last executing test programs: 1m37.803398213s ago: executing program 3 (id=7310): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004600003400000000000190059b1e0001ac1414aa1c02000003049078030200004500000000000000002f00000000"], 0x0) 1m37.741118265s ago: executing program 3 (id=7312): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000640)={0x1, 0x4, 0x7, 0x311c9c03, @vifc_lcl_ifindex, @local}, 0x10) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000006c0)={0x0, 0x4, 0x8, 0x7f, @vifc_lcl_addr=@empty, @private=0xa010100}, 0x10) 1m37.661575155s ago: executing program 3 (id=7313): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004000d8053f4ccce65acd5b364630c3088c4e0010f1f40948e86042686ccad16c1efa4ca4c6e334b15bcffa5fa7580f814dfed316abfeba753bd7ce0f75d63e31f17bf96e76690f1372e092a37d12c76ca349b660c0f4233024364263b78760bdd01c841ae4aa207a8ea3a0cc0d4a19ddf11c73ad3227444f2f2"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m34.967752287s ago: executing program 3 (id=7320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280080004000100000008000100", @ANYRES32=r1, @ANYBLOB="0ac09074328a80db8c000000"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280080004000100000008000100", @ANYRES32=r1, @ANYBLOB="0ac09074328a80db8c000000"], 0x4c}}, 0x0) (async) 1m34.702689628s ago: executing program 3 (id=7326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800ffff80000000000000010a000000ff00000800000000f32df4e3d3b49374536d58142b81199afe2b970f3e6cef90fede75d4e2caf6b565fd0ac8a13c1a324ba3edf59593d8224c6d1deb4dd2a32c128af2fac1"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf84ecc34600", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1m34.531135603s ago: executing program 3 (id=7328): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000480)=""/62, 0x3e}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000228bd70ffffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x1, 0x56, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x66, 0x0, 0xa5, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xee, 0x2, 0x3, @mcast1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7800, 0x3f04ea74d9d9e46, 0xfffffe01, 0x3}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x1, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0xfff3, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8000}]}}]}, 0x3c}}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f0000000640), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r13, &(0x7f0000000440)={&(0x7f0000000400)={0x1d, r14}, 0x10, &(0x7f00000003c0)={&(0x7f0000000540)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "45b8ab632c55e11ef507b0e9637481bbdcabbf83377540e837eb80365989538a6b88f008c1d6b5f5fbb966edf5628991370c1b724199ba37e0addc5637e0fe6a"}, 0x48}}, 0x840) getsockname$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000b80)={0x4ac, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x1d8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x7, 0x9, 0xb8}, {0x6894, 0x0, 0x7f, 0x8689}, {0x5, 0x1, 0x7, 0x6}, {0x9, 0x60, 0x6, 0x8}, {0xd, 0x3, 0xe, 0x4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcca}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5842, 0x0, 0x3, 0xfffffffa}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x2b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9f800000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x2, 0xf8, 0x5, 0x5}, {0x3, 0x2, 0x5, 0x6c8}, {0x0, 0x3, 0x0, 0xd}, {0xa09, 0x0, 0x3, 0xfffffffb}, {0x4, 0x2, 0x3, 0x4}, {0x9, 0x10, 0x7, 0x800}, {0x5, 0x4, 0x4, 0x1}, {0xfff7, 0x4, 0x7, 0xf}, {0x1, 0x3b, 0x7, 0x10001}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfffb, 0x0, 0xf2, 0x9}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20a}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1m19.278124955s ago: executing program 32 (id=7328): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000480)=""/62, 0x3e}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000228bd70ffffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x1, 0x56, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x66, 0x0, 0xa5, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xee, 0x2, 0x3, @mcast1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7800, 0x3f04ea74d9d9e46, 0xfffffe01, 0x3}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x1, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0xfff3, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8000}]}}]}, 0x3c}}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f0000000640), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r13, &(0x7f0000000440)={&(0x7f0000000400)={0x1d, r14}, 0x10, &(0x7f00000003c0)={&(0x7f0000000540)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "45b8ab632c55e11ef507b0e9637481bbdcabbf83377540e837eb80365989538a6b88f008c1d6b5f5fbb966edf5628991370c1b724199ba37e0addc5637e0fe6a"}, 0x48}}, 0x840) getsockname$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000b80)={0x4ac, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x1d8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x7, 0x9, 0xb8}, {0x6894, 0x0, 0x7f, 0x8689}, {0x5, 0x1, 0x7, 0x6}, {0x9, 0x60, 0x6, 0x8}, {0xd, 0x3, 0xe, 0x4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcca}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5842, 0x0, 0x3, 0xfffffffa}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x2b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9f800000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x2, 0xf8, 0x5, 0x5}, {0x3, 0x2, 0x5, 0x6c8}, {0x0, 0x3, 0x0, 0xd}, {0xa09, 0x0, 0x3, 0xfffffffb}, {0x4, 0x2, 0x3, 0x4}, {0x9, 0x10, 0x7, 0x800}, {0x5, 0x4, 0x4, 0x1}, {0xfff7, 0x4, 0x7, 0xf}, {0x1, 0x3b, 0x7, 0x10001}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfffb, 0x0, 0xf2, 0x9}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20a}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x1}, 0x80) 3.671424194s ago: executing program 5 (id=8294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 3.603732507s ago: executing program 5 (id=8296): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000043000701feffffbf62c2794ebfcc204536cbcf467f55ed7cb58213e49e5a800b0829c3ebfae8412e1a286e96fcdbbaeb67367a592985c6"], 0x14}}, 0xc000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r4, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r3], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x4, 0x4, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, r7}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.933053202s ago: executing program 5 (id=8303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f6, 0x100, 0x70bd25, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x6, 0x0, 0x100, 0x6, 0x800000, r3}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private0, @private2, @private0, 0x4, 0x6, 0x0, 0x100, 0x6, 0x110022, r3}) 2.809217539s ago: executing program 5 (id=8306): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4000}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="0000883effff06da02ec75b24500002c00001d00002f9078ac1e0001e0000001000065580018907804000000000000006558000000000000"], 0x46) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x5, @local, 0x800}}}, 0x88) close(0x4) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000140)=0x8, 0x4) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) connect$inet(r1, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYRES16=r4, @ANYRES64, @ANYRESOCT=r7], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000005) 2.313668328s ago: executing program 5 (id=8314): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xffffff22, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x39, &(0x7f00000006c0)}, 0x2c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x114, 0x2, [@TCA_RED_STAB={0x104, 0x2, "55f4b32d215d09ad03000000392b645312028acf803a4be046ac02506bab00acdbbcc0a681ef62574eb95c3668168a2237f2cc488cf760d067868e8021f61308c6db4e4ac2ec40342736d4b782afc5d1fd80b98cd0d25d975663c05ceaa64032471a805702a7a92bca01e7f16cfd7858b64cf7168d9220b64044c8dab5221c7a97fe9b875c33dfe30b850d7b07be151a84a139feeb514347d3e58683a3a7a624b0c79700622bbb5c8f573b27d294ff211faa3ef5d05472c85cd1ed2350c11b8003e0c058bc01ebfe9e4faec45b78bb3d2551f3fec86fca5bea0068c9c98e75db02191cc525ec2d3f9a4db0895a3ff2b1931fa0da00"}, @TCA_RED_FLAGS={0xc, 0x4, {0xb, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x12}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x150}}, 0x4000810) 2.091585803s ago: executing program 5 (id=8318): r0 = socket$netlink(0x10, 0x3, 0x7) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000020706010800010000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(r2, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) accept4(r6, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) close(r5) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x5) setsockopt$inet_tcp_int(r9, 0x6, 0x1b, &(0x7f0000000000), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x10000, 0x2]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x2, 0x6, 0x2, 0x4]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xb0000000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffff00}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8001}, 0x40c2084) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32040000000900010073797a3000000000080005400000001f38000000f7ff01010000000000000000010000000400038008000440000000010900010073797a30000000000900020073797a30000000001400000010000100000000000000000000004407"], 0xbc}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@local, 0x14c, 0x0, 0xfc, 0x0, 0x1ff, 0x8}, &(0x7f00000000c0)=0x20) 1.744595405s ago: executing program 4 (id=8322): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001000000000000000700001495"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001d40)=""/219, 0xdb}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendto$unix(r3, &(0x7f0000000540)="f810ff90d92caf5b0b60f4d61c914d361ee9c56199957b7274a3af0ff72477db897bdc8db61d74f378f231c78511418d03e72daebc3d0107de0e8799190d2c04e298ba4cfd73f85b616f89d746abafe9b687985c5e5e90c2a404dd12ffe0a554c5e9b318f06b428c1bb990e8701cddca10ea8c28d642e0d7fb664297bea11265b33ecaa398034b3fae", 0x89, 0x20000001, &(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xa, &(0x7f0000000800)=@raw=[@generic={0x80, 0x8, 0x5, 0x10, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.562058906s ago: executing program 1 (id=8324): r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, 0x0, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_TABLE={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000007000000020000000200000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000949699c73dbc6b888461fcc77c81ec815e49e9b1e11e30429713c84c7016fbda70d224ab8361c2f6b8a11e3c1318dd585da0681574a1f422bbeeeee9597903403813da7c8ab26f2a7e6e25c504e092f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r8, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa}, {0x0, 0x6}, {0x8, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xf, 0x8}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x2cfe}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}]}}]}, 0x4c}}, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x80800) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 1.35892078s ago: executing program 2 (id=8326): socket(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005000200000005000400000000000900"], 0x4c}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, 0x0, 0x0, 0x2061, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 1.358416287s ago: executing program 1 (id=8327): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x1c}}, 0x4000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 1.190886876s ago: executing program 0 (id=8329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x400, 0x70bd25, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x8, 0x9, 0x0, 0x0, 0x1, 0x11}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000000100)=""/65, &(0x7f0000000180)=0x41) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'caif0\x00', 0x0}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x41c5a000) r3 = socket(0x26, 0x80000, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000200)) bind$ax25(r3, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt$inet_buf(r3, 0x0, 0x2e, &(0x7f00000002c0)=""/82, &(0x7f0000000340)=0x52) syz_emit_ethernet(0x1e, &(0x7f0000000380)={@multicast, @empty, @void, {@can={0xc, {{0x2, 0x0, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "0c889b2e6b2ca526"}}}}, 0x0) socket$inet6(0xa, 0x1, 0xf765) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv6_getaddr={0x3c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfe, {0xa, 0x18, 0x30, 0xff}, [@IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa0}, @IFA_FLAGS={0x8, 0x8, 0x48}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc00c035}, 0x800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8015) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_getnexthop={0x44, 0x6a, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c0}, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3f8, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x810) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000980)) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xddc8}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x2]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xf}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x54}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c8) getsockname$packet(r4, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x14) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff03}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0ae18a4dcae246ccd04b39b8e0bf2b992ae1ee9ddf71b4847ca52030867b4d3464b1"}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x50}, 0x82) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000e00)={r0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000e40)={0x0, @in6={{0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7147ba0d}}}, &(0x7f0000000f00)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000f40)={r8, 0x40bc}, &(0x7f0000000f80)=0x8) 1.161667177s ago: executing program 2 (id=8330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4}}]}, 0x1c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) 1.063126071s ago: executing program 1 (id=8331): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) (async, rerun: 32) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (rerun: 32) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) (async) close(0x3) 1.062668047s ago: executing program 4 (id=8332): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008003b"], 0x28}], 0x1}, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300), 0x4) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003b40)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffd6e, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000002900), &(0x7f0000003b00)=0x4) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/103, 0x67}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/172, 0xac}, {&(0x7f0000002540)=""/24, 0x18}, {&(0x7f0000002580)=""/2, 0x2}], 0x6, &(0x7f0000002640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002780)=""/139, 0x8b}, {&(0x7f0000002840)=""/141, 0xfffffffffffffdb8}, {&(0x7f0000000240)=""/118, 0x76}], 0x3, &(0x7f0000002940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x2, 0x20, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000003ac0)={&(0x7f0000002ac0)=""/4096, 0x202000, 0x1800, 0x3, 0x5}, 0x20) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000000000), 0x4) bind$unix(r7, &(0x7f0000002a40)=@file={0x0, './file0\x00'}, 0x6e) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd7000fddbdf25010000000000000000000000070001002c59a32f336d86b0d62c2a0000080008000a01010114000600ff020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r12, 0xe00, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r14, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r13, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r9) sendmsg$NFC_CMD_START_POLL(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r15, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400200001"], 0x60}}, 0x0) 1.05345617s ago: executing program 0 (id=8333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010003904ffffffff00000000000000006e431b1f38d8175e4e8ba5b8b2a9897d5519933e4e5e88947d0deafc547559e28b6ddb43a2f14f5f93ff776d", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac1e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 902.654584ms ago: executing program 2 (id=8334): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) 815.749734ms ago: executing program 4 (id=8335): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 814.555976ms ago: executing program 0 (id=8336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x298, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2a, 0x3, "f01b0efb2a055c98c9ffd209811a5208fe8b6b608c68911e7386a15cbf14c823ff4cf06e263b"}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "5eeb2929d05dbe29e3aca9aa51eb97a9d9f6e8d5be12962143a3003fe801226553fe41258aa890a430ac4730a35da534899b0e960c748388d5098440e2e2e4a3f04e90dd4c0f0501bf0122acc8eff97d2f279bbd3d7dafd161b0db7bbcf576fbb966505336ab09754b75b1cf30fba2bce8e47eb2263884ab2b59b0d20f427d75bd0d9dffb427"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x48000}, 0x4024) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 774.631547ms ago: executing program 1 (id=8337): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x2c, r3, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x48814) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, r6, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x8090) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r9) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r10, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c0004800500030002"], 0x50}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000006c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r13, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcda94e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3545d5e3}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ec3bc44}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf69e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69f199ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7bb}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x827bcbfa388d6060}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f6f3617}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3541c55d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2308c74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56c103eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x328a9b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d257ae9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd1b13bb}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543fecb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x322377fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdc510b0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xba65be5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35d03b5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b4e9ff2}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x804}, 0x80c0) r14 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r11) sendmsg$NET_DM_CMD_STOP(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r14, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r15 = socket(0x2, 0x80805, 0x0) r16 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r16, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r15, 0x84, 0x18, &(0x7f0000000080)={r17, 0xff}, 0x8) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r14, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x800) 755.116653ms ago: executing program 2 (id=8338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc00}]}]}, @NFTA_SET_DESC_SIZE={0xfffffe45}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0xec}}, 0x4008050) 667.727799ms ago: executing program 0 (id=8339): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000011000000"], 0x28}}], 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) 664.967255ms ago: executing program 4 (id=8340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) 470.585325ms ago: executing program 2 (id=8341): pipe(&(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private2, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3}, {0x0, 0x1765}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010100, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x1, 0x1, 0x0, 0x4, 0x7f}, {{@in6=@private2, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x3, 0x0, 0x0, 0xbffffffe}]}]}, 0x13c}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 445.022967ms ago: executing program 0 (id=8342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x5, 0x0, 0x2, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x2, 0x7, 0x5, 0x1, {0x0, 0x2, 0x6, 0x3, 0xe}, {0xc7, 0x0, 0x500, 0x8, 0x4, 0x7}, 0xc, 0x8, 0x4}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$NILFS_IOCTL_SYNC(r6, 0x80086e8a, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}, 0x8014) 387.856352ms ago: executing program 4 (id=8343): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 292.344593ms ago: executing program 1 (id=8344): r0 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x23, "6c1144186f3c32b2de4753f98ba568f236b7445f801e6e799a625c2c5875cbdb2b21af"}, &(0x7f00000002c0)=0x2b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1840000001000000000400000edcb35f360bdf32", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4d}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={0x0, 0xe73, 0x1, 0x101, 0xb, 0x4df5, 0x4, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x10001, 0xffffffd9, 0x8, 0xf, 0x3}}, &(0x7f0000000400)=0xb0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000280)={r13}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001540)={0x0, 0x86, "30280758d18bb8137456023f2f672a2a407a96cb641efb27e74dbe2c82d3755b15ae6e711910e691fad185c2aeb53e8b2ac47220452702c57745c472ba029aff64ff53c5b0d5490a5731877d6e35924ed817dbfd3d29de362eef92037d1414b30b3038d41c3fa1184aa3b1ce584d87eaaeaeca8be7b37926877b07c33ad8011d4a321a31c50b"}, &(0x7f0000001600)=0x8e) sendmmsg$inet_sctp(r4, &(0x7f00000016c0)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="876b42d01614cec5246a1e4a1ced0c95080cc77cd773e0a9d0ca3c2287e17572e8880c2240ff8fd279c95d764718da84532dc5d6741da74cd6c21ea449a330b210e4ee6f296451cdb6169d4a7c01322b00c73a485da8f83a927131f3b3c8f1b2c83517465414a03b1801cea5821abcf0da42f15736ba299ee7b120eec489502f00f177e9437755c55091cb8533fd395aa79606be06233c8164aa282e8025231eb861f66c", 0xa4}, {&(0x7f0000000180)="290a3cab97ec6eabd1bea2f521267244a1b834f434a211f3d04b40114c34e8595365d4440fb4d42c8dfc8dc07e05a64ba4672a9168aeb0256543eeee4d26d7a9406bcb315b7bf87d5f27dd1b", 0x4c}, {&(0x7f0000000200)="0f936b61a7f4207f0460c92434884189b889bdf420eca3a44163412fe12812c2c8a1ffa4ea14959f3956", 0x2a}], 0x3, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x100, 0x4, 0xa27d, 0x6, 0x3, 0x5, 0x6, r7}}, @authinfo={0x18, 0x84, 0x6, {0x8001}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x7f, 0x0, 0x100, 0x7, 0x487, 0x4, 0x1, r10}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}], 0xc0, 0x80}, {&(0x7f0000000600)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000640)="61ca1c69c89af254b5129d165e75fb113c93acd00ea61db6d74761d838e76ea61be68fe1a65713e745f4f2b9", 0x2c}, {&(0x7f0000000680)="3ed41f46e3cb046ec5687ecf1ee4d44b33500f8003792f38e98074c4e03745159dfc6dae457a97c5ec367df557c00a34b43585fdc30aaa819da8d40098bfa25af57ecb72ecbb41aaeffdb8e3f2fff576d4abf009e47578a71a74d20870a8813a29fe159ed561d1cb657ba0cdd1b208a264fd870bff280e0b7b0c39bfd93d01dda47f6847aebbb823c05b64639a5326f294d077415e38073a22afff09ff30fb070cdc876a5e9c1fe6e4973ecec26159a4eb72237f8b4e5b86848531c1307b8c69b4f06eab2a", 0xc5}, {&(0x7f0000000800)="49d6490e28e22ce2be3f3ae107bee6828c8a3a09143f71606ab4a253d4f3868f124059b7de79a0a5dc394f5674710d4a07cb6ce79b2e4e26bbfc3d2b8e8c39f27b302fa213dfaaaee017215f4a9a266bf293908dbed5a4c2b5c5e559ab0819e59d671e2eb26f06b29234ffb52ff81324f0610220d4b99fa943d03682830cb4cd", 0x80}, {&(0x7f0000000880)="ec70d5f154393cd2c4fd922333e1a7411864116d6e1036071d62594054d33b23573ea2560e7d72f2c28084b0bdcb5aa035d73f2bf6cab9c756230f94c32bb3b34599fe1c3a5403cbe87057dd0f598a91737ece367aade38a4dd255328d49a1d0788948e111d8325c22eb97371554b52e952fcec09824d435c929eca1383e1f3c500bac29a043805201591174fdf73dc5cb757881dc328d5ad12f0eec61df84959abadb3a01b3ebbaeb0de7930d190cd52d14f4a493c3b578f949d0642ace18d5823017f4f16e907d5cf943a4b4c091dcb1a718820bf397104cda6b7fbc867da26f36fa0bd12380e14e2245fa6d", 0xed}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="6b17ef26e0cfc4d615cafc38c3da58bc2845c4295f1828db209c12e2a1a677c89b30295883b58f02", 0x28}, {&(0x7f0000000a00)="5f7760fc385ca1be1fb70b9691922ad54800038f84b7f40bea21373d17499df4494ff7f5e274e02c50b68a61cd91326cffb44c053b5911b81f75b7a4b102cd0d126e837373440a259eed6fc24bfd4c011caa41200b820a10eed13283bc629d90f583004738702495abe035f137f71d4577df168e0c8ace20abc801bc123535585ca15f1f9c6b16acaacfb90a37480f11de8e94cab6e246de3a5618", 0x9b}], 0x7, &(0x7f0000000b40)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x101}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @private1}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @init={0x18, 0x84, 0x0, {0x9, 0x9, 0x1, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x41}}], 0x120, 0x4}, {&(0x7f0000000c80)=@in6={0xa, 0x4e24, 0x95, @local, 0xd}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="35a0fb1266a3796213b0772f92f377b37395364a290aa0512f513c3afef66923b1958cb7b063d23a97169a7fe159ec2421f690924e8b", 0x36}], 0x1, &(0x7f0000000d40), 0x0, 0x51}, {&(0x7f0000000d80)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x1c, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x8, 0xffffffc0, 0x80000001, r13}}], 0x20, 0x4001010}, {&(0x7f0000000e40)=@in6={0xa, 0x4e23, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="524253a8d4199367fe9c51071211dc2158445eff44fb43e314e632bc796a211e373a4c86834774c4143ca560316f29032a9ec85e1847a12a8dceabbc203293cd293e57", 0x43}, {&(0x7f0000000f80)="7374dadb992e992cc0b14af9f9fbfc44a7b7f41d35bd1dc7c48ec4f9d4197d2d48e3304bab54cb6b29cfa8429c79a0", 0x2f}], 0x2, 0x0, 0x0, 0x4}, {&(0x7f0000001000)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001040)="60ebeec43d23ac8aa07fe696587a054c5af64ea725037949828c2a04327332c80d3e6545a5e02a5c44766147c77ec51bae7df144c0bb3727e2224c460a5fe7c90ab055deffe6db45f06296b54daf0d4f0eb1e9a63c6e49d841c8bd09473f0cb356967d0b1d00fd326cc570de7471e8d040712ce1", 0x74}, {&(0x7f00000010c0)="887f6ec1b366feb9040b88ac015245ffbaf4aa21c77fe6eefcd0ad98ca8d7537952e0bd1d3f55e80cd7e98f252f7e959a53767ff3d80db66d6411b4b5e72461e5f1f7e9e6428e6631fae", 0x4a}, {&(0x7f0000001140)="653ab9e9f6b7e9e520607d0833ec80cd8df9cbe2bf8d74ecfb9fe175690cb26548e63a644ea2907bb64e15b0ec9cf07fd89964177110abc7e8496326be664011ef5cc72ac68b96", 0x47}, {&(0x7f00000011c0)="1f40e058ed73647f89b5f2df55f02707ff9ae82e40da2b4f25e87a935c69849c2fbfcd1028bb1e3497ff0a1c21d836ed087acdaa7fa366d280741267545845c9285a613b8b4e3339a9fbee26686e7d1c771ef0101b8a92f6a702b7b410bee4a36d2f1c715e9a05a3043f064c06950b4147ebf3c6f28a0edb", 0x78}, {&(0x7f0000001240)="14bc58b4fe3d18adf1f3a88a9a44965c0b9c33daaa548857ee2144021235b4ac503b6a98c56100e7b7de10d82635b5b58136958c23c1329d15526ffc6c10", 0x3e}, {&(0x7f0000001280)="4ca45fa67857620007e8f03a544c50f5533bec327159298c31dfcdd1f40fc6d373a6a9750a0393a046ffeccc2eaf2962de36dbe7be3fb3163bb9def0e10641ffdf5784097bf7f4e8a598fc8b8b3b9fa06730c3cda5e0f22b51e76e61c3306ce7fd8bad45cec328ac2715f4a87d6ecbabdf07be4f07588e7653c435bfdab3ae8267892dcf08a2f17c6ccb765c20883f6a3abb00eb3e884650ffc872e0c44a7ad5bcc1e98368d1143fb7408d0c3f2a8fe1b94332166c7a6d81b6037a2fff48b66893cd14d05df569e50bb3464502a8a38b5bc6b79bc848c802cff28f66df35f8f2c1eae3e7f9633a40955db34cea777c6a5983a9a579b89765c2", 0xf9}, {&(0x7f0000001380)="58a17b265faa0675f402a4c9f758ea47f4905703adb3a318ab83df0f025a2eeff548f671bcd321da2f4207c256bf550467231a98a669052942889b85f23de94571661728a05f1242beff5bfe75adfffd500084e063073de72829bc892f0ad3b67482f28986879141d5d8cd73f8dee03a4383bde0d4f92b8fba38d0db1170fb2f0dcb105c279656d4fff4f57ff62c5e9ad64bc35a4a4fd290f6c608328e5b273e87e713d6ff6d33202b1fe133c36447fb95b729d0c5e4c8e81d5000541ae290b3f4babdeb4b3ddf61d5398b963dd537112e0a65d741", 0xd5}, {&(0x7f0000001480)="4b2aa0e8887185c6b91510f8e4a090e0f62a835351032c3861ce5b6160", 0x1d}], 0x8, &(0x7f0000001640)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x6, 0x8, 0x4, 0x9, 0x7, 0x0, 0x6, r14}}, @init={0x18, 0x84, 0x0, {0xe, 0x3ff, 0xfffc, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @private2}], 0x80, 0x40000}], 0x6, 0x4000000) 204.252824ms ago: executing program 4 (id=8345): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ttl={{0x28}, {0x0, 0xa1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x1, 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x3, 0x6], 0x4}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x3, 0xa, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65060000000000000000000000000000000000000000000000000005000000f47e6aeb88"], &(0x7f0000000100)=0x29) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x18c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x8, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15c, 0x2, {{0x4, 0x2, 0x3, 0x10, 0xc, 0xf9d}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffffe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1000, 0x14, 0xb0e}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x98b1, 0x7}}, @TCA_NETEM_DELAY_DIST={0x12, 0x2, "ba8f16e9fff80a1fb8989894390a"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xbb40000}, @TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x7, 0x10001, 0x7f8000, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8000, 0x7fff, 0x4, 0xdd6e, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0xf, 0x2, 0x6dc7b1d5, 0x3, 0xff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x800, 0x8, 0x8, 0x81}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0x6f0b68b5120abd59}, @TCA_NETEM_DELAY_DIST={0x23, 0x2, "2f2369d8e356b4dd13b15b22ea101650c3d2519734f9755a3327a5c77f4410"}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffff93b4, 0xffffffffffffffd8, 0x6, 0x7, 0x6, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x2e7aafff, 0xe9}}]}}}]}, 0x18c}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0x0, 0x8, 0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x0, 0xb, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x4004002) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) 15.041205ms ago: executing program 0 (id=8346): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0xff, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e0000008060040"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) 9.773075ms ago: executing program 1 (id=8347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) (async, rerun: 64) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) (async, rerun: 64) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX], 0x84}}, 0x0) (rerun: 32) 0s ago: executing program 2 (id=8348): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r0, 0x1) sendto(r0, 0x0, 0x0, 0x8000, &(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x3, 0x3, 0x1, 0x2}}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0xb4, 0xa3, 0x5, 0x834, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x8, 0x9, 0x6, 0x64c68, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0xc}, 0x50) kernel console output (not intermixed with test programs): ated]: syz.3.6521 (pid 30383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.927555][T30383] Use struct sctp_sack_info instead [ 726.317920][T30403] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 726.390706][T30408] __nla_validate_parse: 5 callbacks suppressed [ 726.390730][T30408] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6528'. [ 726.438255][T30408] rdma_op ffff888054b9f1f0 conn xmit_rdma 0000000000000000 [ 726.495203][T30363] geneve3: entered promiscuous mode [ 726.506472][T30415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.525281][ T7392] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 34900 - 0 [ 726.544582][ T7392] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 34900 - 0 [ 726.570703][T30416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6530'. [ 726.575552][ T7392] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 34900 - 0 [ 726.609412][ T7392] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 34900 - 0 [ 726.983061][T13377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.992104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.372930][T30442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6535'. [ 727.407318][T30442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6535'. [ 727.432772][T30448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6537'. [ 727.460847][T30444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6536'. [ 727.536668][T30456] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 728.021740][T30485] bond2: Unable to set up delay as MII monitoring is disabled [ 728.033958][T30489] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6550'. [ 728.047592][T30491] netlink: 'syz.0.6548': attribute type 1 has an invalid length. [ 728.055961][T30491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6548'. [ 728.142200][T30485] bond2 (unregistering): Released all slaves [ 728.499799][T30513] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6556'. [ 728.656249][T30522] syzkaller0: entered promiscuous mode [ 728.662119][T30522] syzkaller0: entered allmulticast mode [ 728.673810][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.680780][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.687091][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.693480][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.699799][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.706143][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.712482][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.718772][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.725145][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.731514][T30522] tc action pedit 'at' offset 257 out of bounds [ 728.737887][T30522] 0: reclassify loop, rule prio 0, protocol 800 [ 728.919408][T30531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.929332][T30530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6562'. [ 729.543853][T30540] netlink: 'syz.4.6565': attribute type 10 has an invalid length. [ 729.556172][T30542] netlink: 'syz.3.6566': attribute type 7 has an invalid length. [ 729.564918][T30542] netlink: 'syz.3.6566': attribute type 8 has an invalid length. [ 729.703176][T30539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.067466][T30567] lo speed is unknown, defaulting to 1000 [ 730.411099][T30590] netlink: 'syz.4.6584': attribute type 2 has an invalid length. [ 730.462886][T30590] netlink: 'syz.4.6584': attribute type 2 has an invalid length. [ 730.517598][T30567] lo speed is unknown, defaulting to 1000 [ 730.880718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.889433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.068824][T30628] Bluetooth: MGMT ver 1.23 [ 731.074611][T30622] bond1 (unregistering): Released all slaves [ 731.267965][T30637] netlink: 'syz.1.6598': attribute type 12 has an invalid length. [ 731.360400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 731.369063][ C1] lec:lec_tx_timeout: lec0 [ 731.375754][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 731.386005][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.608365][T30653] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 731.881564][T30671] netlink: 'syz.4.6609': attribute type 1 has an invalid length. [ 731.919838][T30672] netlink: 'syz.4.6609': attribute type 1 has an invalid length. [ 731.989982][T30675] __nla_validate_parse: 7 callbacks suppressed [ 731.990005][T30675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6610'. [ 732.059163][T30675] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 732.460778][T30708] netlink: 'syz.0.6621': attribute type 1 has an invalid length. [ 732.514891][T30711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6621'. [ 732.527724][T30708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 732.583357][T30711] bond2: (slave geneve2): making interface the new active one [ 732.592433][T30711] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 732.601691][T13377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.621302][T13377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.631061][T13377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.639977][T13377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.173113][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6631'. [ 733.220482][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6631'. [ 733.501119][T30763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6637'. [ 733.530835][T30758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6637'. [ 733.544135][T30759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6637'. [ 733.555201][T30760] macvtap1: entered promiscuous mode [ 733.579002][T30760] macvtap1: entered allmulticast mode [ 733.590698][T30760] veth1_vlan: entered allmulticast mode [ 733.622278][T30759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6637'. [ 733.646803][T30758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6637'. [ 733.670566][T30759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6637'. [ 734.742225][T30813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.848501][T30818] block nbd0: reconnected socket [ 734.864545][T30786] lec:lec_atm_close: lec0: Shut down! [ 734.925678][T30825] netlink: 'syz.1.6652': attribute type 3 has an invalid length. [ 734.934171][T30825] netlink: 'syz.1.6652': attribute type 1 has an invalid length. [ 734.944603][ T5832] block nbd0: Receive control failed (result -32) [ 735.449561][ T7392] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 735.475282][ T7392] bond7 (unregistering): (slave gretap2): Releasing active interface [ 735.529754][ T7392] bond11 (unregistering): (slave geneve2): Releasing active interface [ 735.581828][ T7392] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 735.593831][ T7392] bridge1 (unregistering): left promiscuous mode [ 735.757873][ T7392] team0: Port device bridge4 removed [ 735.815758][ T7392] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 735.824623][ T7392] bridge5 (unregistering): left promiscuous mode [ 735.831528][ T7392] bridge5 (unregistering): left allmulticast mode [ 736.027254][ T7392] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 736.035671][ T7392] bond6 (unregistering): (slave bridge8): the permanent HWaddr of slave - 36:73:4f:f2:f2:90 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 736.082423][ T7392] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 736.136172][ T7392] bond6 (unregistering): (slave bridge10): Releasing backup interface [ 736.302908][ T7392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.317581][ T7392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.332019][ T7392] bond0 (unregistering): Released all slaves [ 736.345648][ T7392] bond1 (unregistering): Released all slaves [ 736.366279][ T7392] bond2 (unregistering): (slave bond3): Releasing backup interface [ 736.375955][ T7392] bond2 (unregistering): Released all slaves [ 736.396685][ T7392] bond3 (unregistering): Released all slaves [ 736.435540][ T7392] bond4 (unregistering): Released all slaves [ 736.456386][ T7392] bond5 (unregistering): Released all slaves [ 736.477543][ T7392] bond6 (unregistering): Released all slaves [ 736.519099][ T7392] bond7 (unregistering): Released all slaves [ 736.550719][ T7392] bond8 (unregistering): (slave vxcan3): Releasing backup interface [ 736.561207][ T7392] bond8 (unregistering): Released all slaves [ 736.579568][ T7392] bond9 (unregistering): Released all slaves [ 736.602734][ T7392] bond10 (unregistering): Released all slaves [ 736.622947][ T7392] bond11 (unregistering): Released all slaves [ 736.833781][ T7392] : left promiscuous mode [ 737.042813][T30866] IPv6: NLM_F_CREATE should be specified when creating new route [ 737.073803][T30869] __nla_validate_parse: 71 callbacks suppressed [ 737.073826][T30869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6664'. [ 737.177687][ T7392] IPVS: stopping backup sync thread 20218 ... [ 737.244087][T30878] "syz.4.6666" (30878) uses obsolete ecb(arc4) skcipher [ 737.296125][T30876] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6668'. [ 737.348379][T30877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.356428][T30876] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 737.548761][T30893] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6671'. [ 738.193096][T30916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6677'. [ 738.400732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.410992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.602098][T30948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6686'. [ 738.804840][T30963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6687'. [ 738.905302][ T7392] hsr_slave_0: left promiscuous mode [ 738.922929][T30976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6683'. [ 738.943481][ T7392] hsr_slave_1: left promiscuous mode [ 738.977622][ T7392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.013282][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.064183][ T7392] veth1_macvtap: left promiscuous mode [ 739.069971][ T7392] veth1_vlan: left promiscuous mode [ 739.086380][ T7392] veth0_vlan: left promiscuous mode [ 739.335786][ T7392] pim6reg (unregistering): left allmulticast mode [ 739.551711][ T7392] team0 (unregistering): Port device team_slave_1 removed [ 739.568946][ T7392] team0 (unregistering): Port device team_slave_0 removed [ 739.585678][ T7392] veth0_to_team (unregistering): left allmulticast mode [ 739.708520][T30960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6687'. [ 739.722336][T30970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6687'. [ 739.755966][T30976] bridge0: entered promiscuous mode [ 739.762663][T30976] macsec1: entered promiscuous mode [ 739.768210][T30976] macsec1: entered allmulticast mode [ 739.775083][T30976] bridge0: entered allmulticast mode [ 739.784907][T30976] bridge0: port 3(macsec1) entered blocking state [ 739.795636][T30976] bridge0: port 3(macsec1) entered disabled state [ 739.807681][T30976] bridge0: left allmulticast mode [ 739.815895][T30976] bridge0: left promiscuous mode [ 739.870236][T30985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6692'. [ 740.000409][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 740.008579][ C1] lec:lec_tx_timeout: lec0 [ 740.013348][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 740.970936][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.370848][T31059] syzkaller1: entered promiscuous mode [ 741.376409][T31059] syzkaller1: entered allmulticast mode [ 741.383866][T31063] openvswitch: netlink: IPv4 tunnel dst address is zero [ 741.400398][T31059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.477614][ T7392] IPVS: stop unused estimator thread 0... [ 741.488439][T31067] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 741.859901][T31084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.864012][T31081] pim6reg: entered allmulticast mode [ 741.869650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.900874][T31088] pim6reg: left allmulticast mode [ 741.923134][T31084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.932113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.201627][T31102] __nla_validate_parse: 4 callbacks suppressed [ 742.201650][T31102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6725'. [ 742.318710][T31102] bond2: Invalid ad_actor_system MAC address. [ 742.405173][T31115] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6722'. [ 742.425237][T31102] bond2: option ad_actor_system: invalid value (1) [ 742.479263][T31115] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6722'. [ 742.582821][T31102] bond2 (unregistering): Released all slaves [ 742.656023][T31111] bond2: Unable to set up delay as MII monitoring is disabled [ 742.672468][T31111] bond2 (unregistering): Released all slaves [ 742.939653][T31141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6735'. [ 742.996709][T31143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6735'. [ 743.187636][T31157] lo speed is unknown, defaulting to 1000 [ 743.282092][T31168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6739'. [ 743.301034][T31166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6739'. [ 743.424525][T31173] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 743.442443][T31172] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001 [ 743.669499][T31186] xt_ipcomp: unknown flags 1D [ 743.734514][T31157] lo speed is unknown, defaulting to 1000 [ 743.803163][T31195] openvswitch: netlink: Message has 8 unknown bytes. [ 743.810151][T31195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.917730][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6747'. [ 744.553663][T31232] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6756'. [ 744.603140][T31232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6756'. [ 744.815230][T31245] netlink: 'syz.4.6758': attribute type 9 has an invalid length. [ 744.992141][T31249] bridge0: port 1(bridge_slave_0) entered learning state [ 745.020347][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 745.028479][ C1] lec:lec_tx_timeout: lec0 [ 745.033297][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 745.044911][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.084134][T24843] net_ratelimit: 1 callbacks suppressed [ 746.084156][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.154709][T31308] bond2: option xmit_hash_policy: invalid value (64) [ 746.198437][T31308] bond2 (unregistering): Released all slaves [ 746.360653][ T7379] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 746.423731][T31320] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.441172][T31338] Cannot find set identified by id 2 to match [ 746.453394][T31320] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 746.491838][T31342] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 746.797222][T31351] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 747.121258][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.361020][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 747.379295][T24814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.516131][T31397] rdma_op ffff888036b249f0 conn xmit_rdma 0000000000000000 [ 747.525601][T24814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.548233][T31397] __nla_validate_parse: 9 callbacks suppressed [ 747.548253][T31397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6806'. [ 747.565132][T31397] netlink: 'syz.0.6806': attribute type 5 has an invalid length. [ 747.575530][T31397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6806'. [ 747.773953][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6807'. [ 747.792748][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6807'. [ 747.797208][T31406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6808'. [ 747.902379][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6810'. [ 747.911441][T31413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6810'. [ 748.006943][T31422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6812'. [ 748.160608][T24842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.516500][T31452] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6822'. [ 748.677664][T31462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6824'. [ 748.709055][T31462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.718067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.752648][T24842] IPVS: starting estimator thread 0... [ 748.758724][T31462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.770836][ T7387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.789435][T31459] IPVS: set_ctl: invalid protocol: 38 10.1.1.2:20004 [ 748.803941][T31466] lo speed is unknown, defaulting to 1000 [ 748.812332][T31474] netlink: 'syz.3.6824': attribute type 9 has an invalid length. [ 748.820483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.861316][T31469] IPVS: using max 25 ests per chain, 60000 per kthread [ 748.978499][T31481] netlink: 'syz.0.6828': attribute type 1 has an invalid length. [ 748.996573][T31472] erspan0: entered promiscuous mode [ 749.202768][T31481] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 749.270873][T31495] netlink: 'syz.2.6830': attribute type 12 has an invalid length. [ 749.470350][T31466] lo speed is unknown, defaulting to 1000 [ 749.693105][T31510] syzkaller0: entered promiscuous mode [ 749.700470][T31510] syzkaller0: entered allmulticast mode [ 750.046150][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 750.054306][ C1] lec:lec_tx_timeout: lec0 [ 750.059192][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 750.278040][T31547] netlink: 'syz.0.6841': attribute type 1 has an invalid length. [ 751.290520][T24842] net_ratelimit: 9 callbacks suppressed [ 751.290543][T24842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.040332][T31547] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 752.275412][T31591] netlink: 'syz.2.6845': attribute type 3 has an invalid length. [ 752.338958][T31583] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.346588][T31583] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.365628][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.490709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.500447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.527095][T31597] netlink: 'syz.0.6846': attribute type 1 has an invalid length. [ 752.602522][T31598] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 752.617121][T31598] bond3 (unregistering): Released all slaves [ 752.669562][T31597] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 752.815335][T31607] syzkaller1: entered promiscuous mode [ 752.829945][T31607] syzkaller1: entered allmulticast mode [ 752.999682][T31622] bridge3: entered promiscuous mode [ 753.030496][T31622] bridge3: entered allmulticast mode [ 753.045618][T31622] team0: Port device bridge3 added [ 753.113280][T31625] bridge0: port 4(team0) entered blocking state [ 753.119838][T31625] bridge0: port 4(team0) entered disabled state [ 753.128965][T24814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.150573][T31625] team0: entered allmulticast mode [ 753.161638][T31625] team_slave_0: entered allmulticast mode [ 753.191469][T31625] team_slave_1: entered allmulticast mode [ 753.212190][T31625] team0: entered promiscuous mode [ 753.228162][T31625] team_slave_0: entered promiscuous mode [ 753.240596][T31625] team_slave_1: entered promiscuous mode [ 753.255211][T31635] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 753.440916][T24842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.602343][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.054757][T31685] syzkaller1: entered promiscuous mode [ 754.065864][T31685] syzkaller1: entered allmulticast mode [ 754.093804][T31688] netlink: 'syz.4.6868': attribute type 10 has an invalid length. [ 754.102080][T31688] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 754.119034][T31688] netlink: 'syz.4.6868': attribute type 10 has an invalid length. [ 754.480891][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.759615][T31731] netlink: 'syz.0.6879': attribute type 4 has an invalid length. [ 754.994888][T31747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.003419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.070460][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 755.078549][ C1] lec:lec_tx_timeout: lec0 [ 755.083251][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 755.161377][T31757] __nla_validate_parse: 5 callbacks suppressed [ 755.161398][T31757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6885'. [ 755.355925][T31768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'. [ 755.652350][T31775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6889'. [ 755.677530][T31794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6894'. [ 755.748800][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6894'. [ 755.790901][T31794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6894'. [ 755.801367][T31793] lo speed is unknown, defaulting to 1000 [ 755.825391][T31800] netlink: 'syz.2.6895': attribute type 3 has an invalid length. [ 755.838536][T24843] IPVS: starting estimator thread 0... [ 755.938925][T31803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6898'. [ 755.949021][T31801] IPVS: using max 28 ests per chain, 67200 per kthread [ 756.017966][T31807] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 756.025864][T31807] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 756.050058][T31807] netlink: 'syz.0.6897': attribute type 1 has an invalid length. [ 756.132298][T31810] netlink: 'syz.1.6899': attribute type 1 has an invalid length. [ 756.258644][T31793] lo speed is unknown, defaulting to 1000 [ 756.285798][T31814] bond2: (slave geneve2): making interface the new active one [ 756.294938][T31814] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 756.322059][ T7379] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 756.333067][ T7379] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 756.379724][ T7379] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 756.390422][ C1] net_ratelimit: 13 callbacks suppressed [ 756.390443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.406186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.429549][T31817] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6901'. [ 756.447122][ T7379] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 756.558898][T31823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6903'. [ 756.582366][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.606075][T31794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.645975][T24814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.863226][T31826] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 757.193682][T31852] xt_hashlimit: overflow, try lower: 3/0 [ 757.247452][T31852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6912'. [ 757.471339][T31865] syzkaller0: entered promiscuous mode [ 757.476915][T31865] syzkaller0: entered allmulticast mode [ 757.595609][T31877] block nbd0: Unsupported socket: should be TCP or UNIX. [ 757.603481][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.618081][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.657700][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.525201][T24814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.681401][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.906678][T31898] pim6reg527: entered allmulticast mode [ 760.090315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 760.098396][ C1] lec:lec_tx_timeout: lec0 [ 760.103303][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 760.286954][T31923] syzkaller1: entered promiscuous mode [ 760.303784][T31923] syzkaller1: entered allmulticast mode [ 760.811862][T31941] __nla_validate_parse: 6 callbacks suppressed [ 760.811886][T31941] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.6935'. [ 761.764605][T10719] net_ratelimit: 2 callbacks suppressed [ 761.764629][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.562178][T24814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.803330][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.078826][T31910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 763.332264][T31963] syzkaller0: create flow: hash 3614511288 index 1 [ 763.345714][T31961] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 763.504030][T31972] xt_ecn: cannot match TCP bits for non-tcp packets [ 763.720033][T31983] IPv6: Can't replace route, no match found [ 763.726949][T31983] IPv6: Can't replace route, no match found [ 763.783516][T31956] syzkaller0: delete flow: hash 3614511288 index 1 [ 763.851733][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.459878][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6946'. [ 764.470879][T31992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6946'. [ 764.480153][T31992] netlink: 'syz.0.6946': attribute type 14 has an invalid length. [ 764.497259][T31992] netlink: 'syz.0.6946': attribute type 13 has an invalid length. [ 764.896686][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.112308][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 765.120447][ C1] lec:lec_tx_timeout: lec0 [ 765.125384][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 765.606356][T24817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.922116][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.257643][T32011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6951'. [ 766.291840][T32011] netlink: 'syz.4.6951': attribute type 1 has an invalid length. [ 766.574767][T31974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.867963][T32024] bond3: entered promiscuous mode [ 766.877288][T32032] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6959'. [ 766.960152][T32042] openvswitch: netlink: IPv4 tun info is not correct [ 766.968271][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.193403][T32049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6964'. [ 767.273238][T32058] netlink: 'syz.0.6968': attribute type 29 has an invalid length. [ 767.289105][T32058] netlink: 'syz.0.6968': attribute type 29 has an invalid length. [ 767.301583][T32058] netlink: 'syz.0.6968': attribute type 29 has an invalid length. [ 767.310114][T32058] netlink: 'syz.0.6968': attribute type 29 has an invalid length. [ 767.325814][T32058] netlink: 'syz.0.6968': attribute type 29 has an invalid length. [ 767.338728][T32061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6969'. [ 767.349782][T32062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6969'. [ 767.361012][T32058] netlink: 'syz.0.6968': attribute type 29 has an invalid length. [ 767.390951][T32058] netlink: 'syz.0.6968': attribute type 29 has an invalid length. [ 767.415221][T32064] syzkaller0: entered promiscuous mode [ 767.425801][T32064] syzkaller0: entered allmulticast mode [ 767.582454][T32070] ipt_ECN: cannot use operation on non-tcp rule [ 767.697747][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6975'. [ 767.896028][T32092] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6981'. [ 768.003404][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.021669][T32096] openvswitch: netlink: Missing key (keys=40, expected=80) [ 768.143103][T32107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 768.149887][T32107] netlink: zone id is out of range [ 768.169365][T32107] netlink: zone id is out of range [ 768.246338][T32107] netlink: del zone limit has 4 unknown bytes [ 768.515804][T32125] syzkaller0: entered promiscuous mode [ 768.534213][T32127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6989'. [ 768.545814][T32127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6989'. [ 768.644103][T24817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.047981][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.766254][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.922215][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 770.140388][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 770.148584][ C1] lec:lec_tx_timeout: lec0 [ 770.153465][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 770.930060][T32131] gretap0: left allmulticast mode [ 770.936244][T32131] gretap0: left promiscuous mode [ 770.942136][T32131] bridge0: port 3(gretap0) entered disabled state [ 770.951978][T32131] team0: left allmulticast mode [ 770.956928][T32131] team_slave_0: left allmulticast mode [ 770.963671][T32131] team_slave_1: left allmulticast mode [ 770.969223][T32131] team0: left promiscuous mode [ 770.974896][T32131] team_slave_0: left promiscuous mode [ 770.981281][T32131] team_slave_1: left promiscuous mode [ 770.987390][T32131] bridge0: port 4(team0) entered disabled state [ 771.000123][T32131] bridge_slave_0: left allmulticast mode [ 771.007004][T32131] bridge_slave_0: left promiscuous mode [ 771.013813][T32131] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.026621][T32131] bridge_slave_1: left allmulticast mode [ 771.034447][T32131] bridge_slave_1: left promiscuous mode [ 771.041586][T32131] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.055226][T32131] bond0: (slave bond_slave_0): Releasing backup interface [ 771.068014][T32131] bond0: (slave bond_slave_1): Releasing backup interface [ 771.079611][T32131] team0: Port device team_slave_0 removed [ 771.088885][T32131] team0: Port device team_slave_1 removed [ 771.096929][T32131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.106452][T32131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.277170][T32159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6998'. [ 771.337887][T32152] bridge0: port 1(bridge_slave_0) entered learning state [ 771.717290][T32186] Bluetooth: MGMT ver 1.23 [ 771.897476][T32202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7013'. [ 772.111867][T32206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7014'. [ 772.161905][T24843] net_ratelimit: 7 callbacks suppressed [ 772.161928][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.198337][T32206] bond4: Invalid ad_actor_system MAC address. [ 772.213947][T32220] openvswitch: netlink: Missing key (keys=40, expected=80) [ 772.223185][T32206] bond4: option ad_actor_system: invalid value (1) [ 772.235675][T32206] bond4 (unregistering): Released all slaves [ 772.418266][T32234] netlink: 'syz.2.7022': attribute type 6 has an invalid length. [ 772.449302][T32237] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 772.572690][T32245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7025'. [ 772.584558][T32239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7024'. [ 772.613884][T32245] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 772.637834][T32247] xt_hashlimit: size too large, truncated to 1048576 [ 772.664198][T32245] team1: entered promiscuous mode [ 772.669459][T32245] team1: entered allmulticast mode [ 772.748300][T32253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7029'. [ 772.800961][T24817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.192082][T32264] syzkaller0: entered promiscuous mode [ 773.201073][T32264] syzkaller0: entered allmulticast mode [ 773.206911][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.414978][T32294] xt_HMARK: proto mask must be zero with L3 mode [ 773.502237][T32298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7039'. [ 774.256538][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.160486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 775.168696][ C1] lec:lec_tx_timeout: lec0 [ 775.173741][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 775.281258][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.840846][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.890853][T32312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7042'. [ 775.927434][T32314] netlink: 'syz.4.7043': attribute type 10 has an invalid length. [ 775.939043][T32314] team0: Device ipvlan1 failed to register rx_handler [ 776.292623][T32333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7048'. [ 776.371730][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.669995][T32362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7057'. [ 776.731792][T32362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7057'. [ 776.755481][T32358] syzkaller1: entered promiscuous mode [ 776.771832][T32358] syzkaller1: entered allmulticast mode [ 776.841003][T32367] openvswitch: netlink: Missing key (keys=40, expected=100) [ 776.898783][T32370] netlink: 'syz.0.7061': attribute type 21 has an invalid length. [ 776.918256][T32372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7059'. [ 776.940444][T32370] netlink: 'syz.0.7061': attribute type 1 has an invalid length. [ 776.982578][T32373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.993825][T32371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7060'. [ 777.128023][T32383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7063'. [ 777.192436][T32384] netlink: 'syz.0.7063': attribute type 4 has an invalid length. [ 777.203526][T32384] netlink: 'syz.0.7063': attribute type 1 has an invalid length. [ 777.224462][T32384] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7063'. [ 777.237073][T32388] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7060'. [ 777.446218][T10719] net_ratelimit: 6 callbacks suppressed [ 777.446242][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.545948][T32394] syzkaller1: entered promiscuous mode [ 777.554162][T32394] syzkaller1: entered allmulticast mode [ 777.918950][T32409] netlink: 'syz.2.7070': attribute type 27 has an invalid length. [ 777.976504][T32411] bond2: entered promiscuous mode [ 778.095284][T32425] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 778.267206][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7076'. [ 778.295696][T32437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7078'. [ 778.433660][T32443] netlink: 'syz.3.7081': attribute type 18 has an invalid length. [ 778.496451][ T88] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.510059][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.528336][ T88] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.545817][ T88] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.600474][T32441] bridge_slave_1: left allmulticast mode [ 778.606223][T32441] bridge_slave_1: left promiscuous mode [ 778.631687][T32441] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.695454][T32441] bridge_slave_0: left allmulticast mode [ 778.702709][T32441] bridge_slave_0: left promiscuous mode [ 778.708707][T32441] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.875629][ T88] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.885988][T24814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.895367][T32468] netlink: 'syz.2.7088': attribute type 1 has an invalid length. [ 778.967976][T32468] bond3: entered promiscuous mode [ 778.974534][T32468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 779.082548][T32479] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 779.203445][T32486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.212665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.317695][T32490] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 779.522060][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.733234][T32519] netlink: 'syz.4.7105': attribute type 18 has an invalid length. [ 779.744252][T32523] netlink: 'syz.0.7106': attribute type 1 has an invalid length. [ 779.776561][T32528] netlink: 'syz.0.7106': attribute type 1 has an invalid length. [ 779.833410][T13371] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.847829][T13371] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.873694][T13371] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.904196][T13371] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.977120][T32536] xt_hashlimit: size too large, truncated to 1048576 [ 780.180295][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 780.188409][ C1] lec:lec_tx_timeout: lec0 [ 780.194816][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 780.233314][T32548] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20001 [ 780.367213][T32552] sit1: entered promiscuous mode [ 780.377022][T32552] sit1: entered allmulticast mode [ 780.433333][T32550] can: request_module (can-proto-0) failed. [ 780.561343][T24843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.626174][T32568] IPVS: set_ctl: invalid protocol: 46 172.20.20.35:20000 [ 780.645044][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.001846][T32582] Unsupported ieee802154 address type: 0 [ 781.135181][T32594] syzkaller0: entered promiscuous mode [ 781.141543][T32594] syzkaller0: entered allmulticast mode [ 781.182463][T32596] netlink: 'syz.3.7131': attribute type 4 has an invalid length. [ 781.516518][T32610] __nla_validate_parse: 21 callbacks suppressed [ 781.516541][T32610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7134'. [ 781.806952][T32624] netlink: 33 bytes leftover after parsing attributes in process `syz.3.7140'. [ 781.827836][T32624] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7140'. [ 781.889323][T32624] netlink: 33 bytes leftover after parsing attributes in process `syz.3.7140'. [ 781.957343][T32626] netlink: 'syz.4.7141': attribute type 4 has an invalid length. [ 781.978452][T32631] xt_TPROXY: Can be used only with -p tcp or -p udp [ 781.983386][T32626] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7141'. [ 782.216776][T32646] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7148'. [ 782.240131][T32638] bond5: invalid ARP target 0.0.0.0 specified for addition [ 782.249483][T32638] bond5: option arp_ip_target: invalid value (0) [ 782.261883][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7148'. [ 782.304454][T32638] bond5 (unregistering): Released all slaves [ 782.417385][T32655] IPv6: sit2: Disabled Multicast RS [ 782.435062][T32655] sit2: entered allmulticast mode [ 782.643244][T32646] tipc: Started in network mode [ 782.648358][T32646] tipc: Node identity c21f87f3834, cluster identity 4711 [ 782.657138][T32646] tipc: Enabled bearer , priority 0 [ 782.709076][T32653] syzkaller0: entered promiscuous mode [ 782.729331][T32653] syzkaller0: entered allmulticast mode [ 782.746924][T32666] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 782.784428][T32666] bond4: (slave lo): Enslaving as an active interface with an up link [ 782.841948][T32666] net_ratelimit: 1 callbacks suppressed [ 782.841967][T32666] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.914130][T32655] tipc: Resetting bearer [ 783.099159][T32641] tipc: Resetting bearer [ 783.167267][T32641] tipc: Disabling bearer [ 783.265192][T32682] netlink: 'syz.2.7157': attribute type 1 has an invalid length. [ 783.274035][T32682] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7157'. [ 783.633114][T32709] netlink: 'syz.2.7163': attribute type 1 has an invalid length. [ 783.687142][T32709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.744490][T32709] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.944430][T32720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7165'. [ 784.115580][T32728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7168'. [ 784.264560][T32732] bond1: option xmit_hash_policy: invalid value (64) [ 784.283054][T32732] bond1 (unregistering): Released all slaves [ 784.348382][T32731] team0: Cannot enslave team device to itself [ 784.713990][T32765] openvswitch: netlink: IP tunnel dst address not specified [ 784.724250][T32766] bond0: Caught tx_queue_len zero misconfig [ 784.759217][T32764] lo speed is unknown, defaulting to 1000 [ 784.911682][ T305] tipc: Failed to remove unknown binding: 66,1,1/0:84554688/84554690 [ 785.280742][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 785.355127][T32764] lo speed is unknown, defaulting to 1000 [ 785.445280][ T330] netlink: 'syz.4.7191': attribute type 12 has an invalid length. [ 785.998792][ T353] Bluetooth: MGMT ver 1.23 [ 786.259114][ T362] netlink: 'syz.4.7198': attribute type 178 has an invalid length. [ 786.400293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6200 ms [ 786.408388][ C1] lec:lec_tx_timeout: lec0 [ 786.413344][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 786.428639][ T371] netlink: 'syz.4.7201': attribute type 1 has an invalid length. [ 786.437693][ T371] netlink: 'syz.4.7201': attribute type 7 has an invalid length. [ 786.446449][ T371] netlink: 'syz.4.7201': attribute type 8 has an invalid length. [ 786.683918][ T391] __nla_validate_parse: 5 callbacks suppressed [ 786.683939][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7207'. [ 786.697923][ T384] ipvlan2: entered allmulticast mode [ 786.707995][ T384] batadv_slave_1: entered allmulticast mode [ 786.717534][ T384] batman_adv: batadv0: Adding interface: ipvlan2 [ 786.724702][ T384] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.753777][ T384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.779328][ T384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.824112][ T384] batman_adv: batadv0: Interface activated: ipvlan2 [ 786.993021][ T399] netlink: 'syz.1.7209': attribute type 1 has an invalid length. [ 787.071492][ T405] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7211'. [ 787.159252][ T399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 787.286214][ T405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 787.541349][ T436] netlink: 'syz.0.7217': attribute type 58 has an invalid length. [ 787.553493][ T436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7217'. [ 787.566988][ T430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7216'. [ 788.034045][ T459] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.7226'. [ 788.161552][ T471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7230'. [ 788.219438][ T474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7231'. [ 788.244761][ T474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7231'. [ 788.272998][ T476] netlink: 'syz.1.7232': attribute type 11 has an invalid length. [ 788.347533][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7233'. [ 788.402354][ T483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7235'. [ 788.423485][ T484] netlink: 'syz.2.7236': attribute type 1 has an invalid length. [ 788.493439][ T485] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 788.508898][ T485] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 788.561567][ T492] bond5: (slave bridge4): making interface the new active one [ 788.591293][ T492] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 788.723070][ T504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.733182][ T504] netlink: 'syz.4.7240': attribute type 1 has an invalid length. [ 788.748194][ T506] : entered promiscuous mode [ 789.031648][ T523] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 789.065558][ T528] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 789.876814][ T546] Bluetooth: MGMT ver 1.23 [ 790.278651][ T580] pim6reg1: entered promiscuous mode [ 790.292440][ T580] pim6reg1: entered allmulticast mode [ 790.378347][ T588] x_tables: duplicate underflow at hook 3 [ 790.978469][ T621] netlink: 'syz.0.7272': attribute type 11 has an invalid length. [ 791.166659][ T636] netlink: 'syz.4.7276': attribute type 64 has an invalid length. [ 791.544515][ T659] syzkaller1: entered promiscuous mode [ 791.551794][ T659] syzkaller1: entered allmulticast mode [ 791.689746][ T670] netlink: 'syz.3.7284': attribute type 11 has an invalid length. [ 791.718071][ T672] virt_wifi0: entered promiscuous mode [ 791.847314][ T682] sctp: [Deprecated]: syz.4.7291 (pid 682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 791.847314][ T682] Use struct sctp_sack_info instead [ 791.889920][ T678] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 791.972034][ T678] bond1 (unregistering): Released all slaves [ 792.041619][ T695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.160299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 792.168406][ C1] lec:lec_tx_timeout: lec0 [ 792.173620][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 792.253130][ T708] __nla_validate_parse: 13 callbacks suppressed [ 792.253153][ T708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7298'. [ 792.270032][ T708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7298'. [ 792.295704][ T701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7297'. [ 792.525446][ T722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7304'. [ 792.629662][ T738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7307'. [ 792.771920][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030aab000: rx timeout, send abort [ 792.781324][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030aab800: rx timeout, send abort [ 792.928311][ T751] pimreg: entered allmulticast mode [ 793.272150][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030aaac00: rx timeout, send abort [ 793.281893][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030aaa400: rx timeout, send abort [ 793.290151][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030aab000: abort rx timeout. Force session deactivation [ 793.301560][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030aab800: abort rx timeout. Force session deactivation [ 793.570517][ T765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7316'. [ 793.780881][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030aaac00: abort rx timeout. Force session deactivation [ 793.792388][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030aaa400: abort rx timeout. Force session deactivation [ 795.418668][ T717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.736482][ T782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7320'. [ 795.746565][ T783] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7319'. [ 795.792717][ T782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7320'. [ 795.948809][ T795] syzkaller0: entered promiscuous mode [ 795.959233][ T795] syzkaller0: entered allmulticast mode [ 795.978220][ T800] ip6erspan0: entered allmulticast mode [ 795.987604][ T801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7323'. [ 796.059990][ T801] bond6: option xmit_hash_policy: invalid value (64) [ 796.114121][ T801] bond6 (unregistering): Released all slaves [ 796.319999][ T821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.484641][ T830] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 796.903569][ T847] xt_socket: unknown flags 0x50 [ 797.004943][ T849] netlink: 'syz.1.7340': attribute type 1 has an invalid length. [ 797.180322][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 797.188407][ C1] lec:lec_tx_timeout: lec0 [ 797.193457][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 797.386964][ T862] __nla_validate_parse: 7 callbacks suppressed [ 797.386982][ T862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7345'. [ 797.416414][ T862] xt_TCPMSS: Only works on TCP SYN packets [ 797.435235][ T862] vlan3: entered allmulticast mode [ 797.441475][ T862] bridge1: entered allmulticast mode [ 797.454567][ T862] bridge1: port 1(erspan0) entered blocking state [ 797.462399][ T862] bridge1: port 1(erspan0) entered disabled state [ 797.469251][ T862] erspan0: entered allmulticast mode [ 797.477808][ T862] erspan0: entered promiscuous mode [ 797.485366][ T862] bridge1: port 1(erspan0) entered blocking state [ 797.492035][ T862] bridge1: port 1(erspan0) entered forwarding state [ 797.838261][ T886] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 797.854786][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7352'. [ 797.892235][ T883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7352'. [ 797.909205][ T890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7354'. [ 797.995494][ T896] netdevsim netdevsim4 : renamed from netdevsim0 [ 798.139103][ T907] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7358'. [ 798.172110][ T907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7358'. [ 798.200413][ T907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7358'. [ 798.384753][ T919] netlink: 'syz.4.7361': attribute type 3 has an invalid length. [ 798.739704][ T954] netlink: 300 bytes leftover after parsing attributes in process `syz.4.7367'. [ 798.833415][ T959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7368'. [ 798.886173][ T959] ipvlan2: entered allmulticast mode [ 798.902517][ T959] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 798.924500][ T968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7370'. [ 798.947029][ T964] syzkaller1: entered promiscuous mode [ 798.952850][ T964] syzkaller1: entered allmulticast mode [ 798.960008][ T964] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 799.427398][ T996] bond0 (unregistering): Released all slaves [ 799.625549][ T1015] netlink: 'syz.0.7383': attribute type 1 has an invalid length. [ 799.942048][ T1037] netlink: 'syz.0.7387': attribute type 1 has an invalid length. [ 800.534239][ T1083] syzkaller0: entered promiscuous mode [ 800.539768][ T1083] syzkaller0: entered allmulticast mode [ 803.040358][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 803.048580][ C1] lec:lec_tx_timeout: lec0 [ 803.053373][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 803.624018][ T1085] lo speed is unknown, defaulting to 1000 [ 804.057441][ T1107] __nla_validate_parse: 5 callbacks suppressed [ 804.057464][ T1107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7406'. [ 804.092318][ T1107] veth0_virt_wifi: entered promiscuous mode [ 804.179058][ T1085] lo speed is unknown, defaulting to 1000 [ 804.438519][ T1127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7410'. [ 804.585893][ T1129] syzkaller0: entered promiscuous mode [ 804.592398][ T1129] syzkaller0: entered allmulticast mode [ 804.760864][ T1135] netlink: 41 bytes leftover after parsing attributes in process `syz.4.7412'. [ 804.802641][ T1135] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7412'. [ 804.845629][ T1135] netlink: 41 bytes leftover after parsing attributes in process `syz.4.7412'. [ 804.881986][ T1140] syzkaller0: entered promiscuous mode [ 804.887766][ T1140] syzkaller0: entered allmulticast mode [ 805.234545][ T1157] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.7418'. [ 805.437263][ T1165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7421'. [ 805.591738][ T1167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.644000][ T1176] netlink: 'syz.0.7424': attribute type 10 has an invalid length. [ 805.652520][ T1176] netlink: 396 bytes leftover after parsing attributes in process `syz.0.7424'. [ 805.827285][ T1186] ip6tnl0: Caught tx_queue_len zero misconfig [ 805.874055][ T1196] netlink: 'syz.0.7429': attribute type 1 has an invalid length. [ 805.928046][ T1199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7430'. [ 805.972952][ T1200] bond0: (slave gretap1): making interface the new active one [ 805.991766][ T1200] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 806.021780][ T1202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7431'. [ 806.204642][ T1217] Cannot find set identified by id 1 to match [ 806.253760][ T1217] Cannot find set identified by id 1 to match [ 806.263730][ T1217] Cannot find set identified by id 1 to match [ 806.489221][ T1236] netlink: 'syz.1.7440': attribute type 1 has an invalid length. [ 806.612320][ T1248] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 806.629682][ T1248] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 806.708035][ T1254] lo speed is unknown, defaulting to 1000 [ 807.014462][ T1254] lo speed is unknown, defaulting to 1000 [ 807.557088][ T1299] netlink: 'syz.2.7457': attribute type 1 has an invalid length. [ 807.650367][ T1288] bond1: Invalid ad_actor_system MAC address. [ 807.656666][ T1288] bond1: option ad_actor_system: invalid value (1) [ 807.706481][ T1288] bond1 (unregistering): Released all slaves [ 807.787345][ T1299] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 808.060331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 808.076807][ C1] lec:lec_tx_timeout: lec0 [ 808.081583][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 808.099342][ T1316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.113031][ T1316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 808.261494][ T1329] SET target dimension over the limit! [ 808.283259][ T1316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.296844][ T1316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 808.409878][ T1316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.421323][ T1316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 808.457822][ T1334] h: entered promiscuous mode [ 808.514515][ T1316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.527425][ T1316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 808.610942][ T1340] hsr0: entered promiscuous mode [ 808.616102][ T1340] macvlan2: entered allmulticast mode [ 808.631717][ T1340] hsr0: entered allmulticast mode [ 808.636838][ T1340] hsr_slave_1: entered allmulticast mode [ 808.737733][ T1143] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 808.753697][ T1143] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 808.771133][ T1143] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 808.795117][ T1143] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 808.804207][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 808.835855][ T1143] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 808.845865][ T1143] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 808.861070][ T1345] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 808.881666][ T1143] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 808.913283][ T1143] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 808.929538][ T1345] delete_channel: no stack [ 809.224364][ T1357] syzkaller0: entered promiscuous mode [ 809.229921][ T1357] syzkaller0: entered allmulticast mode [ 809.300163][ T1363] nbd: couldn't find device at index 65536 [ 809.313034][ T1363] __nla_validate_parse: 8 callbacks suppressed [ 809.313058][ T1363] netlink: 65019 bytes leftover after parsing attributes in process `syz.1.7480'. [ 809.389613][ T1363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7480'. [ 809.476223][ T1369] bond6: option fail_over_mac: invalid value (16) [ 809.508447][ T1369] bond6 (unregistering): Released all slaves [ 809.540978][ T1381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7484'. [ 809.586080][ T1383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7486'. [ 809.605235][ T1384] nbd: must specify a device to reconfigure [ 809.657419][ T1381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 809.682091][ T1383] : entered promiscuous mode [ 809.807452][ T1393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7488'. [ 809.853423][ T1401] netlink: 'syz.0.7491': attribute type 27 has an invalid length. [ 809.870730][ T1393] ipvlan5: entered allmulticast mode [ 809.885764][ T1393] syz_tun: entered allmulticast mode [ 809.909039][ T1406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7491'. [ 809.944441][ T1400] can: request_module (can-proto-0) failed. [ 809.945442][ T1397] can: request_module (can-proto-0) failed. [ 810.085776][ T1410] syzkaller0: entered promiscuous mode [ 810.110804][ T1410] syzkaller0: entered allmulticast mode [ 810.311713][ T1424] sctp: [Deprecated]: syz.2.7497 (pid 1424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.311713][ T1424] Use struct sctp_sack_info instead [ 810.513756][ T1438] x_tables: duplicate underflow at hook 3 [ 811.373248][ T1459] IPVS: set_ctl: invalid protocol: 125 10.1.1.0:20002 [ 811.492736][ T1466] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7509'. [ 811.502334][ T1466] netlink: 'syz.0.7509': attribute type 1 has an invalid length. [ 811.528294][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 811.539154][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 811.547939][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 811.556197][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 811.564107][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 811.634383][ T1471] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 811.643453][ T1471] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 811.676632][ T1467] lo speed is unknown, defaulting to 1000 [ 811.962360][ T1484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7515'. [ 811.973697][ T1467] lo speed is unknown, defaulting to 1000 [ 812.251340][ T1467] chnl_net:caif_netlink_parms(): no params data found [ 812.413716][ T1511] netlink: 'syz.4.7521': attribute type 1 has an invalid length. [ 812.428624][ T1511] netlink: 'syz.4.7521': attribute type 1 has an invalid length. [ 812.437747][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.438933][ T1511] netlink: 'syz.4.7521': attribute type 1 has an invalid length. [ 812.453642][ T1467] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.463802][ T1472] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 812.473591][ T1472] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 812.482611][ T1511] netlink: 'syz.4.7521': attribute type 2 has an invalid length. [ 812.502635][ T1467] bridge_slave_0: entered allmulticast mode [ 812.510757][ T1467] bridge_slave_0: entered promiscuous mode [ 812.519575][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.527996][ T1467] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.536432][ T1467] bridge_slave_1: entered allmulticast mode [ 812.544799][ T1467] bridge_slave_1: entered promiscuous mode [ 812.586891][ T1467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.602834][ T1467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.697424][ T1467] team0: Port device team_slave_0 added [ 812.714297][ T1467] team0: Port device team_slave_1 added [ 812.781486][ T1525] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7526'. [ 812.793343][ T1467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.807150][ T1467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.834916][ T1467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.849750][ T1527] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7527'. [ 812.870930][ T1527] netlink: 'syz.4.7527': attribute type 1 has an invalid length. [ 812.882435][ T1467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.894172][ T1467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.955499][ T1467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.976726][ T1525] mac80211_hwsim hwsim56 syzkaller0: Caught tx_queue_len zero misconfig [ 813.019696][ T1537] sctp: [Deprecated]: syz.4.7529 (pid 1537) Use of int in max_burst socket option deprecated. [ 813.019696][ T1537] Use struct sctp_assoc_value instead [ 813.090368][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 813.098477][ C1] lec:lec_tx_timeout: lec0 [ 813.103537][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 813.108724][ T1467] hsr_slave_0: entered promiscuous mode [ 813.129290][ T1467] hsr_slave_1: entered promiscuous mode [ 813.136926][ T1467] debugfs: 'hsr0' already exists in 'hsr' [ 813.155449][ T1467] Cannot create hsr debugfs directory [ 813.371420][ T1542] netlink: 'syz.2.7531': attribute type 1 has an invalid length. [ 813.681199][ T51] Bluetooth: hci4: command tx timeout [ 813.723615][ T1467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 813.771259][ T1467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.799864][ T1467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 813.871456][ T1467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.893621][ T1467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 813.945615][ T1467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.969397][ T1467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 814.014227][ T1467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.362736][ T1596] __nla_validate_parse: 5 callbacks suppressed [ 814.362771][ T1596] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7542'. [ 814.398065][ T1467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.471883][ T1467] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.521858][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.529066][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.599818][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.607078][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.685000][ T1613] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7546'. [ 814.714847][ T1613] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7546'. [ 814.884042][ T5489] veth0_vlan: left promiscuous mode [ 814.926747][ T5489] veth0_vlan: entered promiscuous mode [ 815.195692][ T1635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7552'. [ 815.307333][ T1639] netlink: 'syz.1.7553': attribute type 2 has an invalid length. [ 815.342620][ T1642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7554'. [ 815.499427][ T1651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7555'. [ 815.612535][ T1647] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.7555'. [ 815.702412][ T1467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.764071][T27761] Bluetooth: hci4: command tx timeout [ 815.810454][ T1663] netlink: 'syz.0.7559': attribute type 10 has an invalid length. [ 815.868699][ T1660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7558'. [ 815.938432][ T1660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7558'. [ 815.981684][ T1660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7558'. [ 816.002695][T27761] Bluetooth: hci2: command 0x0406 tx timeout [ 816.196509][ T1687] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 816.691901][ T1467] veth0_vlan: entered promiscuous mode [ 816.715472][ T1467] veth1_vlan: entered promiscuous mode [ 816.776765][ T1467] veth0_macvtap: entered promiscuous mode [ 816.795253][ T1467] veth1_macvtap: entered promiscuous mode [ 816.822758][ T1467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.845508][ T1467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.862351][ T7387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.874416][ T7387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.888224][ T7387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.899633][ T7387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.841113][ T51] Bluetooth: hci4: command tx timeout [ 818.110331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 818.118472][ C1] lec:lec_tx_timeout: lec0 [ 818.123120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 819.159142][ T1684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.333007][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.362023][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.593503][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.613025][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.923047][ T51] Bluetooth: hci4: command tx timeout [ 820.130130][ T1765] __nla_validate_parse: 3 callbacks suppressed [ 820.130153][ T1765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7582'. [ 820.200514][ T1765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7582'. [ 820.275195][ T1768] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7583'. [ 820.428123][ T1784] openvswitch: netlink: IPv4 tun info is not correct [ 820.461247][ T1785] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 820.481849][ T1785] bond5: (slave lo): Enslaving as an active interface with an up link [ 820.491605][ T1785] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 820.746592][ T1793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7591'. [ 820.874481][ T1803] netlink: 'syz.4.7591': attribute type 4 has an invalid length. [ 820.923516][ T1799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7591'. [ 821.095039][ T1818] netlink: 'syz.4.7599': attribute type 1 has an invalid length. [ 821.251068][ T1818] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 821.256230][ T1823] netlink: 'syz.5.7600': attribute type 1 has an invalid length. [ 821.273250][ T1823] netlink: 'syz.5.7600': attribute type 2 has an invalid length. [ 821.323100][ T1834] netlink: 'syz.1.7603': attribute type 1 has an invalid length. [ 821.505512][ T1851] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.7609'. [ 821.516650][ T1851] openvswitch: netlink: Missing key (keys=40, expected=100) [ 822.244246][ T1889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7616'. [ 822.302692][ T1891] No such timeout policy "syz0" [ 822.335533][ T1880] netlink: 'syz.4.7617': attribute type 1 has an invalid length. [ 822.344330][ T1897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7620'. [ 822.371246][ T1891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7620'. [ 822.622202][ T1911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7622'. [ 823.031653][ T1925] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 823.131851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 823.140093][ C1] lec:lec_tx_timeout: lec0 [ 823.144967][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 824.505801][ C0] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.560074][ T1903] lo speed is unknown, defaulting to 1000 [ 825.194350][ T1958] lo speed is unknown, defaulting to 1000 [ 825.297379][ T1903] lo speed is unknown, defaulting to 1000 [ 825.530686][ C0] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.616538][ T1958] lo speed is unknown, defaulting to 1000 [ 825.803395][ T1982] A link change request failed with some changes committed already. Interface 1¾x9ÿ may have been left with an inconsistent configuration, please check. [ 825.821159][ T1983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.146717][T24817] IPVS: starting estimator thread 0... [ 826.160849][ T1995] lo speed is unknown, defaulting to 1000 [ 826.244171][ T2002] IPVS: using max 28 ests per chain, 67200 per kthread [ 826.837828][ T1995] lo speed is unknown, defaulting to 1000 [ 827.052291][ T2034] netlink: 'syz.0.7649': attribute type 10 has an invalid length. [ 827.329306][ T2040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7651'. [ 827.603246][ T2050] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 827.613912][ T2050] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 827.699697][ T2051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7655'. [ 827.788137][ T2059] bridge4: entered promiscuous mode [ 827.794027][ T2059] bridge4: entered allmulticast mode [ 827.880115][ T2064] netlink: 'syz.0.7660': attribute type 12 has an invalid length. [ 828.160356][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 828.168579][ C1] lec:lec_tx_timeout: lec0 [ 828.173788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 828.181496][ T2075] dvmrp0: entered allmulticast mode [ 828.196044][ T2078] netlink: 'syz.1.7665': attribute type 11 has an invalid length. [ 828.230744][ T2078] netlink: 'syz.1.7665': attribute type 11 has an invalid length. [ 828.259001][ T2078] netlink: 204 bytes leftover after parsing attributes in process `syz.1.7665'. [ 828.453093][ T2087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7668'. [ 828.528992][ T2092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7670'. [ 828.592673][ T2088] lo speed is unknown, defaulting to 1000 [ 828.999288][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7678'. [ 829.355677][ T2090] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 829.421848][ T2127] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 829.444427][ T2128] syzkaller0: entered promiscuous mode [ 829.450040][ T2128] syzkaller0: entered allmulticast mode [ 829.528365][ T2130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.569859][ T2120] syzkaller0: entered promiscuous mode [ 829.580484][ T2120] syzkaller0: entered allmulticast mode [ 829.638522][ T2088] lo speed is unknown, defaulting to 1000 [ 832.021849][ T2188] xt_hashlimit: invalid interval [ 832.099516][ T2188] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 832.108951][ T2188] syzkaller1: Linktype set failed because interface is up [ 832.121577][ T2192] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7697'. [ 832.398061][ T2202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7698'. [ 832.493204][ T2207] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 832.557513][ T2212] netlink: 'syz.2.7700': attribute type 1 has an invalid length. [ 832.574766][ T2214] netlink: 'syz.4.7701': attribute type 11 has an invalid length. [ 832.612940][ T2214] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.7701'. [ 832.623653][ T2212] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 833.180286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 833.196659][ C1] lec:lec_tx_timeout: lec0 [ 833.202444][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 833.409269][ T2261] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7712'. [ 833.453236][ T2261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7712'. [ 833.469092][ T2263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7714'. [ 833.651706][ T2271] veth3: entered allmulticast mode [ 833.711661][ T2282] xt_hashlimit: size too large, truncated to 1048576 [ 833.833007][ T88] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 833.860780][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7721'. [ 833.869830][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7721'. [ 833.881740][T10719] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 833.889569][ T88] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 834.017279][ T2290] ip6gre1: entered promiscuous mode [ 834.035907][ T2290] ip6gre1: entered allmulticast mode [ 834.055616][ T2296] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 834.135659][ T2302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7726'. [ 834.227625][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7726'. [ 834.248749][ T2307] netlink: 840 bytes leftover after parsing attributes in process `syz.4.7728'. [ 834.360691][T10719] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 834.508690][ T2318] lo speed is unknown, defaulting to 1000 [ 834.668775][T24797] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 834.753672][ T2327] syzkaller0: entered promiscuous mode [ 834.759254][ T2327] syzkaller0: entered allmulticast mode [ 834.769947][ T2327] netlink: 'syz.4.7732': attribute type 29 has an invalid length. [ 834.779038][ T2327] netlink: 'syz.4.7732': attribute type 29 has an invalid length. [ 834.975121][ T2318] lo speed is unknown, defaulting to 1000 [ 835.432291][ T2352] bond5: (slave lo): Releasing backup interface [ 835.439252][ T2365] netlink: 'syz.1.7741': attribute type 4 has an invalid length. [ 835.457263][ T2352] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 835.471766][ T2366] netlink: 'syz.1.7741': attribute type 4 has an invalid length. [ 835.502208][ T2352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 835.697479][ T2376] netlink: 'syz.5.7743': attribute type 1 has an invalid length. [ 836.062874][ T2387] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 836.404019][ T2404] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 836.476521][ T88] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.503921][ T88] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.528845][ T88] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.578583][ T88] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.671112][ T2429] siw: device registration error -23 [ 836.678172][ T2429] netlink: Conntrack attr has 3 unknown bytes [ 836.841418][ T2436] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 836.865467][ T2436] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 836.875006][ T2436] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 836.909492][ T2441] netlink: 'syz.5.7761': attribute type 8 has an invalid length. [ 836.980971][ T2437] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 836.990396][ T2439] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 837.206959][ T2457] vlan2: entered allmulticast mode [ 837.217253][ T2457] bridge8: entered allmulticast mode [ 837.250793][ T2457] veth0: entered allmulticast mode [ 837.637609][ T2489] netlink: 'syz.5.7777': attribute type 1 has an invalid length. [ 837.656246][ T2489] __nla_validate_parse: 17 callbacks suppressed [ 837.656269][ T2489] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7777'. [ 837.679119][ T2489] netlink: 'syz.5.7777': attribute type 1 has an invalid length. [ 837.688610][ T2489] netlink: 'syz.5.7777': attribute type 8 has an invalid length. [ 837.697019][ T2489] netlink: 606 bytes leftover after parsing attributes in process `syz.5.7777'. [ 837.710057][ T2489] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7777'. [ 837.788944][ T2503] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7779'. [ 837.800915][ T2503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7779'. [ 837.920519][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 837.952821][ T2515] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 838.283104][ T2541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7790'. [ 838.517021][ T2551] netlink: 'syz.2.7792': attribute type 11 has an invalid length. [ 838.523707][ T2553] netlink: 'syz.4.7793': attribute type 21 has an invalid length. [ 838.543257][ T2553] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7793'. [ 838.555844][ T2553] netlink: 'syz.4.7793': attribute type 5 has an invalid length. [ 838.565419][ T2553] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7793'. [ 838.691969][ T2561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7794'. [ 839.067272][ T2563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7794'. [ 839.162097][ T2567] netlink: 'syz.1.7795': attribute type 10 has an invalid length. [ 839.520989][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6320 ms [ 839.529116][ C1] lec:lec_tx_timeout: lec0 [ 839.535433][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 839.878464][ T2626] netlink: 'syz.0.7809': attribute type 11 has an invalid length. [ 840.002488][ T51] Bluetooth: hci4: command tx timeout [ 841.270980][ T2746] IPVS: ip_vs_edit_dest(): server weight less than zero [ 841.360946][ T2749] syzkaller1: entered promiscuous mode [ 841.374977][ T2749] syzkaller1: entered allmulticast mode [ 841.746815][ T2759] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 842.835260][ T2781] lo speed is unknown, defaulting to 1000 [ 842.890805][ T2783] __nla_validate_parse: 11 callbacks suppressed [ 842.890828][ T2783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7842'. [ 843.012065][ T2781] lo speed is unknown, defaulting to 1000 [ 844.005627][ T2721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.096174][ T2790] netlink: 'syz.1.7844': attribute type 16 has an invalid length. [ 844.104989][ T2790] netlink: 'syz.1.7844': attribute type 3 has an invalid length. [ 844.113168][ T2790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7844'. [ 844.200574][ T2792] siw: device registration error -23 [ 844.252548][ T2798] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7846'. [ 844.351250][ T2804] xt_l2tp: v2 tid > 0xffff: 1114244 [ 844.575714][ T2829] openvswitch: netlink: Missing key (keys=40, expected=80) [ 844.963409][ T2832] nbd3: detected capacity change from 0 to 63 [ 844.996983][T27761] block nbd3: Receive control failed (result -104) [ 844.996983][ T51] block nbd3: Receive control failed (result -32) [ 845.041379][ T2866] veth0: entered promiscuous mode [ 845.046866][ T2866] veth0: left promiscuous mode [ 845.106647][ T2875] openvswitch: netlink: EtherType 50a is less than min 600 [ 845.280645][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 845.288783][ C1] lec:lec_tx_timeout: lec0 [ 845.295478][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 845.316843][ T2883] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 845.354287][ T2883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7867'. [ 845.514271][ T2896] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7872'. [ 845.533301][ T2897] netlink: 'syz.2.7873': attribute type 11 has an invalid length. [ 845.561775][ T2897] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7873'. [ 845.845201][ T2915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7878'. [ 846.560432][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 846.673482][ T2918] bridge1: port 1(erspan0) entered disabled state [ 847.224328][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.258427][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.491368][ T2918] veth1_vlan: left allmulticast mode [ 847.726460][ T2915] hsr0 (unregistering): left allmulticast mode [ 847.912621][ T88] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 847.937340][ T2960] netlink: 'syz.5.7883': attribute type 64 has an invalid length. [ 847.938895][ T88] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 847.999258][ T88] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 848.034408][ T88] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 848.115150][ T88] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 848.152352][ T88] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 848.185532][ T88] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 848.228901][ T88] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 848.653375][ T2997] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7892'. [ 848.705063][ T3000] netlink: 'syz.2.7896': attribute type 16 has an invalid length. [ 848.730681][ T3000] netlink: 'syz.2.7896': attribute type 17 has an invalid length. [ 848.929644][ T3000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 848.991669][ T2998] lo speed is unknown, defaulting to 1000 [ 849.365775][ T3024] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7899'. [ 849.754674][ T3035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7902'. [ 849.824589][ T3044] netlink: 'syz.2.7903': attribute type 1 has an invalid length. [ 849.840909][ T3044] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7903'. [ 849.863756][ T3044] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7903'. [ 849.882832][ T3017] lo speed is unknown, defaulting to 1000 [ 849.920466][ T3044] netlink: 658 bytes leftover after parsing attributes in process `syz.2.7903'. [ 849.931534][ T2998] lo speed is unknown, defaulting to 1000 [ 850.265472][ T3057] bond3: option resend_igmp: invalid value (32767) [ 850.273230][ T3057] bond3: option resend_igmp: allowed values 0 - 255 [ 850.299784][ T3057] bond3 (unregistering): Released all slaves [ 850.306987][ T3064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7906'. [ 850.576708][ T3017] lo speed is unknown, defaulting to 1000 [ 850.620120][ T3067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7908'. [ 850.907180][ T3079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7910'. [ 851.040289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 851.048398][ C1] lec:lec_tx_timeout: lec0 [ 851.054310][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 851.261632][ T3091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7913'. [ 851.439570][ T3097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.453248][ T3096] delete_channel: no stack [ 851.743134][ T3118] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 851.819542][ T3107] syzkaller0: entered promiscuous mode [ 851.839888][ T3107] syzkaller0: entered allmulticast mode [ 852.015606][ T3129] netlink: 'syz.1.7921': attribute type 2 has an invalid length. [ 852.058053][ T3133] netlink: 'syz.2.7924': attribute type 21 has an invalid length. [ 854.157610][ T3133] __nla_validate_parse: 1 callbacks suppressed [ 854.157633][ T3133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7924'. [ 854.313908][ T3143] netlink: 'syz.4.7928': attribute type 1 has an invalid length. [ 854.322971][ T3143] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7928'. [ 854.334080][ T3143] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7928'. [ 854.344284][ T3143] netlink: 'syz.4.7928': attribute type 9 has an invalid length. [ 854.433798][ T3146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.524530][ T3151] IPv6: sit2: Disabled Multicast RS [ 854.647315][ T3165] mac80211_hwsim hwsim56 syzkaller0: left promiscuous mode [ 854.789538][ T3171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7936'. [ 854.832901][ T3171] netlink: 'syz.4.7936': attribute type 2 has an invalid length. [ 854.854583][ T3176] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 854.873401][ T3178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7939'. [ 855.269474][ T3204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7945'. [ 855.286483][ T3207] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7946'. [ 855.298785][ T3207] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7946'. [ 855.440112][ T3215] netlink: 'syz.0.7949': attribute type 4 has an invalid length. [ 855.459575][ T3215] netlink: 'syz.0.7949': attribute type 4 has an invalid length. [ 855.540887][ T3219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 855.648949][ T3226] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7954'. [ 855.673727][ T3226] netlink: 'syz.5.7954': attribute type 7 has an invalid length. [ 855.685751][ T3228] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7955'. [ 855.695147][ T3226] netlink: 'syz.5.7954': attribute type 8 has an invalid length. [ 855.865575][ T3237] syzkaller1: entered promiscuous mode [ 855.871325][ T3237] syzkaller1: entered allmulticast mode [ 856.070274][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 856.078389][ C1] lec:lec_tx_timeout: lec0 [ 856.084082][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 856.241252][ T3261] x_tables: duplicate underflow at hook 3 [ 856.346564][ T3265] bridge10: entered promiscuous mode [ 856.376683][ T3265] bridge10: entered allmulticast mode [ 856.415491][ T3265] team0: Port device bridge10 added [ 856.422991][ T3274] bridge0: port 3(team0) entered blocking state [ 856.433819][ T3274] bridge0: port 3(team0) entered disabled state [ 856.442593][ T3274] team0: entered allmulticast mode [ 856.448120][ T3274] team_slave_0: entered allmulticast mode [ 856.455977][ T3274] team_slave_1: entered allmulticast mode [ 856.468217][ T3274] team0: entered promiscuous mode [ 856.478300][ T3274] team_slave_0: entered promiscuous mode [ 856.484916][ T3274] team_slave_1: entered promiscuous mode [ 856.780837][ T3291] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 857.262259][ T3320] netlink: 'syz.1.7987': attribute type 1 has an invalid length. [ 857.270725][ T3320] netlink: 'syz.1.7987': attribute type 4 has an invalid length. [ 857.296189][ T3320] syzkaller1: entered promiscuous mode [ 857.301994][ T3320] syzkaller1: entered allmulticast mode [ 857.382558][ T3322] netlink: 'syz.0.7988': attribute type 1 has an invalid length. [ 857.454222][ T3322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 857.469332][ T3328] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 857.494143][ T3328] bond7: entered allmulticast mode [ 857.537843][ T3322] SET target dimension over the limit! [ 858.059264][ T3358] netlink: 'syz.5.8000': attribute type 10 has an invalid length. [ 858.111669][ T3358] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 858.529979][ T3405] netlink: 'syz.0.8009': attribute type 4 has an invalid length. [ 858.556365][ T3406] x_tables: duplicate underflow at hook 1 [ 858.567361][ T3403] syzkaller0: entered promiscuous mode [ 858.580515][ T3406] x_tables: duplicate underflow at hook 1 [ 858.586535][ T3403] syzkaller0: entered allmulticast mode [ 858.595353][ T3406] x_tables: duplicate underflow at hook 1 [ 858.605641][ T3406] x_tables: duplicate underflow at hook 1 [ 858.627085][ T3406] x_tables: duplicate underflow at hook 1 [ 858.643227][ T3406] x_tables: duplicate underflow at hook 1 [ 858.656022][ T3406] x_tables: duplicate underflow at hook 1 [ 858.669225][ T3406] x_tables: duplicate underflow at hook 1 [ 858.679544][ T3406] x_tables: duplicate underflow at hook 1 [ 859.159787][ T3416] bond3: entered promiscuous mode [ 859.179331][ T3416] bond3: entered allmulticast mode [ 859.190825][ T3416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 859.876991][ T3464] __nla_validate_parse: 16 callbacks suppressed [ 859.877020][ T3464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8020'. [ 860.487569][ T3501] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8031'. [ 860.769140][ T3515] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8034'. [ 861.057249][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8040'. [ 861.090284][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 861.098400][ C1] lec:lec_tx_timeout: lec0 [ 861.103081][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 861.112354][ T3541] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8040'. [ 861.186934][ T3538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8040'. [ 861.517744][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8041'. [ 861.531150][ T3562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8045'. [ 861.577074][ T3554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8042'. [ 861.934237][ T3578] validate_nla: 1 callbacks suppressed [ 861.934259][ T3578] netlink: 'syz.4.8049': attribute type 1 has an invalid length. [ 862.008026][ T3578] bond4: entered promiscuous mode [ 862.014197][ T3578] 8021q: adding VLAN 0 to HW filter on device bond4 [ 862.106286][ T3596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8054'. [ 862.395805][ T3617] netlink: 'syz.0.8058': attribute type 1 has an invalid length. [ 862.459138][ T3619] netlink: 'syz.4.8060': attribute type 25 has an invalid length. [ 862.995588][ T3649] ipt_ECN: cannot use operation on non-tcp rule [ 863.612432][ T3694] netlink: 'syz.1.8076': attribute type 62 has an invalid length. [ 863.702120][ T3696] bond5 (unregistering): Released all slaves [ 863.840474][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 863.982958][ T3714] macvlan3: entered allmulticast mode [ 864.014473][ T3714] hsr0: entered allmulticast mode [ 864.019605][ T3714] hsr_slave_0: entered allmulticast mode [ 864.080631][ T3714] hsr_slave_1: entered allmulticast mode [ 864.372106][ T3747] netlink: 'syz.4.8088': attribute type 58 has an invalid length. [ 865.061489][ T3770] netlink: 'syz.4.8095': attribute type 9 has an invalid length. [ 865.530727][ T3781] netlink: 'syz.4.8100': attribute type 1 has an invalid length. [ 865.538988][ T3782] __nla_validate_parse: 11 callbacks suppressed [ 865.539005][ T3782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8100'. [ 865.557208][ T3781] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8100'. [ 865.850493][ T3792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8103'. [ 865.874246][ T3792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8103'. [ 865.885023][ T3792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8103'. [ 865.894390][ T3792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8103'. [ 865.942653][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8104'. [ 866.110293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 866.118437][ C1] lec:lec_tx_timeout: lec0 [ 866.123373][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 866.131074][ T3806] xt_check_table_hooks: 25 callbacks suppressed [ 866.131096][ T3806] x_tables: duplicate underflow at hook 2 [ 867.167888][ T3727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.464203][ T3824] syzkaller1: entered promiscuous mode [ 867.469958][ T3824] syzkaller1: entered allmulticast mode [ 867.512766][ T7387] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 867.547829][ T3834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8115'. [ 867.582644][ T3836] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 867.592845][ T3836] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 867.640151][ T3831] syzkaller0: entered promiscuous mode [ 867.664313][ T3831] syzkaller0: entered allmulticast mode [ 867.696288][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8114'. [ 867.813444][ T3848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8116'. [ 867.845591][ T3850] netlink: 'syz.1.8117': attribute type 58 has an invalid length. [ 870.368675][ T3822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.573122][ T3875] __nla_validate_parse: 2 callbacks suppressed [ 870.573143][ T3875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8124'. [ 870.677135][ T3888] netlink: 'syz.5.8127': attribute type 21 has an invalid length. [ 870.722444][ T3888] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8127'. [ 870.909773][ T3900] Unsupported ieee802154 address type: 0 [ 871.130311][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 871.138417][ C1] lec:lec_tx_timeout: lec0 [ 871.145869][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 871.259252][ T3920] sctp: [Deprecated]: syz.0.8138 (pid 3920) Use of int in maxseg socket option. [ 871.259252][ T3920] Use struct sctp_assoc_value instead [ 871.308460][ T3920] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8138'. [ 871.547933][ T3938] veth0: left allmulticast mode [ 871.567229][ T3939] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8142'. [ 871.604468][ T3938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.620687][ T3938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.660407][ T3938] virt_wifi0: left promiscuous mode [ 871.735612][ T3938] bond0: left promiscuous mode [ 871.740804][ T3938] bridge2: left promiscuous mode [ 871.748647][ T3938] ipvlan2: left allmulticast mode [ 871.756194][ T3938] ipvlan3: left allmulticast mode [ 871.761835][ T3938] bond0: left allmulticast mode [ 871.766948][ T3938] bridge2: left allmulticast mode [ 871.825518][ T3938] vlan2: left allmulticast mode [ 871.833284][ T3938] bridge8: left allmulticast mode [ 871.846425][ T3938] bond3: left promiscuous mode [ 871.853722][ T3938] bond3: left allmulticast mode [ 871.861933][ T3938] bond4: left promiscuous mode [ 871.870051][ T7388] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.884527][ T7388] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.894801][ T7388] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.905144][ T7388] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.935485][ T3937] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 871.950889][ T3937] bond8 (unregistering): Released all slaves [ 871.977273][ T7388] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.987004][ T7388] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.997711][ T7388] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.009864][ T7388] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.217541][ T3951] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.8144'. [ 872.273742][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8145'. [ 872.284361][ T3953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8145'. [ 872.304155][ T7388] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.312976][ T7388] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.322910][ T7388] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.332161][ T7388] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.380484][ T3923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.675817][ T3965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.846517][ T3978] netlink: 'syz.5.8152': attribute type 1 has an invalid length. [ 874.892823][ T3975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8151'. [ 874.899643][ T3978] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8152'. [ 874.967080][ T3975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8151'. [ 875.007706][T13371] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 20002 - 0 [ 875.035124][T13371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 875.045114][T13371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 875.054370][T13371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 875.102685][ T3982] sctp: [Deprecated]: syz.2.8154 (pid 3982) Use of int in max_burst socket option. [ 875.102685][ T3982] Use struct sctp_assoc_value instead [ 875.364620][ T25] block nbd3: Connection timed out, retrying (0/2 alive) [ 875.374741][ T25] block nbd3: Connection timed out, retrying (0/2 alive) [ 875.383008][ T25] block nbd3: Connection timed out, retrying (0/2 alive) [ 875.390838][ T25] block nbd3: Connection timed out, retrying (0/2 alive) [ 875.401803][ T25] block nbd3: Dead connection, failed to find a fallback [ 875.409596][ T25] block nbd3: shutting down sockets [ 875.417083][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.429412][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 875.441274][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.450930][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 875.458925][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.469000][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 875.477023][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.486723][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 875.497130][ T1623] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.508046][ T1623] Buffer I/O error on dev nbd3, logical block 0, async page read [ 875.516379][ T1623] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.526088][ T1623] Buffer I/O error on dev nbd3, logical block 1, async page read [ 875.534078][ T1623] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.543843][ T1623] Buffer I/O error on dev nbd3, logical block 2, async page read [ 875.551756][ T1623] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.561370][ T1623] Buffer I/O error on dev nbd3, logical block 3, async page read [ 875.569345][ T1623] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.583536][ T1623] Buffer I/O error on dev nbd3, logical block 0, async page read [ 875.591993][ T1623] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.602211][ T1623] Buffer I/O error on dev nbd3, logical block 1, async page read [ 875.611576][ T1623] ldm_validate_partition_table(): Disk read failed. [ 875.619528][ T1623] Dev nbd3: unable to read RDB block 0 [ 875.625888][ T1623] nbd3: unable to read partition table [ 875.651969][ T1623] ldm_validate_partition_table(): Disk read failed. [ 875.654752][ T4008] __nla_validate_parse: 1 callbacks suppressed [ 875.654819][ T4008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8164'. [ 875.660792][ T1623] Dev nbd3: unable to read RDB block 0 [ 875.701066][ T1623] nbd3: unable to read partition table [ 875.722235][ T4011] netlink: 'syz.0.8162': attribute type 9 has an invalid length. [ 875.730059][ T4011] netlink: 'syz.0.8162': attribute type 11 has an invalid length. [ 875.823026][ T4011] netlink: 'syz.0.8162': attribute type 12 has an invalid length. [ 875.835942][ T4011] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.8162'. [ 875.947710][ T4028] netlink: 'syz.5.8168': attribute type 9 has an invalid length. [ 875.966650][ T4028] netlink: 'syz.5.8168': attribute type 6 has an invalid length. [ 876.160486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 876.168689][ C1] lec:lec_tx_timeout: lec0 [ 876.173530][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 876.316789][ T4043] xt_ecn: cannot match TCP bits for non-tcp packets [ 876.359251][ T4047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8174'. [ 876.708857][ T4067] netlink: 'syz.0.8179': attribute type 2 has an invalid length. [ 876.725465][ T4067] netlink: 'syz.0.8179': attribute type 2 has an invalid length. [ 876.986134][ T4081] lo: entered allmulticast mode [ 877.005882][ T4081] tunl0: entered allmulticast mode [ 877.023836][ T4081] gre0: entered allmulticast mode [ 877.037011][ T4081] gretap0: entered allmulticast mode [ 877.060699][ T4081] erspan0: entered allmulticast mode [ 877.066423][ T4081] ip_vti0: entered allmulticast mode [ 877.082358][ T4081] ip6_vti0: entered allmulticast mode [ 877.090669][ T4081] sit0: entered allmulticast mode [ 877.099850][ T4081] ip6tnl0: entered allmulticast mode [ 877.105937][ T4081] ip6gre0: entered allmulticast mode [ 877.112106][ T4081] syz_tun: entered allmulticast mode [ 877.117963][ T4081] ip6gretap0: entered allmulticast mode [ 877.125455][ T4081] bridge0: entered allmulticast mode [ 877.134142][ T4081] team0: entered allmulticast mode [ 877.139774][ T4081] dummy0: entered allmulticast mode [ 877.145628][ T4081] nlmon0: entered allmulticast mode [ 877.151588][ T4081] caif0: entered allmulticast mode [ 877.156970][ T4081] vxcan0: entered allmulticast mode [ 877.162887][ T4081] vxcan1: entered allmulticast mode [ 877.168293][ T4081] veth0: entered allmulticast mode [ 877.174037][ T4081] veth1: entered allmulticast mode [ 877.179335][ T4081] wg0: entered allmulticast mode [ 877.185383][ T4081] wg1: entered allmulticast mode [ 877.190687][ T4081] wg2: entered allmulticast mode [ 877.195974][ T4081] veth0_to_bridge: entered allmulticast mode [ 877.203734][ T4081] bridge_slave_0: entered allmulticast mode [ 877.210174][ T4081] veth1_to_bridge: entered allmulticast mode [ 877.216990][ T4081] bridge_slave_1: entered allmulticast mode [ 877.223278][ T4081] veth0_to_bond: entered allmulticast mode [ 877.229310][ T4081] bond_slave_0: entered allmulticast mode [ 877.235519][ T4081] veth1_to_bond: entered allmulticast mode [ 877.243267][ T4081] bond_slave_1: entered allmulticast mode [ 877.249220][ T4081] veth0_to_team: entered allmulticast mode [ 877.255414][ T4081] team_slave_0: entered allmulticast mode [ 877.261586][ T4081] veth1_to_team: entered allmulticast mode [ 877.267740][ T4081] team_slave_1: entered allmulticast mode [ 877.274357][ T4081] veth0_to_batadv: entered allmulticast mode [ 877.283559][ T4081] batadv_slave_0: entered allmulticast mode [ 877.289688][ T4081] veth1_to_batadv: entered allmulticast mode [ 877.296606][ T4081] batadv_slave_1: entered allmulticast mode [ 877.302905][ T4081] veth0_to_hsr: entered allmulticast mode [ 877.308815][ T4081] hsr_slave_0: entered allmulticast mode [ 877.314911][ T4081] veth1_to_hsr: entered allmulticast mode [ 877.320996][ T4081] hsr_slave_1: entered allmulticast mode [ 877.326959][ T4081] hsr0: entered allmulticast mode [ 877.332329][ T4081] veth1_virt_wifi: entered allmulticast mode [ 877.338515][ T4081] veth0_virt_wifi: entered allmulticast mode [ 877.345020][ T4081] virt_wifi0: entered allmulticast mode [ 877.351771][ T4081] veth1_vlan: entered allmulticast mode [ 877.357818][ T4081] vlan0: entered allmulticast mode [ 877.368942][ T4081] veth0_vlan: entered allmulticast mode [ 877.377349][ T4081] veth0_vlan: left promiscuous mode [ 877.382874][ T4081] vlan1: entered allmulticast mode [ 877.389573][ T4081] macvlan0: entered allmulticast mode [ 877.395547][ T4081] macvlan1: entered allmulticast mode [ 877.401605][ T4081] ipvlan0: entered allmulticast mode [ 877.407370][ T4081] ipvlan1: entered allmulticast mode [ 877.414086][ T4081] veth1_macvtap: entered allmulticast mode [ 877.420840][ T4081] veth0_macvtap: entered allmulticast mode [ 877.427115][ T4081] macvtap0: entered allmulticast mode [ 877.432960][ T4081] macsec0: entered allmulticast mode [ 877.440713][ T4081] geneve0: entered allmulticast mode [ 877.447657][ T4081] geneve1: entered allmulticast mode [ 877.453630][ T4081] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 877.461759][ T4081] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 877.469945][ T4081] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 877.477885][ T4081] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 877.486128][ T4081] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 877.493719][ T4081] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 877.510603][ T4081] bridge1: entered allmulticast mode [ 877.516406][ T4081] bridge2: left promiscuous mode [ 877.522047][ T4081] syztnl0: entered allmulticast mode [ 877.527679][ T4081] vxcan2: entered allmulticast mode [ 877.534035][ T4081] vxcan3: entered allmulticast mode [ 877.539620][ T4081] mac80211_hwsim hwsim60 wlan2: entered allmulticast mode [ 877.547566][ T4081] team0.0000: entered allmulticast mode [ 877.553529][ T4081] bond1: entered allmulticast mode [ 877.558854][ T4081] ip6gre1: entered allmulticast mode [ 877.565805][ T4081] ip6gre2: entered allmulticast mode [ 877.573570][ T4081] bond2: entered allmulticast mode [ 877.578773][ T4081] geneve2: entered allmulticast mode [ 877.587802][ T4081] ipip0: entered allmulticast mode [ 877.595558][ T4081] vlan2: entered allmulticast mode [ 877.604095][ T4081] bridge3: left promiscuous mode [ 877.611597][ T4081] mac80211_hwsim hwsim56 syzkaller0: left promiscuous mode [ 877.620166][ T4081] bond3: entered allmulticast mode [ 877.625949][ T4081] geneve3: entered allmulticast mode [ 877.632095][ T4081] vxlan0: entered allmulticast mode [ 877.637475][ T4081] bond4: entered allmulticast mode [ 877.643615][ T4081] vti60: entered allmulticast mode [ 877.649308][ T4081] sit1: left promiscuous mode [ 877.656203][ T4081] ip6erspan0: entered allmulticast mode [ 877.662298][ T4081] ip6tnl1: entered allmulticast mode [ 877.667975][ T4081] sit2: entered allmulticast mode [ 877.674674][ T4081] ip6gretap1: entered allmulticast mode [ 877.681072][ T4081] gtp0: entered allmulticast mode [ 877.688319][ T4081] bond0: entered allmulticast mode [ 877.694100][ T4081] gretap1: entered allmulticast mode [ 877.704184][ T4081] : entered allmulticast mode [ 877.709221][ T4081] mac80211_hwsim hwsim72 wlan3: entered allmulticast mode [ 877.717154][ T4081] erspan1: entered allmulticast mode [ 877.723438][ T4081] ip6tnl2: entered allmulticast mode [ 877.729053][ T4081] bond5: entered allmulticast mode [ 877.734753][ T4081] ieee802154 phy2 wpan0: entered allmulticast mode [ 877.742063][ T4081] gre1: entered allmulticast mode [ 877.749049][ T4081] ip6gre3: entered allmulticast mode [ 877.756693][ T4081] veth2: entered allmulticast mode [ 877.762442][ T4081] bond6: entered allmulticast mode [ 877.767782][ T4081] mac80211_hwsim hwsim78 wlan4: entered allmulticast mode [ 877.775909][ T4081] veth4: entered allmulticast mode [ 877.781751][ T4081] veth5: entered allmulticast mode [ 877.788177][ T4081] wireguard0: entered allmulticast mode [ 877.867042][ T7392] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.893620][ T7392] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.954084][ T7392] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.970863][ T7392] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.107122][ T4116] netlink: 'syz.2.8194': attribute type 1 has an invalid length. [ 878.135860][ T4119] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 878.164005][ T4116] 8021q: adding VLAN 0 to HW filter on device bond8 [ 878.409863][ T4137] netlink: 'syz.5.8200': attribute type 11 has an invalid length. [ 878.421818][ T4137] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8200'. [ 878.492514][ T4142] netlink: 'syz.2.8202': attribute type 1 has an invalid length. [ 878.510954][ T4142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8202'. [ 878.520279][ T4142] netlink: 658 bytes leftover after parsing attributes in process `syz.2.8202'. [ 878.689544][ T4154] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8207'. [ 878.790792][ T4158] netlink: 320 bytes leftover after parsing attributes in process `syz.0.8203'. [ 878.850091][ T4161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8209'. [ 878.852133][ T4166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8211'. [ 878.957590][ T4172] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 878.988871][ T4172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 879.764796][ T4216] IPv6: NLM_F_CREATE should be specified when creating new route [ 879.973209][ T4228] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 879.987349][ T4228] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 880.020191][ T4228] gretap1: entered promiscuous mode [ 880.025709][ T4228] gretap1: entered allmulticast mode [ 880.367775][ T7379] tipc: Subscription rejected, illegal request [ 880.490593][ T7379] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 880.497577][ T7379] mac80211_hwsim hwsim28 wlan1: left promiscuous mode [ 880.506174][ T7379] bridge0: port 1(wlan1) entered disabled state [ 880.516326][ T7379] bridge_slave_1: left allmulticast mode [ 880.525232][ T7379] bridge_slave_1: left promiscuous mode [ 880.531560][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.636331][ T4266] validate_nla: 3 callbacks suppressed [ 880.636357][ T4266] netlink: 'syz.2.8236': attribute type 21 has an invalid length. [ 880.672307][ T4266] IPv6: NLM_F_CREATE should be specified when creating new route [ 880.746804][ T7379] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 880.758526][ T7379] ip6gretap1 (unregistering): left allmulticast mode [ 880.900819][ T7379] dvmrp0 (unregistering): left allmulticast mode [ 880.955983][ T7379] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 881.180416][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 881.188564][ C1] lec:lec_tx_timeout: lec0 [ 881.193534][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 881.256947][ T7379] bond1 (unregistering): (slave lo): Releasing backup interface [ 881.265544][ T7379] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 881.277508][ T7379] bond1 (unregistering): Released all slaves [ 881.298457][ T7379] bond2 (unregistering): Released all slaves [ 881.319393][ T7379] bond3 (unregistering): Released all slaves [ 881.335815][ T7379] bond4 (unregistering): Released all slaves [ 881.363133][ T7379] bond0 (unregistering): Released all slaves [ 881.378048][ T7379] bond5 (unregistering): Released all slaves [ 881.394632][ T7379] bond6 (unregistering): Released all slaves [ 881.411693][ T7379] bond7 (unregistering): Released all slaves [ 881.446150][ T7379] bond8 (unregistering): Released all slaves [ 881.461512][ T7379] bond9 (unregistering): Released all slaves [ 881.476696][ T7379] bond10 (unregistering): Released all slaves [ 883.107287][ T4237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.301356][ T4278] __nla_validate_parse: 8 callbacks suppressed [ 883.301398][ T4278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8239'. [ 883.331415][ T4282] bond1: (slave lo): Releasing backup interface [ 883.338837][ T4282] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 883.363686][ T4282] ¾x9ÿ: left allmulticast mode [ 883.368622][ T4282] ¾x9ÿ: left promiscuous mode [ 883.390803][ C0] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.407170][ T4282] bridge0: port 1(1¾x9ÿ) entered disabled state [ 883.448143][ T4282] bridge_slave_1: left allmulticast mode [ 883.478291][ T4282] bridge_slave_1: left promiscuous mode [ 883.505987][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.575012][ T4282] bond0: (slave bond_slave_0): Releasing backup interface [ 883.634772][ T4282] bond0: (slave bond_slave_1): Releasing backup interface [ 883.669524][ T4282] team0: Port device team_slave_0 removed [ 883.696422][ T4282] team0: Port device team_slave_1 removed [ 883.706028][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.714106][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.724434][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.732559][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.757492][ T4282] bond5: (slave bridge4): Releasing active interface [ 884.023583][ T4317] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 884.165752][ T4325] netlink: 'syz.4.8251': attribute type 1 has an invalid length. [ 884.227139][ T4325] bond5: entered promiscuous mode [ 884.233789][ T4325] 8021q: adding VLAN 0 to HW filter on device bond5 [ 884.267319][ T4325] bond5: (slave bridge11): making interface the new active one [ 884.276252][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8253'. [ 884.288700][ T4325] bridge11: entered promiscuous mode [ 884.296735][ T4325] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 884.633953][ T4355] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 884.724504][ T4368] netlink: 'syz.0.8262': attribute type 3 has an invalid length. [ 884.905068][ T4371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8263'. [ 884.914392][ T4374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8263'. [ 884.957601][ T4376] syzkaller0: entered promiscuous mode [ 884.964221][ T4376] syzkaller0: entered allmulticast mode [ 884.991075][ T4376] netlink: 'syz.4.8265': attribute type 10 has an invalid length. [ 884.999218][ T4376] bridge_slave_1: left allmulticast mode [ 885.005520][ T4379] netlink: 'syz.4.8265': attribute type 10 has an invalid length. [ 885.011113][ T4376] bridge_slave_1: left promiscuous mode [ 885.030598][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.444590][ T4408] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8272'. [ 885.789187][ T4430] netlink: 'syz.4.8277': attribute type 9 has an invalid length. [ 885.804326][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8278'. [ 885.997327][ T4434] hsr_slave_1 (unregistering): left promiscuous mode [ 886.009820][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8280'. [ 886.040175][ T4442] netlink: 'syz.5.8281': attribute type 1 has an invalid length. [ 886.407068][ T4458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8284'. [ 886.423410][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8287'. [ 886.479605][ T4460] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 886.547058][ T4465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8289'. [ 887.038802][ T4489] netlink: 'syz.0.8295': attribute type 1 has an invalid length. [ 887.133377][ T4489] bond8: entered promiscuous mode [ 887.151347][ T4489] 8021q: adding VLAN 0 to HW filter on device bond8 [ 887.246243][ T4493] bond8: (slave bridge4): making interface the new active one [ 887.254047][ T4493] bridge4: entered promiscuous mode [ 887.271618][ T4493] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 887.313864][ T4469] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 887.321014][ T4499] netlink: 'syz.5.8296': attribute type 1 has an invalid length. [ 887.331959][ T4499] netlink: 'syz.5.8296': attribute type 39 has an invalid length. [ 887.354291][ T4496] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 887.382489][ T4496] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 887.496232][ T4505] veth0_vlan: Caught tx_queue_len zero misconfig [ 887.520256][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 887.528481][ C1] lec:lec_tx_timeout: lec0 [ 887.533716][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 887.895716][ T4523] C: renamed from lo [ 887.914112][ T4523] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 887.988984][ T4533] netlink: 'syz.5.8306': attribute type 2 has an invalid length. [ 888.052510][ T4533] netlink: 'syz.5.8306': attribute type 10 has an invalid length. [ 888.116817][ T4533] veth0_vlan: left promiscuous mode [ 888.132889][ T4533] veth0_vlan: entered promiscuous mode [ 888.146938][ T4533] team0: Device veth0_vlan failed to register rx_handler [ 888.409308][ T4556] __nla_validate_parse: 6 callbacks suppressed [ 888.409330][ T4556] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8313'. [ 888.564751][ T4569] netlink: 'syz.2.8317': attribute type 2 has an invalid length. [ 888.593534][ T4569] netlink: 'syz.2.8317': attribute type 1 has an invalid length. [ 888.615708][ T4574] tipc: Started in network mode [ 888.635529][ T4574] tipc: Node identity 080211000001, cluster identity 4711 [ 888.662601][ T4574] tipc: Enabled bearer , priority 0 [ 888.706173][ T4578] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 888.753864][ T4579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8319'. [ 888.926656][ T4587] netlink: 'syz.2.8321': attribute type 12 has an invalid length. [ 889.595422][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8332'. [ 889.609750][ T4620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8332'. [ 889.629987][ T4620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8332'. [ 889.642550][ T4620] tipc: Invalid UDP bearer configuration [ 889.642612][ T4620] tipc: Enabling of bearer rejected, failed to enable media [ 889.691614][ T4623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8333'. [ 889.780415][T24814] tipc: Node number set to 134418688 [ 889.834257][ T4630] : renamed from bond0 [ 889.964650][ T4634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8338'. [ 890.094478][ T4643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8337'. [ 890.318821][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8341'. [ 890.334538][ T4647] 8021q: VLANs not supported on ip_vti0 [ 890.481975][ T4658] team0: Caught tx_queue_len zero misconfig [ 890.515230][ T4657] Cannot find del_set index 49151 as target [ 890.556741][ T4660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8345'. [ 890.726410][ T5832] block nbd1: Receive control failed (result -110) [ 890.738015][ T5832] [ 890.740494][ T5832] ====================================================== [ 890.747643][ T5832] WARNING: possible circular locking dependency detected [ 890.754757][ T5832] syzkaller #0 Not tainted [ 890.759343][ T5832] ------------------------------------------------------ [ 890.766750][ T5832] kworker/u9:2/5832 is trying to acquire lock: [ 890.773208][ T5832] ffff88806a773560 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 890.782627][ T5832] [ 890.782627][ T5832] but task is already holding lock: [ 890.790030][ T5832] ffff88807df29870 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c6a/0x1d90 [ 890.799201][ T5832] [ 890.799201][ T5832] which lock already depends on the new lock. [ 890.799201][ T5832] [ 890.809822][ T5832] [ 890.809822][ T5832] the existing dependency chain (in reverse order) is: [ 890.818884][ T5832] [ 890.818884][ T5832] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 890.826605][ T5832] __mutex_lock+0x19f/0x1300 [ 890.831873][ T5832] nbd_queue_rq+0x37b/0x1100 [ 890.837132][ T5832] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 890.843268][ T5832] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 890.850194][ T5832] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 890.856869][ T5832] blk_mq_run_hw_queue+0x348/0x4f0 [ 890.862743][ T5832] blk_mq_dispatch_list+0xd16/0xe10 [ 890.868794][ T5832] blk_mq_flush_plug_list+0x48d/0x570 [ 890.875728][ T5832] __blk_flush_plug+0x3ed/0x4d0 [ 890.881345][ T5832] __submit_bio+0x28d/0x580 [ 890.886532][ T5832] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 890.892846][ T5832] block_read_full_folio+0x599/0x830 [ 890.898715][ T5832] filemap_read_folio+0x137/0x3b0 [ 890.905022][ T5832] do_read_cache_folio+0x358/0x590 [ 890.910721][ T5832] read_part_sector+0xb6/0x2b0 [ 890.916066][ T5832] adfspart_check_ICS+0xa5/0xa40 [ 890.922083][ T5832] bdev_disk_changed+0x7ba/0x1550 [ 890.927696][ T5832] blkdev_get_whole+0x380/0x510 [ 890.933132][ T5832] bdev_open+0x31e/0xd30 [ 890.937988][ T5832] blkdev_open+0x470/0x610 [ 890.943054][ T5832] do_dentry_open+0x785/0x14e0 [ 890.948409][ T5832] vfs_open+0x3b/0x340 [ 890.953149][ T5832] path_openat+0x2e08/0x3860 [ 890.958420][ T5832] do_file_open+0x23e/0x4a0 [ 890.963515][ T5832] do_sys_openat2+0x113/0x200 [ 890.968795][ T5832] __x64_sys_openat+0x138/0x170 [ 890.974240][ T5832] do_syscall_64+0x14d/0xf80 [ 890.979488][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.986204][ T5832] [ 890.986204][ T5832] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 890.993631][ T5832] __mutex_lock+0x19f/0x1300 [ 890.998902][ T5832] nbd_queue_rq+0xc6/0x1100 [ 891.003985][ T5832] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 891.010287][ T5832] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 891.017367][ T5832] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 891.023930][ T5832] blk_mq_run_hw_queue+0x348/0x4f0 [ 891.029692][ T5832] blk_mq_dispatch_list+0xd16/0xe10 [ 891.035540][ T5832] blk_mq_flush_plug_list+0x48d/0x570 [ 891.041671][ T5832] __blk_flush_plug+0x3ed/0x4d0 [ 891.047220][ T5832] __submit_bio+0x28d/0x580 [ 891.052326][ T5832] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 891.059127][ T5832] block_read_full_folio+0x599/0x830 [ 891.065260][ T5832] filemap_read_folio+0x137/0x3b0 [ 891.071039][ T5832] do_read_cache_folio+0x358/0x590 [ 891.076707][ T5832] read_part_sector+0xb6/0x2b0 [ 891.082037][ T5832] adfspart_check_ICS+0xa5/0xa40 [ 891.087537][ T5832] bdev_disk_changed+0x7ba/0x1550 [ 891.093172][ T5832] blkdev_get_whole+0x380/0x510 [ 891.098759][ T5832] bdev_open+0x31e/0xd30 [ 891.103555][ T5832] blkdev_open+0x470/0x610 [ 891.108641][ T5832] do_dentry_open+0x785/0x14e0 [ 891.114723][ T5832] vfs_open+0x3b/0x340 [ 891.119877][ T5832] path_openat+0x2e08/0x3860 [ 891.125059][ T5832] do_file_open+0x23e/0x4a0 [ 891.130223][ T5832] do_sys_openat2+0x113/0x200 [ 891.135572][ T5832] __x64_sys_openat+0x138/0x170 [ 891.141027][ T5832] do_syscall_64+0x14d/0xf80 [ 891.146835][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.153393][ T5832] [ 891.153393][ T5832] -> #4 (set->srcu){.+.+}-{0:0}: [ 891.160757][ T5832] __synchronize_srcu+0xca/0x300 [ 891.166711][ T5832] elevator_switch+0x1e8/0x7a0 [ 891.172306][ T5832] elevator_change+0x2cc/0x450 [ 891.177629][ T5832] elevator_set_default+0x36c/0x430 [ 891.183652][ T5832] blk_register_queue+0x366/0x430 [ 891.190415][ T5832] __add_disk+0x677/0xd50 [ 891.196071][ T5832] add_disk_fwnode+0xfb/0x480 [ 891.203216][ T5832] nbd_dev_add+0x72c/0xb50 [ 891.208202][ T5832] nbd_init+0x168/0x1f0 [ 891.214183][ T5832] do_one_initcall+0x250/0x8d0 [ 891.219599][ T5832] do_initcall_level+0x104/0x190 [ 891.225970][ T5832] do_initcalls+0x59/0xa0 [ 891.230961][ T5832] kernel_init_freeable+0x2a6/0x3e0 [ 891.236749][ T5832] kernel_init+0x1d/0x1d0 [ 891.241875][ T5832] ret_from_fork+0x51e/0xb90 [ 891.247795][ T5832] ret_from_fork_asm+0x1a/0x30 [ 891.253240][ T5832] [ 891.253240][ T5832] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 891.261364][ T5832] __mutex_lock+0x19f/0x1300 [ 891.266710][ T5832] elevator_change+0x1b3/0x450 [ 891.272236][ T5832] elevator_set_none+0xb5/0x140 [ 891.277741][ T5832] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 891.284147][ T5832] nbd_start_device+0x17f/0xb10 [ 891.290081][ T5832] nbd_genl_connect+0x165b/0x1cf0 [ 891.295772][ T5832] genl_family_rcv_msg_doit+0x22a/0x330 [ 891.302009][ T5832] genl_rcv_msg+0x61c/0x7a0 [ 891.307327][ T5832] netlink_rcv_skb+0x232/0x4b0 [ 891.312774][ T5832] genl_rcv+0x28/0x40 [ 891.318692][ T5832] netlink_unicast+0x80f/0x9b0 [ 891.324241][ T5832] netlink_sendmsg+0x813/0xb40 [ 891.330514][ T5832] ____sys_sendmsg+0x972/0x9f0 [ 891.335923][ T5832] ___sys_sendmsg+0x2a5/0x360 [ 891.341251][ T5832] __x64_sys_sendmsg+0x1bd/0x2a0 [ 891.347023][ T5832] do_syscall_64+0x14d/0xf80 [ 891.352985][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.359456][ T5832] [ 891.359456][ T5832] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 891.368360][ T5832] blk_alloc_queue+0x546/0x680 [ 891.374553][ T5832] __blk_mq_alloc_disk+0x197/0x390 [ 891.380294][ T5832] nbd_dev_add+0x499/0xb50 [ 891.385611][ T5832] nbd_init+0x168/0x1f0 [ 891.390512][ T5832] do_one_initcall+0x250/0x8d0 [ 891.395841][ T5832] do_initcall_level+0x104/0x190 [ 891.402396][ T5832] do_initcalls+0x59/0xa0 [ 891.407333][ T5832] kernel_init_freeable+0x2a6/0x3e0 [ 891.413086][ T5832] kernel_init+0x1d/0x1d0 [ 891.418067][ T5832] ret_from_fork+0x51e/0xb90 [ 891.423225][ T5832] ret_from_fork_asm+0x1a/0x30 [ 891.428564][ T5832] [ 891.428564][ T5832] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 891.435823][ T5832] fs_reclaim_acquire+0x71/0x100 [ 891.441375][ T5832] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 891.447949][ T5832] __alloc_skb+0x1d0/0x7d0 [ 891.452930][ T5832] tcp_stream_alloc_skb+0x3f/0x580 [ 891.458635][ T5832] tcp_connect+0x1527/0x5370 [ 891.463789][ T5832] tcp_v4_connect+0x10f6/0x19b0 [ 891.470254][ T5832] mptcp_connect+0x56b/0x830 [ 891.476041][ T5832] __inet_stream_connect+0x25a/0xdd0 [ 891.482088][ T5832] inet_stream_connect+0x66/0xa0 [ 891.488182][ T5832] __sys_connect+0x312/0x450 [ 891.493426][ T5832] __x64_sys_connect+0x7a/0x90 [ 891.498835][ T5832] do_syscall_64+0x14d/0xf80 [ 891.503991][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.510537][ T5832] [ 891.510537][ T5832] -> #0 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 891.518418][ T5832] __lock_acquire+0x15a5/0x2cf0 [ 891.523958][ T5832] lock_acquire+0xf0/0x2e0 [ 891.529718][ T5832] lock_sock_nested+0x48/0x100 [ 891.535046][ T5832] inet_shutdown+0x6a/0x390 [ 891.540209][ T5832] nbd_mark_nsock_dead+0x2e9/0x560 [ 891.545885][ T5832] recv_work+0x1c7f/0x1d90 [ 891.551035][ T5832] process_scheduled_works+0xb6e/0x18c0 [ 891.557166][ T5832] worker_thread+0xa53/0xfc0 [ 891.562599][ T5832] kthread+0x388/0x470 [ 891.567231][ T5832] ret_from_fork+0x51e/0xb90 [ 891.572378][ T5832] ret_from_fork_asm+0x1a/0x30 [ 891.578232][ T5832] [ 891.578232][ T5832] other info that might help us debug this: [ 891.578232][ T5832] [ 891.588670][ T5832] Chain exists of: [ 891.588670][ T5832] k-sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 891.588670][ T5832] [ 891.602267][ T5832] Possible unsafe locking scenario: [ 891.602267][ T5832] [ 891.609871][ T5832] CPU0 CPU1 [ 891.616221][ T5832] ---- ---- [ 891.621609][ T5832] lock(&nsock->tx_lock); [ 891.626059][ T5832] lock(&cmd->lock); [ 891.632594][ T5832] lock(&nsock->tx_lock); [ 891.639681][ T5832] lock(k-sk_lock-AF_INET); [ 891.644742][ T5832] [ 891.644742][ T5832] *** DEADLOCK *** [ 891.644742][ T5832] [ 891.653018][ T5832] 3 locks held by kworker/u9:2/5832: [ 891.658487][ T5832] #0: ffff888026d07148 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 891.669996][ T5832] #1: ffffc90003c27c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 891.681821][ T5832] #2: ffff88807df29870 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c6a/0x1d90 [ 891.691196][ T5832] [ 891.691196][ T5832] stack backtrace: [ 891.697486][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 891.697527][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 891.697542][ T5832] Workqueue: nbd1-recv recv_work [ 891.697584][ T5832] Call Trace: [ 891.697595][ T5832] [ 891.697607][ T5832] dump_stack_lvl+0xe8/0x150 [ 891.697636][ T5832] print_circular_bug+0x2e1/0x300 [ 891.697670][ T5832] check_noncircular+0x12e/0x150 [ 891.697710][ T5832] __lock_acquire+0x15a5/0x2cf0 [ 891.697742][ T5832] ? preempt_schedule_notrace+0x57/0x90 [ 891.697770][ T5832] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 891.697791][ T5832] ? __pfx_inet_shutdown+0x10/0x10 [ 891.697821][ T5832] lock_acquire+0xf0/0x2e0 [ 891.697845][ T5832] ? inet_shutdown+0x6a/0x390 [ 891.697878][ T5832] lock_sock_nested+0x48/0x100 [ 891.697897][ T5832] ? inet_shutdown+0x6a/0x390 [ 891.697925][ T5832] inet_shutdown+0x6a/0x390 [ 891.697954][ T5832] nbd_mark_nsock_dead+0x2e9/0x560 [ 891.697982][ T5832] recv_work+0x1c7f/0x1d90 [ 891.698011][ T5832] ? check_path+0x21/0x40 [ 891.698041][ T5832] ? add_lock_to_list+0xc7/0x100 [ 891.698076][ T5832] ? __pfx_recv_work+0x10/0x10 [ 891.698100][ T5832] ? lockdep_hardirqs_on+0x7a/0x110 [ 891.698126][ T5832] ? irqentry_exit+0x59e/0x620 [ 891.698153][ T5832] ? trace_irq_disable+0x3b/0x150 [ 891.698180][ T5832] ? lock_acquire+0x20b/0x2e0 [ 891.698205][ T5832] ? process_scheduled_works+0xa8d/0x18c0 [ 891.698231][ T5832] ? process_scheduled_works+0xa8d/0x18c0 [ 891.698257][ T5832] process_scheduled_works+0xb6e/0x18c0 [ 891.698297][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 891.698326][ T5832] ? assign_work+0x3d5/0x5e0 [ 891.698352][ T5832] worker_thread+0xa53/0xfc0 [ 891.698392][ T5832] kthread+0x388/0x470 [ 891.698411][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 891.698436][ T5832] ? __pfx_kthread+0x10/0x10 [ 891.698455][ T5832] ret_from_fork+0x51e/0xb90 [ 891.698483][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 891.698507][ T5832] ? __switch_to+0xc7d/0x1450 [ 891.698531][ T5832] ? __pfx_kthread+0x10/0x10 [ 891.698549][ T5832] ret_from_fork_asm+0x1a/0x30 [ 891.698586][ T5832] [ 891.979757][ T4679] validate_nla: 1 callbacks suppressed [ 891.979797][ T4679] netlink: 'syz.5.8349': attribute type 1 has an invalid length. [ 891.993714][ T4679] netlink: 'syz.5.8349': attribute type 2 has an invalid length. [ 892.002256][ T4679] netlink: 'syz.5.8349': attribute type 1 has an invalid length. [ 893.280352][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 893.288567][ C1] lec:lec_tx_timeout: lec0 [ 893.293377][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 899.040328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 899.048411][ C1] lec:lec_tx_timeout: lec0 [ 899.053197][ C1] lec:lec_start_xmit: lec0:No lecd attached