last executing test programs: 5.265152535s ago: executing program 2 (id=8061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = socket$inet(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0xd, 0xb}, {0xb, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}}, 0x4010006) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.930884055s ago: executing program 1 (id=8068): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="090002000100b24703000018001280090001006970697000000000080002800400130008001f0008"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 4.709356367s ago: executing program 1 (id=8070): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="f000a7090a0000000600000000000000010005"], 0x50}}, 0x200c405a) 4.580930501s ago: executing program 1 (id=8073): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x40000, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001a00010000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="0400"], 0x30}}, 0x0) 4.436820693s ago: executing program 1 (id=8075): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) sendmsg$sock(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)='#', 0x1}], 0x1}, 0x400c804) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r1, &(0x7f0000000780)={&(0x7f00000003c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000980)=""/247, 0xf7}], 0x3, &(0x7f0000000300)=""/60, 0x3c}, 0x2000) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x12, r3, 0x1f4d2000) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000380)={'caif0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b900000000000000000700000006000480ffef0000060003"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)="454f644e5495", 0x6}], 0x1, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) socket$nl_generic(0x10, 0x3, 0x10) 4.374048266s ago: executing program 3 (id=8078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x12}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfc}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc006}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2585892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa021000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250500000014000180060002006c000000080008000000000008000400040000001800018014000300ff010000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc014) 4.164345697s ago: executing program 0 (id=8080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x50044) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x100494) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x1) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004844) socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000240)=""/129, 0x81, 0x2141, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x18, 0x42401837745673e4, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e1e, @local}}) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.029851291s ago: executing program 3 (id=8081): socket$packet(0x11, 0x2, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r0], 0x24}}, 0x24008000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0xfffffffffffffffe, {0x0, 0x1, 0x2}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 3.966364341s ago: executing program 4 (id=8083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 3.861663141s ago: executing program 0 (id=8084): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000240900000600ffff5c03000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) 3.837950024s ago: executing program 3 (id=8085): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_VERSION={0x5, 0x6, 0x5a}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4048854) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x20, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x140b, 0x0, 0x0, 0x0, 0x7a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6b}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6b0}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x9d, &(0x7f0000000240)=""/157, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1fb10, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x1, 0x4, 0x10, 0x7}], 0x10, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}, 0x10, 0x0, r4}, 0x94) (async) unshare(0x22020400) (async) ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000440)={r0, 0x0, 0x12, 0x5, 0xb846, 0xf, [0x0, 0x2, 0x6, 0x10000, 0x3, 0xfffffffffffffffe]}) r6 = socket(0x23, 0x5, 0x0) connect$tipc(r6, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x10) (async) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x4, r5}, 0x6) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000600)={'macvlan1\x00', 0xa00}) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) (async) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) 3.836886531s ago: executing program 4 (id=8086): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0xc) r3 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xfff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x4, @empty, 0x5}}, 0x0, 0x0, 0x2e, 0x0, "bc3a4bbef1f529dd7c70d2cad105d420c1160a427d70bf631cceba5e9e73a9f127c17aabd46e045ff9f67adbeb4340ce545ee12d0aca68e1167e994e62d39727a14fa192900e28e66506144ee7c12f5b"}, 0xd8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x1d0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 3.823726867s ago: executing program 0 (id=8087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x2}]}, {0x0, [0x0, 0x0, 0x30, 0x5f, 0x1e]}}, 0x0, 0x2b, 0x0, 0x5, 0x4}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.67737562s ago: executing program 2 (id=8088): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x6, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xff}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x47, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r5, 0xffffffffffffffff, 0x20, 0x20, 0x0, @void, @void, @void, @value=r6, r4}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x794}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x854) read(r7, &(0x7f0000000700)=""/249, 0xf9) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x1, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000091) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000940)={0x4}, 0x8) ioctl$int_in(r2, 0x5421, &(0x7f0000000980)=0xffffffff) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000a40)={0xffffffffffff6303, 0x48, '\x00', 0x1, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@gettaction={0x1c, 0x32, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000b80)={0x0, 0xa}, &(0x7f0000000bc0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000c00)={r9, 0x8}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c40)={0x101}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000cc0)={0xcb07, 0x18, '\x00', 0x1, &(0x7f0000000c80)=[0x0, 0x0, 0x0]}) bpf$LINK_DETACH(0x22, &(0x7f0000000d00)=r2, 0x4) recvmsg$unix(r3, &(0x7f0000000fc0)={&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/219, 0xdb}], 0x1, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x2) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000001000)) r12 = socket$rds(0x15, 0x5, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r12, 0x40085874, &(0x7f0000001040)={r0, 0x6}) sendmsg$IPSET_CMD_DEL(r10, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x78, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0xc040890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)) 3.669678201s ago: executing program 4 (id=8089): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) (async) ioctl(r2, 0x8b2c, &(0x7f0000000040)) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES32], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x40}}, 0x40) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x2000) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1d", 0x9c}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1}], 0x2, 0x4004000) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random='\x00\t\x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0xb, 0xa2, [@multicast2, @broadcast]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="063263d57f810e5966e88ca971dbaf767bacc30c9989", 0x16}, {&(0x7f00000001c0)="907a289bf9c60027dfd9165595ea6fd562ca9f5be5d6e7cca5379ce32be41d609cb68082b3bf634d324f7dea776bf1738fe6786326d2525ba35b4138387ba597561751c61da5cbb8e73bd855bd14d9edd27b5245fa1bdafa500837dda3831551553607b7c11a4aafb65c93f284e137f497", 0x71}], 0x2, &(0x7f0000001500)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x50, 0x117, 0x2, 0x39, "f5e388a43af279f8e826027c25e81661edbab31e26ac7fc1b61b97441fecdb92140c8feacda48d1a92b074cd2dd3d1a1beb5e6a0de8dbe9a89"}, @op={0x18}, @iv={0x60, 0x117, 0x2, 0x4a, "f6db56d0ba7c9fe682457b67c24f6e98925bd0b6a0b3ed2db85c97d2b7f193dd138760155cdf0123ebe6cc3e3d2015d8cd7b9c1d0899d7e092b51d35eee33e5585617acca2d5215d050c"}], 0x10e0, 0x4008804}], 0x2, 0x40800) 3.638469301s ago: executing program 2 (id=8090): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x7, 0x30, 0x8001, 0x3}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x35f}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x35f}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x4e28, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x8}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="b873375e38bd", 0x6}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000580)=' ', 0x1}], 0x1}}], 0x2, 0x40) 3.58917376s ago: executing program 3 (id=8091): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200220000007b9a00fe00000000b509000000000000c39a04fef1000000bf87000000000000070800b0f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000ce0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x94) 3.537634824s ago: executing program 0 (id=8092): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xa4, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588cf", 0x0, 0x10000d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.529753446s ago: executing program 1 (id=8093): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x200c81d0}, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000440)={0x2, 0x0, @private=0xa0100fe}, 0x10, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 3.51511458s ago: executing program 4 (id=8094): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r3) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '$\xfa\xe2\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'mONNMARK\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x8094) r5 = socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000003680)=[{&(0x7f0000001400)="eb", 0x1}], 0x2000000000000138, 0xe) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3, 0xf8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 3.439609139s ago: executing program 2 (id=8095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000040), 0x2) r2 = socket$netlink(0x10, 0x3, 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close(0x4) ioctl$int_in(0xffffffffffffffff, 0xae5cd613edc86d34, &(0x7f0000000080)=0x101) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1e, &(0x7f0000000240)=""/65, &(0x7f0000000100)=0x41) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000f503010000000000000000000000000a140000000b0a050000000000000000000700000114000000ed03010000004000000000000000000a"], 0x3c}}, 0xc144) 3.428853944s ago: executing program 3 (id=8096): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES16=r0, @ANYBLOB="80420000000000001000128008000100687372000400028008003a00fa3f16ec9c9baecf02c6af798b47bf8f13512c344225732b67a6e383ffb4c2ea41aee9b54e2736d62a8184da4596d174a1047e2a331527099b4acc92a8aebaea3fb1b4", @ANYRES32=0x0, @ANYBLOB="0800280087c667"], 0x40}}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r3, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2004480d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, &(0x7f00000002c0)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000bc0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x44) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000000000080001000300000008000200020000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000004, 0x50, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x60002008}) 440.485605ms ago: executing program 0 (id=8097): socketpair(0x8, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc53, 0x42}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r1) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0xff, 0x7f, {{0x22, 0x4, 0x0, 0x1, 0x88, 0x66, 0x0, 0x10, 0x2f, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x27, 0x0, [{0x4, 0xd, "0d7d60b2f28cff29c7d12d"}, {0x1, 0xc, "c454350c74387d7bb1fd"}, {0x5, 0x8, "ff567e50297b"}]}, @timestamp_prespec={0x44, 0x4c, 0x9, 0x3, 0x6, [{@multicast1, 0x30b4}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xfff}, {@local, 0xffffffff}, {@loopback, 0x7d}, {@private=0xa010100, 0x800}, {@multicast2, 0x2}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8, 0x8, 0x2, 0xe, {{0xd, 0x4, 0x2, 0x4, 0x34, 0x68, 0x0, 0x3, 0x50, 0x0, @multicast2, @private=0xa010100, {[@noop, @noop, @timestamp_prespec={0x44, 0xc, 0xff, 0x3, 0x1, [{@empty, 0x1}]}, @generic={0x89, 0x10, "9151d6b309b92a74d47b724f895c"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r4, 0x2c, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x844) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000d40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000800)={0x4d8, 0x14, 0x2, 0x70bd29, 0x25dfdbfe, {0x2c, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "0cd8dde449861b2737e8e1db16f6caf167edbeb6403356ee06547f59abedd7766fb1a5635b4d66164e3fdda2cbb8abf48e136bcf7c36f19a923f9a76be8d11e6a27f52499b36168dbb47373dd63a7f3c9d85113ea35df4f704718944a8a327fd0f80bfb9abd2b9a5bac50f5bfbc3d59d40519cccddaab8e2cdb15dd6773bd2e36662ed46580a9497cc1ce8a4799a9db3695ecfcb41c48f6d22ed3291492e6baad22cff33a28df57e3c401fcc2bea9c15a4f4eb180f529fc065572ab7905af0c4ec3f29b8df37018848ada88d12a7934354bc1bb3d72b6d596bf109a2c95853df4e74fb082b0e32716780e5480cb4761a496259fc2a"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "da305c8f78bf0b2f617f46eac901a8361a3bf5a94b5438e968b8dbee4712e561c9436407eee841510b78ea16962f40f58db82c1ad1696a88c56dbf6c4bf5fb6b1a5b57b6e9e3fe7826948ea8bd18279ee723681f62bc56890c730f0b91000ad0941e93010c358fadb16efb8107603c3f3c49f0e753042a4f0ab393e56a19c4b2d175d7121a485c6506886ac098ca52e3ebbd960b24124c9c97691755187bd5e5aeec38bc71c841b61820add5fdf71018858eca5e4106"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "8cd168c0168efc020795e7c6a192204c40588cd2dea44583bb337d94528ed2026161d2441f3ea8497fb23ace8b55c0b02f40724ef6641aa2ee731e2fafa7bfdbef52b2e802fdc39165d3217285d8808df5e54ac192dc97e0b73415772f049e23efe68ff6280e468442d8bbe4353b2bc47997235e24eb965fd21cbdba5fcdd7a096766aabe7d30889f579ca34b3904da5b5a9c54de254e027746a4efba9814531aada46d6b613d15d2c3b993bd2928f36427ae1e6e78ae88469f9f346eee5c5ea885ce095eb2a21665704a98eab5719a933aaf6667d8a21cca02eb32ce13d7a"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "78ce7daea4659537ce80a51060b212bbe96b755af7da80597514a4d96e8155c129b5c86ec1c6875c2b1b479951e1c4bbd96399435931b4a34b4b0319f2b6624a197728ea1e21c3ec5d226acf7d4a76bebadb5cb2dd81060f50e52ed31c72039725cfc5741b7252d23c9c3e1830717f13ec9ad8355abe3a82d77740f34c100252eccc5bcdf75dce576705276b9c8e1c09cfa28ad9fef46fbb60a8852f6aa0c6287c3e"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "6d004907165cb3b79b4923d358d3c65e9cc4bac64e5fa07d3fe358e67f9aaf7aef6b0f3252106111acbd1db2642402f4ae81d64928dbab2a4b92d76daa4bfebed9fb5c1ac9516d4e1744f3d0c28d6ffb6bc3649f2f1510c2d5400aaf9fa6dac06fe5371d7b764cec0a98313a042d710947d912a51b3047314feb78aae9a58bef55f71c0515aebd9eb11009cc9811d03aef1086615d04b23a92ec7de29fbe383c0d0ce3cd6bd5a120e1259b3b36bbb82d03b23be5a463f863f7764d24f4949927bc25e325e435f892618311cb41cccbb4741b281081f0880d10efa26e1d215fcca323b8997f1f"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "4a8cb05c2a6a67893de1ae5ab218223c14cc7fc47c11d7c5a2b8972a431e2de8cc77c66da649f09bbafe5fb17a2daff6f5cb599edf29b99f110ff27c141f9a8cfcf7cab419135bf6c149386f5830fff66d48593d1f72fa6d6c87ff96c0ab65f32a65aacc967991d38474384057a1396d9bf640ff4911790e647cf864a2fcb575fe9b4f5c06a1901163512d5fbe68c4"}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7f, 0x1, 0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1e85}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x8001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6d7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xe2}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x800]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async, rerun: 64) r9 = accept4(r1, 0x0, &(0x7f0000000f00), 0x800) (async, rerun: 64) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f80), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r10, 0xe07f65bfb85be9fc, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40411) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004810}, 0x800) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000001200), r9) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0xd4) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000001300)={0x1, 'macsec0\x00', {}, 0x9}) (async) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000001340)=0x2, &(0x7f0000001380)=0x4) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000013c0)={0x6, 0x5, 0x10000, 0xfffffffffffffffc, 0xac, 0x200}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x40, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf, 0x5f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4041) (async, rerun: 32) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r0) (rerun: 32) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001880)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f00000015c0)={0x268, r12, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x24c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "ded19a9eba4b784dabc5fb51d4c87810ebbeccdd5f595d41ac08ed922b66a8b316f1e625fd7abd1041d8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x88, 0x5, "d3d2bcc1c9a25723f897e62d89a8fc45a55840a23860c3760e0b3af8f880d9d293b53bd9188114696088b64d688a0f7af447abc9347a3c2fd9fd79dcd22420a263ce0360a1192bf39bcaa7ee1cbbdc1523bae67139979b1fe50cbea8f2b8338e9c7d7c940dd1f3aa3d388ff4c3ad85837bbc32e32505f870b763090390c56d7fa0428f9b"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "a24fa30190d9583c3355fce6a9bf2513fa059425f9cef7ad1793c51d0c35b7b619fa7c8d4941178c8c110756a03f19bbb48d1bd0f756e0d8ef86ddba5ed0690ebd8f9d310b9ede6e30e6d8354101ded788af0aaa89ad901cb9d08f5fbf1693b3ab1c4404dc65349cadf1d7c2a447ccf5493f05a481179ce7ce5631bab149f4a6aac87928748b1f333e6e6154fa0a6e7e0cbd2f6a839a21407adffa8525a98dc3b117f1037182d28e51992e086b3aebb59b4cb41671122bbe79e04c9af73524b8747cfd24a6fcd44034a19fbebca5c749b0cfab1372a8830c1b3861f8aa32b1"}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "ec38142dc12bb677018143d5026d5f1d9970b0996b88605124206905f572f21c67adebbdd508962379a6cf6617097e36893f9d61ceffc6fdfde1a867f73ed3f077126d20c20ed1397c07d2478d79dfd4e6563148f088ac4f9903fea61b08fe6d1bbf57c74b375defc3371123d57a754fd766d6d1165c91ddb1110c0c2b9981bfafe5f70674ae71f3699a61d404ab7cff976a"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x48d4}, 0x80) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r13, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x40, r14, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x240008c0) syz_emit_ethernet(0xfc, &(0x7f0000001a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv4={0x800, @igmp={{0x1f, 0x4, 0x0, 0x7, 0xee, 0x66, 0x0, 0xcd, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @local, {[@timestamp_prespec={0x44, 0x24, 0x5a, 0x3, 0x5, [{@remote, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7ff}, {@loopback, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xc6, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x73c4}]}, @lsrr={0x83, 0x1b, 0x82, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp_prespec={0x44, 0x1c, 0x23, 0x3, 0xd, [{@local, 0x9}, {@multicast1, 0x1}, {@broadcast, 0x400}]}, @noop]}}, {0x11, 0x8, 0x0, @private=0xa010102, "c06a52ea1caada5108f41d6896458e18665f5f70930fce97411edd87f2425f9aa022502de40b03fdbb8b99346a5898d3013cf49cce48a43e7001037429fddd2bf81b23fb202953e5b108f16a440c948f4575682b94fb0331aa2c045075400a62247cbe999dcb37ad7d66"}}}}}, &(0x7f0000001b00)={0x1, 0x3, [0x350, 0x33, 0x97e, 0xe4e]}) 440.070428ms ago: executing program 1 (id=8098): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x303, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfb, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0xc]}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000580)={0x0, r2, 0x7, 0x200000000007, 0x2003, 0x1}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f0000000040)='\x00', 0x6100, &(0x7f0000000180)={@align=0x5, {0x1, 0x0, 0x8, 0xffff}}, 0x101, &(0x7f00000001c0), &(0x7f0000000380)=0x6}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, 0x0, 0x0, 0x3) close(r11) splice(r10, 0x0, r11, 0x0, 0x10500, 0x0) write$cgroup_subtree(r11, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newchain={0x24, 0x64, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x2, 0xa}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) bind$alg(r6, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) 337.424554ms ago: executing program 2 (id=8099): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000000c0)="cc66519d9119560a469fc15c02fafcf4", 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000240900000600ffff5c03000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 315.359663ms ago: executing program 4 (id=8100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x80000a, 0x11, r1, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 300.950265ms ago: executing program 0 (id=8101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x40, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r4, 0x1ff}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000401}, 0x40) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000001c0)=0x3, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltclass={0x34, 0x29, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x8, 0xb}, {0x5, 0xc}, {0x1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000810) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601"], 0x74}, 0x1, 0x0, 0x0, 0x1004c007}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) unshare(0x20000400) socket$tipc(0x1e, 0x2, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 300.390786ms ago: executing program 3 (id=8102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000180)={@broadcast, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x9900, 0x3, 0x0, 0x205}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x0, 0x3a, 0x64, 0x0, 0x10, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}, @payload_direct={{{{0x26, 0x0, 0x1, 0x0, 0x1, 0x8, 0x2, 0x2, 0x6, 0x0, 0x2, 0x2, 0x4, 0x3, 0x5af7, 0x6, 0x4, 0x4e20, 0x4e24}, 0xc1b9, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "5817b1", 0x20, 0x6, 0x0, @remote, @rand_addr=' \x01\x00', {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0cb7c2f5dbb473800100cafb", 0xf}, {&(0x7f0000000580)="448b", 0x2}], 0x2) 1.586732ms ago: executing program 4 (id=8103): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@rand_addr=0x64010101, @broadcast, 0xffffffffffffffff, "8ae071d711839e46d2dedd472763c4f81735cba90a31d5d6d0f21afafe1c574c", 0x9, 0xff, 0x6, 0xee0}, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @multicast1, 0xffffff00, 0xff, 'xfrm0\x00', 'xfrm0\x00', {}, {}, 0x11, 0x2, 0x20}, 0x6, 0xc0, 0x108, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0xd, [0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x4e22, 0x4e23, 0x4e23, 0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x4e21, 0x4e20, 0x4e21, 0x4e24], [0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'bridge0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 0s ago: executing program 2 (id=8104): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="500100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb00000d0032000000fe88000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200010028000000000000004c001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000008001d000000fcff0c0015005907350001000080"], 0x150}, 0x1, 0x0, 0x0, 0xd0}, 0x20004000) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x9, 0x10, 0x6, 0x2}, &(0x7f00000003c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000440)={r5, 0x7}, 0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4c) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016", 0x36, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0x4, 0x1, 0xfffffff7}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x0, 0x2e, 0x30, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000004c0)={0x1, [0x6]}, 0x6) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): nvalid length. [ 743.275936][T31233] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6636'. [ 743.317894][T31236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6639'. [ 743.393626][T31241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.424763][T31243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.463602][T31241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6640'. [ 743.720255][T31241] ip6gretap1: entered promiscuous mode [ 743.764543][T31241] ip6gretap1: entered allmulticast mode [ 743.946404][T31261] syzkaller0: entered promiscuous mode [ 743.964944][T31261] syzkaller0: entered allmulticast mode [ 744.530512][T31282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6646'. [ 745.053989][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 745.062056][ C0] lec:lec_tx_timeout: lec0 [ 745.067139][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 746.499323][T31287] wlan1 speed is unknown, defaulting to 1000 [ 746.520851][T31287] wg1 speed is unknown, defaulting to 1000 [ 746.537814][T31295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6652'. [ 746.566158][T31298] team0: No ports can be present during mode change [ 746.593945][T31298] netlink: 'syz.1.6651': attribute type 1 has an invalid length. [ 746.743909][T31298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6651'. [ 746.770060][T31302] bond1: (slave geneve2): making interface the new active one [ 746.779447][T31302] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 746.813525][T30952] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 746.845016][T31298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.852446][T31302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6651'. [ 746.884385][T30952] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 746.900782][T30952] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 746.951786][T30952] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 747.062020][T31313] tipc: Enabled bearer , priority 0 [ 747.154058][T31320] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 747.211055][T31317] syzkaller0: entered promiscuous mode [ 747.216804][T31317] syzkaller0: entered allmulticast mode [ 747.225352][T31317] tipc: Resetting bearer [ 747.232754][T31287] lo speed is unknown, defaulting to 1000 [ 747.239614][ T5825] block nbd4: Receive control failed (result -32) [ 747.255814][T31310] tipc: Resetting bearer [ 749.228275][T31310] tipc: Disabling bearer [ 749.444118][ T5892] tipc: Node number set to 352971002 [ 749.509417][T31348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6664'. [ 749.684612][T31353] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6666'. [ 750.047147][T31369] ipvlan2: entered allmulticast mode [ 750.054982][T31369] veth0_vlan: entered allmulticast mode [ 750.073298][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 750.081436][ C0] lec:lec_tx_timeout: lec0 [ 750.086214][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 750.211181][T31372] syzkaller0: entered promiscuous mode [ 750.217187][T31372] syzkaller0: entered allmulticast mode [ 750.231573][T31372] netlink: 'syz.4.6669': attribute type 21 has an invalid length. [ 750.248795][T31372] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6669'. [ 750.708557][T31363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 750.722351][T31360] netlink: 'syz.2.6667': attribute type 1 has an invalid length. [ 750.730704][T31360] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6667'. [ 751.077193][T31395] syzkaller0: entered promiscuous mode [ 751.094822][T31395] syzkaller0: entered allmulticast mode [ 751.381345][T31410] netlink: 'syz.1.6680': attribute type 7 has an invalid length. [ 751.392251][T31401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.425676][T31410] netlink: 'syz.1.6680': attribute type 23 has an invalid length. [ 751.531339][T31414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6682'. [ 751.658597][T31401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.676176][T31425] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 751.709906][T31424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6685'. [ 751.751124][T31422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6686'. [ 751.808200][T31401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.997589][T31401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.249397][T30940] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.317044][T30940] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.334810][T30940] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.367768][T30940] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.496261][T31449] syzkaller0: entered promiscuous mode [ 752.533527][T31449] syzkaller0: entered allmulticast mode [ 752.662850][ T1296] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 752.921605][T31463] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 753.248570][T30940] bond2 (unregistering): (slave geneve4): Releasing active interface [ 753.270762][T30940] batman_adv: batadv0: Removing interface: geneve2 [ 753.297629][T30940] team0: Port device geneve0 removed [ 753.310705][T31471] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 753.317802][T31471] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 753.609822][T30940] bond7 (unregistering): (slave bridge7): Releasing active interface [ 753.710969][T30940] bond0 (unregistering): Released all slaves [ 753.728301][T30940] bond1 (unregistering): Released all slaves [ 753.743587][T30940] bond2 (unregistering): Released all slaves [ 753.759378][T30940] bond3 (unregistering): Released all slaves [ 753.775959][T30940] bond4 (unregistering): Released all slaves [ 753.791357][T30940] bond5 (unregistering): Released all slaves [ 753.811730][T30940] bond6 (unregistering): Released all slaves [ 753.830022][T30940] bond7 (unregistering): Released all slaves [ 753.845934][T30940] bond8 (unregistering): Released all slaves [ 753.853773][T29645] Bluetooth: hci0: command 0x0405 tx timeout [ 753.878719][T30940] bond9 (unregistering): Released all slaves [ 753.897146][T30940] bond10 (unregistering): (slave vcan0): Releasing backup interface [ 753.905435][T30940] vcan0: left promiscuous mode [ 753.911334][T30940] bond10 (unregistering): Released all slaves [ 753.930104][T30940] bond11 (unregistering): Released all slaves [ 754.343008][T31481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6698'. [ 754.352402][T31481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6698'. [ 754.362059][T31481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6698'. [ 755.093264][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 755.101382][ C0] lec:lec_tx_timeout: lec0 [ 755.106343][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 755.159334][T31442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.316107][T31488] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 755.333509][T31488] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 755.443891][ T30] audit: type=1804 audit(1771032063.463:25): pid=31500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6705" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=590 res=1 errno=0 [ 755.490384][ T30] audit: type=1800 audit(1771032063.463:26): pid=31500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6705" name="cgroup.controllers" dev="tmpfs" ino=590 res=0 errno=0 [ 755.606476][T30940] : left promiscuous mode [ 755.701987][T31518] __nla_validate_parse: 1 callbacks suppressed [ 755.702008][T31518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6710'. [ 755.720078][T30957] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 755.741315][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6709'. [ 755.755854][T30940] tipc: Disabling bearer [ 755.761869][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6709'. [ 755.776954][T31512] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 755.790725][T30940] tipc: Left network mode [ 755.808653][T31517] wlan1 speed is unknown, defaulting to 1000 [ 755.833548][T31517] wg1 speed is unknown, defaulting to 1000 [ 755.944525][T30940] IPVS: stopping backup sync thread 24647 ... [ 756.178541][T31527] wlan1 speed is unknown, defaulting to 1000 [ 756.281364][T31527] wg1 speed is unknown, defaulting to 1000 [ 756.353637][T31533] netlink: 'syz.1.6715': attribute type 1 has an invalid length. [ 756.361408][T31533] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6715'. [ 756.414329][T31533] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6715'. [ 756.429526][T31533] netlink: 'syz.1.6715': attribute type 1 has an invalid length. [ 756.439997][T31533] netlink: 'syz.1.6715': attribute type 8 has an invalid length. [ 756.481444][T31533] netlink: 582 bytes leftover after parsing attributes in process `syz.1.6715'. [ 756.501788][T31534] syzkaller0: entered promiscuous mode [ 756.508585][T31534] syzkaller0: entered allmulticast mode [ 756.544113][T31543] tipc: Started in network mode [ 756.561400][T31543] tipc: Node identity d2d8b16017af, cluster identity 4711 [ 756.574996][T31543] tipc: Enabled bearer , priority 10 [ 756.619980][T31530] tipc: Resetting bearer [ 756.651993][T31530] tipc: Disabling bearer [ 756.679510][T31517] lo speed is unknown, defaulting to 1000 [ 756.952680][T31559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6720'. [ 757.048553][T31566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6721'. [ 757.390483][T31581] Cannot find add_set index 0 as target [ 757.442486][T31527] lo speed is unknown, defaulting to 1000 [ 757.484382][T31583] team0 (unregistering): Port device team_slave_0 removed [ 757.531633][T31583] team0 (unregistering): Port device team_slave_1 removed [ 757.542043][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.809565][T31593] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6729'. [ 757.821417][T31593] 0X: renamed from caif0 [ 757.856399][T31593] 0X: entered allmulticast mode [ 757.861844][T31593] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 758.346503][T31614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6734'. [ 758.467810][T31614] gtp1: entered promiscuous mode [ 758.502037][T31622] IPVS: set_ctl: invalid protocol: 3 100.1.1.2:20000 [ 758.510831][T31614] gtp1: entered allmulticast mode [ 758.896031][ T5202] block nbd2: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 60 seconds [ 758.907082][ T5202] block nbd2: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 60 seconds [ 758.918374][ T5202] block nbd2: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 60 seconds [ 758.929908][ T5202] block nbd2: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 60 seconds [ 758.981769][T31647] pim6reg99999999: entered allmulticast mode [ 759.174835][T30940] hsr_slave_0: left promiscuous mode [ 759.194749][T30940] hsr_slave_1: left promiscuous mode [ 759.202221][T30940] batman_adv: batadv0: Removing interface: ipvlan3 [ 760.113263][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 760.121401][ C0] lec:lec_tx_timeout: lec0 [ 760.126276][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 760.852608][T31711] veth3: entered promiscuous mode [ 761.030828][T30940] IPVS: stop unused estimator thread 0... [ 761.449191][T31744] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 761.547288][T31747] vlan3: entered allmulticast mode [ 761.552902][T31747] veth0_to_bond: entered allmulticast mode [ 761.585750][T31747] team0: Port device vlan3 added [ 761.679857][T31757] netlink: 'syz.4.6768': attribute type 2 has an invalid length. [ 761.718861][T31757] : entered promiscuous mode [ 762.019519][T31770] wlan1 speed is unknown, defaulting to 1000 [ 762.036824][T31770] wg1 speed is unknown, defaulting to 1000 [ 762.483044][T31791] __nla_validate_parse: 3 callbacks suppressed [ 762.483064][T31791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6775'. [ 762.502812][T31793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6774'. [ 762.543703][T31791] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6775'. [ 762.579666][T31791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6775'. [ 762.613371][T31791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6775'. [ 762.636587][T31791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6775'. [ 762.663779][T31770] lo speed is unknown, defaulting to 1000 [ 762.680392][T31797] tipc: Started in network mode [ 762.690037][T31797] tipc: Node identity 2ea9f19fefa3, cluster identity 4711 [ 762.703162][T31797] tipc: Enabled bearer , priority 0 [ 762.856531][T31797] syzkaller0: entered promiscuous mode [ 762.883369][T31797] syzkaller0: entered allmulticast mode [ 762.894890][T31797] tipc: Resetting bearer [ 762.937434][T31795] tipc: Resetting bearer [ 764.924992][ T5186] udevd[5186]: worker [29775] /devices/virtual/block/nbd2 is taking a long time [ 765.133491][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 765.141695][ C0] lec:lec_tx_timeout: lec0 [ 765.146445][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 765.363639][T31795] tipc: Disabling bearer [ 765.424365][ T29] tipc: Node number set to 3238719903 [ 765.498044][T31858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6785'. [ 765.711669][T31868] syzkaller0: entered promiscuous mode [ 765.721780][T31868] syzkaller0: entered allmulticast mode [ 766.253841][T31899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.444649][T31909] batadv_slave_1: entered promiscuous mode [ 766.455787][T31911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6799'. [ 766.475952][T31911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6799'. [ 766.520588][T31909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6799'. [ 766.531788][T31911] batadv_slave_1: left promiscuous mode [ 767.338345][T31936] IPVS: Scheduler module ip_vs_sip not found [ 767.390101][T31931] syzkaller0: entered promiscuous mode [ 767.413355][T31931] syzkaller0: entered allmulticast mode [ 767.538505][T31954] netlink: 'syz.3.6810': attribute type 1 has an invalid length. [ 767.559413][T31954] __nla_validate_parse: 5 callbacks suppressed [ 767.559455][T31954] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.6810'. [ 769.543955][T31961] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6813'. [ 769.970069][T31996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6823'. [ 770.022152][T32001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6823'. [ 770.036621][T32001] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6823'. [ 770.132361][T32003] syzkaller0: entered promiscuous mode [ 770.140137][T32003] syzkaller0: entered allmulticast mode [ 770.153262][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 770.161384][ C0] lec:lec_tx_timeout: lec0 [ 770.166182][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 770.563543][T32029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6828'. [ 770.882203][T32041] netlink: 'syz.4.6837': attribute type 2 has an invalid length. [ 770.922474][T32041] : entered promiscuous mode [ 770.934265][T32041] netlink: 'syz.4.6837': attribute type 2 has an invalid length. [ 771.221378][T32048] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.324210][T32062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6843'. [ 771.357654][T32062] bridge_slave_1: left allmulticast mode [ 771.364074][T32062] bridge_slave_1: left promiscuous mode [ 771.370069][T32062] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.438139][T32062] bridge_slave_0: left allmulticast mode [ 771.444101][T32062] bridge_slave_0: left promiscuous mode [ 771.450024][T32062] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.472777][T32064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6844'. [ 771.549586][T32068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6845'. [ 771.598184][T32080] wlan1 speed is unknown, defaulting to 1000 [ 771.624678][T32075] syzkaller1: entered promiscuous mode [ 771.640491][T32075] syzkaller1: entered allmulticast mode [ 771.660451][T32073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6846'. [ 771.670501][T32075] syzkaller1: left promiscuous mode [ 771.676034][T32075] syzkaller1: left allmulticast mode [ 771.684199][T32080] wg1 speed is unknown, defaulting to 1000 [ 771.811171][T32073] bond3: entered promiscuous mode [ 771.868607][T32073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.153593][T32099] ip6t_REJECT: ECHOREPLY is not supported [ 772.171856][T32081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.190546][T32081] bond3: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 772.222234][T32081] bond3: (slave ip6tnl3): Error -95 calling set_mac_address [ 772.249965][T32080] lo speed is unknown, defaulting to 1000 [ 772.290387][T32094] wlan1 speed is unknown, defaulting to 1000 [ 772.298491][T32094] wg1 speed is unknown, defaulting to 1000 [ 772.531189][T32094] lo speed is unknown, defaulting to 1000 [ 773.238511][T32135] bridge_slave_1: left allmulticast mode [ 773.253512][T32135] bridge_slave_1: left promiscuous mode [ 773.260926][T32135] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.306399][T32135] netlink: 'syz.4.6866': attribute type 3 has an invalid length. [ 773.334780][T32135] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 773.411062][T32143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6868'. [ 773.570808][T32143] bond0: entered promiscuous mode [ 773.595267][T32143] bond_slave_0: entered promiscuous mode [ 773.601653][T32143] bond_slave_1: entered promiscuous mode [ 773.611074][T32143] gretap0: entered promiscuous mode [ 773.619252][T32143] debugfs: 'hsr1' already exists in 'hsr' [ 773.628606][T32143] Cannot create hsr debugfs directory [ 773.635119][T32143] hsr1: entered promiscuous mode [ 774.171982][T32157] pimreg: tun_chr_ioctl cmd 1074025677 [ 774.183642][T32157] pimreg: linktype set to 823 [ 774.355226][T32150] wlan1 speed is unknown, defaulting to 1000 [ 774.375393][T32150] wg1 speed is unknown, defaulting to 1000 [ 774.442184][T32149] wlan1 speed is unknown, defaulting to 1000 [ 774.481854][T32149] wg1 speed is unknown, defaulting to 1000 [ 774.605628][T32163] ipvlan2: entered promiscuous mode [ 775.054391][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 775.173260][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 775.181827][ C0] lec:lec_tx_timeout: lec0 [ 775.186740][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 777.602910][T32171] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.610745][T32171] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.635630][T32171] bridge0: entered allmulticast mode [ 777.644913][T32171] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 777.728655][T32175] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6879'. [ 777.783350][T32150] lo speed is unknown, defaulting to 1000 [ 777.880245][T32188] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6880'. [ 777.890942][T32188] netlink: 'syz.2.6880': attribute type 1 has an invalid length. [ 777.931648][T32190] netlink: 'syz.4.6881': attribute type 2 has an invalid length. [ 777.982688][T32190] !9: entered promiscuous mode [ 777.991858][T32181] netlink: 'syz.4.6881': attribute type 2 has an invalid length. [ 778.000345][T32181] !9: left promiscuous mode [ 778.051494][T32190] netlink: 'syz.4.6881': attribute type 1 has an invalid length. [ 778.939718][T32218] netlink: 'syz.2.6890': attribute type 6 has an invalid length. [ 778.991572][T32219] netlink: 'syz.2.6890': attribute type 6 has an invalid length. [ 780.193296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 780.201423][ C0] lec:lec_tx_timeout: lec0 [ 780.206203][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 781.419051][T32149] lo speed is unknown, defaulting to 1000 [ 781.756180][T32230] sctp: [Deprecated]: syz.3.6895 (pid 32230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.756180][T32230] Use struct sctp_sack_info instead [ 782.007305][T32228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6893'. [ 782.701062][T32270] netlink: 3334 bytes leftover after parsing attributes in process `syz.0.6902'. [ 785.213761][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 785.221819][ C0] lec:lec_tx_timeout: lec0 [ 785.226566][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 785.735278][T32287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6906'. [ 785.928836][T32291] wlan1 speed is unknown, defaulting to 1000 [ 786.035135][T32291] wg1 speed is unknown, defaulting to 1000 [ 786.057637][T32299] syzkaller0: refused to change device tx_queue_len [ 786.573138][T32291] lo speed is unknown, defaulting to 1000 [ 786.612328][T32313] xt_hashlimit: size too large, truncated to 1048576 [ 786.669521][T32315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6913'. [ 787.107923][T32326] wlan1 speed is unknown, defaulting to 1000 [ 787.116536][T32326] wg1 speed is unknown, defaulting to 1000 [ 787.357452][T32326] lo speed is unknown, defaulting to 1000 [ 788.973856][ T5202] block nbd2: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 90 seconds [ 788.988796][ T5202] block nbd2: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 90 seconds [ 789.003509][ T5202] block nbd2: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 90 seconds [ 789.014724][ T5202] block nbd2: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 90 seconds [ 790.574794][T32338] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6918'. [ 790.942929][T32359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 791.053210][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 791.061277][ C0] lec:lec_tx_timeout: lec0 [ 791.066396][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 791.276194][T32367] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6925'. [ 791.440521][T32375] syzkaller0: entered promiscuous mode [ 791.446163][T32375] syzkaller0: entered allmulticast mode [ 791.454239][T32375] FAULT_INJECTION: forcing a failure. [ 791.454239][T32375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.467849][T32375] CPU: 0 UID: 0 PID: 32375 Comm: syz.1.6927 Not tainted syzkaller #0 PREEMPT(full) [ 791.467876][T32375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 791.467889][T32375] Call Trace: [ 791.467895][T32375] [ 791.467902][T32375] dump_stack_lvl+0xe8/0x150 [ 791.467927][T32375] should_fail_ex+0x412/0x560 [ 791.467952][T32375] _copy_from_user+0x2d/0xb0 [ 791.467969][T32375] ___sys_sendmsg+0x1c6/0x360 [ 791.467996][T32375] ? __lock_acquire+0x6b5/0x2cf0 [ 791.468016][T32375] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.468061][T32375] ? __fget_files+0x2a/0x420 [ 791.468075][T32375] ? __fget_files+0x3a0/0x420 [ 791.468098][T32375] __x64_sys_sendmsg+0x1bd/0x2a0 [ 791.468120][T32375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 791.468146][T32375] ? __pfx_ksys_write+0x10/0x10 [ 791.468174][T32375] do_syscall_64+0x14d/0xf80 [ 791.468194][T32375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.468209][T32375] ? trace_irq_disable+0x37/0x100 [ 791.468227][T32375] ? clear_bhb_loop+0x40/0x90 [ 791.468245][T32375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.468260][T32375] RIP: 0033:0x7f865f19bf79 [ 791.468274][T32375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.468288][T32375] RSP: 002b:00007f86600fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.468304][T32375] RAX: ffffffffffffffda RBX: 00007f865f415fa0 RCX: 00007f865f19bf79 [ 791.468316][T32375] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000005 [ 791.468326][T32375] RBP: 00007f86600fb090 R08: 0000000000000000 R09: 0000000000000000 [ 791.468335][T32375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.468345][T32375] R13: 00007f865f416038 R14: 00007f865f415fa0 R15: 00007ffe5f6f92d8 [ 791.468369][T32375] [ 794.323517][T32390] syzkaller0: entered promiscuous mode [ 794.329150][T32390] syzkaller0: entered allmulticast mode [ 794.401609][T32399] netlink: 'syz.3.6933': attribute type 1 has an invalid length. [ 794.511154][T32405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6935'. [ 794.712525][T32407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6936'. [ 794.773578][T32415] netlink: 'syz.2.6936': attribute type 1 has an invalid length. [ 794.782793][T32415] netlink: 'syz.2.6936': attribute type 2 has an invalid length. [ 794.795219][T32407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6936'. [ 794.803576][T32415] netlink: 'syz.2.6936': attribute type 1 has an invalid length. [ 794.815932][T32415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6936'. [ 794.841114][T32420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6938'. [ 794.869084][T32428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6938'. [ 794.975980][T32427] wlan1 speed is unknown, defaulting to 1000 [ 794.988882][T32427] wg1 speed is unknown, defaulting to 1000 [ 794.997137][T32418] syzkaller0: entered promiscuous mode [ 795.002811][T32418] syzkaller0: entered allmulticast mode [ 795.144691][T32448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6943'. [ 795.502862][T32454] netlink: 'syz.4.6942': attribute type 13 has an invalid length. [ 795.534289][T29645] Bluetooth: hci5: command 0x0406 tx timeout [ 796.073246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 796.081382][ C0] lec:lec_tx_timeout: lec0 [ 796.086497][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 798.059047][T32425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.159786][T32448] veth5: entered promiscuous mode [ 798.166733][T32451] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode [ 798.174673][T32451] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 798.187516][T32427] lo speed is unknown, defaulting to 1000 [ 798.271096][T32455] tipc: Enabled bearer , priority 0 [ 798.294135][T12845] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 798.321868][T32457] netlink: 'syz.3.6945': attribute type 1 has an invalid length. [ 798.384275][T32458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6945'. [ 798.396135][T32457] bond5: entered promiscuous mode [ 798.401644][T32457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 798.418099][T32467] FAULT_INJECTION: forcing a failure. [ 798.418099][T32467] name failslab, interval 1, probability 0, space 0, times 0 [ 798.460571][T32458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6945'. [ 798.470965][T32467] CPU: 1 UID: 0 PID: 32467 Comm: syz.2.6947 Not tainted syzkaller #0 PREEMPT(full) [ 798.470993][T32467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 798.471006][T32467] Call Trace: [ 798.471015][T32467] [ 798.471025][T32467] dump_stack_lvl+0xe8/0x150 [ 798.471059][T32467] should_fail_ex+0x412/0x560 [ 798.471094][T32467] should_failslab+0xa8/0x100 [ 798.471125][T32467] ? skb_clone+0x212/0x3a0 [ 798.471153][T32467] kmem_cache_alloc_noprof+0x87/0x650 [ 798.471178][T32467] ? __netlink_lookup+0xc6/0x8b0 [ 798.471210][T32467] skb_clone+0x212/0x3a0 [ 798.471241][T32467] __netlink_deliver_tap+0x404/0x850 [ 798.471277][T32467] ? netlink_deliver_tap+0x2e/0x1b0 [ 798.471309][T32467] netlink_deliver_tap+0x19c/0x1b0 [ 798.471342][T32467] netlink_unicast+0x7e3/0x9b0 [ 798.471383][T32467] ? __pfx_netlink_unicast+0x10/0x10 [ 798.471417][T32467] ? netlink_sendmsg+0x650/0xb40 [ 798.471437][T32467] ? skb_put+0x11b/0x210 [ 798.471465][T32467] netlink_sendmsg+0x813/0xb40 [ 798.471498][T32467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.471523][T32467] ? aa_sock_msg_perm+0xf1/0x1b0 [ 798.471554][T32467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 798.471586][T32467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.471606][T32467] ____sys_sendmsg+0xa68/0xad0 [ 798.471633][T32467] ? __might_fault+0xaf/0x130 [ 798.471665][T32467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.471703][T32467] ? import_iovec+0x73/0xa0 [ 798.471729][T32467] ___sys_sendmsg+0x2a5/0x360 [ 798.471755][T32467] ? __lock_acquire+0x6b5/0x2cf0 [ 798.471784][T32467] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.471850][T32467] ? __fget_files+0x2a/0x420 [ 798.471871][T32467] ? __fget_files+0x3a0/0x420 [ 798.471904][T32467] __x64_sys_sendmsg+0x1bd/0x2a0 [ 798.471934][T32467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.471973][T32467] ? __pfx_ksys_write+0x10/0x10 [ 798.472012][T32467] do_syscall_64+0x14d/0xf80 [ 798.472039][T32467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.472060][T32467] ? trace_irq_disable+0x37/0x100 [ 798.472085][T32467] ? clear_bhb_loop+0x40/0x90 [ 798.472110][T32467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.472131][T32467] RIP: 0033:0x7ff6c119bf79 [ 798.472150][T32467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.472168][T32467] RSP: 002b:00007ff6c1f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.472191][T32467] RAX: ffffffffffffffda RBX: 00007ff6c1415fa0 RCX: 00007ff6c119bf79 [ 798.472207][T32467] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 798.472221][T32467] RBP: 00007ff6c1f87090 R08: 0000000000000000 R09: 0000000000000000 [ 798.472235][T32467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.472248][T32467] R13: 00007ff6c1416038 R14: 00007ff6c1415fa0 R15: 00007ffcad7aefa8 [ 798.472283][T32467] [ 798.797609][T32457] bond5: (slave bridge4): making interface the new active one [ 798.805321][T32457] bridge4: entered promiscuous mode [ 798.812146][T32457] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 798.938083][T32474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6948'. [ 798.954571][T32476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 798.961898][T32476] IPv6: NLM_F_CREATE should be set when creating new route [ 799.036194][T32480] bridge0: entered allmulticast mode [ 799.063772][T32476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6950'. [ 799.073834][T32476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6950'. [ 799.085358][T32481] netlink: 'syz.3.6951': attribute type 1 has an invalid length. [ 799.133794][ T5819] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 799.152486][T32481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 799.182697][T32480] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6952'. [ 799.292293][T32487] bond6: (slave gretap1): making interface the new active one [ 799.314942][T32487] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 799.439088][T19427] tipc: Node number set to 4278190080 [ 799.662951][T32511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6958'. [ 800.365102][T32526] sctp: [Deprecated]: syz.0.6961 (pid 32526) Use of int in max_burst socket option. [ 800.365102][T32526] Use struct sctp_assoc_value instead [ 800.389494][T32526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6961'. [ 800.661072][T32509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.677857][T32509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.910808][T32509] hsr2: left promiscuous mode [ 800.919610][T32509] ip6gre1: left allmulticast mode [ 800.936197][T32509] geneve2: left promiscuous mode [ 800.948967][T32509] bridge2: left allmulticast mode [ 800.956624][T32509] ip6gretap1: left promiscuous mode [ 800.961892][T32509] ip6gretap1: left allmulticast mode [ 800.976069][T32509] tipc: Resetting bearer [ 800.986484][T32509] mac80211_hwsim hwsim69 syzkaller0: left promiscuous mode [ 800.994126][T32509] mac80211_hwsim hwsim69 syzkaller0: left allmulticast mode [ 801.061904][T32526] chnl_net:caif_netlink_parms(): no params data found [ 801.084876][T32542] netlink: 'syz.3.6966': attribute type 11 has an invalid length. [ 801.093287][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 801.101389][ C0] lec:lec_tx_timeout: lec0 [ 801.106699][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 801.176003][ T63] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.196370][ T63] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 801.233867][ T63] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.243013][ T63] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 801.256604][ T63] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.285063][ T63] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 801.324109][ T63] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.342614][ T63] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 801.408707][T32557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6971'. [ 801.421960][T32557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6971'. [ 801.988490][T32582] xfrm1: entered allmulticast mode [ 802.209664][T32594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.474259][T30940] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.502440][T30940] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.514108][T32604] sctp: [Deprecated]: syz.4.6986 (pid 32604) Use of int in max_burst socket option. [ 802.514108][T32604] Use struct sctp_assoc_value instead [ 802.532807][T30940] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.542772][T30940] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.575422][T32605] lo speed is unknown, defaulting to 1000 [ 802.622200][T32608] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode [ 802.631355][T32608] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 802.656158][T32605] lo speed is unknown, defaulting to 1000 [ 802.663943][T32605] lo speed is unknown, defaulting to 1000 [ 802.890418][T32605] infiniband sqz0: set active [ 802.895477][T32605] infiniband sqz0: added lo [ 802.922734][T19427] lo speed is unknown, defaulting to 1000 [ 802.955025][T32605] RDS/IB: sqz0: added [ 802.959307][T32605] smc: adding ib device sqz0 with port count 1 [ 802.983446][T32605] smc: ib device sqz0 port 1 has no pnetid [ 802.996933][T12846] lo speed is unknown, defaulting to 1000 [ 803.023537][T32605] lo speed is unknown, defaulting to 1000 [ 803.050459][T32624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.186547][T32629] netlink: 'syz.1.6993': attribute type 83 has an invalid length. [ 803.280967][T32633] : renamed from veth0_to_bond [ 803.416453][T32605] lo speed is unknown, defaulting to 1000 [ 803.820368][T32605] lo speed is unknown, defaulting to 1000 [ 803.888038][T32654] __nla_validate_parse: 8 callbacks suppressed [ 803.888059][T32654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7000'. [ 803.965587][T32655] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20000 [ 804.023368][ T5825] Bluetooth: hci3: command tx timeout [ 804.509562][T32654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 804.550965][T32605] lo speed is unknown, defaulting to 1000 [ 804.557334][T32669] lo: Caught tx_queue_len zero misconfig [ 804.826693][T32682] tipc: Invalid UDP bearer configuration [ 804.826749][T32682] tipc: Enabling of bearer rejected, failed to enable media [ 805.215331][T32690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7010'. [ 805.256119][T32605] lo speed is unknown, defaulting to 1000 [ 805.386723][T32697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.656600][T32707] gtp0: entered promiscuous mode [ 805.661640][T32707] gtp0: entered allmulticast mode [ 805.695568][T32710] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7015'. [ 805.722675][T32710] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7015'. [ 805.772908][T32710] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7015'. [ 805.821368][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7015'. [ 805.830421][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7015'. [ 806.011245][T32605] lo speed is unknown, defaulting to 1000 [ 806.113234][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 806.121394][ C0] lec:lec_tx_timeout: lec0 [ 806.126247][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 806.261129][T32731] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 806.298780][T32731] bond2: (slave lo): Enslaving as an active interface with an up link [ 806.316697][T32731] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 806.422574][T32739] netlink: 'syz.4.7023': attribute type 58 has an invalid length. [ 806.629394][T32605] lo speed is unknown, defaulting to 1000 [ 806.881042][T32748] wlan1 speed is unknown, defaulting to 1000 [ 806.956069][T32748] wg1 speed is unknown, defaulting to 1000 [ 807.371772][T32767] wlan1 speed is unknown, defaulting to 1000 [ 807.386832][T32748] lo speed is unknown, defaulting to 1000 [ 807.409460][T32767] wg1 speed is unknown, defaulting to 1000 [ 807.418801][T32605] lo speed is unknown, defaulting to 1000 [ 807.494279][ T305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 807.642190][ T311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7034'. [ 807.681040][ T312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7034'. [ 807.683590][ T311] openvswitch: netlink: Missing key (keys=40, expected=80) [ 807.720601][ T312] openvswitch: netlink: Missing key (keys=40, expected=80) [ 807.917562][ T318] wlan1 speed is unknown, defaulting to 1000 [ 807.936366][ T318] wg1 speed is unknown, defaulting to 1000 [ 807.963443][ T322] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7036'. [ 807.990812][T30950] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.006674][ T322] netlink: 'syz.3.7036': attribute type 12 has an invalid length. [ 808.017619][T30950] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.026234][T30950] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.043613][T30950] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.081431][T32767] lo speed is unknown, defaulting to 1000 [ 808.150642][T32748] lo speed is unknown, defaulting to 1000 [ 808.496826][T32605] lo speed is unknown, defaulting to 1000 [ 808.515087][ T318] lo speed is unknown, defaulting to 1000 [ 808.798406][ T331] IPVS: Error connecting to the multicast addr [ 808.947468][ T336] __nla_validate_parse: 1 callbacks suppressed [ 808.947489][ T336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7039'. [ 809.003713][T32605] lo speed is unknown, defaulting to 1000 [ 809.295042][ T348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7042'. [ 809.358055][ T349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7042'. [ 809.741752][ T359] netlink: 'syz.4.7045': attribute type 61 has an invalid length. [ 809.751697][ T359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7045'. [ 809.798840][ T359] netlink: 'syz.4.7045': attribute type 12 has an invalid length. [ 809.809404][ T359] netlink: 'syz.4.7045': attribute type 29 has an invalid length. [ 809.818024][ T359] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7045'. [ 809.829138][ T359] netlink: 59 bytes leftover after parsing attributes in process `syz.4.7045'. [ 809.955836][ T365] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7046'. [ 810.578161][ T367] wlan1 speed is unknown, defaulting to 1000 [ 810.661023][ T375] veth0: entered promiscuous mode [ 810.670378][ T367] wg1 speed is unknown, defaulting to 1000 [ 810.718027][ T375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7048'. [ 810.880938][ T378] syz_tun: entered allmulticast mode [ 811.004066][ T381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7050'. [ 811.133273][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 811.141433][ C0] lec:lec_tx_timeout: lec0 [ 811.689843][ T392] bond3 (unregistering): Released all slaves [ 811.760416][ T367] lo speed is unknown, defaulting to 1000 [ 811.964534][ T403] netlink: 'syz.2.7056': attribute type 5 has an invalid length. [ 812.215370][ T5819] IPVS: starting estimator thread 0... [ 812.310632][ T413] IPVS: using max 29 ests per chain, 69600 per kthread [ 812.392928][T30950] bond13 (unregistering): (slave gre1): Releasing backup interface [ 812.403080][T30950] gre1 (unregistering): left promiscuous mode [ 812.470063][T30950] `: Port device geneve0 removed [ 812.678396][T30950] bond7 (unregistering): (slave bridge6): Releasing active interface [ 812.878003][T30950] bond14 (unregistering): (slave bridge0): Releasing active interface [ 812.957975][T30950] bond14 (unregistering): (slave bridge10): Releasing active interface [ 813.088724][T30950] bond18 (unregistering): (slave bridge13): Releasing active interface [ 813.149432][T30950] bond0 (unregistering): (slave 30): Releasing backup interface [ 813.159425][T30950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.169290][T30950] bond0 (unregistering): Released all slaves [ 813.180072][T30950] bond1 (unregistering): Released all slaves [ 813.197487][T30950] bond2 (unregistering): Released all slaves [ 813.212982][T30950] bond3 (unregistering): Released all slaves [ 813.230388][T30950] bond4 (unregistering): Released all slaves [ 813.259576][T30950] bond5 (unregistering): (slave veth5): Releasing active interface [ 813.269570][T30950] bond5 (unregistering): Released all slaves [ 813.288005][T30950] bond6 (unregistering): Released all slaves [ 813.309278][T30950] bond7 (unregistering): Released all slaves [ 813.324749][T30950] bond8 (unregistering): Released all slaves [ 813.339723][T30950] bond9 (unregistering): Released all slaves [ 813.356130][T30950] bond10 (unregistering): Released all slaves [ 813.382150][T30950] bond11 (unregistering): Released all slaves [ 813.398102][T30950] bond12 (unregistering): (slave veth9): Releasing backup interface [ 813.408044][T30950] bond12 (unregistering): Released all slaves [ 813.423976][T30950] bond13 (unregistering): Released all slaves [ 813.444646][T30950] bond14 (unregistering): Released all slaves [ 813.468737][T30950] bond15 (unregistering): Released all slaves [ 813.488660][T30950] bond16 (unregistering): Released all slaves [ 813.503420][T30950] bond17 (unregistering): Released all slaves [ 813.530742][T30950] bond18 (unregistering): Released all slaves [ 813.551435][ T410] ip6gretap2: entered promiscuous mode [ 813.560089][ T367] lo speed is unknown, defaulting to 1000 [ 813.839267][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7060'. [ 813.882125][ T426] vlan4: entered promiscuous mode [ 813.913402][ T426] bond0: entered promiscuous mode [ 813.918519][ T426] bond_slave_0: entered promiscuous mode [ 813.945212][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 813.952290][ T1296] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 813.974535][ T426] bond_slave_1: entered promiscuous mode [ 814.080832][ T430] bond3: option broadcast_neighbor: invalid value (30) [ 814.097117][ T441] netlink: 'syz.0.7060': attribute type 11 has an invalid length. [ 814.192760][ T430] bond3 (unregistering): Released all slaves [ 814.309348][ T432] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 814.536369][ T462] syzkaller0: entered promiscuous mode [ 814.542903][ T462] syzkaller0: entered allmulticast mode [ 815.029691][ T472] wlan1 speed is unknown, defaulting to 1000 [ 815.096278][ T472] wg1 speed is unknown, defaulting to 1000 [ 815.119058][ T480] netlink: 'syz.3.7075': attribute type 1 has an invalid length. [ 815.320967][ T480] __nla_validate_parse: 1 callbacks suppressed [ 815.320990][ T480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7075'. [ 815.469905][ T487] bond7: (slave veth3): Enslaving as an active interface with a down link [ 815.608087][ T490] bond7: (slave veth5): Enslaving as an active interface with a down link [ 815.640913][ T480] 8021q: adding VLAN 0 to HW filter on device bond7 [ 815.700938][T30950] : left promiscuous mode [ 815.939069][T30950] tipc: Disabling bearer [ 815.949963][T30950] tipc: Left network mode [ 816.185768][ T508] bond4: entered promiscuous mode [ 816.190969][ T508] bond4: entered allmulticast mode [ 816.199870][ T508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 816.212280][ T513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7082'. [ 816.241013][ T507] bond5: entered promiscuous mode [ 816.246526][ T507] bond5: entered allmulticast mode [ 816.252948][ T507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 816.260980][ T472] lo speed is unknown, defaulting to 1000 [ 816.287142][ T500] wlan1 speed is unknown, defaulting to 1000 [ 816.339175][ T500] wg1 speed is unknown, defaulting to 1000 [ 816.351986][ T515] ip6tnl2: entered allmulticast mode [ 816.385053][ T515] bond2: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 816.404555][ T515] bond2: (slave ip6tnl2): Error -95 calling set_mac_address [ 816.774330][ T529] netlink: 'syz.2.7087': attribute type 1 has an invalid length. [ 816.891814][ T529] 8021q: adding VLAN 0 to HW filter on device bond6 [ 817.155946][ T472] lo speed is unknown, defaulting to 1000 [ 817.388212][ T539] mac80211_hwsim hwsim69 syzkaller0: Caught tx_queue_len zero misconfig [ 817.476834][ T543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7091'. [ 817.686568][ T500] lo speed is unknown, defaulting to 1000 [ 818.237718][ T561] wlan1 speed is unknown, defaulting to 1000 [ 818.346250][ T571] tipc: Enabled bearer , priority 0 [ 818.355872][ T571] syzkaller0: entered promiscuous mode [ 818.361650][ T571] syzkaller0: entered allmulticast mode [ 818.391123][ T500] lo speed is unknown, defaulting to 1000 [ 818.407531][ T571] tipc: Resetting bearer [ 818.416667][ T570] tipc: Resetting bearer [ 818.440636][ T570] tipc: Disabling bearer [ 818.604947][ T573] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7099'. [ 818.810391][ T578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7100'. [ 818.856924][ T561] wg1 speed is unknown, defaulting to 1000 [ 819.054527][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 819.062722][ C0] lec:lec_tx_timeout: lec0 [ 819.069883][ T5202] block nbd2: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 120 seconds [ 819.081624][ T5202] block nbd2: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 120 seconds [ 819.093292][ T5202] block nbd2: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 120 seconds [ 819.104571][ T5202] block nbd2: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 120 seconds [ 819.436659][T30950] hsr_slave_0: left promiscuous mode [ 819.467184][T30950] hsr_slave_1: left promiscuous mode [ 819.473987][T30950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.494449][T30950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.516039][T30950] hsr0: left allmulticast mode [ 820.045227][T30950] ` (unregistering): Port device team_slave_1 removed [ 820.063354][T30950] ` (unregistering): Port device C removed [ 820.362480][ T561] lo speed is unknown, defaulting to 1000 [ 820.390821][ T610] ip6gre2: entered promiscuous mode [ 820.408186][ T610] ip6gre2: entered allmulticast mode [ 820.428632][ T610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7105'. [ 820.610088][ T561] lo speed is unknown, defaulting to 1000 [ 821.027856][T30950] IPVS: stop unused estimator thread 0... [ 821.080385][ T626] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7109'. [ 821.216289][ T628] netlink: 'syz.1.7110': attribute type 4 has an invalid length. [ 822.535283][ T650] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7117'. [ 822.570362][ T649] tipc: Started in network mode [ 822.584083][ T649] tipc: Node identity 0afb1223d303, cluster identity 4711 [ 822.591436][ T649] tipc: Enabled bearer , priority 0 [ 822.599913][ T649] syzkaller0: entered promiscuous mode [ 822.608616][ T649] syzkaller0: entered allmulticast mode [ 822.620632][ T652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7117'. [ 822.653133][ T652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7117'. [ 822.664048][ T652] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7117'. [ 822.705738][ T649] tipc: Resetting bearer [ 822.744806][ T655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7117'. [ 822.766680][ T649] tipc: Disabling bearer [ 822.945857][ T657] xt_hashlimit: size too large, truncated to 1048576 [ 822.967751][ T657] xt_hashlimit: max too large, truncated to 1048576 [ 823.281539][ T663] syzkaller0: entered promiscuous mode [ 823.293453][ T663] syzkaller0: entered allmulticast mode [ 823.711802][ T684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7124'. [ 824.324861][ T689] netlink: 'syz.4.7125': attribute type 1 has an invalid length. [ 825.683790][ T689] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 825.705211][T30943] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.743308][T30943] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.759449][T30943] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.769719][T30943] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.855447][ T698] bond0: Caught tx_queue_len zero misconfig [ 825.886123][ T699] netlink: 'syz.2.7128': attribute type 20 has an invalid length. [ 825.886856][ T698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7127'. [ 826.006658][ T705] vlan3: entered allmulticast mode [ 826.031098][ T705] veth0_to_bond: entered allmulticast mode [ 826.070497][ T705] vlan3: entered promiscuous mode [ 826.089115][ T705] veth0_to_bond: entered promiscuous mode [ 826.108464][ T705] team0: Port device vlan3 added [ 826.136910][ T711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7132'. [ 826.240348][ T717] nbd: must specify a device to reconfigure [ 826.248796][ T719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7137'. [ 826.268250][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 826.352365][ T720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7135'. [ 826.421861][ T719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7137'. [ 826.451972][ T720] 8021q: adding VLAN 0 to HW filter on device bond7 [ 826.474412][ T722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7135'. [ 826.496084][ T719] bond3: option lp_interval: invalid value (0) [ 826.505850][ T719] bond3: option lp_interval: allowed values 1 - 2147483647 [ 826.518188][ T719] bond3 (unregistering): Released all slaves [ 826.555629][ T722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7135'. [ 826.594827][ T722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7135'. [ 826.628226][ T742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7143'. [ 826.637825][ T722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7135'. [ 826.756393][ T746] netlink: 'syz.0.7144': attribute type 12 has an invalid length. [ 826.780229][ T746] netlink: 'syz.0.7144': attribute type 29 has an invalid length. [ 826.868581][ T750] netlink: 'syz.2.7146': attribute type 7 has an invalid length. [ 827.013824][ T751] batman_adv: batadv0: Interface deactivated: dummy0 [ 827.132081][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.159182][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.330016][ T751] hsr1: left promiscuous mode [ 827.390414][ T759] bridge_slave_1: left allmulticast mode [ 827.397892][ T759] bridge_slave_1: left promiscuous mode [ 827.407384][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.419297][ T759] bridge_slave_0: left allmulticast mode [ 827.425670][ T759] bridge_slave_0: left promiscuous mode [ 827.431974][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.506870][T30943] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.516361][T30943] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.526058][T30943] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.536591][T30943] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.549233][T30943] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.559010][T30943] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.600051][T30943] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.623851][T30943] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.632855][T30943] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.654249][T30943] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.693543][T30943] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.702493][T30943] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.739778][ T777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.750229][ T775] nbd: socks must be embedded in a SOCK_ITEM attr [ 828.389447][ T810] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 828.512443][ T814] wlan1 speed is unknown, defaulting to 1000 [ 828.536050][ T814] wg1 speed is unknown, defaulting to 1000 [ 828.871642][ T833] tipc: Enabling of bearer rejected, already enabled [ 828.946831][ T832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.991768][ T833] tipc: Resetting bearer [ 829.075352][ T840] Cannot find set identified by id 3 to match [ 829.416299][ T814] lo speed is unknown, defaulting to 1000 [ 829.790546][ T865] bond8: entered promiscuous mode [ 829.809831][ T865] bond8: entered allmulticast mode [ 829.831618][ T865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 830.010239][ T878] veth0_virt_wifi: entered promiscuous mode [ 830.019094][ T878] veth0_virt_wifi: entered allmulticast mode [ 830.128236][ T841] tipc: Resetting bearer [ 830.149299][ T884] syzkaller0: entered promiscuous mode [ 830.156389][ T884] syzkaller0: entered allmulticast mode [ 830.188651][ T814] lo speed is unknown, defaulting to 1000 [ 830.241871][ T884] tipc: Enabled bearer , priority 0 [ 830.292624][ T883] tipc: Resetting bearer [ 830.376332][ T883] tipc: Disabling bearer [ 830.634160][ T900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.825621][ T914] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 830.828328][ T911] IPVS: stopping backup sync thread 914 ... [ 830.988146][ T920] syzkaller1: entered promiscuous mode [ 831.005534][ T920] syzkaller1: entered allmulticast mode [ 831.121168][ T936] netlink: 'syz.4.7189': attribute type 4 has an invalid length. [ 831.144958][ T920] syzkaller0: entered promiscuous mode [ 831.150668][ T920] syzkaller0: entered allmulticast mode [ 831.171131][ T933] __nla_validate_parse: 87 callbacks suppressed [ 831.171150][ T933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7190'. [ 831.187797][ T942] netlink: 'syz.4.7189': attribute type 4 has an invalid length. [ 831.207060][ T933] tipc: Enabling of bearer rejected, failed to enable media [ 831.265261][ T938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7190'. [ 831.395172][ T953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7191'. [ 833.998668][ T996] netlink: 'syz.1.7192': attribute type 13 has an invalid length. [ 834.107024][ T996] netlink: 'syz.1.7192': attribute type 13 has an invalid length. [ 834.375881][ T1021] xt_limit: Overflow, try lower: 31324/2147483648 [ 834.432377][ T1010] xt_limit: Overflow, try lower: 31324/2147483648 [ 834.550179][ T1026] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7199'. [ 834.856317][ T1050] netlink: 'syz.1.7203': attribute type 3 has an invalid length. [ 834.863412][ T1052] netlink: 'syz.2.7205': attribute type 1 has an invalid length. [ 834.884492][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7205'. [ 834.904126][ T1050] netlink: 'syz.1.7203': attribute type 3 has an invalid length. [ 834.906130][ T1052] netlink: 658 bytes leftover after parsing attributes in process `syz.2.7205'. [ 834.927926][ T1050] netlink: zone id is out of range [ 834.933133][ T1050] netlink: zone id is out of range [ 834.941079][ T1052] netlink: 'syz.2.7205': attribute type 1 has an invalid length. [ 834.959759][ T1050] netlink: zone id is out of range [ 834.992066][ T1050] netlink: zone id is out of range [ 835.000165][ T1050] netlink: zone id is out of range [ 835.023902][ T1050] netlink: zone id is out of range [ 835.029107][ T1050] netlink: zone id is out of range [ 835.089891][ T1050] netlink: zone id is out of range [ 835.163292][ T1050] netlink: zone id is out of range [ 835.168493][ T1050] netlink: zone id is out of range [ 835.517310][ T1052] wlan1 speed is unknown, defaulting to 1000 [ 835.584751][ T1052] wg1 speed is unknown, defaulting to 1000 [ 835.968439][ T1100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7212'. [ 836.027599][ T1106] ip6t_REJECT: ECHOREPLY is not supported [ 836.271793][ T1114] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7215'. [ 836.384051][ T1052] lo speed is unknown, defaulting to 1000 [ 836.774816][ T1138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7221'. [ 836.811423][ T1140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7222'. [ 836.848045][ T1138] ip6tnl0: Caught tx_queue_len zero misconfig [ 836.998962][ T1147] netlink: 'syz.3.7223': attribute type 1 has an invalid length. [ 837.029029][ T1052] lo speed is unknown, defaulting to 1000 [ 837.334933][ T1164] wlan1 speed is unknown, defaulting to 1000 [ 837.373235][ T1164] wg1 speed is unknown, defaulting to 1000 [ 837.720408][ T1180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7228'. [ 837.842318][ T1180] vlan2: entered promiscuous mode [ 837.864532][ T1180] ip6gretap0: entered promiscuous mode [ 838.014738][T29645] Bluetooth: hci3: command 0x0405 tx timeout [ 838.339622][ T1202] pimreg: entered allmulticast mode [ 838.372011][ T1164] lo speed is unknown, defaulting to 1000 [ 838.396032][ T1202] pimreg: left allmulticast mode [ 838.717035][ T1211] syzkaller0: entered promiscuous mode [ 838.734324][ T1211] syzkaller0: entered allmulticast mode [ 839.087917][ T1239] netlink: 'syz.1.7240': attribute type 1 has an invalid length. [ 839.102820][ T1239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7240'. [ 839.130833][ T1240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7241'. [ 839.174179][ T1240] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7241'. [ 839.452447][T25556] lec:lec_start_xmit: lec0:No lecd attached [ 841.312402][ T1164] lo speed is unknown, defaulting to 1000 [ 841.327386][ T1246] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 841.336455][ T1246] bridge4: entered allmulticast mode [ 841.427196][ T1268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7243'. [ 841.437388][ T1268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7243'. [ 841.697858][ T1288] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7246'. [ 841.801989][ T1299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 841.809342][ T1299] IPv6: NLM_F_CREATE should be set when creating new route [ 841.816784][ T1299] IPv6: NLM_F_CREATE should be set when creating new route [ 841.832178][ T1299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7248'. [ 841.959831][ T1284] wlan1 speed is unknown, defaulting to 1000 [ 841.988572][ T1284] wg1 speed is unknown, defaulting to 1000 [ 842.027120][ T1310] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7247'. [ 842.432823][ T1316] lo: Caught tx_queue_len zero misconfig [ 842.692881][ T1322] netlink: 'syz.1.7250': attribute type 9 has an invalid length. [ 842.750073][ T1284] lo speed is unknown, defaulting to 1000 [ 842.847867][ T1330] 8021q: VLANs not supported on ip6_vti0 [ 842.916666][ T1334] netlink: 'syz.0.7252': attribute type 11 has an invalid length. [ 843.127531][ T1342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7254'. [ 843.153537][ T1342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7254'. [ 843.181414][ T1345] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7251'. [ 843.364383][ T1349] netlink: 'syz.1.7255': attribute type 13 has an invalid length. [ 843.385072][ T1349] bond0: Caught tx_queue_len zero misconfig [ 843.548656][ T1284] lo speed is unknown, defaulting to 1000 [ 844.068063][ T1330] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 844.160368][ T1372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7260'. [ 844.925518][ T1391] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7262'. [ 845.053253][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 845.061421][ C0] lec:lec_tx_timeout: lec0 [ 845.828095][ T1427] net_ratelimit: 34 callbacks suppressed [ 845.828117][ T1427] openvswitch: netlink: Key type 2064 is out of range max 32 [ 846.146967][ T1438] wlan1 speed is unknown, defaulting to 1000 [ 846.198667][ T1438] wg1 speed is unknown, defaulting to 1000 [ 846.274283][ T1461] netlink: 'syz.3.7277': attribute type 1 has an invalid length. [ 846.578659][ T1472] __nla_validate_parse: 1 callbacks suppressed [ 846.578681][ T1472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7278'. [ 846.616718][ T1474] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7280'. [ 846.642700][ T1438] lo speed is unknown, defaulting to 1000 [ 846.887502][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7283'. [ 846.931427][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7283'. [ 847.375499][ T1510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7287'. [ 847.386526][ T1510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7287'. [ 847.395960][ T1510] netlink: 'syz.3.7287': attribute type 14 has an invalid length. [ 847.404174][ T1510] netlink: 'syz.3.7287': attribute type 13 has an invalid length. [ 849.134286][ T5202] block nbd2: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 150 seconds [ 849.145256][ T5202] block nbd2: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 150 seconds [ 849.156597][ T5202] block nbd2: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 150 seconds [ 849.168309][ T5202] block nbd2: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 150 seconds [ 849.360091][ T1507] netlink: 'syz.2.7286': attribute type 49 has an invalid length. [ 849.371307][ T1438] lo speed is unknown, defaulting to 1000 [ 849.508914][ T1522] netlink: 'syz.3.7290': attribute type 3 has an invalid length. [ 849.545033][ T1520] tipc: Enabled bearer , priority 0 [ 849.728761][ T1520] syzkaller0: entered promiscuous mode [ 849.745990][ T1520] syzkaller0: entered allmulticast mode [ 849.756304][ T1520] tipc: Resetting bearer [ 849.781837][ T1530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7292'. [ 849.800000][ T1520] tipc: Resetting bearer [ 849.971206][ T1551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7296'. [ 850.353844][ T1554] IPVS: fo: FWM 3 0x00000003 - no destination available [ 852.008515][T30952] tipc: Resetting bearer [ 852.025707][ T5819] tipc: Node number set to 3312955744 [ 852.049413][ T1519] tipc: Resetting bearer [ 852.075284][ T1519] tipc: Disabling bearer [ 852.110967][ T1564] xt_hashlimit: max too large, truncated to 1048576 [ 852.263120][ T1570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.506627][ T1574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7302'. [ 852.537597][ T1574] bridge0: port 2(batadv2) entered blocking state [ 852.553393][ T1574] bridge0: port 2(batadv2) entered disabled state [ 852.560057][ T1574] batadv2: entered allmulticast mode [ 852.602567][ T1574] batadv2: entered promiscuous mode [ 852.838327][ T1583] netlink: 'syz.0.7305': attribute type 9 has an invalid length. [ 852.848061][ T1583] netlink: 'syz.0.7305': attribute type 11 has an invalid length. [ 852.862229][ T1583] netlink: 204124 bytes leftover after parsing attributes in process `syz.0.7305'. [ 852.878958][ T1584] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 852.959682][ T1587] sctp: [Deprecated]: syz.1.7306 (pid 1587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 852.959682][ T1587] Use struct sctp_sack_info instead [ 853.023378][T30957] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 853.032702][T30957] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 853.080273][ T1589] netlink: 175008 bytes leftover after parsing attributes in process `syz.0.7307'. [ 853.158963][ T1594] : renamed from team_slave_1 [ 853.569937][ T1611] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 853.672575][ T1614] wlan1 speed is unknown, defaulting to 1000 [ 853.686522][ T1614] wg1 speed is unknown, defaulting to 1000 [ 854.258249][ T1614] lo speed is unknown, defaulting to 1000 [ 854.259886][ T1652] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7327'. [ 854.501675][ T1661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7331'. [ 854.547094][ T1661] bond3: entered promiscuous mode [ 854.555062][ T1661] 8021q: adding VLAN 0 to HW filter on device bond3 [ 854.611615][ T1671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7334'. [ 854.691353][ T1669] netlink: 548 bytes leftover after parsing attributes in process `syz.0.7331'. [ 854.855988][ T1614] lo speed is unknown, defaulting to 1000 [ 854.914054][ T1687] delete_channel: no stack [ 854.921464][ T1692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7340'. [ 854.931108][ T1687] delete_channel: no stack [ 854.981286][ T1694] tipc: Enabled bearer , priority 0 [ 855.122238][ T1694] syzkaller0: entered promiscuous mode [ 855.163249][ T1694] syzkaller0: entered allmulticast mode [ 855.169480][ T1694] tipc: Resetting bearer [ 855.325127][T30943] tipc: Resetting bearer [ 855.351374][ T1694] tipc: Resetting bearer [ 857.552669][ T1694] tipc: Disabling bearer [ 857.575452][ T1715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7345'. [ 857.593487][ T1715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7345'. [ 857.603792][ T1715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.797694][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 857.808726][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 857.820899][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 857.839321][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 857.857698][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 857.869844][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 857.881075][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 857.900537][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 857.936543][ T1732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.949312][ T1732] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.959794][ T1732] batman_adv: batadv0: Interface activated: dummy0 [ 857.966898][ T1732] batadv0: mtu less than device minimum [ 857.974068][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 857.985952][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 857.997897][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 858.009877][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 858.021814][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 858.033661][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 858.045585][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 858.057482][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 858.069288][ T1732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 858.128520][T30957] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 858.142499][T30957] bond0: now running without any active interface! [ 858.684422][ T1759] Bluetooth: MGMT ver 1.23 [ 859.566070][ T1778] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 859.629271][ T1775] 8021q: adding VLAN 0 to HW filter on device bond10 [ 859.656801][ T1785] syzkaller0: entered promiscuous mode [ 859.662358][ T1785] syzkaller0: entered allmulticast mode [ 860.215950][ T1823] netlink: 'syz.1.7369': attribute type 3 has an invalid length. [ 860.932601][ T1845] macsec1: entered promiscuous mode [ 860.938485][ T1845] macsec1: entered allmulticast mode [ 861.146161][ T1852] wlan1 speed is unknown, defaulting to 1000 [ 861.154086][ T1852] wg1 speed is unknown, defaulting to 1000 [ 861.181760][ T1854] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 861.190458][ T1854] netlink: 'syz.4.7379': attribute type 1 has an invalid length. [ 861.236053][ T1854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.337813][ T1852] lo speed is unknown, defaulting to 1000 [ 861.497749][ T1852] lo speed is unknown, defaulting to 1000 [ 862.763644][ T1793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 862.931680][ T1859] netlink: 'syz.0.7380': attribute type 49 has an invalid length. [ 863.058173][ T1863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.077887][ T1863] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.090966][ T1863] net_ratelimit: 12 callbacks suppressed [ 863.090979][ T1863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 863.148102][ T1874] ip6_vti0: Caught tx_queue_len zero misconfig [ 863.216539][ T1871] wlan1 speed is unknown, defaulting to 1000 [ 863.251400][ T1871] wg1 speed is unknown, defaulting to 1000 [ 863.257809][ T1878] wlan1 speed is unknown, defaulting to 1000 [ 863.268834][ T1878] wg1 speed is unknown, defaulting to 1000 [ 866.505243][ T1871] lo speed is unknown, defaulting to 1000 [ 866.633618][ T1888] wlan1 speed is unknown, defaulting to 1000 [ 866.662106][ T1888] wg1 speed is unknown, defaulting to 1000 [ 866.865694][ T1904] __nla_validate_parse: 19 callbacks suppressed [ 866.865718][ T1904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7393'. [ 866.900707][ T1904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7393'. [ 867.026298][ T1871] lo speed is unknown, defaulting to 1000 [ 867.037975][ T1878] lo speed is unknown, defaulting to 1000 [ 867.181146][ T1910] netlink: 'syz.4.7394': attribute type 2 has an invalid length. [ 867.199667][ T1912] netlink: 'syz.4.7394': attribute type 2 has an invalid length. [ 867.225793][ T1910] !9: entered promiscuous mode [ 867.623450][ T1923] wlan1 speed is unknown, defaulting to 1000 [ 867.651434][ T1927] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 867.663643][ T1923] wg1 speed is unknown, defaulting to 1000 [ 867.673331][ T1888] lo speed is unknown, defaulting to 1000 [ 867.759863][ T1878] lo speed is unknown, defaulting to 1000 [ 868.119568][ T1923] lo speed is unknown, defaulting to 1000 [ 868.385566][ T1888] lo speed is unknown, defaulting to 1000 [ 868.406275][ T1931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7400'. [ 870.541673][ T1931] kthread_run failed with err -4 [ 870.557303][ T1923] lo speed is unknown, defaulting to 1000 [ 870.631804][ T1936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7401'. [ 871.171673][ T1959] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7404'. [ 871.426537][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7406'. [ 871.478448][ T1967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7407'. [ 872.308765][ T1983] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 872.326837][ T1983] sctp: [Deprecated]: syz.0.7411 (pid 1983) Use of int in max_burst socket option deprecated. [ 872.326837][ T1983] Use struct sctp_assoc_value instead [ 875.381433][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 875.387716][ T1296] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 876.252452][ T2020] bond11: (slave bond_slave_1): Device is not our slave [ 876.268606][ T2020] bond11: option active_slave: invalid value (bond_slave_1) [ 876.287347][ T2020] bond11 (unregistering): Released all slaves [ 876.418895][ T2027] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 876.471400][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.481184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.505401][ T2027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7423'. [ 877.096623][ T2052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7432'. [ 877.194310][ T2059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7432'. [ 879.143833][ T5186] udevd[5186]: worker [29775] /devices/virtual/block/nbd2 timeout; kill it [ 879.154203][ T5186] udevd[5186]: seq 39188 '/devices/virtual/block/nbd2' killed [ 879.214264][ T5202] block nbd2: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 180 seconds [ 879.225420][ T5202] block nbd2: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 180 seconds [ 879.236669][ T5202] block nbd2: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 180 seconds [ 879.247952][ T5202] block nbd2: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 180 seconds [ 879.887185][ T2065] Bluetooth: MGMT ver 1.23 [ 879.960627][ T2052] batman_adv: batadv0: Interface deactivated: dummy0 [ 879.978932][ T2052] macsec1: left promiscuous mode [ 879.984732][ T2052] macsec1: left allmulticast mode [ 879.990707][ T2059] hsr_slave_0: left promiscuous mode [ 880.000881][ T2059] hsr_slave_1: left promiscuous mode [ 880.034292][ T2061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7435'. [ 880.190849][ T2070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7437'. [ 880.311626][ T2084] netlink: 'syz.4.7440': attribute type 29 has an invalid length. [ 880.320888][ T2084] netlink: 'syz.4.7440': attribute type 29 has an invalid length. [ 880.330476][ T2084] netlink: 500 bytes leftover after parsing attributes in process `syz.4.7440'. [ 881.053169][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 881.061300][ C0] lec:lec_tx_timeout: lec0 [ 881.370715][ T2137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7455'. [ 881.380490][ T2137] netlink: zone id is out of range [ 881.405398][ T2137] wlan1 speed is unknown, defaulting to 1000 [ 881.412937][ T2137] wg1 speed is unknown, defaulting to 1000 [ 881.568118][ T2137] lo speed is unknown, defaulting to 1000 [ 881.717567][ T2137] lo speed is unknown, defaulting to 1000 [ 883.557517][ T2099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.578502][ T2135] netlink: 'syz.4.7454': attribute type 1 has an invalid length. [ 883.603457][ T2135] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7454'. [ 883.783744][ T2145] tipc: Enabled bearer , priority 0 [ 883.801506][ T2145] syzkaller0: entered promiscuous mode [ 883.807686][ T2145] syzkaller0: entered allmulticast mode [ 883.849407][ T2145] tipc: Resetting bearer [ 883.877739][ T2144] tipc: Resetting bearer [ 883.921401][ T2144] tipc: Disabling bearer [ 884.131721][ T2167] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7464'. [ 884.184783][ T2182] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7464'. [ 884.187085][ T2173] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7464'. [ 884.207610][ T2181] netlink: 'syz.3.7465': attribute type 1 has an invalid length. [ 884.233371][ T2181] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7465'. [ 884.300240][ T2182] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7464'. [ 884.383213][ T2186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7467'. [ 884.744015][ T2204] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 888.164703][ T2245] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 888.194123][ T2246] syzkaller0: entered promiscuous mode [ 888.206917][ T2246] syzkaller0: entered allmulticast mode [ 891.497728][ T2282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7497'. [ 891.804969][ T2300] tipc: Enabled bearer , priority 0 [ 891.822418][ T2290] erspan0: entered promiscuous mode [ 891.839756][ T2305] netlink: 'syz.4.7503': attribute type 21 has an invalid length. [ 891.843390][ T2290] erspan0: entered allmulticast mode [ 891.896155][ T2290] tipc: Resetting bearer [ 891.926285][ T2308] tipc: Enabling of bearer rejected, failed to enable media [ 891.940843][ T2308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7504'. [ 891.950560][ T2289] tipc: Disabling bearer [ 892.030024][ T2312] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7506'. [ 892.070603][ T2312] syzkaller0: entered promiscuous mode [ 892.077520][ T2312] syzkaller0: entered allmulticast mode [ 892.270946][ T2321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 892.298895][ T2328] netlink: 'syz.3.7510': attribute type 66 has an invalid length. [ 892.340145][ T2328] netlink: 1311 bytes leftover after parsing attributes in process `syz.3.7510'. [ 892.530436][ T2348] netlink: 'syz.2.7515': attribute type 61 has an invalid length. [ 892.543299][ T2348] netlink: 'syz.2.7515': attribute type 3 has an invalid length. [ 892.780667][ T2354] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7517'. [ 893.205816][ T2366] xt_hashlimit: max too large, truncated to 1048576 [ 893.264043][ T2372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7520'. [ 893.315942][ T2372] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 893.338634][ T2375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7522'. [ 893.717700][ T2400] netlink: 'syz.0.7527': attribute type 18 has an invalid length. [ 893.735296][ T2400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7527'. [ 893.781836][ T2400] netlink: 'syz.0.7527': attribute type 18 has an invalid length. [ 893.808226][ T2403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7528'. [ 893.819566][ T2400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7527'. [ 893.841672][ T2403] net veth1_virt_wifi : renamed from virt_wifi0 [ 893.894366][ T2403] batadv1: entered promiscuous mode [ 893.903391][ T2403] batadv1: entered allmulticast mode [ 893.910065][ T2403] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 894.106905][ T2417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 895.458854][ T2500] netlink: 'syz.1.7551': attribute type 9 has an invalid length. [ 895.491168][ T2500] netlink: 'syz.1.7551': attribute type 11 has an invalid length. [ 895.508404][ T2500] netlink: 'syz.1.7551': attribute type 12 has an invalid length. [ 895.569559][ T2502] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 895.992587][ T2527] syzkaller1: entered promiscuous mode [ 896.016584][ T2527] syzkaller1: entered allmulticast mode [ 896.193689][ T2540] bond0: (slave syz_tun): Releasing backup interface [ 896.209783][ T2547] netlink: 'syz.4.7561': attribute type 1 has an invalid length. [ 896.226445][ T2547] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 896.432228][ T2557] wlan1 speed is unknown, defaulting to 1000 [ 896.519613][ T2557] wg1 speed is unknown, defaulting to 1000 [ 896.780923][ T2581] tunl0: Caught tx_queue_len zero misconfig [ 896.848167][ T2587] netlink: 'syz.2.7568': attribute type 1 has an invalid length. [ 896.898235][ T2587] nbd: must specify an index to disconnect [ 897.089306][ T2603] __nla_validate_parse: 9 callbacks suppressed [ 897.089328][ T2603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7571'. [ 897.121567][ T2605] netlink: 'syz.1.7573': attribute type 1 has an invalid length. [ 897.135931][ T2557] lo speed is unknown, defaulting to 1000 [ 897.154581][ T2603] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7571'. [ 897.179145][ T2603] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7571'. [ 897.245587][ T2607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7574'. [ 897.413532][ T2611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7576'. [ 897.422676][ T2611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7576'. [ 897.545150][ T2621] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7579'. [ 897.623760][ T2626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7579'. [ 897.758408][ T2557] lo speed is unknown, defaulting to 1000 [ 897.863555][ T2639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7583'. [ 897.903988][ T2638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7583'. [ 898.049878][ T2655] openvswitch: netlink: Flow actions attr not present in new flow. [ 898.712677][ T2684] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 899.039490][ T2699] netlink: 'syz.1.7600': attribute type 4 has an invalid length. [ 899.274901][ T2703] netlink: 'syz.3.7601': attribute type 1 has an invalid length. [ 902.159807][ T2705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.175778][ T2756] netlink: 'syz.2.7608': attribute type 1 has an invalid length. [ 902.214025][ T2756] __nla_validate_parse: 12 callbacks suppressed [ 902.214045][ T2756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7608'. [ 902.253704][ T2756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7608'. [ 902.286581][ T2756] netlink: 'syz.2.7608': attribute type 2 has an invalid length. [ 902.312432][ T2756] netlink: 'syz.2.7608': attribute type 2 has an invalid length. [ 902.322825][ T2756] netlink: 'syz.2.7608': attribute type 2 has an invalid length. [ 902.418019][ T2784] netlink: 'syz.3.7615': attribute type 1 has an invalid length. [ 902.444129][ T2784] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7615'. [ 902.459556][T25556] lec:lec_start_xmit: lec0:No lecd attached [ 902.539152][ T2784] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7615'. [ 902.700382][ T2803] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7619'. [ 902.946833][ T2824] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7623'. [ 902.975456][ T2828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7625'. [ 903.067453][ T2830] wlan1 speed is unknown, defaulting to 1000 [ 903.103937][ T2840] lo: entered promiscuous mode [ 903.117483][ T2845] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 903.139017][ T2840] tunl0: entered promiscuous mode [ 903.167048][ T2840] gre0: entered promiscuous mode [ 903.182186][ T2840] erspan0: entered promiscuous mode [ 903.190741][ T2840] ip_vti0: entered promiscuous mode [ 903.200473][ T2830] wg1 speed is unknown, defaulting to 1000 [ 903.217242][ T2845] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 903.310540][ T2856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7628'. [ 903.328671][ T2857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7628'. [ 903.338589][ T2856] batadv2: left allmulticast mode [ 903.345349][ T2857] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7628'. [ 903.355282][ T2856] batadv2: left promiscuous mode [ 903.362673][ T2856] bridge0: port 2(batadv2) entered disabled state [ 903.382043][ T2856] team0: left allmulticast mode [ 903.387556][ T2856] team0: left promiscuous mode [ 903.392640][ T2856] vlan3: left promiscuous mode [ 903.433373][ T2856] veth0_to_bond: left promiscuous mode [ 903.450666][ T2856] bridge0: port 1(team0) entered disabled state [ 903.486358][ T2856] batadv1: left allmulticast mode [ 903.501717][ T2856] batadv1: left promiscuous mode [ 903.512236][ T2856] bridge0: port 3(batadv1) entered disabled state [ 903.669769][ T2830] lo speed is unknown, defaulting to 1000 [ 903.824748][ T2887] netlink: 'syz.3.7636': attribute type 3 has an invalid length. [ 904.294245][ T2830] lo speed is unknown, defaulting to 1000 [ 904.422739][ T2916] syzkaller0: entered promiscuous mode [ 904.443402][ T2916] syzkaller0: entered allmulticast mode [ 904.577560][ T2923] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 904.804370][ T2935] syzkaller0: entered promiscuous mode [ 904.822602][ T2935] syzkaller0: entered allmulticast mode [ 904.832471][ T2935] netlink: 'syz.2.7651': attribute type 309 has an invalid length. [ 904.889036][ T2939] netlink: 'syz.4.7652': attribute type 1 has an invalid length. [ 904.907750][ T2939] netlink: 'syz.4.7652': attribute type 2 has an invalid length. [ 904.919765][ T2938] netlink: 'syz.4.7652': attribute type 1 has an invalid length. [ 905.129404][ T2947] 6eth1_to_bond: renamed from ip6_vti0 (while UP) [ 905.178456][ T2947] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 905.416786][ T2958] nbd: must specify a size in bytes for the device [ 905.783090][ T2975] xt_cgroup: invalid path, errno=-2 [ 905.806575][ T2975] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 906.299664][ T2995] nbd: must specify at least one socket [ 906.299768][ T2984] wlan1 speed is unknown, defaulting to 1000 [ 906.395674][ T2984] wg1 speed is unknown, defaulting to 1000 [ 906.660630][ T3017] wlan1 speed is unknown, defaulting to 1000 [ 906.702742][ T3017] wg1 speed is unknown, defaulting to 1000 [ 906.731478][ T3025] block nbd6: Unsupported socket: should be TCP or UNIX. [ 907.200348][ T2984] lo speed is unknown, defaulting to 1000 [ 907.378588][ T3051] validate_nla: 2 callbacks suppressed [ 907.378610][ T3051] netlink: 'syz.2.7681': attribute type 1 has an invalid length. [ 907.485258][ T3051] bond11: entered promiscuous mode [ 907.491405][ T3051] 8021q: adding VLAN 0 to HW filter on device bond11 [ 907.672577][ T3058] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 907.696881][ T3058] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 907.722245][ T3058] bond11: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 907.772362][ T3017] lo speed is unknown, defaulting to 1000 [ 907.797952][ T30] audit: type=1800 audit(1771032215.823:27): pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7684" name="memory.events" dev="tmpfs" ino=1970 res=0 errno=0 [ 907.894347][ T2984] lo speed is unknown, defaulting to 1000 [ 908.013378][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 908.021440][ C0] lec:lec_tx_timeout: lec0 [ 908.191339][ T3077] __nla_validate_parse: 16 callbacks suppressed [ 908.191359][ T3077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7690'. [ 908.219566][ T3077] hsr0: entered promiscuous mode [ 908.224977][ T3077] macvlan2: entered allmulticast mode [ 908.252733][ T3077] hsr0: entered allmulticast mode [ 908.281015][ T3077] hsr_slave_0: entered allmulticast mode [ 908.299021][ T3077] hsr_slave_1: entered allmulticast mode [ 908.438428][ T3017] lo speed is unknown, defaulting to 1000 [ 908.575053][ T3090] tipc: Resetting bearer [ 908.723601][ T3096] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 908.883044][ T3110] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.7697'. [ 908.992908][ T3114] netlink: 'syz.0.7699': attribute type 1 has an invalid length. [ 909.271673][ T3125] netlink: 'syz.4.7701': attribute type 20 has an invalid length. [ 909.280853][ T3125] netlink: 'syz.4.7701': attribute type 21 has an invalid length. [ 909.289062][ T3125] IPv6: NLM_F_CREATE should be specified when creating new route [ 909.298019][ T5202] block nbd2: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 210 seconds [ 909.311909][ T5202] block nbd2: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 210 seconds [ 909.323332][ T5202] block nbd2: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 210 seconds [ 909.334490][ T5202] block nbd2: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 210 seconds [ 909.824403][ T3133] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 910.346691][ T3160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7709'. [ 910.359511][ T3160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7709'. [ 910.441246][ T3162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7710'. [ 910.763819][ T3176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7714'. [ 910.923549][ T3183] bond8: option arp_all_targets: invalid value (129) [ 910.935825][ T3183] bond8 (unregistering): Released all slaves [ 911.088968][ T3166] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 911.166042][ T3200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7718'. [ 911.205626][ T3200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7718'. [ 911.528066][T12845] IPVS: starting estimator thread 0... [ 911.534587][ T3223] veth1: entered promiscuous mode [ 911.539706][ T3223] veth1: entered allmulticast mode [ 911.581064][ T3223] netlink: 'syz.2.7723': attribute type 2 has an invalid length. [ 911.603803][ T3222] netlink: 'syz.2.7723': attribute type 2 has an invalid length. [ 911.636365][ T3227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7724'. [ 911.653631][ T3224] IPVS: using max 29 ests per chain, 69600 per kthread [ 911.690227][ T3227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 911.725975][ T3234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 911.770350][ T3242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7728'. [ 911.783696][ T3232] wlan1 speed is unknown, defaulting to 1000 [ 911.791565][ T3232] wg1 speed is unknown, defaulting to 1000 [ 911.989688][ T3254] netlink: 'syz.3.7730': attribute type 1 has an invalid length. [ 912.008080][ T3256] sch_fq: defrate 4294967293 ignored. [ 912.196399][ T3232] lo speed is unknown, defaulting to 1000 [ 912.632872][ T3290] tipc: Enabling of bearer rejected, already enabled [ 912.736808][ T3232] lo speed is unknown, defaulting to 1000 [ 912.906140][ T3293] netlink: 'syz.0.7740': attribute type 1 has an invalid length. [ 913.192767][ T3311] wlan1 speed is unknown, defaulting to 1000 [ 913.201442][ T3311] wg1 speed is unknown, defaulting to 1000 [ 913.482557][ T3324] openvswitch: netlink: Message has 592 unknown bytes. [ 913.500103][ T3325] __nla_validate_parse: 3 callbacks suppressed [ 913.500123][ T3325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7746'. [ 913.517104][ T3324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.546865][ T3328] netlink: 'syz.3.7747': attribute type 3 has an invalid length. [ 913.586101][ T3328] netlink: 'syz.3.7747': attribute type 3 has an invalid length. [ 913.886164][ T3311] lo speed is unknown, defaulting to 1000 [ 913.977291][ T3342] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7750'. [ 914.741623][ T3311] lo speed is unknown, defaulting to 1000 [ 914.784099][ T3344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7748'. [ 915.648262][ T3384] pim6reg1: entered allmulticast mode [ 915.702610][ T3396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7763'. [ 915.771077][ T3396] siw: device registration error -23 [ 915.972728][ T3402] gre0: entered promiscuous mode [ 915.985399][ T3402] gre0: entered allmulticast mode [ 916.000866][ T3406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7766'. [ 916.015015][ T3407] netlink: 'syz.2.7764': attribute type 21 has an invalid length. [ 916.041556][ T3407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7764'. [ 916.259835][ T3417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7767'. [ 916.466880][ T3424] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7769'. [ 916.775999][ T3439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7776'. [ 916.799784][ T3439] netlink: 580 bytes leftover after parsing attributes in process `syz.1.7776'. [ 916.908501][ T3442] netlink: 'syz.0.7778': attribute type 8 has an invalid length. [ 916.917143][ T3442] sch_fq: defrate 0 ignored. [ 916.961535][ T3448] netlink: 'syz.2.7780': attribute type 2 has an invalid length. [ 917.155232][ T3459] tipc: Enabled bearer , priority 0 [ 917.174468][ T3461] xt_l2tp: unknown flags: 51 [ 917.184303][ T3459] syzkaller0: entered promiscuous mode [ 917.194991][ T3461] netlink: 'syz.4.7784': attribute type 1 has an invalid length. [ 917.202816][ T3461] netlink: 'syz.4.7784': attribute type 2 has an invalid length. [ 917.205192][ T3459] syzkaller0: entered allmulticast mode [ 917.236117][ T3461] netlink: 'syz.4.7784': attribute type 1 has an invalid length. [ 917.321655][ T3459] tipc: Resetting bearer [ 917.363078][ T3455] tipc: Resetting bearer [ 917.424145][ T3455] tipc: Disabling bearer [ 917.439751][ T3476] netlink: 'syz.1.7789': attribute type 6 has an invalid length. [ 917.537460][ T3476] team_slave_0: Caught tx_queue_len zero misconfig [ 917.701758][ T3494] wlan1 speed is unknown, defaulting to 1000 [ 917.721482][ T3494] wg1 speed is unknown, defaulting to 1000 [ 917.827532][ T3495] syzkaller1: entered promiscuous mode [ 917.833090][ T3495] syzkaller1: entered allmulticast mode [ 917.963617][ T3501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 917.978819][ T3496] wlan1 speed is unknown, defaulting to 1000 [ 918.008985][ T3496] wg1 speed is unknown, defaulting to 1000 [ 918.026289][T30951] tipc: Subscription rejected, illegal request [ 918.068938][ T3506] bond5: (slave veth1): Enslaving as an active interface with a down link [ 918.265599][ T3501] bond5: entered allmulticast mode [ 918.273447][ T3494] lo speed is unknown, defaulting to 1000 [ 918.544289][ T3526] bridge_slave_1: left allmulticast mode [ 918.550015][ T3526] bridge_slave_1: left promiscuous mode [ 918.567509][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.590018][ T3531] validate_nla: 1 callbacks suppressed [ 918.590040][ T3531] netlink: 'syz.3.7801': attribute type 1 has an invalid length. [ 918.616069][ T3531] __nla_validate_parse: 7 callbacks suppressed [ 918.616089][ T3531] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7801'. [ 918.633817][ T3531] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7801'. [ 918.643814][ T3531] netlink: 'syz.3.7801': attribute type 1 has an invalid length. [ 918.663599][ T3531] netlink: 634 bytes leftover after parsing attributes in process `syz.3.7801'. [ 918.814121][T30940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.823089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.833540][ T3543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7804'. [ 918.935634][ T3496] lo speed is unknown, defaulting to 1000 [ 919.005989][ T3494] lo speed is unknown, defaulting to 1000 [ 919.336192][ T3566] netlink: 'syz.1.7810': attribute type 1 has an invalid length. [ 919.345063][ T3566] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7810'. [ 919.534298][T30951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.549687][T12846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.560367][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.574079][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.802457][ T3496] lo speed is unknown, defaulting to 1000 [ 920.007512][ T3589] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7818'. [ 920.035510][ T3589] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 920.069300][ T3591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7819'. [ 920.221187][ T3599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7820'. [ 920.256440][ T3596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7820'. [ 920.521400][ T3608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7824'. [ 920.548049][ T3604] wlan1 speed is unknown, defaulting to 1000 [ 920.556258][ T3604] wg1 speed is unknown, defaulting to 1000 [ 920.657998][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.745378][ T3614] netlink: 'syz.3.7826': attribute type 10 has an invalid length. [ 920.776522][ T3614] team0: Device veth1_macvtap failed to register rx_handler [ 920.884205][ T3616] netlink: 'syz.2.7827': attribute type 4 has an invalid length. [ 921.173097][ T3604] lo speed is unknown, defaulting to 1000 [ 921.707040][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.815952][ T3604] lo speed is unknown, defaulting to 1000 [ 922.735997][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.655684][T30948] net_ratelimit: 1 callbacks suppressed [ 924.655706][T30948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.669988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.842017][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.063708][ T3667] __nla_validate_parse: 8 callbacks suppressed [ 925.063728][ T3667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7840'. [ 925.080001][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7840'. [ 925.111829][ T3667] netlink: 'syz.2.7840': attribute type 14 has an invalid length. [ 925.128631][ T3667] netlink: 'syz.2.7840': attribute type 13 has an invalid length. [ 925.294366][T30948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.333880][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.348831][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.378778][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7843'. [ 925.732311][ T3692] netlink: 'syz.3.7848': attribute type 1 has an invalid length. [ 925.858993][ T3689] syzkaller0: entered promiscuous mode [ 925.864978][ T3689] syzkaller0: entered allmulticast mode [ 926.421757][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.453844][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.156176][ T3730] openvswitch: netlink: Message has 4 unknown bytes. [ 928.173395][ T3728] bond2: (slave lo): Releasing backup interface [ 928.188034][ T3731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7859'. [ 928.197173][ T3728] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 928.212635][ T3728] bridge_slave_0: left allmulticast mode [ 928.218549][ T3728] bridge_slave_0: left promiscuous mode [ 928.224481][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.243538][ T3728] bond0: (slave bond_slave_0): Releasing backup interface [ 928.265982][ T3728] bond0: (slave bond_slave_1): Releasing backup interface [ 928.298295][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.315458][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.342257][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.370667][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.379441][ T3747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7862'. [ 928.389437][ T3747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7862'. [ 928.411793][ T3728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 928.754929][ T3763] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7870'. [ 928.767894][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7871'. [ 929.086581][ T3786] netlink: 'syz.1.7878': attribute type 9 has an invalid length. [ 929.133556][ T3786] netlink: 'syz.1.7878': attribute type 6 has an invalid length. [ 929.260869][ T3786] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7878'. [ 929.274514][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7881'. [ 929.595627][ T3812] mac80211_hwsim hwsim69 syzkaller0: left promiscuous mode [ 929.603184][ T3812] mac80211_hwsim hwsim69 syzkaller0: left allmulticast mode [ 929.988975][ T3837] netlink: 'syz.1.7889': attribute type 28 has an invalid length. [ 930.057101][ T3841] net_ratelimit: 3 callbacks suppressed [ 930.057124][ T3841] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 930.091065][ T3835] __nla_validate_parse: 5 callbacks suppressed [ 930.091087][ T3835] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7888'. [ 930.162415][ T3841] team0: No ports can be present during mode change [ 930.189872][ T3845] netlink: 'syz.0.7893': attribute type 1 has an invalid length. [ 930.199039][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7893'. [ 930.211783][ T3829] dvmrp1: entered allmulticast mode [ 930.227495][ T3829] dvmrp1: left allmulticast mode [ 930.244999][ T3829] pimreg: left allmulticast mode [ 930.282007][ T3848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.361404][ T3852] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7898'. [ 930.372761][ T3853] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7898'. [ 930.429537][T30950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.438267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.573712][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.691941][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7900'. [ 931.038251][ T3883] mac80211_hwsim hwsim68 wlan0: Caught tx_queue_len zero misconfig [ 931.051638][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7902'. [ 931.314273][ T3894] xt_connbytes: Forcing CT accounting to be enabled [ 931.339433][ T3895] xt_connbytes: Forcing CT accounting to be enabled [ 931.359675][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7910'. [ 931.535856][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7912'. [ 931.624228][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.673543][ T3919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7915'. [ 931.806859][ T3924] netlink: 'syz.1.7917': attribute type 4 has an invalid length. [ 931.837841][ T3924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.885544][ T3924] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7917'. [ 932.255976][ T3954] syzkaller1: entered promiscuous mode [ 932.281374][ T3954] syzkaller1: entered allmulticast mode [ 932.539811][ T3976] tipc: Enabled bearer , priority 0 [ 932.553613][ T3976] syzkaller0: entered promiscuous mode [ 932.563971][ T3976] syzkaller0: entered allmulticast mode [ 932.649640][ T3976] tipc: Resetting bearer [ 932.656815][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.678557][ T3975] tipc: Resetting bearer [ 932.913906][ T3975] tipc: Disabling bearer [ 933.121810][ T3996] FAULT_INJECTION: forcing a failure. [ 933.121810][ T3996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.143644][ T3996] CPU: 1 UID: 0 PID: 3996 Comm: syz.1.7935 Not tainted syzkaller #0 PREEMPT(full) [ 933.143677][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 933.143692][ T3996] Call Trace: [ 933.143702][ T3996] [ 933.143712][ T3996] dump_stack_lvl+0xe8/0x150 [ 933.143746][ T3996] should_fail_ex+0x412/0x560 [ 933.143784][ T3996] _copy_from_user+0x2d/0xb0 [ 933.143808][ T3996] ___sys_sendmsg+0x1c6/0x360 [ 933.143837][ T3996] ? __lock_acquire+0x6b5/0x2cf0 [ 933.143867][ T3996] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.143935][ T3996] ? __fget_files+0x2a/0x420 [ 933.143956][ T3996] ? __fget_files+0x3a0/0x420 [ 933.143989][ T3996] __x64_sys_sendmsg+0x1bd/0x2a0 [ 933.144021][ T3996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 933.144060][ T3996] ? __pfx_ksys_write+0x10/0x10 [ 933.144101][ T3996] do_syscall_64+0x14d/0xf80 [ 933.144129][ T3996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.144150][ T3996] ? trace_irq_disable+0x37/0x100 [ 933.144176][ T3996] ? clear_bhb_loop+0x40/0x90 [ 933.144202][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.144224][ T3996] RIP: 0033:0x7f865f19bf79 [ 933.144244][ T3996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.144263][ T3996] RSP: 002b:00007f86600fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.144287][ T3996] RAX: ffffffffffffffda RBX: 00007f865f415fa0 RCX: 00007f865f19bf79 [ 933.144303][ T3996] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 933.144318][ T3996] RBP: 00007f86600fb090 R08: 0000000000000000 R09: 0000000000000000 [ 933.144332][ T3996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.144355][ T3996] R13: 00007f865f416038 R14: 00007f865f415fa0 R15: 00007ffe5f6f92d8 [ 933.144391][ T3996] [ 933.571725][ T4004] netlink: 'syz.0.7936': attribute type 2 has an invalid length. [ 933.694948][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.734637][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.784795][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.174410][T30948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.182885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.705900][ T4020] netlink: 'syz.3.7942': attribute type 28 has an invalid length. [ 936.726592][ T4021] netlink: 'syz.4.7943': attribute type 1 has an invalid length. [ 936.735797][ T4020] netlink: 'syz.3.7942': attribute type 3 has an invalid length. [ 936.744372][ T4021] __nla_validate_parse: 2 callbacks suppressed [ 936.744392][ T4021] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7943'. [ 936.764462][ T4020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7942'. [ 936.803457][ T4021] netlink: 'syz.4.7943': attribute type 1 has an invalid length. [ 936.821494][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.824711][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 936.837297][ T1296] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 936.886808][ T4021] netlink: 'syz.4.7943': attribute type 8 has an invalid length. [ 936.915881][ T4021] netlink: 606 bytes leftover after parsing attributes in process `syz.4.7943'. [ 936.939636][ T4035] wlan1 speed is unknown, defaulting to 1000 [ 936.950877][ T4035] wg1 speed is unknown, defaulting to 1000 [ 937.575943][ T4035] lo speed is unknown, defaulting to 1000 [ 937.690832][ T4083] ip6gretap2: entered promiscuous mode [ 937.829312][ T4088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 937.853478][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.066923][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7960'. [ 938.284111][ T4035] lo speed is unknown, defaulting to 1000 [ 938.377760][ T4113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.403825][ T4113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.739664][ T4122] syzkaller0: entered promiscuous mode [ 938.745584][ T4122] syzkaller0: entered allmulticast mode [ 938.894565][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.375120][ T5202] block nbd2: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 240 seconds [ 939.388213][ T5202] block nbd2: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 240 seconds [ 939.399630][ T5202] block nbd2: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 240 seconds [ 939.410852][ T5202] block nbd2: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 240 seconds [ 939.933745][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.984395][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.215173][ T4149] netlink: 'syz.2.7972': attribute type 1 has an invalid length. [ 941.369068][ T4149] bond13: entered promiscuous mode [ 941.392396][ T4149] 8021q: adding VLAN 0 to HW filter on device bond13 [ 941.609866][ T4158] 8021q: adding VLAN 0 to HW filter on device bond13 [ 941.625292][ T4158] bond13: (slave vcan1): The slave device specified does not support setting the MAC address [ 941.636145][ T4158] bond13: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 941.679826][ T4158] bond13: (slave vcan1): making interface the new active one [ 941.688495][ T4158] vcan1: entered promiscuous mode [ 941.698344][ T4158] bond13: (slave vcan1): Enslaving as an active interface with an up link [ 941.937623][T30948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.946098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.993554][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7979'. [ 942.013215][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 942.019940][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.021278][ C0] lec:lec_tx_timeout: lec0 [ 942.132615][ T4178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 942.147263][ T4178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7979'. [ 942.147850][ T4185] netlink: 'syz.4.7981': attribute type 29 has an invalid length. [ 942.201219][ T4185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7981'. [ 942.240607][ T4187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7983'. [ 942.328120][ T4189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7984'. [ 942.347921][ T4189] openvswitch: netlink: Flow key attr not present in new flow. [ 942.486323][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7988'. [ 942.497360][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7988'. [ 942.670782][ T4216] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 942.873924][ T4223] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7995'. [ 942.903744][ T4223] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7995'. [ 943.009126][ T4236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7997'. [ 943.053731][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.093662][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.136827][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.857406][ T4226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 946.033188][ T4281] tipc: Enabled bearer , priority 14 [ 946.054988][ T4281] 0X: renamed from caif0 [ 946.076815][ T4281] tipc: Disabling bearer [ 946.085314][ T4281] 0X: entered allmulticast mode [ 946.090595][ T4281] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 946.174580][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.298692][ T4300] ip6gretap0: entered promiscuous mode [ 946.326538][ T4300] erspan0: entered promiscuous mode [ 946.332411][ T4300] debugfs: 'hsr1' already exists in 'hsr' [ 946.342600][ T4300] Cannot create hsr debugfs directory [ 946.364163][ T4307] IPv6: NLM_F_CREATE should be specified when creating new route [ 946.556293][ T4322] netlink: 'syz.3.8023': attribute type 3 has an invalid length. [ 946.587640][ T4325] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.598165][ T4325] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.673958][ T4329] netlink: 'syz.3.8025': attribute type 1 has an invalid length. [ 946.700894][ T4330] netlink: 'syz.2.8024': attribute type 46 has an invalid length. [ 946.765076][ T4325] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.798818][ T4325] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.874251][ T4325] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.884293][ T4325] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.959814][ T4346] macvlan0: entered promiscuous mode [ 946.968069][ T4346] batadv0: entered promiscuous mode [ 946.978129][ T4346] debugfs: 'hsr2' already exists in 'hsr' [ 946.985407][ T4346] Cannot create hsr debugfs directory [ 946.996237][ T4325] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.009499][ T4325] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.198774][ T63] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.208277][ T63] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.218558][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.299291][ T63] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.315577][ T63] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.404952][ T63] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.419670][ T63] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.540868][T30940] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.549473][T30940] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.679249][ T4373] netlink: 'syz.2.8039': attribute type 1 has an invalid length. [ 947.694079][T30940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.702484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.964701][ T4385] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 948.035015][ T4385] bond8 (unregistering): Released all slaves [ 948.090158][ T4394] __nla_validate_parse: 8 callbacks suppressed [ 948.090179][ T4394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8046'. [ 948.254566][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.266422][ T4405] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8048'. [ 948.289992][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8043'. [ 948.311749][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8047'. [ 948.468164][ T4411] ip6tnl0: Caught tx_queue_len zero misconfig [ 948.559396][ T4415] IPv6: NLM_F_REPLACE set, but no existing node found! [ 948.785951][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8058'. [ 948.859575][ T4442] z1: renamed from wg2 [ 948.900639][ T4436] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8058'. [ 948.999254][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8060'. [ 949.025564][ T4448] netlink: 'syz.0.8060': attribute type 5 has an invalid length. [ 949.045074][ T4448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8060'. [ 949.065396][ T4450] netlink: 'syz.1.8062': attribute type 1 has an invalid length. [ 949.093966][ T4448] geneve0: entered promiscuous mode [ 949.104065][ T4448] geneve0: entered allmulticast mode [ 949.120512][ T63] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 949.133575][ T63] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 949.160655][ T63] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 949.174882][ T4452] tipc: Enabled bearer , priority 0 [ 949.188346][ T4452] syzkaller0: entered promiscuous mode [ 949.203495][ T4452] syzkaller0: entered allmulticast mode [ 949.219998][ T63] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 949.300375][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.363909][ T4459] tipc: Resetting bearer [ 949.375340][ T4469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8068'. [ 949.403464][ T4459] tipc: Disabling bearer [ 949.418626][ T4468] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 949.434328][ T4468] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 949.468240][ T4472] netlink: 'syz.4.8067': attribute type 3 has an invalid length. [ 949.476890][ T4472] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8067'. [ 949.723812][ T4480] netlink: 'syz.3.8071': attribute type 5 has an invalid length. [ 949.831005][ T4490] netlink: 'syz.3.8076': attribute type 6 has an invalid length. [ 949.839440][ T4490] netlink: 'syz.3.8076': attribute type 5 has an invalid length. [ 949.910988][T30948] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.947603][T30948] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.989184][T30948] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.002786][T30948] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.334576][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.463072][ T4522] x_tables: unsorted entry at hook 3 [ 951.012922][ T4557] wlan1 speed is unknown, defaulting to 1000 [ 951.021679][ T4557] wg1 speed is unknown, defaulting to 1000 [ 951.361965][ T4557] lo speed is unknown, defaulting to 1000 [ 951.374934][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.629444][ T4557] lo speed is unknown, defaulting to 1000 [ 952.443211][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.454759][T30952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.463273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.471422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.793846][ T4546] nbd: socks must be embedded in a SOCK_ITEM attr [ 953.800371][ T4546] block nbd6: shutting down sockets [ 954.049462][ T4568] veth0_to_team: entered promiscuous mode [ 954.058856][ T4568] netlink: 'syz.1.8098': attribute type 1 has an invalid length. [ 954.105266][ T4568] bond4: entered promiscuous mode [ 954.113811][ T4568] bond4: entered allmulticast mode [ 954.119530][ T4568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 954.176178][ T4579] erspan1: entered allmulticast mode [ 954.269804][ T4588] __nla_validate_parse: 9 callbacks suppressed [ 954.269827][ T4588] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8104'. [ 954.298891][ T4579] bond4: (slave erspan1): making interface the new active one [ 954.316299][ T4579] erspan1: entered promiscuous mode [ 954.323880][ T4579] [ 954.326259][ T4579] ============================================ [ 954.332438][ T4579] WARNING: possible recursive locking detected [ 954.338630][ T4579] syzkaller #0 Not tainted [ 954.343088][ T4579] -------------------------------------------- [ 954.349447][ T4579] syz.1.8098/4579 is trying to acquire lock: [ 954.355460][ T4579] ffff88807c188158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 954.365386][ T4579] [ 954.365386][ T4579] but task is already holding lock: [ 954.372798][ T4579] ffff88807b181d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 954.382793][ T4579] [ 954.382793][ T4579] other info that might help us debug this: [ 954.390886][ T4579] Possible unsafe locking scenario: [ 954.390886][ T4579] [ 954.398551][ T4579] CPU0 [ 954.401970][ T4579] ---- [ 954.405287][ T4579] lock(&qdisc_xmit_lock_key#4); [ 954.410485][ T4579] lock(&qdisc_xmit_lock_key#4); [ 954.415568][ T4579] [ 954.415568][ T4579] *** DEADLOCK *** [ 954.415568][ T4579] [ 954.423747][ T4579] May be due to missing lock nesting notation [ 954.423747][ T4579] [ 954.432127][ T4579] 9 locks held by syz.1.8098/4579: [ 954.437273][ T4579] #0: ffffffff90123948 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 954.446850][ T4579] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 954.455976][ T4579] #2: ffffffff8e75e100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 954.465996][ T4579] #3: ffff888051e26228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 954.478782][ T4579] #4: ffff88807b181d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 954.489185][ T4579] #5: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 954.497441][ T4595] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 954.498129][ T4579] #6: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 954.518385][ T4579] #7: ffffffff8e75e100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 954.528406][ T4579] #8: ffff8880804d0228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 954.541123][ T4579] [ 954.541123][ T4579] stack backtrace: [ 954.547051][ T4579] CPU: 1 UID: 0 PID: 4579 Comm: syz.1.8098 Not tainted syzkaller #0 PREEMPT(full) [ 954.547080][ T4579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 954.547095][ T4579] Call Trace: [ 954.547103][ T4579] [ 954.547113][ T4579] dump_stack_lvl+0xe8/0x150 [ 954.547145][ T4579] print_deadlock_bug+0x279/0x290 [ 954.547176][ T4579] __lock_acquire+0x253f/0x2cf0 [ 954.547203][ T4579] ? skb_network_protocol+0x23d/0x3f0 [ 954.547235][ T4579] ? netif_skb_features+0x9bc/0xe40 [ 954.547269][ T4579] ? sch_direct_xmit+0x15f/0x4c0 [ 954.547300][ T4579] lock_acquire+0x106/0x330 [ 954.547320][ T4579] ? sch_direct_xmit+0x15f/0x4c0 [ 954.547360][ T4579] _raw_spin_lock+0x2e/0x40 [ 954.547383][ T4579] ? sch_direct_xmit+0x15f/0x4c0 [ 954.547413][ T4579] sch_direct_xmit+0x15f/0x4c0 [ 954.547458][ T4579] ? __pfx_sch_direct_xmit+0x10/0x10 [ 954.547496][ T4579] __dev_queue_xmit+0x1538/0x3850 [ 954.547533][ T4579] ? __dev_queue_xmit+0x274/0x3850 [ 954.547566][ T4579] ? neigh_resolve_output+0x438/0x750 [ 954.547588][ T4579] ? __pfx___dev_queue_xmit+0x10/0x10 [ 954.547617][ T4579] ? neigh_resolve_output+0x438/0x750 [ 954.547640][ T4579] ? eth_header+0x11b/0x200 [ 954.547665][ T4579] ? __asan_memcpy+0x40/0x70 [ 954.547703][ T4579] ? ip_finish_output2+0x3c2/0x1070 [ 954.547729][ T4579] ip_finish_output2+0xca9/0x1070 [ 954.547756][ T4579] ? ip_skb_dst_mtu+0x109/0xa50 [ 954.547784][ T4579] ? ip_finish_output+0x33a/0x3f0 [ 954.547810][ T4579] ip_output+0x29f/0x450 [ 954.547834][ T4579] ? ip_output+0x5b/0x450 [ 954.547858][ T4579] iptunnel_xmit+0x59f/0xa00 [ 954.547897][ T4579] ip_tunnel_xmit+0x193a/0x1f20 [ 954.547937][ T4579] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 954.547967][ T4579] ? __pfx_gre_build_header+0x10/0x10 [ 954.547994][ T4579] ? kmem_cache_free+0x180/0x610 [ 954.548021][ T4579] ? pskb_expand_head+0x356/0x1320 [ 954.548052][ T4579] __gre_xmit+0x19e/0x240 [ 954.548076][ T4579] ? __pfx___gre_xmit+0x10/0x10 [ 954.548106][ T4579] erspan_xmit+0xa81/0x1670 [ 954.548130][ T4579] ? __lock_acquire+0x146e/0x2cf0 [ 954.548161][ T4579] ? __pfx_erspan_xmit+0x10/0x10 [ 954.548193][ T4579] dev_hard_start_xmit+0x2cd/0x7f0 [ 954.548231][ T4579] sch_direct_xmit+0x251/0x4c0 [ 954.548266][ T4579] ? __pfx_sch_direct_xmit+0x10/0x10 [ 954.548296][ T4579] ? alb_fasten_mac_swap+0x639/0xf60 [ 954.548318][ T4579] ? bond_select_active_slave+0x850/0xd40 [ 954.548338][ T4579] ? bond_enslave+0x22a5/0x3c40 [ 954.548361][ T4579] __dev_queue_xmit+0x1538/0x3850 [ 954.548396][ T4579] ? __dev_queue_xmit+0x274/0x3850 [ 954.548438][ T4579] ? __pfx___dev_queue_xmit+0x10/0x10 [ 954.548471][ T4579] ? rcu_is_watching+0x15/0xb0 [ 954.548495][ T4579] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 954.548519][ T4579] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 954.548556][ T4579] ? alb_send_lp_vid+0x14e/0x550 [ 954.548580][ T4579] alb_send_lp_vid+0x348/0x550 [ 954.548603][ T4579] ? dev_addr_mod+0x354/0x520 [ 954.548631][ T4579] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 954.548657][ T4579] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 954.548682][ T4579] alb_send_learning_packets+0x12c/0x300 [ 954.548706][ T4579] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 954.548733][ T4579] ? alb_swap_mac_addr+0x230/0x340 [ 954.548759][ T4579] alb_fasten_mac_swap+0x639/0xf60 [ 954.548786][ T4579] bond_alb_handle_active_change+0xc6d/0xf30 [ 954.548812][ T4579] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 954.548850][ T4579] ? __local_bh_enable_ip+0xd0/0x130 [ 954.548877][ T4579] bond_change_active_slave+0x106e/0x35f0 [ 954.548907][ T4579] ? __pfx_bond_change_active_slave+0x10/0x10 [ 954.548940][ T4579] ? try_to_wake_up+0x7fc/0x1390 [ 954.548976][ T4579] ? __queue_work+0x1a1/0xf90 [ 954.549002][ T4579] ? __queue_work+0xc42/0xf90 [ 954.549029][ T4579] ? mod_delayed_work_on+0xdf/0x190 [ 954.549061][ T4579] bond_select_active_slave+0x909/0xd40 [ 954.549085][ T4579] ? __pfx_bond_select_active_slave+0x10/0x10 [ 954.549107][ T4579] ? __pfx_bond_set_carrier+0x10/0x10 [ 954.549139][ T4579] ? netdev_is_rx_handler_busy+0x56/0x120 [ 954.549169][ T4579] ? __pfx_bond_handle_frame+0x10/0x10 [ 954.549193][ T4579] bond_enslave+0x22a5/0x3c40 [ 954.549212][ T4579] ? sock_def_readable+0x2ff/0x530 [ 954.549258][ T4579] ? __pfx_bond_enslave+0x10/0x10 [ 954.549287][ T4579] ? __pfx___dev_notify_flags+0x10/0x10 [ 954.549311][ T4579] ? __dev_change_flags+0x51e/0x690 [ 954.549347][ T4579] ? mutex_is_locked+0x17/0x50 [ 954.549376][ T4579] do_set_master+0x533/0x6d0 [ 954.549406][ T4579] rtnl_newlink_create+0x6af/0xb70 [ 954.549444][ T4579] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 954.549471][ T4579] ? __pfx___mutex_lock+0x10/0x10 [ 954.549507][ T4579] ? ns_capable+0x89/0xe0 [ 954.549531][ T4579] rtnl_newlink+0x1666/0x1be0 [ 954.549562][ T4579] ? __pfx_rtnl_newlink+0x10/0x10 [ 954.549588][ T4579] ? __lock_acquire+0x6b5/0x2cf0 [ 954.549614][ T4579] ? __lock_acquire+0x6b5/0x2cf0 [ 954.549637][ T4579] ? __lock_acquire+0x6b5/0x2cf0 [ 954.549664][ T4579] ? unwind_next_frame+0xa5/0x23c0 [ 954.549695][ T4579] ? unwind_next_frame+0xa5/0x23c0 [ 954.549723][ T4579] ? is_bpf_text_address+0x26/0x2b0 [ 954.549757][ T4579] ? __lock_acquire+0x6b5/0x2cf0 [ 954.549781][ T4579] ? is_bpf_text_address+0x292/0x2b0 [ 954.549807][ T4579] ? is_bpf_text_address+0x26/0x2b0 [ 954.549835][ T4579] ? kernel_text_address+0xa5/0xe0 [ 954.549872][ T4579] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 954.549903][ T4579] ? __pfx_rtnl_newlink+0x10/0x10 [ 954.549925][ T4579] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 954.549950][ T4579] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 954.549971][ T4579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 954.549992][ T4579] ? __lock_acquire+0x6b5/0x2cf0 [ 954.550021][ T4579] netlink_rcv_skb+0x232/0x4b0 [ 954.550043][ T4579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 954.550067][ T4579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 954.550093][ T4579] ? netlink_deliver_tap+0x2e/0x1b0 [ 954.550118][ T4579] netlink_unicast+0x80f/0x9b0 [ 954.550154][ T4579] ? __pfx_netlink_unicast+0x10/0x10 [ 954.550186][ T4579] ? netlink_sendmsg+0x650/0xb40 [ 954.550205][ T4579] ? skb_put+0x11b/0x210 [ 954.550229][ T4579] netlink_sendmsg+0x813/0xb40 [ 954.550255][ T4579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.550285][ T4579] ? __se_sys_ioctl+0x47/0x170 [ 954.550318][ T4579] ? do_syscall_64+0x14d/0xf80 [ 954.550345][ T4579] ? aa_sock_msg_perm+0xf1/0x1b0 [ 954.550375][ T4579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 954.550412][ T4579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.550441][ T4579] ____sys_sendmsg+0xa68/0xad0 [ 954.550468][ T4579] ? __might_fault+0xaf/0x130 [ 954.550495][ T4579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.550524][ T4579] ? import_iovec+0x73/0xa0 [ 954.550546][ T4579] ___sys_sendmsg+0x2a5/0x360 [ 954.550571][ T4579] ? __lock_acquire+0x6b5/0x2cf0 [ 954.550595][ T4579] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.550627][ T4579] ? tomoyo_path_number_perm+0x219/0x630 [ 954.550670][ T4579] ? __fget_files+0x2a/0x420 [ 954.550690][ T4579] ? __fget_files+0x3a0/0x420 [ 954.550730][ T4579] __x64_sys_sendmsg+0x1bd/0x2a0 [ 954.550775][ T4579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.550802][ T4579] ? rcu_is_watching+0x15/0xb0 [ 954.550833][ T4579] ? __pfx_kcov_ioctl+0x10/0x10 [ 954.550864][ T4579] do_syscall_64+0x14d/0xf80 [ 954.550892][ T4579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.550913][ T4579] ? trace_irq_disable+0x37/0x100 [ 954.550938][ T4579] ? clear_bhb_loop+0x40/0x90 [ 954.550960][ T4579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.550980][ T4579] RIP: 0033:0x7f865f19bf79 [ 954.550999][ T4579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.551019][ T4579] RSP: 002b:00007f86600da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.551042][ T4579] RAX: ffffffffffffffda RBX: 00007f865f416090 RCX: 00007f865f19bf79 [ 954.551059][ T4579] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 954.551073][ T4579] RBP: 00007f865f2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 954.551088][ T4579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.551101][ T4579] R13: 00007f865f416128 R14: 00007f865f416090 R15: 00007ffe5f6f92d8 [ 954.551128][ T4579] [ 955.360869][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.376841][ T4579] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 955.415000][ T4580] syzkaller0: entered promiscuous mode [ 955.420567][ T4580] syzkaller0: entered allmulticast mode [ 955.546104][ T4603] syzkaller0: entered promiscuous mode [ 955.551737][ T4603] syzkaller0: entered allmulticast mode [ 955.632855][ T4603] syzkaller1: entered promiscuous mode [ 955.638427][ T4603] syzkaller1: entered allmulticast mode [ 956.415444][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.994792][ T4568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 957.455752][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.495288][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.214064][T30951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.222377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.535321][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.576093][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.615461][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.655344][T12845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.696599][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog