last executing test programs: 5.987586145s ago: executing program 1 (id=8557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x300}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x300}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x12) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000080)=0x3fd, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r0, 0x1) 5.527067768s ago: executing program 1 (id=8565): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008054) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="700009450220"], 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_emit_ethernet(0x2a, &(0x7f00000008c0)=ANY=[@ANYBLOB="aa9c92f769f5f2b8889bbc14331faaaaaaaaaabbbbbbbbbbbb08004500001c0000000200119078000000"], 0x0) recvmsg$unix(r7, &(0x7f0000000480)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/52, 0x34}, {&(0x7f00000002c0)}], 0x2, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20}, 0x40000000) syz_emit_ethernet(0x32, &(0x7f00000014c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e60, 0x10, 0x0, @opaque="246484967b49fc71"}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400000428bd7000fcdbdf2502d119fd", @ANYRES32=r8, @ANYBLOB="140006000a0000000b00000001000000fbffffff97ab39ba06a5958ad9ea3d89dd55b1faaad7f804141a76515f0d18a2fb96ff9ace533802e77a3e5ca2ab6e97aea650c10f38abb717d1de80366d07345e6477f94e0302d6383313ea69564e2c2a13fe9a941a0044680188392ee53f3a7ca1b26b68e04d25bc76c71791da32bca8ce5b88874472973410cb867d3c67d6ded07f73c4c2bab994f545239e"], 0x2c}}, 0x40000c0) 4.496630493s ago: executing program 0 (id=8577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd5f, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000002c4614917017c07fc500b8acec00000000000000000a54000000060a09040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000130900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0) 4.480863236s ago: executing program 4 (id=8578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x10, 0x1405, 0x621, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x894) 4.420832731s ago: executing program 2 (id=8579): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x11, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2d, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}}, 0x4008014) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x32c, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "9e4489360c57821c3c1af0c90c2137e3fa0455f106f14ab9dafa018ba858c7106579434672775822778c98fbd9f171a695c886f2ff340f6c7714d7599cc46edabff2bb2ba825a86868082bf9214a1289823fb21bdcd2bf39dadbf21ab07dd1a7045fd4c2be47d055a8e46881c8dbf10384f54603f2b0e7e5f484f5c00cac68b37117c0f207293c35a3eb119c18c6dd6d2ef1af21398061f3"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x18}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1e}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x77f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}}}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x12}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffd, @loopback, 0x5}}}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4000100}, 0x40081) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000008627d4d381b12dea0000000003000000000100000003000000020000000000000000000002"], 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e321000c8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0xc4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x10, 0x700, 0x8, 0x6, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x22}, {[@end]}}}}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) close(r10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', r9, 0x4, 0x6, 0x6, 0x9, 0x3, @private2, @mcast2, 0x7850, 0x80, 0x4, 0x9}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r11 = socket(0x12, 0x2, 0x50000) recvfrom(r8, &(0x7f0000000680)=""/112, 0x70, 0x40002002, &(0x7f0000000700)=@caif=@rfm={0x25, 0x8, "d511c9fa000464a83622ae4a873af219"}, 0x80) sendmsg$nl_route(r11, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x3, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6}, @NHA_OIF={0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x80000002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r11, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x57, "fb7389c22c8b66aaf981b9c51e5741992c73e63a81994400a1cf8d1009b8640d739710f79e9d645c9852c970c9697ceef6d865ffb2b6d8e0c2ef9b4d223e52d2721fadf0f0523c3f2b9e94330fb894517edcc0a19b627d"}, &(0x7f0000000240)=0x7b) sendmsg$rds(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/118, 0x76}], 0x1, &(0x7f00000004c0)=[@cswp={0x58, 0x114, 0x7, {{0x7, 0x200}, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2, 0x10, 0x6, 0x69b5, 0x3, 0x0, 0xd148}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x101}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0xffff}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1fe4}, @fadd={0x58, 0x114, 0x6, {{0x8, 0x7}, &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x3, 0x101, 0x1, 0xd, 0x7, 0x51, 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x6}, &(0x7f0000000440), &(0x7f0000000480)=0x75cd, 0x7, 0x4, 0xfffffffeffffffff, 0xfffffffeffffffff, 0x11, 0x9}}], 0x150, 0x40840d0}, 0x840) 4.378357438s ago: executing program 1 (id=8581): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/89, 0x59}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/161, 0xa1}], 0x4, 0x6, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/163, &(0x7f0000000000)=0xa3) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) socket$inet(0x2, 0x3, 0x5) (async) socket$inet(0x2, 0x3, 0x5) 4.222876273s ago: executing program 0 (id=8583): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x49, 0x0, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd2200fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b0004000000050005000000000077034382e799f144d210db8f835e5f482bec64541d468049fcdff7ab2d987e52e81b658e2f91c0dfd44f507208f1b4f65f6a616997e65e23e86c614543a97597f060a562153e813c65bfb5f95569fffc49029a044dcd6a92a2662bd403a8ebce3475fceaa6ba4fa33f154415f7e1461565db327217be82cedacf6d355a486097857f098b29024b0e64f532738395f2ca2aaddefcf09f13e5c8428625f2b7fd9fab4612d49f5a7671315a33ba14d3f894d2fddd464dca5451dddc8d120e82dca42f6e52ee8c5c836c680929349ccd29"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x6c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x805) 4.222139193s ago: executing program 1 (id=8584): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xf, 0x6}, {0x9, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.19844709s ago: executing program 4 (id=8585): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/90, 0x5a}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/110, 0x6e}], 0x5) 4.004605182s ago: executing program 2 (id=8587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) r3 = socket(0xa, 0x2400000001, 0x0) ioctl$sock_ifreq(r3, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x20000880) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 4.002970132s ago: executing program 0 (id=8588): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6843100211439a3a4ad03845dad862a504eb3dd1d986bac1ac104b6a243d73c99783fad5ee14782def26ed3d6a56e468ee4b2c0f0edb9f0a49452be4673566411ab42128737d7d40f50060cff90421cf8c4ba681dff88fceb65483e7d78390a5ba7f59cd8f24cfbc9fca26df33d3658744cf0eed27f10737b5bea52258402500c2bc2394e898bb4c235da46697751faece8d091165bb851a7cc90c", @ANYRES16=r3, @ANYBLOB="016c25d1d285606dc433bc349979f6", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000020) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendfile(0xffffffffffffffff, r1, &(0x7f0000000480)=0x4, 0x7fffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r6, 0x312, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555d}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "6e31a579aa84917c323db160c954a4e0"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "1e6a715c27a9021af1a3ebdae259f69ae7758b44300c1c73e736d0f961f9809b"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="500106"], 0x14) 3.916262546s ago: executing program 3 (id=8589): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket(0x2, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'r\x00'}, 0x8) vmsplice(r3, &(0x7f0000000480)=[{&(0x7f0000000600)=';', 0x1}], 0x1, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r2, 0xd, 0x0, 0x9f, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, r3, 0x0, 0x0, @val=@tcx={@void, @value=r2, @void, @void, r4}}, 0x1c) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x8, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb9, 0xf3b, {0x6, 0x2b, 0x5, 0x5, 0x0, 0x7156, 0x0, @in6=@private1, @in6=@rand_addr=' \x01\x00'}}]}, 0x98}, 0x1, 0x7}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000890}, 0x40000) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r6) 3.865632614s ago: executing program 2 (id=8590): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, r2, 0xf921a000) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[], 0x28}], 0x1}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) (async) close(r7) syz_genetlink_get_family_id$tipc(0x0, r3) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0x1ba, 0x410}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8d, 0x7fff, 0x1, 'snmp_trap\x00', 'syz1\x00', {0xfff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x40) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) 3.863741655s ago: executing program 4 (id=8591): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000000000000200000100120000000000000000"], 0x0, 0x2a}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="13000000180001000000a1b475f1f369b407000000cd3b6269fb473fba75"], 0x18}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRES32=r8, @ANYBLOB="080002de1d0b045c7f"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000001c0)={@pppoe={0x18, 0x0, {0x1, @remote, 'gre0\x00'}}, {&(0x7f0000000100)=""/95, 0x5f}, &(0x7f0000000180), 0x78}, 0xa0) 3.580148892s ago: executing program 4 (id=8592): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000bd"], 0x10}}], 0x2, 0x0) 3.55123969s ago: executing program 3 (id=8593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000140012807863616e000000040002"], 0x3c}}, 0x0) 3.492278361s ago: executing program 2 (id=8594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090003", 0x17}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff2}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfe}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x7, 0x24, 0x4d7, 0x100000000, 0x17c1, 0x8, 0xfff, 0x6}, &(0x7f0000000240)={0x1, 0x0, 0x7, 0x4, 0x2569, 0x4, 0xaab, 0x6}, &(0x7f0000000280)={0x7, 0x100000000, 0x6, 0x8, 0x3, 0x0, 0x5671, 0xc}, &(0x7f0000000300)={r3, r4+60000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x849]}, 0x8}) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1d, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) socket$inet(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0xf7, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@generic={0x805, "dff62958b16d6f251cd134a70c00e9a4680edcf29313bea4a274fb1acd14672250b103ca426054a2c8d089ed7481a5ebbe0bed85664eb2c30eaa4da7ecf6871321f0db98418bee6cff08ae3524eb82c0cbce6e342f2eb188b066a564e72c97487e72c230545b883404c7432ce05d209eded70eef9b635bb5721dc4a3552005b6a45bc9ff14557c1a6696f3d0e9dde717af153403a79decc26dcd5457076ce51c4ef8382361c5b1c4221f0a345d883c1b9167e80db0caae36fe2e54968cfe679138921aac1ddd05f822646c15961529ab2aba0d802a213553d4f072e6aa5227090d04855338ad90af48"}}}, 0x0) (async) close(r0) 3.405053431s ago: executing program 3 (id=8595): r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x5}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x2, 0x3, '\''}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x60}}], 0x1, 0x804) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0xd0, 0x0, 0xd0, 0x0, 0xd0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netpci0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@mcast2, 0x2a, 0x3c, 0x3d6e}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 3.401944947s ago: executing program 1 (id=8596): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="1100000002000000"], 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES64=r7, @ANYRES32=r5, @ANYRES8=r6], 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000002000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local, 0x4}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r9, 0x8b2c, &(0x7f0000000040)) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000a, 0x8c4b815a5465c2b1, r10, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000017580b25000000"], 0x48) (async) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES8=r14, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r16, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) (async) sendmsg$nl_route_sched(r11, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0x6, 0xffe0}, {0xb, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x9, 0xc, 0x9, 0x2, 0x8, 0x4, 0x8}}, {0x14, 0x2, [0x97fc, 0x7, 0x2, 0x101, 0x5, 0x8, 0x9, 0x8]}}]}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x40000000, {0x0, 0x0, 0x0, r15, {0xffff}, {0x0, 0xfff2}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000c80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, r3, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r1, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="341f06004008000a10", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x20040000) 3.273692538s ago: executing program 2 (id=8597): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x5, 0x7fffffff, 0x2}, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r8, 0x2, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0x6d}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x20000011) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r10, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7, 0x9, 0xfffffff8, 0x5}}}, ["", "", "", "", "", ""]}, 0x30}}, 0x8004) 3.260856054s ago: executing program 1 (id=8598): r0 = socket$inet6(0xa, 0x800, 0x4) r1 = socket(0x29, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f00000003c0)={r4, 0x8}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f0000001540)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000440)=""/4096, 0x5af}], 0x3) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) socket$kcm(0x29, 0x7, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r1, &(0x7f0000001440)={0x2c, 0x1, 0x0, 0x1e, r7}, 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r9, 0x0) write$tun(r9, &(0x7f00000015c0)={@void, @void, @ipv4=@gre={{0x19, 0x4, 0x0, 0x8, 0x279, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x24, 0x74, 0x0, 0x2, [0x800, 0x8, 0x10001, 0x8, 0x80000000, 0x3, 0xffffffff, 0x1]}, @timestamp_prespec={0x44, 0x2c, 0x9e, 0x3, 0x4, [{@private=0xa010102, 0x9}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xca0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe33}, {@broadcast, 0x8}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x72, 0x2, [0x1, 0x7], "bf39d9c03cd353cc42312bacc158893865937a42eb398c2594415626f3d7d1d7ed537d4e6e558b123715ceee69c3dc6377464cd175de0618f0db1224006db779071e610d99cd41b17bb3ddc1fe5e650fc3c07d3606a9cc82ecf9810102dfb31aa05a549c4e3a428704640cf5647171be70d4"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9, 0x5, 0xecf]}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7], "dad0c8b58848b6b6eeff3de46c3c0af572c032c302071fb28be4ae5b488d9cea7805685b977e764440269243fa67b47d729df77580ceab9ce5a613841f962e582e218690e8ee1ee4695dfa7fccd16e446488a23b51f2"}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x80}, 0x1, {0x6}}}, {0x8, 0x22eb, 0xfe0, {{0x5, 0x2, 0x0, 0x2, 0x1, 0x2, 0x3, 0xf}, 0x2, {0x7, 0x6, 0x3, 0x17, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}, 0x279) recvmsg(r9, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001580)=""/3, 0x3}], 0x1}, 0x10000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x400}, 0x1c) 2.823532903s ago: executing program 3 (id=8599): r0 = socket$netlink(0x10, 0x3, 0xa) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}, {{@in6=@mcast1, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x0, 0x2, 0x1, 0x6a, 0x7ff, 0x8, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x10, 0x40, 0x7bc, 0x5, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x65, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100]}, @end]}}}}}) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'veth1_to_hsr\x00'}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="48d7672906ef3ea0fc70980000001500257f09004b01fcfc8c860a8a1300f217e0060000e3323909b8f8896e3371", 0x2e}], 0x1) 2.822780596s ago: executing program 0 (id=8600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000000)="9718df67943fec2bff1f3c22d7bb6cb081d8d87eb9f7fbf3eccf09f73f6814ad1b2ef6f58fb3962240d704a6f7fcee495adf3394b9a906cd0f0382b5e4233ad507e68bececd491cb2d9fbd83e57578ae40815c05e797059b86fe696cbd59f24b1408323f120ecddd844c3c0b3362b0eced93e42d135ce479a5949d011e47ab57b82c03fa2a88a75a9a6c2318b38ea2fe098b28e7051a86623c4c3072eec8e188057490cdfe6a8e8c2c1442c4a22cccb3c2354054606dba49656f7aa51a12173836f86f9222d2517cea24700bc3a43e61282b6222f79ff656c368d439d2fdbf4c20f40b1f0704df68609fd2f3dcb54014cac167a2ba9e66c6dd130fd5f4") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000002000010000000000000000000a0020000000000000000000e2000001080017004e204e20"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c00005436ab2a0002000000000000000000000b000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x100000, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1c}, 0x40084) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newtclass={0x30, 0x28, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x11, 0x1}, {0xee4d501f9fa4a2fd, 0xfff3}}, [@tclass_kind_options=@c_prio={0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c810}, 0x1) 2.732416135s ago: executing program 0 (id=8601): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c4, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7650, 0x60}}}}, [@NL80211_ATTR_FRAME_MATCH={0xf8, 0x5b, "a558f34502c57d8def606b9bdc37f7263f242cd00fe17ea6a9d89edf13f86da58919a96adaa7a74268e412d0017016670d51efcc731774f6e818200c9ef9586f7f61b4a74427870d1b320f23dd5a17a6f9ee095d943106a8f9770b4a2609ff3d993db1cb0612b2ccdf51e3a6637816e83a3b17a5ca6285e88cd7f6e1c23038c86c6a4d176634f296538912b8728644f0a44ab409bd3e26ab164145457b18d7f40d01b41428ad5fb63f13b005611e22f3b28471531d81425daee213663bd5ed7429d0b525be7d2902127d40a7ea6d71138861809326c6472371ab4f845d6a6cb479dca366dc6ea874af8879cd2a35f2cac2c52cac"}, @NL80211_ATTR_FRAME_MATCH={0x71, 0x5b, "a1fe63a46b48276f755f464abb54d3baac907cc6ec557d6133b1fbe6957d06ada87de8f7cfbf5fabd40a660bd1217e99fd90d80ecb764acb8cee787f52083db3a48a415e791f4a043257aa17752052004aad7ebdb096cae6d434e9b9be813b45a65ed41b7a1c102bff8225fa06"}, @NL80211_ATTR_FRAME_MATCH={0x78, 0x5b, "39af4f442ab11ea0d218b954ff32a6e1808fc38df29810252f57ceec2a02034c9dae31bb7b171f176b3f3014ef5c73639197b311196da74a59ca03021a7c16c39b33ef5389343dcadc8eaf510d714bb8729ab7603324fde43990e7526ebaf5f2b9715459c7529def482369362d31a1bcf56f582d"}, @NL80211_ATTR_FRAME_MATCH={0xbe, 0x5b, "47e27240ebf8aa7da4b07d37090c94a1091b5db841b02a05dfdd36a67b3cef6ccf9a4b64b308ed6015a507c0b9cea33940dc9617df71de37cd1803d9d474dfeedb230af1772d8d02fd6c5371a1430bc168fe51e227c2ab498552a4ea33ad6972c6040513c790a60b6afe5c3bd6b55adde247d683b8c261b256eebd2cd6f96746aee1a7e08295cb42b9413cfc0e63a4a0b0ccec882a55e2df3969ed958bc64815819d67d03317f8e89c147cbf0b2799253fe60c36a1fda40d2e92"}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x94}, 0x4004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 293.739889ms ago: executing program 3 (id=8602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/288], 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) (async) r3 = socket$isdn(0x22, 0x2, 0x23) close(r3) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg$alg(r4, &(0x7f0000004ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)={0x20000000}) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x1) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78) (async) r9 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r9, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21}, {@in=@empty, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd25, 0x70bd25, 0x70bd27, 0xcc}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x158}}, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000500)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x2}, 0x4, 0x9, 0x7, 0x0, 0x1e, 'syz1\x00', "f09596e1728e1111677245a7c2c0913bcc0b32c50b6bf5681b293b4f82382b51", "ca9e0d92a0c7109297a8f8e66cd710fdb26421c3aca74ac0c907d3917d3d7551", [{0x7b6, 0x0, {0x1, 0x8}}, {0x3, 0x1000, {0x1}}, {0x2a88, 0xac8e, {0x0, 0x8}}, {0x7, 0xa, {0x0, 0x8}}, {0x4, 0x1ff, {0x1, 0x4}}, {0x566, 0xbf8c, {0x0, 0x3}}, {0x2, 0xfffb, {0x3, 0x78}}, {0x0, 0x3, {0x1, 0x9}}, {0x1000, 0xd, {0x3}}, {0x1, 0xe, {0x0, 0x7}}, {0x4, 0x1, {0x0, 0x1000}}, {0x2, 0x97f4, {0x3, 0x25bf}}, {0x7fff, 0x39, {0x2, 0x6bb}}, {0x2, 0x94, {0x2, 0xfffffffb}}, {0x9, 0x8000, {0x3, 0xb}}, {0x9, 0x101, {0x0, 0x6}}, {0x1, 0xfffc, {0x0, 0x88}}, {0x9, 0x2, {0x3, 0xbc6e}}, {0x3, 0x2, {0x0, 0xfffffff7}}, {0x2, 0x98, {0x2, 0xb8e7}}, {0x5, 0x1, {0x0, 0x5}}, {0x4e76, 0xef5, {0x2, 0x3}}, {0xe5b8, 0x3, {0x1, 0x80000001}}, {0x5, 0x200, {0x2, 0xffff}}, {0x26d, 0x529c, {0x0, 0x6}}, {0xd45, 0x8, {0x2, 0x6}}, {0x7, 0x3, {0x0, 0x3ff}}, {0x1, 0x4, {0x0, 0xe52}}, {0x1, 0x1, {0x0, 0x7}}, {0x3, 0xb, {0x1, 0x8}}, {0x9, 0x8, {0x0, 0xffffde12}}, {0x4, 0x8, {0x1, 0x5}}, {0x1, 0x77ed, {0x3, 0x9}}, {0x5, 0x800, {0x2, 0x4}}, {0x7ff, 0x9, {0x2, 0x6}}, {0x5, 0x5, {0x1, 0x3}}, {0xab7, 0x1, {0x2, 0xc}}, {0x8001, 0x2, {0x0, 0xffff}}, {0x5, 0x8, {0x1, 0x6}}, {0x0, 0x6, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{}, 0x7, 0x8, 0x401, 0xa, 0x1a, 'syz1\x00', "139ccd4b1bd21281da4f817888b7e472c53dffe6112d5bf2c98f5f51228c5a77", "bb567716adee8b18999bd6e11cb1ddba3704b6db27c87f694d672c8ccd6834cb", [{0xe, 0x3, {0x1, 0x2}}, {0x6, 0x9, {0x0, 0x4963}}, {0x8001, 0x2, {0x1, 0x80000001}}, {0x8, 0x0, {0x1, 0x3}}, {0x0, 0xf, {0x1, 0x4}}, {0x8, 0xd, {0x1, 0xf8}}, {0x4, 0x8542, {0x1}}, {0x4, 0x3, {0x2, 0xfffff801}}, {0x0, 0xe, {0x2, 0xfff}}, {0x5, 0xdd4c, {0x3, 0x81}}, {0x4fb, 0x200, {0x2, 0x9}}, {0xda53, 0xf, {0x3, 0x8}}, {0x1, 0x9, {0x2, 0x7}}, {0x9, 0x8, {0x2, 0x101}}, {0x2, 0x3, {0x0, 0x9}}, {0x6, 0x7, {0x2, 0x100}}, {0x81, 0x8, {0x0, 0x400}}, {0x1, 0x54f, {0x3, 0x6}}, {0x13a0, 0xfff6, {0x2, 0x9}}, {0x4, 0x7, {0x1, 0x1}}, {0x5, 0x1, {0x1}}, {0x9, 0x3ff, {0x2, 0x3}}, {0x3, 0xd, {0x0, 0xd}}, {0x6, 0x0, {0x0, 0x1}}, {0xaf8, 0x81, {0x2, 0xb8ee}}, {0x1, 0x1, {0x3, 0x10001}}, {0x2, 0x8000, {0x2, 0x80}}, {0x3, 0x7, {0x0, 0x8001}}, {0x74, 0x6b, {0x2}}, {0x5, 0x2, {0x3, 0x6}}, {0x1, 0xf9a0, {0x6, 0x80000001}}, {0xe, 0x7, {0x0, 0xbe}}, {0x800, 0x6, {0x3, 0x6}}, {0x2, 0x9c, {0x1, 0x26}}, {0x8, 0x4050, {0x2, 0xfff}}, {0x3, 0xab, {0x2, 0x8}}, {0xe408, 0x0, {0x0, 0xbb1}}, {0x0, 0xba52, {0x1, 0x5e}}, {0x9, 0x8, {0x0, 0x6}}, {0x400, 0xf, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x9, 0xf9, 0x1, 0x4, 0x1e, 'syz1\x00', "790d4de2d4451c266eba38ff69db121a17d49aa1b0def5aaea4c11ee41863661", "297af70f3468472e1e005eaa313454e96bc6d0c5f764afabd0b30e7e8754145d", [{0x9, 0x2, {0x0, 0x9}}, {0xa, 0x3ff, {0x3, 0xdb}}, {0x101, 0xd4c, {0x3, 0x7ff}}, {0x10, 0x5, {0x3, 0x8000}}, {0x1ff, 0x4, {0x0, 0x35a}}, {0x4, 0x866, {0x2, 0x4}}, {0x3, 0x2, {0x0, 0x72}}, {0x3ff, 0x0, {0x1, 0x7}}, {0x101, 0x100, {0x2, 0x3}}, {0x1ff, 0x4, {0x2, 0x7f}}, {0x0, 0x8, {0x2, 0x8}}, {0x200, 0xffff, {0x2, 0x7}}, {0xfff, 0x600, {0x1, 0x7}}, {0x1, 0x2, {0x1, 0x4}}, {0x6, 0xf}, {0x2, 0xae6a, {0x2, 0x800}}, {0x40, 0x8, {0x0, 0x7}}, {0x8, 0x467d, {0x0, 0x1}}, {0x6, 0x200, {0x1, 0x5}}, {0x5, 0x3bbb, {0x2, 0x43d927f9}}, {0x9, 0x0, {0x0, 0xe4c80000}}, {0x3, 0x1, {0x2, 0x1}}, {0xfff, 0x6, {0x2, 0xfffffff7}}, {0x7f, 0x8, {0x0, 0xfffffffb}}, {0xfff, 0x5, {0x1, 0x4}}, {0x360, 0x79d8, {0x3, 0x7}}, {0x67, 0x5, {0x3, 0x9}}, {0x9, 0x7, {0x2, 0x1}}, {0x1b6, 0x2, {0x0, 0x5}}, {0x800, 0x3}, {0x6, 0x7fff, {0x0, 0xc}}, {0x9, 0x4, {0x2, 0x9}}, {0xc2df, 0x5, {0x2, 0x6}}, {0x5, 0x1, {0x0, 0x4}}, {0xfff8, 0xd1, {0x2, 0x2}}, {0x2, 0xf, {0x0, 0x3}}, {0x3, 0x3, {0x2, 0xfffffff8}}, {0xc1, 0xc82, {0x0, 0x6}}, {0x6, 0x2, {0x0, 0x4}}, {0x9, 0x2, {0x2, 0xe3b}}]}}}, {{0x254, 0x1, {{0x0, 0xc8}, 0x5, 0x1, 0x0, 0x1, 0x1d, 'syz1\x00', "ea933c4a6a9323de27cc3b47f6e6f19ee9e259d3352cc267e2957a44abbff644", "899869b2ea8e3b66a4a9413c3f966f3347eae3ac7d50bc90da27ef90dd17f995", [{0x7, 0x8, {0x1, 0x8001}}, {0xb11, 0xedf, {0x1, 0x80000000}}, {0x9, 0x101, {0x1}}, {0x9, 0x4, {0x0, 0xfffffff9}}, {0x6, 0x455, {0x0, 0x40000}}, {0x5, 0x4, {0x2, 0x8}}, {0x7, 0x0, {0x1, 0x454c}}, {0x1, 0x5, {0x3, 0x10}}, {0xfff, 0x7, {0x0, 0x3}}, {0x401, 0x7, {0x2, 0x2}}, {0x4, 0x1800, {0x2, 0xb}}, {0x3060, 0x4000, {0x3}}, {0xb8b3, 0x0, {0x2, 0x7ff}}, {0x7, 0x3, {0x1, 0x1ff}}, {0x7, 0x2, {0x3, 0x80}}, {0x3, 0x8, {0x1, 0xa}}, {0x3, 0xf79, {0x3, 0x8}}, {0x3, 0x6, {0x0, 0x4c8}}, {0x9, 0x6ea, {0x1, 0x9}}, {0x6, 0x9, {0x2, 0x40}}, {0x5, 0x4, {0x3, 0x3}}, {0x6, 0x5, {0x1, 0x5}}, {0x5, 0x3, {0x0, 0x5b72}}, {0x3, 0xff, {0x2, 0x80000001}}, {0x2, 0x8, {0x3, 0x9255}}, {0x2, 0x4, {0x2, 0x6}}, {0xf, 0x188, {0x2, 0x5}}, {0x2, 0x5, {0x3, 0x9}}, {0x7, 0x9, {0x0, 0x8001}}, {0xf0b, 0x9, {0x2, 0x7}}, {0x4, 0x0, {0x1, 0xfffffff8}}, {0x5, 0xa, {0x0, 0x2}}, {0x9, 0x5, {0x0, 0xfff}}, {0x9, 0x21, {0x3}}, {0x8, 0xde00}, {0x1, 0x6, {0x0, 0x6}}, {0x4, 0x4, {0x3, 0x5}}, {0x24d1, 0x8, {0x3, 0x101}}, {0x6, 0x57, {0x3, 0x9}}, {0x6, 0x240, {0x2, 0x5ce}}]}}}, {{0x254, 0x1, {{0x1, 0xff}, 0x4, 0xf, 0x81, 0x3, 0x1000, 'syz0\x00', "2bc12df7924eccd62f4b8588bc55584f59dc885ce09a4397d0461e9f1f7968be", "25206d08a1bc992e7924e64524c54da8f7b26e16d9f93872da6bbbb468574895", [{0x16f0, 0x8, {0x1, 0x9}}, {0x800, 0x4, {0x2, 0x2}}, {0x2, 0x7, {0x2, 0x6}}, {0x8, 0x9, {0x1, 0xfffffffd}}, {0x400, 0xff95, {0x0, 0x4}}, {0x9, 0x5, {0x0, 0x8}}, {0x1, 0x79, {0x3, 0x9}}, {0xbfc3, 0x3, {0x3, 0x20}}, {0x3, 0x101, {0x3, 0x9}}, {0x6, 0x5, {0x1, 0x6}}, {0x1, 0x1, {0x0, 0x6}}, {0x8, 0x2, {0x1, 0xd457}}, {0x1, 0x400, {0x0, 0xf5}}, {0x2, 0x7, {0x3}}, {0xffc, 0x5, {0x2, 0xc}}, {0xffff, 0x6, {0x3, 0x1}}, {0x0, 0x6723, {0x2, 0x7992}}, {0x2, 0x1ff, {0x3, 0x80}}, {0x7f, 0x7, {0x3}}, {0xace6, 0x6, {0x2, 0x9}}, {0xfffc, 0x4, {0x0, 0x7ff}}, {0x401, 0x1, {0x1, 0xa7a8a3af}}, {0x2, 0x5, {0x2, 0x6}}, {0x5, 0x8a7, {0x2, 0x5}}, {0x4, 0x7, {0x0, 0x8}}, {0x2, 0x9126, {0x2, 0x7fff}}, {0xbebc, 0x56, {0x3}}, {0x7, 0x1, {0x1, 0x4}}, {0x2, 0x7, {0x0, 0x80}}, {0x5, 0x7, {0x3, 0x5}}, {0x3, 0x8, {0x3, 0xffffffff}}, {0x564c, 0x7, {0x1, 0x4}}, {0x1, 0x6fd5, {0x2, 0xc}}, {0x6, 0x6, {0x2, 0xf126}}, {0x9, 0xfffe, {0x0, 0x9}}, {0x4, 0x8, {0x0, 0x7fff}}, {0x3d85, 0x0, {0x1, 0x5}}, {0x81, 0x1000, {0x2, 0x6}}, {0xd, 0x2, {0x0, 0x64df52f7}}, {0x2, 0x8}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 227.443589ms ago: executing program 4 (id=8603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002640)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002600)={&(0x7f00000023c0)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) 181.713731ms ago: executing program 2 (id=8604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000000d000000060008000000000006000a0000000000f6f00a9c9b986d4cf249a75316be18136bbdeaa84aba5f63cc7c4325247e95af0b7ff91afeb4abebfe14c57d0e2a15c408d8f7b378e57bdd5beb7159a09ad7fc6306992b70d125aad0bce41e7a1f37d8df2ab9a9338f1e6fd31018787cbd604b2b104693e6f3fb09ca024c2db41cb7bb16f606e0502108af5b1c38cb9c04598cd35c408b13d7b038da1c2ec2e9abc837852f83c098f8"], 0x24}}, 0x0) 56.258966ms ago: executing program 3 (id=8605): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x2, 0x0) listen(r0, 0x8) unshare(0x6020400) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000001000), 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @null, 0x1, 0x2, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r7, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 51.715181ms ago: executing program 0 (id=8606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000002c0)={r0, r0, 0x6, 0xc7, &(0x7f0000000100)="8ace18d3f13887ed56b3b89128d7c126cf42d4670f6e5f10fb5f605c149b9250af1f62fe1f26d9f7d9d581328695cbda805bb217217f9885ff5eb38c0b6c43fc6f727349e440fb9072b956d28bc677082628c7e0404356df76542e77f74df43aeeee82ef7fdcd196f5f14290672471f99669b6d3ad82fc7e8f3e06c7eec56ca5038ff81dc1ed47fd284f1ea19136277d7a7c32af469727f97ccb37353867436417110e7f45d87282b8db4d062bc2e3da31841d08f14dffa215a0c318c0b2420352da70d2004128", 0x19, 0x97, 0x0, 0x0, 0x1, 0x1, 0xfffff001, 'syz1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4040}, 0x600400c1) 0s ago: executing program 4 (id=8607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @multicast2}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x8000000, 0x5, {{0x2b, 0x4, 0x0, 0x1, 0xac, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x59, 0xffffffffffffffff, [{0x1, 0x2}, {0x3, 0xd, "284e2ca505eac33f32bbf0"}, {0x2, 0xd, "de69c2f43311ccf4f09e3b"}, {0x2, 0xd, "ebfc260dddd3577a946096"}, {0x7, 0x5, "543a91"}, {0x2, 0xb, "974a024b1a1d3d6775"}, {0x6, 0xb, "c8948f6836f01943b1"}, {0x2, 0xd, "35c4f599a384e12e41ce96"}, {0x7, 0x2}]}, @rr={0x7, 0xf, 0xfb, [@remote, @loopback, @loopback]}, @timestamp_addr={0x44, 0x14, 0xf4, 0x1, 0x9, [{@private=0xa010100, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}]}, @ssrr={0x89, 0xb, 0x1a, [@local, @dev={0xac, 0x14, 0x14, 0x3e}]}, @cipso={0x86, 0xf, 0x3, [{0x6, 0x9, "c238a2a4c560de"}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x0, 0x6, 0xb, @remote, @mcast1, 0x700, 0x80, 0x2, 0xffff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@initdev, @multicast1, 0x0}, &(0x7f0000000480)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x380, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1186, 0x8, 0x1, 0xb}, {0x4, 0x81, 0x3, 0xff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8b1e655}}, {0x8}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000008c0)=0x1) tee(r0, r0, 0xf0, 0x0) r9 = socket$inet6(0xa, 0x0, 0x9) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000900)={'nat\x00', 0x0, [0xfa, 0x8, 0x7, 0x3, 0xd8400000]}, &(0x7f0000000980)=0x54) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) r10 = accept4(r9, &(0x7f0000000a40)=@xdp, &(0x7f0000000ac0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000b80)={r11, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}}, &(0x7f0000000c40)=0x84) r13 = socket$inet6(0xa, 0x3, 0x8de) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r13, 0x84, 0x12, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) sendto$phonet(r10, &(0x7f0000000d00)="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", 0xfa, 0x24000000, &(0x7f0000000e00)={0x23, 0x8, 0x9, 0xf4}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000e40), &(0x7f0000000e80)=0xe) sendto$inet6(r9, &(0x7f0000000ec0)="b04ce8805dd0e01725d29508984b8996aa54b1cf52ec0f54f77c0cd01f89862892c9d667e6c869cb8ab778aa05448cb1387ef4232c0aab7202af3c", 0x3b, 0x8000, &(0x7f0000000f00)={0xa, 0x4e21, 0x0, @mcast1, 0x5}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000f40)={'dvmrp0\x00', {0x2, 0x0, @dev}}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x68, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8860}, 0x20000001) r15 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000010c0), 0x2, 0x0) write$cgroup_subtree(r15, &(0x7f0000001100)={[{0x2b, 'net_cls'}]}, 0x9) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000001140)={r12, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000001180)={r12, 0x4}, 0x8) kernel console output (not intermixed with test programs): invalid length. [ 738.840367][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.840402][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 738.882351][T30043] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6581'. [ 738.948349][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.972548][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 739.001469][T30050] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6582'. [ 739.100255][ T1082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.115486][T30057] tipc: Enabling of bearer rejected, failed to enable media [ 739.136383][ T1082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 739.256803][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.268036][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 739.507777][T30076] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6590'. [ 739.532641][T30077] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6588'. [ 739.562609][T30079] sctp: [Deprecated]: syz.0.6591 (pid 30079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.562609][T30079] Use struct sctp_sack_info instead [ 739.666289][T30083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6590'. [ 739.685143][T30085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6594'. [ 739.927561][T30096] sctp: [Deprecated]: syz.0.6593 (pid 30096) Use of int in maxseg socket option. [ 739.927561][T30096] Use struct sctp_assoc_value instead [ 740.051403][T30085] delete_channel: no stack [ 740.316275][T30131] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 740.353860][T30136] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 740.381675][T30131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6602'. [ 740.394023][T30136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6602'. [ 740.674248][T30145] syzkaller0: entered promiscuous mode [ 740.683525][T30145] syzkaller0: entered allmulticast mode [ 743.130009][T30109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.143491][T30133] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6603'. [ 743.165600][T30133] netlink: 'syz.2.6603': attribute type 1 has an invalid length. [ 743.561947][T30171] syzkaller0: entered promiscuous mode [ 743.567849][T30171] syzkaller0: entered allmulticast mode [ 743.578884][T30171] tipc: Started in network mode [ 743.585114][T30171] tipc: Node identity 2a9375c8106, cluster identity 4711 [ 743.598715][T30171] tipc: Enabled bearer , priority 0 [ 743.629876][T30171] netlink: 'syz.1.6615': attribute type 12 has an invalid length. [ 743.649554][T30171] netlink: 'syz.1.6615': attribute type 29 has an invalid length. [ 743.664939][T30171] __nla_validate_parse: 1 callbacks suppressed [ 743.664960][T30171] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6615'. [ 743.688702][T30171] netlink: 'syz.1.6615': attribute type 2 has an invalid length. [ 743.706812][T30171] netlink: 'syz.1.6615': attribute type 3 has an invalid length. [ 743.740169][T28868] net_ratelimit: 86 callbacks suppressed [ 743.740190][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.766788][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.780105][T30171] netlink: 15 bytes leftover after parsing attributes in process `syz.1.6615'. [ 743.788188][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.842655][T30190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6621'. [ 743.848050][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.882015][T30169] tipc: Resetting bearer [ 743.907384][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.946791][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.960453][T30169] tipc: Disabling bearer [ 743.987014][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.007199][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.026979][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.046095][T30199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6624'. [ 744.057092][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.877852][T30244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6634'. [ 744.967887][T30244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.112028][T30246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.119854][T30246] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 745.131818][T30246] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 745.459093][T30278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6644'. [ 745.515577][T30284] netlink: 'syz.2.6646': attribute type 1 has an invalid length. [ 745.562242][T30284] bond3: entered promiscuous mode [ 745.568214][T30284] 8021q: adding VLAN 0 to HW filter on device bond3 [ 745.674010][T30291] netlink: 'syz.0.6648': attribute type 9 has an invalid length. [ 745.694826][T30284] 8021q: adding VLAN 0 to HW filter on device bond3 [ 745.715569][T30291] netlink: 'syz.0.6648': attribute type 6 has an invalid length. [ 745.730083][T30284] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 745.760910][T30284] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 745.830693][T30284] bond3: (slave vti0): making interface the new active one [ 745.847205][T30284] vti0: entered promiscuous mode [ 745.858737][T30284] bond3: (slave vti0): Enslaving as an active interface with an up link [ 746.032741][T30309] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6650'. [ 746.718144][T30335] netlink: 'syz.3.6659': attribute type 61 has an invalid length. [ 746.777768][T30341] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6664'. [ 746.980025][T30359] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 747.132896][T30371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6673'. [ 747.159715][T30362] netlink: 'syz.3.6671': attribute type 1 has an invalid length. [ 747.202029][T30376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 747.262503][T30376] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 747.437784][T30389] bond2: (slave gretap1): making interface the new active one [ 747.451722][T30389] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 747.464261][T30388] tipc: Failed to obtain node identity [ 747.479535][T30388] tipc: Enabling of bearer rejected, failed to enable media [ 747.622736][T30394] bond3: (slave gretap1): making interface the new active one [ 747.634826][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6677'. [ 747.640740][T30394] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 747.686002][T30376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 747.696624][T30376] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 747.727210][T30402] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 747.780786][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.846508][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.882550][T30376] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 747.893534][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.905228][T30376] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 747.918446][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.025205][T30376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 748.077843][T30376] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 748.184173][T30419] validate_nla: 1 callbacks suppressed [ 748.184194][T30419] netlink: 'syz.0.6684': attribute type 16 has an invalid length. [ 748.211575][T30419] netlink: 'syz.0.6684': attribute type 17 has an invalid length. [ 748.337444][T30419] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.345947][T30419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.354650][T30419] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.362373][T30419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.390927][T30419] bridge0: left allmulticast mode [ 748.506099][T30376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 748.554458][T30376] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 748.776905][T28877] net_ratelimit: 126 callbacks suppressed [ 748.776942][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 748.817686][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 748.856174][T28877] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 748.988706][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.009701][T28877] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 749.058771][T30457] __nla_validate_parse: 4 callbacks suppressed [ 749.058794][T30457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6693'. [ 749.146998][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.178919][T30468] x_tables: duplicate underflow at hook 1 [ 749.189187][T30468] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6696'. [ 749.192242][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 749.417238][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.473429][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.494726][T30483] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6701'. [ 749.522522][T30470] bond4 (unregistering): Released all slaves [ 749.529683][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 750.333516][T30524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'. [ 750.561155][T30538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6716'. [ 750.910918][T30556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6721'. [ 750.943173][T30555] netlink: 'syz.3.6720': attribute type 9 has an invalid length. [ 750.962154][T30555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6720'. [ 751.028805][T30555] netlink: 'syz.3.6720': attribute type 9 has an invalid length. [ 751.070675][T30555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6720'. [ 751.395028][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 751.478733][ T8284] IPVS: starting estimator thread 0... [ 751.597434][T30583] IPVS: using max 26 ests per chain, 62400 per kthread [ 752.235307][T30619] netlink: 'syz.0.6737': attribute type 1 has an invalid length. [ 752.273585][T30619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6737'. [ 752.308581][T30625] netlink: 'syz.0.6737': attribute type 12 has an invalid length. [ 752.327717][T30625] netlink: 'syz.0.6737': attribute type 11 has an invalid length. [ 752.528345][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 752.822751][T30648] netlink: 'syz.1.6746': attribute type 1 has an invalid length. [ 752.937539][T30652] syzkaller0: entered promiscuous mode [ 752.943979][T30652] syzkaller0: entered allmulticast mode [ 753.817129][T28868] net_ratelimit: 113 callbacks suppressed [ 753.817153][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 753.886795][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 753.903397][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 754.016713][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 754.029045][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 754.065718][T30722] set match dimension is over the limit! [ 754.167326][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 754.175362][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 754.206064][T30733] __nla_validate_parse: 16 callbacks suppressed [ 754.206089][T30733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6777'. [ 754.316941][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 754.324936][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 754.348736][T30743] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6780'. [ 754.362729][T30740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6782'. [ 754.438927][ T6255] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 754.688648][T30761] netlink: 284 bytes leftover after parsing attributes in process `syz.1.6787'. [ 754.949094][T30777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6794'. [ 755.003843][T30782] block nbd5: Unsupported socket: should be TCP or UNIX. [ 755.014049][T30782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6795'. [ 755.025979][T30782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6795'. [ 755.051318][T30784] netlink: 'syz.0.6796': attribute type 11 has an invalid length. [ 755.060108][T30784] netlink: 'syz.0.6796': attribute type 11 has an invalid length. [ 755.070921][T30784] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6796'. [ 755.172478][T30792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6797'. [ 755.248494][T30792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6797'. [ 755.292067][T30789] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 755.334680][T30789] bond4 (unregistering): Released all slaves [ 755.578652][T30811] netlink: 'syz.2.6803': attribute type 1 has an invalid length. [ 755.704226][T30818] netlink: 'syz.3.6804': attribute type 2 has an invalid length. [ 756.232593][T30858] dvmrp0: entered allmulticast mode [ 756.310792][T30865] netlink: 'syz.4.6818': attribute type 10 has an invalid length. [ 756.729080][T30895] veth0: entered promiscuous mode [ 756.767506][T30898] netlink: 'syz.4.6827': attribute type 8 has an invalid length. [ 756.940768][T30906] netlink: 'syz.3.6830': attribute type 4 has an invalid length. [ 757.049013][T30910] netlink: 'syz.3.6830': attribute type 4 has an invalid length. [ 757.131002][T30893] veth0: left promiscuous mode [ 757.530867][T30914] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.538883][T30914] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.222622][T30914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.230996][T30923] lec:lec_atm_close: lec0: Shut down! [ 758.288396][T30914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.694225][T30918] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.717258][T30920] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.761012][T28877] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.809444][T28877] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.827206][T28868] net_ratelimit: 144 callbacks suppressed [ 758.827230][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 758.866663][T28877] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.875619][T28877] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.917722][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 758.937492][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.008543][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.068669][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.117362][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.137015][ T6264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.174737][T28877] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.185552][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.217143][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.226170][T28877] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.265534][T28877] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.275195][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.299230][T28877] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.591591][T30968] netlink: 'syz.1.6847': attribute type 1 has an invalid length. [ 760.408712][T31022] ipt_rpfilter: unknown options [ 760.558775][T31027] veth0_to_team: entered promiscuous mode [ 760.565392][T31028] __nla_validate_parse: 11 callbacks suppressed [ 760.565413][T31028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6863'. [ 760.571438][T31027] veth0_to_team: entered allmulticast mode [ 760.667644][T31030] netlink: 'syz.4.6864': attribute type 1 has an invalid length. [ 760.944461][T31042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'. [ 760.995893][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6870'. [ 761.182937][T31060] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode [ 761.246213][T31063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.292674][T31063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.343948][T31065] netlink: 'syz.3.6878': attribute type 2 has an invalid length. [ 761.508061][T31072] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6880'. [ 761.995316][T31086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6883'. [ 762.115700][T31092] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 762.181281][T31099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6886'. [ 762.245315][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035c5b400: rx timeout, send abort [ 762.255235][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035c5b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 762.409347][T31114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6890'. [ 762.449454][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.449614][T31114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6890'. [ 762.470913][T31118] xt_hashlimit: size too large, truncated to 1048576 [ 762.506818][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.552402][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.762658][T31129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6894'. [ 762.771762][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.824667][T31134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6894'. [ 762.929041][T31129] netlink: 'syz.3.6894': attribute type 17 has an invalid length. [ 762.998693][T31129] bridge0: entered promiscuous mode [ 763.029660][T31129] bridge0: left promiscuous mode [ 763.283477][T31141] syzkaller0: entered allmulticast mode [ 763.338767][T31141] syzkaller0 (unregistering): left allmulticast mode [ 763.447496][T31145] netlink: 'syz.3.6897': attribute type 2 has an invalid length. [ 763.499640][T31145] : entered promiscuous mode [ 763.528909][T31145] netlink: 'syz.3.6897': attribute type 11 has an invalid length. [ 763.755650][T31170] netlink: 'syz.2.6904': attribute type 11 has an invalid length. [ 763.847094][ T12] net_ratelimit: 117 callbacks suppressed [ 763.847119][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 763.906659][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 763.959658][ T6255] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.019064][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.028178][T28877] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 764.036643][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 764.044764][ C1] lec:lec_tx_timeout: lec0 [ 764.138586][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.169279][ T6255] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.197249][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.257698][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.288641][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.817323][T31219] netlink: 'syz.0.6916': attribute type 11 has an invalid length. [ 764.853512][T31219] netlink: 'syz.0.6916': attribute type 4 has an invalid length. [ 764.865203][T31219] netlink: 'syz.0.6916': attribute type 5 has an invalid length. [ 764.874772][T31219] netlink: 'syz.0.6916': attribute type 6 has an invalid length. [ 764.888127][T31223] netlink: 'syz.3.6918': attribute type 1 has an invalid length. [ 765.129364][T31235] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 765.332385][T31248] sctp: [Deprecated]: syz.4.6925 (pid 31248) Use of int in max_burst socket option deprecated. [ 765.332385][T31248] Use struct sctp_assoc_value instead [ 765.495268][T31260] netlink: 'syz.0.6926': attribute type 4 has an invalid length. [ 765.524339][T31260] x_tables: duplicate underflow at hook 1 [ 765.567938][T31263] __nla_validate_parse: 14 callbacks suppressed [ 765.567958][T31263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6930'. [ 765.568482][T31261] sctp: [Deprecated]: syz.2.6928 (pid 31261) Use of int in maxseg socket option. [ 765.568482][T31261] Use struct sctp_assoc_value instead [ 765.829513][T31274] netlink: 'syz.3.6934': attribute type 10 has an invalid length. [ 765.842898][T31274] veth0_vlan: left promiscuous mode [ 765.851204][T31274] veth0_vlan: entered promiscuous mode [ 765.859783][T31274] team0: Device veth0_vlan failed to register rx_handler [ 766.164641][T31293] syzkaller0: entered promiscuous mode [ 766.185519][T31293] syzkaller0: entered allmulticast mode [ 766.272685][T31293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6940'. [ 766.312549][T31293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6940'. [ 766.727653][T31337] netlink: 'syz.2.6949': attribute type 3 has an invalid length. [ 766.962445][T31355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6954'. [ 766.993742][T31349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6954'. [ 767.127716][T31358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'. [ 767.172522][T31359] vcan2: entered promiscuous mode [ 767.187756][T31359] vcan2: entered allmulticast mode [ 767.300095][T31358] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 767.389182][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6959'. [ 767.412232][T31364] syzkaller0: entered promiscuous mode [ 767.419932][T31364] syzkaller0: entered allmulticast mode [ 767.429249][T31370] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6959'. [ 768.857525][ T6266] net_ratelimit: 140 callbacks suppressed [ 768.857550][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 768.888376][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 768.917096][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 768.937087][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 768.956713][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 768.976855][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 768.998802][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 769.042569][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 769.067769][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 769.086883][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 770.226441][ T7598] lec:lec_start_xmit: lec0:No lecd attached [ 770.274637][T31402] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6969'. [ 770.298394][T31402] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6969'. [ 770.327043][T31403] syzkaller0: entered promiscuous mode [ 770.332595][T31403] syzkaller0: entered allmulticast mode [ 770.361469][T31403] netlink: 'syz.1.6970': attribute type 29 has an invalid length. [ 770.442651][T31415] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 770.694920][T31421] syzkaller1: entered promiscuous mode [ 770.704927][T31421] syzkaller1: entered allmulticast mode [ 770.755907][T31436] __nla_validate_parse: 1 callbacks suppressed [ 770.755930][T31436] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6977'. [ 770.774525][T31436] delete_channel: no stack [ 770.915873][T31439] bond4: option all_slaves_active: invalid value (222) [ 770.939568][T31439] bond4 (unregistering): Released all slaves [ 771.039678][T31453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6983'. [ 771.049035][T31453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6983'. [ 771.234710][T31461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6986'. [ 771.412853][T31468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6989'. [ 771.483277][T31472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6991'. [ 771.503965][T31470] !: renamed from lo [ 771.529605][T31472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6991'. [ 771.540043][T31474] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6992'. [ 771.578005][T31472] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 771.585898][T31472] netlink: 'syz.2.6991': attribute type 8 has an invalid length. [ 771.627712][T31472] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6991'. [ 772.235124][ T30] audit: type=1800 audit(1770614386.659:5): pid=31495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7000" name="memory.events" dev="tmpfs" ino=937 res=0 errno=0 [ 772.280518][T31498] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7002'. [ 772.446122][T31512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.503874][T31519] netlink: 'syz.2.7007': attribute type 2 has an invalid length. [ 772.562212][T31512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.712229][T31512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.908368][T31539] geneve2: entered promiscuous mode [ 773.032200][T31512] bond0: (slave netdevsim0): Releasing backup interface [ 773.052617][T31512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.302184][ T6264] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.316952][ T6264] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.376359][ T6255] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.432085][T31573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.448409][T28863] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.517164][T31577] batman_adv: batadv0: Adding interface: dummy0 [ 773.555896][T31577] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.597331][T31577] batman_adv: batadv0: Interface activated: dummy0 [ 773.739840][T31591] policy can only be matched on NF_INET_PRE_ROUTING [ 773.739957][T31591] unable to load match [ 773.877298][ T6266] net_ratelimit: 157 callbacks suppressed [ 773.877323][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 773.966432][ T6266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 774.136785][ T6255] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 774.157693][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 774.165595][ T6266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 774.656716][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 774.664736][ T6266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 774.824269][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 774.841625][T28877] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 774.968364][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 775.072341][T31663] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 775.108267][T31665] bridge_slave_0: default FDB implementation only supports local addresses [ 775.462199][T31685] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 775.481009][T31691] netlink: 'syz.0.7056': attribute type 3 has an invalid length. [ 775.517538][T31685] syzkaller0: entered promiscuous mode [ 775.523578][T31685] syzkaller0: entered allmulticast mode [ 775.688365][T31691] syzkaller0: entered promiscuous mode [ 775.713007][T31691] syzkaller0: entered allmulticast mode [ 775.758714][T31704] __nla_validate_parse: 17 callbacks suppressed [ 775.758735][T31704] netlink: 190976 bytes leftover after parsing attributes in process `syz.2.7059'. [ 776.036667][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 776.045038][ C1] lec:lec_tx_timeout: lec0 [ 776.172859][T31724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7061'. [ 776.191479][T31725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7062'. [ 776.237477][T31720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7061'. [ 776.420990][T31736] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7064'. [ 776.464069][T31739] netlink: 'syz.2.7065': attribute type 39 has an invalid length. [ 776.532454][T31740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7064'. [ 778.898391][T28863] net_ratelimit: 151 callbacks suppressed [ 778.898415][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 778.931784][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 778.962184][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 778.990684][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.018373][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.056834][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.077888][ T6255] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.109083][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.144028][ T6255] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.175204][ T6255] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.319999][T31768] netlink: 'syz.2.7068': attribute type 1 has an invalid length. [ 779.382024][T31772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7070'. [ 779.442972][T31772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7070'. [ 779.460261][T31772] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7070'. [ 779.481780][T31772] xt_hashlimit: size too large, truncated to 1048576 [ 779.520166][T31777] netlink: 'syz.1.7071': attribute type 10 has an invalid length. [ 779.531887][T31777] bond0: (slave wlan1): Opening slave failed [ 779.541755][T31775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.658228][T31785] netlink: 'syz.2.7074': attribute type 1 has an invalid length. [ 779.972541][T31803] batman_adv: batadv0: Adding interface: dummy0 [ 779.979453][T31803] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.015994][T31803] batman_adv: batadv0: Interface activated: dummy0 [ 780.034169][T31807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7082'. [ 780.081547][T31807] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 780.092745][T31807] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 780.116121][T31807] team0: Failed to send options change via netlink (err -105) [ 780.137068][T31807] team0: Port device batadv2 added [ 780.420353][T31836] : entered promiscuous mode [ 780.729138][T31859] dvmrp6: entered allmulticast mode [ 781.153001][T31893] netlink: 'syz.3.7109': attribute type 21 has an invalid length. [ 781.154755][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.168762][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.175958][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.224410][T31894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 781.303566][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.312597][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.323595][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.349585][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.375139][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.390485][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.405902][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.415486][T31894] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.457297][T31905] __nla_validate_parse: 4 callbacks suppressed [ 781.457319][T31905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7112'. [ 781.504529][T31911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7114'. [ 781.543579][T31911] bond1: entered promiscuous mode [ 781.549653][T31911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.570784][T31911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7114'. [ 781.580229][T31911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7114'. [ 781.596666][T31917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7115'. [ 781.634883][T31915] bond1: (slave xfrm1): refused to change device type [ 781.812244][T31927] netlink: 'syz.3.7117': attribute type 4 has an invalid length. [ 781.840277][T31927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7117'. [ 782.235904][T31945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7123'. [ 782.265748][T31945] netlink: 'syz.1.7123': attribute type 7 has an invalid length. [ 782.273656][T31945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7123'. [ 782.307797][T31947] delete_channel: no stack [ 782.329221][T31945] debugfs: 'hsr1' already exists in 'hsr' [ 782.346664][T31945] Cannot create hsr debugfs directory [ 782.352400][T31945] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 782.376685][T31945] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 782.598991][T31958] xt_hashlimit: size too large, truncated to 1048576 [ 782.666827][T31968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7133'. [ 782.741137][T31975] xt_hashlimit: size too large, truncated to 1048576 [ 782.847395][T31983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7137'. [ 783.131341][T31999] syzkaller0: entered promiscuous mode [ 783.142440][T31999] syzkaller0: entered allmulticast mode [ 783.164738][T31999] netlink: 'syz.4.7140': attribute type 3 has an invalid length. [ 783.176312][T32001] netem: invalid attributes len -24 [ 783.184527][T32001] netem: change failed [ 783.578502][T32017] veth5: entered allmulticast mode [ 783.819052][T32023] netlink: 'syz.3.7150': attribute type 14 has an invalid length. [ 783.847279][T32023] netlink: 'syz.3.7150': attribute type 14 has an invalid length. [ 783.862337][T32027] netlink: 'syz.0.7152': attribute type 1 has an invalid length. [ 783.946723][T28863] net_ratelimit: 107 callbacks suppressed [ 783.946747][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 783.995438][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 784.128691][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.147344][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 784.258070][ T6264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.290889][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.300253][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 784.353673][T32065] netlink: 'syz.3.7163': attribute type 1 has an invalid length. [ 784.522870][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.556694][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.569339][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 784.577412][T32075] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 784.841398][T32094] netlink: 'syz.0.7171': attribute type 16 has an invalid length. [ 784.880911][T32094] netlink: 'syz.0.7171': attribute type 17 has an invalid length. [ 785.043850][T32104] syzkaller0: entered promiscuous mode [ 785.053237][T32104] syzkaller0: entered allmulticast mode [ 785.074819][T32105] netlink: 'syz.2.7176': attribute type 1 has an invalid length. [ 785.183290][T32119] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 785.613476][T32126] syzkaller0: entered promiscuous mode [ 785.634467][T32126] syzkaller0: entered allmulticast mode [ 787.982388][T32148] __nla_validate_parse: 22 callbacks suppressed [ 787.982409][T32148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7187'. [ 788.548614][T32188] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.556333][T32188] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.580279][T32188] batman_adv: batadv0: Interface deactivated: dummy0 [ 788.666180][T32188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.682891][T32188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.767962][T32188] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 788.851871][T28877] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.894915][T28877] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.909370][T28877] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.956966][ T6266] net_ratelimit: 166 callbacks suppressed [ 788.956988][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 788.959092][T28877] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.987286][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 788.995725][T32206] netlink: 'syz.4.7206': attribute type 83 has an invalid length. [ 789.026629][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.028505][T28877] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.047481][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.057003][T28877] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.067877][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.076978][T28877] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.097532][T28877] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.107034][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.123935][T32213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7208'. [ 789.157881][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.217174][ T6255] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.266696][ T6264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.318657][T28877] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.478261][T32213] team0: Port device team_slave_0 removed [ 789.770781][T32251] netlink: 'syz.0.7217': attribute type 1 has an invalid length. [ 790.104522][T32260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7221'. [ 790.297077][T32268] netlink: 'syz.0.7223': attribute type 30 has an invalid length. [ 790.526127][T32277] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7227'. [ 790.575995][T32281] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7228'. [ 790.674463][T32274] "syz.2.7226" (32274) uses obsolete ecb(arc4) skcipher [ 790.739048][T32287] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 790.819022][T32295] netlink: 'syz.0.7230': attribute type 29 has an invalid length. [ 790.838798][T32295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7230'. [ 790.902657][T32295] netlink: 'syz.0.7230': attribute type 25 has an invalid length. [ 790.958658][T32295] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7230'. [ 791.148238][T32313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7235'. [ 791.167187][T32313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7235'. [ 791.177407][T32313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7235'. [ 791.509566][T32347] set match dimension is over the limit! [ 792.275627][T32408] netlink: 'syz.4.7266': attribute type 1 has an invalid length. [ 792.313770][T32408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 792.478924][T32418] bond4: (slave gretap2): making interface the new active one [ 792.522822][T32418] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 792.593182][T32438] netlink: 'syz.3.7270': attribute type 8 has an invalid length. [ 792.641008][T32439] veth5: entered promiscuous mode [ 792.664469][T32440] netlink: 'syz.3.7270': attribute type 8 has an invalid length. [ 793.252522][T32483] __nla_validate_parse: 10 callbacks suppressed [ 793.252542][T32483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7284'. [ 793.621969][T32507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7290'. [ 793.665001][T32509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7286'. [ 793.694723][T32507] syzkaller0: entered promiscuous mode [ 793.702321][T32507] syzkaller0: entered allmulticast mode [ 793.727548][T32515] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 794.069460][T32425] net_ratelimit: 115 callbacks suppressed [ 794.069485][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.103960][T32425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 794.142432][T32537] netlink: 'syz.2.7300': attribute type 4 has an invalid length. [ 794.220135][T32534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7298'. [ 794.237815][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.246078][T32534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7298'. [ 794.256182][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 794.409324][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.424561][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 794.548950][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.580627][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 794.717551][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.769476][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.772573][T32565] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 794.816383][T32565] bond3 (unregistering): Released all slaves [ 794.912817][T32579] netlink: 'syz.3.7307': attribute type 1 has an invalid length. [ 794.960195][T32568] virt_wifi0 speed is unknown, defaulting to 1000 [ 795.173501][T32595] netlink: 'syz.4.7314': attribute type 16 has an invalid length. [ 795.229000][T32595] netlink: 'syz.4.7314': attribute type 17 has an invalid length. [ 795.244431][T32596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7314'. [ 795.259797][T32599] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 795.267842][T32596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7314'. [ 795.297601][T32596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7314'. [ 795.319344][T32596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7314'. [ 795.369065][T32596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7314'. [ 795.473548][T32595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.485423][T32609] netlink: 'syz.0.7318': attribute type 2 has an invalid length. [ 795.491332][T32595] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.503704][T32595] batman_adv: batadv0: Interface activated: dummy0 [ 795.528794][T32595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.590367][T32595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.601178][T32595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.616256][T32595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 795.627541][T32595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 795.647764][T32595] veth1_vlan: left promiscuous mode [ 795.654470][T32595] veth0_vlan: left promiscuous mode [ 795.662465][T32595] veth0_vlan: entered promiscuous mode [ 795.674938][T32595] veth1_vlan: entered promiscuous mode [ 795.689858][T32595] veth1_macvtap: left promiscuous mode [ 795.697486][T32595] veth0_macvtap: left promiscuous mode [ 795.705188][T32595] veth0_macvtap: entered promiscuous mode [ 795.713891][T32595] veth1_macvtap: entered promiscuous mode [ 795.741838][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.749157][ T6266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.762161][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.769418][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.949757][T32612] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.064973][T32633] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 796.135521][T32612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.169445][T32612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.404913][T32612] bond1: left promiscuous mode [ 796.418263][T28863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.443254][T28863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.532934][T32624] batadv1: entered allmulticast mode [ 796.613664][T32651] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 796.632977][T28863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.681913][T28863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.705098][T28863] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.742384][T28863] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.752151][T28863] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.763328][T28863] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.200794][T32693] netlink: 'syz.4.7339': attribute type 12 has an invalid length. [ 797.212356][T32693] netlink: 'syz.4.7339': attribute type 29 has an invalid length. [ 797.433231][T32701] xt_hashlimit: invalid interval [ 797.456758][T32704] netlink: 'syz.4.7343': attribute type 1 has an invalid length. [ 797.604282][T32712] bridge_slave_0: entered promiscuous mode [ 797.804537][T32722] bridge0: port 1(wlan0) entered blocking state [ 797.812555][T32722] bridge0: port 1(wlan0) entered disabled state [ 798.650430][ T304] netlink: 'syz.0.7366': attribute type 21 has an invalid length. [ 798.670163][ T304] __nla_validate_parse: 73 callbacks suppressed [ 798.670186][ T304] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7366'. [ 798.689128][ T308] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7367'. [ 798.989585][ T326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7374'. [ 799.106949][T28873] net_ratelimit: 133 callbacks suppressed [ 799.106983][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.166759][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 799.287735][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.297195][T32425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 799.406822][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.414834][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 799.534803][ T364] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 799.578434][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.617391][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.658525][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 800.124144][ T404] netlink: 'syz.1.7393': attribute type 21 has an invalid length. [ 800.133103][ T404] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7393'. [ 800.467092][ T428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7399'. [ 800.518937][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7401'. [ 800.544718][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7401'. [ 800.851406][ T456] virt_wifi0 speed is unknown, defaulting to 1000 [ 800.973495][ T463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7409'. [ 801.118631][ T476] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7411'. [ 801.440090][ T495] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 801.533592][ T497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7421'. [ 801.830271][ T518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.544463][ T565] virt_wifi0 speed is unknown, defaulting to 1000 [ 802.864786][ T587] netlink: 'syz.4.7448': attribute type 30 has an invalid length. [ 803.052899][ T605] delete_channel: no stack [ 803.216788][ T618] netlink: 'syz.4.7454': attribute type 61 has an invalid length. [ 803.272400][ T622] tipc: Failed to obtain node identity [ 803.292725][ T622] tipc: Enabling of bearer rejected, failed to enable media [ 803.429861][ T631] netlink: 'syz.0.7457': attribute type 13 has an invalid length. [ 803.439076][ T633] bond0: (slave gre0): Error: Device type is different from other slaves [ 803.450100][ T631] syz_tun: refused to change device tx_queue_len [ 804.126961][T28863] net_ratelimit: 103 callbacks suppressed [ 804.126984][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.167126][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.197920][ T646] netlink: 'syz.3.7461': attribute type 1 has an invalid length. [ 804.205726][ T646] __nla_validate_parse: 9 callbacks suppressed [ 804.205745][ T646] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7461'. [ 804.224656][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.234657][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 804.245375][ T646] netlink: 658 bytes leftover after parsing attributes in process `syz.3.7461'. [ 804.261444][ T646] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7461'. [ 804.313944][ T650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7462'. [ 804.323804][ T650] netlink: 'syz.4.7462': attribute type 5 has an invalid length. [ 804.333167][ T650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7462'. [ 804.358439][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.371013][ T650] geneve2: entered promiscuous mode [ 804.395523][ T650] geneve2: entered allmulticast mode [ 804.414441][T28879] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 804.426988][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.446733][T28879] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 804.452314][ T658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7465'. [ 804.465649][ T654] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 804.487367][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.506696][ T658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7465'. [ 804.509821][T28879] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 804.550465][T28879] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 804.567186][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.596837][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.622761][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.726407][ T671] tipc: Failed to obtain node identity [ 804.740072][ T671] tipc: Enabling of bearer rejected, failed to enable media [ 804.939425][ T692] veth5: entered allmulticast mode [ 804.940305][ T694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7472'. [ 804.978020][ T694] bond0: entered promiscuous mode [ 804.995609][ T699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7472'. [ 805.009686][ T694] bond_slave_0: entered promiscuous mode [ 805.015762][ T694] bond_slave_1: entered promiscuous mode [ 805.027567][ T694] bond0: left promiscuous mode [ 805.033930][ T694] bond_slave_0: left promiscuous mode [ 805.042683][ T694] bond_slave_1: left promiscuous mode [ 805.131137][ T703] virt_wifi0 speed is unknown, defaulting to 1000 [ 805.233126][ T705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7476'. [ 805.279498][ T709] netlink: 'syz.4.7478': attribute type 1 has an invalid length. [ 805.408948][ T722] netlink: 'syz.0.7480': attribute type 1 has an invalid length. [ 805.580846][ T733] netlink: 'syz.4.7481': attribute type 8 has an invalid length. [ 805.640529][ T712] tipc: Enabling of bearer rejected, media not registered [ 805.771858][ T719] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 805.788975][ T719] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 805.987550][ T746] vcan0: tx address claim with dlc 0 [ 806.142767][ T756] bridge_slave_1: left allmulticast mode [ 806.163147][ T756] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.178421][ T756] bridge_slave_0: left allmulticast mode [ 806.188771][ T755] netlink: 'syz.4.7487': attribute type 10 has an invalid length. [ 806.197125][ T756] bridge_slave_0: left promiscuous mode [ 806.197383][ T756] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.254287][ T760] netlink: 'syz.3.7488': attribute type 1 has an invalid length. [ 806.268584][ T761] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 806.280447][ T760] netlink: 'syz.3.7488': attribute type 1 has an invalid length. [ 806.321849][ T755] team0: Device veth0_macvtap failed to register rx_handler [ 806.644039][ T784] netlink: 'syz.1.7494': attribute type 7 has an invalid length. [ 806.657875][ T784] netlink: 'syz.1.7494': attribute type 7 has an invalid length. [ 807.233182][ T828] netlink: 'syz.1.7506': attribute type 30 has an invalid length. [ 807.283838][ T828] bond4: option arp_missed_max: invalid value (0) [ 807.290745][ T828] bond4: option arp_missed_max: allowed values 1 - 255 [ 807.301131][ T828] bond4 (unregistering): Released all slaves [ 807.546370][ T846] netlink: 'syz.1.7511': attribute type 1 has an invalid length. [ 807.610893][ T845] bond4: entered promiscuous mode [ 807.617734][ T845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.800725][ T866] bond5: option min_links: invalid value (18446744073709551614) [ 807.828716][ T866] bond5: option min_links: allowed values 0 - 2147483647 [ 807.862827][ T866] bond5 (unregistering): Released all slaves [ 807.894795][ T873] netlink: 'syz.4.7519': attribute type 11 has an invalid length. [ 807.925263][ T872] netlink: 'syz.4.7519': attribute type 11 has an invalid length. [ 808.343649][ T893] x_tables: unsorted underflow at hook 2 [ 808.582294][ T914] syzkaller0: entered promiscuous mode [ 808.588354][ T914] syzkaller0: entered allmulticast mode [ 809.008536][ T941] xt_ipcomp: unknown flags 1D [ 809.190125][ T960] virt_wifi0 speed is unknown, defaulting to 1000 [ 809.227305][T28868] net_ratelimit: 172 callbacks suppressed [ 809.227685][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.267801][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.316336][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.356676][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.381139][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.407293][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.447005][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.458224][ T970] __nla_validate_parse: 17 callbacks suppressed [ 809.458244][ T970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7546'. [ 809.473967][ T970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7546'. [ 809.490127][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.523695][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.542487][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 809.666534][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.675176][ T974] bridge_slave_1: left allmulticast mode [ 809.681219][ T974] bridge_slave_1: left promiscuous mode [ 809.691452][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.715755][ T974] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 809.929484][ T986] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.7550'. [ 810.244320][ T1002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7555'. [ 810.416162][ T1004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7557'. [ 810.884041][ T1037] validate_nla: 3 callbacks suppressed [ 810.884060][ T1037] netlink: 'syz.4.7565': attribute type 4 has an invalid length. [ 811.090344][ T1058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7570'. [ 811.105522][ T1058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7570'. [ 811.117300][ T1057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7571'. [ 811.220092][ T1057] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7571'. [ 811.392813][ T1058] infiniband gyz0: set down [ 811.398991][ T1058] infiniband gyz0: added bond0 [ 811.441055][ T1058] RDS/IB: gyz0: added [ 811.445289][ T1058] smc: adding ib device gyz0 with port count 1 [ 811.451765][ T1058] smc: ib device gyz0 port 1 has no pnetid [ 811.719064][ T1090] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 811.788726][ T1097] netlink: 'syz.1.7578': attribute type 8 has an invalid length. [ 811.955101][ T1091] virt_wifi0 speed is unknown, defaulting to 1000 [ 812.055649][ T1111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7579'. [ 812.292725][ T6267] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.316825][ T6267] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.325702][ T6267] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.353886][ T6267] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.579975][ T1135] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 812.965353][ T1150] netlink: 'syz.1.7590': attribute type 23 has an invalid length. [ 813.299776][ T1167] netlink: 'syz.3.7594': attribute type 39 has an invalid length. [ 813.914027][ T1194] syzkaller0: entered promiscuous mode [ 813.926139][ T1194] syzkaller0: entered allmulticast mode [ 813.965488][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 814.330842][T28879] net_ratelimit: 117 callbacks suppressed [ 814.330871][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.363010][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 814.489579][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.498195][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 814.618918][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.627651][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 814.758722][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.770138][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 814.897011][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.913842][ T1246] netlink: 'syz.3.7617': attribute type 4 has an invalid length. [ 814.920323][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 814.945982][ T1246] netlink: 'syz.3.7617': attribute type 4 has an invalid length. [ 815.270239][ T1265] __nla_validate_parse: 17 callbacks suppressed [ 815.270260][ T1265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7622'. [ 815.297512][ T1264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7622'. [ 815.438760][ T1270] netlink: 464 bytes leftover after parsing attributes in process `syz.3.7624'. [ 815.533625][ T1276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7627'. [ 815.551162][ T1274] netlink: 'syz.2.7626': attribute type 1 has an invalid length. [ 815.613282][ T1274] bond4: entered promiscuous mode [ 815.630223][ T1274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 815.705175][ T1274] bond4: (slave bridge6): making interface the new active one [ 815.765956][ T1274] bridge6: entered promiscuous mode [ 815.823122][ T1274] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 816.316391][ T1314] netlink: 'syz.2.7638': attribute type 4 has an invalid length. [ 816.319105][ T1311] bond0: Error: Cannot enslave bond to itself. [ 816.348681][ T1314] netlink: 'syz.2.7638': attribute type 4 has an invalid length. [ 816.464077][ T1322] syzkaller1: entered promiscuous mode [ 816.473810][ T1322] syzkaller1: entered allmulticast mode [ 816.590988][ T1334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7643'. [ 816.602139][ T1336] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7641'. [ 816.732646][ T1340] netlink: 'syz.4.7644': attribute type 29 has an invalid length. [ 816.756339][ T1340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7644'. [ 816.919077][ T1356] xt_hashlimit: size too large, truncated to 1048576 [ 817.169384][ T1373] syzkaller0: entered promiscuous mode [ 817.174936][ T1373] syzkaller0: entered allmulticast mode [ 817.218736][ T1376] netlink: 'syz.1.7651': attribute type 21 has an invalid length. [ 817.374192][ T1385] netlink: 'syz.4.7654': attribute type 1 has an invalid length. [ 817.374444][ T1383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7654'. [ 817.640021][ T1392] virt_wifi0 speed is unknown, defaulting to 1000 [ 818.053313][ T1417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7663'. [ 818.218249][ T1427] syzkaller0: entered promiscuous mode [ 818.223889][ T1427] syzkaller0: entered allmulticast mode [ 818.397048][ T30] audit: type=1804 audit(1770614432.839:6): pid=1433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7668" name="/newroot/322/cgroup.controllers" dev="tmpfs" ino=1658 res=1 errno=0 [ 818.472171][ T30] audit: type=1800 audit(1770614432.839:7): pid=1433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7668" name="cgroup.controllers" dev="tmpfs" ino=1658 res=0 errno=0 [ 818.711593][ T1450] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 818.790826][ T1453] tipc: Enabling of bearer rejected, failed to enable media [ 818.953650][ T1460] vcan1: entered promiscuous mode [ 818.980872][ T1460] vcan1: entered allmulticast mode [ 818.996982][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 819.005123][ C1] lec:lec_tx_timeout: lec0 [ 819.015245][ T1463] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7677'. [ 819.230218][ T1477] netlink: 'syz.0.7682': attribute type 8 has an invalid length. [ 819.367943][T28873] net_ratelimit: 105 callbacks suppressed [ 819.367966][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.385137][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 819.506704][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.519767][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 819.649793][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.657866][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 819.677420][ T1505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.678073][ T1504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.727531][ T1507] netlink: 'syz.3.7690': attribute type 12 has an invalid length. [ 819.735429][ T1507] netlink: 'syz.3.7690': attribute type 29 has an invalid length. [ 819.768879][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.805235][ T1511] tipc: Enabling of bearer rejected, failed to enable media [ 819.807474][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.958438][ T1521] netlink: 'syz.3.7695': attribute type 4 has an invalid length. [ 820.176214][ T1547] IPv6: NLM_F_CREATE should be specified when creating new route [ 820.350200][ T1560] __nla_validate_parse: 14 callbacks suppressed [ 820.350222][ T1560] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7702'. [ 820.660682][ T1583] netlink: 'syz.4.7710': attribute type 21 has an invalid length. [ 820.690931][ T1583] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7710'. [ 820.856380][ T1594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7711'. [ 821.551183][ T1637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7727'. [ 821.582337][ T1637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7727'. [ 821.645844][ T1639] syzkaller0: entered promiscuous mode [ 821.654457][ T1639] syzkaller0: entered allmulticast mode [ 821.684724][ T1637] dummy0: entered promiscuous mode [ 821.692248][ T1637] team0: entered promiscuous mode [ 821.697566][ T1637] team_slave_1: entered promiscuous mode [ 821.708686][ T1637] batadv1: entered promiscuous mode [ 821.714348][ T1637] batadv2: entered promiscuous mode [ 821.723617][ T1637] debugfs: 'hsr1' already exists in 'hsr' [ 821.731532][ T1637] Cannot create hsr debugfs directory [ 821.753020][ T1637] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 821.786684][ T1637] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 821.848009][ T1641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7728'. [ 822.270812][ T1673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7735'. [ 824.257354][ T1659] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 824.296763][ T1669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7735'. [ 824.306462][ T1670] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7734'. [ 824.327867][ T1671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7735'. [ 824.407432][ T13] net_ratelimit: 164 callbacks suppressed [ 824.407457][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 824.478429][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 824.587820][ T1683] veth0_to_bond: entered allmulticast mode [ 824.606719][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 824.646842][ T8118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 824.737435][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 824.767323][ T8118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 824.775323][ T8118] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 824.898761][ T1703] validate_nla: 1 callbacks suppressed [ 824.898783][ T1703] netlink: 'syz.3.7745': attribute type 13 has an invalid length. [ 824.926911][ T8118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 824.935951][ T8118] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 825.067409][ T8118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 825.095949][ T1711] syzkaller0: entered allmulticast mode [ 825.198324][ T1717] : entered promiscuous mode [ 825.362049][ T1732] sctp: [Deprecated]: syz.0.7750 (pid 1732) Use of int in maxseg socket option. [ 825.362049][ T1732] Use struct sctp_assoc_value instead [ 825.540793][ T1737] __nla_validate_parse: 3 callbacks suppressed [ 825.540815][ T1737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7752'. [ 825.908771][ T1760] ipt_REJECT: TCP_RESET invalid for non-tcp [ 826.098960][ T1777] xt_hashlimit: size too large, truncated to 1048576 [ 826.292485][ T1788] syzkaller0: entered promiscuous mode [ 826.327573][ T1788] syzkaller0: entered allmulticast mode [ 826.340486][ T1788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7764'. [ 827.024925][ T1829] netlink: 209980 bytes leftover after parsing attributes in process `syz.1.7775'. [ 827.060489][ T1831] netlink: 'syz.4.7777': attribute type 2 has an invalid length. [ 827.111312][ T1832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7777'. [ 827.293310][ T1845] virt_wifi0 speed is unknown, defaulting to 1000 [ 827.302494][ T1847] netlink: 'syz.3.7782': attribute type 33 has an invalid length. [ 827.323131][ T1851] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7779'. [ 827.342487][ T1847] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7782'. [ 827.940133][ T1877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7790'. [ 828.188336][ T1886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7793'. [ 828.320814][ T1893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7793'. [ 828.603071][ T1902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7798'. [ 828.719325][ T1920] netlink: 'syz.3.7799': attribute type 2 has an invalid length. [ 828.739244][ T1920] netlink: 'syz.3.7799': attribute type 1 has an invalid length. [ 828.842443][ T1929] Bluetooth: MGMT ver 1.23 [ 828.847283][ T1929] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 829.426725][ T13] net_ratelimit: 112 callbacks suppressed [ 829.426749][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.474567][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.516780][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.527845][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.551726][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.580619][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.611517][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.642578][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.676701][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 829.699086][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 830.935547][ T1936] syzkaller0: entered promiscuous mode [ 830.943984][ T1936] syzkaller0: entered allmulticast mode [ 831.293024][ T1955] syzkaller0: entered promiscuous mode [ 831.318411][ T1955] syzkaller0: entered allmulticast mode [ 831.338372][ T1959] __nla_validate_parse: 3 callbacks suppressed [ 831.338393][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7813'. [ 831.387038][ T1961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7813'. [ 831.816450][ T1988] x_tables: duplicate underflow at hook 2 [ 831.999796][ T2001] netlink: 'syz.2.7821': attribute type 1 has an invalid length. [ 832.030059][ T2000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7822'. [ 832.047470][ T2001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 832.329415][ T2017] tipc: Cannot configure node identity twice [ 832.401283][ T2021] gtp0: entered promiscuous mode [ 832.416704][ T2021] gtp0: entered allmulticast mode [ 832.490681][ T2025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7832'. [ 832.776427][ T2048] netlink: 'syz.3.7839': attribute type 10 has an invalid length. [ 832.870408][ T2052] veth0: entered promiscuous mode [ 832.898800][ T2052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7841'. [ 832.948613][ T2052] veth0 (unregistering): left promiscuous mode [ 833.152585][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7847'. [ 833.309593][ T7598] lec:lec_start_xmit: lec0:No lecd attached [ 833.504578][ T2090] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7852'. [ 833.658909][ T2096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7855'. [ 833.686435][ T2096] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7855'. [ 833.772130][ T2101] bond5: Removing last ns target with arp_interval on [ 834.247385][ T2134] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 834.401655][ T2139] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 834.447382][T28879] net_ratelimit: 140 callbacks suppressed [ 834.447407][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 834.497977][ T2139] syzkaller1: Refused to change device type [ 834.508430][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 834.604042][ T2140] Bluetooth: MGMT ver 1.23 [ 834.643118][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 834.659368][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 834.817027][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 834.832881][ T6266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 834.976725][ T8118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 834.988400][ T8118] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 835.117146][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 835.143606][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 835.233970][ T2161] x_tables: duplicate underflow at hook 1 [ 835.268008][ T2164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7875'. [ 836.015564][ T2214] virt_wifi0 speed is unknown, defaulting to 1000 [ 836.366382][ T2244] sctp: [Deprecated]: syz.2.7897 (pid 2244) Use of int in max_burst socket option deprecated. [ 836.366382][ T2244] Use struct sctp_assoc_value instead [ 836.536434][ T2252] __nla_validate_parse: 7 callbacks suppressed [ 836.536454][ T2252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7900'. [ 837.234852][ T2282] tipc: Started in network mode [ 837.242887][ T2282] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 837.253352][ T2282] tipc: Enabling of bearer rejected, failed to enable media [ 837.266679][ T2282] netlink: 'syz.0.7907': attribute type 1 has an invalid length. [ 837.488908][ T2282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 837.524911][ T2289] vlan3: entered allmulticast mode [ 837.533699][ T2289] veth1: entered allmulticast mode [ 837.541788][ T2289] bond4: (slave vlan3): Opening slave failed [ 837.657116][ T5830] block nbd6: Receive control failed (result -32) [ 837.658764][ T5840] block nbd7: Receive control failed (result -32) [ 837.746135][ T2307] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7913'. [ 837.770330][ T2307] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7913'. [ 837.802259][ T2307] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7913'. [ 837.854363][ T2314] netlink: 'syz.2.7917': attribute type 2 has an invalid length. [ 837.981742][ T2320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7918'. [ 838.023331][ T2325] netlink: 'syz.3.7920': attribute type 21 has an invalid length. [ 838.055954][ T2325] netlink: 'syz.3.7920': attribute type 6 has an invalid length. [ 838.075023][ T2325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7920'. [ 838.100169][ T2329] netlink: 'syz.0.7922': attribute type 3 has an invalid length. [ 838.213228][ T2335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7925'. [ 838.384573][ T2350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7929'. [ 838.423140][ T2352] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 838.452199][ T2352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7930'. [ 838.996804][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 839.004945][ C1] lec:lec_tx_timeout: lec0 [ 839.085942][ T2384] netlink: 'syz.2.7939': attribute type 10 has an invalid length. [ 839.109733][ T2390] netlink: 300 bytes leftover after parsing attributes in process `syz.2.7939'. [ 839.329653][ T2407] netlink: 'syz.0.7946': attribute type 13 has an invalid length. [ 839.533772][ T8118] net_ratelimit: 107 callbacks suppressed [ 839.533796][ T8118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.576918][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.617394][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.650030][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.677428][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.747056][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.767658][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.775965][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 839.889953][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 839.909504][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 840.099952][ T2455] netlink: 'syz.3.7956': attribute type 1 has an invalid length. [ 840.570281][ T2488] netlink: 'syz.0.7963': attribute type 14 has an invalid length. [ 840.625169][ T2488] netlink: 'syz.0.7963': attribute type 13 has an invalid length. [ 840.976094][ T2530] chnl_net:caif_netlink_parms(): no params data found [ 841.460595][ T2538] bond4: option arp_missed_max: invalid value (0) [ 841.468642][ T2538] bond4: option arp_missed_max: allowed values 1 - 255 [ 841.479070][ T2538] bond4 (unregistering): Released all slaves [ 841.626095][ T2563] __nla_validate_parse: 17 callbacks suppressed [ 841.626116][ T2563] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7980'. [ 841.674516][ T2560] team0 (unregistering): left promiscuous mode [ 841.681846][ T2560] team_slave_1: left promiscuous mode [ 841.688640][ T2560] batadv1: left promiscuous mode [ 841.694146][ T2560] batadv2: left promiscuous mode [ 841.704781][ T2560] team0 (unregistering): Port device team_slave_1 removed [ 841.721648][ T2560] team0 (unregistering): Port device batadv1 removed [ 841.739058][ T2560] team0 (unregistering): Port device batadv2 removed [ 841.759921][ T2567] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7981'. [ 841.872650][ T2571] virt_wifi0 speed is unknown, defaulting to 1000 [ 842.075703][ T2595] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 842.419938][ T2616] validate_nla: 7 callbacks suppressed [ 842.419961][ T2616] netlink: 'syz.4.7991': attribute type 1 has an invalid length. [ 842.590320][ T2616] 8021q: adding VLAN 0 to HW filter on device bond7 [ 842.871095][ T2619] bond7: (slave veth0_to_bond): making interface the new active one [ 842.888734][ T2619] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 842.994746][ T2646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7996'. [ 843.045172][ T2656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7998'. [ 843.154884][ T2646] syzkaller0: entered promiscuous mode [ 843.167417][ T2646] syzkaller0: entered allmulticast mode [ 843.679698][ T2709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8011'. [ 843.692044][ T2707] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8009'. [ 843.702968][ T2707] netlink: 'syz.3.8009': attribute type 9 has an invalid length. [ 843.885381][ T2713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8012'. [ 843.920282][ T2713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8012'. [ 844.304534][ T2743] SET target dimension over the limit! [ 844.528475][ T2758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8022'. [ 844.539134][T28863] net_ratelimit: 117 callbacks suppressed [ 844.539155][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 844.574763][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 844.616332][ T2768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8026'. [ 844.706699][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 844.719093][ T6266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 844.847114][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 844.864005][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.006810][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 845.021733][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.101108][ T2791] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 845.157058][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 845.173698][ T2799] block nbd8: Unsupported socket: should be TCP or UNIX. [ 845.663420][ T2834] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 846.304168][ T2891] virt_wifi0 speed is unknown, defaulting to 1000 [ 846.749877][ T2914] __nla_validate_parse: 9 callbacks suppressed [ 846.749900][ T2914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8063'. [ 846.892626][ T2922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8060'. [ 846.972330][ T2927] tipc: Enabling of bearer rejected, failed to enable media [ 847.061462][ T2923] tipc: Enabling of bearer rejected, failed to enable media [ 847.740287][ T2973] netlink: 'syz.1.8076': attribute type 1 has an invalid length. [ 847.793681][ T2978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8076'. [ 847.843325][ T2973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 847.975591][ T2977] tipc: Enabling of bearer rejected, failed to enable media [ 848.058039][ T2973] bond6: (slave gretap1): making interface the new active one [ 848.079989][ T2973] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 848.364964][ T2999] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 848.402174][ T3005] netlink: 'syz.4.8083': attribute type 9 has an invalid length. [ 848.424084][ T2999] bond7 (unregistering): Released all slaves [ 848.623517][ T2999] rdma_rxe: rxe_newlink: failed to add bond0 [ 848.848634][ T3034] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8092'. [ 848.893474][ T3037] syzkaller0: entered promiscuous mode [ 848.901498][ T3037] syzkaller0: entered allmulticast mode [ 849.086984][ T3051] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8096'. [ 849.180254][ T3054] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8098'. [ 849.311133][ T3066] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8101'. [ 849.370132][ T3070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8100'. [ 849.404045][ T3071] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8102'. [ 849.433947][ T3072] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8102'. [ 849.627592][T28873] net_ratelimit: 114 callbacks suppressed [ 849.627617][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.675432][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 849.711418][ T3096] bridge_slave_0: left allmulticast mode [ 849.729379][ T3096] bridge_slave_0: left promiscuous mode [ 849.735323][ T3096] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.806603][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.837000][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.877696][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.908557][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.938190][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 849.998314][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 850.057372][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 850.090344][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 850.325977][ T3140] sctp: [Deprecated]: syz.0.8121 (pid 3140) Use of int in max_burst socket option. [ 850.325977][ T3140] Use struct sctp_assoc_value instead [ 850.596383][ T3159] netlink: 'syz.2.8122': attribute type 8 has an invalid length. [ 850.613016][ T3160] syzkaller0: entered promiscuous mode [ 850.634430][ T3160] syzkaller0: entered allmulticast mode [ 850.729211][ T3167] netlink: 'syz.3.8128': attribute type 11 has an invalid length. [ 851.591603][ T3216] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 851.761174][ T3232] netlink: 'syz.4.8141': attribute type 1 has an invalid length. [ 851.816698][ T3232] __nla_validate_parse: 18 callbacks suppressed [ 851.816716][ T3232] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8141'. [ 852.034707][ T3241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8143'. [ 852.056057][ T3244] xt_socket: unknown flags 0x50 [ 852.211905][ T3248] virt_wifi0 speed is unknown, defaulting to 1000 [ 852.458452][ T3269] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 852.472508][ T3269] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8152'. [ 852.489244][ T3269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8152'. [ 852.639700][ T3276] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8153'. [ 852.844927][ T3279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8154'. [ 852.959541][ T3289] netem: change failed [ 852.995379][ T3279] virt_wifi0 speed is unknown, defaulting to 1000 [ 853.433957][ T3304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8162'. [ 853.504478][ T3304] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8162'. [ 853.515167][ T3304] netlink: 'syz.2.8162': attribute type 6 has an invalid length. [ 853.524411][ T3304] netlink: 'syz.2.8162': attribute type 5 has an invalid length. [ 853.544421][ T3304] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8162'. [ 853.559658][ T3311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8162'. [ 853.613080][ T3304] netlink: 'syz.2.8162': attribute type 10 has an invalid length. [ 853.647519][ T3304] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 854.040174][ T3324] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 854.155608][ T3331] netlink: 'syz.0.8169': attribute type 10 has an invalid length. [ 854.386689][ T3333] netlink: 'syz.2.8172': attribute type 5 has an invalid length. [ 854.425397][ T3335] netlink: 'syz.4.8173': attribute type 1 has an invalid length. [ 854.688110][T28863] net_ratelimit: 112 callbacks suppressed [ 854.688135][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.713489][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 854.866271][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.897208][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.921398][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 854.972056][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 855.006722][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 855.058059][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 855.096727][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.222174][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 855.351371][ T3383] netlink: 'syz.1.8186': attribute type 1 has an invalid length. [ 855.531900][ T3392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 855.539341][ T3392] IPv6: NLM_F_CREATE should be set when creating new route [ 856.010324][ T3438] netlink: 'syz.1.8200': attribute type 2 has an invalid length. [ 856.035809][ T3419] syzkaller0: entered promiscuous mode [ 856.046075][ T3419] syzkaller0: entered allmulticast mode [ 856.500663][ T3453] netlink: 'syz.0.8204': attribute type 1 has an invalid length. [ 856.561777][ T3453] netlink: 'syz.0.8204': attribute type 1 has an invalid length. [ 856.826091][ T3470] sctp: [Deprecated]: syz.4.8208 (pid 3470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 856.826091][ T3470] Use struct sctp_sack_info instead [ 857.211420][ T3500] __nla_validate_parse: 81 callbacks suppressed [ 857.211441][ T3500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8216'. [ 857.547650][ T3522] xt_hashlimit: size too large, truncated to 1048576 [ 857.557703][ T3526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8222'. [ 857.639507][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8224'. [ 857.729825][ T5489] veth0_vlan: left promiscuous mode [ 857.770263][ T5489] veth0_vlan: entered promiscuous mode [ 857.788919][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8226'. [ 858.287061][ T3557] syzkaller0: entered promiscuous mode [ 858.292873][ T3557] syzkaller0: entered allmulticast mode [ 858.984530][ T3592] netlink: 'syz.3.8235': attribute type 1 has an invalid length. [ 859.702697][T28873] net_ratelimit: 149 callbacks suppressed [ 859.702722][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.727230][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.747363][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.777347][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.797764][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.817349][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.836726][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.856708][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.877575][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 859.896920][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 861.170540][ T3603] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8236'. [ 861.203303][ T3599] gretap2: entered promiscuous mode [ 861.555266][ T3629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8240'. [ 861.596198][ T3629] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8240'. [ 861.673971][ T3632] syzkaller0: entered promiscuous mode [ 861.685298][ T3632] syzkaller0: entered allmulticast mode [ 861.700393][ T3632] nft_compat: unsupported protocol 0 [ 861.945453][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8249'. [ 861.969103][ T3653] hsr_slave_0: left promiscuous mode [ 861.981758][ T3653] hsr_slave_1: left promiscuous mode [ 862.161620][ T3662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8251'. [ 862.175734][ T3662] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.8251'. [ 862.507081][ T3676] virt_wifi0 speed is unknown, defaulting to 1000 [ 862.641173][ T3687] tipc: Started in network mode [ 862.657946][ T3687] tipc: Node identity 922212929c12, cluster identity 4711 [ 862.677561][ T3691] xt_hashlimit: size too large, truncated to 1048576 [ 862.687259][ T3687] tipc: Enabled bearer , priority 0 [ 862.712616][ T3691] sctp: [Deprecated]: syz.1.8259 (pid 3691) Use of int in max_burst socket option. [ 862.712616][ T3691] Use struct sctp_assoc_value instead [ 862.747027][ T3692] geneve3: entered promiscuous mode [ 862.752423][ T3692] geneve3: entered allmulticast mode [ 862.959754][ T3694] syzkaller0: entered promiscuous mode [ 862.965531][ T3694] syzkaller0: entered allmulticast mode [ 862.974998][ T3694] tipc: Resetting bearer [ 863.004552][ T6266] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 863.027230][ T6266] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 863.035758][ T6266] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 863.155768][ T3714] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8264'. [ 864.716796][T28879] net_ratelimit: 192 callbacks suppressed [ 864.716821][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.749307][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.777169][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.813552][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.847388][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.873729][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.901002][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.926878][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.950366][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 864.978424][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 865.722383][ T6266] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 865.749784][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.757871][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.798279][T28868] tipc: Resetting bearer [ 865.807949][ T3722] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 865.809161][ T3723] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 865.824861][ T3684] tipc: Resetting bearer [ 865.864420][ T3684] tipc: Disabling bearer [ 865.883258][T30931] tipc: Node number set to 238031506 [ 866.126130][ T3752] xt_hashlimit: size too large, truncated to 1048576 [ 866.532675][ T3771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8276'. [ 866.553754][ T3771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8276'. [ 866.580805][ T3771] netlink: 'syz.1.8276': attribute type 1 has an invalid length. [ 866.634916][ T3771] syzkaller1: entered promiscuous mode [ 866.642003][ T3771] syzkaller1: entered allmulticast mode [ 866.652320][ T3776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8277'. [ 866.702620][ T3775] netlink: 401 bytes leftover after parsing attributes in process `syz.2.8277'. [ 866.736691][ T3776] netlink: 401 bytes leftover after parsing attributes in process `syz.2.8277'. [ 866.796870][ T3778] tipc: Enabled bearer , priority 0 [ 866.821111][ T3778] syzkaller0: entered promiscuous mode [ 866.834784][ T3778] syzkaller0: entered allmulticast mode [ 867.013450][ T3793] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8281'. [ 867.024414][ T3792] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8280'. [ 867.116163][ T3793] 8021q: VLANs not supported on gre0 [ 867.337356][ T3777] tipc: Resetting bearer [ 867.378867][ T3777] tipc: Disabling bearer [ 867.772888][ T3821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8288'. [ 867.814044][ T3821] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 867.850661][ T3832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8290'. [ 868.023527][ T3832] 8021q: adding VLAN 0 to HW filter on device bond7 [ 868.098182][ T3836] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 868.208502][ T3860] netlink: 'syz.3.8296': attribute type 24 has an invalid length. [ 868.218145][ T3850] netlink: 'syz.2.8295': attribute type 2 has an invalid length. [ 868.233920][ T3850] 9: entered promiscuous mode [ 868.556280][ T3881] virt_wifi0 speed is unknown, defaulting to 1000 [ 868.613522][ T3892] netlink: 'syz.3.8305': attribute type 10 has an invalid length. [ 868.938897][ T3903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8310'. [ 868.981236][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8308'. [ 869.099523][ T5948] IPVS: starting estimator thread 0... [ 869.142385][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8311'. [ 869.165967][ T3914] xt_policy: too many policy elements [ 869.191169][ T3912] IPVS: using max 28 ests per chain, 67200 per kthread [ 869.310790][ T3926] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8316'. [ 869.671805][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8320'. [ 869.817334][ T6266] net_ratelimit: 143 callbacks suppressed [ 869.817355][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.854832][ T3954] syzkaller0: entered promiscuous mode [ 869.869429][ T3954] syzkaller0: entered allmulticast mode [ 869.888593][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.939848][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.967438][ T6266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 869.985950][ T3960] netlink: 'syz.1.8324': attribute type 10 has an invalid length. [ 870.058036][ T3960] bridge_slave_1: left allmulticast mode [ 870.107216][ T3960] bridge_slave_1: left promiscuous mode [ 870.116905][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 870.155048][ T3960] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.167266][ T8118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 870.184029][ T3972] netlink: 'syz.2.8326': attribute type 1 has an invalid length. [ 870.220325][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 870.233117][ T3960] bridge_slave_1: entered allmulticast mode [ 870.254182][ T3960] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 870.269411][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 870.307286][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 870.326402][ T3972] bond6: entered promiscuous mode [ 870.337068][ T3972] 8021q: adding VLAN 0 to HW filter on device bond6 [ 870.350001][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 870.531173][ T3985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8328'. [ 870.808988][ T3999] tipc: Enabled bearer , priority 0 [ 870.828316][ T3999] +: renamed from syzkaller0 [ 870.848062][ T3999] tipc: Disabling bearer [ 870.871200][T25488] IPVS: starting estimator thread 0... [ 870.967452][ T4005] IPVS: using max 30 ests per chain, 72000 per kthread [ 871.157881][ T4020] netlink: 'syz.1.8339': attribute type 142 has an invalid length. [ 871.182024][ T4016] gre2: entered promiscuous mode [ 871.189523][ T4016] gre2: entered allmulticast mode [ 871.243602][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8342'. [ 871.273432][ T4022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8342'. [ 871.284665][ T4027] netlink: 'syz.4.8343': attribute type 1 has an invalid length. [ 871.298941][ T4022] netlink: 'syz.0.8342': attribute type 12 has an invalid length. [ 871.312622][ T4022] netlink: 'syz.0.8342': attribute type 11 has an invalid length. [ 871.411119][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8345'. [ 871.508868][ T4036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8346'. [ 871.652717][ T4044] netlink: 'syz.4.8350': attribute type 10 has an invalid length. [ 871.686060][ T4044] team0: Device veth1_macvtap failed to register rx_handler [ 871.714463][ T4046] bridge0: port 1(wlan0) entered disabled state [ 871.885557][ T4059] xt_addrtype: ipv6 does not support BROADCAST matching [ 872.158830][ T4076] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 872.178635][ T4078] IPVS: Unknown mcast interface: syzkaller0 [ 872.302870][ T4082] team0: Device gtp0 is up. Set it down before adding it as a team port [ 872.869426][ T4105] syzkaller0: entered promiscuous mode [ 872.891833][ T4105] syzkaller0: entered allmulticast mode [ 873.260313][ T4142] xt_hashlimit: size too large, truncated to 1048576 [ 874.838083][ T50] net_ratelimit: 145 callbacks suppressed [ 874.838109][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.867325][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.887470][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.922213][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.956777][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.987447][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 875.018215][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 875.037411][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 875.056880][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 875.077535][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 875.414736][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 876.296038][ T4159] netlink: 'syz.2.8380': attribute type 7 has an invalid length. [ 876.306144][ T4159] __nla_validate_parse: 6 callbacks suppressed [ 876.306169][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8380'. [ 876.417964][ T4159] netlink: 'syz.2.8380': attribute type 7 has an invalid length. [ 876.426346][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8380'. [ 876.559573][ T4177] netlink: 'syz.4.8383': attribute type 21 has an invalid length. [ 876.637431][ T4177] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 876.655743][ T4177] bond8 (unregistering): Released all slaves [ 877.095019][ T4189] syzkaller0: entered promiscuous mode [ 877.117258][ T4189] syzkaller0: entered allmulticast mode [ 877.254386][ T4217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8390'. [ 877.449973][ T4217] macvlan0: entered promiscuous mode [ 877.457261][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8393'. [ 877.639477][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8394'. [ 877.669771][ T4243] netlink: 'syz.4.8395': attribute type 1 has an invalid length. [ 877.699164][ T4243] netlink: 9188 bytes leftover after parsing attributes in process `syz.4.8395'. [ 877.788366][ T4244] netlink: 252 bytes leftover after parsing attributes in process `syz.2.8394'. [ 878.050090][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8398'. [ 878.067628][ T4260] netlink: 'syz.1.8397': attribute type 1 has an invalid length. [ 878.081536][ T4258] netlink: 'syz.2.8398': attribute type 4 has an invalid length. [ 878.105424][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8398'. [ 878.325304][ T4275] pim6reg1: entered promiscuous mode [ 878.333667][ T4275] pim6reg1: entered allmulticast mode [ 878.464610][ T4282] xt_hashlimit: max too large, truncated to 1048576 [ 878.480588][ T4283] netlink: 'syz.1.8405': attribute type 2 has an invalid length. [ 878.501694][ T4283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8405'. [ 878.541616][ T4284] netlink: 'syz.1.8405': attribute type 2 has an invalid length. [ 879.311519][ T4330] bridge0: entered promiscuous mode [ 879.317576][ T4332] netlink: 'syz.1.8418': attribute type 16 has an invalid length. [ 879.327112][ T4330] bridge0: entered allmulticast mode [ 879.383607][ T4339] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 879.552252][ T4344] team1: entered promiscuous mode [ 879.570677][ T4344] team1: entered allmulticast mode [ 879.946995][T28868] net_ratelimit: 148 callbacks suppressed [ 879.947018][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.978065][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.985866][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.097021][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 880.104961][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.216761][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 880.225791][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.337379][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 880.345176][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.456927][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 880.997182][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 881.005423][ C1] lec:lec_tx_timeout: lec0 [ 884.998411][T28863] net_ratelimit: 81 callbacks suppressed [ 884.998434][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.016106][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.137336][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.145453][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.257237][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.265037][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.376777][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.389413][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.506815][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.515935][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.037156][T28868] net_ratelimit: 80 callbacks suppressed [ 890.037181][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.053041][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.177080][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.185579][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.297034][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.304847][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.417015][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.424811][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.537227][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.545200][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.068086][ T50] net_ratelimit: 80 callbacks suppressed [ 895.068106][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.085349][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.197174][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.207442][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.327454][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.335770][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.447389][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.455637][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.566762][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.574815][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 898.234123][ T7598] lec:lec_start_xmit: lec0:No lecd attached [ 900.127186][T28863] net_ratelimit: 80 callbacks suppressed [ 900.127210][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.142300][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.267291][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.275122][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.387338][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.395699][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.507402][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.515265][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.627228][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.635128][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.036766][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 904.045271][ C1] lec:lec_tx_timeout: lec0 [ 905.167079][ T6267] net_ratelimit: 80 callbacks suppressed [ 905.167104][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.180809][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.296943][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.304928][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.416863][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.424760][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.536714][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.544837][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.657264][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.665070][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.217257][ T6267] net_ratelimit: 80 callbacks suppressed [ 910.217281][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.231745][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.347358][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.355749][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.486765][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.495990][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.607323][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.615113][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.727308][T28873] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.735111][T28873] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 915.327308][T28868] net_ratelimit: 80 callbacks suppressed [ 915.327334][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.343535][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 915.457184][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.465296][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 915.576697][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.584574][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 915.697201][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.705356][T28868] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 915.817259][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.825252][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.406958][ T6266] net_ratelimit: 80 callbacks suppressed [ 920.406981][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.421097][ T6266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.546913][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.554968][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.666972][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.674785][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.788172][ T6267] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.796123][ T6267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.907694][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.915601][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 921.940006][ T4380] tipc: Enabled bearer , priority 10 [ 922.077595][ T4392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 922.125632][ T4394] netlink: 'syz.1.8435': attribute type 4 has an invalid length. [ 922.162342][ T4396] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 922.193355][ T4401] tipc: Enabling of bearer rejected, media not registered [ 922.298321][ T4406] netlink: 'syz.2.8438': attribute type 39 has an invalid length. [ 922.343574][ T4412] __nla_validate_parse: 8 callbacks suppressed [ 922.343594][ T4412] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8439'. [ 922.534305][ T4423] netlink: 'syz.4.8443': attribute type 1 has an invalid length. [ 922.552193][ T4425] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8444'. [ 922.670390][ T4431] netlink: 'syz.2.8446': attribute type 10 has an invalid length. [ 922.709581][ T4429] syzkaller0: entered promiscuous mode [ 922.738936][ T4429] syzkaller0: entered allmulticast mode [ 922.800730][ T4431] bond0: (slave wlan1): Opening slave failed [ 923.047223][ T5948] tipc: Node number set to 1547905401 [ 923.133805][ T4448] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8449'. [ 923.178462][ T4451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8450'. [ 923.310219][ T4459] IPv6: NLM_F_CREATE should be specified when creating new route [ 923.723672][ T4483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8460'. [ 923.798854][ T4488] netlink: 'syz.0.8461': attribute type 1 has an invalid length. [ 924.351155][ T4494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8463'. [ 925.426696][ T6266] net_ratelimit: 145 callbacks suppressed [ 925.426719][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.456755][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.479042][ T6266] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.508598][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.543554][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.567250][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.588828][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.622314][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.647370][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.672049][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 926.617687][ T4488] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 926.896126][ T4514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8469'. [ 927.135069][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8472'. [ 927.300839][ T4547] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8477'. [ 927.490692][ T4558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8479'. [ 927.507862][ T4558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8479'. [ 927.512495][ T4559] syzkaller1: entered promiscuous mode [ 927.525156][ T4559] syzkaller1: entered allmulticast mode [ 927.538185][ T4559] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 927.923519][ T4575] macsec1: entered promiscuous mode [ 927.948310][ T4575] macsec1: entered allmulticast mode [ 927.976426][ T4575] bridge0: port 1(macsec1) entered blocking state [ 927.992591][ T4575] bridge0: port 1(macsec1) entered disabled state [ 928.060357][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8488'. [ 928.298404][ T4595] netlink: 'syz.4.8491': attribute type 1 has an invalid length. [ 928.404502][ T4603] delete_channel: no stack [ 928.484553][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8492'. [ 928.644525][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8492'. [ 928.988059][ T4641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8498'. [ 929.238556][ T4651] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8502'. [ 929.260366][ T4652] syzkaller0: entered promiscuous mode [ 929.266916][ T4652] syzkaller0: entered allmulticast mode [ 929.479798][ T4665] x_tables: unsorted underflow at hook 4 [ 929.572735][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8507'. [ 929.600097][ T4672] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8507'. [ 929.836688][ T4690] netlink: 'syz.4.8510': attribute type 1 has an invalid length. [ 929.869228][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8511'. [ 929.937300][ T4692] netlink: 'syz.2.8511': attribute type 63 has an invalid length. [ 929.964373][ T4692] netlink: 'syz.2.8511': attribute type 63 has an invalid length. [ 930.146165][ T4704] netlink: 'syz.1.8515': attribute type 1 has an invalid length. [ 930.347699][ T4714] bond8: (slave ip6gretap2): making interface the new active one [ 930.395330][ T4714] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 930.428613][ T4714] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 930.437530][T28879] net_ratelimit: 130 callbacks suppressed [ 930.437553][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 930.457539][ T4714] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 930.487734][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 930.522186][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.595140][ T4724] netlink: 'syz.2.8520': attribute type 1 has an invalid length. [ 930.611168][ T4724] netlink: 'syz.2.8520': attribute type 1 has an invalid length. [ 930.647103][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 930.657109][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.691097][ T4737] netlink: 'syz.0.8521': attribute type 9 has an invalid length. [ 930.776674][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 930.785785][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.873646][ T4746] bond4: entered promiscuous mode [ 930.892308][ T4746] macvlan2: entered promiscuous mode [ 930.898101][ T4746] macvlan2: entered allmulticast mode [ 930.905009][ T4746] bond4: (slave macvlan2): Opening slave failed [ 930.947012][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 930.978392][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 931.017981][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 931.173152][ T4762] geneve4: entered promiscuous mode [ 931.186700][ T4762] geneve4: entered allmulticast mode [ 931.218830][T28868] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 931.259299][T28879] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 931.279082][T28879] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 931.299411][T28879] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 931.509006][ T4782] netlink: 'syz.3.8535': attribute type 10 has an invalid length. [ 932.013058][ T4809] syz.2.8542 (4809) used obsolete PPPIOCDETACH ioctl [ 932.069293][ T4816] netlink: 'syz.4.8543': attribute type 2 has an invalid length. [ 932.108689][ T4820] syzkaller1: entered promiscuous mode [ 932.117127][ T4820] syzkaller1: entered allmulticast mode [ 932.135834][ T4820] bridge_slave_1: left allmulticast mode [ 932.162246][ T4820] bridge_slave_1: left promiscuous mode [ 932.174937][ T4820] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.212294][ T4820] bridge_slave_0: left allmulticast mode [ 932.237720][ T4820] bridge_slave_0: left promiscuous mode [ 932.257227][ T4820] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.015299][ T4881] __nla_validate_parse: 8 callbacks suppressed [ 933.015321][ T4881] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8558'. [ 933.385112][ T4898] x_tables: duplicate underflow at hook 3 [ 933.585453][ T4902] netlink: 'syz.1.8565': attribute type 1 has an invalid length. [ 933.702663][ T4902] bond9: entered promiscuous mode [ 933.708973][ T4902] 8021q: adding VLAN 0 to HW filter on device bond9 [ 933.721958][ T4923] xt_hashlimit: overflow, try lower: 3/0 [ 934.502574][ T4967] gre0: entered promiscuous mode [ 934.527461][ T4967] gre0: entered allmulticast mode [ 934.555747][ T4972] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 934.902141][ T4983] netlink: 'syz.1.8584': attribute type 39 has an invalid length. [ 935.010253][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8589'. [ 935.037811][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8589'. [ 935.172869][ T5014] ip6gre1: entered promiscuous mode [ 935.217521][ T5014] ip6gre1: entered allmulticast mode [ 935.235929][T28879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.265725][ T5948] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.275523][T28879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.441613][ T5025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8592'. [ 935.452316][ T5026] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8594'. [ 935.468113][T28868] net_ratelimit: 113 callbacks suppressed [ 935.468138][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.497342][T30931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.506981][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.529184][ T5031] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 935.540549][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.576648][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.606798][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.626260][ T5020] syzkaller0: entered promiscuous mode [ 935.632648][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.645266][ T5020] syzkaller0: entered allmulticast mode [ 935.657215][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.687545][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.709632][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.756140][T28868] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.948438][ T5058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8600'. [ 936.038587][T30931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.844666][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 938.534923][ T5067] netlink: 'syz.0.8601': attribute type 30 has an invalid length. [ 938.633777][ T5071] delete_channel: no stack [ 938.739291][ T5078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8604'. [ 938.762464][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8604'. [ 938.837584][ T5082] [ 938.840011][ T5082] ====================================================== [ 938.847062][ T5082] WARNING: possible circular locking dependency detected [ 938.854311][ T5082] syzkaller #0 Not tainted [ 938.858772][ T5082] ------------------------------------------------------ [ 938.865830][ T5082] syz.3.8605/5082 is trying to acquire lock: [ 938.871864][ T5082] ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 938.881621][ T5082] [ 938.881621][ T5082] but task is already holding lock: [ 938.889027][ T5082] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 938.898687][ T5082] [ 938.898687][ T5082] which lock already depends on the new lock. [ 938.898687][ T5082] [ 938.909129][ T5082] [ 938.909129][ T5082] the existing dependency chain (in reverse order) is: [ 938.918175][ T5082] [ 938.918175][ T5082] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 938.926126][ T5082] _raw_spin_lock_bh+0x36/0x50 [ 938.931449][ T5082] nr_rt_ioctl+0x40c/0xf90 [ 938.936421][ T5082] sock_do_ioctl+0x101/0x320 [ 938.941565][ T5082] sock_ioctl+0x5c6/0x7f0 [ 938.946450][ T5082] __se_sys_ioctl+0xfc/0x170 [ 938.951609][ T5082] do_syscall_64+0xe2/0xf80 [ 938.956747][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.963459][ T5082] [ 938.963459][ T5082] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 938.971488][ T5082] _raw_spin_lock_bh+0x36/0x50 [ 938.976899][ T5082] nr_rt_ioctl+0x215/0xf90 [ 938.982582][ T5082] sock_do_ioctl+0x101/0x320 [ 938.988047][ T5082] sock_ioctl+0x5c6/0x7f0 [ 938.993213][ T5082] __se_sys_ioctl+0xfc/0x170 [ 938.998723][ T5082] do_syscall_64+0xe2/0xf80 [ 939.003820][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.010263][ T5082] [ 939.010263][ T5082] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 939.018135][ T5082] __lock_acquire+0x15a5/0x2cf0 [ 939.023556][ T5082] lock_acquire+0x106/0x330 [ 939.028608][ T5082] _raw_spin_lock_bh+0x36/0x50 [ 939.033927][ T5082] nr_rt_device_down+0xbe/0x860 [ 939.039324][ T5082] nr_device_event+0x137/0x150 [ 939.044626][ T5082] notifier_call_chain+0x19d/0x3a0 [ 939.050647][ T5082] __dev_notify_flags+0x16d/0x310 [ 939.057215][ T5082] netif_change_flags+0xe8/0x1a0 [ 939.062731][ T5082] dev_change_flags+0x130/0x260 [ 939.068134][ T5082] dev_ioctl+0x7b4/0x1150 [ 939.073023][ T5082] sock_do_ioctl+0x23e/0x320 [ 939.078258][ T5082] sock_ioctl+0x5c6/0x7f0 [ 939.083162][ T5082] __se_sys_ioctl+0xfc/0x170 [ 939.088401][ T5082] do_syscall_64+0xe2/0xf80 [ 939.093748][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.100185][ T5082] [ 939.100185][ T5082] other info that might help us debug this: [ 939.100185][ T5082] [ 939.110612][ T5082] Chain exists of: [ 939.110612][ T5082] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 939.110612][ T5082] [ 939.124718][ T5082] Possible unsafe locking scenario: [ 939.124718][ T5082] [ 939.132560][ T5082] CPU0 CPU1 [ 939.137969][ T5082] ---- ---- [ 939.143371][ T5082] lock(nr_neigh_list_lock); [ 939.148083][ T5082] lock(&nr_node->node_lock); [ 939.155443][ T5082] lock(nr_neigh_list_lock); [ 939.162848][ T5082] lock(nr_node_list_lock); [ 939.167571][ T5082] [ 939.167571][ T5082] *** DEADLOCK *** [ 939.167571][ T5082] [ 939.175826][ T5082] 2 locks held by syz.3.8605/5082: [ 939.181084][ T5082] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 939.189922][ T5082] #1: ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 939.199969][ T5082] [ 939.199969][ T5082] stack backtrace: [ 939.206516][ T5082] CPU: 1 UID: 0 PID: 5082 Comm: syz.3.8605 Not tainted syzkaller #0 PREEMPT(full) [ 939.206545][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 939.206568][ T5082] Call Trace: [ 939.206580][ T5082] [ 939.206591][ T5082] dump_stack_lvl+0xe8/0x150 [ 939.206623][ T5082] print_circular_bug+0x2e1/0x300 [ 939.206650][ T5082] check_noncircular+0x12e/0x150 [ 939.206675][ T5082] __lock_acquire+0x15a5/0x2cf0 [ 939.206711][ T5082] ? __lock_acquire+0x6b5/0x2cf0 [ 939.206742][ T5082] ? dsa_user_netdevice_event+0x495/0x2850 [ 939.206768][ T5082] ? nr_rt_device_down+0xbe/0x860 [ 939.206796][ T5082] lock_acquire+0x106/0x330 [ 939.206823][ T5082] ? nr_rt_device_down+0xbe/0x860 [ 939.206849][ T5082] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 939.206871][ T5082] ? nr_rt_device_down+0xbe/0x860 [ 939.206893][ T5082] _raw_spin_lock_bh+0x36/0x50 [ 939.206919][ T5082] ? nr_rt_device_down+0xbe/0x860 [ 939.206941][ T5082] nr_rt_device_down+0xbe/0x860 [ 939.206969][ T5082] nr_device_event+0x137/0x150 [ 939.206991][ T5082] notifier_call_chain+0x19d/0x3a0 [ 939.207021][ T5082] __dev_notify_flags+0x16d/0x310 [ 939.207046][ T5082] ? __pfx___dev_notify_flags+0x10/0x10 [ 939.207068][ T5082] ? __dev_change_flags+0x4c6/0x690 [ 939.207092][ T5082] ? __pfx___dev_change_flags+0x10/0x10 [ 939.207116][ T5082] ? full_name_hash+0x92/0xe0 [ 939.207137][ T5082] netif_change_flags+0xe8/0x1a0 [ 939.207162][ T5082] dev_change_flags+0x130/0x260 [ 939.207185][ T5082] dev_ioctl+0x7b4/0x1150 [ 939.207205][ T5082] sock_do_ioctl+0x23e/0x320 [ 939.207223][ T5082] ? __pfx_sock_do_ioctl+0x10/0x10 [ 939.207238][ T5082] ? do_futex+0x395/0x420 [ 939.207269][ T5082] sock_ioctl+0x5c6/0x7f0 [ 939.207296][ T5082] ? __pfx_sock_ioctl+0x10/0x10 [ 939.207325][ T5082] ? bpf_lsm_file_ioctl+0x9/0x20 [ 939.207345][ T5082] ? __pfx_sock_ioctl+0x10/0x10 [ 939.207369][ T5082] __se_sys_ioctl+0xfc/0x170 [ 939.207394][ T5082] do_syscall_64+0xe2/0xf80 [ 939.207412][ T5082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.207429][ T5082] ? trace_irq_disable+0x37/0x100 [ 939.207446][ T5082] ? clear_bhb_loop+0x60/0xb0 [ 939.207465][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.207487][ T5082] RIP: 0033:0x7f9b2a99aeb9 [ 939.207504][ T5082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.207520][ T5082] RSP: 002b:00007f9b2b7a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.207541][ T5082] RAX: ffffffffffffffda RBX: 00007f9b2ac15fa0 RCX: 00007f9b2a99aeb9 [ 939.207555][ T5082] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 939.207567][ T5082] RBP: 00007f9b2aa08c1f R08: 0000000000000000 R09: 0000000000000000 [ 939.207578][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.207589][ T5082] R13: 00007f9b2ac16038 R14: 00007f9b2ac15fa0 R15: 00007ffcb118cfd8 [ 939.207610][ T5082] [ 939.636730][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 940.566848][ T50] net_ratelimit: 163 callbacks suppressed [ 940.566872][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.580829][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.696933][ T50] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.704797][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.816856][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.824759][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.937529][T28863] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.945335][T28863] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 941.066995][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 941.074923][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 942.036543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 942.044926][ C1] lec:lec_tx_timeout: lec0 [ 945.597165][T28879] net_ratelimit: 80 callbacks suppressed [ 945.597190][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.614998][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.726828][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.735551][T32425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.847324][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.855304][T32425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.967142][T28879] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.975361][T28879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 946.086645][T32425] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 946.094697][T32425] bond2: (slave ip6gretap1): failed to get link speed/duplex