last executing test programs: 9.891365147s ago: executing program 3 (id=3211): unshare(0x6a040000) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="0000000035741b", 0x7}], 0x2) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r7, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=r6], 0xa0}, 0x1, 0x0, 0x0, 0x24008810}, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00j\v'}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7.462802848s ago: executing program 0 (id=3231): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001800)=[{0x0}, {&(0x7f0000000100)="20e3c783", 0x4}], 0x2}}], 0x1, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 7.212664078s ago: executing program 0 (id=3235): recvmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/67, 0x43}], 0x3}, 0x200}], 0x1, 0x40010040, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0xc820, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x80000001, 0x0, 0x4, 0x200000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000040000000000000e0300000000000000000000000000000d04000000000000000000000400000000040000000000000f03000000006100302e"], 0x0, 0x53}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffff7f00000000feffffff611051000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r8, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000140)=0x37, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$nl_route(0x10, 0x3, 0x0) 6.148970866s ago: executing program 3 (id=3240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000300), &(0x7f00000006c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) socketpair(0x1, 0x3, 0x3ff, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r3, r4}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac0400000008000200"/63], 0x44}}, 0x840) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r6) socket$kcm(0x21, 0x2, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0xffffffff000) r9 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r10 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.239370142s ago: executing program 3 (id=3244): r0 = socket(0x1, 0x3, 0x200000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') unshare(0x6a040000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000000), 0x90) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x18}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, 0x0, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x100, &(0x7f0000000440)=""/216}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}}, 0x440b0) 3.684352864s ago: executing program 1 (id=3253): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000080000008111be000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0xcec5af8c90a88475, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x20, 0x7, @udp='udp:syz1\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 3.463769882s ago: executing program 1 (id=3254): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x1) r2 = socket(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000003c00010325bd7000fcffffff0afffd000400030076"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 3.402727359s ago: executing program 3 (id=3255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0xd4, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x80}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xf}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}], 0x10}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 3.251877263s ago: executing program 3 (id=3257): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r2, 0x40b1000) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000100)=@raw=[@alu={0x7, 0x0, 0xd, 0x5, 0x4, 0x43, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa16, 0x0, 0x0, 0x0, 0x7955}], &(0x7f0000000140)='GPL\x00', 0x2, 0x78, &(0x7f0000000180)=""/120, 0x41000, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x27467, 0xffffffffffffffff, 0xa, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x2, 0xb, 0xb}, {0x3, 0x1, 0x1, 0x7}, {0x5, 0x5, 0xf, 0x8}, {0x5, 0x3, 0xe, 0x8}, {0x2, 0x1, 0x9, 0x5}, {0x1, 0x4, 0x8, 0xa}, {0x4, 0x1, 0x6, 0x6}, {0x2, 0x1, 0x0, 0x2}, {0x4, 0x2, 0x0, 0x2}, {0x4, 0x4, 0xe, 0x1}], 0x10, 0x139}, 0x94) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r3, r4}, 0xc) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x2, &(0x7f00000004c0)=0x80, 0x4) (async) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000880)={{'\x00', 0x1}, {0x5}, 0x40, 0x0, 0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)="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", 0x15a, 0x0, &(0x7f0000000700)={0x2, 0x132, {0x1, 0xc, 0xdf, "994014c39cf4013250099f1d96435b8c31cd77ffdb4993b2416ec9244633df05490856d75d7cac386a26d58984b2fb0c5dd758b10ef7104475fdb8faabe57eb2154b78c5b19bd70f5e5255ad88999c68434ab6fb13e73ca5b58a7e972f9ed52664c0132b108ff65c6d29d38990f8f7f333c3c9cd006d2d751eccb9577744ef7526b83c35671ffe6cf6832ec1349d756cdb43e2306209919ce03bfc2a332a5a96969670aaa797b40b9cfad9494217c4d513a455c64622e70d238b6beb3206b6b181d349b53df007a04e26e045aa5424623d5c3500db38e31b6b9dd3857d58ab", 0x46, "9b738d3da8fefffa6ac75de8e98ebd66a36898891439e57dbd78cd0ee56e6cdd18f281d9cefdb9a976e0da6f6cc62e9a6c2c6bbfd969184174e8e587e281aa6e3af88277eee9"}, 0x5, "5d1ef79ee5"}, 0x143}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) (async) socket$netlink(0x10, 0x3, 0x6) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x20202, 0x0) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000000a40)=0x1) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)={0x0, 0x38, "06f4cc5703f0a90ad151b5141e88ed2dc6eb90c8042793ca1f6e6d1ed125527463dd3c03ed0ccf8bfdb99bd1e49e993a00efd4f65fd3bec9"}, &(0x7f0000000ac0)=0x40) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000b00)={r8, @in6={{0xa, 0x4e23, 0xfffffff9, @mcast2, 0x6}}}, 0x84) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x11, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c80)='GPL\x00', 0x5, 0x1, &(0x7f0000000cc0)=""/1, 0x20680, 0x18, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000d00)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0xe, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, r4, r4, r1, r4, r4, 0x1, r4], &(0x7f0000000dc0)=[{0x4, 0x2, 0x7, 0x1}, {0x4, 0x4, 0xa}, {0x1, 0x1, 0x6, 0x9}, {0x3, 0x1, 0xe, 0x6}], 0x10, 0x5a1}, 0x94) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000ec0)=0x1) (async) connect$qrtr(0xffffffffffffffff, &(0x7f0000000f00)={0x2a, 0x3, 0x7fff}, 0xc) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000f40)=[@in6={0xa, 0x4e20, 0xfcf3, @remote, 0xffffff1f}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0xd, @mcast2, 0xff}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x657}], 0xb4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x1a, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0xa, 0x4, 0x5, 0x2, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001100)='GPL\x00', 0x9, 0xdd, &(0x7f0000001140)=""/221, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001280)=[r4, r4], &(0x7f00000012c0)=[{0x4, 0x5, 0x0, 0xa}, {0x2, 0x3, 0x8}, {0x2, 0x2, 0x1, 0x4}, {0x4, 0x2, 0x4, 0x3}, {0x4, 0x5, 0xa, 0x4}, {0x1, 0x3, 0x7, 0xa}, {0x1, 0x1, 0xb, 0x7}, {0x0, 0x5, 0x1, 0x9}], 0x10, 0x401}, 0x94) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000001400)={{0xa, 0x4e24, 0xfffffff8, @loopback}, {0xa, 0x4e24, 0xcd, @dev={0xfe, 0x80, '\x00', 0x13}, 0xffff6f7e}, 0xffffffffffffffff, {[0xf, 0xff, 0x0, 0x2, 0x1, 0x8, 0x1, 0x6]}}, 0x5c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r11, 0x117, 0x5, 0x0, 0x1b8000000000) 3.250443461s ago: executing program 1 (id=3258): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0xb, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0xa, 0x1, '-[:){\x00'}, @NFTA_COMPAT_NAME={0x7, 0x1, '&%\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x60}}, 0x40040) (async) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa3c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}}, 0x8005) (async, rerun: 32) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x8}, @mss={0x2, 0xfffffa78}], 0x5) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x800, 0x9) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000300)={@initdev, 0x0}, &(0x7f0000000340)=0x14) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'macvtap0\x00', &(0x7f0000000380)=@ethtool_modinfo={0x42, 0x0, 0x5}}) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000400)="0f96437317a040b7f9a9cec7af7414d1144975155a9bbd8672998724994d0826ed551616c220294663b32b582e0318377168db939a8533640d2105b3c8056f11acad0715b5d6793a06f6ce949f4bac277aa36376a996d6152e3857bcba942e5f6480bce12bf2", 0x66) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0xc8, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x3}, 0x33fcab5a}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x9}, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x377b}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e23, 0xffff5187, @local, 0xd00}, @in6={0xa, 0x4e23, 0x876, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e23, 0x8, @private0, 0x6}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000600)={r6, 0x21, "c80bd53ea62078353fc9348e2f06e3ae46aeb7be6a6281bf85f4768ecbc5aa967f"}, &(0x7f0000000640)=0x29) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r0) (rerun: 64) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfa83}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}]}, 0xa4}}, 0x800) connect$inet(r5, &(0x7f0000000840)={0x2, 0x4e21, @empty}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) (rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1c8, r9, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80880}, 0x4000) (async) setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f0000000c00)="c1c7d2194a21cffba17755cd3267de617f5262863c578ee0a7b76b2d9117c4473caf835ced45ef6a15cfe4db94c127bae9434b73162807a5f147c95da7b894a500f14b6ace19d5f405251e7100c6b8de5f1751fe510cb30b0927f0ff019d9fd1733337e68c3660def17c6f6fe84efb7accb161d3cbae21cbe58b1a4abd11318db50faccfb865b435b70c499c", 0x8c) connect$inet6(r3, &(0x7f0000000cc0)={0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000fc0)={&(0x7f0000000d00)="d089fdc540f1e62926367a004d656537236e87c3a2d16070f8ac5c685a216d94a5459fef8b76fcd77eba078b576cafd6874f05a69f46f4af6f0c4a73140a2d707438a5e9d4ad32031f6ffd83a44e11a975f4cf71b14b144172c0ebd8f637b5ef4ccd97db29f6675dce7d4b2ed53c11e9db34eb577c1de9b4a4985a", &(0x7f0000000d80)=""/28, &(0x7f0000000dc0)="d491a3fcb64982495df00460e1952acd4860eee019b1535d3d233c274e33b1934d503460d364fbc1c1899bb176c27c4847396e9b5f94d5d38ca74ca32aabadad6fb3594a11955df30ee9b7c05a9dd5709ef491c7ac019221b2855ee5a9c829f8bc6fef23a37126bf5ba1729e4acb087de13fdd504a8497ef17bade47", &(0x7f0000000e40)="c28a7eb53633c7bb7db472d55782810885a0362f87060cd979583ecfa8a64c461cc4e3a8631e5e4637d2ae2b7b4e0bfe894ba803a9fa612a1b698fe1cba9e3ce805a72dcfde9868ce9f77104ecd2b2538f6634afe7e1f99b64bda6e263a7dcfb3bc280665dd0229020c2874370e318f8dcd78d7b8d41b83b324f10b08681f1a7f939d60a30f4e3c301068625166067b718880931016d7998bae04ea20246dad2c16be8edb0a7ebca9e7e0c1edd9fa401e4fb2cb2b3b335ea381850694269e1ef0e600b80ab4be2f1c2187b1162720f86426e976d428d5d09731b158fa90724fa7d29329992b9f86b603a887a630a", 0x7ff, r11, 0x4}, 0x38) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r12, 0xa37e0000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000001000), &(0x7f0000001040)=0x4) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x9c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x24004041) 3.178538536s ago: executing program 3 (id=3259): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="7bab6bdf", 0x4}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x62000000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x17}, 0x1e, r4}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}, 0x14) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}]}}]}, 0x44}}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') epoll_create(0x7) unshare(0x6a040000) r9 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0) ioctl$SIOCAX25DELFWD(r9, 0x618f, 0x0) 2.826040915s ago: executing program 1 (id=3262): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f68700", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c0001"], 0x3c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)="827bde2ad1d4a36420552430b1e02b9561470fd3916600018900857172d61f947f5bfff6310e298fa8d0b2a581dd58f3b91dd5aa1ebfe7ebf8515a383ef7", 0x3e}, {&(0x7f0000000300)="b066cc9966a4340a3e0fec38aa5cc20118a8f4ac7900d486dd61da84d7a6e786e5914895f6a1d19371828d70c2b78c2ff996aaa57ad99e93fac1741abaa501d66e45536cb2b57cecea02f94233f38ab64b87e652ca77ca2b5fc8811b09b4df0f1b2edfb642754fb6a750999a0940f51a0a1f19f08d539022c31ccce2e08ff019ed716a08a8a6b469026d86aae4e2803c8c9512c004180fd979572d5863c45b53283a0289691e25ea49", 0xa9}, {&(0x7f0000000580)="da3cdc4a2dd8f1ea2a96b3ebfc11b535987205534bd8156795d242145262a3290620821b97b60e7c72e53c69cc8e99d84feac7db9c661f624693aa6ee615bbb384a4bdddbaa20f", 0x47}, {&(0x7f00000008c0)="c9760d0e06857f3c79fd8b08d6222be4c7bfb381a89b15dd5ce4e5237f4c809917787249fdc146f6d5a89b78382f9ee5a4f1da9c7d5d18e2f84fd80995aa35043e7254d9c2122b7c8d3dd2167a868bb8aa89367f7701696cd81592de544feccd3e8512aa378baa286ddc87e39215db6486b61828c301b1d3c584bd1b25f67686be59c323512c736d18de6b2c9fe0de4ac9f62cd3fe8e51fa42d38a015302d4c63ae650fd057c23f8962b70a53b6571b87cd546884376b65186bc06b1f471bfbf836f36", 0xc3}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000740)="ce12b4a450aa24c9b5d971c503a8eee7455522c9854195db8ee60ebeb99dae266f6294ed6c8a4e6c9622ec62fed64e8a6e4b21795e6197b047d6fa2552802301d394c99b0bc2536ec3c575d07e70ff9f6f90ec70ff91b8f549563667ede4cfc41d2c1dca4515", 0x66}], 0x6, &(0x7f0000001a40)=[{0xf8, 0x10f, 0x3, "7f0332e1108f7aa810173f6624c78f6cea2c467ffc6f62642567ae3748f1a31a13bb0335fe9ea6f2df017e0bb2152de1989c211e3e3c214449fd6d21bb7258ffb78f7392ccd9cb3493371f509ebd9980758783874f1832fc6d410b65b6ab1c707b14b45c80a6b77ed45e1353f541037a633601320e5e2be86df953b33b54bfd6e867074a6631eee3edad927f28361fd1da7cbd681fba23d36467b7fc5d7d08db4bf49bf8f2143e0e0221319aa53d621eaeac8ca1451739c7313f9bc081b28c8df1a2eb77fc745273fec79eb463a036b638f7905bbbf65c7906d5c9df7c93c5ee5aaca1cdb53b"}], 0xf8}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xed}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdc01, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4004084) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001bc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001b40)={0x44, 0x0, 0x402, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bba30baac93a"}, @NL80211_ATTR_SSID={0x10, 0x34, @random="db16d4352b94d4e8b3d474f2"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x4040010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)="489a209a9afa47190657dc807c9063780a71a75f", 0x14}], 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd00000000950005000000000044680beed50e4c79e59a60903bf26ba31c53bf1b83930b526752240361a00e9ca0c1674084bbb9d6b0a21de4dbe63dd0eaa385b68c4eb13213bc6f0efb801b890926c0359168f57a51d0970b0febedc8fa8096c910a5ad00f617c043490a0d7c0093d964d8e8502280c7eebd7566090fe2c16f19b3e37113e298cc1d9432e7fb98f67813b4aa3318a552b1b464c66d0feb495eeec160b288ba6f355665494cc384aad87fac9999ba9b8146a4fb1e0aa59897b9e5ee"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 2.182325524s ago: executing program 1 (id=3264): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x1, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1fd, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x8, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0xc, 0x100, 0xa4, 0x8, 0x9, 0x9, 0x1, 0x6, 0x1, 0xfffffff3, 0x0, 0x3, 0x3, 0x200, 0x3, 0xdf, 0x7, 0x4, 0xf, 0xc, 0x6, 0x7fff, 0xc, 0x1000, 0x3e5, 0x8, 0x8318, 0x3, 0x6, 0x4, 0x8001, 0x8, 0x0, 0x7, 0x16301c8, 0x80, 0x1, 0x1c59, 0xfff, 0x8, 0x1, 0x0, 0xb, 0x9, 0x800, 0x3, 0x5, 0x3, 0x4, 0x7fff, 0x0, 0x90, 0xb0b, 0x2, 0x8, 0x4000, 0x6, 0x9, 0x9, 0x5, 0x0, 0x3, 0xb49, 0x4, 0x0, 0xb430, 0x3, 0x3, 0xd, 0x4000000, 0x12, 0xf, 0x280000, 0x7, 0x2, 0x6, 0x9, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0xfffffffd, 0x3, 0x5, 0x5, 0x9, 0x40, 0x4, 0x2, 0xffffff00, 0x4, 0x6, 0xa25, 0x40, 0x81, 0x8, 0x72243b5d, 0x7, 0xb, 0xfff, 0x6, 0x9, 0xc840, 0x5de9244a, 0x993, 0xfffffffa, 0x8, 0xfffffff9, 0x5, 0x7fffffff, 0x9, 0x3, 0xffffffff, 0x401, 0xfffffffa, 0xc, 0xd5a8, 0x8000, 0x2, 0x8000, 0x143b, 0x1, 0x0, 0x0, 0x0, 0x657, 0x8, 0x4, 0x8, 0x8000, 0xfffffffd, 0x6, 0x8, 0x1ff, 0x72, 0x1, 0x4, 0x26aa, 0x8, 0xaa6, 0x9, 0x8, 0xffffffff, 0x84, 0xc, 0x3, 0xb, 0xc4, 0xd, 0x3, 0xf7, 0x7, 0x8, 0x5, 0x5f42, 0x6, 0x5, 0x10, 0x3, 0x17, 0x7f, 0x2, 0x0, 0x8001, 0x13e, 0xffffffff, 0xfa86, 0xf, 0x100, 0xe7d6, 0xbc, 0x2, 0x3, 0x101, 0x0, 0x890, 0x3, 0x2, 0x6, 0xffffffff, 0xdc6, 0x7, 0x0, 0x1, 0x4, 0x6, 0x0, 0xffffffff, 0x0, 0xe3b, 0x5, 0x4, 0x1, 0x2c1, 0x1, 0x8137, 0x4, 0x1ff, 0x9, 0x0, 0xffff, 0x1ff, 0x1, 0x7, 0x4, 0x1, 0x7ff, 0x4, 0xffff, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x6, 0xb, 0x85b, 0x8, 0x80000001, 0x7f, 0x10, 0x1, 0xb, 0x5, 0x7, 0x7, 0x4, 0x401, 0x81, 0x401, 0x4, 0x8000000, 0x9, 0x3ff, 0x4, 0x8, 0x6, 0x5, 0x9, 0x1, 0x7, 0xbb05, 0x4, 0x101, 0xffffff2e, 0x1, 0x417, 0x80000000, 0x4, 0xb, 0x100, 0xfffffff5, 0x100, 0x874, 0x7]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000c435ab21611230000000003bf7c3d11a4d20b5565f3503b9009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r12, 0x0, 0x48c, &(0x7f0000000400)={0x1, 'macvlan1\x00'}, 0x18) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x335c}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x400c810) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) 1.724740494s ago: executing program 4 (id=3266): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) unshare(0x400) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'batadv_slave_0\x00', {0x3856}, 0x7fff}) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, &(0x7f0000000400)=0x10) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000640)=[{&(0x7f0000000280)="95186f27", 0x4}], 0x1, 0x3, 0x80000080) close(r3) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0x2, {0x3, 0xf0, 0x1}, 0xff}, 0x18) sendfile(r3, r2, 0x0, 0xf03a0005) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000040)=0x6, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.523335962s ago: executing program 0 (id=3268): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00400000000000001b0400028008000bff7f0000bf637edd6b03007bdbfff2dad4b29fe244ef52a171f86dd2f9fa6843d9d14b78c845c305e12477a86796d9bb8e1f9cc78b32210671c613e0e737cb0e9be4ca4d0e64f0aae8d1dc0426e0d4c23f0638dc5476eecf04baff9adbb37605389fc12eacfee5dcd454525dcb671f9c749e06a574dc0947a541021318f9cf20c894552a05a30e35d5e78597fa2eb670db724cfa4d71ad0061a6115ae171e53a0dac7eee95bb10aa46f071ef174bbdaababd4dc1d8c518c78e2aa332eba5a66880f8202c83f75d3a941e5b541e022d52abf8f653a1483a2a18e541a00c6a0170a41b7d8cbaa5cb09870e1c8af63cab40dd0658d143ee50b393ae87df5a", @ANYRES32=r2, @ANYRES16=r2], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r2], 0x48}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) 1.502197205s ago: executing program 4 (id=3269): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0xa}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000040", @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf252600000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004c80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r5, 0x200, 0x5, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000080) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) 1.441817179s ago: executing program 1 (id=3270): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000b4b2180000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x8c, &(0x7f0000001300)=""/140, 0x41100, 0xa}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) unshare(0x6a040000) r2 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0xa2, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) socket(0x22, 0xa, 0x2) (async) r8 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) close(0x4) (async) close(0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff0b000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000ab757b34f028fe800c8d8acbbd6a908722b92eca61e816451c20aff84e6aeabd0bf47860a02dcc7a1e2a4cd11d80ae24456b57bea966f05fd8c35b422289c492c98edf5c18a7c34f758c5bca74aaa1b073b479e324c3e91e3e1e1b04d33ea3c601757112444fbf1efd7145859b60b43085905082530d8fe10e32b1b76a00fb543aa2c99836f97c52515e5b81dbba3822493888729035bbcd533e708ed38e2bc7373e1934bc43eebeebbab1c7f0b0cb000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000028000000b70400000100000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.346531438s ago: executing program 4 (id=3272): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'dvmrp0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x10, 0xa, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9}, {0x9, 0x4}, {0xffe0, 0x9}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x800) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/14, 0xe}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) 1.321425725s ago: executing program 0 (id=3273): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x1) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r3, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/17, 0x11}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x273, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x273, 0x4) unshare(0x22020600) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x4) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) pread64(r6, 0x0, 0x0, 0x3) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x1000) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x1000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x200}) connect$qrtr(r5, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1000, @remote}, 0x1c, 0x0}}], 0x1, 0x4004000) (async) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1000, @remote}, 0x1c, 0x0}}], 0x1, 0x4004000) 994.930244ms ago: executing program 0 (id=3274): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'wlan0\x00', {0x3}, 0xd7}) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000001800)=@req3={0x3ff, 0x200, 0x1ff, 0x8, 0xbf07, 0x1ff, 0x5}, 0x1c) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x564, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe5c}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4eeebeac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x328, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbe, 0x3, "2254e9b8d79ca42aa2d2749c7178f9e60db205dc43f3f4413876261b418d1779679cdbe4b78281adc12a5dbd2ec908e9575d074981d9b1e17ae93971256ca2c9cb0740ac85e2bf5df109f98a15b90220286837a9b675ec498ed6ab807a2566d3a2498cc6af33cce639d407654088ad2c8cb1fea5c418cf1c804c0de2216b3a6e1d998d207a995bc2e9f9858170cd15aad2fa2d22c6a306b75372b2c646c2d7089d38534caead56ced2b41a86aa9e34f4ea5e46b49af4069b3619"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "cae5ed688469446225158a2a68af6150a4b7cf9714e1f3cc5b6059d0984c304312fa276cf6c374ee28a48c03ceb1df8d71821437bdd7c755b7e11c5c1026efe6c87fadd56749bd7f12ac040c76e23ce15f23794cedfdb9646a809c757e42e3c08f5403e1345155465a749ab66b15effaa13ef4ba6ae608357ec32018f8a28c0d6495602ec0c147613ab26543c94720c231b29f720c4035de9db0a4a902d5b78db5f1e1dd04e50c1709c4f50ec1ab4d9b5b9b7b1ff3eb36613b92dcb614ce91ba2ee6fdd77ffa75d0d1a5b3dc0db2aecee9b143"}, @TIPC_NLA_NODE_ID={0xd5, 0x3, "ce1a61eb6554618f7918d56c2a6ab0edfb8befb6d387e294cfa8bc691be6270887cd6fb66a8c1e7e2b8f32749d5e568309f41538348a97a21c3a746fb9d22d5ce1a96a764f03dcbbb8173050d880b60dd9cc2f2785e36e3709ba9c67cad070b8c1e3ecb73933a703e7eb7246d015f2ea53824dc3fa8738706fd27214246cb86392ed765ca5dae4d30fa4156809d37d81a1505b1f8267d5de635820927c106113501232c213180bf4a7785dbb87d52eb91471315ffa1505c7dda9f7daab7b6ab5246a3ddf6d72c395a54f11ea06264391a2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x92, 0x3, "bf42db5d8fc5b00ba36758234422c341d7125239becc10a0d7e33b59ab49237a510977d0d6d7afe3383bf992fbd2fe0cfa79c13b2283bac0b79c34e845164873d8072d928785870d6a8c0db09eae0b7bef10296eae94f77390289dab418563a5288a046f0d7d06574f6d7e5ef327e01def60257adc7d54b623528f643b9cbfbacfff757de1bed56ac1ea15fd18a1"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x65a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe5}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}]}]}, 0x564}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r2, &(0x7f0000000800)={@val={0x0, 0x800}, @val={0x2, 0x0, 0x3}, @mpls={[{0x80, 0x0, 0x1}], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfbc, 0x0, 0x11, 0x3, 0x21, 0x0, @dev, @broadcast}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3fe0c9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfce) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x59629}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) 879.342716ms ago: executing program 2 (id=3275): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 850.004087ms ago: executing program 4 (id=3276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600010028bd7000fcdbdf250a7f60fd", @ANYRES32, @ANYBLOB="140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x3, 0x800}, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}, "70d0f28ff45b9ce8"}}}, 0x3c) 753.129339ms ago: executing program 2 (id=3277): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x5) writev(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xd, 0x8001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x30, r4, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) getsockname$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x40007, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001880)=ANY=[@ANYBLOB="1800cc5789097d3be117ea000000000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000016ba5cffbd6a3965f1ea421f0b39bc3518c1b67565ab736f9f6e7ad037617de01e8fc1fb14da153ed03faab0fdd99b7b3ba5d89f9b12845aaf176a90fdedb19b76d6f4e06673fd15145e97acee529e0b95f2f3c3864b08c059ddb367d5240e12903952ec43cddfb6fdc9c5456c47d018faa47a61b9f619c5bdefa26604e1de3fa9e23b96818313800291854cf621e9f7ec5b6c2a0add1be7362d97d12e87967cbcf6a67be"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xfffffce4) 624.066599ms ago: executing program 2 (id=3278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11) 568.232746ms ago: executing program 2 (id=3279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) unshare(0x22020600) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x80, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000005f2dcfb28c54df3106", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e000100776972656775617264"], 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r6, &(0x7f0000000080)={0xa, 0xe64, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x201}, 0x1c) (async) r7 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r7, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) (async) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000069103000000000007b0a00ff000008009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 551.863176ms ago: executing program 4 (id=3280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r3}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x3}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x4c}}, 0x0) 423.02363ms ago: executing program 0 (id=3281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = epoll_create(0x10001) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0xaf) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x9, @vifc_lcl_ifindex, @empty}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bind$unix(r7, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1ff}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0xfffe, 0x4, 0x3, {0xa, 0x4e22, 0xfffffabb, @local, 0xc}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r8, 0x40047452, 0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x890c, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) 382.088056ms ago: executing program 2 (id=3282): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000fddbdf271700000008000300", @ANYRES32=r4, @ANYBLOB="04003080"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="40010000", @ANYRES16=r10, @ANYBLOB="3f8200000000fddbdf271700000008000300", @ANYRES32=r9, @ANYBLOB="24013080050002"], 0x140}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044004) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) (async, rerun: 32) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r12) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x4c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c804}, 0x20008004) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r14) sendmsg$IEEE802154_ADD_IFACE(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x38, r15, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x38}}, 0x24040884) (async, rerun: 32) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000ab0000000060a0b0400000000000000000200fffe84000480800001800a000100696e6e65720000007000028008000240000000840800034000000007080004400000001308000140000000004c000580090001006d657461000000003c00028008000140000000030800024000000000080003400000000e0800024000000003080001400000000a080002400000000c08000240000000010900010073797a30000000000900020073797a3200"], 0xd8}}, 0x0) r17 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r17, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x18, 0x110, 0xe, "3ada4c68db"}], 0x18}, 0xfc40) 80.059399ms ago: executing program 4 (id=3283): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000ffdbdf250100"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ebf6ffff000000000a00000091119300000001009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180023f56c726af43a9e4fbf0000010000000000ac6e09eb12aba175c132087d954c7c0000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @private2, 0x1}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000dcdf8345ea0cb9a40300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000680), 0x1003, r7}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, 0x0, 0x0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b708000004000000088af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000f3031f0913102120ff80c8e364492c721571022240766489ad0ed93fc8a39ca3871203b2e0eea9b060", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186400000d0000000000000008000000"], &(0x7f0000000500)='GPL\x00', 0x3, 0x6, &(0x7f0000000540)=""/6, 0xa0797f52d7a14317, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xe, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000800)=[r7, r4, r5, r5, r5, r5], &(0x7f0000000840)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x3, 0xc}, {0x5, 0x5, 0x7}, {0x5, 0x1, 0x8}, {0x5, 0x1, 0x2, 0x6}], 0x10, 0x3ff}, 0x94) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xd, 0xffe0}, {0x0, 0x1}}}, 0x24}}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x37, 0x1ff, 0x50}, {@empty, 0x4e22, 0x2000, 0xc7, 0x80012d58, 0x8001}}, 0x44) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x3d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) 0s ago: executing program 2 (id=3284): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000100)="31b544de00"/24, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000200)={0x8, 0x5, 0x7fffffff, 0x6, 0xa780, 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000100)="31b544de00"/24, 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000200)={0x8, 0x5, 0x7fffffff, 0x6, 0xa780, 0x8}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) kernel console output (not intermixed with test programs): ith an inconsistent configuration, please check. [ 301.680592][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.700899][T14071] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 301.811297][T14078] __nla_validate_parse: 4 callbacks suppressed [ 301.811318][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 301.898320][T14082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2140'. [ 301.919606][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.107508][T14088] bond8: option primary_reselect: invalid value (4) [ 302.117190][T14088] bond8 (unregistering): Released all slaves [ 302.297277][T14086] lo speed is unknown, defaulting to 1000 [ 302.319878][T14086] lo speed is unknown, defaulting to 1000 [ 302.396348][T14097] tipc: Enabling of bearer rejected, failed to enable media [ 302.409085][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.437532][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2147'. [ 302.719111][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.826988][T14119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2151'. [ 302.914068][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 303.759648][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.952311][T14153] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2159'. [ 304.070454][T14158] pimreg: left allmulticast mode [ 304.265714][T14166] validate_nla: 1 callbacks suppressed [ 304.265734][T14166] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 304.515653][T14166] bond11: entered promiscuous mode [ 304.528900][T14166] 8021q: adding VLAN 0 to HW filter on device bond11 [ 304.576951][T14187] pim6reg1: entered promiscuous mode [ 304.627153][T14187] pim6reg1: entered allmulticast mode [ 304.803799][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.844010][T14193] lo speed is unknown, defaulting to 1000 [ 304.917226][T14193] lo speed is unknown, defaulting to 1000 [ 305.079390][T14209] lo speed is unknown, defaulting to 1000 [ 305.288659][T14217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2174'. [ 305.405495][T14222] netlink: 'syz.3.2176': attribute type 10 has an invalid length. [ 305.447402][T14222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2176'. [ 305.456956][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.465524][T14222] dummy0: entered promiscuous mode [ 305.538401][T14222] team0: Port device dummy0 removed [ 305.571098][T14222] bridge0: port 3(dummy0) entered blocking state [ 305.577624][T14222] bridge0: port 3(dummy0) entered disabled state [ 305.621554][T14233] netlink: 'syz.4.2178': attribute type 13 has an invalid length. [ 305.627439][T14222] dummy0: entered allmulticast mode [ 305.662506][ T5953] udevd[5953]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 305.843022][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.895046][T14209] lo speed is unknown, defaulting to 1000 [ 306.879172][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.043310][ T1714] block nbd1: Possible stuck request ffff888026a78200: control (read@0,1024B). Runtime 30 seconds [ 307.056156][ T1714] block nbd1: Possible stuck request ffff888026a78400: control (read@1024,1024B). Runtime 30 seconds [ 307.068181][ T1714] block nbd1: Possible stuck request ffff888026a78600: control (read@2048,1024B). Runtime 30 seconds [ 307.079398][ T1714] block nbd1: Possible stuck request ffff888026a78800: control (read@3072,1024B). Runtime 30 seconds [ 307.290187][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 307.310223][T14251] netlink: 'syz.3.2185': attribute type 2 has an invalid length. [ 307.920581][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.230357][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'. [ 308.479099][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.509612][T14269] team1: entered promiscuous mode [ 308.519421][T14269] team1: entered allmulticast mode [ 308.529569][T14269] 8021q: adding VLAN 0 to HW filter on device team1 [ 308.549387][T14272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2189'. [ 308.727758][T14275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2188'. [ 308.749265][T14276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2188'. [ 308.763386][T14272] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.831653][T14275] syzkaller1: entered promiscuous mode [ 308.837302][T14275] syzkaller1: entered allmulticast mode [ 308.960310][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.017246][T14284] tap0: tun_chr_ioctl cmd 1074025677 [ 309.031941][T14284] tap0: linktype set to 769 [ 309.201703][T14296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2194'. [ 309.212647][T14296] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 309.255262][T14296] 8021q: adding VLAN 0 to HW filter on device bond12 [ 309.299053][T14296] bond12: (slave veth9): Enslaving as an active interface with a down link [ 309.369899][T14296] bond12: (slave veth11): Enslaving as an active interface with a down link [ 309.894535][T14333] lo: Caught tx_queue_len zero misconfig [ 309.910239][T14333] netlink: 'syz.4.2201': attribute type 15 has an invalid length. [ 309.929723][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 309.951767][T14331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2200'. [ 309.987937][T14339] netlink: 'syz.2.2202': attribute type 44 has an invalid length. [ 309.999581][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.038167][T14339] netlink: 'syz.2.2202': attribute type 44 has an invalid length. [ 310.048604][T14338] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 310.144810][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2205'. [ 310.270963][T14353] vlan4: entered promiscuous mode [ 310.446769][T14356] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2206'. [ 310.567304][T14372] netlink: 'syz.0.2211': attribute type 66 has an invalid length. [ 310.726696][T14379] bridge3: entered promiscuous mode [ 310.763724][T14379] bridge3: entered allmulticast mode [ 310.783803][T14384] lo: Caught tx_queue_len zero misconfig [ 311.046782][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.338498][T14408] lo speed is unknown, defaulting to 1000 [ 311.411731][T14408] lo speed is unknown, defaulting to 1000 [ 311.469211][T14369] lec:lec_atm_send: lec0: Unknown message type 808464432 [ 311.519201][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.528056][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.545610][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.555946][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.565952][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.651333][T14368] lec:lec_atm_close: lec0: Shut down! [ 312.081372][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.302548][T14446] __nla_validate_parse: 1 callbacks suppressed [ 312.302572][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2228'. [ 312.888215][T14420] siw: device registration error -23 [ 312.962016][T14471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.967007][T14462] lo speed is unknown, defaulting to 1000 [ 313.075404][T14462] lo speed is unknown, defaulting to 1000 [ 313.122520][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.222055][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2235'. [ 313.259401][T11547] lec:lec_start_xmit: lec0:No lecd attached [ 313.350347][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2236'. [ 313.382920][T14464] dvmrp0: entered allmulticast mode [ 313.388594][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2236'. [ 313.549629][T14496] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2239'. [ 313.617417][T14496] vlan4: entered allmulticast mode [ 313.653414][T14496] gretap0: entered allmulticast mode [ 314.160452][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.577726][T14526] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.589116][T14526] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 314.627775][T14526] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 314.891284][T14528] lo speed is unknown, defaulting to 1000 [ 314.947326][T14526] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.989298][T14526] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 315.010566][T14526] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 315.056792][T14528] lo speed is unknown, defaulting to 1000 [ 315.130938][T14526] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.155431][T14526] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 315.185941][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2249'. [ 315.188980][T14526] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 315.278483][T14526] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.309815][T14526] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 315.319928][T14526] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 315.574274][T14564] geneve2: entered promiscuous mode [ 315.580072][T14564] geneve2: entered allmulticast mode [ 315.689699][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 315.700602][T14567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2255'. [ 315.710172][T14569] ipt_ECN: cannot use operation on non-tcp rule [ 315.730885][T14567] geneve3: entered promiscuous mode [ 315.736331][T14567] geneve3: entered allmulticast mode [ 315.743649][ T8763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.753930][ T8763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.764878][ T8763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.766705][T14569] netlink: 'syz.4.2254': attribute type 32 has an invalid length. [ 315.775571][ T8763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.793676][T14569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2254'. [ 315.803454][T14569] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 315.947343][T14564] lo speed is unknown, defaulting to 1000 [ 315.982091][T14564] lo speed is unknown, defaulting to 1000 [ 316.239638][T11547] net_ratelimit: 2 callbacks suppressed [ 316.239658][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.345218][ T8774] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.357315][ T8774] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.378974][ T8774] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.417201][ T8775] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.439152][ T8775] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.458215][ T8775] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.511919][ T8763] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.520479][ T8763] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.544764][ T8763] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.566738][ T8774] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.576483][ T8774] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.588416][ T8774] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.677348][T14552] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 316.985949][T14596] IPv6: sit2: Disabled Multicast RS [ 317.011376][T14597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2260'. [ 317.281105][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.290225][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.298820][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.307859][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.309855][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.603512][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.873692][T14603] tipc: Enabled bearer , priority 0 [ 317.882577][T14603] syzkaller0: entered promiscuous mode [ 317.888129][T14603] syzkaller0: entered allmulticast mode [ 318.005007][T14603] tipc: Resetting bearer [ 318.083981][T14602] tipc: Resetting bearer [ 318.150111][T14602] tipc: Disabling bearer [ 318.281634][T14613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2265'. [ 318.320275][T11558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.933332][T14650] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 319.024857][T14648] lo speed is unknown, defaulting to 1000 [ 319.033477][T14648] lo speed is unknown, defaulting to 1000 [ 319.082558][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 319.091122][ C1] lec:lec_tx_timeout: lec0 [ 319.098914][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.150806][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2275'. [ 319.328142][T14664] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 319.338307][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2279'. [ 319.359902][T11558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.469079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.509208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.655556][T14681] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 319.676682][T14675] lo speed is unknown, defaulting to 1000 [ 319.702416][T14675] lo speed is unknown, defaulting to 1000 [ 319.781762][T14687] netlink: 'syz.4.2286': attribute type 4 has an invalid length. [ 319.837985][T14688] netlink: 'syz.4.2286': attribute type 4 has an invalid length. [ 320.352411][T14692] bond5: option arp_interval: invalid value (18446744073709551615) [ 320.362770][T14692] bond5: option arp_interval: allowed values 0 - 2147483647 [ 320.400278][T14692] bond5 (unregistering): Released all slaves [ 320.519674][T11558] lo speed is unknown, defaulting to 1000 [ 320.535750][T11547] lo speed is unknown, defaulting to 1000 [ 320.747191][T14683] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 321.300572][T14717] netlink: 'syz.4.2291': attribute type 11 has an invalid length. [ 321.441846][T11547] net_ratelimit: 3 callbacks suppressed [ 321.441866][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.462120][T14720] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2292'. [ 321.480108][T14720] dummy0: Caught tx_queue_len zero misconfig [ 321.917130][T14728] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2294'. [ 322.312876][T14747] lo speed is unknown, defaulting to 1000 [ 322.324584][T14747] lo speed is unknown, defaulting to 1000 [ 322.401520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.679016][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.775521][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'. [ 323.041127][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.050695][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.063380][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.554090][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'. [ 323.680266][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.759143][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.108830][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 324.117100][ C1] lec:lec_tx_timeout: lec0 [ 324.122172][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.141996][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 324.213026][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 324.799156][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.877388][T14835] C: renamed from team_slave_0 (while UP) [ 324.906523][T14835] netlink: 'syz.2.2319': attribute type 2 has an invalid length. [ 324.926709][T14835] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2319'. [ 324.949202][T14835] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 325.330391][T14860] xt_hashlimit: invalid rate [ 325.395688][T14869] netlink: 'syz.2.2329': attribute type 10 has an invalid length. [ 325.451227][T14869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.480800][T14863] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 325.488705][T14863] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2328'. [ 325.491221][T14869] team0: Device bond0 failed to register rx_handler [ 326.002369][T14890] netlink: 'syz.2.2332': attribute type 3 has an invalid length. [ 326.025184][T14890] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2332'. [ 326.118143][T14900] syzkaller0: entered promiscuous mode [ 326.146780][T14900] syzkaller0: entered allmulticast mode [ 326.215771][T14910] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2339'. [ 326.244548][T14904] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2338'. [ 326.542294][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2343'. [ 326.621537][T14934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2344'. [ 326.719089][T12019] net_ratelimit: 1 callbacks suppressed [ 326.719111][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.879086][T11558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.004660][T14958] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 327.041530][T14963] syzkaller0: entered promiscuous mode [ 327.047084][T14963] syzkaller0: entered allmulticast mode [ 327.386120][T14983] netlink: 'syz.2.2357': attribute type 10 has an invalid length. [ 327.449123][T14983] team0: Device syz_tun failed to register rx_handler [ 327.818433][T15001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.871542][T15003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.885430][T15003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.908159][T15003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.928919][T11558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.949084][T15009] lo speed is unknown, defaulting to 1000 [ 328.001532][T15009] lo speed is unknown, defaulting to 1000 [ 328.170351][T15017] syzkaller0: entered promiscuous mode [ 328.184154][T15017] syzkaller0: entered allmulticast mode [ 328.440116][T15021] netlink: 'syz.1.2366': attribute type 12 has an invalid length. [ 328.513532][T15025] netlink: zone id is out of range [ 328.520402][T14998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.531885][T14998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.687879][T15034] __nla_validate_parse: 7 callbacks suppressed [ 328.687904][T15034] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.2368'. [ 328.961646][T15049] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20004 [ 328.968707][T15049] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20004 [ 328.979969][T15052] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 328.994153][T15049] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 329.128851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.137163][ C1] lec:lec_tx_timeout: lec0 [ 329.141946][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.172911][T15052] can: request_module (can-proto-3) failed. [ 329.294167][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2374'. [ 329.409951][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2377'. [ 329.509995][T15072] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 329.667159][T15072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2378'. [ 330.118646][T15104] batadv_slave_1: entered promiscuous mode [ 330.138555][T15103] batadv_slave_1: left promiscuous mode [ 330.272488][T15113] xt_nfacct: accounting object `syz0' does not exist [ 330.310868][T15117] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2388'. [ 330.963339][T15142] netlink: 'syz.0.2398': attribute type 10 has an invalid length. [ 330.978987][T15142] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2398'. [ 331.084457][T15158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2402'. [ 331.436223][T15169] bond13: option lacp_active: invalid value (8) [ 331.482363][T15169] bond13 (unregistering): Released all slaves [ 331.642104][T15184] bond5: Removing last arp target with arp_interval on [ 331.853058][T15172] syzkaller0: entered promiscuous mode [ 331.858789][T15172] syzkaller0: entered allmulticast mode [ 331.879837][T15193] xt_nfacct: accounting object `syz0' does not exist [ 332.079111][T11553] net_ratelimit: 22 callbacks suppressed [ 332.079136][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.259800][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2415'. [ 332.675795][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.819043][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.120260][T11558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.351512][T15241] netlink: 'syz.4.2419': attribute type 2 has an invalid length. [ 333.873275][T15202] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 333.882684][T15209] tipc: Resetting bearer [ 333.883007][T15202] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 333.898418][T15202] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 334.148840][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.156951][ C1] lec:lec_tx_timeout: lec0 [ 334.161740][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.167826][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.205103][T15254] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 334.242014][T15254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2424'. [ 334.275549][T15254] bond6: entered promiscuous mode [ 334.411604][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'. [ 334.572395][T15275] netlink: 'syz.3.2429': attribute type 21 has an invalid length. [ 334.670940][T15288] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2432'. [ 334.786785][T15293] syzkaller1: entered promiscuous mode [ 334.794611][T15293] syzkaller1: entered allmulticast mode [ 334.863281][T15298] lo speed is unknown, defaulting to 1000 [ 334.880820][T15298] lo speed is unknown, defaulting to 1000 [ 334.901741][T15300] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2436'. [ 334.911299][T15300] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2436'. [ 335.199193][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.319475][T15318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.342744][T15318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.352516][T15318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.365432][T15318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.450788][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'. [ 335.878266][T15343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2450'. [ 335.947156][T15346] No such timeout policy "syz0" [ 335.976034][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 336.126362][T15348] lo speed is unknown, defaulting to 1000 [ 336.161748][T15348] lo speed is unknown, defaulting to 1000 [ 336.965264][T15363] lo speed is unknown, defaulting to 1000 [ 336.999782][T15365] lo speed is unknown, defaulting to 1000 [ 337.011790][T15363] lo speed is unknown, defaulting to 1000 [ 337.120406][ T1714] block nbd1: Possible stuck request ffff888026a78200: control (read@0,1024B). Runtime 60 seconds [ 337.131418][ T1714] block nbd1: Possible stuck request ffff888026a78400: control (read@1024,1024B). Runtime 60 seconds [ 337.143254][ T1714] block nbd1: Possible stuck request ffff888026a78600: control (read@2048,1024B). Runtime 60 seconds [ 337.154714][ T1714] block nbd1: Possible stuck request ffff888026a78800: control (read@3072,1024B). Runtime 60 seconds [ 337.280482][T11558] net_ratelimit: 5 callbacks suppressed [ 337.280504][T11558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.721245][T15365] lo speed is unknown, defaulting to 1000 [ 337.761357][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.057288][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2460'. [ 338.321837][T11558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.515412][T15407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.524572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.694988][T15417] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2463'. [ 338.762890][T15421] netlink: 'syz.0.2465': attribute type 9 has an invalid length. [ 338.784861][T15421] netlink: 'syz.0.2465': attribute type 10 has an invalid length. [ 338.887238][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.168813][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.176888][ C1] lec:lec_tx_timeout: lec0 [ 339.181786][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.220926][T15442] vlan3: entered promiscuous mode [ 339.226040][T15442] bridge0: entered promiscuous mode [ 339.361499][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.855313][T15463] xt_hashlimit: max too large, truncated to 1048576 [ 339.862987][T15463] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 340.120934][T15456] syzkaller0: entered promiscuous mode [ 340.127066][T15456] syzkaller0: entered allmulticast mode [ 340.404604][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.440687][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.921187][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.479432][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.884678][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.043663][T15478] lo speed is unknown, defaulting to 1000 [ 343.072295][T15478] lo speed is unknown, defaulting to 1000 [ 343.085834][T15498] lo speed is unknown, defaulting to 1000 [ 343.300937][T15519] dummy0: entered allmulticast mode [ 343.308116][T15518] dummy0: left allmulticast mode [ 343.436110][T15498] lo speed is unknown, defaulting to 1000 [ 343.520086][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.673326][T15531] __nla_validate_parse: 2 callbacks suppressed [ 343.673350][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 343.814171][T15536] bond10: entered allmulticast mode [ 343.820477][T15536] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.130867][T15541] netlink: 'syz.2.2489': attribute type 13 has an invalid length. [ 344.350784][T15545] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 344.416105][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 344.450173][T15544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2490'. [ 344.504473][T15545] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.540998][T15544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2490'. [ 344.564238][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.595443][T15544] bond9: entered allmulticast mode [ 344.621166][T15545] dummy0: left allmulticast mode [ 344.638130][T15545] dummy0: left promiscuous mode [ 344.643888][T15545] bridge0: port 3(dummy0) entered disabled state [ 344.719762][T15545] bond9: (slave dummy0): making interface the new active one [ 344.727699][T15545] dummy0: entered allmulticast mode [ 344.735554][T15545] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 344.782236][T15554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2492'. [ 344.940174][T15560] netlink: 'syz.3.2494': attribute type 8 has an invalid length. [ 344.958785][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 344.959976][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.967088][ C1] lec:lec_tx_timeout: lec0 [ 344.980464][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.043745][T15564] xt_hashlimit: size too large, truncated to 1048576 [ 345.235556][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 345.426377][T15569] veth9: entered promiscuous mode [ 345.602844][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.691267][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 346.224744][T15624] netlink: 'syz.3.2510': attribute type 1 has an invalid length. [ 346.265411][T15624] 8021q: adding VLAN 0 to HW filter on device bond10 [ 346.281998][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 346.336260][T15624] bond10: (slave gretap1): making interface the new active one [ 346.370490][T15624] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 346.639044][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.987814][T15653] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2518'. [ 347.679083][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.004149][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.198563][T15653] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 348.719559][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.879465][T15695] tipc: Enabled bearer , priority 0 [ 348.949926][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2533'. [ 349.207574][T15725] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 349.357913][T15693] tipc: Disabling bearer [ 349.414995][T15737] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 349.425360][T15737] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 349.667434][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 349.762664][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.789478][T15759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2544'. [ 349.811336][T15758] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2545'. [ 349.829170][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2545'. [ 349.854983][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2545'. [ 349.998810][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 350.006879][ C1] lec:lec_tx_timeout: lec0 [ 350.012235][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.186968][T15776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2548'. [ 350.549422][T15789] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 350.799566][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.873569][T15814] lo speed is unknown, defaulting to 1000 [ 350.926905][T15814] lo speed is unknown, defaulting to 1000 [ 351.039074][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.071545][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 351.164943][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 351.304192][T15845] bond11: ARP target 9.0.0.0 is already present [ 351.311702][T15845] bond11: option arp_ip_target: invalid value (9) [ 351.350369][T15845] bond11 (unregistering): Released all slaves [ 351.416554][T15844] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 351.695545][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2568'. [ 351.735561][T15870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.761772][T15870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.783605][T15870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.821561][T15870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.121493][T15889] dummy0: entered promiscuous mode [ 352.137475][T15889] dummy0: left promiscuous mode [ 352.213848][T15894] lo speed is unknown, defaulting to 1000 [ 352.223963][T15894] lo speed is unknown, defaulting to 1000 [ 352.674656][T15904] syzkaller0: entered promiscuous mode [ 352.680445][T15904] syzkaller0: entered allmulticast mode [ 352.879390][T11553] net_ratelimit: 24 callbacks suppressed [ 352.879411][T11553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.125665][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.135973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.151307][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.922248][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.810803][T15932] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 354.836630][T15932] __nla_validate_parse: 4 callbacks suppressed [ 354.836651][T15932] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2584'. [ 354.853283][T15932] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2584'. [ 354.872023][T15933] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 354.914415][T15933] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2584'. [ 354.929256][T15933] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2584'. [ 354.960389][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.018780][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.027262][ C1] lec:lec_tx_timeout: lec0 [ 355.032341][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.259122][T15940] lo speed is unknown, defaulting to 1000 [ 355.267068][T15940] lo speed is unknown, defaulting to 1000 [ 355.509391][T15966] lo speed is unknown, defaulting to 1000 [ 355.627573][T15982] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2594'. [ 355.677723][T15982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.900193][T15987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.909094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.936905][T15987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.182055][T15966] lo speed is unknown, defaulting to 1000 [ 356.210514][T16005] veth1: Caught tx_queue_len zero misconfig [ 356.230758][T15999] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 356.433733][T15999] bond8 (unregistering): Released all slaves [ 356.497637][T16022] netlink: 'syz.2.2600': attribute type 2 has an invalid length. [ 356.885888][T11980] lo speed is unknown, defaulting to 1000 [ 356.894449][T11980] syz0: Port: 1 Link DOWN [ 356.934433][T16022] : entered promiscuous mode [ 356.970253][ T8763] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.989206][ T8763] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.009210][ T8763] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 357.027228][ T8763] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.045848][ T8763] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.068871][ T8763] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 357.077552][ T8763] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.084536][ T5827] lo speed is unknown, defaulting to 1000 [ 357.109108][ T8763] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.117614][ T8763] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 357.139082][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2606'. [ 357.176957][T16031] tipc: Enabling of bearer rejected, failed to enable media [ 357.199528][ T8763] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.207949][ T8763] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.244647][ T8763] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 357.262692][T16033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2607'. [ 357.432351][T16042] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2611'. [ 357.444398][T16043] netlink: 'syz.4.2611': attribute type 9 has an invalid length. [ 357.454815][T16046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.462184][T16046] IPv6: NLM_F_CREATE should be set when creating new route [ 357.469514][T16046] IPv6: NLM_F_CREATE should be set when creating new route [ 357.695437][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 358.067923][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 358.186129][T16048] lo speed is unknown, defaulting to 1000 [ 358.236786][T16048] lo speed is unknown, defaulting to 1000 [ 358.551635][T16083] vlan0: entered promiscuous mode [ 358.556745][T16083] geneve1: entered promiscuous mode [ 359.350714][T11553] lo speed is unknown, defaulting to 1000 [ 359.357451][T11553] syz2: Port: 1 Link DOWN [ 359.390340][T16111] syz_tun: entered allmulticast mode [ 359.451238][ T8768] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.474257][ T8768] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 359.514283][ T8768] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.561700][T16114] syz_tun (unregistering): left allmulticast mode [ 359.644094][ T8768] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.705106][ T8768] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 359.740646][ T8768] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.762275][ T8768] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.787264][ T8768] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 359.817035][ T8768] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.878761][ T8768] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.917928][ T8768] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 359.949642][ T8768] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.038806][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 360.046948][ C1] lec:lec_tx_timeout: lec0 [ 360.052326][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.181664][T16150] netlink: 'syz.4.2631': attribute type 11 has an invalid length. [ 360.200098][T16150] __nla_validate_parse: 37 callbacks suppressed [ 360.200119][T16150] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2631'. [ 360.285084][T16153] lo speed is unknown, defaulting to 1000 [ 360.366834][T16153] lo speed is unknown, defaulting to 1000 [ 361.314067][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'. [ 361.405040][T16191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2637'. [ 361.445343][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 361.498641][T16191] ip6gretap0: entered promiscuous mode [ 361.517133][T16191] ip6gretap0: entered allmulticast mode [ 361.790380][T16204] netlink: 'syz.0.2639': attribute type 1 has an invalid length. [ 361.818686][T16204] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2639'. [ 361.872287][T16204] netlink: 'syz.0.2639': attribute type 1 has an invalid length. [ 361.887989][T16204] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2639'. [ 362.215654][T16210] lo speed is unknown, defaulting to 1000 [ 362.382064][T16210] lo speed is unknown, defaulting to 1000 [ 362.419438][T16227] net_ratelimit: 7 callbacks suppressed [ 362.419460][T16227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.758537][T16246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2646'. [ 362.827776][T16251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2646'. [ 362.930763][T16256] netlink: 'syz.4.2648': attribute type 13 has an invalid length. [ 363.293351][T16270] netlink: 'syz.0.2651': attribute type 31 has an invalid length. [ 363.355998][T16274] netlink: 'syz.1.2652': attribute type 1 has an invalid length. [ 363.364063][T16274] netlink: 'syz.1.2652': attribute type 2 has an invalid length. [ 363.374336][T16274] netlink: 'syz.1.2652': attribute type 1 has an invalid length. [ 363.393549][T16274] netlink: 'syz.1.2652': attribute type 2 has an invalid length. [ 363.405234][T16274] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2652'. [ 363.491449][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 363.554069][T16283] veth9: entered promiscuous mode [ 363.891710][T16296] tipc: Enabled bearer , priority 0 [ 364.148636][T16296] syzkaller0: entered promiscuous mode [ 364.154378][T16296] syzkaller0: entered allmulticast mode [ 364.164196][T16296] tipc: Resetting bearer [ 364.171043][T16292] lo speed is unknown, defaulting to 1000 [ 364.176925][T16299] tipc: Resetting bearer [ 364.185504][T16293] tipc: Resetting bearer [ 364.751638][T16311] x_tables: ip_tables: SYNPROXY target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD [ 365.058840][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.067062][ C1] lec:lec_tx_timeout: lec0 [ 365.072004][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.716907][T16293] tipc: Disabling bearer [ 365.731762][T16292] lo speed is unknown, defaulting to 1000 [ 365.752715][T16315] ip6tnl2: entered promiscuous mode [ 365.758001][T16315] ip6tnl2: entered allmulticast mode [ 365.765020][T12019] tipc: Node number set to 2079845903 [ 365.890631][T16321] __nla_validate_parse: 1 callbacks suppressed [ 365.890659][T16321] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2665'. [ 366.117672][T16329] IPVS: Scheduler module ip_vs_ not found [ 366.244910][T16337] syzkaller0: entered promiscuous mode [ 366.253532][T16337] syzkaller0: entered allmulticast mode [ 366.549327][T16300] lo speed is unknown, defaulting to 1000 [ 366.557464][T16347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2673'. [ 366.585498][T16347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2673'. [ 366.614245][T16349] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 366.615664][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2673'. [ 366.648901][T16349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2673'. [ 366.685749][T16351] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 366.709397][T16300] lo speed is unknown, defaulting to 1000 [ 367.023327][T16359] netlink: 'syz.3.2676': attribute type 11 has an invalid length. [ 367.059369][T16359] netlink: 'syz.3.2676': attribute type 4 has an invalid length. [ 367.067300][T16359] netlink: 199780 bytes leftover after parsing attributes in process `syz.3.2676'. [ 367.204406][ T1714] block nbd1: Possible stuck request ffff888026a78200: control (read@0,1024B). Runtime 90 seconds [ 367.215525][ T1714] block nbd1: Possible stuck request ffff888026a78400: control (read@1024,1024B). Runtime 90 seconds [ 367.227103][ T1714] block nbd1: Possible stuck request ffff888026a78600: control (read@2048,1024B). Runtime 90 seconds [ 367.238268][ T1714] block nbd1: Possible stuck request ffff888026a78800: control (read@3072,1024B). Runtime 90 seconds [ 367.357250][T16370] netlink: 'syz.0.2680': attribute type 3 has an invalid length. [ 367.365324][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 367.392266][T16370] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2680'. [ 367.655952][T16381] lo speed is unknown, defaulting to 1000 [ 367.664026][T16381] lo speed is unknown, defaulting to 1000 [ 367.832682][T16394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2688'. [ 367.929561][T16397] sctp: [Deprecated]: syz.2.2689 (pid 16397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.929561][T16397] Use struct sctp_sack_info instead [ 368.017652][T16392] lo speed is unknown, defaulting to 1000 [ 368.174575][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'. [ 368.287134][T16392] lo speed is unknown, defaulting to 1000 [ 368.436320][T16408] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 368.572245][T16411] vlan5: entered promiscuous mode [ 368.598902][T16411] veth0_to_team: entered promiscuous mode [ 368.605045][T16411] vlan5: entered allmulticast mode [ 368.626666][T16411] veth0_to_team: entered allmulticast mode [ 369.264216][T16429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.518144][T16438] openvswitch: netlink: Message has 8 unknown bytes. [ 369.539029][T16439] netlink: 'syz.2.2701': attribute type 9 has an invalid length. [ 369.547265][T16439] netlink: 'syz.2.2701': attribute type 6 has an invalid length. [ 369.566541][T16438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.079596][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 370.087931][ C1] lec:lec_tx_timeout: lec0 [ 370.093173][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.274686][T16475] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 371.686789][T16490] Cannot find set identified by id 65534 to match [ 371.701268][T16489] sctp: [Deprecated]: syz.4.2717 (pid 16489) Use of int in maxseg socket option. [ 371.701268][T16489] Use struct sctp_assoc_value instead [ 371.962557][T16501] ip6tnl0: Caught tx_queue_len zero misconfig [ 371.993433][T11547] IPVS: starting estimator thread 0... [ 372.101685][T16502] IPVS: using max 26 ests per chain, 62400 per kthread [ 372.461505][T16526] __nla_validate_parse: 9 callbacks suppressed [ 372.461525][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 372.729225][T16539] tipc: Enabled bearer , priority 0 [ 372.887242][T16553] lo speed is unknown, defaulting to 1000 [ 372.969325][T16553] lo speed is unknown, defaulting to 1000 [ 372.973066][T16558] tunl0: Caught tx_queue_len zero misconfig [ 373.018371][T16558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2737'. [ 373.218361][T16572] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 373.238955][T16572] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2739'. [ 373.255263][T16572] netlink: 'syz.2.2739': attribute type 5 has an invalid length. [ 373.273311][T16572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2739'. [ 373.309235][T16572] bridge0: left allmulticast mode [ 373.493119][T16583] xt_bpf: check failed: parse error [ 373.531524][T16583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.576223][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2741'. [ 373.872273][T16606] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2745'. [ 373.885161][T16605] netlink: 'syz.3.2747': attribute type 1 has an invalid length. [ 373.988827][T16609] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 374.105504][T16605] bond12: (slave bridge5): making interface the new active one [ 374.118808][T16605] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 374.636056][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 374.725137][T16649] ip6gretap2: entered allmulticast mode [ 374.769134][T16658] netlink: 'syz.3.2762': attribute type 11 has an invalid length. [ 374.777062][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 374.852437][T16662] team_slave_1: Caught tx_queue_len zero misconfig [ 374.921078][T16658] syzkaller0: entered promiscuous mode [ 374.926627][T16658] syzkaller0: entered allmulticast mode [ 374.937928][T16663] netem: change failed [ 375.108862][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.117047][ C1] lec:lec_tx_timeout: lec0 [ 375.122903][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 377.156589][T16690] netlink: zone id is out of range [ 377.169292][T16690] netlink: zone id is out of range [ 377.181575][T16690] netlink: zone id is out of range [ 377.190947][T16690] netlink: zone id is out of range [ 377.196214][T16690] netlink: zone id is out of range [ 377.204596][T16690] netlink: get zone limit has 4 unknown bytes [ 377.242108][T16698] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2771'. [ 377.258899][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2771'. [ 377.865013][T16721] lo speed is unknown, defaulting to 1000 [ 377.876677][T16721] lo speed is unknown, defaulting to 1000 [ 378.122705][T16732] __nla_validate_parse: 1 callbacks suppressed [ 378.122727][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 378.167898][ T8763] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.177379][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 378.187615][ T8763] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.207995][ T8763] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.231900][ T8763] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.346194][T16745] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2782'. [ 378.725569][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.331775][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.349305][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.378963][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.387340][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.397459][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.416266][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.445028][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.465425][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.475630][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.487054][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.550257][T16791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2793'. [ 379.820355][T16778] lo speed is unknown, defaulting to 1000 [ 379.853630][T16778] lo speed is unknown, defaulting to 1000 [ 379.864418][T16793] netlink: 'syz.3.2794': attribute type 21 has an invalid length. [ 379.892453][T16793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.899778][T16793] IPv6: NLM_F_CREATE should be set when creating new route [ 379.907250][T16793] IPv6: NLM_F_CREATE should be set when creating new route [ 379.914569][T16793] IPv6: NLM_F_CREATE should be set when creating new route [ 379.950208][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 380.138851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.147285][ C1] lec:lec_tx_timeout: lec0 [ 380.152458][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.838599][T16812] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2800'. [ 381.598980][ T5143] Bluetooth: hci5: command tx timeout [ 381.743494][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 381.784292][T16840] : entered promiscuous mode [ 381.883673][T16847] IPVS: set_ctl: invalid protocol: 46 172.30.0.2:20001 [ 382.119916][T16778] chnl_net:caif_netlink_parms(): no params data found [ 382.194077][T16860] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2815'. [ 382.386953][T16870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2817'. [ 382.417320][T16873] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 382.487727][T16876] netlink: 'syz.4.2819': attribute type 1 has an invalid length. [ 382.498540][T16877] netlink: 'syz.4.2819': attribute type 1 has an invalid length. [ 382.572089][T16876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.637649][T16778] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.652399][T16881] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 382.669585][T16778] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.684600][T16881] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2820'. [ 382.703096][T16778] bridge_slave_0: entered allmulticast mode [ 382.724031][T16778] bridge_slave_0: entered promiscuous mode [ 382.814253][T16778] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.824633][T16778] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.847173][T16778] bridge_slave_1: entered allmulticast mode [ 382.863565][T16778] bridge_slave_1: entered promiscuous mode [ 382.893131][T16885] syzkaller0: entered promiscuous mode [ 382.904746][T16885] syzkaller0: entered allmulticast mode [ 382.933864][T16883] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 383.125925][T16778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.136122][T16889] syzkaller1: entered promiscuous mode [ 383.142786][T16889] syzkaller1: entered allmulticast mode [ 383.165760][T16778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.284383][T16778] team0: Port device team_slave_0 added [ 383.293625][T16778] team0: Port device team_slave_1 added [ 383.366092][T16778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.375297][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.402521][T16778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.427592][T16778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.435607][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.463109][T16778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.615274][T16778] hsr_slave_0: entered promiscuous mode [ 383.638291][T16778] hsr_slave_1: entered promiscuous mode [ 383.649838][T16778] debugfs: 'hsr0' already exists in 'hsr' [ 383.655653][T16778] Cannot create hsr debugfs directory [ 383.678909][ T5143] Bluetooth: hci5: command tx timeout [ 383.858572][T16910] __nla_validate_parse: 1 callbacks suppressed [ 383.858598][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 384.008395][T16928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2831'. [ 384.141699][T16778] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.282705][T16778] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.301015][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 384.329424][T16940] xfrm0: Caught tx_queue_len zero misconfig [ 384.442445][T16778] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.554891][T16778] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.615460][T16955] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2838'. [ 384.970281][T16778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.991928][T16778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.013972][T16778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.043049][T16778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.115918][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 385.142432][T16978] netlink: 'syz.4.2841': attribute type 3 has an invalid length. [ 385.150909][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 385.159174][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.163956][T16978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2841'. [ 385.168086][ C1] lec:lec_tx_timeout: lec0 [ 385.182197][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.229692][T16980] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 385.242488][T16778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.285147][T16980] bond13: entered promiscuous mode [ 385.301514][T16980] bond13: entered allmulticast mode [ 385.307366][T16980] 8021q: adding VLAN 0 to HW filter on device bond13 [ 385.337842][T16983] erspan1: entered allmulticast mode [ 385.362516][T16985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2843'. [ 385.377551][T16983] bond13: (slave erspan1): making interface the new active one [ 385.385836][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2843'. [ 385.395447][T16983] erspan1: entered promiscuous mode [ 385.403471][T16983] bond13: (slave erspan1): Enslaving as an active interface with an up link [ 385.472015][T16778] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.509667][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.518060][ T8777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.543819][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.552280][ T8777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.624547][T16991] sctp: [Deprecated]: syz.2.2845 (pid 16991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.624547][T16991] Use struct sctp_sack_info instead [ 385.672053][T16992] sctp: [Deprecated]: syz.2.2845 (pid 16992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.672053][T16992] Use struct sctp_sack_info instead [ 385.759418][ T5143] Bluetooth: hci5: command tx timeout [ 385.793361][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2848'. [ 385.803115][T16996] netlink: 'syz.1.2847': attribute type 13 has an invalid length. [ 386.168189][T16778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.281279][T17025] netlink: 'syz.1.2855': attribute type 1 has an invalid length. [ 386.306405][T17022] lo speed is unknown, defaulting to 1000 [ 386.318020][T16778] veth0_vlan: entered promiscuous mode [ 386.432716][T17025] 8021q: adding VLAN 0 to HW filter on device bond11 [ 386.507736][T17028] bond11: (slave geneve5): making interface the new active one [ 386.540446][T17028] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 386.574332][T17022] lo speed is unknown, defaulting to 1000 [ 386.581987][ T8763] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.702273][ T8763] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.798246][ T8763] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.826582][ T8763] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.868516][T17030] lo speed is unknown, defaulting to 1000 [ 386.891169][T16778] veth1_vlan: entered promiscuous mode [ 387.035864][T17044] syzkaller0: entered promiscuous mode [ 387.059305][T17044] syzkaller0: entered allmulticast mode [ 387.129670][T17055] netlink: 'syz.1.2859': attribute type 4 has an invalid length. [ 387.187164][T16778] veth0_macvtap: entered promiscuous mode [ 387.239931][T16778] veth1_macvtap: entered promiscuous mode [ 387.840726][ T5143] Bluetooth: hci5: command tx timeout [ 388.878550][T17063] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 388.881533][T17030] lo speed is unknown, defaulting to 1000 [ 388.923071][T16778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.973655][T16778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.990480][ T8777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.012115][ T8763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.039679][ T8763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.068974][ T8763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.326710][ T8763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.343975][ T8763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.434848][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.453696][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.136542][T17095] lo speed is unknown, defaulting to 1000 [ 390.209075][T17095] lo speed is unknown, defaulting to 1000 [ 390.418773][T17109] netlink: 'syz.3.2873': attribute type 1 has an invalid length. [ 390.638463][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 390.649502][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 390.657601][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.666475][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.674349][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.957320][T17115] __nla_validate_parse: 3 callbacks suppressed [ 390.957340][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 390.964556][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 390.981890][ C1] lec:lec_tx_timeout: lec0 [ 390.988121][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.010820][ T8777] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.026358][ T8777] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 391.124299][ T8777] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.139452][ T8777] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 391.232481][T17120] "syz.0.2876" (17120) uses obsolete ecb(arc4) skcipher [ 391.252380][ T8777] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.268899][ T8777] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 391.295017][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 391.380732][ T8777] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.403464][ T8777] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 391.786654][T17110] lo speed is unknown, defaulting to 1000 [ 391.936509][T17144] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2880'. [ 391.955571][ T8777] pimreg: left allmulticast mode [ 392.350717][T17158] sock: sock_timestamping_bind_phc: sock not bind to device [ 392.370218][T17158] Bluetooth: MGMT ver 1.23 [ 392.563029][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2884'. [ 392.729907][ T5143] Bluetooth: hci0: command tx timeout [ 392.751069][ T8777] bond4 (unregistering): (slave vti0): Releasing backup interface [ 392.873690][ T8777] bond11 (unregistering): (slave geneve5): Releasing active interface [ 392.904403][T17176] tipc: Trying to set illegal importance in message [ 393.243626][ T8777] .` (unregistering): Released all slaves [ 393.254616][ T8777] bond1 (unregistering): Released all slaves [ 393.271117][ T8777] bond0 (unregistering): Released all slaves [ 393.287073][ T8777] bond2 (unregistering): Released all slaves [ 393.305467][ T8777] bond3 (unregistering): Released all slaves [ 393.324328][ T8777] bond4 (unregistering): Released all slaves [ 393.344491][ T8777] bond5 (unregistering): Released all slaves [ 393.364217][ T8777] bond6 (unregistering): Released all slaves [ 393.383949][ T8777] bond7 (unregistering): Released all slaves [ 393.404161][ T8777] bond8 (unregistering): Released all slaves [ 393.423460][ T8777] bond9 (unregistering): Released all slaves [ 393.438544][ T8777] bond10 (unregistering): Released all slaves [ 393.455896][ T8777] bond11 (unregistering): Released all slaves [ 393.491994][T17110] lo speed is unknown, defaulting to 1000 [ 393.564921][T17175] bridge0: port 3(syz_tun) entered blocking state [ 393.572075][T17175] bridge0: port 3(syz_tun) entered disabled state [ 393.590072][T17175] syz_tun: entered allmulticast mode [ 393.598066][T17175] syz_tun: entered promiscuous mode [ 393.614521][T17175] bridge0: port 3(syz_tun) entered blocking state [ 393.621491][T17175] bridge0: port 3(syz_tun) entered forwarding state [ 393.763813][ T8777] tipc: Left network mode [ 393.961430][T17183] ip6erspan0: entered allmulticast mode [ 394.223602][T17183] syzkaller0: entered promiscuous mode [ 394.250497][T17183] syzkaller0: entered allmulticast mode [ 394.799650][ T5143] Bluetooth: hci0: command tx timeout [ 395.077870][T17225] netlink: 'syz.0.2894': attribute type 11 has an invalid length. [ 395.415877][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 395.568225][T17233] netlink: 'syz.0.2896': attribute type 1 has an invalid length. [ 395.572218][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 395.594110][T17233] netlink: 'syz.0.2896': attribute type 2 has an invalid length. [ 395.643264][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2899'. [ 395.655978][T17240] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2899'. [ 395.950786][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 395.998841][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 396.007057][ C1] lec:lec_tx_timeout: lec0 [ 396.012368][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.776507][T17110] chnl_net:caif_netlink_parms(): no params data found [ 396.803593][T17297] x_tables: duplicate entry at hook 3 [ 396.879579][ T5143] Bluetooth: hci0: command tx timeout [ 396.971213][T17304] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 396.995573][T17304] netlink: 'syz.0.2910': attribute type 25 has an invalid length. [ 397.003635][T17304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2910'. [ 397.256830][ T8777] hsr_slave_0: left promiscuous mode [ 397.263858][T17323] xt_l2tp: missing protocol rule (udp|l2tpip) [ 397.273288][ T8777] hsr_slave_1: left promiscuous mode [ 397.279244][ T1714] block nbd1: Possible stuck request ffff888026a78200: control (read@0,1024B). Runtime 120 seconds [ 397.293512][ T1714] block nbd1: Possible stuck request ffff888026a78400: control (read@1024,1024B). Runtime 120 seconds [ 397.305188][ T1714] block nbd1: Possible stuck request ffff888026a78600: control (read@2048,1024B). Runtime 120 seconds [ 397.317479][ T1714] block nbd1: Possible stuck request ffff888026a78800: control (read@3072,1024B). Runtime 120 seconds [ 397.885016][T17331] batman_adv: batadv0: Adding interface: macvlan4 [ 397.919661][T17331] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.952388][T17331] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active [ 398.136620][T17342] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 398.332337][T17110] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.369904][T17110] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.377222][T17110] bridge_slave_0: entered allmulticast mode [ 398.436049][T17110] bridge_slave_0: entered promiscuous mode [ 398.446309][T17110] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.469160][T17110] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.484061][T17110] bridge_slave_1: entered allmulticast mode [ 398.496396][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 398.507003][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'. [ 398.517179][T17110] bridge_slave_1: entered promiscuous mode [ 398.700384][T17110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.743132][T17110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.832205][T17377] netlink: 'syz.2.2925': attribute type 1 has an invalid length. [ 398.849736][T17377] netlink: 'syz.2.2925': attribute type 2 has an invalid length. [ 398.904664][T17380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2926'. [ 398.960493][ T5143] Bluetooth: hci0: command tx timeout [ 398.991503][T17110] team0: Port device team_slave_0 added [ 399.082697][T17380] bond5: entered promiscuous mode [ 399.088293][T17380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 399.094079][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 399.159463][T17395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.173649][T17380] bond5 (unregistering): Released all slaves [ 399.210257][T17110] team0: Port device team_slave_1 added [ 399.282127][ T8777] IPVS: stop unused estimator thread 0... [ 399.378592][T17110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.394086][T17110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.453541][T17110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.470856][T17110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.496465][T17110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.579201][T17110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.714316][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2935'. [ 399.748247][T17110] hsr_slave_0: entered promiscuous mode [ 399.777016][T17110] hsr_slave_1: entered promiscuous mode [ 399.786719][T17110] debugfs: 'hsr0' already exists in 'hsr' [ 399.816245][T17110] Cannot create hsr debugfs directory [ 399.882286][T17426] netlink: 'syz.4.2934': attribute type 3 has an invalid length. [ 399.938998][T17426] netlink: 'syz.4.2934': attribute type 3 has an invalid length. [ 399.998445][T17426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2934'. [ 400.586410][ T30] audit: type=1800 audit(1772586812.532:2): pid=17441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2939" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=3044 res=0 errno=0 [ 400.773979][T17443] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 400.882071][T17449] netlink: 'syz.4.2941': attribute type 13 has an invalid length. [ 400.923500][T17449] netlink: 'syz.4.2941': attribute type 17 has an invalid length. [ 400.951875][T17448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.018886][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 401.028271][ C1] lec:lec_tx_timeout: lec0 [ 401.033276][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.055782][T17449] erspan0: entered promiscuous mode [ 401.172765][T17449] bridge0: left allmulticast mode [ 401.222850][T17449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.261935][T17449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.317969][T11547] lo speed is unknown, defaulting to 1000 [ 401.325112][T11547] syz2: Port: 1 Link ACTIVE [ 401.351133][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 401.388923][T17456] tipc: Started in network mode [ 401.394341][T17456] tipc: Node identity 6ecbec7b5fb9, cluster identity 4711 [ 401.402602][T17456] tipc: Enabled bearer , priority 0 [ 401.566758][T17460] syzkaller0: entered promiscuous mode [ 401.572958][T17460] syzkaller0: entered allmulticast mode [ 401.581543][T17469] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2946'. [ 401.707798][T17476] netlink: 'syz.2.2947': attribute type 1 has an invalid length. [ 401.718198][T17476] netlink: 'syz.2.2947': attribute type 2 has an invalid length. [ 401.748367][T17458] lo speed is unknown, defaulting to 1000 [ 401.763821][T17458] lo speed is unknown, defaulting to 1000 [ 401.789339][T17451] tipc: Resetting bearer [ 401.824859][T17451] tipc: Disabling bearer [ 401.841569][T17481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2948'. [ 402.026418][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 402.044026][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2950'. [ 402.057299][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'. [ 402.066952][T17491] netlink: 'syz.2.2949': attribute type 20 has an invalid length. [ 402.078183][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 402.332471][ T8764] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.361200][ T8764] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.396126][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 402.420244][ T8764] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.441341][ T8764] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.906918][T17110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.949540][T17110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.984741][T17110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 403.011240][T17110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 403.049497][T17531] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2959'. [ 403.061605][T17534] 8021q: VLANs not supported on ip6_vti0 [ 403.248245][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 403.453661][T17110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.618203][T17110] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.691224][T17562] syzkaller0: entered promiscuous mode [ 403.717804][T17562] syzkaller0: entered allmulticast mode [ 403.741741][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2963'. [ 403.786816][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.794187][ T8763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.921316][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.928790][ T8763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.348561][T17584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2968'. [ 404.362397][T17584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2968'. [ 404.621272][T17110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.899643][T17110] veth0_vlan: entered promiscuous mode [ 404.933782][T17602] netlink: 'syz.2.2972': attribute type 1 has an invalid length. [ 404.986741][T17110] veth1_vlan: entered promiscuous mode [ 405.143010][T17110] veth0_macvtap: entered promiscuous mode [ 405.171940][T17110] veth1_macvtap: entered promiscuous mode [ 405.244806][T17110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.302049][T17110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.338072][ T8777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.361432][ T8777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.394433][T17618] tipc: Enabled bearer , priority 10 [ 405.412707][ T8777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.429576][ T8777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.712020][ T8777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.732287][ T8777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.863861][ T8766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.883410][ T8766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.048947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.057194][ C1] lec:lec_tx_timeout: lec0 [ 406.062341][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.122668][T17643] x_tables: duplicate underflow at hook 1 [ 406.342080][T17657] syzkaller1: entered promiscuous mode [ 406.354181][T17657] syzkaller1: entered allmulticast mode [ 406.667086][T17668] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 406.742655][T17668] bond5 (unregistering): Released all slaves [ 406.856232][ T10] tipc: Node number set to 829615227 [ 406.915741][T17698] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 406.929421][T17694] lo: Caught tx_queue_len zero misconfig [ 406.968830][T17679] tipc: Enabling of bearer rejected, failed to enable media [ 407.190203][T17708] netlink: 'syz.0.2994': attribute type 10 has an invalid length. [ 407.279855][T17708] team0: Port device dummy0 added [ 407.469376][T17721] __nla_validate_parse: 14 callbacks suppressed [ 407.469398][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2996'. [ 407.514170][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 407.573030][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2998'. [ 407.692412][T17734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2999'. [ 407.705850][T17734] 8021q: VLANs not supported on ip6_vti0 [ 407.967348][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.982708][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.000618][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.021132][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.029284][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.097637][T17741] lo speed is unknown, defaulting to 1000 [ 408.112565][T17741] lo speed is unknown, defaulting to 1000 [ 409.206632][ T8775] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.391659][ T8775] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.576870][ T8775] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.653790][T17788] syzkaller0: entered promiscuous mode [ 409.669272][T17788] syzkaller0: entered allmulticast mode [ 409.904243][ T8775] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.080898][ T51] Bluetooth: hci4: command tx timeout [ 410.517556][ T8775] bridge_slave_1: left allmulticast mode [ 410.524192][ T8775] bridge_slave_1: left promiscuous mode [ 410.532668][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.571283][ T8775] bridge_slave_0: left allmulticast mode [ 410.588024][ T8775] bridge_slave_0: left promiscuous mode [ 410.610057][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.677477][ T8775] dvmrp0: left allmulticast mode [ 410.684116][ T8775] pimreg3: left allmulticast mode [ 410.833672][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'. [ 411.008237][ T8775] bond13 (unregistering): (slave erspan1): Releasing active interface [ 411.016545][ T8775] erspan1 (unregistering): left promiscuous mode [ 411.068862][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 411.075337][ T8775] bond10 (unregistering): (slave gretap1): Releasing active interface [ 411.077338][ C1] lec:lec_tx_timeout: lec0 [ 411.090194][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.347972][ T8775] bond12 (unregistering): (slave bridge5): Releasing active interface [ 411.424359][ T8775] bond0 (unregistering): (slave c5): Releasing backup interface [ 411.434492][ T8775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.444855][ T8775] bond0 (unregistering): Released all slaves [ 411.456228][ T8775] bond1 (unregistering): Released all slaves [ 411.475225][ T8775] bond2 (unregistering): Released all slaves [ 411.491230][ T8775] bond3 (unregistering): Released all slaves [ 411.507933][ T8775] bond4 (unregistering): Released all slaves [ 411.535314][ T8775] bond5 (unregistering): Released all slaves [ 411.551295][ T8775] bond6 (unregistering): Released all slaves [ 411.566688][ T8775] bond7 (unregistering): Released all slaves [ 411.582451][ T8775] bond8 (unregistering): Released all slaves [ 411.609506][ T8775] bond9 (unregistering): (slave dummy0): Releasing active interface [ 411.617669][ T8775] dummy0: left allmulticast mode [ 411.628247][ T8775] bond9 (unregistering): Released all slaves [ 411.644149][ T8775] bond10 (unregistering): Released all slaves [ 411.666795][ T8775] bond11 (unregistering): Released all slaves [ 411.683930][ T8775] bond12 (unregistering): Released all slaves [ 411.710042][ T8775] bond13 (unregistering): Released all slaves [ 411.728876][T17788] tipc: Started in network mode [ 411.733825][T17788] tipc: Node identity baacca191d1f, cluster identity 4711 [ 411.742786][T17788] tipc: Enabled bearer , priority 0 [ 411.766758][T17787] tipc: Resetting bearer [ 411.790072][T17787] tipc: Disabling bearer [ 411.877418][T17741] chnl_net:caif_netlink_parms(): no params data found [ 412.028202][ T8775] tipc: Left network mode [ 412.166012][ T51] Bluetooth: hci4: command tx timeout [ 412.614120][T17741] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.629107][T17741] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.636442][T17741] bridge_slave_0: entered allmulticast mode [ 412.645657][T17741] bridge_slave_0: entered promiscuous mode [ 412.729181][T17741] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.743517][T17741] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.761198][T17887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3031'. [ 412.775344][T17741] bridge_slave_1: entered allmulticast mode [ 412.800735][T17741] bridge_slave_1: entered promiscuous mode [ 412.956730][T17741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.028152][T17887] 1X: left allmulticast mode [ 413.045111][T17887] erspan1: left promiscuous mode [ 413.057336][T17887] erspan1: left allmulticast mode [ 413.079477][T17887] geneve2: left promiscuous mode [ 413.088021][T17887] geneve2: left allmulticast mode [ 413.093800][T17887] vlan2: left promiscuous mode [ 413.104533][T17887] geneve1: left promiscuous mode [ 413.110964][T17887] vlan2: left allmulticast mode [ 413.116070][T17887] geneve1: left allmulticast mode [ 413.122161][T17887] bond1: left promiscuous mode [ 413.127358][T17887] bridge1: left promiscuous mode [ 413.135237][T17887] bond2: left promiscuous mode [ 413.143285][T17887] ip6gretap1: left promiscuous mode [ 413.149155][T17887] ip6gretap1: left allmulticast mode [ 413.154783][T17887] bridge2: left promiscuous mode [ 413.161498][T17887] vlan3: left promiscuous mode [ 413.166943][T17887] vlan4: left allmulticast mode [ 413.172266][T17887] gretap0: left allmulticast mode [ 413.177965][T17887] bond6: left promiscuous mode [ 413.183459][T17887] veth9: left promiscuous mode [ 413.189814][T17887] vlan5: left promiscuous mode [ 413.194921][T17887] veth0_to_team: left promiscuous mode [ 413.201340][T17887] vlan5: left allmulticast mode [ 413.206402][T17887] veth0_to_team: left allmulticast mode [ 413.220154][T17887] ip6gretap2: left allmulticast mode [ 413.252752][T17741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.350573][ T8777] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.488549][ T8777] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.529912][T17741] team0: Port device team_slave_0 added [ 413.608512][T17907] syzkaller0: entered promiscuous mode [ 413.614440][T17907] syzkaller0: entered allmulticast mode [ 413.648121][T17741] team0: Port device team_slave_1 added [ 413.662959][ T8777] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.673658][T17922] ipt_REJECT: TCP_RESET invalid for non-tcp [ 413.681728][T17921] sctp: [Deprecated]: syz.1.3039 (pid 17921) Use of int in max_burst socket option. [ 413.681728][T17921] Use struct sctp_assoc_value instead [ 413.686402][ T8777] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.033728][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'. [ 414.242134][ T51] Bluetooth: hci4: command tx timeout [ 415.418271][T17937] pim6reg: entered allmulticast mode [ 415.429162][T17937] pim6reg: left allmulticast mode [ 415.493804][T17942] netlink: 'syz.1.3043': attribute type 10 has an invalid length. [ 415.503006][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3043'. [ 415.624836][T17942] dummy0: entered promiscuous mode [ 415.649190][T17942] bridge0: port 3(dummy0) entered blocking state [ 415.656016][T17942] bridge0: port 3(dummy0) entered disabled state [ 415.663192][T17942] dummy0: entered allmulticast mode [ 415.692535][T17942] bridge0: port 3(dummy0) entered blocking state [ 415.699248][T17942] bridge0: port 3(dummy0) entered forwarding state [ 415.846306][T17951] veth1_to_batadv: entered allmulticast mode [ 415.901715][T17741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.911618][T17741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.958593][T17741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.027254][T17741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.054687][T17741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.098840][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 416.107120][ C1] lec:lec_tx_timeout: lec0 [ 416.112771][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 416.128375][T17741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.141656][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'. [ 416.156531][T17966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3047'. [ 416.327073][ T51] Bluetooth: hci4: command tx timeout [ 416.385359][T17978] sit3: entered promiscuous mode [ 416.416411][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3050'. [ 418.086368][ T8775] team0 (unregistering): Port device veth5 removed [ 418.201526][ T8775] team0 (unregistering): Port device team_slave_1 removed [ 418.216960][ T8775] team0 (unregistering): Port device team_slave_0 removed [ 418.345206][T17741] hsr_slave_0: entered promiscuous mode [ 418.352390][T17741] hsr_slave_1: entered promiscuous mode [ 418.360931][T17741] debugfs: 'hsr0' already exists in 'hsr' [ 418.367003][T17741] Cannot create hsr debugfs directory [ 418.643796][T18017] tipc: Enabling of bearer rejected, failed to enable media [ 418.826812][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 418.896934][T18026] macvtap0: entered promiscuous mode [ 418.919952][T18026] virtio_net virtio1 eth0: entered promiscuous mode [ 418.942134][T18026] macvtap0: entered allmulticast mode [ 418.970561][T18026] virtio_net virtio1 eth0: entered allmulticast mode [ 419.112102][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3062'. [ 419.404659][T18065] netlink: 'syz.4.3064': attribute type 4 has an invalid length. [ 419.478922][ T10] lo speed is unknown, defaulting to 1000 [ 419.486870][ T10] syz2: Port: 1 Link DOWN [ 419.494259][T18066] netlink: 'syz.4.3064': attribute type 4 has an invalid length. [ 419.512626][ T8775] IPVS: stop unused estimator thread 0... [ 419.629549][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.659709][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.700186][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.712372][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.739979][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.777539][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.804652][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.826781][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.868458][T18071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.906622][ T10] lo speed is unknown, defaulting to 1000 [ 419.922726][ T10] syz2: Port: 1 Link ACTIVE [ 420.103137][T18090] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 421.128786][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 421.137103][ C1] lec:lec_tx_timeout: lec0 [ 421.142041][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.747601][T18043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.876389][T17741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.928806][T17741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.970981][T17741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.044934][T17741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.129439][T18104] erspan0: refused to change device tx_queue_len [ 422.136378][T18104] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 422.237729][T18109] lo speed is unknown, defaulting to 1000 [ 422.283654][T18109] lo speed is unknown, defaulting to 1000 [ 422.423459][T18129] pim6reg: entered allmulticast mode [ 422.450240][T18129] pim6reg: left allmulticast mode [ 422.618104][T17741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.679098][T17741] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.711450][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.719256][ T8775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.764653][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.772012][ T8775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.531220][T17741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.665442][T17741] veth0_vlan: entered promiscuous mode [ 423.715888][T17741] veth1_vlan: entered promiscuous mode [ 423.830429][T17741] veth0_macvtap: entered promiscuous mode [ 423.873539][T17741] veth1_macvtap: entered promiscuous mode [ 423.960661][T17741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.019398][T17741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.053255][ T8766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.074330][T18176] __nla_validate_parse: 10 callbacks suppressed [ 424.074351][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 424.138310][ T8766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.239446][ T8766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.273565][ T8766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.547038][ T8778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.598501][ T8778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.818947][ T8777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.837699][ T8777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.125047][T18203] lo speed is unknown, defaulting to 1000 [ 425.141400][T18203] lo speed is unknown, defaulting to 1000 [ 425.812142][T18232] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20002 [ 426.033190][T18243] tipc: Enabling of bearer rejected, failed to enable media [ 426.148816][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 426.157024][ C1] lec:lec_tx_timeout: lec0 [ 426.168853][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.451099][T18253] syzkaller0: entered promiscuous mode [ 426.456724][T18253] syzkaller0: entered allmulticast mode [ 426.499980][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.513274][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.530260][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.541475][T18260] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3100'. [ 426.551863][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.570555][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.649462][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'. [ 426.815290][T18255] lo speed is unknown, defaulting to 1000 [ 426.892753][T18255] lo speed is unknown, defaulting to 1000 [ 427.341296][T18281] lo speed is unknown, defaulting to 1000 [ 427.378995][T18290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3105'. [ 427.389724][ T1714] block nbd1: Possible stuck request ffff888026a78200: control (read@0,1024B). Runtime 150 seconds [ 427.400710][ T1714] block nbd1: Possible stuck request ffff888026a78400: control (read@1024,1024B). Runtime 150 seconds [ 427.411870][ T1714] block nbd1: Possible stuck request ffff888026a78600: control (read@2048,1024B). Runtime 150 seconds [ 427.423265][ T1714] block nbd1: Possible stuck request ffff888026a78800: control (read@3072,1024B). Runtime 150 seconds [ 427.756369][T18281] lo speed is unknown, defaulting to 1000 [ 428.166509][T18324] xt_TCPMSS: Only works on TCP SYN packets [ 428.291372][T18326] syzkaller0: entered promiscuous mode [ 428.296921][T18326] syzkaller0: entered allmulticast mode [ 428.467960][T18335] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3114'. [ 428.510570][T18335] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 428.606241][T18337] xt_hashlimit: max too large, truncated to 1048576 [ 428.641109][ T5143] Bluetooth: hci2: command tx timeout [ 428.650022][T18335] lo speed is unknown, defaulting to 1000 [ 428.671090][T18340] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3116'. [ 428.701356][T18343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3115'. [ 428.713065][T18335] lo speed is unknown, defaulting to 1000 [ 428.742303][T18343] nbd: must specify a size in bytes for the device [ 428.937335][T18351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3118'. [ 429.171918][T18351] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3118'. [ 429.350962][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3119'. [ 429.402938][T18359] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3119'. [ 429.858569][T18375] IPVS: length: 121 != 8 [ 430.012267][T18382] ipvlan2: entered promiscuous mode [ 430.036399][T18382] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 430.047224][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 430.597012][T18396] syzkaller0: entered promiscuous mode [ 430.605321][T18396] syzkaller0: entered allmulticast mode [ 430.719089][ T5143] Bluetooth: hci2: command tx timeout [ 430.947765][T18414] netlink: 'syz.3.3126': attribute type 11 has an invalid length. [ 430.958192][T18414] netlink: 'syz.3.3126': attribute type 4 has an invalid length. [ 430.966430][T18414] netlink: 'syz.3.3126': attribute type 5 has an invalid length. [ 430.974574][T18414] netlink: 'syz.3.3126': attribute type 6 has an invalid length. [ 430.982640][T18414] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.3126'. [ 431.178762][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 431.187033][ C1] lec:lec_tx_timeout: lec0 [ 431.192456][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 431.324850][T18255] chnl_net:caif_netlink_parms(): no params data found [ 431.815673][T18439] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 431.828202][T18439] bond1 (unregistering): Released all slaves [ 432.118332][T18452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.137115][T18456] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3134'. [ 432.275225][T18255] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.300015][T18255] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.329064][T18255] bridge_slave_0: entered allmulticast mode [ 432.354551][T18255] bridge_slave_0: entered promiscuous mode [ 432.399484][T18255] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.429101][T18255] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.436447][T18255] bridge_slave_1: entered allmulticast mode [ 432.467680][T18255] bridge_slave_1: entered promiscuous mode [ 432.574093][T18255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.583862][T18463] syzkaller0: entered promiscuous mode [ 432.590814][T18463] syzkaller0: entered allmulticast mode [ 432.602606][T18255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.668181][T18255] team0: Port device team_slave_0 added [ 432.682153][T18255] team0: Port device team_slave_1 added [ 432.739742][T18255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.746740][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.773818][T18255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.786309][T18255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.793447][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.799963][ T5143] Bluetooth: hci2: command tx timeout [ 432.828549][T18255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.900390][T18255] hsr_slave_0: entered promiscuous mode [ 432.907392][T18255] hsr_slave_1: entered promiscuous mode [ 432.917041][T18255] debugfs: 'hsr0' already exists in 'hsr' [ 432.923093][T18255] Cannot create hsr debugfs directory [ 433.277072][T18255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.288270][T18255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.300310][T18255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.312885][T18255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.386035][T18255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.405446][T18255] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.419759][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.426914][ T8775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.444744][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.452035][ T8778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.647731][T18255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.894730][T18255] veth0_vlan: entered promiscuous mode [ 433.907671][T18255] veth1_vlan: entered promiscuous mode [ 433.940455][T18255] veth0_macvtap: entered promiscuous mode [ 433.950931][T18255] veth1_macvtap: entered promiscuous mode [ 433.972582][T18255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.987347][T18255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.001854][ T8763] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.016410][ T8763] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.031683][ T8763] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.041108][ T8763] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.124935][ T8777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.136012][ T8777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.174858][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.183310][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.300963][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 434.879352][ T5143] Bluetooth: hci2: command tx timeout [ 436.958914][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 436.967099][ C1] lec:lec_tx_timeout: lec0 [ 436.973459][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 437.164576][ T5192] udevd[5192]: worker [6251] /devices/virtual/block/nbd1 is taking a long time [ 438.363008][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3141'. [ 438.443308][T18523] syzkaller0: entered promiscuous mode [ 438.460942][T18523] syzkaller0: entered allmulticast mode [ 438.461598][ T5143] block nbd3: Receive control failed (result -1) [ 438.604979][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.618311][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.627007][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.637388][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.647476][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.849197][T18532] lo speed is unknown, defaulting to 1000 [ 438.875625][T18535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3145'. [ 438.912566][T18532] lo speed is unknown, defaulting to 1000 [ 438.959747][T18540] syzkaller0: entered promiscuous mode [ 438.979594][T18540] syzkaller0: entered allmulticast mode [ 439.073492][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3147'. [ 439.212726][T18543] macvlan2: entered allmulticast mode [ 439.368877][T18552] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3150'. [ 439.409587][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3149'. [ 439.466353][T18550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3149'. [ 439.582231][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'. [ 440.374060][T18587] lo speed is unknown, defaulting to 1000 [ 440.386479][T18586] lo speed is unknown, defaulting to 1000 [ 440.393989][T18587] lo speed is unknown, defaulting to 1000 [ 440.481794][T18532] chnl_net:caif_netlink_parms(): no params data found [ 440.507525][T18595] syzkaller0: entered promiscuous mode [ 440.519283][T18595] syzkaller0: entered allmulticast mode [ 440.722345][ T51] Bluetooth: hci1: command tx timeout [ 440.880528][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 441.005333][T18586] lo speed is unknown, defaulting to 1000 [ 441.198071][T18532] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.209638][T18532] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.217163][T18532] bridge_slave_0: entered allmulticast mode [ 441.227435][T18532] bridge_slave_0: entered promiscuous mode [ 441.246778][T18532] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.259489][T18532] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.267056][T18532] bridge_slave_1: entered allmulticast mode [ 441.282087][T18532] bridge_slave_1: entered promiscuous mode [ 441.413358][T18532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.466009][T18532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.473400][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3165'. [ 441.528340][T18624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.558504][T18624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.592570][T18532] team0: Port device team_slave_0 added [ 441.607396][T18532] team0: Port device team_slave_1 added [ 441.687166][T18532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.698883][T18532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.785748][T18628] netlink: 'syz.3.3167': attribute type 5 has an invalid length. [ 441.796933][T18532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.862420][T18532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.872781][T18532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.902129][T18532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.998868][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 442.006974][ C1] lec:lec_tx_timeout: lec0 [ 442.011939][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 442.133968][T18640] syzkaller0: entered promiscuous mode [ 442.149001][T18640] syzkaller0: entered allmulticast mode [ 442.211692][T18532] hsr_slave_0: entered promiscuous mode [ 442.254469][T18532] hsr_slave_1: entered promiscuous mode [ 442.268093][T18532] debugfs: 'hsr0' already exists in 'hsr' [ 442.288846][T18532] Cannot create hsr debugfs directory [ 442.532917][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3174'. [ 442.575081][T18639] lo speed is unknown, defaulting to 1000 [ 442.622177][T18653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3175'. [ 442.650852][T18639] lo speed is unknown, defaulting to 1000 [ 442.808438][ T51] Bluetooth: hci1: command tx timeout [ 442.961449][T18662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3177'. [ 443.398328][T18668] bond1: entered promiscuous mode [ 443.404084][T18668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.411885][T18659] lo speed is unknown, defaulting to 1000 [ 443.438160][T18659] lo speed is unknown, defaulting to 1000 [ 443.721807][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3180'. [ 443.802871][T18532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.834694][T18532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.867529][T18532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.889916][T18532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.515218][T18691] syzkaller0: entered promiscuous mode [ 444.531521][T18691] syzkaller0: entered allmulticast mode [ 444.703403][T18532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.769029][T18532] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.864545][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.871822][ T8763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.882569][ T51] Bluetooth: hci1: command tx timeout [ 444.890110][T18699] x_tables: duplicate underflow at hook 2 [ 445.022518][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.029762][ T8763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.183158][T18706] xt_ecn: cannot match TCP bits for non-tcp packets [ 445.842007][T18714] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 445.912800][T18532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.985951][T18715] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3187'. [ 446.015342][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 446.046008][T18532] veth0_vlan: entered promiscuous mode [ 446.112740][T18532] veth1_vlan: entered promiscuous mode [ 446.216762][T18532] veth0_macvtap: entered promiscuous mode [ 446.247403][T18532] veth1_macvtap: entered promiscuous mode [ 446.302042][T18532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.380192][T18532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.407954][ T8775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.420555][ T8775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.448950][ T8775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.462339][ T8775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.583656][T18724] syzkaller0: entered promiscuous mode [ 446.589250][T18724] syzkaller0: entered allmulticast mode [ 446.623392][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 446.636626][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 446.672604][T18726] tipc: Enabled bearer , priority 0 [ 446.701043][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 446.715692][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 446.747597][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 446.774262][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 446.784972][T18726] syzkaller0: entered promiscuous mode [ 446.800911][T18726] syzkaller0: entered allmulticast mode [ 446.811326][ T8775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.820944][ T8775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.864262][T18730] bond1: option ad_user_port_key: invalid value (65535) [ 446.872478][T18730] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 446.890376][T18730] bond1 (unregistering): Released all slaves [ 446.931650][T18728] tipc: Started in network mode [ 446.936825][T18728] tipc: Node identity 6eadc2f0d68d, cluster identity 4711 [ 446.959018][ T51] Bluetooth: hci1: command tx timeout [ 447.011130][T18728] tipc: Enabled bearer , priority 0 [ 447.018767][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 447.026809][ C1] lec:lec_tx_timeout: lec0 [ 447.031673][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.038980][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.046928][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 447.106730][T18726] tipc: Resetting bearer [ 447.125778][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.142111][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 447.152076][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.161313][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 447.195301][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.206286][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 447.233699][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.244272][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 447.254040][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.263995][ T8763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.267112][T18736] syzkaller0: entered promiscuous mode [ 447.287889][T18736] syzkaller0: entered allmulticast mode [ 447.296885][ T8763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.319132][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.342622][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.405468][T18723] tipc: Resetting bearer [ 447.445462][T18723] tipc: Disabling bearer [ 447.468218][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.498384][T18724] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 447.581045][T18725] tipc: Resetting bearer [ 447.605619][T18725] tipc: Disabling bearer [ 447.724079][T18751] 8021q: VLANs not supported on gre0 [ 448.371932][T18777] netlink: Conntrack attr has 3 unknown bytes [ 452.038852][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 452.046945][ C1] lec:lec_tx_timeout: lec0 [ 452.051891][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.654844][T18808] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 454.694897][T18809] validate_nla: 7 callbacks suppressed [ 454.694917][T18809] netlink: 'syz.2.3205': attribute type 46 has an invalid length. [ 454.830132][T18809] __nla_validate_parse: 15 callbacks suppressed [ 454.830155][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'. [ 454.953569][T18824] syzkaller0: entered promiscuous mode [ 454.960674][T18824] syzkaller0: entered allmulticast mode [ 455.084973][T18828] lo speed is unknown, defaulting to 1000 [ 455.092175][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 455.103513][T18828] lo speed is unknown, defaulting to 1000 [ 455.315673][T18845] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3214'. [ 455.389055][T18844] netlink: 'syz.2.3214': attribute type 15 has an invalid length. [ 455.422032][T18844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3214'. [ 455.679747][T18852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.883584][T18859] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3218'. [ 456.196262][T18869] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3219'. [ 456.268812][T18869] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 456.563439][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3221'. [ 456.583308][T18881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3221'. [ 456.729928][T18886] openvswitch: netlink: IP tunnel dst address not specified [ 456.830204][T18892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 457.013269][T18896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.058843][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 457.067150][ C1] lec:lec_tx_timeout: lec0 [ 457.073088][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 457.091690][T18897] syzkaller0: entered promiscuous mode [ 457.118288][T18897] syzkaller0: entered allmulticast mode [ 457.456388][ T1714] block nbd1: Possible stuck request ffff888026a78200: control (read@0,1024B). Runtime 180 seconds [ 457.468895][ T1714] block nbd1: Possible stuck request ffff888026a78400: control (read@1024,1024B). Runtime 180 seconds [ 457.481264][ T1714] block nbd1: Possible stuck request ffff888026a78600: control (read@2048,1024B). Runtime 180 seconds [ 457.493004][ T1714] block nbd1: Possible stuck request ffff888026a78800: control (read@3072,1024B). Runtime 180 seconds [ 457.824503][T18925] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3233'. [ 457.857027][T18925] netlink: 'syz.4.3233': attribute type 9 has an invalid length. [ 458.224546][T18943] delete_channel: no stack [ 458.324755][T18942] vlan2: entered allmulticast mode [ 458.339972][T18942] veth0_virt_wifi: entered allmulticast mode [ 458.406764][T18945] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 458.441844][T18945] bond1 (unregistering): Released all slaves [ 458.556180][T18928] lo speed is unknown, defaulting to 1000 [ 458.591932][T18928] lo speed is unknown, defaulting to 1000 [ 459.170235][T18949] geneve2: entered promiscuous mode [ 459.185564][T18949] geneve2: entered allmulticast mode [ 459.837745][T18976] syzkaller1: entered promiscuous mode [ 459.858978][T18976] syzkaller1: entered allmulticast mode [ 460.124771][T18983] __nla_validate_parse: 6 callbacks suppressed [ 460.124792][T18983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3244'. [ 460.148672][T18985] lo speed is unknown, defaulting to 1000 [ 460.160517][T18983] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3244'. [ 460.204052][T18983] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 460.244409][T18985] lo speed is unknown, defaulting to 1000 [ 460.379752][T18983] bond2: entered promiscuous mode [ 460.391939][T18983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.605044][T18991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.612582][T18991] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 460.623038][T18991] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 460.635964][T18991] bond2: (slave vti0): making interface the new active one [ 460.646226][T18991] vti0: entered promiscuous mode [ 460.657038][T18991] bond2: (slave vti0): Enslaving as an active interface with an up link [ 460.998279][T19001] syzkaller0: entered allmulticast mode [ 461.004840][T19001] syzkaller0: entered promiscuous mode [ 461.023602][T19001] syzkaller0 (unregistering): left promiscuous mode [ 461.030797][T19001] syzkaller0 (unregistering): left allmulticast mode [ 461.266004][T19011] netlink: 'syz.4.3252': attribute type 12 has an invalid length. [ 461.290368][T19011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3252'. [ 461.315366][T19012] tipc: Enabling of bearer rejected, failed to enable media [ 461.481870][T19017] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 461.514676][T19020] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 461.523097][T19020] netlink: 'syz.3.3255': attribute type 2 has an invalid length. [ 462.088781][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 462.096895][ C1] lec:lec_tx_timeout: lec0 [ 462.102324][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 462.227937][T19035] lo speed is unknown, defaulting to 1000 [ 462.320008][T19035] lo speed is unknown, defaulting to 1000 [ 462.332619][T14600] udevd[14600]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 462.356443][T19033] lo speed is unknown, defaulting to 1000 [ 462.528219][T19057] bond1: option packets_per_slave: invalid value (1048582) [ 462.537338][T19057] bond1: option packets_per_slave: allowed values 0 - 65535 [ 462.620047][T19057] bond1 (unregistering): Released all slaves [ 463.099991][T19071] IPVS: stopping master sync thread 17698 ... [ 463.147124][T19066] syzkaller0: entered promiscuous mode [ 463.163492][T19066] syzkaller0: entered allmulticast mode [ 463.310836][T19033] lo speed is unknown, defaulting to 1000 [ 463.400587][T19082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3268'. [ 463.461051][T19082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3268'. [ 463.596183][T19092] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3270'. [ 463.605882][T19094] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3270'. [ 463.683202][T19089] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 463.696065][T19094] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 463.743986][T19092] lo speed is unknown, defaulting to 1000 [ 463.770008][T19094] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3270'. [ 464.228277][T19092] lo speed is unknown, defaulting to 1000 [ 464.548611][T19126] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 464.620662][T19126] bond2 (unregistering): Released all slaves [ 464.715559][T19133] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3282'. [ 464.873520][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 465.185712][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 465.321508][T19164] syzkaller0: entered promiscuous mode [ 465.327822][T19164] syzkaller0: entered allmulticast mode [ 465.458493][T19172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.626256][T19176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3289'. [ 465.651008][T19176] block nbd0: NBD_DISCONNECT [ 465.658616][T19176] block nbd0: Send disconnect failed -32 [ 465.676385][T19176] block nbd0: shutting down sockets [ 466.128118][T19189] netlink: 'syz.2.3291': attribute type 29 has an invalid length. [ 466.196377][T19189] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3291'. [ 466.218988][T19189] unsupported nla_type 58 [ 466.418286][T19182] netlink: 'syz.2.3291': attribute type 29 has an invalid length. [ 466.651144][ T5192] udevd[5192]: worker [6251] /devices/virtual/block/nbd1 timeout; kill it [ 466.672168][ T5192] udevd[5192]: seq 27541 '/devices/virtual/block/nbd1' killed [ 467.108859][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 467.117354][ C1] lec:lec_tx_timeout: lec0 [ 467.122529][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 467.186602][T19092] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 467.198828][T19092] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 467.207311][T19092] CPU: 0 UID: 0 PID: 19092 Comm: syz.1.3270 Not tainted syzkaller #0 PREEMPT(full) [ 467.216956][T19092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.227137][T19092] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 467.233005][T19092] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7d eb 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 55 eb 57 f7 4d 8b 75 00 4d 8d a7 30 [ 467.253237][T19092] RSP: 0018:ffffc90003a17828 EFLAGS: 00010046 [ 467.259315][T19092] RAX: 0000000000000000 RBX: ffff88807fc9dc00 RCX: dffffc0000000000 [ 467.267381][T19092] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffff88807fc9dc00 [ 467.275735][T19092] RBP: ffff888057630000 R08: ffffffff8ef1bef3 R09: 1ffffffff1de37de [ 467.283726][T19092] R10: dffffc0000000000 R11: fffffbfff1de37df R12: ffff888054984650 [ 467.291733][T19092] R13: 0000000000000000 R14: ffff88807fc9dc30 R15: ffff888054984000 [ 467.300433][T19092] FS: 0000000000000000(0000) GS:ffff88812546d000(0000) knlGS:0000000000000000 [ 467.309520][T19092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.316233][T19092] CR2: 00007fdfcdbe82f8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 467.324496][T19092] Call Trace: [ 467.327984][T19092] [ 467.331387][T19092] lec_push+0x3cb/0x19d0 [ 467.335801][T19092] ? __local_bh_enable_ip+0xd0/0x130 [ 467.341181][T19092] ? __pfx_lec_push+0x10/0x10 [ 467.345970][T19092] vcc_release+0x15f/0x580 [ 467.350488][T19092] sock_close+0xc3/0x240 [ 467.355541][T19092] ? __pfx_sock_close+0x10/0x10 [ 467.360411][T19092] __fput+0x44f/0xa70 [ 467.364472][T19092] task_work_run+0x1d9/0x270 [ 467.369123][T19092] ? __pfx_task_work_run+0x10/0x10 [ 467.374271][T19092] ? kmem_cache_free+0x187/0x630 [ 467.379275][T19092] ? do_exit+0x696/0x2320 [ 467.383996][T19092] do_exit+0x69b/0x2320 [ 467.388290][T19092] ? __pfx_do_exit+0x10/0x10 [ 467.392918][T19092] ? do_raw_spin_lock+0x12b/0x2f0 [ 467.398015][T19092] do_group_exit+0x21b/0x2d0 [ 467.402632][T19092] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.407990][T19092] get_signal+0x1284/0x1330 [ 467.412670][T19092] arch_do_signal_or_restart+0xbc/0x830 [ 467.418395][T19092] ? unshare_nsproxy_namespaces+0x143/0x160 [ 467.424356][T19092] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 467.430538][T19092] ? ksys_unshare+0x825/0x930 [ 467.435341][T19092] exit_to_user_mode_loop+0x86/0x480 [ 467.442051][T19092] ? rcu_is_watching+0x15/0xb0 [ 467.446919][T19092] do_syscall_64+0x32d/0xf80 [ 467.451620][T19092] ? trace_irq_disable+0x3b/0x150 [ 467.456712][T19092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.462954][T19092] ? clear_bhb_loop+0x40/0x90 [ 467.468114][T19092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.474412][T19092] RIP: 0033:0x7f65feb9c799 [ 467.478973][T19092] Code: Unable to access opcode bytes at 0x7f65feb9c76f. [ 467.486117][T19092] RSP: 002b:00007f65ffa99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 467.494593][T19092] RAX: fffffffffffffffc RBX: 00007f65fee16090 RCX: 00007f65feb9c799 [ 467.502590][T19092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 467.510592][T19092] RBP: 00007f65fec32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 467.518607][T19092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.526614][T19092] R13: 00007f65fee16128 R14: 00007f65fee16090 R15: 00007ffd8ca012c8 [ 467.534908][T19092] [ 467.537969][T19092] Modules linked in: [ 467.541899][T19092] ---[ end trace 0000000000000000 ]--- [ 467.547385][T19092] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 467.553326][T19092] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7d eb 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 55 eb 57 f7 4d 8b 75 00 4d 8d a7 30 [ 467.572967][T19092] RSP: 0018:ffffc90003a17828 EFLAGS: 00010046 [ 467.579076][T19092] RAX: 0000000000000000 RBX: ffff88807fc9dc00 RCX: dffffc0000000000 [ 467.587092][T19092] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffff88807fc9dc00 [ 467.595108][T19092] RBP: ffff888057630000 R08: ffffffff8ef1bef3 R09: 1ffffffff1de37de [ 467.603128][T19092] R10: dffffc0000000000 R11: fffffbfff1de37df R12: ffff888054984650 [ 467.611658][T19092] R13: 0000000000000000 R14: ffff88807fc9dc30 R15: ffff888054984000 [ 467.619815][T19092] FS: 0000000000000000(0000) GS:ffff88812546d000(0000) knlGS:0000000000000000 [ 467.629120][T19092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.636113][T19092] CR2: 00007fdfcdbe82f8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 467.644247][T19092] Kernel panic - not syncing: Fatal exception [ 467.651042][T19092] Kernel Offset: disabled [ 467.655548][T19092] Rebooting in 86400 seconds..