interface the new active one [ 971.365525][ T5076] ip6gre2: entered promiscuous mode [ 971.397649][ T5076] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 971.703546][ T5122] xt_limit: Overflow, try lower: 271964/0 [ 971.742145][ T5125] netlink: 'syz.0.8515': attribute type 23 has an invalid length. [ 971.823590][ T5128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 971.860962][ T5123] veth0_to_bridge: entered promiscuous mode [ 971.952361][ T5123] veth0_to_bridge: left promiscuous mode [ 972.002972][ T5490] veth1_macvtap: left promiscuous mode [ 972.282920][ T5160] __nla_validate_parse: 3 callbacks suppressed [ 972.282941][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8526'. [ 972.383509][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8529'. [ 972.395882][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8529'. [ 972.414973][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8529'. [ 972.493990][ T5169] x_tables: unsorted entry at hook 3 [ 972.583951][ T5178] netlink: 'syz.3.8531': attribute type 10 has an invalid length. [ 972.609425][ T5188] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 972.624583][ T5178] team0: Device vxcan1 is of different type [ 972.817426][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8535'. [ 972.868533][ T5203] lo: entered promiscuous mode [ 972.877099][ T5203] netlink: 'syz.4.8533': attribute type 2 has an invalid length. [ 972.886721][ T5203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 972.968307][ T5210] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 973.020482][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 973.028577][ C0] lec:lec_tx_timeout: lec0 [ 973.072689][ T5210] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 973.109544][ T5210] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 973.209530][ T5210] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 973.224012][ T5226] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 973.278484][ T5216] syzkaller0: entered promiscuous mode [ 973.289491][ T5216] syzkaller0: entered allmulticast mode [ 973.329079][ T5210] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 973.420198][ T5210] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 975.105459][ T5210] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 975.307675][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8549'. [ 975.350984][ T5263] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 975.704438][ T5267] bond11: option miimon: invalid value (18446744073709551585) [ 975.713155][ T5267] bond11: option miimon: allowed values 0 - 2147483647 [ 975.727600][ T5267] bond11 (unregistering): Released all slaves [ 975.776366][ T5286] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8551'. [ 976.103279][ T5308] netlink: 'syz.0.8560': attribute type 4 has an invalid length. [ 976.148512][ T5313] netlink: 'syz.2.8561': attribute type 3 has an invalid length. [ 976.307388][ T5323] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8563'. [ 976.463599][ T5335] netlink: 'syz.4.8566': attribute type 1 has an invalid length. [ 976.555344][ T5335] 8021q: adding VLAN 0 to HW filter on device bond11 [ 976.586012][ T5338] bond11: (slave geneve4): making interface the new active one [ 976.597626][ T5338] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 976.628035][ T5345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.669989][ T5347] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8570'. [ 976.694873][ T5345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.759159][ T5351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8572'. [ 976.777325][ T5345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.792047][ T5351] netlink: 'syz.0.8572': attribute type 16 has an invalid length. [ 976.800260][ T5352] netlink: 'syz.0.8572': attribute type 16 has an invalid length. [ 976.916179][ T5362] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 976.992739][ T5367] netlink: 'syz.0.8577': attribute type 12 has an invalid length. [ 977.417078][ T5393] netlink: 'syz.0.8585': attribute type 18 has an invalid length. [ 977.430105][ T5393] __nla_validate_parse: 69 callbacks suppressed [ 977.430124][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8585'. [ 977.451516][ T5393] netlink: 'syz.0.8585': attribute type 18 has an invalid length. [ 977.491696][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8585'. [ 977.597736][ T5404] netlink: 'syz.0.8588': attribute type 3 has an invalid length. [ 977.653694][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8589'. [ 977.749183][ T5415] xt_ecn: cannot match TCP bits for non-tcp packets [ 977.856931][ T5420] siw: device registration error -23 [ 978.080270][ T5388] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 978.437185][ T5472] netlink: 'syz.1.8605': attribute type 8 has an invalid length. [ 980.803393][ T5421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 981.070144][ T5501] No such timeout policy "syz1" [ 981.349265][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8615'. [ 981.490124][ T5515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.510678][ T5515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.701230][ T5515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.726199][ T5515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.904538][ T5515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.919862][ T5515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.953814][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8624'. [ 982.003822][ T5515] bond0: (slave netdevsim0): Releasing backup interface [ 982.027458][ T5515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.061866][ T5515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.179298][ T5525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 982.197614][ T5525] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 982.208025][ T5525] gretap1: entered promiscuous mode [ 982.215793][ T5559] netlink: 'syz.1.8629': attribute type 1 has an invalid length. [ 982.227671][ T5525] gretap1: entered allmulticast mode [ 982.242335][ T5559] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 982.391788][ T6356] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.419130][ T6356] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.460141][ T5570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8632'. [ 982.547424][ T6356] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.557150][ T6356] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.568031][ T6356] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.577016][ T6356] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.601292][ T6356] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.609680][ T6356] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.757254][ T5593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8636'. [ 982.776290][ T5576] xt_CT: No such helper "pptp" [ 982.886467][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8638'. [ 982.951817][ T5602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 983.070138][ T5607] vlan4: entered promiscuous mode [ 983.075713][ T5607] vlan4: entered allmulticast mode [ 983.634877][ T5647] netlink: 'syz.0.8654': attribute type 4 has an invalid length. [ 983.657559][ T5647] netlink: 'syz.0.8654': attribute type 4 has an invalid length. [ 983.808792][ T5660] xt_l2tp: v2 doesn't support IP mode [ 983.860175][ T5664] syzkaller1: entered promiscuous mode [ 983.868495][ T5664] syzkaller1: entered allmulticast mode [ 983.926791][ T5670] netlink: 'syz.0.8659': attribute type 1 has an invalid length. [ 983.949905][ T5670] netlink: 'syz.0.8659': attribute type 3 has an invalid length. [ 983.967534][ T5670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8659'. [ 984.013326][ T5670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8659'. [ 984.270944][ T5678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8661'. [ 984.291020][ T5678] tipc: Invalid UDP bearer configuration [ 984.291075][ T5678] tipc: Enabling of bearer rejected, failed to enable media [ 984.415926][ T2159] udevd[2159]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 984.516916][ T3731] udevd[3731]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 985.181925][ T5726] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 985.476814][ T5738] dvmrp0: entered allmulticast mode [ 985.692781][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8680'. [ 985.723691][ T5740] syzkaller0: entered promiscuous mode [ 985.741075][ T5740] syzkaller0: entered allmulticast mode [ 986.120024][ T6334] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 986.315126][ T5764] IPVS: set_ctl: invalid protocol: 59 10.1.0.254:20004 [ 986.386249][ T5767] vxcan1 speed is unknown, defaulting to 1000 [ 986.465579][ T5774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8683'. [ 986.544658][ T5777] xfrm0: entered promiscuous mode [ 986.562898][ T5777] xfrm0: entered allmulticast mode [ 986.633368][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8685'. [ 989.007403][ T5757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 989.200050][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8691'. [ 989.447231][ T5847] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8694'. [ 989.468930][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8695'. [ 990.154201][ T5896] netlink: 'syz.0.8704': attribute type 1 has an invalid length. [ 990.278855][ T5896] bond8: entered promiscuous mode [ 990.284678][ T5896] 8021q: adding VLAN 0 to HW filter on device bond8 [ 990.379316][ T5911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.619327][ T5923] netlink: 'syz.0.8712': attribute type 33 has an invalid length. [ 990.668608][ T5923] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 990.701203][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8712'. [ 990.715453][ T5923] bond9 (unregistering): Released all slaves [ 990.783015][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8712'. [ 990.879036][ T5941] x_tables: duplicate underflow at hook 4 [ 990.916951][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8715'. [ 990.916951][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8715'. [ 990.916984][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8715'. [ 990.960965][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8715'. [ 991.015137][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8718'. [ 991.346198][ T5964] netlink: 'syz.3.8724': attribute type 1 has an invalid length. [ 991.467118][ T5964] 8021q: adding VLAN 0 to HW filter on device bond9 [ 991.547209][ T5970] bond9: (slave veth3): Enslaving as an active interface with a down link [ 991.585319][ T5978] bond9: (slave veth0_to_bond): making interface the new active one [ 991.604824][ T5978] veth0_to_bond: entered promiscuous mode [ 991.616644][ T5978] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 991.704413][ T5970] bond9: (slave veth5): Enslaving as an active interface with a down link [ 991.740849][ T5970] netlink: 'syz.3.8724': attribute type 1 has an invalid length. [ 991.749366][ T5970] netlink: 'syz.3.8724': attribute type 2 has an invalid length. [ 991.950951][ T5999] netlink: 'syz.0.8731': attribute type 1 has an invalid length. [ 992.157236][ T6013] netlink: 'syz.4.8734': attribute type 4 has an invalid length. [ 992.291775][ T6024] netlink: 'syz.3.8740': attribute type 1 has an invalid length. [ 992.346760][ T6036] netlink: 'syz.4.8743': attribute type 1 has an invalid length. [ 992.371983][ T6036] netlink: 'syz.4.8743': attribute type 2 has an invalid length. [ 992.459634][ T6042] netlink: 'syz.0.8745': attribute type 11 has an invalid length. [ 992.512548][ T6044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 992.562933][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 993.107713][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 993.114449][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 993.407556][ T6090] macvlan0: entered promiscuous mode [ 995.753430][ T6066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 996.064396][ T6123] __nla_validate_parse: 11 callbacks suppressed [ 996.064418][ T6123] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8767'. [ 996.408952][ T6147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 996.481628][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8770'. [ 996.565131][ T6151] syzkaller0: entered promiscuous mode [ 996.570938][ T6151] syzkaller0: entered allmulticast mode [ 996.884855][ T6162] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 996.896087][ T6165] validate_nla: 1 callbacks suppressed [ 996.896109][ T6165] netlink: 'syz.0.8775': attribute type 29 has an invalid length. [ 996.911532][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8775'. [ 996.979665][ T6171] can: request_module (can-proto-0) failed. [ 997.189739][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8780'. [ 997.220099][ T6181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8780'. [ 997.336975][ T6192] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8783'. [ 997.390728][ T6197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8784'. [ 997.431082][ T6199] gretap0: mtu less than device minimum [ 997.673494][ T6215] xt_hashlimit: size too large, truncated to 1048576 [ 998.120499][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.128705][ C0] lec:lec_tx_timeout: lec0 [ 998.422006][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.431544][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.501666][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.511542][T11135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.523983][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.540826][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.549370][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.147682][ T6187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1000.259403][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1000.407000][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.588178][ T6248] Cannot find add_set index 0 as target [ 1000.831936][T31914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1000.843166][T31914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1000.853224][T31914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1000.863240][T31914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1000.871807][T31914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1000.936285][ T6259] vxcan1 speed is unknown, defaulting to 1000 [ 1001.313285][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 1001.429620][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.437049][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.444560][ T6259] bridge_slave_0: entered allmulticast mode [ 1001.453232][ T6259] bridge_slave_0: entered promiscuous mode [ 1001.467031][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.474893][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.484109][ T6259] bridge_slave_1: entered allmulticast mode [ 1001.493361][ T6259] bridge_slave_1: entered promiscuous mode [ 1001.576534][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.610371][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.692911][T18085] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 1001.713488][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8808'. [ 1001.810716][ T6339] net_ratelimit: 3 callbacks suppressed [ 1001.810739][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.826105][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.046723][T18085] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 1002.056501][T18085] bridge4 (unregistering): left promiscuous mode [ 1002.146326][T18085] bond1 (unregistering): Released all slaves [ 1002.167311][T18085] bond2 (unregistering): Released all slaves [ 1002.187634][T18085] bond3 (unregistering): Released all slaves [ 1002.209620][T18085] bond4 (unregistering): Released all slaves [ 1002.239706][T18085] bond5 (unregistering): Released all slaves [ 1002.263338][T18085] bond6 (unregistering): Released all slaves [ 1002.305184][T18085] bond7 (unregistering): Released all slaves [ 1002.931664][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.940410][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.941611][ T5832] Bluetooth: hci2: command tx timeout [ 1003.739678][ T6256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1003.785204][T18085] bond0 (unregistering): (slave veth7): Releasing active interface [ 1003.855971][T18085] bond0 (unregistering): Released all slaves [ 1003.898913][T18085] bond8 (unregistering): Released all slaves [ 1003.938034][ T6293] delete_channel: no stack [ 1004.051874][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.060304][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.133403][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8808'. [ 1004.205668][ T6259] team0: Port device team_slave_0 added [ 1004.233778][ T6259] team0: Port device team_slave_1 added [ 1004.365965][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.395517][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.488468][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.539086][ T6313] netlink: 496 bytes leftover after parsing attributes in process `syz.1.8815'. [ 1004.553948][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.589103][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.647589][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.679773][ T6316] netlink: 212 bytes leftover after parsing attributes in process `syz.2.8817'. [ 1005.030608][ T5832] Bluetooth: hci2: command tx timeout [ 1005.242076][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.259655][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.366771][ T6259] hsr_slave_0: entered promiscuous mode [ 1005.397243][ T6259] hsr_slave_1: entered promiscuous mode [ 1005.411077][ T6259] debugfs: 'hsr0' already exists in 'hsr' [ 1005.416944][ T6259] Cannot create hsr debugfs directory [ 1005.635731][ T6370] IPVS: set_ctl: invalid protocol: 47865 0.0.0.0:45539 [ 1005.677715][ T6364] IPVS: set_ctl: invalid protocol: 30838 110.48.0.0:0 [ 1005.877546][ T6380] netlink: 'syz.1.8828': attribute type 2 has an invalid length. [ 1005.886907][ T6380] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8828'. [ 1005.898045][ T6380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8828'. [ 1005.968429][ T6382] netlink: 'syz.2.8829': attribute type 10 has an invalid length. [ 1006.024086][ T6382] macvtap0: left allmulticast mode [ 1006.042565][ T6388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.071527][ T6383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1006.081658][ T6336] veth0_to_bond: left promiscuous mode [ 1006.431246][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.542779][ T6412] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8835'. [ 1006.758428][ T6430] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1006.791938][ T6430] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1006.799824][ T6430] gretap2: entered promiscuous mode [ 1006.807190][ T6430] gretap2: entered allmulticast mode [ 1007.005073][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8839'. [ 1007.039977][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8838'. [ 1007.100629][ T5832] Bluetooth: hci2: command tx timeout [ 1007.330373][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8840'. [ 1007.547233][ T6356] net_ratelimit: 1 callbacks suppressed [ 1007.547265][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.561922][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.461554][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1008.542747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.670917][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.679323][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.721798][T18085] IPVS: stop unused estimator thread 0... [ 1009.101153][T11135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.180701][ T5832] Bluetooth: hci2: command tx timeout [ 1009.248281][ T6406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1009.266381][ T6259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1009.316877][ T6259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1009.423420][ T6259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1009.452623][ T6259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1009.544355][ T6504] wireguard2: entered promiscuous mode [ 1009.549904][ T6504] wireguard2: entered allmulticast mode [ 1009.563032][ T6504] team0: Device wireguard2 is of different type [ 1009.677112][ T6516] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8847'. [ 1009.786672][ T6519] netlink: 'syz.2.8848': attribute type 39 has an invalid length. [ 1009.798401][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.842222][ T9151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.851482][ T9151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.891229][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.908104][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.915364][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.947714][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.955016][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.112063][ T6259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.427350][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8855'. [ 1010.602802][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.689387][ T6555] erspan0: left promiscuous mode [ 1010.695747][ T6555] erspan0: left allmulticast mode [ 1010.722217][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8861'. [ 1010.775516][ T6555] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1010.823969][ T6562] bridge8: entered promiscuous mode [ 1010.831512][ T6562] bridge8: entered allmulticast mode [ 1010.863047][ T6259] veth0_vlan: entered promiscuous mode [ 1010.928632][ T6259] veth1_vlan: entered promiscuous mode [ 1010.952968][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.001972][ T6259] veth0_macvtap: entered promiscuous mode [ 1011.016227][ T6259] veth1_macvtap: entered promiscuous mode [ 1011.057797][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.092084][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.105732][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8865'. [ 1011.116903][ T6576] hsr_slave_0: left promiscuous mode [ 1011.156067][ T6336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.170325][ T6336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.206598][ T6336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.218565][ T6336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.250333][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8866'. [ 1011.263062][ T6580] netlink: 'syz.4.8866': attribute type 21 has an invalid length. [ 1011.271233][ T6580] IPv6: NLM_F_CREATE should be specified when creating new route [ 1011.279890][ T6580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1011.287224][ T6580] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.294524][ T6580] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.301811][ T6580] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.321018][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8866'. [ 1011.400691][T18085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.427426][T18085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.495500][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.526069][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.536809][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8869'. [ 1012.256755][ T6630] vxcan1 speed is unknown, defaulting to 1000 [ 1012.331948][ T6634] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8881'. [ 1012.342934][ T6634] netlink: 'syz.0.8881': attribute type 1 has an invalid length. [ 1012.398367][ T6636] netlink: 'syz.1.8882': attribute type 1 has an invalid length. [ 1012.406467][ T6636] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8882'. [ 1012.415773][ T6636] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8882'. [ 1012.572931][ T6643] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1013.095967][ T6666] netlink: 'syz.2.8891': attribute type 10 has an invalid length. [ 1013.129541][ T6673] netlink: 'syz.1.8893': attribute type 11 has an invalid length. [ 1013.138032][ T6673] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1013.166836][ T6666] bridge_slave_1: left allmulticast mode [ 1013.194565][ T9151] net_ratelimit: 4 callbacks suppressed [ 1013.194585][ T9151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.208494][ T6666] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1013.218920][ T9151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.223853][ T6666] netlink: 'syz.2.8891': attribute type 10 has an invalid length. [ 1013.262423][ T6666] netlink: 'syz.2.8891': attribute type 10 has an invalid length. [ 1013.322940][ T6666] netlink: 'syz.2.8891': attribute type 10 has an invalid length. [ 1013.351642][ T6666] netlink: 'syz.2.8891': attribute type 10 has an invalid length. [ 1013.371859][ T6666] netlink: 'syz.2.8891': attribute type 10 has an invalid length. [ 1013.400354][ T6666] netlink: 'syz.2.8891': attribute type 10 has an invalid length. [ 1013.824822][ T6695] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1013.884764][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8906'. [ 1013.942598][ T6715] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8908'. [ 1013.955847][ T6710] bond10: Removing last ns target with arp_interval on [ 1013.989508][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8906'. [ 1014.002801][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8906'. [ 1014.203057][ T6730] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1014.215634][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8913'. [ 1014.253978][T18085] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.272497][T18085] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.295063][T18085] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.362333][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.380208][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.393642][ T6356] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.414228][ T6735] bond0: entered allmulticast mode [ 1014.419400][ T6735] bond_slave_0: entered allmulticast mode [ 1014.427026][ T6735] bond_slave_1: entered allmulticast mode [ 1014.432969][ T6735] bridge_slave_1: entered allmulticast mode [ 1015.104726][ T6783] bridge9: entered promiscuous mode [ 1015.148444][ T6783] bridge9: entered allmulticast mode [ 1015.237432][ T6793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.317668][ T6794] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1015.490951][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.499536][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.528264][ T6799] syzkaller0: entered promiscuous mode [ 1015.541014][ T6799] syzkaller0: entered allmulticast mode [ 1016.616538][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.629206][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.773873][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.782922][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.705107][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.952942][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.963978][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.387761][ T6824] veth0: entered promiscuous mode [ 1019.406813][ T6829] geneve2: entered promiscuous mode [ 1019.414721][ T6828] veth0: left promiscuous mode [ 1019.419810][T18085] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 38667 - 0 [ 1019.434531][T18085] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 38667 - 0 [ 1019.443843][T18085] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 38667 - 0 [ 1019.454318][T18085] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 38667 - 0 [ 1019.569042][ T6836] validate_nla: 97 callbacks suppressed [ 1019.569065][ T6836] netlink: 'syz.3.8940': attribute type 1 has an invalid length. [ 1019.728118][ T6852] __nla_validate_parse: 198 callbacks suppressed [ 1019.728141][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8946'. [ 1019.777098][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8943'. [ 1019.900304][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8948'. [ 1019.931347][ T6852] syzkaller0: entered promiscuous mode [ 1019.936956][ T6852] syzkaller0: entered allmulticast mode [ 1020.072848][ T9151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.088647][ T9151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.102813][ T6873] netlink: 'syz.3.8951': attribute type 1 has an invalid length. [ 1020.172904][ T6873] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1020.183487][ T6873] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1020.198629][ T6873] bond11: (slave ip6gre2): making interface the new active one [ 1020.207067][ T6873] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 1020.438406][ T6897] syzkaller1: entered promiscuous mode [ 1020.454893][ T6897] syzkaller1: entered allmulticast mode [ 1020.631053][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8961'. [ 1020.718562][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8964'. [ 1020.745664][ T6914] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8964'. [ 1020.907276][ T6927] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8969'. [ 1021.231207][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.239825][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.441338][ T6962] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1021.615592][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8986'. [ 1021.734951][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8986'. [ 1021.776245][ T6985] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.8987'. [ 1021.798004][ T6989] netlink: 'syz.0.8988': attribute type 2 has an invalid length. [ 1022.139557][ T7003] openvswitch: netlink: IP tunnel TTL not specified. [ 1022.265459][ T7018] syzkaller0: entered promiscuous mode [ 1022.271265][ T7018] syzkaller0: entered allmulticast mode [ 1022.414735][T18085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.423560][T18085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.489727][ T7026] x_tables: duplicate underflow at hook 3 [ 1023.361387][T18085] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x3c [ 1023.427770][ T7069] netlink: 'syz.0.9011': attribute type 10 has an invalid length. [ 1023.459713][ T7069] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1023.468367][ T9151] tipc: Subscription rejected, illegal request [ 1023.478381][ T7070] bridge0: port 1(gretap0) entered blocking state [ 1023.485464][ T7070] bridge0: port 1(gretap0) entered disabled state [ 1023.492230][ T7070] gretap0: entered allmulticast mode [ 1023.499807][ T7070] gretap0: entered promiscuous mode [ 1023.515763][ T7070] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1024.640897][T18082] net_ratelimit: 3 callbacks suppressed [ 1024.640913][T18082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.656078][T18082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.761382][T18082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.769940][T18082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.236809][ T7055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1026.388425][ T7080] __nla_validate_parse: 7 callbacks suppressed [ 1026.388445][ T7080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9014'. [ 1026.460750][ T7083] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9015'. [ 1026.585111][ T7093] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9019'. [ 1026.601603][ T7097] netlink: 'syz.3.9017': attribute type 10 has an invalid length. [ 1026.612298][ T7097] team0: Device vxcan1 is of different type [ 1026.850896][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9023'. [ 1026.883576][ T9151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.907969][ T9151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.964195][ T7121] netlink: 'syz.0.9025': attribute type 1 has an invalid length. [ 1026.995341][ T7121] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9025'. [ 1027.171000][T18082] tipc: Subscription rejected, illegal request [ 1027.184420][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9026'. [ 1027.200538][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9026'. [ 1027.203358][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9027'. [ 1027.245729][ T7128] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1027.328009][ T7132] IPv6: NLM_F_CREATE should be specified when creating new route [ 1027.345609][ T7133] vxcan1 speed is unknown, defaulting to 1000 [ 1027.355194][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1027.376760][ T7140] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9031'. [ 1027.425892][ T7147] netlink: 'syz.4.9030': attribute type 1 has an invalid length. [ 1028.082628][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.112961][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.167838][ T7189] syzkaller1: entered allmulticast mode [ 1028.196393][ T7189] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1028.319927][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.617198][ T7205] syzkaller0: entered promiscuous mode [ 1028.639082][ T7205] syzkaller0: entered allmulticast mode [ 1028.823453][ T7220] openvswitch: netlink: Flow key attr not present in new flow. [ 1028.872203][ T7224] netlink: 'syz.3.9052': attribute type 11 has an invalid length. [ 1028.880344][ T7224] netlink: 'syz.3.9052': attribute type 11 has an invalid length. [ 1030.363475][ T6336] net_ratelimit: 2 callbacks suppressed [ 1030.363496][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.393208][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.747479][ T8089] lec:lec_start_xmit: lec0:No lecd attached [ 1030.842082][ T7354] netlink: 'syz.0.9084': attribute type 1 has an invalid length. [ 1030.964419][ T7363] netlink: 'syz.0.9087': attribute type 1 has an invalid length. [ 1031.136194][ T7376] netlink: zone id is out of range [ 1031.155083][ T7375] netlink: zone id is out of range [ 1031.166951][ T7376] netlink: zone id is out of range [ 1031.183994][ T7375] netlink: zone id is out of range [ 1031.189194][ T7375] netlink: zone id is out of range [ 1031.194899][ T7376] netlink: zone id is out of range [ 1031.194916][ T7376] netlink: zone id is out of range [ 1031.194926][ T7376] netlink: zone id is out of range [ 1031.484037][ T7398] __nla_validate_parse: 21 callbacks suppressed [ 1031.484060][ T7398] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9096'. [ 1031.501625][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9096'. [ 1031.514696][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9096'. [ 1031.719957][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9103'. [ 1031.762201][ T7411] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.9101'. [ 1031.947353][ T7433] syzkaller1: entered promiscuous mode [ 1031.952285][ T7436] netlink: 'syz.3.9109': attribute type 1 has an invalid length. [ 1031.954497][ T7433] syzkaller1: entered allmulticast mode [ 1031.962589][ T7436] netlink: 280 bytes leftover after parsing attributes in process `syz.3.9109'. [ 1032.070131][ T7441] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1032.096335][ T7443] netlink: 'syz.1.9110': attribute type 29 has an invalid length. [ 1032.106552][ T7443] netlink: 'syz.1.9110': attribute type 29 has an invalid length. [ 1032.122408][ T7443] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9110'. [ 1032.316032][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9115'. [ 1032.534826][ T7464] netlink: 'syz.3.9118': attribute type 4 has an invalid length. [ 1032.617429][T31914] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1032.630421][T31914] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1032.639977][T31914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1032.648509][T31914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1032.674781][T31914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1032.737048][ T7466] vxcan1 speed is unknown, defaulting to 1000 [ 1033.047834][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1033.345445][ T7497] netlink: 'syz.2.9129': attribute type 1 has an invalid length. [ 1033.523407][ T7466] chnl_net:caif_netlink_parms(): no params data found [ 1034.078402][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.095274][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.135321][ T7466] bridge_slave_0: entered allmulticast mode [ 1034.160963][ T7466] bridge_slave_0: entered promiscuous mode [ 1034.185393][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.230127][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.251276][ T7466] bridge_slave_1: entered allmulticast mode [ 1034.271340][ T7466] bridge_slave_1: entered promiscuous mode [ 1034.305019][ T7539] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 1034.422470][ T7536] vxcan1 speed is unknown, defaulting to 1000 [ 1034.436876][ T7466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.465245][ T7466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.625858][ T7466] team0: Port device team_slave_0 added [ 1034.667400][ T7466] team0: Port device team_slave_1 added [ 1034.702172][ T5832] Bluetooth: hci3: command tx timeout [ 1034.871595][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.879981][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.957279][ T7466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.059839][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.090745][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.150701][ T7466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.234358][ T7569] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1035.382907][ T7466] hsr_slave_0: entered promiscuous mode [ 1035.401122][ T7466] hsr_slave_1: entered promiscuous mode [ 1035.417635][ T7466] debugfs: 'hsr0' already exists in 'hsr' [ 1035.423882][ T7466] Cannot create hsr debugfs directory [ 1035.443338][ T7582] netlink: 'syz.3.9145': attribute type 4 has an invalid length. [ 1035.451250][ T7582] netlink: 'syz.3.9145': attribute type 1 has an invalid length. [ 1035.589231][ T7589] netlink: 'syz.2.9147': attribute type 1 has an invalid length. [ 1035.605108][ T7589] netlink: 'syz.2.9147': attribute type 4 has an invalid length. [ 1035.980863][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 1035.989006][ C0] lec:lec_tx_timeout: lec0 [ 1036.008965][ T7598] syzkaller0: entered promiscuous mode [ 1036.020911][ T7598] syzkaller0: entered allmulticast mode [ 1036.038688][ T7598] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1036.189756][ T7466] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.204712][ T7466] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1036.220020][ T7466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1036.231394][ T7466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1036.364816][ T7466] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.391229][ T7466] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1036.404753][ T7466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1036.418179][ T7615] netlink: 'syz.3.9152': attribute type 1 has an invalid length. [ 1036.430968][ T7466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1036.577755][ T7466] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.610112][ T7466] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1036.640822][ T7466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1036.653548][ T7630] __nla_validate_parse: 9 callbacks suppressed [ 1036.653568][ T7630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9153'. [ 1036.692521][ T7466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1036.780539][ T5832] Bluetooth: hci3: command tx timeout [ 1036.869199][ T7466] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.881978][ T7634] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9155'. [ 1036.914184][ T7634] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9155'. [ 1036.920737][ T7466] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1036.947956][ T7466] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1036.959600][ T7466] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1037.044406][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9155'. [ 1037.052516][ T7642] ip6erspan0: entered allmulticast mode [ 1037.093543][ T7634] validate_nla: 1 callbacks suppressed [ 1037.093615][ T7634] netlink: 'syz.3.9155': attribute type 1 has an invalid length. [ 1037.141557][ T7634] netlink: 'syz.3.9155': attribute type 1 has an invalid length. [ 1037.149355][ T7634] netlink: 'syz.3.9155': attribute type 2 has an invalid length. [ 1037.158725][ T7648] syzkaller1: entered promiscuous mode [ 1037.167737][ T7648] syzkaller1: entered allmulticast mode [ 1037.240483][ T7634] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9155'. [ 1037.718302][ T7466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1037.774832][ T7466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1037.823223][ T7466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1037.867873][ T7466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1037.928177][ T7692] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1038.067619][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9170'. [ 1038.211121][ T7715] netlink: 'syz.0.9173': attribute type 1 has an invalid length. [ 1038.233792][ T7715] netlink: 'syz.0.9173': attribute type 1 has an invalid length. [ 1038.303068][ T7715] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.9173'. [ 1038.386573][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.461897][ T7726] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9177'. [ 1038.472904][ T7466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.495357][ T7729] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9177'. [ 1038.507036][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.514236][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.548994][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1038.557370][T18085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.565095][T18085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.860725][ T5832] Bluetooth: hci3: command tx timeout [ 1039.041659][ T7756] netlink: 'syz.3.9179': attribute type 1 has an invalid length. [ 1039.192768][ T7756] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1039.253331][ T7756] net_ratelimit: 384 callbacks suppressed [ 1039.253351][ T7756] Set syz1 is full, maxelem 14 reached [ 1039.504584][ T7466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.736813][ T7792] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1040.046903][ T7813] sctp: [Deprecated]: syz.0.9191 (pid 7813) Use of int in maxseg socket option. [ 1040.046903][ T7813] Use struct sctp_assoc_value instead [ 1040.262985][ T7819] bond11: Removing last ns target with arp_interval on [ 1040.817763][ T7466] veth0_vlan: entered promiscuous mode [ 1040.886912][ T7466] veth1_vlan: entered promiscuous mode [ 1040.940619][ T5832] Bluetooth: hci3: command tx timeout [ 1040.991115][ T7466] veth0_macvtap: entered promiscuous mode [ 1041.026383][ T7466] veth1_macvtap: entered promiscuous mode [ 1041.079519][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.222393][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.269878][ T6334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.310154][ T6334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.447317][ T6334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.469487][ T6334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.717827][ T7892] __nla_validate_parse: 5 callbacks suppressed [ 1041.717849][ T7892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9208'. [ 1041.737424][ T7891] netlink: 'syz.0.9210': attribute type 1 has an invalid length. [ 1041.746479][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1041.829657][ T6336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.863964][ T6336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.932083][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9212'. [ 1041.952084][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.972159][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.111075][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9214'. [ 1042.259226][ T7919] syzkaller0: entered promiscuous mode [ 1042.265226][ T7919] syzkaller0: entered allmulticast mode [ 1042.663521][T31914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1042.692005][T31914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1042.705673][T31914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1042.715786][T31914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1042.742501][T31914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1042.771794][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9222'. [ 1042.875515][ T7943] netlink: 'syz.1.9222': attribute type 2 has an invalid length. [ 1042.907997][ T7940] vxcan1 speed is unknown, defaulting to 1000 [ 1042.988937][ T7957] netlink: 'syz.0.9226': attribute type 16 has an invalid length. [ 1042.998160][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9226'. [ 1043.247045][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9228'. [ 1043.374813][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9230'. [ 1043.441149][ T7979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9230'. [ 1043.477822][ T7940] chnl_net:caif_netlink_parms(): no params data found [ 1043.590377][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.597721][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.605549][ T7940] bridge_slave_0: entered allmulticast mode [ 1043.614811][ T7940] bridge_slave_0: entered promiscuous mode [ 1043.623412][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.631583][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.638881][ T7940] bridge_slave_1: entered allmulticast mode [ 1043.642834][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9231'. [ 1043.651959][ T7940] bridge_slave_1: entered promiscuous mode [ 1043.671849][ T30] INFO: task udevd:1094 blocked for more than 143 seconds. [ 1043.679545][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1043.687965][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1043.697427][ T30] task:udevd state:D stack:23296 pid:1094 tgid:1094 ppid:5195 task_flags:0x400140 flags:0x00080000 [ 1043.710347][ T30] Call Trace: [ 1043.714031][ T30] [ 1043.717154][ T30] __schedule+0x15dd/0x52d0 [ 1043.722525][ T30] ? blk_mq_flush_plug_list+0x443/0x570 [ 1043.728276][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1043.735314][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 1043.740710][ T30] ? __pfx___schedule+0x10/0x10 [ 1043.746027][ T30] ? schedule+0x90/0x360 [ 1043.751814][ T30] schedule+0x164/0x360 [ 1043.756276][ T30] schedule_timeout+0x158/0x2c0 [ 1043.763024][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1043.769942][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1043.775824][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1043.782223][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1043.787868][ T30] nbd_queue_rq+0x857/0x1100 [ 1043.793782][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1043.798983][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1043.805826][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1043.830214][ T30] ? sbitmap_get+0x229/0x390 [ 1043.841599][ T7940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.857307][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1043.888635][ T7940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.897815][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1043.897865][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1043.897946][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1043.969808][ T7943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1043.991525][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1043.997631][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1044.005291][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1044.010587][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 1044.015946][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 1044.021809][ T30] ? blk_mq_dispatch_list+0x220/0xe10 [ 1044.027455][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1044.033302][ T30] ? rcu_is_watching+0x15/0xb0 [ 1044.038279][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 1044.043773][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 1044.049012][ T30] ? blk_mq_submit_bio+0xef8/0x2810 [ 1044.054300][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1044.060259][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 1044.114773][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1044.120236][ T30] __submit_bio+0x28d/0x580 [ 1044.130170][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1044.135655][ T30] ? bio_associate_blkg+0x6d/0x230 [ 1044.141978][ T30] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1044.147668][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1044.154680][ T30] ? bio_alloc_bioset+0xa82/0x11b0 [ 1044.159875][ T30] block_read_full_folio+0x599/0x830 [ 1044.165822][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1044.171560][ T30] filemap_read_folio+0x137/0x3b0 [ 1044.176633][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1044.183722][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1044.189343][ T30] ? filemap_add_folio+0x356/0x530 [ 1044.194917][ T30] do_read_cache_folio+0x358/0x590 [ 1044.200076][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1044.210048][ T30] read_part_sector+0xb6/0x2b0 [ 1044.226802][ T30] adfspart_check_ICS+0xa5/0xa40 [ 1044.231993][ T30] ? snprintf+0xe8/0x140 [ 1044.236255][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1044.243032][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1044.248753][ T30] bdev_disk_changed+0x7ba/0x1550 [ 1044.254034][ T30] ? bdev_open+0xe0/0xd30 [ 1044.258426][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1044.264034][ T30] blkdev_get_whole+0x380/0x510 [ 1044.269060][ T30] bdev_open+0x31e/0xd30 [ 1044.273708][ T30] blkdev_open+0x470/0x610 [ 1044.278168][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1044.284215][ T30] do_dentry_open+0x785/0x14e0 [ 1044.289032][ T30] vfs_open+0x3b/0x340 [ 1044.293221][ T30] ? path_openat+0x2df0/0x3860 [ 1044.298029][ T30] path_openat+0x2e08/0x3860 [ 1044.305209][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1044.310852][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1044.316370][ T30] ? __pfx_path_openat+0x10/0x10 [ 1044.321464][ T30] ? __x64_sys_openat+0x138/0x170 [ 1044.328053][ T30] ? do_syscall_64+0x14d/0xf80 [ 1044.333194][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.339324][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1044.344411][ T30] do_file_open+0x23e/0x4a0 [ 1044.348973][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1044.354179][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1044.359064][ T30] ? alloc_fd+0x64b/0x6c0 [ 1044.363799][ T30] do_sys_openat2+0x113/0x200 [ 1044.368497][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1044.374046][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1044.379292][ T30] ? rcu_is_watching+0x15/0xb0 [ 1044.385334][ T30] __x64_sys_openat+0x138/0x170 [ 1044.390238][ T30] do_syscall_64+0x14d/0xf80 [ 1044.395505][ T30] ? trace_irq_disable+0x3b/0x150 [ 1044.400639][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.406725][ T30] ? clear_bhb_loop+0x40/0x90 [ 1044.411614][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.417547][ T30] RIP: 0033:0x7fca5e6a7407 [ 1044.422437][ T30] RSP: 002b:00007ffd23a33f70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1044.431179][ T30] RAX: ffffffffffffffda RBX: 00007fca5ed3e880 RCX: 00007fca5e6a7407 [ 1044.439282][ T30] RDX: 00000000000a0800 RSI: 0000559a6898f7a0 RDI: ffffffffffffff9c [ 1044.447691][ T30] RBP: 0000559a68977910 R08: 0000000000000000 R09: 0000000000000000 [ 1044.456057][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559a68999f30 [ 1044.464418][ T30] R13: 0000559a68985190 R14: 0000000000000000 R15: 0000559a68999f30 [ 1044.472549][ T30] [ 1044.520518][ T30] [ 1044.520518][ T30] Showing all locks held in the system: [ 1044.528293][ T30] 1 lock held by khungtaskd/30: [ 1044.590647][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1044.620647][ T30] 2 locks held by kworker/0:2/1209: [ 1044.625890][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1044.680535][ T30] #1: ffffc90004fdfc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1044.710765][ T30] 2 locks held by getty/5585: [ 1044.715495][ T30] #0: ffff888036e1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1044.781267][ T5832] Bluetooth: hci1: command tx timeout [ 1044.788238][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1044.810917][ T30] 4 locks held by kworker/u8:14/6339: [ 1044.816380][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1044.850868][ T30] #1: ffffc90006177c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1044.870490][ T30] #2: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1044.879532][ T30] #3: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1044.940836][ T30] 4 locks held by kworker/0:8/11141: [ 1044.946295][ T30] 3 locks held by udevd/1094: [ 1044.990478][ T30] #0: ffff88802690f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1045.041399][ T30] #1: ffff8880263e3918 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1045.080605][ T30] #2: ffff888026a2a980 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1045.089690][ T30] 1 lock held by syz.0.9227/7960: [ 1045.140557][ T30] 1 lock held by syz.3.9231/7985: [ 1045.145684][ T30] [ 1045.156952][ T30] ============================================= [ 1045.156952][ T30] [ 1045.200863][ T30] NMI backtrace for cpu 0 [ 1045.200887][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1045.200913][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1045.200927][ T30] Call Trace: [ 1045.200937][ T30] [ 1045.200948][ T30] dump_stack_lvl+0xe8/0x150 [ 1045.200984][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1045.201019][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1045.201053][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1045.201091][ T30] sys_info+0x135/0x170 [ 1045.201120][ T30] watchdog+0xfd9/0x1030 [ 1045.201149][ T30] ? watchdog+0x21a/0x1030 [ 1045.201181][ T30] kthread+0x388/0x470 [ 1045.201205][ T30] ? __pfx_watchdog+0x10/0x10 [ 1045.201224][ T30] ? __pfx_kthread+0x10/0x10 [ 1045.201248][ T30] ret_from_fork+0x51e/0xb90 [ 1045.201282][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1045.201310][ T30] ? __switch_to+0xc7d/0x1450 [ 1045.201342][ T30] ? __pfx_kthread+0x10/0x10 [ 1045.201366][ T30] ret_from_fork_asm+0x1a/0x30 [ 1045.201419][ T30] [ 1045.201430][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1045.313904][ C1] NMI backtrace for cpu 1 [ 1045.313921][ C1] CPU: 1 UID: 0 PID: 5904 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 1045.313940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1045.313952][ C1] Workqueue: rcu_gp process_srcu [ 1045.313977][ C1] RIP: 0010:preempt_count_sub+0x65/0x170 [ 1045.314002][ C1] Code: ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 58 65 8b 05 d4 71 88 11 f7 df 65 01 3d cb 71 88 11 <5b> 5d c3 cc cc cc cc cc 90 e8 1d db 17 03 85 c0 74 33 48 c7 c0 c4 [ 1045.314017][ C1] RSP: 0018:ffffc900041b78f0 EFLAGS: 00000297 [ 1045.314031][ C1] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1045.314043][ C1] RDX: 0000000000000219 RSI: ffffffff8c27cae0 RDI: 00000000ffffffff [ 1045.314054][ C1] RBP: 0000000000000001 R08: ffffe8ffffdcd5c7 R09: 1ffffd1ffffb9ab8 [ 1045.314066][ C1] R10: dffffc0000000000 R11: ffffffff8badb350 R12: 0000000000000000 [ 1045.314078][ C1] R13: 0000000000000001 R14: 00000219d9e89adc R15: 0000000000001655 [ 1045.314090][ C1] FS: 0000000000000000(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 1045.314103][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1045.314115][ C1] CR2: 000056248affbf40 CR3: 000000007f1a8000 CR4: 00000000003526f0 [ 1045.314130][ C1] Call Trace: [ 1045.314136][ C1] [ 1045.314144][ C1] delay_tsc+0x4e/0xc0 [ 1045.314171][ C1] try_check_zero+0x44b/0x4d0 [ 1045.314199][ C1] process_srcu+0x31d/0x1630 [ 1045.314230][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1045.314251][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1045.314273][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1045.314311][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1045.314335][ C1] ? assign_work+0x3d5/0x5e0 [ 1045.314359][ C1] worker_thread+0xa53/0xfc0 [ 1045.314395][ C1] kthread+0x388/0x470 [ 1045.314417][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1045.314438][ C1] ? __pfx_kthread+0x10/0x10 [ 1045.314454][ C1] ret_from_fork+0x51e/0xb90 [ 1045.314477][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1045.314498][ C1] ? __switch_to+0xc7d/0x1450 [ 1045.314518][ C1] ? __pfx_kthread+0x10/0x10 [ 1045.314535][ C1] ret_from_fork_asm+0x1a/0x30 [ 1045.314568][ C1] [ 1045.557601][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1045.564536][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1045.573679][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1045.583771][ T30] Call Trace: [ 1045.587079][ T30] [ 1045.590042][ T30] vpanic+0x56c/0xa60 [ 1045.594077][ T30] ? __pfx___schedule+0x10/0x10 [ 1045.598968][ T30] ? __pfx_vpanic+0x10/0x10 [ 1045.603604][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1045.608853][ T30] panic+0xc5/0xd0 [ 1045.612621][ T30] ? __pfx_panic+0x10/0x10 [ 1045.617092][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1045.622516][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1045.628722][ T30] watchdog+0x1023/0x1030 [ 1045.633098][ T30] ? watchdog+0x21a/0x1030 [ 1045.637566][ T30] kthread+0x388/0x470 [ 1045.641672][ T30] ? __pfx_watchdog+0x10/0x10 [ 1045.646483][ T30] ? __pfx_kthread+0x10/0x10 [ 1045.651218][ T30] ret_from_fork+0x51e/0xb90 [ 1045.655848][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1045.660972][ T30] ? __switch_to+0xc7d/0x1450 [ 1045.665671][ T30] ? __pfx_kthread+0x10/0x10 [ 1045.670269][ T30] ret_from_fork_asm+0x1a/0x30 [ 1045.675061][ T30] [ 1045.678294][ T30] Kernel Offset: disabled [ 1045.682670][ T30] Rebooting in 86400 seconds..