last executing test programs: 1m13.507845444s ago: executing program 1 (id=3148): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}}, 0x0) 1m13.300042704s ago: executing program 1 (id=3151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a31000000002800048008000240000000000800014000000005140003006e7230000000000000000000000000000900010073797a31000000003c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000015040004800b00070066696c746572"], 0xd8}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002ec0)={'veth1_to_team\x00', &(0x7f0000002e40)=@ethtool_coalesce={0xe, 0x3169, 0x1, 0x5, 0x6, 0x3, 0x8, 0x3, 0x4a24, 0x10000, 0x4, 0x0, 0x4, 0x5, 0x1, 0x2, 0x5, 0x1, 0x2400, 0xf529, 0x9, 0x7, 0x80000000}}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="a1ad0000", @ANYRES16=r2, @ANYBLOB="00022cbd7000fcdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040001000000080001007063690011000200303030303a30303a31302e3000000000080003000100000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040002000000080001007063690011000200303030303a30303a31302e300000000008000300030000000600040000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000600040000000000080001007063690011000200303030303a30303a31302e300000000008000300020000000600040003000000080001007063690011000200303030303a30303a31302e3000000000080003000900000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000006000400030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300050000000600040001000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x5}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/cgroup\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xb301) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r10, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x2, @local, 0x8}}, 0x0, 0x0, 0x36, 0x0, "09cab2886a7ab4f6c4796e4db1d5c4db66fac7a2915985eb70a21ef90e0d5cfaed52ced0469a394f45f9df79db718e84fd1081625fa9df4fde0673c1fc1620b37c672aae05ad18231f8eb4b2cf4f4ddb"}, 0xd8) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) socket$pppoe(0x18, 0x1, 0x0) 1m13.09523705s ago: executing program 1 (id=3154): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000a00da0008000200e0f4ff0105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x158, 0x0, 0x148, 0x158, 0x148, 0x308, 0x240, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x201, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x20, 0xb, 0x2b, 0x25, 0x3f, 0x1b, 0x19, 0x22, 0x2c, 0x3e, 0x2a, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x80000000000002}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'hsr0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 1m12.29296191s ago: executing program 1 (id=3161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xfffffffd}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d000100000bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7fffffff}, 0x50) 1m12.234317388s ago: executing program 1 (id=3162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000902b15a472420e61440500560001000000001eabf50fe108c69cc2", @ANYRES32=0xffffffffffffffff, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYBLOB="a88f45e7", @ANYRES32, @ANYBLOB="2886fb2e7dc6c84a8da818adf6853417b3cba5861e490af997164144ddbe78d2a48a5a012c9c83ab54ab27ae9170cf825858dab60ab0beef8bd2e76ad585da52c49224dfce1ad0ad86793a7224a5d6f22d6c052db58db100d6c1ccd3443ef89decff1ca74bca8ccb4462e8b4658ed06aa874121ae2b19453e29369197daa10d35362cc08896a202b0695622b7a4a87df5c63bb0e7715e221894aec7ab0c87d08d70736787d6d", @ANYRES64=r0, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r2], 0x23c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 1m12.101878067s ago: executing program 1 (id=3163): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 57.090106861s ago: executing program 32 (id=3163): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 3.135825304s ago: executing program 0 (id=4009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x75dd1910f8cc5190) syz_emit_ethernet(0x17e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x2, 0x170, 0x68, 0x0, 0x2, 0x6, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x13, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x39}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x5, "63a950"}]}}, @name_distributor={{0x140, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7ff, 0x0, 0x1, 0x9, 0x5, 0x0, 0x4e22, 0x4e20, 0x0, 0x9}, [{0x0, 0x5, 0x3, 0x3, 0x4, 0x5, 0x7, 0x8}, {0x2b6ec0, 0xffff8001, 0x2, 0x9, 0x6, 0x7fff, 0x0, 0x81}, {0x6, 0x1ff, 0x9, 0x9, 0x5, 0x0, 0x6, 0x8}, {0x7, 0x2, 0x1, 0xf, 0x5, 0xc, 0x4, 0x8}, {0x4, 0x8, 0x8, 0x8, 0x7fffffff, 0x1, 0x5, 0x67}, {0x9, 0x7fff, 0x2, 0x632, 0xfffffff9, 0x2, 0x9, 0x7}, {0x6, 0x7, 0xfffffc00, 0xd, 0xffff0001, 0x9e, 0x8, 0x300}, {0x80000000, 0x9, 0x8000, 0xf9b5, 0x7fffffff, 0x2, 0x2, 0xeb9}, {0x8, 0x2, 0xb9, 0x509865d0, 0x0, 0x6, 0x5, 0x7}, {0x0, 0x1, 0x639, 0x3, 0x3, 0x4, 0x4, 0x5}]}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0x80000000, {0x1, 0xcc19, 0x3, 0x400, 0x4}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x1, @local, 0x49}], 0x1c) write$tcp_congestion(r4, &(0x7f0000000180)='highspeed\x00', 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x75dd1910f8cc5190) (async) syz_emit_ethernet(0x17e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x2, 0x170, 0x68, 0x0, 0x2, 0x6, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x13, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x39}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x5, "63a950"}]}}, @name_distributor={{0x140, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7ff, 0x0, 0x1, 0x9, 0x5, 0x0, 0x4e22, 0x4e20, 0x0, 0x9}, [{0x0, 0x5, 0x3, 0x3, 0x4, 0x5, 0x7, 0x8}, {0x2b6ec0, 0xffff8001, 0x2, 0x9, 0x6, 0x7fff, 0x0, 0x81}, {0x6, 0x1ff, 0x9, 0x9, 0x5, 0x0, 0x6, 0x8}, {0x7, 0x2, 0x1, 0xf, 0x5, 0xc, 0x4, 0x8}, {0x4, 0x8, 0x8, 0x8, 0x7fffffff, 0x1, 0x5, 0x67}, {0x9, 0x7fff, 0x2, 0x632, 0xfffffff9, 0x2, 0x9, 0x7}, {0x6, 0x7, 0xfffffc00, 0xd, 0xffff0001, 0x9e, 0x8, 0x300}, {0x80000000, 0x9, 0x8000, 0xf9b5, 0x7fffffff, 0x2, 0x2, 0xeb9}, {0x8, 0x2, 0xb9, 0x509865d0, 0x0, 0x6, 0x5, 0x7}, {0x0, 0x1, 0x639, 0x3, 0x3, 0x4, 0x4, 0x5}]}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0x80000000, {0x1, 0xcc19, 0x3, 0x400, 0x4}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x1, @local, 0x49}], 0x1c) (async) write$tcp_congestion(r4, &(0x7f0000000180)='highspeed\x00', 0xa) (async) 2.906255402s ago: executing program 0 (id=4013): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40894) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) 2.753563464s ago: executing program 4 (id=4014): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @loopback, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x80000001, 0x3f}, 0x2c) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/102, 0x66}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/250, 0xfa}, {&(0x7f0000000680)=""/12, 0xc}, {&(0x7f00000006c0)=""/117, 0x75}], 0xa) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000800)={0x9, @remote}, &(0x7f0000000840)=0x12, 0xc0800) sendto$x25(r1, &(0x7f0000000880)="48804271a37bf2971fe3013c6ea773e9a55ef9ae922eb1cc59da482bc8045336a63d2e2801d56d25c78b6b3d3c0b8a05a73b8c4499012c7faa4b3b0dfc75e23f1371cd3b1812f59e9d9ef369ad2c8446b3c35ba6b22b77c95417aaadf5f44473a1f979a37c938f4b60745c6a0f651e6ba20c956bcaf0a3c8320d7977c328dd4952d65d7c46ed939a6acb0fcf07494ededa6d85c708d297435749419ab250de8f1199cea6ea97fa8d9da398ded5d6b33efb8b97fae4a3ae864d44c95dbce8f2006efe04b4abec7a8d7daa1ecf7bd5048c942ba1e17314e9e3eba8e13aed23", 0xde, 0x800, &(0x7f0000000980), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000009c0)=@ccm_128={{0x303}, "3abcf0ec7e7b8528", "8435fe2870b456dde76e20af3f21baf2", "02eeef27", "cbbf14960032d7f2"}, 0x28) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x11c, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35a2d6a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4d62}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc0}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1e9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa5a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c00)={'wg1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000d80)={0x1, 0x1, 0x1000, 0x7d, &(0x7f0000000c80)="aeedc095412a4b724936ba2f223019eaa04dfa7758d52da0e433c68c9a6cfe2ad3a5fb9dd5fb4ec785888a61305336111885ce94ff7bdbee015185662f8f1839ecf9ccefb5cc09803efbb64dd4c18f843f8367964626e0e627ec71e431ca949826af3a75e6260beb030bdcbac2084d8e2a7f6824641ecc18acba5b60ae", 0x63, 0x0, &(0x7f0000000d00)="9c066bb9233c5475930f23877f81dee037fb9224bcf6d19cfcba5daee7a98f3fa13776d863a755eb0290e83539b1ab510397176c55a8fe4da76088d81029144c5ea8f928d0588c1289de9162beb8592b7938d75294ae69213610c4f4c094d1846e0c1a"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000e00)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xb4, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x45c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7d6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5f3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38000}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) pipe(&(0x7f0000001000)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xec, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x61}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8fc}]}, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x40014) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000001240)={0x8, 0x8000, 0x800, 0x7, 0x7}) ioctl$int_in(r3, 0x5452, &(0x7f0000001280)=0x2) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000012c0)={0x5, 0x6, 0xfffffffffffffffd}) sendmsg$SOCK_DESTROY(r7, &(0x7f0000001600)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001340)={0x264, 0x15, 0x100, 0x70bd26, 0x25dfdbfd, {0x29, 0xf7}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "9e771fb7cb973590c4324e6b648bc1133d3634286c6d7455484fd02cf9086b183c14c6"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "a16af694d5fc07f0018d00bcc626d329fc8007ad3b2dcdf5f4331f19257296932a5258364b05a36d399e041b2cc13f95c64d"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "7c28138e06db85a268a56f87659ab41f61cf4c90150dd2a92f2bf8de9fcb4c035205d4af4ed2910c5dbb8c3b7191fcfc85ff4d9fdbfd76d5aa52813dc541c449a654d20e3fcacf5012d8b2b93fe5a0bd26ce3f171bfd08ff7dd98e292bddf8da95dc662920c952d268d906b6ebdf7714d0834a64a7fc723c76da5e305420f371aee88ba86abf6ecfc301e62576f01334ce1f770d5c52334af0162790c834899851826df56fda560fb8519f752179b423a11051e97ef973f0e11410d486da7fcf772ffd"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "81b63f3c8747df8d05be59a62395c71e47f66c2218fbd116e56b67e579b721e12a578e1a0dc5e99d3d8201e918bb9aee42bcfc7182089bd2f006652510d9c78377258c7f771a658402d0adb1d2a5f822e9"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "e983fc1b0280a76cdf3c9d0ecee82c7d145dc781800b4b0f077eb0750d668517d162db8f7c314d6097a1ec2c44d214008419db714ce11a2d3778efc0044e80a3e9cad715ed968b7906a9856ed72b49c381f54da0722d993d33c7284194cde649083b983891f226027754e9babbf33cf6dd3130581e6b829dc8da30806a69fab1ad3ad43302fe9e8ac9c2cdab46dafc5884e9f091d61abb336f3fc4995053a318406e3ea8398dab5a1a411bb6092794c317e8bf51b2083950b23e182d109a5a2a40bbe5c850c5d6dee4"}]}, 0x264}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000001880)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x98, r10, 0x213, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004}, 0x880) 2.466421885s ago: executing program 0 (id=4019): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x9, 0xa, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105002d1a40b100000000000000000003000000000100000002000000000000000061"], 0x0, 0x53}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) close(r7) r8 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev, @dev, 0x0, 0x0, 0x0, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', r9, 0x29, 0x0, 0x7, 0x3, 0x13, @dev={0xfe, 0x80, '\x00', 0x30}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x80, 0x6, 0x3}}) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r10 = accept4(r4, 0x0, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) sendmmsg$unix(r10, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="6af181fc91ba042f021a7ab4ea0500000022ded63f0f149695a3ab30", 0x1c}, {&(0x7f0000000140)="c3", 0x1}], 0x2}}], 0x1, 0x0) 2.429613924s ago: executing program 2 (id=4021): syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "30bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r3 = accept$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2, 0xfffffffe}, 0x39) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="20000900e008204b9fba10c867b650bb5d9d222854303c8d2e60ff9afab3b220fbe27f10b9315ec422a582457101398fc3f0781c1dddd67cfc5c1a5352421e0e36eed4a0607d339e64f608250890dd0f00000000000031"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c081}, 0x481) (async) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r6, 0x301, 0x70bd28, 0x0, {0x34}}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r6, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x44081}, 0x20008014) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000379341726e8ba3aa21c5c7182cba300000000000000060100000024e79b0200000008"], 0x38}}, 0x0) 2.305317036s ago: executing program 2 (id=4023): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @remote, 'gre0\x00'}}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) connect$packet(r1, &(0x7f0000000080)={0x11, 0xf8, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) 1.724556565s ago: executing program 4 (id=4027): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r1, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000280)=0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4) 1.150347859s ago: executing program 5 (id=4029): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb6, 0x7fffffff, {0x6, 0x32, 0x5, 0x7, 0x0, 0x7fff, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 1.143931558s ago: executing program 5 (id=4031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) bind$x25(r2, &(0x7f0000000200), 0x12) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) bind$x25(r1, &(0x7f0000000080), 0x12) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) 1.142730096s ago: executing program 2 (id=4033): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xc}, {0x5, 0xe}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x48880) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x57, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1d, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "51f84227a41c826cd2c73575e4"}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef91d2c3763c07f25a13d35d374c90c200", 0x2d) (async) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) 1.141948759s ago: executing program 5 (id=4034): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r1, 0x2) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe001, 0x4}}}}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xffffff9f, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x7f, 0x38}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001540)=0x0, &(0x7f0000001580)=0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r7, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r7, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088484ce0050000000000000177fbac141416e000000107079ffeb18000440f050f00845002f2075f0039010586038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x10, 0x29, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6c603e38}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x3, 0x1, 0x7, 0xd, 0x4}, @generic={0xe5, 0x3, 0x3, 0x5, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0x6, 0xb, 0x7, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x8, 0x1000, &(0x7f0000000540)=""/4096, 0x1e00, 0x48, '\x00', r6, @sk_msg, r7, 0x8, &(0x7f00000015c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x0, 0xd, 0x1, 0xffffffff}, 0x10, r9, r10, 0x8, 0x0, &(0x7f0000001640)=[{0x2, 0x3, 0x6, 0x5}, {0x1, 0x4, 0x10, 0x7}, {0x4, 0x3, 0x6}, {0x5, 0x2, 0x2, 0x4}, {0x2, 0x1, 0xe, 0xc}, {0x3, 0x5, 0xa, 0xa}, {0x4, 0x5, 0x5}, {0x2, 0x5, 0x2}], 0x10, 0x4}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, 0x2}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x48040) 966.476923ms ago: executing program 2 (id=4036): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2f25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(r2, &(0x7f00000001c0)="cd9d68b16fe731383a110888fb30", 0xe) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x442b3, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) close(r0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x12c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}, @typed={0x8, 0xaa, 0x0, 0x0, @u32=0xc}, @generic="0bdab8e40bb2cc70c3b110471372ae7a003c5cb1ab849fdd0df1b20649d4a008faa649712237cc8c83a39badfeaa65e92cb0b7d844f5cb0e9b525d84332c5058fc0f216adb72b6d473fd1dde93b2587c9fc4aa3ca4e37ed8c4847643bad824eb0b7d548050d76fefd2fd7e96e3e611a0ffb0ebf0cd108b0d6185235857288810225277077fcd2e4b9ed69c790b1e904d1c4804ae0afbb887e14d2bd623df9f7d7dc61e7911bb204a0c429bb22f715c59884afd7c32541dc3e82691fb99ac7ae6ed1730566a36197dc440f59451553939a2ba9aef55819a9b8a7e01", @generic="95c3e087693de123597de2c63d45c71ca8c416d0d7"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 964.041269ms ago: executing program 3 (id=4037): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x20000000, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r10, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}]}, 0x4c}}, 0x804) 872.884597ms ago: executing program 0 (id=4038): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r3, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x10}, @TIPC_NLA_CON_NODE, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x20}}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x48) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r0}, {@val, @actul_num={@val=0x2b, 0xe7c, 0x20}}}) 871.554704ms ago: executing program 5 (id=4039): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x30, r1, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0xfffffffffffffde6, 0x35, 0x71}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@delchain={0x38, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a40)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xfffffffd, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r13, 0x1, 0xd8, 0x6, @multicast}, 0x14) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r15}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r15, &(0x7f0000000900)}, 0x20) close(0x3) 816.83655ms ago: executing program 4 (id=4040): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20004f2c, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x20004f2c, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(r4, 0x400454cc, 0xee01) (async) ioctl$TUNSETOWNER(r4, 0x400454cc, 0xee01) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) recvmmsg(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000001800)}, 0xb76d}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x20, &(0x7f0000005240)={0x0, 0x989680}) (async) recvmmsg(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000001800)}, 0xb76d}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x20, &(0x7f0000005240)={0x0, 0x989680}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0xfffffffffffffeeb, &(0x7f00000001c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0xfffffffffffffeeb, &(0x7f00000001c0)}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r11, 0x1, 0x43, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$inet(0x2, 0x4000000805, 0x0) (async) r13 = socket$inet(0x2, 0x4000000805, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180031080800000000000000e2bb1abb8b032f33d5914bc286421c32bdf22bef1a80c680955c1914f7391d6b7bc3d4401924a51f59c1bff6b00594d300adfd63156670090e7da71d7e934b5de05b0cf174f2b240d799228ffb4cf476e710fb82e8154eb4842301922e7b96e5d5ed5fe6c0c760948f3814669d23b073ab932b05ce1adde74c8b43a54b12ba0e2ba8eb1f3be0f0a4df9a97969361ffb44c4f4fef6cfe92b9cd22c29aa814e6b1b7412f5a510d71c11b3ce09075375d4c2d17", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180031080800000000000000e2bb1abb8b032f33d5914bc286421c32bdf22bef1a80c680955c1914f7391d6b7bc3d4401924a51f59c1bff6b00594d300adfd63156670090e7da71d7e934b5de05b0cf174f2b240d799228ffb4cf476e710fb82e8154eb4842301922e7b96e5d5ed5fe6c0c760948f3814669d23b073ab932b05ce1adde74c8b43a54b12ba0e2ba8eb1f3be0f0a4df9a97969361ffb44c4f4fef6cfe92b9cd22c29aa814e6b1b7412f5a510d71c11b3ce09075375d4c2d17", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmmsg(r13, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000000000004840000000500000098ddea2aedc9d81ca3000372168cf5117d2eb5c074517a96c12b89efc70e2276fa1dee965be6c831f547b09d59c1596c980fd49599090919fcdc0a8a6f950fc0618e25c3eb6f427249daa1cb549dce5872395154771d99640ab77d9f0ddf77b511499d61e4cd40b675c938a4b2c16ea2d6d42d56a1d394c07cd721978112be09e9a110d2f7686351e87bd5b2274c1cb6c5aa3e629b186317a66de5feedf551fc7873d045d4e0b413f67ecda64f5e20899b886ab1d292951f564b53f512cf160d59205e8b"], 0x10}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x5c, r9, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "77185956f3e8fe21"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="865bb9171d95dfdbe227c52471d8a4ff"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aaa691e5ace0229b99048535695a2540"}, @NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x5c}}, 0x4000010) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r9, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x28}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x4000000) 773.252164ms ago: executing program 0 (id=4041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x4800) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x2}, 0x95) (async) r1 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xffffff4d, 0x0, 0x1}, 0x48) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$AUDIT_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3e8, 0x400, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8c5) (async) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/191, 0xbf}], 0x1}, 0xfffffffa}], 0x1, 0x2000, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190a0102000000000000000000000000090001"], 0x2c}}, 0x0) 648.860913ms ago: executing program 3 (id=4042): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000140)="78c60ff48b00bdf1a5600ef1f09a7e34f5d2e82f68316a82fda4c44fcfd7f5f46b3036d96cf23077843dc675b07d5d7ce2d57215378d8703739770500e5ccc7b51a1b486b509d367bc65c6a8738a42fb3532fcdd79d68b39286d5fd754f40fd60c6ceb55a1", 0x65}, {&(0x7f0000001d00)}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000090000007497d28bb4bd6000f000000000000000000000000000000005592f873b8602c42bf95ce259ab5b5d28f66122d2df218e301fad9b5fbfee69be4bf055cfdd118a4d5d66e9f8d31be15c0f21af4d5b036184e0b5fc73b760a651c107fae078db0fbb0e195dd52fb26da984ae503214c4a120d04a24a29f33be9873a7290dabf48dd88dcd4356d6e22a74bb85145cd6880884add4282bddc07a366ca9e2b47f033b15a2b583630000316eb20923bd693cc05c7ffedc60ca419289209cc9826839f9739dccae0482064a87f31d93880f6a8b1864111537d29139fa6e412eaa7c91b4a6591a695829729c06e64b08bf4314a6ce00000000000000800000000000000019010000010000007cab0c75d766a0e0c76b40985a9c5bc7a6bc6316597e9218c1fe9d9a038af8562337f768e50000049841954c87f8d2ec394070ff3e2f37dc968ea8ae601223334dfd0513d3bfa0483618e7a7393467ea5b8b8538fd2e793885a1fcdf034b22479f8f751619afeba50784b15817000000"], 0x208}}, {{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001680)="df4334a77664102f5a8caf10562be26700f4c6873633f6d1ff9b33bec6363e58ed9ccf89dabc9710a543f19bec7606bab45b59d8386ecc74e4c8dd6a8ada5ced6c74534e1b8256d9c3e5827940dffa100e1092990f3a9dcb18371f6929729e5cd32d78d4bd76577873b4e7c5e7fa12cf2a3005a5c5116948ec8a75294fa0", 0x7e}], 0x2}}], 0x2, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000000050420f01630c02000000000000000000000d000000b3875719002e3d53c0d8ed70db8ffd319a00f5a39a84593c"], 0x0, 0x34}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000140)=@getae={0x4c, 0x1f, 0x101, 0x70bd2a, 0x25dfdbfb, {{@in6=@empty, 0x4d5, 0xa, 0x6c}, @in6=@private2, 0xfffffc01, 0x3504}, [@mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x22008040) 644.007624ms ago: executing program 2 (id=4043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000ffdbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={&(0x7f0000006940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) 642.64485ms ago: executing program 0 (id=4044): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x241, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee", 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) (async) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x24, 0x4, 0x70bd25, 0xffbffffc, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8004840) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0xb, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x84, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "c6ba73796feb537312946f44c2259ab1d1eea07293"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1d6e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa55}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x84}}, 0x8000) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000240)="94", 0x1) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) (async) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000005c0)={@multicast1, @dev, 0x0}, &(0x7f0000000600)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000580)='syzkaller\x00', 0x69b, 0x0, 0x0, 0x41100, 0x40, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x4, 0x210, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000840)=[{0x2, 0x1, 0x6, 0x9}], 0x10, 0x9}, 0x94) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r14) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r15, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008040) 482.941129ms ago: executing program 3 (id=4045): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) 422.022187ms ago: executing program 5 (id=4046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a76804e3f367"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="78fb0593c721"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="620f2769b6b2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="38f0f5f25faf"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="82d8fdcb487d"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f4c9d0e6a939"}]}, 0x80}, 0x1, 0x0, 0x0, 0x15}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x22800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000015}, 0x8081) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x26c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "26c3b6b3ff72ab970037d5b4c057c329768a8f0a268229ffde5ef6c3149863d07a74f7286f73a53f9be8fe5082475aa9d20323b0d257f80e6c3ace9b707d854a7dafe8d0ba88b707808ef63377bf6ab213592872ba60334461653cd2c9dc8e8145c729b9e113f080bd2ed9520a56339a"}, @ETHTOOL_A_BITSET_MASK={0xec, 0x5, "bb58af085b97d39e07069b71a4f9b873e343bba8706d7882d1b884d0f9e578306ba3d142f12b1bc25b16169a578e1a4ff6759b4491ea71ca4ae428b194c064b39c26d9c13293a5e4bd58e61cc763e2396477cdaf59f25a8f816ac7e894355033a811ef3d80b35049c2b5168512f601730b867c9ce07decff9a1de801a8981ebeb7be99b055dc096b5789b8bec89feb5ebb5ed7e2f2ec2c9537fb170ac2339c32891645aef8b3b4c842586d3ed57dee678c23a265dfd49687fd457297f35e15c35e17064e17fd77d3eec3adb6f68b846635d4d9d0a20e146b8218119f437c75c6983df3ebf0055be1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24000020}, 0x4) r8 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x1d, r6}, 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x4, 0x200, 0x10000, {0x0, 0x2710}, {r9, r10/1000+10000}, {0x4, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "c32091202977b841b3e34467e6b1333b37ed195741d6189b0bbbcaa58a5cff577658236f2e6db5a696c146154de348e74b89a4e77a4b4538f9868166022750ab"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x26004080) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000980)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000009c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_TX_TS(r12, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}}, 0x0) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r12) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r13, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) close(r14) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(r12, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@ipv4_newrule={0x30, 0x20, 0x800, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x80, 0xba, 0x2, 0x0, 0x0, 0x7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff8}, @FRA_FLOW={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c0) r15 = socket$kcm(0x29, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f0000000dc0)={r0}) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x6, 0x16}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4) clock_gettime(0x2, &(0x7f0000000f40)) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 415.191338ms ago: executing program 4 (id=4047): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000080)=[{0x1, 0x1, {0x2, 0xff}, {0x2, 0x1, 0x2}, 0x2, 0xff}, {0x3, 0x3, {0x2, 0xff}, {0x2, 0x0, 0x2}, 0xff, 0x2}], 0x40) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) 333.121512ms ago: executing program 3 (id=4048): r0 = socket(0x26, 0x4000000000080002, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'nr0\x00', 0x0}) (rerun: 64) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) (async, rerun: 64) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400e5ffff080004000000000000000013cca8f876e3cb7ad26f59a3ece01d07e8d09eeb297b20e375cef63d73e11a2bc56d5b803eb45d541edd47f5a656f18c852eddb3edf29919e01471dea0ff8d69f0e37a643d46", 0x7a}], 0x1) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r4, 0x0, 0x8000f25, 0x0) (async, rerun: 32) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (rerun: 32) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x1, 0x1}}, {{0x3}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x3, 0x1, 0x1}}], 0x30) 255.637991ms ago: executing program 4 (id=4049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 226.227022ms ago: executing program 2 (id=4050): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5}) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_emit_ethernet(0x1499, &(0x7f00000017c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "29893f", 0x1463, 0x3c, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@routing={0x1d, 0x10, 0x2, 0x0, 0x0, [@mcast2, @loopback, @mcast1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @mcast1]}, @routing={0x0, 0x4, 0x0, 0x8, 0x0, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x87, 0x30, '\x00', [@generic={0x0, 0xb5, "2b0dcfd33b28e79ea202925f20b30c51f398bd165d76e8275d457cf21942fdd5d0c559203bbc0036447eaf46292bb0b50408b078788c666cda45853becd76c4125235e80402929c75c70fc0b4c6b8d4f02f3dbe5e76927e9373cc989a626fb882d848e320a7d8f065e061a1a5454e60408255f63bca5b948b50d60b5dd084fa8c41701159c0cc685f663b45178dd3c1acfd71452dee86c2f5dbe27e37cf943eda30fa29913b59ba9c910379d7d2532834113732f37"}, @generic={0x5d, 0xb5, "63d283ec78520379a977788fd1a7dff1cd1448256b3576ff5362d9311788053c8f2dd176d6d76f7dd8b43d9b75269e935ad71135b6f379b4586fe6be5f1164a8ee6144c436411e364e552a6ddc32163bab37fcc495c807d3fa26b01b923175e5a7f146acd2be3c308bda44e5801e6499062f7f314a96de719a15ead32fba848b769f04f035966fcc2ab14bf78042fafd93778b63062fe71a78079fb74b93b07c99693b6f21772651d8408431830c9bd2caca0991d9"}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x200}]}, @hopopts={0x3b, 0xc, '\x00', [@enc_lim, @calipso={0x7, 0x48, {0x3, 0x10, 0x4, 0xc3, [0x6, 0x6, 0x7, 0x0, 0x200, 0x4, 0x6, 0x49]}}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7919e60c}]}, @routing={0x8, 0x4, 0x1, 0x5, 0x0, [@mcast2, @local]}, @hopopts={0x47, 0x2d, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x7, [0x8, 0x5, 0xff, 0x4, 0x0, 0x6, 0xfffffffffffffffe, 0x5]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x3, 0xff, "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"}]}, @dstopts={0x5e, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x720e21d3}, @pad1]}], "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"}}}}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="a20000000000000000e5ff0000008000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0) 97.651665ms ago: executing program 3 (id=4051): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x11, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008c10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 74.222577ms ago: executing program 4 (id=4052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1, 0x1, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000500040100000159651deb70e06300"/28], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYRESDEC=r3, @ANYRES64=r1], 0x24}}, 0x48800) recvmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x10040, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010000000000009500000000000000597bf9b36c3e3216aab5580b7997d8a7b1f4da37484a455e6dfdae0b191304119ed7ef22e54e42a3e828a0dce06d24e9bea3228443f000982e64097634afa6e6923f2460b464c0b28652e7e0"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x47, 0x20000890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) sendmsg$netlink(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$PPPOEIOCSFWD(r10, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'macsec0\x00'}}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002640)=@newtfilter={0x2c, 0x28, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r11, {0xffff}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x10004800) 72.130859ms ago: executing program 5 (id=4053): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) (async) r3 = socket$inet6(0xa, 0x1, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000100)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r5, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) (async) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 0s ago: executing program 3 (id=4054): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcedf71a2c001280110001006272696467655f336c617665000000001400058005001b000000000005001c0005000000140003006272696467655f736c6176655f300000"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r5, &(0x7f0000000100)=@abs={0x27}, 0x6e) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000200)={0x8, 0x6, {0x3, @struct={0x400, 0x3}, 0x0, 0x22d, 0x5, 0x5, 0x81, 0xb, 0x10, @usage=0x5, 0xc3c, 0x6, [0x2, 0x5, 0x100, 0x6e51, 0xc]}, {0x3ff, @usage=0x8000000000000001, 0x0, 0xd7, 0x9, 0x4, 0xfffffffffffffffb, 0x3, 0x0, @struct={0x7, 0x6}, 0x80000001, 0x9, [0x1, 0x6, 0x5, 0x1, 0x6, 0x3]}, {0x0, @usage=0x1, 0x0, 0x6, 0x56ca, 0x3, 0x9, 0x4, 0x210, @usage=0x81, 0x8, 0xf8, [0x4, 0xe, 0x8, 0x4, 0x3, 0x50]}, {0xf3, 0x1, 0x8}}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r3, @ANYRES16=0x0, @ANYBLOB="20002abd70f1ff66000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000600)={r6, 0x2, 0x1}) r10 = socket(0x1d, 0x80000, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000040)={0xdcab, 0x46, 0x5, 0x7f, 0x7}, 0x14) kernel console output (not intermixed with test programs): family 0 port 8472 - 0 [ 276.747566][ T8540] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.773505][T14143] netlink: 'syz.1.2203': attribute type 1 has an invalid length. [ 276.809198][T14143] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 276.838846][T14150] netlink: 'syz.3.2204': attribute type 1 has an invalid length. [ 277.011830][T14150] 8021q: adding VLAN 0 to HW filter on device bond9 [ 277.027624][T14153] xfrm0: entered allmulticast mode [ 277.054861][T14154] bond9: (slave geneve3): making interface the new active one [ 277.065250][T14154] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 277.744673][T14202] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 277.784674][T14202] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 278.175032][T14234] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.326755][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5950 ms [ 278.334842][ C0] lec:lec_tx_timeout: lec0 [ 278.340922][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 278.943040][T14274] veth7: entered promiscuous mode [ 278.966234][T14274] veth7: entered allmulticast mode [ 281.808023][T14274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.014134][T14332] sctp: [Deprecated]: syz.4.2257 (pid 14332) Use of int in max_burst socket option deprecated. [ 282.014134][T14332] Use struct sctp_assoc_value instead [ 282.178595][T14343] __nla_validate_parse: 13 callbacks suppressed [ 282.178619][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 282.255958][T14348] netlink: 548 bytes leftover after parsing attributes in process `syz.1.2261'. [ 282.305039][T14349] wg1 speed is unknown, defaulting to 1000 [ 282.445234][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'. [ 282.979366][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2271'. [ 283.001263][T14387] syz_tun: entered allmulticast mode [ 283.611099][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2280'. [ 283.715619][T14432] validate_nla: 1 callbacks suppressed [ 283.715722][T14432] netlink: 'syz.4.2281': attribute type 4 has an invalid length. [ 284.086748][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 284.094863][ C0] lec:lec_tx_timeout: lec0 [ 284.100119][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.165328][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'. [ 284.187383][T14450] openvswitch: netlink: Key type 16380 is out of range max 32 [ 284.254314][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'. [ 284.467865][T14476] netlink: 'syz.0.2292': attribute type 10 has an invalid length. [ 284.485627][T14476] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.515764][T14476] bridge_slave_1: left allmulticast mode [ 284.523557][T14476] bridge_slave_1: left promiscuous mode [ 284.530264][T14476] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.593380][T14476] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 284.736503][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 284.956349][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'. [ 285.018730][T14496] netlink: 'syz.3.2301': attribute type 4 has an invalid length. [ 285.021307][T14505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2303'. [ 285.054476][T14504] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20002 [ 285.479957][T14533] openvswitch: netlink: IPv4 tunnel dst address is zero [ 285.626930][T14539] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 285.866002][T14549] wg1 speed is unknown, defaulting to 1000 [ 285.885881][T14556] netlink: 'syz.2.2319': attribute type 10 has an invalid length. [ 285.927802][T14556] team0: Device veth1_macvtap failed to register rx_handler [ 285.976039][T14560] netlink: 'syz.2.2319': attribute type 10 has an invalid length. [ 286.029887][T14560] team0: Device veth1_macvtap failed to register rx_handler [ 286.037980][T14563] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 286.317359][T14575] nbd0: detected capacity change from 0 to 127 [ 286.346388][T14575] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 286.382977][T14575] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 286.406979][T14575] netlink: 'syz.3.2325': attribute type 8 has an invalid length. [ 286.940107][T14606] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 286.967956][T14610] netlink: 'syz.1.2332': attribute type 11 has an invalid length. [ 286.980146][T14613] netem: incorrect ge model size [ 286.985638][T14613] netem: change failed [ 287.055090][ T5833] block nbd0: Receive control failed (result -104) [ 287.224465][T14625] __nla_validate_parse: 14 callbacks suppressed [ 287.224485][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2338'. [ 287.268851][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2338'. [ 287.460891][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 287.488011][T14632] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2342'. [ 288.365750][T14632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.385567][T14632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.529181][T14632] bond1: left allmulticast mode [ 288.536892][T14632] bond1: left promiscuous mode [ 288.648621][ T5967] wg1 speed is unknown, defaulting to 1000 [ 288.654509][ T5967] syz2: Port: 1 Link DOWN [ 288.758727][T14666] gretap0: entered promiscuous mode [ 288.833806][ T8549] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.879832][ T8549] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.913654][ T8549] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.939243][ T8549] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.030968][ T8549] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.058651][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 289.070043][ T8549] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.105849][ T8549] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.123774][ T8549] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.136800][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 289.144898][ C0] lec:lec_tx_timeout: lec0 [ 289.150270][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 289.391880][T14703] netlink: 'syz.2.2359': attribute type 1 has an invalid length. [ 289.704738][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 289.714088][T14719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.818316][T14718] bond4: option xmit_hash_policy: invalid value (64) [ 289.826485][T14718] bond4 (unregistering): Released all slaves [ 290.060363][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 290.089986][T14737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2369'. [ 290.100645][T14737] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2369'. [ 290.210281][T14745] ipt_REJECT: TCP_RESET invalid for non-tcp [ 290.374689][T14748] wg1 speed is unknown, defaulting to 1000 [ 290.517472][T14762] siw: device registration error -23 [ 290.544099][T14759] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 290.555935][T14759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2378'. [ 290.955520][T14778] block nbd1: Unsupported socket: should be TCP or UNIX. [ 291.157427][T14782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.399274][T14802] openvswitch: netlink: Flow actions attr not present in new flow. [ 291.622119][T14822] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 291.904022][T14841] IPVS: sh: FWM 3 0x00000003 - no destination available [ 292.031601][T14844] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 292.091812][T14844] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.158739][T14854] netlink: 'syz.1.2409': attribute type 7 has an invalid length. [ 292.171785][T14854] netlink: 'syz.1.2409': attribute type 7 has an invalid length. [ 292.189256][T14855] bond5: entered promiscuous mode [ 292.194708][T14855] bond5: entered allmulticast mode [ 292.433268][T14871] netlink: 'syz.1.2414': attribute type 1 has an invalid length. [ 292.442494][T14870] netlink: 'syz.1.2414': attribute type 9 has an invalid length. [ 292.451418][T14870] netlink: 'syz.1.2414': attribute type 11 has an invalid length. [ 292.466824][T14870] netlink: 'syz.1.2414': attribute type 12 has an invalid length. [ 292.481104][T14870] __nla_validate_parse: 19 callbacks suppressed [ 292.481123][T14870] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.2414'. [ 292.737027][T14884] netlink: 'syz.0.2417': attribute type 2 has an invalid length. [ 292.815854][T14889] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 292.851882][T14894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.136292][T14909] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 293.211278][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2425'. [ 293.385216][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2429'. [ 293.762847][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2436'. [ 293.798866][T14943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2436'. [ 293.920157][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 293.958635][T14951] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20002 [ 294.157258][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 294.165382][ C0] lec:lec_tx_timeout: lec0 [ 294.170169][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 294.177587][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 294.200149][T14966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2443'. [ 294.209543][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2443'. [ 294.244111][T14966] syzkaller0: entered promiscuous mode [ 294.250122][T14966] syzkaller0: entered allmulticast mode [ 294.299479][T14971] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.402295][T14969] x_tables: unsorted entry at hook 2 [ 294.883630][T15002] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2457'. [ 294.911876][T14994] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 294.920665][T14994] bond7: option packets_per_slave: allowed values 0 - 65535 [ 294.938904][T14994] bond7 (unregistering): Released all slaves [ 295.195465][T15017] validate_nla: 3 callbacks suppressed [ 295.195564][T15017] netlink: 'syz.2.2461': attribute type 2 has an invalid length. [ 295.750928][T15026] netlink: 'syz.2.2464': attribute type 29 has an invalid length. [ 296.152442][T15070] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 296.511385][T15086] bond4: (slave erspan0): Device is not bonding slave [ 296.522560][T15086] bond4: option active_slave: invalid value (erspan0) [ 296.532991][T15086] bond4 (unregistering): Released all slaves [ 297.204816][T15137] netlink: zone id is out of range [ 297.225168][T15137] netlink: del zone limit has 4 unknown bytes [ 297.880214][T15160] __nla_validate_parse: 8 callbacks suppressed [ 297.880235][T15160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2505'. [ 298.722573][T15195] netlink: 'syz.4.2517': attribute type 3 has an invalid length. [ 298.733024][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2519'. [ 298.772424][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2519'. [ 298.862194][T15209] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2520'. [ 298.868015][T15216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.935131][T15218] netlink: 'syz.3.2523': attribute type 2 has an invalid length. [ 299.156219][T15231] rdma_op ffff8880566741f0 conn xmit_rdma 0000000000000000 [ 299.176755][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 299.184809][ C0] lec:lec_tx_timeout: lec0 [ 299.189936][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 299.262407][T15240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2530'. [ 299.458657][T15248] xt_hashlimit: overflow, try lower: 3/0 [ 299.465478][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 299.489993][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 299.703969][T15259] syzkaller0: entered promiscuous mode [ 299.709900][T15259] syzkaller0: entered allmulticast mode [ 299.921705][T15274] bridge0: port 1(batadv1) entered blocking state [ 299.934226][T15274] bridge0: port 1(batadv1) entered disabled state [ 299.942073][T15274] batadv1: entered allmulticast mode [ 299.950328][T15274] batadv1: entered promiscuous mode [ 300.036414][T15284] ip6gre0: Master is either lo or non-ether device [ 300.153865][T15288] nbd: must specify a device to reconfigure [ 300.181008][T15290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2544'. [ 300.203954][T15289] IPv6: sit1: Disabled Multicast RS [ 300.358350][T15300] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2549'. [ 300.387266][ T8541] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 300.397102][ T8541] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 300.423156][T15304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2548'. [ 300.566243][T15312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.715821][T15321] SET target dimension over the limit! [ 301.055245][T15334] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 301.088633][T15334] bond10 (unregistering): Released all slaves [ 301.144956][T15338] syzkaller1: entered promiscuous mode [ 301.150590][T15338] syzkaller1: entered allmulticast mode [ 301.481480][T15361] netlink: 'syz.2.2570': attribute type 142 has an invalid length. [ 301.620631][T15371] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 301.629887][T15371] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 301.678664][T15375] team0: Device macvlan2 failed to change mtu [ 303.005631][T15454] __nla_validate_parse: 13 callbacks suppressed [ 303.005655][T15454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2600'. [ 303.377234][T15468] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 303.456768][T15475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2606'. [ 303.492059][T15468] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.525947][T15481] bond8: (slave gretap0): making interface the new active one [ 303.550020][T15481] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 303.573840][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 303.585303][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 303.597875][T15469] netlink: 'syz.4.2605': attribute type 10 has an invalid length. [ 303.597948][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 303.778988][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 303.797260][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 304.041793][T15507] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 304.082086][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 304.170037][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 304.196772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 304.204859][ C0] lec:lec_tx_timeout: lec0 [ 304.209500][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 304.271231][T15518] xt_hashlimit: overflow, try lower: 3/0 [ 304.461332][T15529] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 304.606513][T15543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2627'. [ 304.632054][T15543] netlink: 'syz.0.2627': attribute type 10 has an invalid length. [ 304.678043][T15543] batman_adv: batadv0: Adding interface: netdevsim0 [ 304.684886][T15543] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.711502][T15543] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 304.725217][T15550] netlink: 'syz.4.2628': attribute type 4 has an invalid length. [ 304.873227][T15562] xt_TPROXY: Can be used only with -p tcp or -p udp [ 305.101561][T15584] netlink: 'syz.1.2637': attribute type 1 has an invalid length. [ 305.147063][T15584] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.172479][T15589] bond9: (slave ip6gretap1): making interface the new active one [ 305.182323][T15589] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 305.251028][T15584] veth9: entered promiscuous mode [ 305.259587][T15584] bond9: (slave veth9): Enslaving as an active interface with a down link [ 305.719557][T15614] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 306.063484][T15646] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.225646][T15659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.293997][T15665] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 306.356275][T15671] wg1 speed is unknown, defaulting to 1000 [ 306.372941][T15667] sch_tbf: burst 0 is lower than device lo mtu (1031) ! [ 306.543342][T15685] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.920261][T15698] tipc: Started in network mode [ 306.925216][T15698] tipc: Node identity 42cabba5b30a, cluster identity 4711 [ 306.969571][T15698] tipc: Enabled bearer , priority 0 [ 307.038949][T15706] syzkaller0: entered promiscuous mode [ 307.044499][T15706] syzkaller0: entered allmulticast mode [ 307.068116][T15714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.103504][T15698] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 307.193679][T15698] tipc: Resetting bearer [ 307.434816][T15697] tipc: Resetting bearer [ 307.492207][T15697] tipc: Disabling bearer [ 307.813135][T15761] sctp: [Deprecated]: syz.4.2684 (pid 15761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.813135][T15761] Use struct sctp_sack_info instead [ 307.820130][T15763] netlink: 'syz.1.2685': attribute type 10 has an invalid length. [ 308.031640][T15776] xt_bpf: check failed: parse error [ 308.039910][T15776] __nla_validate_parse: 104 callbacks suppressed [ 308.039933][T15776] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2690'. [ 308.146092][T15781] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.2692'. [ 308.159295][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 308.469238][T15793] netlink: 'syz.4.2697': attribute type 12 has an invalid length. [ 308.544895][T15798] openvswitch: netlink: IP tunnel dst address not specified [ 308.558821][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 308.585733][T15800] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 308.787641][T15807] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2703'. [ 308.832607][T15814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2705'. [ 308.847577][T15807] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2703'. [ 308.908029][T15807] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2703'. [ 308.943269][T15823] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 308.968772][T15807] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2703'. [ 309.002564][T15807] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2703'. [ 309.216778][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 309.225015][ C0] lec:lec_tx_timeout: lec0 [ 309.230094][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 309.246253][T15832] syzkaller0: create flow: hash 3132406072 index 1 [ 309.444083][ T8543] syzkaller0: tun_net_xmit 76 [ 309.449904][ T8543] syzkaller0: tun_net_xmit 48 [ 309.462172][T15831] syzkaller0: delete flow: hash 3132406072 index 1 [ 311.330834][T15846] tipc: Enabled bearer , priority 2 [ 311.521655][T15856] netlink: 'syz.2.2719': attribute type 2 has an invalid length. [ 311.605984][T15852] : entered promiscuous mode [ 312.010139][T15876] team0: Device gtp1 is up. Set it down before adding it as a team port [ 312.346332][T15887] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 312.382891][T15887] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 312.445259][T15899] syzkaller0: entered promiscuous mode [ 312.471916][T15899] syzkaller0: entered allmulticast mode [ 312.497535][T15899] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 312.499389][T15905] 8021q: VLANs not supported on nlmon0 [ 312.517522][T15900] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 312.634267][T15900] bond4: entered promiscuous mode [ 312.639559][T15900] bond4: entered allmulticast mode [ 312.645399][T15900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.669142][T15912] macvlan2: entered promiscuous mode [ 312.674517][T15912] macvlan2: entered allmulticast mode [ 312.683106][T15912] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.771286][T15907] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.782258][T15907] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.207700][T15948] __nla_validate_parse: 41 callbacks suppressed [ 313.207724][T15948] netlink: 401 bytes leftover after parsing attributes in process `syz.2.2746'. [ 313.471103][T15959] netlink: 'syz.1.2750': attribute type 3 has an invalid length. [ 313.500035][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 313.588165][T15966] can: request_module (can-proto-0) failed. [ 314.252629][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 314.260749][ C0] lec:lec_tx_timeout: lec0 [ 314.265993][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.681146][T16007] netlink: 'syz.0.2760': attribute type 11 has an invalid length. [ 315.699108][T16007] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2760'. [ 315.794216][T16007] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2760'. [ 315.983098][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 316.283163][T16042] syzkaller0: entered promiscuous mode [ 316.289118][T16042] syzkaller0: entered allmulticast mode [ 316.302075][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 316.305732][T16048] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2775'. [ 316.317656][T16045] netlink: 'syz.1.2774': attribute type 21 has an invalid length. [ 316.626820][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2778'. [ 316.652978][T16068] netlink: 'syz.1.2782': attribute type 28 has an invalid length. [ 316.679403][T16068] netlink: 'syz.1.2782': attribute type 3 has an invalid length. [ 316.703103][T16068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2782'. [ 316.730681][ T11] block nbd0: Possible stuck request ffff888025290000: control (read@0,4096B). Runtime 30 seconds [ 316.830347][T16073] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2782'. [ 317.378265][T16108] netlink: 'syz.4.2795': attribute type 1 has an invalid length. [ 317.458600][T16108] bond5: entered promiscuous mode [ 317.485287][T16108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.496980][T16119] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 317.709724][T16131] x_tables: duplicate underflow at hook 1 [ 317.795668][T16137] netlink: 'syz.2.2805': attribute type 21 has an invalid length. [ 317.822456][T16137] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.831595][T16137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.839090][T16137] IPv6: NLM_F_CREATE should be set when creating new route [ 317.846471][T16137] IPv6: NLM_F_CREATE should be set when creating new route [ 317.853767][T16137] IPv6: NLM_F_CREATE should be set when creating new route [ 317.985813][T16148] netlink: 'syz.2.2809': attribute type 9 has an invalid length. [ 318.122982][ T5999] udevd[5999]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 318.463369][T16181] netlink: 'syz.0.2819': attribute type 13 has an invalid length. [ 318.483921][T16181] veth0_macvtap: left promiscuous mode [ 318.495352][T16181] macvtap0: entered allmulticast mode [ 318.545917][T16181] macvtap0: refused to change device tx_queue_len [ 318.732547][T16197] xt_TCPMSS: Only works on TCP SYN packets [ 318.868565][T16207] __nla_validate_parse: 5 callbacks suppressed [ 318.868588][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 318.929787][T16218] netlink: 12079 bytes leftover after parsing attributes in process `syz.4.2824'. [ 319.277343][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 319.285544][ C0] lec:lec_tx_timeout: lec0 [ 319.290632][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 319.297662][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'. [ 319.369087][T16232] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 319.397427][T16232] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2831'. [ 319.727317][T16249] netlink: 'syz.3.2835': attribute type 4 has an invalid length. [ 319.756295][T16249] netlink: 'syz.3.2835': attribute type 4 has an invalid length. [ 319.868965][T16252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2836'. [ 319.921011][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2836'. [ 319.922345][T16252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2836'. [ 320.339014][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'. [ 320.861689][T16308] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 320.993498][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.004415][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.013386][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.021728][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.030554][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.106157][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.113778][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.124571][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.143878][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.153148][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.284191][T16314] wg1 speed is unknown, defaulting to 1000 [ 321.704347][T16342] team0: Device gtp1 is up. Set it down before adding it as a team port [ 321.864790][T16350] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 321.930639][T16350] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2863'. [ 321.942097][T16314] chnl_net:caif_netlink_parms(): no params data found [ 322.014028][T16356] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2864'. [ 322.223382][T16363] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 322.282736][T16363] bond7 (unregistering): Released all slaves [ 322.455542][T16314] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.463752][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.482676][T16314] bridge_slave_0: entered allmulticast mode [ 322.504444][T16314] bridge_slave_0: entered promiscuous mode [ 322.518695][T16314] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.526074][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.541205][T16314] bridge_slave_1: entered allmulticast mode [ 322.555452][T16314] bridge_slave_1: entered promiscuous mode [ 322.620797][T16314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.646559][T16314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.799573][T16314] team0: Port device team_slave_0 added [ 322.823147][T16314] team0: Port device team_slave_1 added [ 322.974137][T16314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.986106][T16314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.044078][T16314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.096611][T16401] netlink: 'syz.0.2875': attribute type 1 has an invalid length. [ 323.208119][ T5842] Bluetooth: hci5: command tx timeout [ 323.272378][T16314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.286040][T16314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.320763][T16314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.580442][T16314] hsr_slave_0: entered promiscuous mode [ 323.597229][T16314] hsr_slave_1: entered promiscuous mode [ 323.614578][T16314] debugfs: 'hsr0' already exists in 'hsr' [ 323.626810][T16314] Cannot create hsr debugfs directory [ 323.776491][T16452] sctp: [Deprecated]: syz.4.2887 (pid 16452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.776491][T16452] Use struct sctp_sack_info instead [ 323.932180][T16461] __nla_validate_parse: 4 callbacks suppressed [ 323.932185][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'. [ 323.932202][T16461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'. [ 324.193977][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 324.312754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 324.320940][ C0] lec:lec_tx_timeout: lec0 [ 324.326036][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 324.367075][T16470] hsr_slave_0 (unregistering): left promiscuous mode [ 324.503926][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 325.053701][T16488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2899'. [ 325.107952][T16488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2899'. [ 325.195717][T16491] geneve2: entered promiscuous mode [ 325.203375][T16491] geneve2: entered allmulticast mode [ 325.287502][ T5842] Bluetooth: hci5: command tx timeout [ 325.463723][T16500] lo: entered promiscuous mode [ 325.476435][T16500] tunl0: entered promiscuous mode [ 325.491468][T16500] tipc: Resetting bearer [ 325.504298][T16500] tipc: Resetting bearer [ 325.510139][T16500] gre0: entered promiscuous mode [ 325.536229][T16500] gretap0: entered promiscuous mode [ 325.562390][T16500] erspan0: entered promiscuous mode [ 325.584234][T16500] ip_vti0: entered promiscuous mode [ 325.602727][T16500] ip6_vti0: entered promiscuous mode [ 325.625152][T16500] sit0: entered promiscuous mode [ 325.651705][T16500] ip6tnl0: entered promiscuous mode [ 325.669947][T16500] ip6gre0: entered promiscuous mode [ 325.695517][T16500] ip6gretap0: entered promiscuous mode [ 325.710449][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.727626][T16500] bridge0: entered promiscuous mode [ 325.753354][T16500] bond0: entered promiscuous mode [ 325.759129][T16500] bond_slave_0: entered promiscuous mode [ 325.771731][T16500] bond_slave_1: entered promiscuous mode [ 325.794448][T16500] bridge_slave_1: entered promiscuous mode [ 325.818510][T16500] team0: entered promiscuous mode [ 325.834199][T16500] team_slave_0: entered promiscuous mode [ 325.847231][T16500] team_slave_1: entered promiscuous mode [ 325.858186][T16500] dummy0: entered promiscuous mode [ 325.881626][T16500] nlmon0: entered promiscuous mode [ 325.900106][T16500] caif0: entered promiscuous mode [ 325.916184][T16500] batadv0: entered promiscuous mode [ 325.944210][T16314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 325.987020][T16502] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 326.016277][T16314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.046332][T16314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.104699][T16314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.452694][T16314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.515244][T16314] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.552876][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.560147][ T8541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.601101][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.608534][ T8540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.019737][T16546] openvswitch: netlink: EtherType 50a is less than min 600 [ 327.054023][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 327.135584][T16314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.270253][T16314] veth0_vlan: entered promiscuous mode [ 327.292755][T16314] veth1_vlan: entered promiscuous mode [ 327.355532][T16314] veth0_macvtap: entered promiscuous mode [ 327.367930][ T5842] Bluetooth: hci5: command tx timeout [ 327.391411][T16314] veth1_macvtap: entered promiscuous mode [ 327.458158][T16314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.471033][T16314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.488433][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.525657][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.566274][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.592680][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.753526][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.764908][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.789638][T16574] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 327.848962][T16574] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 327.881782][ T8541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.892056][T16576] syzkaller0: entered promiscuous mode [ 327.898441][ T8541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.906655][T16576] syzkaller0: entered allmulticast mode [ 328.142439][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2850'. [ 328.220970][T16586] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2928'. [ 328.273081][T16593] netlink: 'syz.3.2930': attribute type 10 has an invalid length. [ 328.323746][T16595] netlink: 'syz.3.2930': attribute type 10 has an invalid length. [ 328.841187][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.853003][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.861893][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.891077][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.901218][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.033883][T16610] wg1 speed is unknown, defaulting to 1000 [ 329.275573][T16621] x_tables: unsorted underflow at hook 4 [ 329.333666][T16623] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2941'. [ 329.365430][T16624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2941'. [ 329.449606][ T5842] Bluetooth: hci5: command tx timeout [ 329.539617][T16634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.580679][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.592337][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.629127][T16634] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 329.762395][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.780849][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.810988][T16610] chnl_net:caif_netlink_parms(): no params data found [ 329.869760][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.881138][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.122316][T16610] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.138161][T16610] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.153876][T16610] bridge_slave_0: entered allmulticast mode [ 330.166905][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms [ 330.169618][T16610] bridge_slave_0: entered promiscuous mode [ 330.175011][ C0] lec:lec_tx_timeout: lec0 [ 330.186591][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 330.193101][T16610] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.237223][T16610] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.274784][T16610] bridge_slave_1: entered allmulticast mode [ 330.293649][T16610] bridge_slave_1: entered promiscuous mode [ 330.409716][T16610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.470261][T16666] netlink: 'syz.1.2950': attribute type 1 has an invalid length. [ 330.475168][T16610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.642630][T16610] team0: Port device team_slave_0 added [ 330.680920][T16610] team0: Port device team_slave_1 added [ 330.840865][T16610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.860750][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.917274][T16610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.968423][ T5842] Bluetooth: hci3: command tx timeout [ 330.984877][ T50] tipc: Resetting bearer [ 331.463322][ T50] bond4 (unregistering): (slave gretap2): Releasing active interface [ 331.602999][T16682] netlink: 'syz.4.2952': attribute type 1 has an invalid length. [ 331.930927][ T50] tipc: Disabling bearer [ 332.113585][ T50] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 332.123488][ T50] bond0 (unregistering): Released all slaves [ 332.232100][ T50] bond1 (unregistering): Released all slaves [ 332.245688][ T50] bond2 (unregistering): Released all slaves [ 332.358090][ T50] bond3 (unregistering): Released all slaves [ 332.372837][ T50] bond4 (unregistering): Released all slaves [ 332.486376][ T50] bond5 (unregistering): Released all slaves [ 332.518646][T16634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.867589][ T50] bond6 (unregistering): Released all slaves [ 332.886609][T16610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.895643][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.923271][T16610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.944722][T16693] syz_tun: entered allmulticast mode [ 333.048517][ T5842] Bluetooth: hci3: command tx timeout [ 333.066532][T16693] syz_tun: left allmulticast mode [ 333.191421][T16708] netlink: 'syz.4.2961': attribute type 24 has an invalid length. [ 333.232284][T16610] hsr_slave_0: entered promiscuous mode [ 333.263526][T16610] hsr_slave_1: entered promiscuous mode [ 333.283548][T16610] debugfs: 'hsr0' already exists in 'hsr' [ 333.316831][T16610] Cannot create hsr debugfs directory [ 333.399077][ T50] tipc: Left network mode [ 333.709944][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'. [ 333.970587][T16734] syzkaller0: entered promiscuous mode [ 333.979577][T16734] syzkaller0: entered allmulticast mode [ 334.476623][T16759] Bluetooth: MGMT ver 1.23 [ 334.502415][ T50] hsr_slave_0: left promiscuous mode [ 334.527539][ T50] hsr_slave_1: left promiscuous mode [ 334.616403][ T50] veth0_macvtap: left promiscuous mode [ 334.623811][ T50] veth1_vlan: left promiscuous mode [ 334.630479][ T50] veth0_vlan: left promiscuous mode [ 334.784742][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'. [ 334.794322][T16776] openvswitch: netlink: Unknown nsh attribute 0 [ 335.131582][ T5842] Bluetooth: hci3: command tx timeout [ 335.206875][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 335.215104][ C0] lec:lec_tx_timeout: lec0 [ 335.220247][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 335.610305][T16763] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 335.622722][T16763] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 336.052822][T16792] syzkaller0: entered allmulticast mode [ 336.155520][T16791] netlink: 'syz.3.2976': attribute type 1 has an invalid length. [ 336.167705][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 336.177624][T16791] openvswitch: netlink: Flow actions attr not present in new flow. [ 336.410222][T16804] xt_hashlimit: size too large, truncated to 1048576 [ 336.602256][T16610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.719368][T16610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.744884][T16610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.758811][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 336.868903][T16819] IPVS: Unknown mcast interface: vcan0 [ 336.891057][T16610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 336.929534][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 337.021186][T16830] netlink: 'syz.4.2986': attribute type 10 has an invalid length. [ 337.211679][ T5842] Bluetooth: hci3: command tx timeout [ 337.297803][T16849] syzkaller1: entered promiscuous mode [ 337.307040][T16849] syzkaller1: entered allmulticast mode [ 337.319683][T16843] netlink: 'syz.3.2988': attribute type 4 has an invalid length. [ 337.349009][T16843] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2988'. [ 337.390855][T16849] syzkaller0: entered promiscuous mode [ 337.409175][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 337.425474][T16849] syzkaller0: entered allmulticast mode [ 337.537292][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'. [ 337.542133][T16859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'. [ 337.592862][T16859] xfrm2: entered promiscuous mode [ 337.599448][T16859] xfrm2: entered allmulticast mode [ 337.684150][T16864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.721558][T16610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.821089][T16610] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.879482][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.886756][ T8544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.939242][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.946554][ T8544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.044880][T16882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3000'. [ 338.137593][T16885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2999'. [ 338.319419][T16892] netlink: 'syz.3.3003': attribute type 10 has an invalid length. [ 338.352970][T16892] team0: Device ipvlan1 failed to register rx_handler [ 338.440587][T16904] netlink: 'syz.4.3006': attribute type 4 has an invalid length. [ 338.476260][T16904] netlink: 'syz.4.3006': attribute type 4 has an invalid length. [ 338.761316][T16610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.911856][T16921] tipc: Resetting bearer [ 338.978642][T16921] tipc: Disabling bearer [ 339.339648][T16610] veth0_vlan: entered promiscuous mode [ 339.367601][T16610] veth1_vlan: entered promiscuous mode [ 339.421769][T16610] veth0_macvtap: entered promiscuous mode [ 339.477113][T16610] veth1_macvtap: entered promiscuous mode [ 339.522203][T16958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.555763][T16958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.560624][T16610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.631431][T16610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.682238][ T8541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.735745][ T8541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.766385][ T8541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.810719][ T8541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.883765][T16978] __nla_validate_parse: 4 callbacks suppressed [ 339.883788][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3024'. [ 339.927821][T16978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.993602][ T8549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.013405][ T8549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.081364][ T8540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.120093][ T8540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.227372][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 340.235743][ C0] lec:lec_tx_timeout: lec0 [ 340.240679][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.462977][T17009] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3033'. [ 340.480568][T17010] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3033'. [ 340.525287][T17014] openvswitch: netlink: Missing key (keys=40, expected=100) [ 340.558539][T17016] netlink: 'syz.0.3035': attribute type 3 has an invalid length. [ 340.731161][T17023] netlink: 'syz.4.3036': attribute type 1 has an invalid length. [ 340.831360][T17032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3041'. [ 340.876050][T17023] bond6: entered promiscuous mode [ 340.903573][T17023] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.938929][T17023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3036'. [ 341.066267][T17040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3043'. [ 341.154884][T17048] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 341.201196][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.222732][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.233066][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.252098][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.262506][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.301050][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 341.435401][T17049] wg1 speed is unknown, defaulting to 1000 [ 341.655536][T17049] chnl_net:caif_netlink_parms(): no params data found [ 341.740325][T17049] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.747905][T17049] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.755119][T17049] bridge_slave_0: entered allmulticast mode [ 341.763114][T17049] bridge_slave_0: entered promiscuous mode [ 341.773617][T17049] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.781508][T17049] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.789487][T17049] bridge_slave_1: entered allmulticast mode [ 341.798336][T17049] bridge_slave_1: entered promiscuous mode [ 341.829592][T17049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.841933][T17049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.847081][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 341.875544][T17049] team0: Port device team_slave_0 added [ 341.884755][T17049] team0: Port device team_slave_1 added [ 341.912297][T17049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.919885][T17049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.946794][T17049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.960472][T17049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.968139][T17049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.994447][T17049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.045539][T17049] hsr_slave_0: entered promiscuous mode [ 342.052621][T17049] hsr_slave_1: entered promiscuous mode [ 342.059236][T17049] debugfs: 'hsr0' already exists in 'hsr' [ 342.064983][T17049] Cannot create hsr debugfs directory [ 342.378137][T17049] bond0: (slave netdevsim0): Releasing backup interface [ 343.366998][ T5842] Bluetooth: hci2: command tx timeout [ 344.017810][T17039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.052989][T17049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.109639][T17049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.173090][T17049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.215777][T17078] syzkaller0: entered promiscuous mode [ 344.221951][T17078] syzkaller0: entered allmulticast mode [ 344.229635][T17049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.243806][T17076] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3050'. [ 344.269869][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 344.279639][T17082] bridge_slave_0: default FDB implementation only supports local addresses [ 344.579900][T17106] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 344.639551][T17049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.666610][T17106] netlink: 'syz.4.3056': attribute type 1 has an invalid length. [ 344.742766][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3058'. [ 344.744676][T17049] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.843915][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.851188][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.872636][T17124] SET target dimension over the limit! [ 344.912157][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.919619][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.072862][T17131] ipt_REJECT: TCP_RESET invalid for non-tcp [ 345.079262][T17128] ipt_REJECT: TCP_RESET invalid for non-tcp [ 345.082797][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 345.256738][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 345.264870][ C0] lec:lec_tx_timeout: lec0 [ 345.269864][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 345.448502][ T5842] Bluetooth: hci2: command tx timeout [ 345.508948][T17049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.572798][T17049] veth0_vlan: entered promiscuous mode [ 345.593280][T17049] veth1_vlan: entered promiscuous mode [ 345.646344][T17049] veth0_macvtap: entered promiscuous mode [ 345.674073][T17049] veth1_macvtap: entered promiscuous mode [ 345.725849][T17049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.739856][T17049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.791283][ T8549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.813204][ T8549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.826001][ T8549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.829539][T17165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3072'. [ 345.854173][ T8549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.014107][ T8549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.055790][ T8549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.070538][T17171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3074'. [ 346.120165][T17171] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3074'. [ 346.129311][T17171] netlink: 'syz.0.3074': attribute type 5 has an invalid length. [ 346.138471][T17171] netlink: 'syz.0.3074': attribute type 6 has an invalid length. [ 346.146238][T17171] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3074'. [ 346.159151][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3076'. [ 346.214366][T17177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 346.270882][ T8541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.297869][ T8541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.315982][T17182] macvlan2: entered promiscuous mode [ 346.323878][T17182] macvlan2: entered allmulticast mode [ 346.686297][T17208] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20003 [ 346.698597][T17208] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20003 [ 346.720100][T17208] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20003 [ 346.732677][T17208] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20003 [ 346.767075][T17208] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20003 [ 346.775338][T17208] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20003 [ 346.808721][ T11] block nbd0: Possible stuck request ffff888025290000: control (read@0,4096B). Runtime 60 seconds [ 346.951179][T17218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3086'. [ 346.995828][T17221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3086'. [ 347.477674][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.487669][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.497575][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.510241][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.519583][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.527598][ T5833] Bluetooth: hci2: command tx timeout [ 347.620544][T17236] wg1 speed is unknown, defaulting to 1000 [ 347.783071][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 348.097423][T17265] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3099'. [ 348.116571][T17236] chnl_net:caif_netlink_parms(): no params data found [ 348.230445][T17269] bond1 (unregistering): Released all slaves [ 348.465209][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.479031][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.486356][T17236] bridge_slave_0: entered allmulticast mode [ 348.495593][T17236] bridge_slave_0: entered promiscuous mode [ 348.505773][T17236] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.525590][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.534621][T17236] bridge_slave_1: entered allmulticast mode [ 348.547787][T17236] bridge_slave_1: entered promiscuous mode [ 348.637575][T17236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.675667][T17236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.769851][T17298] netlink: 'syz.3.3109': attribute type 1 has an invalid length. [ 348.785739][T17236] team0: Port device team_slave_0 added [ 348.800944][T17236] team0: Port device team_slave_1 added [ 348.851673][T17298] batman_adv: batadv0: Adding interface: geneve2 [ 348.858240][T17298] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 348.874730][T17300] xt_l2tp: v2 tid > 0xffff: 1114244 [ 348.882919][T17236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.916791][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.945980][T17236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.977399][T17236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.985633][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.012492][T17236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.211361][T17236] hsr_slave_0: entered promiscuous mode [ 349.231405][T17236] hsr_slave_1: entered promiscuous mode [ 349.239931][T17236] debugfs: 'hsr0' already exists in 'hsr' [ 349.255592][T17236] Cannot create hsr debugfs directory [ 349.569336][T17323] Bluetooth: MGMT ver 1.23 [ 349.607495][ T5842] Bluetooth: hci0: command tx timeout [ 349.607710][ T5845] Bluetooth: hci2: command tx timeout [ 350.148286][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 350.160452][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3125'. [ 350.183465][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 350.196990][T17351] openvswitch: netlink: Unknown nsh attribute 0 [ 350.204684][T17351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.276951][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 350.285127][ C0] lec:lec_tx_timeout: lec0 [ 350.290132][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 350.368075][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.375564][T17343] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.555864][T17343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.577354][T17343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.875977][T17348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'. [ 350.939913][ T8544] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.962343][ T8544] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.975308][ T8544] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.037396][T17363] nbd: must specify an index to disconnect [ 351.055890][ T8544] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.066494][T17365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.335361][T17380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3132'. [ 351.687275][ T5845] Bluetooth: hci0: command tx timeout [ 353.767132][ T5845] Bluetooth: hci0: command tx timeout [ 354.271468][T17380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.290653][T17236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.356624][T17236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.470927][T17236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.544530][T17418] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 354.561794][T17418] team0: Device macvlan0 is already an upper device of the team interface [ 354.632022][T17421] team0: No ports can be present during mode change [ 354.639964][T17236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.692714][T17431] tipc: Started in network mode [ 354.710098][T17431] tipc: Node identity e0000001, cluster identity 4711 [ 354.737431][T17431] tipc: Enabling of bearer rejected, failed to enable media [ 354.931988][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 354.941330][T17236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.995980][T17236] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.021262][T17454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3150'. [ 355.043845][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.051283][ T8541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.158934][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.166267][ T8541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.208020][T17454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3150'. [ 355.297440][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 355.305548][ C0] lec:lec_tx_timeout: lec0 [ 355.310723][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 355.391980][T17470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3155'. [ 355.459573][T17473] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 355.523274][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3156'. [ 355.577054][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3156'. [ 355.578456][T17480] lo: entered allmulticast mode [ 355.703834][T17484] syzkaller0: entered promiscuous mode [ 355.725638][T17484] syzkaller0: entered allmulticast mode [ 355.847982][ T5845] Bluetooth: hci0: command tx timeout [ 355.920310][T17236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.143328][T17496] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3162'. [ 356.325310][T17505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3164'. [ 356.361213][T17505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3164'. [ 356.671682][T17236] veth0_vlan: entered promiscuous mode [ 356.703586][T17236] veth1_vlan: entered promiscuous mode [ 356.754814][T17236] veth0_macvtap: entered promiscuous mode [ 356.768127][T17236] veth1_macvtap: entered promiscuous mode [ 356.798422][T17236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.821062][T17236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.847153][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.862350][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.872386][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.881472][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.001817][ T8549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.028245][ T8549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.131269][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.152555][T17531] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 357.162912][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.478685][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3177'. [ 357.860143][T17568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.933945][T17571] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3185'. [ 357.945115][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 357.992459][T17573] netlink: 'syz.4.3186': attribute type 3 has an invalid length. [ 358.140128][T17579] netlink: 'syz.2.3189': attribute type 5 has an invalid length. [ 358.156288][T17579] geneve2: entered promiscuous mode [ 358.163114][T17579] geneve2: entered allmulticast mode [ 358.171800][ T8544] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 358.182913][ T8544] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 358.206896][ T8544] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 358.230522][ T8544] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 358.423134][T17590] : entered promiscuous mode [ 358.559928][T17600] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 359.687086][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.708891][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.729976][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.747496][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.767479][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.131265][T17645] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 361.176059][ T5835] syz_tun (unregistering): left allmulticast mode [ 361.201461][ T5835] bond0: (slave syz_tun): Releasing backup interface [ 361.304766][T17646] wg1 speed is unknown, defaulting to 1000 [ 361.406415][T17663] __nla_validate_parse: 4 callbacks suppressed [ 361.406435][T17663] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3213'. [ 361.536729][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6220 ms [ 361.544958][ C0] lec:lec_tx_timeout: lec0 [ 361.550197][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 361.616823][T17646] chnl_net:caif_netlink_parms(): no params data found [ 361.619686][T17674] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3216'. [ 361.638744][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 361.647976][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 361.746584][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.753980][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.774797][T17646] bridge_slave_0: entered allmulticast mode [ 361.783547][T17646] bridge_slave_0: entered promiscuous mode [ 361.798618][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.805922][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.813822][T17646] bridge_slave_1: entered allmulticast mode [ 361.823018][T17646] bridge_slave_1: entered promiscuous mode [ 361.847110][ T5842] Bluetooth: hci1: command tx timeout [ 361.880800][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.912577][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.015069][T17646] team0: Port device team_slave_0 added [ 362.025558][T17646] team0: Port device team_slave_1 added [ 362.077224][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.084390][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.113465][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.133414][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.141955][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.159478][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3221'. [ 362.191015][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.222181][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3221'. [ 362.271407][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3221'. [ 362.301016][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3221'. [ 362.361908][T17646] hsr_slave_0: entered promiscuous mode [ 362.381674][T17646] hsr_slave_1: entered promiscuous mode [ 362.391850][T17646] debugfs: 'hsr0' already exists in 'hsr' [ 362.399372][T17646] Cannot create hsr debugfs directory [ 362.405388][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3221'. [ 362.405979][T17704] batman_adv: batadv0: Adding interface: dummy0 [ 362.421897][T17704] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.450031][T17704] batman_adv: batadv0: Interface activated: dummy0 [ 362.461490][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3221'. [ 363.055675][T17646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.090150][T17646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.222418][T17646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.237101][T17646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.277357][T17736] syzkaller1: entered promiscuous mode [ 363.282890][T17736] syzkaller1: entered allmulticast mode [ 363.374045][T17646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.386219][T17646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.521293][T17752] netlink: 'syz.3.3232': attribute type 64 has an invalid length. [ 363.568606][T17646] batman_adv: batadv0: Removing interface: netdevsim0 [ 363.576560][ T981] IPVS: starting estimator thread 0... [ 363.579666][T17646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.594541][T17646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.679897][T17755] IPVS: using max 29 ests per chain, 69600 per kthread [ 363.887489][T12931] IPVS: starting estimator thread 0... [ 363.894602][T17763] IPVS: nq: FWM 3 0x00000003 - no destination available [ 363.910450][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 363.911911][T17646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.928584][ T5842] Bluetooth: hci1: command tx timeout [ 363.962489][T17646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.008451][T17646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.019115][T17764] IPVS: using max 50 ests per chain, 120000 per kthread [ 364.048185][T17646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.282382][T17646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.314062][T17786] tipc: Enabling of bearer rejected, failed to enable media [ 364.354679][T17646] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.389662][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.396898][ T8543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.419089][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.426343][ T8543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.812297][T17812] FAULT_INJECTION: forcing a failure. [ 364.812297][T17812] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 364.844538][T17812] CPU: 1 UID: 0 PID: 17812 Comm: syz.2.3247 Not tainted syzkaller #0 PREEMPT(full) [ 364.844567][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.844578][T17812] Call Trace: [ 364.844586][T17812] [ 364.844593][T17812] dump_stack_lvl+0xe8/0x150 [ 364.844625][T17812] should_fail_ex+0x412/0x560 [ 364.844653][T17812] _copy_to_user+0x31/0xb0 [ 364.844684][T17812] simple_read_from_buffer+0xe1/0x170 [ 364.844709][T17812] proc_fail_nth_read+0x1bb/0x230 [ 364.844739][T17812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.844780][T17812] ? rw_verify_area+0x2a6/0x4d0 [ 364.844804][T17812] ? tun_chr_write_iter+0xe0/0x200 [ 364.844822][T17812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.844848][T17812] vfs_read+0x20c/0xa70 [ 364.844871][T17812] ? fdget_pos+0x246/0x320 [ 364.844897][T17812] ? __pfx___mutex_lock+0x10/0x10 [ 364.844917][T17812] ? __pfx_vfs_read+0x10/0x10 [ 364.844944][T17812] ? __fget_files+0x2a/0x420 [ 364.844969][T17812] ? __fget_files+0x3a0/0x420 [ 364.844988][T17812] ? __fget_files+0x2a/0x420 [ 364.845017][T17812] ksys_read+0x150/0x270 [ 364.845047][T17812] ? __pfx_ksys_read+0x10/0x10 [ 364.845088][T17812] do_syscall_64+0xe2/0xf80 [ 364.845109][T17812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.845127][T17812] ? trace_irq_disable+0x37/0x100 [ 364.845147][T17812] ? clear_bhb_loop+0x60/0xb0 [ 364.845171][T17812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.845190][T17812] RIP: 0033:0x7f36e155b78e [ 364.845208][T17812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.845225][T17812] RSP: 002b:00007f36e23e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.845246][T17812] RAX: ffffffffffffffda RBX: 00007f36e23e66c0 RCX: 00007f36e155b78e [ 364.845259][T17812] RDX: 000000000000000f RSI: 00007f36e23e60a0 RDI: 0000000000000004 [ 364.845270][T17812] RBP: 00007f36e23e6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.845281][T17812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.845292][T17812] R13: 00007f36e1816038 R14: 00007f36e1815fa0 R15: 00007ffc3c5baf38 [ 364.845324][T17812] [ 364.935102][T17646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.255701][T17646] veth0_vlan: entered promiscuous mode [ 365.269437][T17646] veth1_vlan: entered promiscuous mode [ 365.308592][T17646] veth0_macvtap: entered promiscuous mode [ 365.320180][T17646] veth1_macvtap: entered promiscuous mode [ 365.342915][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.360196][T17822] team0: Cannot enslave team device to itself [ 365.366427][T17824] team0: Cannot enslave team device to itself [ 365.391185][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.419804][ T5887] IPVS: starting estimator thread 0... [ 365.442694][ T8540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.457410][ T8540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.470909][ T8540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.491257][ T8540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.538601][T17830] IPVS: using max 31 ests per chain, 74400 per kthread [ 365.755913][ T8540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.775343][ T8540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.861955][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.880500][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.905307][T17847] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 366.008079][ T5842] Bluetooth: hci1: command tx timeout [ 366.093429][T17854] syzkaller1: entered promiscuous mode [ 366.099309][T17854] syzkaller1: entered allmulticast mode [ 366.391450][T17876] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 366.412687][T17879] __nla_validate_parse: 67 callbacks suppressed [ 366.412709][T17879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3263'. [ 366.508410][T17887] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3266'. [ 366.519115][T17886] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3266'. [ 366.580047][T17890] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3267'. [ 366.607203][T17890] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3267'. [ 366.725402][T17897] netlink: 'syz.3.3268': attribute type 21 has an invalid length. [ 366.734818][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 366.778636][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 366.862396][T17903] team0: Device gtp0 is up. Set it down before adding it as a team port [ 366.862888][T17905] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3271'. [ 366.923386][T17907] gre1: entered promiscuous mode [ 366.931859][T17907] gre1: entered allmulticast mode [ 367.170552][T17874] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 367.286709][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 367.294900][ C0] lec:lec_tx_timeout: lec0 [ 367.301977][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 367.377179][T17933] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 367.458716][T17939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.484236][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 367.673165][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'. [ 368.096908][ T5842] Bluetooth: hci1: command tx timeout [ 368.407156][ T5842] Bluetooth: hci0: command 0x0c20 tx timeout [ 368.596422][T17986] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 368.637642][T17989] netlink: 'syz.3.3299': attribute type 1 has an invalid length. [ 368.655510][T17986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.206500][T18021] xt_recent: Unsupported userspace flags (000000b1) [ 370.207464][T18062] nbd: must specify at least one socket [ 370.455473][T18075] block nbd1: Unsupported socket: should be TCP or UNIX. [ 370.713498][T18093] x_tables: unsorted entry at hook 3 [ 371.121391][T18113] Cannot find del_set index 1 as target [ 371.260370][T18126] syzkaller0: entered promiscuous mode [ 371.266641][T18126] syzkaller0: entered allmulticast mode [ 371.458124][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.469108][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.481790][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.498674][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.499148][T18133] tap0: tun_chr_ioctl cmd 2148553947 [ 371.519568][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.615657][T18134] wg1 speed is unknown, defaulting to 1000 [ 371.915644][T18134] chnl_net:caif_netlink_parms(): no params data found [ 372.085761][T18154] __nla_validate_parse: 10 callbacks suppressed [ 372.085785][T18154] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3348'. [ 372.146652][T18162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3351'. [ 372.234614][T18169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.256594][T18134] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.296881][T18134] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.328721][T18134] bridge_slave_0: entered allmulticast mode [ 372.357051][T18134] bridge_slave_0: entered promiscuous mode [ 372.403265][T18134] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.428328][T18134] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.446374][T18134] bridge_slave_1: entered allmulticast mode [ 372.467318][T18134] bridge_slave_1: entered promiscuous mode [ 372.582494][T18134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.600626][T18196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3359'. [ 372.627956][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3359'. [ 372.642550][T18134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.775557][T18202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3362'. [ 372.829841][T18134] team0: Port device team_slave_0 added [ 372.853877][T18134] team0: Port device team_slave_1 added [ 372.974133][T18134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.982371][T18134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.010994][T18134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.046195][T18134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.054598][T18134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.074774][T18220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3368'. [ 373.084264][T18134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.126713][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 373.134780][ C0] lec:lec_tx_timeout: lec0 [ 373.139830][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 373.166051][T18224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3367'. [ 373.239435][T18134] hsr_slave_0: entered promiscuous mode [ 373.258975][T18134] hsr_slave_1: entered promiscuous mode [ 373.283741][T18134] debugfs: 'hsr0' already exists in 'hsr' [ 373.310842][T18134] Cannot create hsr debugfs directory [ 373.344640][T18231] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3369'. [ 373.607600][ T5842] Bluetooth: hci4: command tx timeout [ 373.834746][T18261] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3381'. [ 373.844680][T18261] sctp: [Deprecated]: syz.0.3381 (pid 18261) Use of int in maxseg socket option. [ 373.844680][T18261] Use struct sctp_assoc_value instead [ 373.973123][T18134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 374.024675][T18134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 374.061595][T18268] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3384'. [ 374.085451][T18134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 374.132418][T18134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 374.208220][T18271] syzkaller0: entered promiscuous mode [ 374.209728][T18280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.213970][T18271] syzkaller0: entered allmulticast mode [ 374.396438][T18287] syzkaller0: entered promiscuous mode [ 374.405169][T18287] syzkaller0: entered allmulticast mode [ 374.583945][T18293] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 374.619116][T18134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.671508][T18134] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.748044][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.755290][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.811758][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.819017][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.360764][T18339] geneve3: entered promiscuous mode [ 375.503258][T18134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.534252][T18346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.699983][ T5842] Bluetooth: hci4: command tx timeout [ 375.932000][T18365] netlink: 'syz.4.3415': attribute type 4 has an invalid length. [ 375.970974][T18134] veth0_vlan: entered promiscuous mode [ 376.033875][T18134] veth1_vlan: entered promiscuous mode [ 376.089738][T18134] veth0_macvtap: entered promiscuous mode [ 376.118774][T18134] veth1_macvtap: entered promiscuous mode [ 376.179740][T18134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.240132][T18134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.472939][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.515878][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.551616][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.592379][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.849765][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.890392][ T11] block nbd0: Possible stuck request ffff888025290000: control (read@0,4096B). Runtime 90 seconds [ 376.904148][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.028054][ T8540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.046255][ T8540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.249774][T18409] Cannot find add_set index 0 as target [ 377.263390][T18410] __nla_validate_parse: 9 callbacks suppressed [ 377.263411][T18410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3430'. [ 377.378894][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3432'. [ 377.767271][ T5842] Bluetooth: hci4: command tx timeout [ 378.147814][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 378.156694][ C0] lec:lec_tx_timeout: lec0 [ 378.161951][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.847591][ T5842] Bluetooth: hci4: command tx timeout [ 379.883848][T18392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.070336][T18442] xt_l2tp: wrong L2TP version: 0 [ 380.541843][T18461] IPVS: Error connecting to the multicast addr [ 380.552823][T18467] syzkaller0: entered promiscuous mode [ 380.568036][T18467] syzkaller0: entered allmulticast mode [ 380.741362][T18479] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 380.772739][T18481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3452'. [ 380.784509][T18481] netlink: 'syz.4.3452': attribute type 1 has an invalid length. [ 380.955882][T18487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3454'. [ 380.995910][T18489] netlink: 'syz.4.3455': attribute type 9 has an invalid length. [ 381.012608][T18494] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 381.016500][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3454'. [ 381.077323][T18489] sctp: [Deprecated]: syz.4.3455 (pid 18489) Use of int in maxseg socket option. [ 381.077323][T18489] Use struct sctp_assoc_value instead [ 381.086942][T18487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3454'. [ 381.101855][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3454'. [ 381.108397][T18492] sctp: [Deprecated]: syz.4.3455 (pid 18492) Use of int in maxseg socket option. [ 381.108397][T18492] Use struct sctp_assoc_value instead [ 381.126129][T18487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3454'. [ 381.333588][T18503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3460'. [ 381.615420][T18507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3461'. [ 381.995061][T18532] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 382.184916][T18539] netlink: 'syz.5.3470': attribute type 1 has an invalid length. [ 382.210995][T18537] syzkaller1: entered promiscuous mode [ 382.216533][T18537] syzkaller1: entered allmulticast mode [ 382.317107][T18549] sctp: [Deprecated]: syz.0.3473 (pid 18549) Use of int in max_burst socket option. [ 382.317107][T18549] Use struct sctp_assoc_value instead [ 382.399646][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 382.662536][T18564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3477'. [ 382.763176][T18564] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.771743][T18564] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.783521][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3480'. [ 382.831571][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 382.832390][T18576] netlink: 'syz.3.3479': attribute type 12 has an invalid length. [ 382.848876][T18575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.884250][T18583] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 382.921759][T18575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.176726][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 383.184798][ C0] lec:lec_tx_timeout: lec0 [ 383.189933][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 383.229177][T18597] syz_tun: entered allmulticast mode [ 383.269664][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3483'. [ 383.386488][T18597] syz_tun (unregistering): left allmulticast mode [ 383.685917][T18623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.725362][T18624] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3495'. [ 383.758047][T18623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.797752][T18623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.831639][T18623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.890131][T18623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.149975][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 384.312667][T18642] team0 (unregistering): Port device team_slave_0 removed [ 384.354512][T18642] team0 (unregistering): Port device team_slave_1 removed [ 384.528219][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3506'. [ 384.758400][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3510'. [ 384.798856][T18676] syzkaller0: entered allmulticast mode [ 384.805739][T18675] netlink: 'syz.2.3510': attribute type 3 has an invalid length. [ 384.819916][T18676] netlink: 'syz.5.3511': attribute type 1 has an invalid length. [ 384.873628][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3511'. [ 384.950556][T18676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.958483][T18681] tipc: Failed to obtain node identity [ 384.964133][T18681] tipc: Enabling of bearer rejected, failed to enable media [ 385.285950][T18709] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 385.701180][T18736] : renamed from bond0 (while UP) [ 387.541773][T18833] __nla_validate_parse: 6 callbacks suppressed [ 387.541794][T18833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3550'. [ 387.652540][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'. [ 387.671758][T18839] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3552'. [ 387.723451][T18842] netlink: 16199 bytes leftover after parsing attributes in process `syz.4.3553'. [ 387.917567][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 388.007663][T18858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.038488][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3560'. [ 388.069316][T18858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.196781][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 388.204890][ C0] lec:lec_tx_timeout: lec0 [ 388.210003][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 388.531685][T18873] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.539522][T18873] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.764408][T18873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.787909][T18873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.944484][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.974121][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.058521][T18906] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3572'. [ 389.084572][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.101661][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.393431][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3575'. [ 389.674269][T18939] veth0: entered promiscuous mode [ 389.685047][T18939] bridge0: entered promiscuous mode [ 389.710380][T18939] bridge0: left promiscuous mode [ 389.715787][T18939] veth0: left promiscuous mode [ 389.763453][T18952] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3584'. [ 389.941936][T18958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'. [ 389.988662][T18964] netlink: 'syz.4.3587': attribute type 10 has an invalid length. [ 390.007713][T18964] batman_adv: batadv0: Interface deactivated: dummy0 [ 390.045339][T18968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.049384][T18964] batman_adv: batadv0: Removing interface: dummy0 [ 390.081566][T18964] team0: Port device dummy0 added [ 390.493002][T18988] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 390.748145][T19010] wg1 speed is unknown, defaulting to 1000 [ 391.073448][T19030] xt_cgroup: path and classid specified [ 391.260179][T19041] netlink: 'syz.3.3608': attribute type 1 has an invalid length. [ 391.295803][ T8544] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x8b [ 391.524207][T19041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.921970][T19070] wg1 speed is unknown, defaulting to 1000 [ 391.979787][T19076] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 392.426644][ T8545] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.445216][ T8545] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.474999][ T8545] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.507877][ T8545] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.630509][T19112] __nla_validate_parse: 7 callbacks suppressed [ 392.630532][T19112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3624'. [ 392.681518][T19114] netlink: 'syz.3.3625': attribute type 1 has an invalid length. [ 392.733963][T19112] bond2 (unregistering): Released all slaves [ 392.852947][T19119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3626'. [ 393.001858][T19125] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3629'. [ 393.038565][T19125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3629'. [ 393.049929][T19128] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3631'. [ 393.216989][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 393.225079][ C0] lec:lec_tx_timeout: lec0 [ 393.230943][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 393.235658][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3635'. [ 393.275496][T19139] xt_TCPMSS: Only works on TCP SYN packets [ 393.340279][T19145] netlink: 'syz.0.3636': attribute type 6 has an invalid length. [ 393.356622][T19138] bridge0: port 3(veth0_to_bridge) entered blocking state [ 393.368550][T19138] bridge0: port 3(veth0_to_bridge) entered disabled state [ 393.385194][T19138] veth0_to_bridge: entered allmulticast mode [ 393.400130][T19138] veth0_to_bridge: entered promiscuous mode [ 393.699705][T19161] veth1_macvtap: left promiscuous mode [ 393.707287][T19162] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3641'. [ 393.730794][T19161] veth1_macvtap: entered promiscuous mode [ 393.749002][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3642'. [ 393.769275][T19162] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3641'. [ 393.775455][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3642'. [ 393.778984][T19162] netlink: 'syz.4.3641': attribute type 5 has an invalid length. [ 393.832340][ T8540] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.876817][ T8540] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.928833][T19176] netlink: 'syz.2.3644': attribute type 1 has an invalid length. [ 393.928913][T19172] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 393.961877][ T8541] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.972889][ T8541] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.992467][T19176] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 393.993268][T19172] netlink: 'syz.0.3643': attribute type 4 has an invalid length. [ 394.132797][T19192] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 394.154830][T19192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.226263][T19192] openvswitch: netlink: Multiple metadata blocks provided [ 394.682976][T19226] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 394.684212][T19223] ip6gre1: entered allmulticast mode [ 394.741168][T19223] block nbd0: Unsupported socket: should be TCP or UNIX. [ 395.086337][T19244] netlink: 'syz.5.3666': attribute type 11 has an invalid length. [ 395.150413][T19249] Cannot find set identified by id 4 to match [ 395.308571][T19253] syzkaller0: entered promiscuous mode [ 395.319679][T19253] syzkaller0: entered allmulticast mode [ 395.700295][T19282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.748166][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805975c800: rx timeout, send abort [ 395.861195][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.869157][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.080099][T19306] netlink: 'syz.5.3682': attribute type 3 has an invalid length. [ 396.248312][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805975ec00: rx timeout, send abort [ 396.257827][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805975c800: abort rx timeout. Force session deactivation [ 396.294551][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805975ec00: connection exists (fe ff). last cmd: 20 [ 396.332129][T19319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 396.392008][T19321] netlink: 'syz.2.3684': attribute type 2 has an invalid length. [ 396.504436][T19321] : entered promiscuous mode [ 396.544414][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805975e800: rx timeout, send abort [ 397.052761][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805975e800: abort rx timeout. Force session deactivation [ 397.327152][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804150f400: rx timeout, send abort [ 397.835566][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804150f400: abort rx timeout. Force session deactivation [ 398.107923][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804150c000: rx timeout, send abort [ 398.118861][T19343] syzkaller0: entered promiscuous mode [ 398.124519][T19343] syzkaller0: entered allmulticast mode [ 398.247225][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 398.255561][ C0] lec:lec_tx_timeout: lec0 [ 398.260499][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 398.616269][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804150c000: abort rx timeout. Force session deactivation [ 398.891746][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804150ec00: rx timeout, send abort [ 399.132608][T19312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.371137][T19370] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 399.400043][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804150ec00: abort rx timeout. Force session deactivation [ 399.410894][T19370] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 399.456565][T19377] netlink: 'syz.5.3699': attribute type 178 has an invalid length. [ 399.480452][T19379] IPVS: Error connecting to the multicast addr [ 399.685497][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880336b3c00: rx timeout, send abort [ 399.898365][T19398] __nla_validate_parse: 13 callbacks suppressed [ 399.898386][T19398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3706'. [ 400.193929][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880336b3c00: abort rx timeout. Force session deactivation [ 400.362451][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3713'. [ 400.454534][T19418] netlink: 'syz.5.3713': attribute type 1 has an invalid length. [ 400.473401][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e978800: rx timeout, send abort [ 400.481549][T19425] sit2: entered promiscuous mode [ 400.509439][T19425] sit2: entered allmulticast mode [ 400.634075][T19433] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3716'. [ 400.711787][T19438] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20002 [ 400.983150][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e978800: abort rx timeout. Force session deactivation [ 401.228052][T19458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3724'. [ 401.255551][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807716bc00: rx timeout, send abort [ 401.426626][T19468] netlink: 'syz.2.3727': attribute type 29 has an invalid length. [ 401.437926][T19468] netlink: 'syz.2.3727': attribute type 1 has an invalid length. [ 401.763984][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807716bc00: abort rx timeout. Force session deactivation [ 401.826751][T19481] netlink: 'syz.2.3731': attribute type 1 has an invalid length. [ 401.860340][T19481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.871098][T19482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3730'. [ 401.879897][T19481] bond0: (slave veth0_to_bond): making interface the new active one [ 401.890631][T19481] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 401.912635][T19482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3730'. [ 402.042470][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807716ac00: rx timeout, send abort [ 402.291063][T19470] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 402.297629][T19470] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 402.371543][T19470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 402.377934][T19470] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 402.420990][T19470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 402.431078][T19470] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 402.458376][T19470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 402.478744][T19470] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 402.529155][T19470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 402.535164][T19470] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 402.551185][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807716ac00: abort rx timeout. Force session deactivation [ 402.581513][T19470] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 402.587753][T19470] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 402.719191][T19503] gtp0: entered promiscuous mode [ 402.724698][T19503] gtp0: entered allmulticast mode [ 402.821706][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077169800: rx timeout, send abort [ 403.149170][T19526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3744'. [ 403.266891][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 403.275081][ C0] lec:lec_tx_timeout: lec0 [ 403.279729][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 403.330268][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077169800: abort rx timeout. Force session deactivation [ 403.425958][T19542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3748'. [ 403.548318][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'. [ 403.601821][T19556] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3753'. [ 403.605691][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077169000: rx timeout, send abort [ 403.752692][T19568] syzkaller0: entered promiscuous mode [ 403.763523][T19568] syzkaller0: entered allmulticast mode [ 403.832889][T19573] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 403.835691][T19572] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 403.899643][T19576] netlink: 'syz.2.3759': attribute type 1 has an invalid length. [ 403.912097][T19576] netlink: 'syz.2.3759': attribute type 11 has an invalid length. [ 403.951645][T19576] netlink: 'syz.2.3759': attribute type 3 has an invalid length. [ 403.965230][T19576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.081734][T19585] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 404.119180][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077169000: abort rx timeout. Force session deactivation [ 404.263986][T19591] netlink: 'syz.0.3766': attribute type 1 has an invalid length. [ 404.341045][T19591] bond2: entered promiscuous mode [ 404.347569][T19591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.396569][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077168c00: rx timeout, send abort [ 404.520788][T19601] netlink: 'syz.0.3769': attribute type 21 has an invalid length. [ 404.646384][T19607] gtp1: entered promiscuous mode [ 404.672986][T19607] gtp1: entered allmulticast mode [ 404.878377][T19619] pim6reg1: entered promiscuous mode [ 404.884302][T19619] pim6reg1: entered allmulticast mode [ 404.904900][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077168c00: abort rx timeout. Force session deactivation [ 404.995869][T19619] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 405.036138][T19619] bond3 (unregistering): Released all slaves [ 405.176100][T19633] __nla_validate_parse: 9 callbacks suppressed [ 405.176121][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3780'. [ 405.186012][T19638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3782'. [ 405.191858][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802962d400: rx timeout, send abort [ 405.201298][T19638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3782'. [ 405.408535][T19646] bond2: entered promiscuous mode [ 405.414205][T19646] bond2: entered allmulticast mode [ 405.420949][T19646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.460405][T19646] netlink: 'syz.5.3783': attribute type 10 has an invalid length. [ 405.473078][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3783'. [ 405.635929][T19657] macvtap1: entered promiscuous mode [ 405.642602][T19657] macvtap1: entered allmulticast mode [ 405.648383][T19657] veth1_vlan: entered allmulticast mode [ 405.672708][T19658] macvtap2: entered promiscuous mode [ 405.681176][T19658] macvtap2: entered allmulticast mode [ 405.709809][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802962d400: abort rx timeout. Force session deactivation [ 405.864977][T19668] syzkaller0: entered promiscuous mode [ 405.871983][T19668] syzkaller0: entered allmulticast mode [ 405.890691][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3792'. [ 405.992503][T19680] netlink: 'syz.0.3795': attribute type 11 has an invalid length. [ 405.994302][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a286c00: rx timeout, send abort [ 406.374513][T19687] netlink: 'syz.3.3796': attribute type 1 has an invalid length. [ 406.383137][T19687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.508858][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a286c00: abort rx timeout. Force session deactivation [ 406.800765][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a287000: rx timeout, send abort [ 406.967931][ T11] block nbd0: Possible stuck request ffff888025290000: control (read@0,4096B). Runtime 120 seconds [ 407.311925][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a287000: abort rx timeout. Force session deactivation [ 407.598017][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a286800: rx timeout, send abort [ 407.880803][T19693] macvlan0: entered promiscuous mode [ 408.086579][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 408.106268][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a286800: abort rx timeout. Force session deactivation [ 408.111070][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 408.139457][T19707] openvswitch: netlink: IP tunnel dst address not specified [ 408.147582][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 408.156490][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 408.179788][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3802'. [ 408.286722][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 408.294901][ C0] lec:lec_tx_timeout: lec0 [ 408.301621][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 408.380099][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b73c00: rx timeout, send abort [ 408.499935][T19725] syzkaller0: entered promiscuous mode [ 408.505633][T19725] syzkaller0: entered allmulticast mode [ 408.527914][T19731] netlink: 'syz.0.3807': attribute type 1 has an invalid length. [ 408.585720][T19731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.888427][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b73c00: abort rx timeout. Force session deactivation [ 409.168868][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880297e2c00: rx timeout, send abort [ 409.679495][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880297e2c00: abort rx timeout. Force session deactivation [ 410.383051][T19731] bond3: (slave gretap1): making interface the new active one [ 410.393868][T19731] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 410.475117][T19747] dvmrp8: entered allmulticast mode [ 410.480928][T19748] dvmrp8: left allmulticast mode [ 410.631710][T19757] macvtap1: entered promiscuous mode [ 410.642412][T19757] macvtap1: entered allmulticast mode [ 410.676963][T19757] veth1_vlan: entered allmulticast mode [ 410.694378][T19764] __nla_validate_parse: 1 callbacks suppressed [ 410.694398][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 410.746600][T19761] macvtap2: entered promiscuous mode [ 410.761564][T19761] macvtap2: entered allmulticast mode [ 410.855973][T19764] bond0: entered promiscuous mode [ 410.882059][T19764] bond_slave_0: entered promiscuous mode [ 410.922391][T19764] bond_slave_1: entered promiscuous mode [ 410.965343][T19764] bond0: left promiscuous mode [ 410.971060][T19764] bond_slave_0: left promiscuous mode [ 410.997226][T19764] bond_slave_1: left promiscuous mode [ 411.154499][T19789] netlink: 'syz.2.3816': attribute type 1 has an invalid length. [ 411.285190][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3818'. [ 411.342301][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'. [ 411.370055][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3819'. [ 411.409983][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.419311][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.428296][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3821'. [ 411.438498][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.442997][T19806] xt_socket: unknown flags 0x50 [ 411.453678][T19800] sctp: [Deprecated]: syz.0.3819 (pid 19800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.453678][T19800] Use struct sctp_sack_info instead [ 411.477756][T19804] netlink: 'syz.5.3821': attribute type 33 has an invalid length. [ 411.523588][ T8541] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.598491][T19816] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3824'. [ 411.845784][T19831] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3829'. [ 411.869641][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'. [ 411.949059][T19839] openvswitch: netlink: IP tunnel dst address not specified [ 412.001104][T19843] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3832'. [ 412.348403][T19863] vlan2: entered promiscuous mode [ 412.360582][T19863] bridge0: entered promiscuous mode [ 412.757126][T19878] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3842'. [ 413.024665][T19894] syzkaller0: entered promiscuous mode [ 413.057282][T19894] syzkaller0: entered allmulticast mode [ 413.304092][T19906] veth1_virt_wifi: mtu less than device minimum [ 413.741146][T19932] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.096682][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 414.104825][ C0] lec:lec_tx_timeout: lec0 [ 414.110330][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 414.524077][T19978] netlink: 'syz.5.3865': attribute type 1 has an invalid length. [ 414.554828][T19978] netlink: 'syz.5.3865': attribute type 2 has an invalid length. [ 414.602732][T19982] netlink: 'syz.2.3867': attribute type 21 has an invalid length. [ 414.610948][T19982] netlink: 'syz.2.3867': attribute type 5 has an invalid length. [ 415.765131][T20062] wireguard0: entered promiscuous mode [ 415.771439][T20062] wireguard0: entered allmulticast mode [ 415.781175][T20062] team0: Device wireguard0 is of different type [ 415.940675][T20073] openvswitch: netlink: IP tunnel dst address not specified [ 416.121378][T20081] openvswitch: netlink: Flow key attribute not present in set flow. [ 416.299358][T20088] netlink: 'syz.3.3889': attribute type 1 has an invalid length. [ 416.333631][T20088] __nla_validate_parse: 14 callbacks suppressed [ 416.333652][T20088] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3889'. [ 416.685203][T20119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3892'. [ 416.832041][T20123] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 416.864536][T20128] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.3898'. [ 416.894022][T20128] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 416.938918][T20128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3898'. [ 417.068161][T20135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3900'. [ 417.223367][T20143] macvlan0: left promiscuous mode [ 417.717899][T20178] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3914'. [ 417.732921][T20178] netlink: 'syz.4.3914': attribute type 3 has an invalid length. [ 417.785579][T20183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3916'. [ 417.808348][T20183] netlink: 'syz.0.3916': attribute type 7 has an invalid length. [ 417.833017][T20183] netlink: 'syz.0.3916': attribute type 8 has an invalid length. [ 417.860406][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'. [ 417.916001][T20189] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3917'. [ 418.377101][T20219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3922'. [ 418.464295][T20222] ipt_REJECT: TCP_RESET invalid for non-tcp [ 418.569288][T20232] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 418.992681][T20254] netlink: 'syz.4.3933': attribute type 4 has an invalid length. [ 419.049629][T20260] pim6reg1: entered promiscuous mode [ 419.058384][T20260] pim6reg1: entered allmulticast mode [ 419.127647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 419.135781][ C0] lec:lec_tx_timeout: lec0 [ 419.141286][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 419.365471][T20279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.400814][T20282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.621619][T20299] : entered promiscuous mode [ 419.638077][T20294] bond0: entered promiscuous mode [ 419.643439][T20294] bond_slave_0: entered promiscuous mode [ 419.651649][T20294] bond_slave_1: entered promiscuous mode [ 419.661495][T20294] bond0: left promiscuous mode [ 419.666323][T20294] bond_slave_0: left promiscuous mode [ 419.692857][T20294] bond_slave_1: left promiscuous mode [ 419.832819][T20311] netlink: 'syz.5.3951': attribute type 3 has an invalid length. [ 420.060932][T20322] netlink: 'syz.5.3954': attribute type 1 has an invalid length. [ 420.069239][T20322] netlink: 'syz.5.3954': attribute type 2 has an invalid length. [ 420.295617][T20341] netlink: 'syz.0.3958': attribute type 58 has an invalid length. [ 420.304135][T20338] openvswitch: netlink: EtherType 50a is less than min 600 [ 420.685316][T20358] netlink: 'syz.0.3964': attribute type 2 has an invalid length. [ 421.426606][T20385] __nla_validate_parse: 10 callbacks suppressed [ 421.426629][T20385] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3969'. [ 421.501789][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3971'. [ 421.521350][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3971'. [ 421.574116][T20383] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3972'. [ 421.583159][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3971'. [ 421.604444][T20394] netlink: 'syz.3.3974': attribute type 1 has an invalid length. [ 421.609740][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3971'. [ 421.618255][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3972'. [ 421.636895][T20394] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3974'. [ 421.650512][T20389] wg1 speed is unknown, defaulting to 1000 [ 421.701317][T20394] netlink: 'syz.3.3974': attribute type 29 has an invalid length. [ 421.808422][T20394] netlink: 'syz.3.3974': attribute type 29 has an invalid length. [ 421.836428][T20394] netlink: 588 bytes leftover after parsing attributes in process `syz.3.3974'. [ 422.034248][T20414] syzkaller0: entered promiscuous mode [ 422.042146][T20414] syzkaller0: entered allmulticast mode [ 422.061880][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3980'. [ 422.439059][T20428] Cannot find add_set index 65532 as target [ 422.759242][T20449] SET target dimension over the limit! [ 422.963971][T20454] syzkaller0: entered promiscuous mode [ 422.972544][T20454] syzkaller0: entered allmulticast mode [ 423.468334][T20499] netlink: 'syz.5.4005': attribute type 2 has an invalid length. [ 423.609730][T20505] netlink: 'syz.5.4006': attribute type 6 has an invalid length. [ 423.619207][T20505] netlink: 'syz.5.4006': attribute type 5 has an invalid length. [ 424.166741][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 424.174955][ C0] lec:lec_tx_timeout: lec0 [ 424.180242][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.073202][T20495] tipc: Enabling of bearer rejected, failed to enable media [ 425.200100][T20507] nftables ruleset with unbound set [ 425.242285][T20509] veth0: entered promiscuous mode [ 425.623689][T20539] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 425.719567][T20535] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 425.735653][T20535] bond4 (unregistering): Released all slaves [ 425.828849][T20548] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 426.159804][T20563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.182817][T20563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.248768][T20571] tipc: Enabling of bearer rejected, failed to enable media [ 426.460317][T20563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.526381][T20563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.527134][T20587] netlink: 'syz.2.4023': attribute type 2 has an invalid length. [ 426.549605][T20588] __nla_validate_parse: 84 callbacks suppressed [ 426.549623][T20588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4026'. [ 426.722381][T20563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.741474][T20563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.921668][T20563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.944401][T20563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.208870][ T3553] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.230261][ T3553] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.261487][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.271031][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.295637][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.304391][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.316895][ T30] audit: type=1804 audit(1770271704.674:2): pid=20610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4035" name="/newroot/224/cgroup.controllers" dev="tmpfs" ino=1158 res=1 errno=0 [ 427.357243][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.386907][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.391376][ T30] audit: type=1800 audit(1770271704.674:3): pid=20610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4035" name="cgroup.controllers" dev="tmpfs" ino=1158 res=0 errno=0 [ 427.473833][T20617] 0: reclassify loop, rule prio 0, protocol 700 [ 427.480295][T20619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4039'. [ 427.529449][T20624] netlink: 'syz.0.4038': attribute type 2 has an invalid length. [ 427.571057][T20623] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 427.571080][T20619] syzkaller0: entered promiscuous mode [ 427.608694][T20619] syzkaller0: entered allmulticast mode [ 427.651340][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4041'. [ 427.811984][T20638] IPVS: Error connecting to the multicast addr [ 427.832524][T20636] syzkaller1: entered promiscuous mode [ 427.840273][T20636] syzkaller1: entered allmulticast mode [ 428.064606][T20652] netlink: 'syz.3.4048': attribute type 4 has an invalid length. [ 428.218161][T20662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4050'. [ 428.272357][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4052'. [ 428.323553][T20664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4052'. [ 428.381384][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4052'. [ 428.430780][T20676] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4054'. [ 428.460498][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4052'. [ 428.521553][T20664] [ 428.523938][T20664] ====================================================== [ 428.531223][T20664] WARNING: possible circular locking dependency detected [ 428.538299][T20664] syzkaller #0 Not tainted [ 428.542731][T20664] ------------------------------------------------------ [ 428.543253][T20678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4052'. [ 428.549913][T20664] syz.4.4052/20664 is trying to acquire lock: [ 428.549931][T20664] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 428.549985][T20664] [ 428.549985][T20664] but task is already holding lock: [ 428.549992][T20664] ffff888024f45fb0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 428.592808][T20664] [ 428.592808][T20664] which lock already depends on the new lock. [ 428.592808][T20664] [ 428.603221][T20664] [ 428.603221][T20664] the existing dependency chain (in reverse order) is: [ 428.612326][T20664] [ 428.612326][T20664] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 428.620965][T20664] blk_alloc_queue+0x52f/0x610 [ 428.626264][T20664] __blk_mq_alloc_disk+0x197/0x390 [ 428.631972][T20664] nbd_dev_add+0x499/0xb50 [ 428.636928][T20664] nbd_init+0x168/0x1f0 [ 428.641603][T20664] do_one_initcall+0x250/0x840 [ 428.647153][T20664] do_initcall_level+0x104/0x190 [ 428.652715][T20664] do_initcalls+0x59/0xa0 [ 428.657680][T20664] kernel_init_freeable+0x2a6/0x3d0 [ 428.663404][T20664] kernel_init+0x1d/0x1d0 [ 428.668266][T20664] ret_from_fork+0x51b/0xa40 [ 428.673494][T20664] ret_from_fork_asm+0x1a/0x30 [ 428.678795][T20664] [ 428.678795][T20664] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 428.686009][T20664] fs_reclaim_acquire+0x71/0x100 [ 428.691561][T20664] prepare_alloc_pages+0x152/0x650 [ 428.697194][T20664] __alloc_frozen_pages_noprof+0x12f/0x380 [ 428.703520][T20664] __alloc_pages_noprof+0xa/0x30 [ 428.708975][T20664] pcpu_populate_chunk+0x182/0xb30 [ 428.714691][T20664] pcpu_alloc_noprof+0xc4a/0x18d0 [ 428.720322][T20664] xt_percpu_counter_alloc+0x161/0x220 [ 428.726330][T20664] translate_table+0x134a/0x2110 [ 428.731809][T20664] ipt_register_table+0x11b/0x7f0 [ 428.737350][T20664] iptable_raw_table_init+0x54/0x80 [ 428.743201][T20664] xt_find_table_lock+0x30c/0x3e0 [ 428.748754][T20664] xt_request_find_table_lock+0x26/0x100 [ 428.754908][T20664] do_ipt_get_ctl+0x716/0x1240 [ 428.760210][T20664] nf_getsockopt+0x26e/0x290 [ 428.765527][T20664] ip_getsockopt+0x19e/0x230 [ 428.770661][T20664] do_sock_getsockopt+0x2d3/0x3f0 [ 428.776213][T20664] __x64_sys_getsockopt+0x1a4/0x240 [ 428.781948][T20664] do_syscall_64+0xe2/0xf80 [ 428.786971][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.793387][T20664] [ 428.793387][T20664] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 428.801202][T20664] __lock_acquire+0x15a5/0x2cf0 [ 428.806583][T20664] lock_acquire+0x106/0x330 [ 428.811633][T20664] __mutex_lock+0x19f/0x1300 [ 428.816754][T20664] pcpu_alloc_noprof+0x272/0x18d0 [ 428.822420][T20664] sbitmap_init_node+0x1e1/0x640 [ 428.827966][T20664] sbitmap_queue_init_node+0x3e/0x4d0 [ 428.833884][T20664] blk_mq_init_tags+0x15c/0x2d0 [ 428.839470][T20664] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 428.845463][T20664] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 428.851802][T20664] nbd_start_device+0x17f/0xb10 [ 428.857216][T20664] nbd_genl_connect+0x165b/0x1cf0 [ 428.862769][T20664] genl_family_rcv_msg_doit+0x22a/0x330 [ 428.868925][T20664] genl_rcv_msg+0x61c/0x7a0 [ 428.873980][T20664] netlink_rcv_skb+0x232/0x4b0 [ 428.879268][T20664] genl_rcv+0x28/0x40 [ 428.883798][T20664] netlink_unicast+0x80f/0x9b0 [ 428.889175][T20664] netlink_sendmsg+0x813/0xb40 [ 428.894839][T20664] ____sys_sendmsg+0xa68/0xad0 [ 428.900127][T20664] ___sys_sendmsg+0x2a5/0x360 [ 428.905599][T20664] __x64_sys_sendmsg+0x1bd/0x2a0 [ 428.911153][T20664] do_syscall_64+0xe2/0xf80 [ 428.916196][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.922625][T20664] [ 428.922625][T20664] other info that might help us debug this: [ 428.922625][T20664] [ 428.932954][T20664] Chain exists of: [ 428.932954][T20664] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 428.932954][T20664] [ 428.946626][T20664] Possible unsafe locking scenario: [ 428.946626][T20664] [ 428.954390][T20664] CPU0 CPU1 [ 428.959865][T20664] ---- ---- [ 428.965241][T20664] lock(&q->q_usage_counter(io)#50); [ 428.970657][T20664] lock(fs_reclaim); [ 428.977207][T20664] lock(&q->q_usage_counter(io)#50); [ 428.985101][T20664] lock(pcpu_alloc_mutex); [ 428.989628][T20664] [ 428.989628][T20664] *** DEADLOCK *** [ 428.989628][T20664] [ 428.997837][T20664] 6 locks held by syz.4.4052/20664: [ 429.003135][T20664] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 429.011433][T20664] #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 429.020404][T20664] #2: ffff8880251f01d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 429.032161][T20664] #3: ffff8880251f00d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 429.043324][T20664] #4: ffff888024f45fb0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 429.054061][T20664] #5: ffff888024f45fe8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 429.065205][T20664] [ 429.065205][T20664] stack backtrace: [ 429.071209][T20664] CPU: 1 UID: 0 PID: 20664 Comm: syz.4.4052 Not tainted syzkaller #0 PREEMPT(full) [ 429.071227][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.071235][T20664] Call Trace: [ 429.071241][T20664] [ 429.071246][T20664] dump_stack_lvl+0xe8/0x150 [ 429.071266][T20664] print_circular_bug+0x2e1/0x300 [ 429.071280][T20664] check_noncircular+0x12e/0x150 [ 429.071293][T20664] __lock_acquire+0x15a5/0x2cf0 [ 429.071313][T20664] ? kernel_text_address+0xa5/0xe0 [ 429.071328][T20664] ? pcpu_alloc_noprof+0x272/0x18d0 [ 429.071338][T20664] lock_acquire+0x106/0x330 [ 429.071357][T20664] ? pcpu_alloc_noprof+0x272/0x18d0 [ 429.071379][T20664] __mutex_lock+0x19f/0x1300 [ 429.071399][T20664] ? pcpu_alloc_noprof+0x272/0x18d0 [ 429.071417][T20664] ? stack_depot_save_flags+0x3f3/0x810 [ 429.071442][T20664] ? kasan_save_track+0x4f/0x80 [ 429.071459][T20664] ? kasan_save_track+0x3e/0x80 [ 429.071474][T20664] ? pcpu_alloc_noprof+0x272/0x18d0 [ 429.071490][T20664] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 429.071507][T20664] ? blk_mq_init_tags+0x83/0x2d0 [ 429.071531][T20664] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 429.071542][T20664] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 429.071556][T20664] ? __pfx___mutex_lock+0x10/0x10 [ 429.071567][T20664] ? genl_rcv+0x28/0x40 [ 429.071581][T20664] ? ____sys_sendmsg+0xa68/0xad0 [ 429.071595][T20664] ? ___sys_sendmsg+0x2a5/0x360 [ 429.071612][T20664] pcpu_alloc_noprof+0x272/0x18d0 [ 429.071628][T20664] sbitmap_init_node+0x1e1/0x640 [ 429.071645][T20664] sbitmap_queue_init_node+0x3e/0x4d0 [ 429.071663][T20664] blk_mq_init_tags+0x15c/0x2d0 [ 429.071678][T20664] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 429.071690][T20664] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.071702][T20664] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 429.071715][T20664] ? kfree+0x1be/0x650 [ 429.071729][T20664] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 429.071743][T20664] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 429.071760][T20664] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 429.071775][T20664] ? sysfs_add_file_mode_ns+0x259/0x300 [ 429.071791][T20664] nbd_start_device+0x17f/0xb10 [ 429.071809][T20664] ? device_create_file+0xf4/0x1b0 [ 429.071825][T20664] nbd_genl_connect+0x165b/0x1cf0 [ 429.071843][T20664] ? __pfx_nbd_genl_connect+0x10/0x10 [ 429.071861][T20664] ? rcu_is_watching+0x15/0xb0 [ 429.071872][T20664] ? __nla_parse+0x40/0x60 [ 429.071887][T20664] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 429.071904][T20664] genl_family_rcv_msg_doit+0x22a/0x330 [ 429.071921][T20664] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.071937][T20664] ? __lock_acquire+0x6b5/0x2cf0 [ 429.071954][T20664] genl_rcv_msg+0x61c/0x7a0 [ 429.071970][T20664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.071983][T20664] ? __pfx_nbd_genl_connect+0x10/0x10 [ 429.072001][T20664] netlink_rcv_skb+0x232/0x4b0 [ 429.072013][T20664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.072027][T20664] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.072036][T20664] ? genl_rcv+0x19/0x40 [ 429.072053][T20664] ? down_read+0x272/0x2e0 [ 429.072065][T20664] ? genl_rcv+0xd/0x40 [ 429.072078][T20664] genl_rcv+0x28/0x40 [ 429.072090][T20664] netlink_unicast+0x80f/0x9b0 [ 429.072109][T20664] ? __pfx_netlink_unicast+0x10/0x10 [ 429.072124][T20664] ? __alloc_skb+0x193/0x390 [ 429.072137][T20664] ? netlink_sendmsg+0x650/0xb40 [ 429.072156][T20664] ? skb_put+0x11b/0x210 [ 429.072169][T20664] netlink_sendmsg+0x813/0xb40 [ 429.072182][T20664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.072194][T20664] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.072208][T20664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.072221][T20664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.072232][T20664] ____sys_sendmsg+0xa68/0xad0 [ 429.072246][T20664] ? __might_fault+0xaf/0x130 [ 429.072264][T20664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.072280][T20664] ? import_iovec+0x73/0xa0 [ 429.072297][T20664] ___sys_sendmsg+0x2a5/0x360 [ 429.072311][T20664] ? __lock_acquire+0x6b5/0x2cf0 [ 429.072326][T20664] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.072342][T20664] ? futex_wake+0x4ac/0x580 [ 429.072359][T20664] ? __fget_files+0x2a/0x420 [ 429.072371][T20664] ? __fget_files+0x3a0/0x420 [ 429.072385][T20664] __x64_sys_sendmsg+0x1bd/0x2a0 [ 429.072403][T20664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.072419][T20664] ? rcu_is_watching+0x15/0xb0 [ 429.072432][T20664] do_syscall_64+0xe2/0xf80 [ 429.072444][T20664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.072455][T20664] ? trace_irq_disable+0x37/0x100 [ 429.072466][T20664] ? clear_bhb_loop+0x60/0xb0 [ 429.072478][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.072494][T20664] RIP: 0033:0x7f61b919aeb9 [ 429.072511][T20664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.072528][T20664] RSP: 002b:00007f61ba0c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.072548][T20664] RAX: ffffffffffffffda RBX: 00007f61b9415fa0 RCX: 00007f61b919aeb9 [ 429.072563][T20664] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007 [ 429.072576][T20664] RBP: 00007f61b9208c1f R08: 0000000000000000 R09: 0000000000000000 [ 429.072587][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.072599][T20664] R13: 00007f61b9416038 R14: 00007f61b9415fa0 R15: 00007ffd73338d78 [ 429.072621][T20664] [ 429.216809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 429.598288][ C0] lec:lec_tx_timeout: lec0 [ 429.604129][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.612881][ T5845] block nbd1: Receive control failed (result -22) [ 429.619419][ T5842] block nbd1: Receive control failed (result -22) [ 429.637077][T20664] nbd1: detected capacity change from 0 to 32 [ 429.644258][ T5999] block nbd1: Dead connection, failed to find a fallback [ 429.651671][ T5999] block nbd1: shutting down sockets [ 429.657649][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.667826][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.675679][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.686067][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.696242][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.706769][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.714651][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.724546][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.732756][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.743083][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.751082][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.760871][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.769315][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.779034][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.787144][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.796632][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.805104][ T5999] ldm_validate_partition_table(): Disk read failed. [ 429.811864][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.822650][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.830896][ T5999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.840565][ T5999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 429.848495][ T5999] Dev nbd1: unable to read RDB block 0 [ 429.854326][ T5999] nbd1: unable to read partition table [ 429.862159][ T5999] ldm_validate_partition_table(): Disk read failed. [ 429.869157][ T5999] Dev nbd1: unable to read RDB block 0 [ 429.874748][ T5999] nbd1: unable to read partition table [ 432.886941][ T5196] udevd[5196]: worker [5828] /devices/virtual/block/nbd0 is taking a long time [ 435.127469][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 435.135545][ C0] lec:lec_tx_timeout: lec0 [ 435.140631][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 437.047486][ T11] block nbd0: Possible stuck request ffff888025290000: control (read@0,4096B). Runtime 150 seconds