last executing test programs: 2.101092402s ago: executing program 2 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0xe}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000200)='gretap0\x00'}) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x100101, 0xe, 0x4, 0x7fffffff, 0x3, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$tipc(r10, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x380, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x3, 0x0, 0x41, 0xd2c, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x580) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESOCT=r3], 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x240080cd) 1.785653887s ago: executing program 1 (id=2971): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.783323712s ago: executing program 2 (id=2972): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x204, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff0}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d2b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x312}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000084}, 0x24008080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7, 0x7, 0x8c, 0x6d8, {{0x2c, 0x4, 0x1, 0x3, 0xb0, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @rr={0x7, 0xb, 0xe7, [@multicast1, @remote]}, @cipso={0x86, 0x4a, 0x0, [{0x2, 0x4, "6113"}, {0x6, 0xe, "89832fdc08e9f3a3c6098968"}, {0x5, 0xf, "7d7c2bb889684a552694830c49"}, {0x6, 0xe, "d2134374c450603c13d8565d"}, {0x0, 0x12, "bd9e05e50c885f01b92a17be8d2ad821"}, {0x1, 0x3, "c5"}]}, @noop, @timestamp={0x44, 0x14, 0x88, 0x0, 0x4, [0x2, 0x6, 0x0, 0x6]}, @cipso={0x86, 0x1e, 0x3, [{0x7, 0x8, "3c7c4f60d0ac"}, {0x2, 0x3, "b2"}, {0x7, 0xd, "3135219c9ed578a3152d3c"}]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0xc, 0x7b, 0x0, 0x4, [0x8, 0x9ff]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7, 0x7, 0x8c, 0x6d8, {{0x2c, 0x4, 0x1, 0x3, 0xb0, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @rr={0x7, 0xb, 0xe7, [@multicast1, @remote]}, @cipso={0x86, 0x4a, 0x0, [{0x2, 0x4, "6113"}, {0x6, 0xe, "89832fdc08e9f3a3c6098968"}, {0x5, 0xf, "7d7c2bb889684a552694830c49"}, {0x6, 0xe, "d2134374c450603c13d8565d"}, {0x0, 0x12, "bd9e05e50c885f01b92a17be8d2ad821"}, {0x1, 0x3, "c5"}]}, @noop, @timestamp={0x44, 0x14, 0x88, 0x0, 0x4, [0x2, 0x6, 0x0, 0x6]}, @cipso={0x86, 0x1e, 0x3, [{0x7, 0x8, "3c7c4f60d0ac"}, {0x2, 0x3, "b2"}, {0x7, 0xd, "3135219c9ed578a3152d3c"}]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0xc, 0x7b, 0x0, 0x4, [0x8, 0x9ff]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xa2009022}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@newtclass={0x5c, 0x28, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xd, 0x10}, {0xfff2, 0xffff}, {0xfffc, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x1fd}}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_multiq={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x8081) accept(r0, &(0x7f0000000600)=@ax25={{0x3, @null}, [@netrom, @default, @null, @null, @remote, @null, @null, @rose]}, &(0x7f0000000680)=0x80) (async) r3 = accept(r0, &(0x7f0000000600)=@ax25={{0x3, @null}, [@netrom, @default, @null, @null, @remote, @null, @null, @rose]}, &(0x7f0000000680)=0x80) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10100100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x28, 0x14, 0x104, 0x70bd26, 0x25dfdbfe, {0x2, 0x8, 0x90, 0xfd, r2}, [@IFA_FLAGS={0x8, 0x8, 0x228}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020}, 0x4040004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x800}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x22dd2112}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2d}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040844}, 0x10) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000d80)={&(0x7f0000000900), 0xc, &(0x7f0000000d40)={&(0x7f0000000940)={0x3e8, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "2874eb557ac77d50f839c3899f6ad2752eaa7eda030fe9c3a69f0ca8a83fdb27d153fb2b29fe7491a305abf27cf9e7f7c3e1e424c2c317c43c5a3441a22e920d6b109dd393e128417b29b3226540800b4625f687e92f9977732f1e4b05b5f0f8016d6f3e1f118cbe"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb12, @dev={0xfe, 0x80, '\x00', 0x25}, 0xbc0e}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "55b4c22978a0866a6c9d573ffc58e69f529e108f8c6235f1297d2fbca78fe63f6aecbeb9521f986907db5e4351e641a1aad2f8c661922981b1476ca7b7240dba0b99ae705ae9244c2b444878033f445fe42e8df3ff6a47b81c3405a39a1c3aa04668ef78da9e4724d393"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "863f125720b96076fd4d7c8a83ec769bf536e29fd2c02f9ca0"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ae1a8fcf07e89432138cdddcdfceb2cb839aaa7d6e6018618824e8bec5bb0119c9efd932"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xbc, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @local, 0x7809}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3bb8, @mcast2, 0x6}}}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000dc0)={0x6f489755, {{0x2, 0x4e20, @remote}}}, 0x88) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000e80)=0xa, 0x8) syz_emit_ethernet(0x135, &(0x7f0000000ec0)={@empty, @empty, @void, {@mpls_uc={0x8847, {[{0x1}, {0x7fff}], @ipv4=@generic={{0x2b, 0x4, 0x0, 0x7, 0x11f, 0x68, 0x0, 0x3, 0xc, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x43}, {[@cipso={0x86, 0x27, 0x1, [{0x6, 0x7, "bc16e2df65"}, {0x5, 0x12, "ca2d5209887150f1abadfcc11613acd9"}, {0x2, 0x8, "3529ba1b4e11"}]}, @generic={0x89, 0x8, "794d1e1bf01e"}, @timestamp_prespec={0x44, 0x14, 0xd3, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0x9c, 0x3, 0x9, [{@broadcast, 0xfffffff8}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f45}, {@remote, 0x8}, {@multicast2, 0x3}, {@empty, 0xaa9}, {@remote, 0x3ff}, {@private=0xa010101, 0x9}, {@rand_addr=0x64010101, 0xa53}, {@multicast2, 0x4}]}]}}, "df5d3dc9d254648e92a0cef4faf2e8220d971984ce878a5471f312c9bcbb0526000396cfba774c2964c0898c8eb6f20e6ba6cd15a23a6f025c3b12c542ea1c7c5e6771d6ef86980252de8d93d7ff71392fd09ddcc92b33d61050c25ac371bf01f14b0f180d302b40b1861ee70dc696237c8e58"}}}}}, &(0x7f0000001000)={0x1, 0x2, [0x5f7, 0x3c1, 0x7b6, 0x157]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001040)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001040)={'vxcan0\x00'}) bind$vsock_stream(r3, &(0x7f0000001080)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) bind$vsock_stream(r3, &(0x7f0000001080)={0x28, 0x0, 0x2711, @hyper}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000010c0), &(0x7f0000001100)=0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000001140)=[@sack_perm, @timestamp, @sack_perm, @sack_perm], 0x4) socket$inet(0x2, 0xa, 0x5) (async) r5 = socket$inet(0x2, 0xa, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001180)={'bridge_slave_1\x00', 0x8000}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000011c0)={'ip_vti0\x00', 0x8000}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x4000000}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x4000000, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240)=r6, 0x4) listen(0xffffffffffffffff, 0x200) (async) listen(0xffffffffffffffff, 0x200) syz_emit_ethernet(0x12e, &(0x7f0000001280)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x35, 0x4, 0x2, 0x8, 0x120, 0x68, 0x0, 0x9, 0x73, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, {[@timestamp_prespec={0x44, 0x4c, 0x13, 0x3, 0x7, [{@multicast2, 0xaa94}, {@empty, 0x72}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf9}, {@private=0xa010100, 0x83}, {@loopback}, {@multicast1, 0x8}, {@private=0xa010102, 0x6}, {@remote, 0x5}, {@loopback, 0x6}]}, @noop, @cipso={0x86, 0x45, 0x0, [{0x6, 0xd, "523de5d3bcdea92a908532"}, {0x6, 0xa, "239a707e5aa97e73"}, {0x0, 0x7, "5cd1f7323c"}, {0x2, 0xc, "a91560739ccb7199a74a"}, {0x1, 0x9, "7493481728303b"}, {0x2, 0x2}, {0x1, 0xa, "b82209a7e9fb170e"}]}, @rr={0x7, 0x2b, 0xbd, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2, @local, @broadcast, @multicast2, @remote, @rand_addr=0x64010101]}]}}, "e7f45c9e1e1d134a6070b3d81e086297d4363070793d020c3374b234f04e3929908af49250aba91638fb4cc04eb261e6bb6dd48c3f8d66951fa1310fe89539bb3bdb118c666dc8bc77894588"}}}}, &(0x7f00000013c0)={0x1, 0x2, [0xe31, 0xfd8, 0x85b, 0xeff]}) openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x20080, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x20080, 0x0) connect$netrom(r3, &(0x7f0000001440)={{0x3, @null, 0x2}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$inet(r0, &(0x7f00000014c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) 1.123561628s ago: executing program 1 (id=2974): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xcf54) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001371121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendto$inet6(r3, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), r4) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r7, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x4000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001, 0x1}, 0x8) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)={r9, 0x4, 0x1000, "d37b4b511e0092b60639ee5ac8a6808df34c2625c811122a65d215381d463530e3c13287df7e4ce92efa3518d855f9f0e5456446e23f60e7ccf403dd02929f5c6650947ea9f99afaa72545c83813a6836a98346c96485ba4d254d891f0f293792431a30e8e6a480d3def6f683af71fc13dc439d0c0eaf8d1975423d460eafa172c075a2321b04411a9f3c7693403f8aa0d747212533316c2420fb196098eb86a26766ad38fa9fdb63e206179ed6b57c35fa59aeb56def09a13f929fd1522e86fdde6c6228c9340280d78a1c54f332faa9f01a4739512206651f1e2449a7a24c015e48e90735bc851a5d78bc37425710c9c019526d2d212021a3eba20e62b4eeb9f0f26d4083d6112a2a0ab30e064cfecc3d0055abe715a171d86ede05b66c1a493c745680aebfa39b5481352740e791e383eb9a5e8bfb2c825d021dacdde12d65b378aa3126b2ac8c2406c4f8e618e46017a1595606a5bcc1e4e66f699616201ad50f502de27f393a35cfeb0337c7dc1da01f6efa04c943b17a59c33ce141b9bfc6eeb3b403087fc02ac34595125198c0e549123c0b23503ec775759eb9f23aa43049207c559d1508e3d90dc2b7901c02cb03c7e0e6ecffa1fdcfc94e26f22538beb1203110e2a3567808fe84f9ca1e366527bb8a9ec37f26f3c603b02eb511066b674d9d535f2202bd6541c3e760a7164967c9ec978894f7f1a7e12551f6c1354e143cd9a178d7abace6dabb883f7119e21976257f7764df343b7c57b7d7a305f1b02d8f7e3f2ad843378eae4feb1b011761ab46722c89dfc328cec595b6288abbba5027ed59430398361b71dfae5a42b22c6b4e1fc007ea3f2e158803ca361c14ccc3395f22161050ca92f9c19ee554dd475bd14f1525866b9941cf668ad61820c88d56dec35c3364dbe7589c70500e061b5cd7aa11853f1058a36ebf0827fdca2d33a1d5aaddc29313f906d92238e437870284f20fea4a467ce81cebff325f2cfbfcae8577b0cea8f45368c02305f18c5bcd3ed0adfc18a8a55f0d249b4cdeac0769d68eefee0e636a5943ffa955f85d9c8c70decf8342fdd6d5eabf7e131e7cf690b48c62fc86fe0946c7eace2cbb9efcc9aab8ab1a174e3cb82cea1f3d4f7654324f5971f83c5950807f9ab271a31048e97ea184a449f6677126508bec7959f068d102f736e7588f60112cb68fe8a40e178d491d7af6ff3a448e26ce584b452f6cef2420fa31e4e22c2bc50286632c7a78ba5f00a3ee7f3ec04955ebe821d923d80a90f2a07a17a0b092a6f87e5a03cb1719520b45b9357288b549c9e60386b04c738a469db945d551898793683faf23733a57827cb2a9027d8f1d093d1de387b4f5042b4a100a31702fd4c80ce27e9be60167d9293b187c3144aa79d2ccd0400fd047506e16ebee3a615ecd6c2217ce3364f9ef1ea573e90903463a5d96417e08e21df3c8672bfb998d8acb70de2244d787917c14ea46b7576dba0006eb7cbf2dea8d6bf182103cb1b1f6f845927731dec112d8a8fbf25d00bf24bbb8ed0a5dd64cddd39751af483b5896f79235e113ecf06997ff388f49a4b207edebce0ce0e7b8f620b917edc9f5cccd97d84a64cb44ec6688f02e7d6149e3f37808882359f9f6f979e8e715fddd102470ecff83747a4a271ad263a2d6664648cf832a1453e30462a50eedef50e45863a40ca82ff1fe6c439230ccd76b5d5553bdbf7cfc726cd26c6d92cd8d3bfc4f2e025e1a654f69040a29a1b5a95bf0d6baaad03daafbf2c4c4c40c8e070fc4cdb50a87e8d82d17b9e1cc9f7e7f8f5cf97976bb264f5b60091fc7a1a1b96cefd2258f1e952d44030ae1f83e1ed40408857cbd1aadca1ee36cff523acdeeaa202790b001933739fe0e8889849a376f39e65d43c6f199d1186da0f0d71c564ba100587ab4167996dea51c511685387522eac6aa161f2c81d86963662efd41d6019f8024a97acac68b90540037f754a5f6dfebfae75eae970a9e6e6eb5497efdd0d496651b28c10cc8ab7b9dc3ef4e87243d9c10fa46effc557d416df22af302e782fcc8b827382bd13c11ed9bfe1833df1b26cbff51c79cd1128d3dd415bf03872267ea10dbe7652cbbe3005c120c5d85522b0634374e3d49f9f6aaa3b95659ee97cf2904e3f8c21544c01a7d32008fb50e87ab0e1e9924a0a2007f85d553d118d48ce1a66a49c285c78b8c8a5aa426fc0cdb62ad021cd23907263c1838404423ed4d899f8939b0105b36188d533a1feeda91638cd1d3470a355ef6a0708871d098a3b975eebfcd46124ccf965af55f5ef73ab610f5847278fc98e4c84280c202bda647883853f40979d5885075b49943bb9f87101639e8a1190c559248241667fdc8318d5e908d681d77175ab7a68facf5905f5225869759a68f02ff732779efbb353e46eb6adcfccf153096816497b4ff60d896b5181fe4c75cdb0589c80e00acb2ff06541d0c7947ab8d6c418708e77a9a60623425e15c1635cbf7621fe96da9d31805c7abb8876114c91e469fcca0376752431937ebd687e9cef86c82f4e818b294433e008780e444314c6d30a1366c923c6ea2dcb694e2352e5a0796a0761a0f397d025175e64330d7e1c184412aee882db74a852c74e51f42a694530eeda3d5294c650efaf0ec01ee75200fe56b5a1f6eefb53a2fc655e9fe715fc7e5318486594b3e49977d6ae4c6f3ac4699478f6ac0e542474760f8cc10463f1fd4c0d46ba12a474027f739a280ffd9b76dfcb5319f23172fa8fb191e4e23b103578005704465cbcc653c6607959827f85a64b6654b4d736d43366025342dd867763735240a53518ba3b048d784c25a2fbeddec979a5db4fb27aae7a660c6eb3f67dd8defb5892340fe9cd7b3f9bb35f9341709cacd6ef5b40135c8df16f40159874facf01f898b451917e86585cd109062000ed4a1f60acae1aa1e1218570b60b7c39e46b3185618096277f2813056651bf291204360bb3f9b7fdcede491482b72d8fa079d01a01caa61350f9c84b724181d754ed337d599afacf16b87b3c8f118c9e84bb5c93987cfe751d264592586b3e21ce7235b681082aea3a70d0f43f07a7695090a5a2f02679297015963804f0eaf5237f8730d8e4a6d46204301884b9806a07ea78de2e475bb47d8b4a92900624ecacb8139fa4e3551d54adfd818f9fb081afded73a17766bd0be875a9d271ab21d6cc34208d4a2cccbcae79dcf66087bc961e24e8ee32534511ff01187d6aec5d7ded31eb0fbaaaa51bdaa36cd2bfd8ef5c3811a8c9c2a0c05af9659868a90e76b08596d4919b39e064b37b0f851e910ec30deaf603174429459b8e59de0458326dfeb8e73e47741f9843e9f3403fc2c5d5b9260b1c63b70c84a60c3b3104cbaa404c5ab6498be3225b0407f917ac0c30c0099211386d1a93e122b7f4f46a37855c24aa68a5e02ca22c703c7befc5fcddf1465425acedf6c5ef8b88ce93851b590eb2c044ef4b775cb1e9b7edc68f2cb2847b845d81f88f366f349563016da6f2160f5e6cc802bacb95364a04710e41e6d51416bf7391bba036ac4e7c2eb2317a72dbe33fcae8d85f891c3eb4c9b7327f9d77e68b60b531666f4d9e4394646d4cee35414c18972d6c536022b22bc4faf1ddb2530da764f700acb172db653d149f44978585161cf910f58f274dffded043aacad8f850355b72b7f985c53f43ec8da65d5b9fe12ac23bdfa662699945e1e6122387dc383cd44bc391ff2fec7456dc8093182bbf2da98fdb9baa1d84b84468aa5fc5d60b62a3cb97d0c1189979bc1b1561ff9cec2a1738b5f989b355ac3dc5dc0f3cf080af42a4a4adb092d10bc89dfe34b70f65485dd3a3c42cc0ea066e0560abc4606189bcac6c4e6e6f01de9ca20167b369f7219570a1f6e85e641a279f3ddbd887e487fa0cae098f6f8b34f05ecdf87f7ec006306f4733ab827ca928d6837d361232328b6f60d28fbef3d86694b785eae419bb128786a24f168f3c6b0dbb95b324208e52654508194bc28e13b5bd5efc4d4becb6dc5b7c998bc550352f9d221b36fc7cca04f97b3909cfaaf0a71fdeeb66328d02082121d67c35c6f0829bcb3649d2447fd42ae0ceefc475935fc3540e9796d2d1e026770ed1dfc563a304924be1ee6ffdf489413402c6933f04ee413467713543188f12e046273a887f28f06802b430536cc4345367b7bddeabc484f67b47f4ceeae88e9100c293c19e47243fd3732c44d279bfff5dc5b5a0ae51bb520dfc44bc07a06447861b1e0f5cab9378fbc701b586a359ebdcc89baf73c3e8348e78013a168cda757f357802e1a5122e1c5cc6cc1feac0023f178802378943c2255da98f3d5918c0463e208aeb103be36cec98f181bc2c155084363e811d1a027b26db49f7ab9f1c8a5a0464e8c9c40e7feef78cfd7899f8c83e06dab80b8061d61fc4cc4321382002b1021a9e1f066a4c2b73e36155bf657ae0a303eeb7ed075ed10fa0c3444d92faa4bf7771022651a5fc8de38ea19942640ef454b84a9a2751fee770e383a09f33e196e6e9cfc73994acccb7fb0204d81f9a13b82ecc7490493d766c2303369decad9993f0cf4c512ea81c40828ce7ae8d75296052315f5fff011cac206e13cd84161a1e4b0e27815d60901053d8718cd10fc73914ceab305515ee4a7b802d1d418906517b82f0e8b52dcaa5deb43d6d468afe0601266c118354ba9a7fe40790ec45759d62d35db433bf1a55eb8bc787d224dac28c42d395da9e82099378948a896aabd56c5ce5a1e70310e7f7f13b0e97bf4a5322e14942de761f66c431242c656166dd6e3541929408ab343d25a0e713db17a6d21409fa74073dfb7a13a4d5f4a74ba0cf847b0137dd3374f5db5d995578c87524cffe639d82b36a3f0b3b2507c44423f1ea55d113deb8ec7a6eccaa5edee24df6c8ab2d7c21aed4d92ce8811dd68aa653fa02ce728dad5a8703d216626240f96744cdd3e8018a0c66f98bc98e42e8cc74f48d314e5eff11257192268417551f0c9c328f0282b3a89f66c8c7b41b8846521526bde495694b1eafd384c4ff67a21600796c20b9ecb59e5d553e3fea5c8c5d35564f84afa98d042fd3655691e613ff1e356ba0787b12065fc34d92f034377e1fcbcf6cec5408acfd547153151a2f9944916419f83d3764d266ba341fc23c08450f55af95323f4194436333fd73ae56a20776f04d97d88d55e5f725445602b70e0776d71cf8bfa79628f56a3ad5dcbde986f62803272b2084e7e7f359edb14ef8de7e42950fb0d2d8f3f3630e9efc3f724c2be0e8ab0c1da28ecf6b60f9706cfd22f748e015003a98925361b0ea796e30f161af823e709ed4a6cccb11d9b1fb8da663d075e508ae003befc872a791071f1bef2025dfe2a4c600c6182afe3edec3c5d73bcf4abebaa44ed851c7d3b712d6b56feb6af19c5e453dc0226e8368616261a8143cfa7f32860bd2b3594aaecdac854540a14bd9fb27fd677b70b0311216af82dc4088cefa77dca44d6a2948f6294020e54b26cf88da0aa60a597695b28a2d5691e4ae1beba23fbd353225d352645682ba5a2fa21359352fa8a99ad671b4563b260a93835444ddc81bf016d2558aa3e21559269c384c20a26016004229a38b7df948fb1f1c5b838fa74dbd1092884bbce461fbd3f207056964d9dc0d218104d0249c1cd821be9992aa8307cb9476e7a70e86db8f23df7e970abd61a9fdd932293ed2f7244bfc7dfc4593970e71f9f133f693d02413e92533a41ca6997b6ce02fbde9124a4161706fa4fa78f4f789f131f8d"}, 0x1008) 1.1117178s ago: executing program 2 (id=2977): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x9ff, 0xa, 0xfff, 0x4fb4, 0x40, 0xb6b, 0x40}, &(0x7f00000000c0)=0x9c) 1.109958032s ago: executing program 3 (id=2979): r0 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='l', 0x1}, {0x0, 0x2}], 0x2}, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1.105727727s ago: executing program 1 (id=2980): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000001, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe6, 0xe6, 0xa, [@const={0x10, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0xa, 0x5}, {0x3, 0x2}, {0x9}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0x4}, @datasec={0x8, 0x4, 0x0, 0xf, 0x2, [{0x3}, {0x2, 0x80, 0xa}, {0x2, 0x3, 0xe11}, {0x3, 0x0, 0x6}], "e946"}, @enum={0xf, 0x7, 0x0, 0x6, 0x4, [{0xe}, {0x0, 0xbcaf}, {0x8, 0x1}, {0x3, 0xb}, {0x5, 0x10000}, {0x6}, {0xa, 0xd}]}, @fwd={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x30, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000200), 0x10a, 0x0, 0x1, 0x1, 0x10000, @value=r1}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe6, 0xe6, 0xa, [@const={0x10, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0xa, 0x5}, {0x3, 0x2}, {0x9}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0x4}, @datasec={0x8, 0x4, 0x0, 0xf, 0x2, [{0x3}, {0x2, 0x80, 0xa}, {0x2, 0x3, 0xe11}, {0x3, 0x0, 0x6}], "e946"}, @enum={0xf, 0x7, 0x0, 0x6, 0x4, [{0xe}, {0x0, 0xbcaf}, {0x8, 0x1}, {0x3, 0xb}, {0x5, 0x10000}, {0x6}, {0xa, 0xd}]}, @fwd={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x30, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000200), 0x10a, 0x0, 0x1, 0x1, 0x10000, @value=r1}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xffffffff, 0xa09c, 0x40, 0x41220, r1, 0x63b3, '\x00', 0x0, r4, 0x4, 0x4, 0x5, 0x7}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.094487805s ago: executing program 0 (id=2983): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="ce6fefa2eef3e1e10e8c051c93beaf75c517", @ANYRES64, @ANYRES16, @ANYBLOB="0bc5909355"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000000000020000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r1, 0xb, 0x1, 0x401, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x63, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@ifindex=r3, r0, 0x1e, 0x1, r0, @void, @value=r0, @void, @void, r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000073113a00000000008510000002000000b7000400000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000140)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) 1.093420195s ago: executing program 1 (id=2984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x88, 0x65, 0x0, 0x19c8963c033227bd) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x268, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x22c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x15c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@bridge_dellink={0x2c, 0x11, 0x5, 0x2000, 0x2ff, {0x7, 0x0, 0x0, r5, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@bridge_dellink={0x2c, 0x11, 0x5, 0x2000, 0x2ff, {0x7, 0x0, 0x0, r5, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet(0x2, 0x3, 0x2) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r11, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) (async) getsockopt$sock_buf(r11, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r12 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r12, 0x88, 0x67, &(0x7f0000000580)=r13, 0x4) sendmsg$inet(r12, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625cfe", 0x6}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa", @ANYRES32, @ANYRES32=r10], 0x1c) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8=r9, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="ff020001000000006c000000e0000001000000000000000000000000000000000000000000000000004708339bffd8ad490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8=r9, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="ff020001000000006c000000e0000001000000000000000000000000000000000000000000000000004708339bffd8ad490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) 1.092516736s ago: executing program 2 (id=2985): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0xe8, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6505}, [@NFTA_TABLE_USERDATA={0x97, 0x6, "d9a1cefa01200c7388962b84dc11248c82d0cb012e2ed21368b68ab322ccf0ba343acae1844c7228e5d1a1514e11c1de10b609c03bf71722b72c6ecbb06a60c3a6c77b2eaa1c2d7a4ff62445dbf480d0b4fb1e7811a8ce691008ec0f55c991949c5ca91400d41545cce88b042b26ce56be1bf999c52c30093a9e6090c0b7337666f575777664d88156586e192fcc8c3a456f29"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x15, 0x6, "7124cabb2fd75e18ee66e09e4f04334454"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0xc010) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x4bfc, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x190) 1.091298116s ago: executing program 3 (id=2986): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r1, 0xffffffff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xfffd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) mmap(&(0x7f00009f2000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, 0x0, 0x24000881) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 1.089548345s ago: executing program 4 (id=2987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000400000000000000000000000086c2ed2d19be950000000000000000000000040000000000000000000040000000000000000000000000000000000000000000000000000000000000000002000001000000000000000008000c0002000000480003006465666c61746500"/248], 0x140}}, 0x4810) r1 = socket$inet6(0xa, 0x80000, 0xffffff7f) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000040) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0xbb, "8cf644dd2d1d1badbe5f94a59f7b8a4a655337b6b912b0b20a8abe775495abd69df18e3a401a296395cfc89fd157afc3047b64e1c6335c2e5948eea7250e26da83c803c2b9caf169e7afa649caac56eeef6a0e05cae914830482f1b980b8a46e73cc5dee017a69c50d58b9947e6f1f331ae3d0210b10e3cbe608756eb214f6be428c9d6285ed4dcd8b216cf757252afd87c1c1238fdb815069060d0a7861ee04dd505fb4e37d554d6a02340ae4dbbdf38b91673632c10442bab0b2"}, &(0x7f0000000100)=0xdf) 953.135681ms ago: executing program 0 (id=2988): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x8, 0xffffffffffffff40) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, 0x0, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410072786500140033006c6f0009b0"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4044884) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x10) 948.3893ms ago: executing program 4 (id=2989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x11, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000140)) close(r2) r3 = socket(0x2, 0x80805, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x4a9e3e0ca749b20, 'rdma'}]}, 0x8) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r8, 0x2, 0x10}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r9, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r9, 0x7}, &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="020802000700000008002800618a00000a080100bbbbbbbbbbbb0000"], 0x34}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000042) 771.90698ms ago: executing program 2 (id=2990): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x6, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0x5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x5, 0xa411, 0x8, 0x2, 0x3554, 0x80001, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x20007ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x9, 0x5f0, 0x1, 0x3, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x8, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x7, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x3, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x7ffffffc, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x103, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0xffff7fff, 0x8, 0x6, 0xa91, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0xa04, 0xfffffff9, 0x1, 0x3, 0x584, 0x1e0, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x8, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x79d, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x8, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f57, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100291ea04819af1aaf478a93585038bd70", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048840}, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r9, 0x11, 0xb, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) sendto$inet(r9, &(0x7f0000000000)="492d7f77873c6dc1d52396339809ecad8a7b6f8046799ef1eaf77a0060809499b728ce6263cab102a9bd6fd19003350e42", 0x31, 0xc, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) 605.229842ms ago: executing program 3 (id=2991): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)={0x31c, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x30b, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a5677008289970a674d1b41"]}]}, 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x118, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "e454cdeb7d16bb74ba230081e7f73631cc3fb7c4ea5c9ac5c8dd651a3e693318d0"}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x75}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x118}}, 0x8810) 603.511202ms ago: executing program 4 (id=2992): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xf0000000]}]}]}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x79}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4014}, 0x20008014) 596.534339ms ago: executing program 0 (id=2993): r0 = socket$kcm(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x0, 0x33, 0x48000000}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x67, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x8, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000780)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 452.828961ms ago: executing program 1 (id=2994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01000000000007ca1e638c5773e608000300", @ANYRES32=r2], 0x80}}, 0x0) r3 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0xe8, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2ac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 452.393699ms ago: executing program 0 (id=2995): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x6, 0x58}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 429.492698ms ago: executing program 4 (id=2996): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x400}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={r1, 0x7, 0x9, 0x0, 0x4, 0x7}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000021e0f8a200000000dd0a00000000000063010000000c000095000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x71, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/108, &(0x7f0000000140)=0x6c) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) pread64(r2, 0x0, 0x0, 0x100000000) r3 = socket(0x28, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x401}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x400}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={r1, 0x7, 0x9, 0x0, 0x4, 0x7}, &(0x7f0000000240)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000021e0f8a200000000dd0a00000000000063010000000c000095000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x71, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/108, &(0x7f0000000140)=0x6c) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) (async) pread64(r2, 0x0, 0x0, 0x100000000) (async) socket(0x28, 0x5, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x401}, 0x8) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) 419.0662ms ago: executing program 3 (id=2997): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}]}, 0x1c}}, 0x20000004) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x8800002}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r1}) accept4$netrom(r3, &(0x7f00000002c0)={{0x3, @bcast}, [@remote, @bcast, @bcast, @remote, @netrom, @default, @rose, @rose]}, &(0x7f0000000340)=0x48, 0xc0000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000400)={0x1d, r4, 0x3, {0x2, 0xff, 0x2}}, 0x18) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000440)=@buf) socket$netlink(0x10, 0x3, 0xc) r5 = socket(0x1a, 0x4, 0xfffffffd) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x1d, r4}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x1, 0x85, 0x5, {0x0, 0x2710}, {r6, r7/1000+10000}, {0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "d9e37435bae667c1"}}, 0x48}, 0x1, 0x0, 0x0, 0x40804}, 0x2040800) r8 = accept4$inet(r3, 0x0, &(0x7f0000000600), 0x80000) sendto$inet(r8, &(0x7f0000000640)="24b5851e95db9734ede212ea28d5607451d6a7c317aba0b538c2969ac1f9469776dc7ded9a71e5abb181e35e0ba6eedf7bd4924d76030bb3029d19e211816f1e0c5ce56de8328b00e0ed48d62acb02bdc481576dc0d60591df0377436e69d6167ccf2e19029549608461fb931f9c5883ea0a8ad014040b842f1e7e5df8ee26b848c594c0f15ac9c6fdcb89c3e9426cd0b11f2f11b63e599c0058ad7986649bb394dcef", 0xa3, 0x440d0, &(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r9) r10 = getuid() ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000800)={0x3, @bcast, r10}) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000840), &(0x7f0000000880)=0x4) r11 = accept4(r3, &(0x7f00000008c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000940)=0x80, 0x80800) sendmsg$NFNL_MSG_ACCT_GET(r11, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, 0x1, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7d3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xaa}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffff80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24}, 0x4014080) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) splice(r11, &(0x7f0000000b40)=0xfff, r5, &(0x7f0000000b80)=0x7, 0x7, 0x8) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000bc0)=0x4992, 0x4) 325.773ms ago: executing program 2 (id=2998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x8ec6f8a8b9a40656}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb4, 0x1, 0x1b5b, 0x1, 0x3, 0x8}, {0x7f, 0x0, 0xf, 0xfff, 0x8, 0x2}, 0x0, 0x727d2337, 0xf24}}, @TCA_TBF_RATE64={0xc, 0x4, 0x138811cd6a4124cc}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r8) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r10, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x64, r9, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 283.79133ms ago: executing program 1 (id=2999): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1e1d7b492e8741f84d3ac7db89b9575d3b2e069692b10c827bb696a4766b051736ec107897be414a00"/60], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000307010100000000c4a55499070000040c0003400000000000000101218ab33cb932a019c6b779f800a4fecfdd908bd74f6efb926c2f1761aa0cc2ba12973a7d80fc3e18581d4252d2a39f28f3b63931b009f18491a123f5066b32"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x46}, 0x4020090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000500)=@isdn={0x22, 0x1, 0xe4, 0x7, 0x81}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000140)="1ceeed52aadf2203967b19b0e6d0339cdbee025ae2bcde8e56adc35530b6c1", 0x1f}, {&(0x7f0000000600)="2a6313cede96bb5d00246676e290868a98f725a23310d65c2b8e8a0cd282c670290aa95b93e64840987fff4bfc08425e4cc268e8e479edcd46212f98fcabe71722262359ab6ec8", 0x47}, {&(0x7f0000000680)="22c293574082a8a6ef7a0fe5f297725dc7c26ff2e893e43d59cde111c4a7d9f5ae4bce1154513bc7103798e821e0a6fa10033c82e9b111f1c79970db37b67858b95ea60d42a0b0b8d8f307a8088a67516738f53d895c50f24aa5f3512c8b1b8ffd9ca525ba65e831b110f0943e4b891928c4fd76b4f0d6121c61bff2c71b08afe509ac1f8406305dd5baac8320c2803090fd865c1961281c5d7d70b6693ca103be94ae7d5fdcf7df5c9f60548391ee39b4742b5ea8", 0xb5}, {&(0x7f0000000740)="ddf583efc0dfd1b9c2ee342fe3d5a1540d2b7de81bb5df455f70bc4de1e71b20121b89ebaebb735b16706578bda0df14c454ee651a10416835375c77f83bc385dbe8a7463f48be5e886cc3", 0x4b}, {&(0x7f00000007c0)="faba1e9e5fc3662a79560258537a72eeb05ada4ba9d4c7875e72d0ea6c1f6ce11e90987090270585e4ebd0bf44d79460f8bd0f613740d2f0980d28e993be0d4fe9c63380bf6aa950e0a357d5e5e849d6c59450af462216dd5854cbca0829f7f6b694e91a1a60cb61c3c4e78e8ca06d8df3383f41a5e454eab4d2cfee52096d7d10ae182aacb325443d936222c2dfbf9dcce8d7cdba5081f09f10bc684cf457ac", 0xa0}, {&(0x7f0000000400)="bf277d78244f393e3b14aabc78341421ae7103f4ac85a473e52435502ddf7b6ed3fcef21adf1c998d2a0693b7227c0764c7572", 0x33}, {&(0x7f0000000880)="3c6ed2a14e123bdc8984f454cbc546aca0cc0d908166abf389f3e75885e034c1273868d33766fa96a642ba77fdf3029eee144a79f50d41030e88fd341b20674fe0cce5e9da050be6d5fd0e5c7f30f216e87fa36c339095ecc7ec2c56d8689e05e337cdc78735e02261a6f3db250e1912c7a525947bd530750c1fdfee872261050366ea2d256af27cb50f5f9538ba893b20173abdf0bcdb341061cb2cde08a557710fb6a0e1f1a9540370d729c7c5fae4c5d50c713cbb7e6fd7", 0xb9}, {&(0x7f0000000580)="e3699d9df6f2", 0x6}], 0x8, &(0x7f00000009c0)=[{0x18, 0x29, 0x7fffffff, "49b2a5d651a89e"}, {0x38, 0x1fc, 0xe4, "1243af4f7dc5ad68705cd9262640fbdd2dc5c30a2a5dd6d245f1256f6bd0fc7b22cf9534"}, {0x68, 0x112, 0x1, "3a07f5aabe0867496a347a8bef5d5e8a4f29543bdb16cf6d759c64c77c854045739cc5a937dcc5bc60dd49795dcaaf95113906e650d100adae518933cac1212cf8f186fa0a3ba44d2d59e41c2ad36fa9b11cdb9171e9a9"}, {0x110, 0x119, 0x4, "494d3a1a6ecc779a3469ebab1cd0ea94ab7fa255b29cb7085cb965a0141b4c5700b9345cbf18fc0c0a835a2ad2db6ccd80f2f23264ed902730548d3441ea666464a818fcb85d080dae69ca7e8ba445a25807f4b0334a41f4cbd7f179db4504a65421018da0323d0cd252db9dcd083c88321887ddb5cb589bdb6284ce5b03dde927caf7979a044f959cba79ca5736d5582689e1ea0847bdbff89524b1c33c53a7ca35725185d43f07b286ea86677e938bfa2e7222e258a087a5492547679272acfe9a582f879b73e05bc19a17aa64bbb44698b5cbe5ce8e54327db3b4d0f1700b5dae78956a8a3c1b81f2d745069eabb0ed4552c050e7451a3ae96583d6c6"}], 0x1c8}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000880000009500001600000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) 279.882147ms ago: executing program 0 (id=3000): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) 152.872651ms ago: executing program 3 (id=3001): r0 = socket$inet6(0xa, 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xac, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x7ff, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) getsockname$ax25(r2, &(0x7f0000000080)={{0x3, @default}, [@null, @default, @bcast, @default, @null, @remote, @null]}, &(0x7f0000000100)=0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 89.662257ms ago: executing program 0 (id=3002): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a3100000000580004805400019d090001006d6574610000000044000280080001400000000c0800e5d0fba022cb67c60140000000010800014000000009080001400000000b080001400000001208000140000000150800024000000011"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0xfffffddb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000030000000900020073791b100000000005000100070000001c0007800c00018008000140ffffffff0c00148008000140ac1414bb"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x1}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}]}]}}]}, 0x70}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRESOCT=r5, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18023a3ffe5309aa17cd1259e07cd3695314d755f8c4375d0b9800548ac9be5f82108d34c912c16b541ddff9d1ade19427989947861785bb44ac15259b38c53f41eab1a1485049b6c12fc35f7db8e0cdb0a9877f23741ba6fed1c1e56b90f53236c17895538ab575b3d16e5160183948c3065c7a0869dc0b89ccfe4c4207d8281a2f53193b25864dd11a30809b51e02fc1856822abf9e1a241d49d122d37a8195cc20e581e661b19a6d4fb99365e54179b36c00b0c57849e15c5950f7e46536646880f65708eaf4feeb4c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x20000400) (async) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 87.991886ms ago: executing program 4 (id=3003): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3d1fd436550aabca5ef94c71af620414ea9514242345d4bfb55a73fdb731435b802fcb308383d17509f228dcf6c2d7d643445d9fef0e34f88c8ce67ad3dff0835e7c85c30cb0eb31ac5887659eba9ea178302f78cc8ba944311f892414bdb3c958a20f7326b258b30ca94610c0707ef1ad1c3dd631fccd9ba0edbaf50fb8826bccdeb97b56cdc99e606f4d533cb11ba3aeabfbf2ff4f6185"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 72.723036ms ago: executing program 3 (id=3004): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c00030006ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=3005): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): ad for wq "bond3": -EINTR [ 175.647792][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.840083][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 175.968052][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 176.370245][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 176.396830][ T8656] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.472925][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 176.708175][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 176.868822][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.767'. [ 177.049370][ T8689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 177.214774][ T8700] erspan0: entered promiscuous mode [ 177.222032][ T8700] gretap0: entered promiscuous mode [ 177.246811][ T8700] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 177.267953][ T8700] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 177.565717][ T8720] netlink: 'syz.4.781': attribute type 1 has an invalid length. [ 177.583210][ T8716] vlan1: entered promiscuous mode [ 177.592699][ T8716] bridge0: entered promiscuous mode [ 178.082192][ T8756] netlink: 'syz.4.786': attribute type 19 has an invalid length. [ 178.436173][ T5149] block nbd0: Receive control failed (result -107) [ 178.834727][ T8789] lo: entered allmulticast mode [ 178.866274][ T8789] lo: left allmulticast mode [ 179.028335][ T8797] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 179.141063][ T8804] netlink: 'syz.3.802': attribute type 4 has an invalid length. [ 179.169979][ T8807] netlink: 'syz.3.802': attribute type 4 has an invalid length. [ 179.370265][ T8819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.749287][ T8835] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 179.769919][ T8835] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 180.049736][ T8844] netlink: 'syz.2.818': attribute type 4 has an invalid length. [ 180.089347][ T8845] __nla_validate_parse: 11 callbacks suppressed [ 180.089370][ T8845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.819'. [ 180.105947][ T8844] netlink: 17 bytes leftover after parsing attributes in process `syz.2.818'. [ 180.149245][ T8847] netlink: 52 bytes leftover after parsing attributes in process `syz.4.820'. [ 180.422573][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 180.458688][ T8856] macsec1: entered promiscuous mode [ 180.501688][ T8856] macsec1: entered allmulticast mode [ 180.521767][ T8856] bridge0: entered allmulticast mode [ 180.542151][ T8856] bridge0: port 3(macsec1) entered blocking state [ 180.571664][ T8856] bridge0: port 3(macsec1) entered disabled state [ 180.635943][ T8872] sctp: [Deprecated]: syz.3.828 (pid 8872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.635943][ T8872] Use struct sctp_sack_info instead [ 180.663508][ T8856] bridge0: left allmulticast mode [ 180.791111][ T8879] netlink: 'syz.1.832': attribute type 63 has an invalid length. [ 180.962821][ T8887] nbd: must specify at least one socket [ 181.040571][ T8893] veth0: entered promiscuous mode [ 181.109737][ T8897] netlink: 'syz.1.836': attribute type 39 has an invalid length. [ 181.144289][ T8899] netlink: 'syz.4.839': attribute type 4 has an invalid length. [ 181.231930][ T8894] veth0: left promiscuous mode [ 181.310020][ T8911] netlink: 'syz.1.836': attribute type 2 has an invalid length. [ 181.382421][ T8913] tcpmss_tg4_check: 23 callbacks suppressed [ 181.382442][ T8913] xt_TCPMSS: Only works on TCP SYN packets [ 181.432001][ T8917] netlink: 165 bytes leftover after parsing attributes in process `syz.3.842'. [ 181.600977][ T8925] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.844'. [ 181.930079][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 181.939745][ T8941] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 181.979755][ T8943] netlink: 'syz.1.851': attribute type 33 has an invalid length. [ 182.124966][ T8951] netlink: 'syz.4.852': attribute type 22 has an invalid length. [ 182.182349][ T8943] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 182.207282][ T8943] bond6 (unregistering): Released all slaves [ 182.405912][ T8944] bond2 (unregistering): Released all slaves [ 182.450170][ T8946] ip6tnl1: entered promiscuous mode [ 182.465658][ T8946] ip6tnl1: entered allmulticast mode [ 182.869227][ T8986] netlink: 'syz.4.858': attribute type 3 has an invalid length. [ 183.287362][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.863'. [ 183.308918][ T9013] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 183.347474][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 183.378131][ T9013] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 183.629115][ T9029] : renamed from hsr0 [ 183.784768][ T9039] syz_tun: entered allmulticast mode [ 183.835324][ T9039] bond0: (slave bond_slave_0): Releasing backup interface [ 183.954314][ T9039] bond0: (slave bond_slave_1): Releasing backup interface [ 183.985670][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.011364][ T9039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.069917][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.101341][ T9039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.124319][ T9039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.223212][ T9038] syz_tun: left allmulticast mode [ 184.836674][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'. [ 185.370650][ T9122] xt_connbytes: Forcing CT accounting to be enabled [ 185.721068][ T9152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.904'. [ 185.784317][ T9156] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 185.875073][ T9148] netlink: 'syz.3.900': attribute type 2 has an invalid length. [ 185.983294][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 186.196954][ T9183] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 186.243525][ T9187] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 186.251766][ T9187] netlink: 224 bytes leftover after parsing attributes in process `syz.1.912'. [ 186.739338][ T9218] netlink: 13 bytes leftover after parsing attributes in process `syz.0.919'. [ 186.775259][ T5149] block nbd1: Receive control failed (result -32) [ 186.837049][ T9221] geneve3: entered promiscuous mode [ 187.044012][ T9233] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 187.129369][ T9235] vlan0: entered promiscuous mode [ 187.146463][ T9235] gretap0: entered promiscuous mode [ 187.193878][ T9236] lo: entered allmulticast mode [ 187.199357][ T9236] tunl0: entered allmulticast mode [ 187.208531][ T9236] gre0: entered allmulticast mode [ 187.213984][ T9236] gretap0: entered allmulticast mode [ 187.219592][ T9236] erspan0: entered allmulticast mode [ 187.236068][ T9238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.928'. [ 187.245816][ T9236] ip_vti0: entered allmulticast mode [ 187.254696][ T9236] ip6_vti0: entered allmulticast mode [ 187.262214][ T9236] sit0: entered allmulticast mode [ 187.267459][ T9236] ip6tnl0: entered allmulticast mode [ 187.275788][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 187.275890][ T9236] ip6gre0: entered allmulticast mode [ 187.303821][ T9236] syz_tun: entered allmulticast mode [ 187.321731][ T9236] ip6gretap0: entered allmulticast mode [ 187.328608][ T9236] vcan0: entered allmulticast mode [ 187.335012][ T9236] bond0: entered allmulticast mode [ 187.340245][ T9236] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 187.349141][ T9236] nlmon0: entered allmulticast mode [ 187.355592][ T9236] caif0: entered allmulticast mode [ 187.361116][ T9236] batadv0: entered allmulticast mode [ 187.366894][ T9236] vxcan0: entered allmulticast mode [ 187.372544][ T9236] vxcan1: entered allmulticast mode [ 187.378058][ T9236] veth0: entered allmulticast mode [ 187.383911][ T9236] veth1: entered allmulticast mode [ 187.389318][ T9236] wg0: entered allmulticast mode [ 187.394659][ T9236] wg1: entered allmulticast mode [ 187.414218][ T9236] wg2: entered allmulticast mode [ 187.426519][ T9236] veth0_to_bridge: entered allmulticast mode [ 187.435701][ T9236] bridge_slave_0: entered allmulticast mode [ 187.444892][ T9236] veth1_to_bridge: entered allmulticast mode [ 187.470829][ T9236] bridge_slave_1: entered allmulticast mode [ 187.505513][ T9236] veth0_to_bond: entered allmulticast mode [ 187.527041][ T9236] bond_slave_0: entered allmulticast mode [ 187.538581][ T9236] veth1_to_bond: entered allmulticast mode [ 187.549669][ T9236] bond_slave_1: entered allmulticast mode [ 187.567093][ T9236] veth0_to_team: entered allmulticast mode [ 187.585786][ T9236] team_slave_0: entered allmulticast mode [ 187.591991][ T9236] veth1_to_team: entered allmulticast mode [ 187.603086][ T9236] team_slave_1: entered allmulticast mode [ 187.609524][ T9236] veth0_to_batadv: entered allmulticast mode [ 187.625803][ T9236] batadv_slave_0: entered allmulticast mode [ 187.644420][ T9236] veth1_to_batadv: entered allmulticast mode [ 187.660530][ T9236] batadv_slave_1: entered allmulticast mode [ 187.672898][ T9236] xfrm0: entered allmulticast mode [ 187.684353][ T9236] veth0_to_hsr: entered allmulticast mode [ 187.696845][ T9236] hsr_slave_0: entered allmulticast mode [ 187.708195][ T9236] veth1_to_hsr: entered allmulticast mode [ 187.722348][ T9236] hsr_slave_1: entered allmulticast mode [ 187.730899][ T9236] hsr0: entered allmulticast mode [ 187.741650][ T9236] veth1_virt_wifi: entered allmulticast mode [ 187.754726][ T9236] veth0_virt_wifi: entered allmulticast mode [ 187.770156][ T9236] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 187.779751][ T9236] veth1_vlan: entered allmulticast mode [ 187.792752][ T9236] veth0_vlan: entered allmulticast mode [ 187.819709][ T9236] vlan0: entered allmulticast mode [ 187.825384][ T9236] vlan1: entered allmulticast mode [ 187.833581][ T9236] macvlan0: entered allmulticast mode [ 187.843714][ T9236] macvlan1: entered allmulticast mode [ 187.853335][ T9236] ipvlan0: entered allmulticast mode [ 187.859622][ T9236] veth1_macvtap: entered allmulticast mode [ 187.869616][ T9236] veth0_macvtap: entered allmulticast mode [ 187.879187][ T9236] macvtap0: entered allmulticast mode [ 187.888271][ T9236] macsec0: entered allmulticast mode [ 187.897347][ T9236] geneve0: entered allmulticast mode [ 187.909340][ T9236] geneve1: entered allmulticast mode [ 187.923556][ T9236] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 187.948315][ T9236] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 187.963118][ T9236] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 187.975512][ T9236] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 187.985685][ T9236] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 188.017224][ T9236] gre1: entered allmulticast mode [ 188.026607][ T9236] gretap1: left promiscuous mode [ 188.034818][ T9236] macsec1: entered allmulticast mode [ 188.040404][ T9236] bond1: entered allmulticast mode [ 188.048393][ T9236] gtp0: left promiscuous mode [ 188.057586][ T9236] bond2: entered allmulticast mode [ 188.064458][ T9236] bond3: entered allmulticast mode [ 188.070365][ T9236] vxlan0: entered allmulticast mode [ 188.079339][ T9236] ip6tnl1: entered allmulticast mode [ 188.088916][ T9236] bridge0: entered allmulticast mode [ 188.208241][ T8288] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.261805][ T9266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.293309][ T8288] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.344134][ T8288] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.345876][ T9272] netlink: 112 bytes leftover after parsing attributes in process `syz.2.938'. [ 188.363083][ T8288] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.453169][ T9274] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 188.482194][ T9276] sctp: [Deprecated]: syz.1.939 (pid 9276) Use of int in max_burst socket option deprecated. [ 188.482194][ T9276] Use struct sctp_assoc_value instead [ 188.511645][ T9274] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 188.537720][ T9279] netlink: 'syz.3.940': attribute type 10 has an invalid length. [ 188.564343][ T9279] veth0_virt_wifi: entered allmulticast mode [ 188.573408][ T9281] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 188.613442][ T9279] team0: Port device veth0_virt_wifi added [ 188.770043][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.944'. [ 188.782833][ T9292] netlink: 128 bytes leftover after parsing attributes in process `syz.3.944'. [ 188.791928][ T9292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.944'. [ 188.808987][ T9293] syzkaller0: entered promiscuous mode [ 188.827146][ T9293] syzkaller0: entered allmulticast mode [ 188.860826][ T9293] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 189.703092][ T9343] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 189.724583][ T9345] netlink: 'syz.3.958': attribute type 29 has an invalid length. [ 189.753675][ T9347] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 189.888251][ T9354] vxcan1: tx address claim with different name [ 189.997061][ T9356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.094570][ T9361] netlink: 'syz.3.967': attribute type 18 has an invalid length. [ 190.114568][ T9361] netlink: 'syz.3.967': attribute type 18 has an invalid length. [ 190.157321][ T8288] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.199830][ T8288] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.237283][ T8288] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.310055][ T8288] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.416755][ T9375] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 190.565997][ T9374] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 190.761042][ T9392] __nla_validate_parse: 13 callbacks suppressed [ 190.761063][ T9392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.981'. [ 190.812107][ T9402] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 190.988042][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 191.012296][ T9414] netlink: 'syz.4.983': attribute type 7 has an invalid length. [ 191.039696][ T9414] netlink: 'syz.4.983': attribute type 8 has an invalid length. [ 191.068914][ T9415] netlink: 52 bytes leftover after parsing attributes in process `syz.4.983'. [ 191.084014][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 191.349737][ T9431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.989'. [ 191.385800][ T9439] netlink: 'syz.4.991': attribute type 2 has an invalid length. [ 191.508640][ T9442] tipc: Enabling of bearer rejected, failed to enable media [ 191.738341][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.997'. [ 191.799380][ T9461] !: renamed from dummy0 (while UP) [ 191.895852][ T9468] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1000'. [ 192.257194][ T9455] netlink: 76 bytes leftover after parsing attributes in process `syz.2.996'. [ 192.353165][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 192.504356][ T9493] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1009'. [ 192.685037][ T9502] netlink: 'syz.2.1013': attribute type 23 has an invalid length. [ 193.342951][ T9542] : renamed from bond_slave_0 [ 194.160513][ T9587] xt_ipcomp: unknown flags 1D [ 194.192285][ T9590] set match dimension is over the limit! [ 194.352948][ T9599] bridge_slave_0: left allmulticast mode [ 194.361317][ T9599] bridge_slave_0: left promiscuous mode [ 194.381719][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.423235][ T9599] bridge_slave_1: left allmulticast mode [ 194.445324][ T9599] bridge_slave_1: left promiscuous mode [ 194.479092][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.550200][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.557752][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.584633][ T9599] bond0: (slave bond_slave_0): Releasing backup interface [ 194.613070][ T9599] bond0: (slave bond_slave_1): Releasing backup interface [ 194.661063][ T9599] team0: Port device team_slave_0 removed [ 194.719061][ T9599] team0: Port device team_slave_1 removed [ 194.753265][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.771808][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.789989][ T9599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.919921][ T9618] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.022105][ T9622] openvswitch: netlink: IPv4 tunnel dst address is zero [ 195.052662][ T9621] netlink: 'syz.4.1043': attribute type 29 has an invalid length. [ 195.083340][ T9621] netlink: 'syz.4.1043': attribute type 29 has an invalid length. [ 195.105625][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.135490][ T9621] unsupported nla_type 58 [ 195.570077][ T9649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.302299][ T9692] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 196.370008][ T9692] bond3: entered promiscuous mode [ 196.375821][ T9692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.447393][ T9692] bond3: (slave bridge2): making interface the new active one [ 196.455240][ T9692] bridge2: entered promiscuous mode [ 196.462896][ T9692] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 196.593877][ T9704] __nla_validate_parse: 13 callbacks suppressed [ 196.593896][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'. [ 196.809039][ T9716] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1071'. [ 197.102489][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 197.271871][ T9729] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 197.299415][ T9730] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1077'. [ 197.320845][ T9729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1076'. [ 197.887048][ T9755] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1083'. [ 197.903238][ T9756] tipc: Enabling of bearer rejected, failed to enable media [ 198.207056][ T9773] bridge2: entered promiscuous mode [ 198.227826][ T9776] netlink: 'syz.0.1084': attribute type 142 has an invalid length. [ 198.243035][ T9773] bridge2: entered allmulticast mode [ 198.803230][ T9800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1094'. [ 198.933482][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1096'. [ 198.937489][ T9804] vlan2: entered promiscuous mode [ 198.946071][ T9810] netlink: 'syz.1.1096': attribute type 2 has an invalid length. [ 198.963372][ T9804] bridge0: entered promiscuous mode [ 198.981814][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 199.031460][ T9804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1095'. [ 199.305862][ T9825] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 200.299934][ T9871] netlink: 'syz.1.1115': attribute type 33 has an invalid length. [ 200.450168][ T9876] netlink: 'syz.4.1116': attribute type 10 has an invalid length. [ 200.928395][ T9891] tipc: MTU too low for tipc bearer [ 201.123379][ T9905] unsupported nlmsg_type 40 [ 201.200840][ T9900] veth0: entered promiscuous mode [ 201.209082][ T9900] veth0: left promiscuous mode [ 201.701814][ T9941] __nla_validate_parse: 11 callbacks suppressed [ 201.702979][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 201.712225][ T9942] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 201.791860][ T9942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.803631][ T9939] syzkaller0: entered promiscuous mode [ 201.809150][ T9939] syzkaller0: entered allmulticast mode [ 201.827263][ T9943] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 201.909748][ T9947] tipc: Enabled bearer , priority 10 [ 202.007592][ T9949] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 202.033331][ T9949] netlink: 'syz.1.1138': attribute type 2 has an invalid length. [ 202.325262][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 202.354586][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 202.382029][ T9963] syzkaller0: entered promiscuous mode [ 202.387817][ T9963] syzkaller0: entered allmulticast mode [ 202.471984][ T9963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1144'. [ 202.481430][ T9963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1144'. [ 202.550872][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1147'. [ 202.587241][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1147'. [ 202.621753][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1147'. [ 202.643680][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1147'. [ 203.105320][ T9995] netlink: 'syz.2.1154': attribute type 4 has an invalid length. [ 203.204091][ T9995] netlink: 'syz.2.1154': attribute type 4 has an invalid length. [ 203.750441][T10019] netlink: 'syz.0.1161': attribute type 2 has an invalid length. [ 203.931745][T10027] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1164'. [ 205.069038][T10092] netlink: 'syz.1.1184': attribute type 3 has an invalid length. [ 205.391546][T10111] netlink: 'syz.2.1191': attribute type 10 has an invalid length. [ 205.435621][T10111] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 205.813258][T10137] tipc: Started in network mode [ 205.844400][T10137] tipc: Node identity 00000000000000000002, cluster identity 4711 [ 205.888953][T10137] tipc: Enabling of bearer rejected, failed to enable media [ 206.895088][T10200] syz.2.1211 (10200) used greatest stack depth: 15968 bytes left [ 207.044849][T10209] __nla_validate_parse: 8 callbacks suppressed [ 207.044871][T10209] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1215'. [ 207.046760][T10211] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 207.069094][T10209] .: renamed from bridge_slave_1 [ 207.111708][T10211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1217'. [ 207.120797][T10211] netlink: 'syz.1.1217': attribute type 7 has an invalid length. [ 207.143735][T10211] netlink: 'syz.1.1217': attribute type 8 has an invalid length. [ 207.159338][T10213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1218'. [ 207.172977][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 207.226204][T10214] ip6gre1: entered allmulticast mode [ 207.475962][T10226] syzkaller0: entered promiscuous mode [ 207.496307][T10226] syzkaller0: entered allmulticast mode [ 207.508801][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 207.539754][T10229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.762819][T10235] syzkaller0: entered promiscuous mode [ 207.768367][T10235] syzkaller0: entered allmulticast mode [ 207.915226][T10255] x_tables: duplicate underflow at hook 2 [ 208.084874][T10259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'. [ 208.148421][T10259] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 208.191572][T10259] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.204681][T10259] gretap1: entered promiscuous mode [ 208.220284][T10259] gretap1: entered allmulticast mode [ 208.506374][T10279] netlink: 'syz.0.1239': attribute type 3 has an invalid length. [ 208.579295][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 208.674881][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'. [ 208.706155][T10289] tc_dump_action: action bad kind [ 208.729776][T10264] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20003 [ 208.745367][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 208.805474][T10296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1241'. [ 208.844529][T10289] macvlan0: left allmulticast mode [ 208.923586][T10302] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 208.949305][T10294] syzkaller0: entered promiscuous mode [ 208.974377][T10303] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 208.979857][T10294] syzkaller0: entered allmulticast mode [ 209.424010][T10322] pim6reg1: entered promiscuous mode [ 209.429398][T10322] pim6reg1: entered allmulticast mode [ 210.120232][T10358] netlink: 'syz.1.1258': attribute type 12 has an invalid length. [ 210.368837][T10366] syzkaller1: entered promiscuous mode [ 210.391590][T10366] syzkaller1: entered allmulticast mode [ 210.669219][T10374] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 210.881563][T10381] veth0_to_bond: left allmulticast mode [ 211.208143][T10407] netlink: 'syz.0.1274': attribute type 3 has an invalid length. [ 212.303883][T10460] __nla_validate_parse: 8 callbacks suppressed [ 212.303903][T10460] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1290'. [ 212.351619][T10460] block nbd0: Unsupported socket: should be TCP or UNIX. [ 212.433373][T10470] bond0: entered promiscuous mode [ 212.438472][T10470] bridge_slave_1: entered promiscuous mode [ 212.477862][T10470] batadv0: entered promiscuous mode [ 212.486866][T10470] debugfs: 'hsr1' already exists in 'hsr' [ 212.506386][T10470] Cannot create hsr debugfs directory [ 212.519544][T10470] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 212.531787][T10470] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 212.542920][T10470] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 212.566156][T10476] netlink: 'syz.4.1295': attribute type 1 has an invalid length. [ 212.617782][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 212.665248][T10476] bond4: (slave bridge3): making interface the new active one [ 212.674209][T10476] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 212.699780][T10484] wlan0 speed is unknown, defaulting to 1000 [ 212.722989][T10484] wlan0 speed is unknown, defaulting to 1000 [ 212.730990][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 212.745782][T10484] wlan0 speed is unknown, defaulting to 1000 [ 212.780083][T10484] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 212.877688][T10484] wlan0 speed is unknown, defaulting to 1000 [ 212.908033][T10484] wlan0 speed is unknown, defaulting to 1000 [ 212.929613][T10484] wlan0 speed is unknown, defaulting to 1000 [ 212.953935][T10484] wlan0 speed is unknown, defaulting to 1000 [ 212.987617][T10484] wlan0 speed is unknown, defaulting to 1000 [ 213.045636][T10497] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 213.077128][T10504] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1304'. [ 213.695788][T10531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1314'. [ 213.756796][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 214.186003][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'. [ 214.205688][T10556] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 214.218186][T10556] netlink: 'syz.4.1322': attribute type 3 has an invalid length. [ 214.228083][T10556] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1322'. [ 214.239702][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'. [ 214.565564][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 214.857628][T10585] bond5: option resend_igmp: invalid value (32767) [ 214.865015][T10585] bond5: option resend_igmp: allowed values 0 - 255 [ 214.879379][T10585] bond5 (unregistering): Released all slaves [ 215.593123][T10628] pim6reg: entered allmulticast mode [ 215.608367][T10634] netlink: 'syz.1.1347': attribute type 3 has an invalid length. [ 215.694392][T10638] x_tables: duplicate underflow at hook 1 [ 215.751106][T10646] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 216.102507][T10660] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 216.291858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.878042][T10689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.905072][T10695] macsec1: entered promiscuous mode [ 216.910466][T10695] bridge0: entered promiscuous mode [ 216.919449][T10695] macsec1: entered allmulticast mode [ 216.929428][T10695] bridge0: entered allmulticast mode [ 216.936793][T10695] bridge0: port 3(macsec1) entered blocking state [ 216.944349][T10695] bridge0: port 3(macsec1) entered disabled state [ 216.965335][T10695] bridge0: left allmulticast mode [ 216.973117][T10695] bridge0: left promiscuous mode [ 217.205162][T10722] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 217.229313][T10718] netlink: 'syz.4.1373': attribute type 13 has an invalid length. [ 217.554713][T10739] x_tables: duplicate underflow at hook 2 [ 217.800543][T10748] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 217.928405][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.969681][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.991518][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.992824][T10755] __nla_validate_parse: 11 callbacks suppressed [ 217.992839][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 218.015075][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.015304][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.015445][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.124214][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.162320][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.170736][T10750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.915502][T10812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1398'. [ 219.732884][T10864] mac80211_hwsim hwsim17 ÿ: renamed from wlan1 [ 219.953748][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 220.106377][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 220.297140][T10894] macvtap1: entered allmulticast mode [ 220.303267][T10894] veth0_macvtap: entered allmulticast mode [ 220.423898][T10899] veth0: entered promiscuous mode [ 220.467430][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1419'. [ 220.476534][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 220.661114][T10898] veth0: left promiscuous mode [ 220.770638][T10914] netlink: 'syz.1.1422': attribute type 21 has an invalid length. [ 220.874328][T10914] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 220.897993][T10914] bond6 (unregistering): Released all slaves [ 220.983791][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 221.051862][T10932] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1425'. [ 221.311025][T10950] sch_fq: defrate 0 ignored. [ 221.355063][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1431'. [ 221.602469][T10970] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1435'. [ 222.522791][ C1] net_ratelimit: 1015 callbacks suppressed [ 222.522813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.567437][T11033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.015879][T11057] __nla_validate_parse: 3 callbacks suppressed [ 223.015899][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 223.138788][T11067] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1460'. [ 223.224213][T11067] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1460'. [ 223.269856][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 223.721005][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'. [ 223.804072][T11099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1469'. [ 223.915248][T11106] dvmrp0: entered allmulticast mode [ 224.024458][T11111] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 224.373922][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1476'. [ 224.410169][T11125] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1476'. [ 224.453010][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 224.490585][T11134] lo speed is unknown, defaulting to 1000 [ 224.544001][T11134] lo speed is unknown, defaulting to 1000 [ 224.562505][T11134] lo speed is unknown, defaulting to 1000 [ 224.708253][T11138] tipc: Cannot configure node identity twice [ 224.710517][T11140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.723514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.734989][T11103] infiniband syû: set down [ 224.739662][T11103] infiniband syû: added bond_slave_0 [ 224.750642][T11103] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 224.755413][T11103] infiniband syû: Couldn't open port 1 [ 224.763648][T11138] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 224.803399][T11138] syzkaller1: linktype set to 823 [ 224.876737][T11103] RDS/IB: syû: added [ 224.892342][T11103] smc: adding ib device syû with port count 1 [ 224.902745][T11103] smc: ib device syû port 1 has no pnetid [ 225.004313][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 226.072358][T11189] veth5: entered promiscuous mode [ 226.077466][T11189] veth5: entered allmulticast mode [ 226.700686][T11220] tipc: Enabling of bearer rejected, failed to enable media [ 227.009084][T11236] syzkaller0: entered promiscuous mode [ 227.024972][T11236] syzkaller0: entered allmulticast mode [ 227.340272][T11252] netlink: 'syz.3.1515': attribute type 29 has an invalid length. [ 227.355562][T11251] netlink: 'syz.3.1515': attribute type 29 has an invalid length. [ 227.375391][T11252] netlink: 'syz.3.1515': attribute type 29 has an invalid length. [ 227.395510][T11252] netlink: 'syz.3.1515': attribute type 29 has an invalid length. [ 227.427319][T11252] netlink: 'syz.3.1515': attribute type 29 has an invalid length. [ 227.458507][T11252] netlink: 'syz.3.1515': attribute type 29 has an invalid length. [ 227.800753][T11279] geneve2: entered promiscuous mode [ 227.867744][T11283] netlink: 'syz.1.1522': attribute type 14 has an invalid length. [ 228.165319][T11134] infiniband syz2: set active [ 228.170127][ T7479] lo speed is unknown, defaulting to 1000 [ 228.177185][T11134] infiniband syz2: added lo [ 228.188182][T11134] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 228.194869][T11134] infiniband syz2: Couldn't open port 1 [ 228.301946][T11134] RDS/IB: syz2: added [ 228.314092][T11134] smc: adding ib device syz2 with port count 1 [ 228.326765][T11134] smc: ib device syz2 port 1 has no pnetid [ 228.345182][ T9257] lo speed is unknown, defaulting to 1000 [ 228.356971][T11134] lo speed is unknown, defaulting to 1000 [ 228.685489][T11318] __nla_validate_parse: 16 callbacks suppressed [ 228.685509][T11318] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1531'. [ 229.163597][T11347] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 229.172171][T11347] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1538'. [ 229.173350][T11335] bond5: invalid ARP target 0.0.0.0 specified for addition [ 229.189890][T11335] bond5: option arp_ip_target: invalid value (0) [ 229.217479][T11335] bond5 (unregistering): Released all slaves [ 229.306732][T11134] lo speed is unknown, defaulting to 1000 [ 229.387638][T11352] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1538'. [ 229.587732][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1542'. [ 229.702060][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'. [ 229.788699][T11368] netlink: 'syz.3.1544': attribute type 4 has an invalid length. [ 229.884245][T11376] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1546'. [ 230.074502][T11134] lo speed is unknown, defaulting to 1000 [ 230.292297][T11393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 230.435808][T11390] "syz.1.1551" (11390) uses obsolete ecb(arc4) skcipher [ 230.595143][T11406] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1556'. [ 230.665370][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1557'. [ 230.679970][T11406] bond6 (unregistering): Released all slaves [ 230.699364][T11134] lo speed is unknown, defaulting to 1000 [ 230.877459][T11421] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1559'. [ 231.070092][T11423] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 231.258802][T11134] lo speed is unknown, defaulting to 1000 [ 231.855280][T11460] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 232.487566][T11494] bridge3: port 1(veth7) entered blocking state [ 232.495259][T11494] bridge3: port 1(veth7) entered disabled state [ 232.505505][T11494] veth7: entered allmulticast mode [ 232.514579][T11494] veth7: entered promiscuous mode [ 232.549377][T11497] syzkaller1: entered promiscuous mode [ 232.555526][T11497] syzkaller1: entered allmulticast mode [ 232.582839][T11489] bridge3: port 2(veth0_to_bond) entered blocking state [ 232.606796][T11489] bridge3: port 2(veth0_to_bond) entered disabled state [ 232.615270][T11489] veth0_to_bond: entered allmulticast mode [ 232.623534][T11489] veth0_to_bond: entered promiscuous mode [ 233.086031][T11526] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 233.672988][T11552] IPv6: sit1: Disabled Multicast RS [ 233.693591][T11552] sit1: entered allmulticast mode [ 234.104959][T11584] __nla_validate_parse: 16 callbacks suppressed [ 234.104982][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1610'. [ 234.260194][T11589] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 234.304270][T11595] x_tables: duplicate underflow at hook 1 [ 234.335917][T11595] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 234.455400][T11606] netlink: 'syz.4.1618': attribute type 83 has an invalid length. [ 234.752503][T11622] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1622'. [ 234.815091][T11626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.066292][T11641] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 235.077509][T11635] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1626'. [ 235.092477][T11592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.105180][T11638] vlan2: entered promiscuous mode [ 235.116003][T11638] gretap0: entered promiscuous mode [ 235.131891][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 235.137425][T11644] tipc: Started in network mode [ 235.146356][T11644] tipc: Node identity 84e, cluster identity 4711 [ 235.153326][T11635] openvswitch: netlink: Flow key attr not present in new flow. [ 235.162933][T11644] tipc: Node number set to 2126 [ 235.172209][T11635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1626'. [ 235.397455][T11652] bridge0: port 1(batadv1) entered blocking state [ 235.426733][T11652] bridge0: port 1(batadv1) entered disabled state [ 235.463877][T11652] batadv1: entered allmulticast mode [ 235.493406][T11652] batadv1: entered promiscuous mode [ 235.883658][ T8288] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 235.893261][ T8288] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 236.073316][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 236.093885][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 236.176358][ T8288] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.176458][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 236.191999][ T8288] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.229089][ T8288] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.237878][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 236.260669][T11699] ip6erspan0: entered promiscuous mode [ 236.267134][T11699] ip6erspan0: entered allmulticast mode [ 236.276154][ T8288] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.298114][T11699] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1647'. [ 236.640353][T11715] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 236.640353][T11714] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 236.779810][T11715] bond2 (unregistering): Released all slaves [ 236.833747][T11720] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 237.205547][T11749] ip6gretap0: entered promiscuous mode [ 237.243545][T11749] debugfs: 'hsr0' already exists in 'hsr' [ 237.255418][T11749] Cannot create hsr debugfs directory [ 237.261432][T11749] hsr0: entered promiscuous mode [ 237.789888][T11778] netlink: 'syz.3.1668': attribute type 63 has an invalid length. [ 238.398851][T11815] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 239.201946][T11859] tipc: Enabling of bearer rejected, failed to enable media [ 239.395209][T11868] __nla_validate_parse: 4 callbacks suppressed [ 239.395229][T11868] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1696'. [ 239.509341][T11874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.531074][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 239.626110][T11878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.780995][T11886] syzkaller0: entered promiscuous mode [ 239.831677][T11886] syzkaller0: entered allmulticast mode [ 239.910524][T11891] netlink: 'syz.4.1703': attribute type 11 has an invalid length. [ 239.919519][T11891] netlink: 'syz.4.1703': attribute type 11 has an invalid length. [ 239.928310][T11891] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1703'. [ 240.179032][T11907] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1707'. [ 240.205143][T11907] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1707'. [ 240.224988][T11907] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 240.321068][T11909] tipc: Enabled bearer , priority 0 [ 240.332968][T11909] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 240.358495][T11909] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 240.382435][T11909] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 240.427749][T11909] tipc: Resetting bearer [ 240.708366][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 240.736322][T11927] netlink: 'syz.3.1714': attribute type 10 has an invalid length. [ 240.788817][T11916] bond0: (slave netdevsim0): Releasing backup interface [ 240.830017][T11927] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 240.845085][T11927] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 241.431411][ T9257] tipc: Node number set to 131072 [ 241.446243][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 241.478717][T11966] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 242.213188][T11996] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1736'. [ 242.672610][T12004] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 242.704274][T12004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1737'. [ 243.014738][T12018] sctp: [Deprecated]: syz.2.1739 (pid 12018) Use of int in maxseg socket option. [ 243.014738][T12018] Use struct sctp_assoc_value instead [ 244.285810][T12089] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 244.317985][T12089] veth0_virt_wifi: entered allmulticast mode [ 244.350480][T12089] team0: Port device veth0_virt_wifi added [ 244.377598][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 244.395159][T12098] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 244.507553][T12098] bond2: entered promiscuous mode [ 244.519475][T12098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.584213][T12106] bond2: (slave bridge3): making interface the new active one [ 244.599529][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1763'. [ 244.599535][T12110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1763'. [ 244.631977][T12106] bridge3: entered promiscuous mode [ 244.660559][T12106] bridge3: left promiscuous mode [ 244.902078][T12122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.909421][T12122] IPv6: NLM_F_CREATE should be set when creating new route [ 244.945371][T12125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.241553][T12143] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 245.648220][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 245.986506][T12198] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 246.087035][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 246.517117][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1793'. [ 246.872647][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1798'. [ 246.882632][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1798'. [ 246.894776][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.905600][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.917551][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.926557][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.936224][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.945965][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.954864][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.965877][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.974801][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.243501][T12263] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1803'. [ 247.621749][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 247.660567][T12282] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 247.683682][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 247.781025][T12295] netlink: 'syz.4.1811': attribute type 25 has an invalid length. [ 247.817029][T12285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.828669][T12285] bond4: (slave bond5): making interface the new active one [ 247.838330][T12285] bond4: (slave bond5): Enslaving as an active interface with an up link [ 247.857636][T12297] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 247.892853][T12295] netlink: 'syz.4.1811': attribute type 25 has an invalid length. [ 247.942573][ T2977] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.958332][ T2977] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.006233][ T2977] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.027495][ T2977] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.091047][T12306] netlink: 'syz.2.1815': attribute type 3 has an invalid length. [ 248.325000][T12317] syzkaller0: entered promiscuous mode [ 248.334898][T12317] syzkaller0: entered allmulticast mode [ 248.903149][T12332] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 250.135146][T12350] net_ratelimit: 1016 callbacks suppressed [ 250.135169][T12350] openvswitch: netlink: Message has 214 unknown bytes. [ 250.258316][T12357] netlink: 'syz.0.1830': attribute type 3 has an invalid length. [ 250.830963][T12399] __nla_validate_parse: 7 callbacks suppressed [ 250.831046][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 250.831050][T12399] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1841'. [ 250.859990][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 250.872168][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 250.884283][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 250.923162][T12402] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1842'. [ 250.975768][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'. [ 250.986231][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'. [ 251.575128][T12438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1852'. [ 251.704367][T12443] sctp: [Deprecated]: syz.0.1854 (pid 12443) Use of int in maxseg socket option. [ 251.704367][T12443] Use struct sctp_assoc_value instead [ 251.876444][T12450] bond5: ARP target 1.0.0.0 is already present [ 251.883431][T12450] bond5: option arp_ip_target: invalid value (1) [ 251.895505][T12450] bond5 (unregistering): Released all slaves [ 251.909163][T12458] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 251.927320][T12459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1858'. [ 251.992815][T12459] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 252.721013][T12506] bond5: entered promiscuous mode [ 252.757756][T12506] bond5: entered allmulticast mode [ 252.792686][T12506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.966163][T12525] netlink: 'syz.1.1874': attribute type 5 has an invalid length. [ 252.994569][T12531] sctp: [Deprecated]: syz.4.1876 (pid 12531) Use of int in max_burst socket option deprecated. [ 252.994569][T12531] Use struct sctp_assoc_value instead [ 253.023297][T12532] netlink: 'syz.3.1877': attribute type 33 has an invalid length. [ 253.203382][T12544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.367994][T12546] bond6 (unregistering): Released all slaves [ 253.752413][T12558] gtp0: entered promiscuous mode [ 253.766532][T12558] gtp0: entered allmulticast mode [ 254.093455][T12566] tipc: Enabled bearer , priority 0 [ 254.121901][T12566] syzkaller0: entered promiscuous mode [ 254.127464][T12566] syzkaller0: entered allmulticast mode [ 254.254203][T12566] tipc: Resetting bearer [ 254.285147][T12565] tipc: Resetting bearer [ 254.327789][T12565] tipc: Disabling bearer [ 254.905197][T12601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.044100][T12610] netlink: 'syz.3.1899': attribute type 26 has an invalid length. [ 255.116246][T12616] sctp: [Deprecated]: syz.4.1901 (pid 12616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.116246][T12616] Use struct sctp_sack_info instead [ 255.968530][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.140158][T12666] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 256.290571][T12674] __nla_validate_parse: 13 callbacks suppressed [ 256.290591][T12674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1919'. [ 256.369586][T12679] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1918'. [ 256.444477][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1921'. [ 256.477013][T12684] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.482787][T12681] openvswitch: netlink: Flow key attr not present in new flow. [ 256.484384][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 256.596739][T12688] Bluetooth: MGMT ver 1.23 [ 256.615804][T12688] Bluetooth: hci1: too big key_count value 32778 [ 256.643774][T12691] netlink: 'syz.0.1925': attribute type 21 has an invalid length. [ 256.652308][T12691] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1925'. [ 256.663089][T12691] netlink: 'syz.0.1925': attribute type 5 has an invalid length. [ 256.670864][T12691] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1925'. [ 257.732439][T12761] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1945'. [ 258.073382][T12778] netlink: 'syz.3.1950': attribute type 1 has an invalid length. [ 258.102160][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'. [ 258.145004][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 258.243318][T12786] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1953'. [ 258.435594][T12789] netlink: 'syz.3.1954': attribute type 5 has an invalid length. [ 258.501872][T12800] sctp: [Deprecated]: syz.1.1955 (pid 12800) Use of int in maxseg socket option. [ 258.501872][T12800] Use struct sctp_assoc_value instead [ 258.555605][T12800] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 259.006961][T12821] lo: left allmulticast mode [ 259.032635][T12821] tunl0: left allmulticast mode [ 259.049654][T12821] gre0: left allmulticast mode [ 259.055717][T12821] gretap0: left allmulticast mode [ 259.069665][T12821] erspan0: left allmulticast mode [ 259.087726][T12821] ip_vti0: left allmulticast mode [ 259.100853][T12821] ip6_vti0: left allmulticast mode [ 259.108046][T12821] sit0: left allmulticast mode [ 259.113795][T12821] ip6tnl0: left allmulticast mode [ 259.122777][T12821] ip6gre0: left allmulticast mode [ 259.129592][T12821] syz_tun: left allmulticast mode [ 259.135861][T12821] ip6gretap0: left allmulticast mode [ 259.143937][T12821] vcan0: left allmulticast mode [ 259.149196][T12821] bond0: left allmulticast mode [ 259.159560][T12821] nlmon0: left allmulticast mode [ 259.167177][T12821] caif0: left allmulticast mode [ 259.172780][T12821] batadv0: left allmulticast mode [ 259.192047][T12821] vxcan0: left allmulticast mode [ 259.197426][T12821] vxcan1: left allmulticast mode [ 259.205797][T12821] veth0: left allmulticast mode [ 259.210966][T12821] veth1: left allmulticast mode [ 259.216704][T12821] wg0: left allmulticast mode [ 259.222021][T12821] wg1: left allmulticast mode [ 259.239841][T12821] wg2: left allmulticast mode [ 259.249833][T12821] veth0_to_bridge: left allmulticast mode [ 259.263816][T12821] bridge_slave_0: left allmulticast mode [ 259.274249][T12821] veth1_to_bridge: left allmulticast mode [ 259.283123][T12821] bridge_slave_1: left allmulticast mode [ 259.289260][T12821] bond_slave_0: left allmulticast mode [ 259.296424][T12821] veth1_to_bond: left allmulticast mode [ 259.302640][T12821] bond_slave_1: left allmulticast mode [ 259.308508][T12821] veth0_to_team: left allmulticast mode [ 259.314863][T12821] team_slave_0: left allmulticast mode [ 259.324432][T12821] veth1_to_team: left allmulticast mode [ 259.334012][T12821] team_slave_1: left allmulticast mode [ 259.353184][T12821] veth0_to_batadv: left allmulticast mode [ 259.365889][T12821] batadv_slave_0: left allmulticast mode [ 259.377113][T12821] xfrm0: left allmulticast mode [ 259.383952][T12821] veth0_to_hsr: left allmulticast mode [ 259.390155][T12821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.550284][T12844] IPv6: sit1: Disabled Multicast RS [ 260.339497][T12891] syzkaller0: entered promiscuous mode [ 260.353323][T12891] syzkaller0: entered allmulticast mode [ 260.427425][T12891] tipc: Enabled bearer , priority 0 [ 260.440742][T12888] tipc: Resetting bearer [ 260.486975][T12888] tipc: Disabling bearer [ 260.519080][T12899] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.528609][T12899] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.554211][T12904] xt_bpf: check failed: parse error [ 260.659796][T12908] netlink: 'syz.2.1983': attribute type 2 has an invalid length. [ 260.669617][T12908] netlink: 'syz.2.1983': attribute type 11 has an invalid length. [ 260.756624][T12908] vlan0: entered allmulticast mode [ 260.765648][T12908] syz_tun: entered allmulticast mode [ 261.119203][T12928] tunl0: entered promiscuous mode [ 261.159551][T12928] netlink: 'syz.0.1990': attribute type 3 has an invalid length. [ 261.474243][T12947] __nla_validate_parse: 10 callbacks suppressed [ 261.474264][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1998'. [ 261.497469][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 261.508488][T12949] vlan2: entered promiscuous mode [ 261.521291][T12949] geneve1: entered promiscuous mode [ 261.537945][T12949] vlan2: entered allmulticast mode [ 261.557884][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 261.592222][T12949] netlink: 'syz.4.1997': attribute type 21 has an invalid length. [ 261.653311][T12949] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 261.689227][T12949] bond6 (unregistering): Released all slaves [ 261.892355][T12962] tipc: New replicast peer: 255.255.255.255 [ 261.898803][T12962] tipc: Enabled bearer , priority 10 [ 261.928336][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 262.118035][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 262.156203][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 262.205545][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 262.238255][T12990] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 262.266568][T12990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2005'. [ 262.329918][T12990] team0: Port device geneve0 added [ 262.386199][T12997] ipt_REJECT: ECHOREPLY no longer supported. [ 262.400845][T12997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.497069][T12999] tipc: Enabled bearer , priority 0 [ 262.514110][T12999] syzkaller0: entered allmulticast mode [ 262.545104][T12999] tipc: Resetting bearer [ 262.587260][T12998] tipc: Resetting bearer [ 262.611809][T12998] tipc: Disabling bearer [ 262.805960][T13017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2016'. [ 262.806398][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2016'. [ 263.941949][T13090] bridge_slave_0: invalid flags given to default FDB implementation [ 264.192874][T13102] nbd2: detected capacity change from 0 to 127 [ 264.228957][ T5149] block nbd2: Receive control failed (result -32) [ 264.242579][ T8392] block nbd2: Dead connection, failed to find a fallback [ 264.249968][ T8392] block nbd2: shutting down sockets [ 264.282143][ T8392] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.340748][ T8392] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.349454][ T8392] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.360533][ T8392] Buffer I/O error on dev nbd2, logical block 1, async page read [ 264.375426][T13123] netlink: 'syz.3.2050': attribute type 11 has an invalid length. [ 264.445752][ T8392] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.473733][ T8392] Buffer I/O error on dev nbd2, logical block 2, async page read [ 264.482226][ T8392] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.501787][ T8392] Buffer I/O error on dev nbd2, logical block 3, async page read [ 264.533968][ T8392] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.555461][ T8392] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.571802][ T8392] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.591810][ T8392] Buffer I/O error on dev nbd2, logical block 1, async page read [ 264.599848][ T8392] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.610590][ T8392] Buffer I/O error on dev nbd2, logical block 2, async page read [ 264.640730][ T8392] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.677554][ T8392] Buffer I/O error on dev nbd2, logical block 3, async page read [ 264.686469][ T8392] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.697136][ T8392] Buffer I/O error on dev nbd2, logical block 0, async page read [ 264.706022][ T8392] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.744628][ T8392] Buffer I/O error on dev nbd2, logical block 1, async page read [ 264.766272][T13140] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 264.783394][ T8392] ldm_validate_partition_table(): Disk read failed. [ 264.790954][ T8392] Dev nbd2: unable to read RDB block 0 [ 264.816080][ T8392] nbd2: unable to read partition table [ 264.874911][ T8392] ldm_validate_partition_table(): Disk read failed. [ 264.916061][ T8392] Dev nbd2: unable to read RDB block 0 [ 264.924694][ T8392] nbd2: unable to read partition table [ 265.410430][T13180] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 265.727093][T13205] netlink: 'syz.3.2073': attribute type 39 has an invalid length. [ 266.703425][T13253] delete_channel: no stack [ 266.765887][T13256] gtp1: entered promiscuous mode [ 266.782925][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.791489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.817757][T13256] gtp1: entered allmulticast mode [ 266.868107][T13245] infiniband syz1: set down [ 266.873358][T13245] infiniband syz1: added ipvlan0 [ 266.924838][T13245] RDS/IB: syz1: added [ 266.929019][T13245] smc: adding ib device syz1 with port count 1 [ 266.941191][T13245] smc: ib device syz1 port 1 has no pnetid [ 266.968975][T13260] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 267.022156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.036475][T13253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.056111][T13248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.061472][T13264] netlink: 'syz.4.2088': attribute type 16 has an invalid length. [ 267.065029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.144137][T13264] netlink: 'syz.4.2088': attribute type 17 has an invalid length. [ 267.194668][T13268] __nla_validate_parse: 13 callbacks suppressed [ 267.194691][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 267.252314][T13264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.272527][T13264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.298071][T13272] netlink: 'syz.2.2091': attribute type 8 has an invalid length. [ 267.479827][T13278] syzkaller0: entered promiscuous mode [ 267.497641][T13278] syzkaller0: entered allmulticast mode [ 267.961767][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 267.995162][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 268.106450][T13306] geneve3: entered promiscuous mode [ 268.125549][T13306] geneve3: entered allmulticast mode [ 268.137682][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2100'. [ 268.160029][ T8301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 268.188145][T13309] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 268.220343][ T8301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 268.241488][ T8301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 268.300523][ T8301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 268.309323][T13316] netlink: 'syz.1.2104': attribute type 11 has an invalid length. [ 268.477981][T13320] xfrm1: entered allmulticast mode [ 268.668874][T13329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.716927][T13329] netlink: 'syz.2.2110': attribute type 9 has an invalid length. [ 268.740108][T13329] netlink: 'syz.2.2110': attribute type 6 has an invalid length. [ 268.819896][T13335] ipt_REJECT: TCP_RESET invalid for non-tcp [ 269.006470][T13341] netlink: 'syz.4.2115': attribute type 9 has an invalid length. [ 269.015685][T13341] netlink: 'syz.4.2115': attribute type 11 has an invalid length. [ 269.024970][T13341] netlink: 'syz.4.2115': attribute type 12 has an invalid length. [ 269.041879][T13341] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2115'. [ 269.068657][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 269.117481][T13346] veth9: entered allmulticast mode [ 269.456037][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'. [ 269.469243][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'. [ 269.491801][T13365] syzkaller1: entered promiscuous mode [ 269.497895][T13365] syzkaller1: entered allmulticast mode [ 269.721596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.922181][T13379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2128'. [ 269.966078][T13380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2129'. [ 270.023885][T13382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.100812][T13386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.761456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.776592][T13422] C: renamed from lo (while UP) [ 270.817964][T13422] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.055558][T13439] validate_nla: 2 callbacks suppressed [ 271.055579][T13439] netlink: 'syz.2.2146': attribute type 3 has an invalid length. [ 272.285394][T13508] __nla_validate_parse: 8 callbacks suppressed [ 272.285417][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2162'. [ 272.302138][T13504] veth0: entered promiscuous mode [ 272.320009][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 272.408668][T13513] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2165'. [ 272.489808][T13519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2167'. [ 272.490867][T13504] veth0 (unregistering): left promiscuous mode [ 272.743306][T13527] netlink: 'syz.2.2170': attribute type 3 has an invalid length. [ 273.077600][T13548] netlink: 'syz.1.2176': attribute type 12 has an invalid length. [ 273.184457][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 273.415444][T13564] rdma_rxe: rxe_newlink: failed to add lo [ 273.448953][T13564] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2182'. [ 273.722086][T13590] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2186'. [ 273.754113][T13587] IPv6: Can't replace route, no match found [ 274.017714][T13607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'. [ 274.066198][T13607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'. [ 274.088469][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'. [ 274.237827][T13617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.770998][T13647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.420551][T13679] x_tables: duplicate underflow at hook 1 [ 275.446462][T13677] bond2: option mode: unable to set because the bond device has slaves [ 275.457261][T13677] netlink: 'syz.1.2212': attribute type 10 has an invalid length. [ 275.473521][T13677] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 276.086815][T13716] syzkaller1: entered promiscuous mode [ 276.098593][T13716] syzkaller1: entered allmulticast mode [ 276.191972][T13726] ip6t_REJECT: ECHOREPLY is not supported [ 276.408334][T13733] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 276.525835][T13750] netlink: 'syz.1.2232': attribute type 10 has an invalid length. [ 276.938138][T13769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.626308][T13797] Unsupported ieee802154 address type: 0 [ 278.999335][T13833] __nla_validate_parse: 48 callbacks suppressed [ 278.999359][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 279.022360][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2255'. [ 279.050531][T13838] policy can only be matched on NF_INET_PRE_ROUTING [ 279.050554][T13838] unable to load match [ 279.142781][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2254'. [ 279.153771][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2254'. [ 279.156342][T13842] sctp: [Deprecated]: syz.0.2258 (pid 13842) Use of int in max_burst socket option deprecated. [ 279.156342][T13842] Use struct sctp_assoc_value instead [ 279.192664][T13829] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 279.284530][T13853] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 279.336193][T13853] hsr0: mtu greater than device maximum [ 279.353658][T13853] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 279.362397][T13853] hsr0: mtu greater than device maximum [ 279.390240][T13853] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 279.411036][T13853] hsr0: mtu greater than device maximum [ 279.452455][T13853] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 279.461987][T13853] hsr0: mtu greater than device maximum [ 279.468061][T13853] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 279.483861][T13853] hsr0: mtu greater than device maximum [ 279.514303][T13853] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 279.542232][T13853] hsr0: mtu greater than device maximum [ 279.561893][T13853] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 279.576414][T13853] hsr0: mtu greater than device maximum [ 279.584988][T13853] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 279.593714][T13853] hsr0: mtu greater than device maximum [ 279.673202][T13853] hsr0: mtu greater than device maximum [ 279.689962][T13853] hsr0: mtu greater than device maximum [ 279.732908][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 279.743164][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 279.754429][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 279.766315][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 279.778241][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 279.789450][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 280.093084][T13892] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 280.105994][T13894] sctp: [Deprecated]: syz.1.2272 (pid 13894) Use of int in max_burst socket option deprecated. [ 280.105994][T13894] Use struct sctp_assoc_value instead [ 280.432622][T13919] veth9: entered allmulticast mode [ 280.447939][T13921] 8021q: VLANs not supported on ip_vti0 [ 281.125660][T13962] bond6: option mode: invalid value (133) [ 281.134448][T13962] bond6 (unregistering): Released all slaves [ 281.496904][T13977] syzkaller0: entered promiscuous mode [ 281.516750][T13977] syzkaller0: entered allmulticast mode [ 281.671001][T13992] validate_nla: 58 callbacks suppressed [ 281.671022][T13992] netlink: 'syz.2.2295': attribute type 1 has an invalid length. [ 281.687069][T13992] netlink: 'syz.2.2295': attribute type 4 has an invalid length. [ 281.904863][T14000] netlink: 'syz.1.2299': attribute type 39 has an invalid length. [ 282.064828][T14009] tipc: New replicast peer: 255.255.255.255 [ 282.099806][T14009] tipc: Enabled bearer , priority 10 [ 282.286915][T14017] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 282.716805][T14042] delete_channel: no stack [ 282.916209][T14049] vlan3: entered allmulticast mode [ 282.960246][T14053] netlink: 'syz.2.2316': attribute type 1 has an invalid length. [ 283.104137][T14058] tipc: Enabled bearer , priority 11 [ 283.308737][T14071] netlink: 'syz.4.2323': attribute type 3 has an invalid length. [ 283.331046][T14070] netlink: 'syz.3.2322': attribute type 6 has an invalid length. [ 283.537813][T14086] tipc: Enabled bearer , priority 0 [ 283.592133][T14086] syzkaller0: entered promiscuous mode [ 283.597742][T14086] syzkaller0: entered allmulticast mode [ 283.715217][T14086] tipc: Resetting bearer [ 283.731175][T14085] tipc: Resetting bearer [ 283.767663][T14085] tipc: Disabling bearer [ 284.087595][T14123] __nla_validate_parse: 168 callbacks suppressed [ 284.088082][T14123] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2338'. [ 284.224728][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 284.253839][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2341'. [ 284.264842][T14133] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2341'. [ 284.475918][T14147] net_ratelimit: 56 callbacks suppressed [ 284.475939][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.549613][T14149] netlink: 'syz.4.2346': attribute type 1 has an invalid length. [ 284.707162][T14149] bond6 (unregistering): Released all slaves [ 284.718427][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 284.789558][T14152] ip6tnl3: entered promiscuous mode [ 284.809331][T14152] ip6tnl3: entered allmulticast mode [ 285.058322][T14171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2350'. [ 285.232473][T14180] xt_addrtype: ipv6 does not support BROADCAST matching [ 285.448338][T14198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2359'. [ 285.898788][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2369'. [ 286.001250][T14230] lo: Caught tx_queue_len zero misconfig [ 286.375968][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 286.410332][T14260] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2380'. [ 286.508820][T14268] policy can only be matched on NF_INET_PRE_ROUTING [ 286.508845][T14268] unable to load match [ 286.524916][T14261] wlan0 speed is unknown, defaulting to 1000 [ 286.952857][T14261] C speed is unknown, defaulting to 1000 [ 286.965885][T14290] IPVS: Unknown mcast interface: lo [ 287.034754][T14292] netlink: 'syz.4.2390': attribute type 10 has an invalid length. [ 287.324647][T14310] xt_hashlimit: size too large, truncated to 1048576 [ 289.264954][T14387] __nla_validate_parse: 3 callbacks suppressed [ 289.264974][T14387] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2418'. [ 289.386579][T14392] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2421'. [ 289.561462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.014138][T14431] set match dimension is over the limit! [ 290.049524][T14431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2431'. [ 290.093848][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 290.114658][T14438] netlink: 'syz.2.2433': attribute type 25 has an invalid length. [ 290.127788][T14433] bond5 (unregistering): Released all slaves [ 290.134030][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 290.242190][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 290.267702][T14438] netlink: 'syz.2.2433': attribute type 25 has an invalid length. [ 290.297505][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 290.432129][T14448] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2436'. [ 290.448482][T14449] : entered promiscuous mode [ 290.464334][T14448] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 290.514656][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 290.837875][T14471] lo: entered promiscuous mode [ 290.850427][T14471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.904605][T14469] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.2443'. [ 291.004295][T14475] pim6reg: entered allmulticast mode [ 291.979177][T14544] xt_HMARK: spi-set and port-set can't be combined [ 292.292989][T14561] netlink: 'syz.2.2468': attribute type 10 has an invalid length. [ 292.769666][T14590] ksmbd: Unknown IPC event: 3, ignore. [ 292.803532][T14592] netlink: 'syz.3.2481': attribute type 21 has an invalid length. [ 292.822343][T14590] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 292.828401][T14590] syzkaller1: linktype set to 823 [ 293.156653][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.166347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.322903][T14627] C: renamed from team_slave_0 [ 293.353674][T14627] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 293.385271][T14627] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 293.699027][T14653] netlink: 'syz.1.2496': attribute type 6 has an invalid length. [ 293.708986][T14653] netlink: 'syz.1.2496': attribute type 5 has an invalid length. [ 293.732341][T14655] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 293.753676][T14655] Cannot find add_set index 2 as target [ 293.928427][T14658] bridge0: port 1(batadv1) entered blocking state [ 293.932844][T14661] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 293.953931][T14658] bridge0: port 1(batadv1) entered disabled state [ 293.960607][T14658] batadv1: entered allmulticast mode [ 293.986678][T14658] batadv1: entered promiscuous mode [ 294.056391][T14661] bond4: entered promiscuous mode [ 294.062070][T14661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.152662][T14671] bond4: (slave bridge4): making interface the new active one [ 294.160653][T14671] bridge4: entered promiscuous mode [ 294.170961][T14671] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 294.186971][T14670] netlink: 'syz.3.2504': attribute type 11 has an invalid length. [ 294.235492][T14682] macsec2: entered promiscuous mode [ 294.250972][T14682] bridge0: entered promiscuous mode [ 294.272115][T14682] macsec2: entered allmulticast mode [ 294.284803][T14682] bridge0: entered allmulticast mode [ 294.307902][T14682] bridge0: port 2(macsec2) entered blocking state [ 294.321891][T14682] bridge0: port 2(macsec2) entered disabled state [ 294.348102][T14682] bridge0: left allmulticast mode [ 294.367194][T14682] bridge0: left promiscuous mode [ 294.403421][T14693] __nla_validate_parse: 23 callbacks suppressed [ 294.403443][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 294.419823][T14693] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2511'. [ 294.431904][ T8284] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 294.442179][ T8284] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 294.514969][T14697] ip6tnl0: Caught tx_queue_len zero misconfig [ 294.552879][T14694] tap0: tun_chr_ioctl cmd 35108 [ 294.586108][T14694] tap0: tun_chr_ioctl cmd 1074025672 [ 294.607042][T14694] tap0: ignored: set checksum disabled [ 294.829881][T14719] netlink: 'syz.1.2521': attribute type 17 has an invalid length. [ 294.853160][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 294.870668][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2521'. [ 295.148312][T14729] team0: Caught tx_queue_len zero misconfig [ 295.298846][T14736] netlink: 'syz.4.2528': attribute type 4 has an invalid length. [ 295.451814][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 295.652178][T14757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2536'. [ 295.680499][T14751] syzkaller1: entered promiscuous mode [ 295.681747][T14759] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2535'. [ 295.695134][T14751] syzkaller1: entered allmulticast mode [ 295.745608][T14757] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 296.099299][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'. [ 296.109935][T14783] netlink: 'syz.2.2542': attribute type 5 has an invalid length. [ 296.130517][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2542'. [ 296.154325][T14789] erspan0: entered promiscuous mode [ 296.245782][T14797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2546'. [ 296.433895][T14810] : entered promiscuous mode [ 296.634439][T14825] netlink: 'syz.0.2552': attribute type 3 has an invalid length. [ 298.105623][T14894] netlink: 'syz.3.2571': attribute type 4 has an invalid length. [ 298.132712][T14894] netlink: 'syz.3.2571': attribute type 4 has an invalid length. [ 298.189433][T14903] netlink: 'syz.0.2574': attribute type 1 has an invalid length. [ 298.206792][T14903] netlink: 'syz.0.2574': attribute type 1 has an invalid length. [ 298.343818][T14907] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 298.382591][T14907] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 298.444938][T14907] bond5: (slave xfrm1): making interface the new active one [ 298.502599][T14907] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 298.571832][T14911] bond5 (unregistering): (slave xfrm1): Releasing backup interface [ 298.598238][T14911] bond5 (unregistering): Released all slaves [ 298.731042][T14935] netlink: 'syz.1.2583': attribute type 7 has an invalid length. [ 298.764996][T14935] netlink: 'syz.1.2583': attribute type 8 has an invalid length. [ 298.917987][T14944] netlink: 'syz.2.2584': attribute type 1 has an invalid length. [ 299.354116][T14976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.394607][T14979] netlink: 'syz.2.2598': attribute type 1 has an invalid length. [ 299.628286][T14979] bond6: entered promiscuous mode [ 299.634801][T14979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.718423][T14997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.812436][T15003] __nla_validate_parse: 18 callbacks suppressed [ 299.812458][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2603'. [ 299.823187][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 299.939490][T15011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.325131][T15036] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2614'. [ 300.326626][T15031] lo: entered allmulticast mode [ 300.342135][T15031] tunl0: entered allmulticast mode [ 300.347629][T15036] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2614'. [ 300.353367][T15031] gre0: entered allmulticast mode [ 300.365422][T15031] gretap0: entered allmulticast mode [ 300.371112][T15031] erspan0: entered allmulticast mode [ 300.379551][T15031] ip_vti0: entered allmulticast mode [ 300.386967][T15031] ip6_vti0: entered allmulticast mode [ 300.393251][T15031] sit0: entered allmulticast mode [ 300.398580][T15031] ip6tnl0: entered allmulticast mode [ 300.404997][T15031] ip6gre0: entered allmulticast mode [ 300.410567][T15031] ip6gretap0: entered allmulticast mode [ 300.416706][T15031] bridge0: entered allmulticast mode [ 300.422318][T15031] vcan0: entered allmulticast mode [ 300.427555][T15031] bond0: entered allmulticast mode [ 300.433551][T15031] bond_slave_0: entered allmulticast mode [ 300.439320][T15031] bond_slave_1: entered allmulticast mode [ 300.445711][T15031] team0: entered allmulticast mode [ 300.453645][T15031] team_slave_0: entered allmulticast mode [ 300.477717][T15031] team_slave_1: entered allmulticast mode [ 300.493074][T15031] geneve0: entered allmulticast mode [ 300.498835][T15031] dummy0: entered allmulticast mode [ 300.513534][T15031] nlmon0: entered allmulticast mode [ 300.519133][T15031] caif0: entered allmulticast mode [ 300.524926][T15031] batadv0: entered allmulticast mode [ 300.530322][T15031] vxcan0: entered allmulticast mode [ 300.535951][T15031] vxcan1: entered allmulticast mode [ 300.541439][T15031] veth0: entered allmulticast mode [ 300.547182][T15031] veth1: entered allmulticast mode [ 300.555624][T15031] wg0: entered allmulticast mode [ 300.560674][T15031] wg1: entered allmulticast mode [ 300.565858][T15031] veth0_to_bridge: entered allmulticast mode [ 300.572198][T15031] veth1_to_bridge: entered allmulticast mode [ 300.578515][T15031] veth1_to_bond: entered allmulticast mode [ 300.585167][T15031] veth0_to_team: entered allmulticast mode [ 300.591435][T15031] veth1_to_team: entered allmulticast mode [ 300.597450][T15031] veth1_to_batadv: entered allmulticast mode [ 300.603783][T15031] batadv_slave_1: entered allmulticast mode [ 300.609861][T15031] xfrm0: entered allmulticast mode [ 300.615651][T15031] veth0_to_hsr: entered allmulticast mode [ 300.621838][T15031] hsr_slave_0: entered allmulticast mode [ 300.627710][T15031] veth1_to_hsr: entered allmulticast mode [ 300.633719][T15031] hsr_slave_1: entered allmulticast mode [ 300.639489][T15031] hsr0: entered allmulticast mode [ 300.645248][T15031] veth1_virt_wifi: entered allmulticast mode [ 300.656388][T15031] veth1_vlan: entered allmulticast mode [ 300.662278][T15031] veth0_vlan: entered allmulticast mode [ 300.667969][T15031] vlan0: entered allmulticast mode [ 300.673774][T15031] vlan1: entered allmulticast mode [ 300.679098][T15031] macvlan0: entered allmulticast mode [ 300.684891][T15031] macvlan1: entered allmulticast mode [ 300.690396][T15031] ipvlan0: entered allmulticast mode [ 300.695984][T15031] ipvlan1: entered allmulticast mode [ 300.702050][T15031] veth1_macvtap: entered allmulticast mode [ 300.707975][T15031] veth0_macvtap: entered allmulticast mode [ 300.714157][T15031] macvtap0: entered allmulticast mode [ 300.719684][T15031] macsec0: entered allmulticast mode [ 300.735231][T15031] geneve1: entered allmulticast mode [ 300.740676][T15031] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 300.748276][T15031] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 300.755953][T15031] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 300.765865][T15031] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 300.774012][T15031] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 300.781782][T15031] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 300.788953][T15031] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 300.796336][T15031] ipvlan2: entered allmulticast mode [ 300.802340][T15031] sit1: entered allmulticast mode [ 300.815284][T15031] : entered allmulticast mode [ 300.825239][T15031] bond2: entered allmulticast mode [ 300.830808][T15031] bond3: entered allmulticast mode [ 300.836683][T15031] syztnl0: entered allmulticast mode [ 300.843487][T15031] @: entered allmulticast mode [ 300.857618][T15031] vlan3: entered allmulticast mode [ 300.866987][T15031] bridge1: entered allmulticast mode [ 300.877806][T15031] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 300.888510][T15031] bond4: entered allmulticast mode [ 300.894670][T15031] xfrm1: entered allmulticast mode [ 300.900238][T15031] bond5: entered allmulticast mode [ 300.909659][T15031] syztnl1: entered allmulticast mode [ 300.915999][T15031] hsr1: entered allmulticast mode [ 300.925270][T15031] ip6erspan0: entered allmulticast mode [ 300.931054][T15031] erspan1: entered allmulticast mode [ 300.937233][T15031] veth2: entered allmulticast mode [ 300.942633][T15031] veth3: entered allmulticast mode [ 300.948367][T15031] bridge2: entered allmulticast mode [ 300.961454][T15031] gre1: entered allmulticast mode [ 300.966814][T15031] mac80211_hwsim hwsim6 pim6reg0: entered allmulticast mode [ 300.975647][T15031] veth4: entered allmulticast mode [ 300.981183][T15031] veth5: left promiscuous mode [ 300.990246][T15031] ip6tnl1: entered allmulticast mode [ 301.003907][T15031] gre2: entered allmulticast mode [ 301.014092][T15031] bridge3: entered allmulticast mode [ 301.024764][T15031] veth6: entered allmulticast mode [ 301.033908][T15031] bridge4: entered allmulticast mode [ 301.046049][T15031] gtp0: left promiscuous mode [ 301.061617][T15031] ip6tnl2: entered allmulticast mode [ 301.067832][T15031] ipvlan3: entered allmulticast mode [ 301.081894][T15031] ip6erspan1: entered allmulticast mode [ 301.093227][T15031] wireguard0: entered allmulticast mode [ 301.098924][T15031] veth8: entered allmulticast mode [ 301.108680][T15031] ipvlan4: entered allmulticast mode [ 301.117806][T15031] vti60: entered allmulticast mode [ 301.127650][T15031] gre3: entered allmulticast mode [ 301.135323][T15031] bond6: entered allmulticast mode [ 301.141035][T15031] gre4: entered allmulticast mode [ 301.237019][T15040] syzkaller1: entered promiscuous mode [ 301.251990][T15040] syzkaller1: entered allmulticast mode [ 301.263680][ T8284] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.274053][ T8284] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.292258][ T8284] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.347355][ T8284] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.373364][ T8284] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.403413][ T8284] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.621628][ T8284] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.675600][ T8284] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.960800][T15089] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2628'. [ 302.215561][T15099] syzkaller0: entered promiscuous mode [ 302.232073][T15099] syzkaller0: entered allmulticast mode [ 302.246148][T15099] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 302.311886][T15102] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 302.450807][T15110] netlink: 'syz.3.2634': attribute type 1 has an invalid length. [ 302.914433][T15110] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.931936][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'. [ 303.003057][T15126] netlink: 'syz.1.2637': attribute type 1 has an invalid length. [ 303.045972][T15113] veth3: entered promiscuous mode [ 303.064798][T15130] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2638'. [ 303.074514][T15113] bond5: (slave veth3): Enslaving as an active interface with an up link [ 303.152964][T15135] netlink: 'syz.4.2639': attribute type 10 has an invalid length. [ 303.219950][T15135] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 303.237769][T15130] syzkaller0: entered promiscuous mode [ 303.258003][T15130] syzkaller0: entered allmulticast mode [ 303.282486][T15130] netlink: 65 bytes leftover after parsing attributes in process `syz.0.2638'. [ 303.297174][T15138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2640'. [ 303.319646][T15142] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2642'. [ 303.351807][T15142] netlink: 'syz.1.2642': attribute type 2 has an invalid length. [ 303.414322][T15145] sctp: [Deprecated]: syz.3.2644 (pid 15145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.414322][T15145] Use struct sctp_sack_info instead [ 303.740820][T15163] bond2: option mode: unable to set because the bond device has slaves [ 304.357387][T15211] netlink: 'syz.0.2666': attribute type 1 has an invalid length. [ 304.459904][T15212] bond5 (unregistering): Released all slaves [ 304.678698][T15233] netlink: 'syz.4.2672': attribute type 10 has an invalid length. [ 304.692659][T15233] geneve0: left allmulticast mode [ 304.702972][T15233] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 304.797644][T15241] sctp: [Deprecated]: syz.2.2675 (pid 15241) Use of int in maxseg socket option. [ 304.797644][T15241] Use struct sctp_assoc_value instead [ 304.817048][T15240] sctp: [Deprecated]: syz.2.2675 (pid 15240) Use of int in maxseg socket option. [ 304.817048][T15240] Use struct sctp_assoc_value instead [ 305.035174][T15258] SET target dimension over the limit! [ 305.222118][T15268] xt_NFQUEUE: number of queues (65532) out of range (got 65540) [ 305.267112][T15272] __nla_validate_parse: 15 callbacks suppressed [ 305.267134][T15272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2683'. [ 305.294991][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2681'. [ 305.342731][T15278] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 305.548098][T15288] veth0_macvtap: Caught tx_queue_len zero misconfig [ 305.804571][T15299] IPv6: sit2: Disabled Multicast RS [ 305.840524][T15299] sit2: entered allmulticast mode [ 306.276810][T15328] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2699'. [ 306.420961][T15331] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 306.443895][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2703'. [ 306.444767][T15331] bond6 (unregistering): Released all slaves [ 306.466503][T15344] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 306.487619][T15328] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 306.488363][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2703'. [ 306.527707][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'. [ 306.537960][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'. [ 306.559366][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'. [ 306.689225][T15356] netlink: 'syz.1.2707': attribute type 1 has an invalid length. [ 306.708051][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2706'. [ 306.782943][T15357] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 306.794099][ T8299] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 306.822564][ T8299] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 306.869400][ T8299] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 306.878961][ T8299] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 306.945972][T15369] netlink: 'syz.1.2710': attribute type 20 has an invalid length. [ 306.978327][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'. [ 307.021771][T15369] netlink: 'syz.1.2710': attribute type 20 has an invalid length. [ 307.156495][T15378] mac80211_hwsim hwsim12 wlan2: left allmulticast mode [ 307.613064][T15405] netlink: 'syz.4.2719': attribute type 1 has an invalid length. [ 307.642554][T15408] raw_sendmsg: syz.2.2722 forgot to set AF_INET. Fix it! [ 307.798118][T15405] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.954905][T15426] x_tables: duplicate underflow at hook 2 [ 308.143977][T15439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.647800][T15455] wlan0 speed is unknown, defaulting to 1000 [ 308.939866][T15455] C speed is unknown, defaulting to 1000 [ 309.188618][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.198211][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.209716][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.218101][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.242612][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.263262][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.282081][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.296213][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.305375][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.313745][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.432996][T15472] wlan0 speed is unknown, defaulting to 1000 [ 309.693099][T15492] delete_channel: no stack [ 310.210482][T15520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.309851][T15472] C speed is unknown, defaulting to 1000 [ 310.355408][T15522] IPv6: NLM_F_CREATE should be specified when creating new route [ 310.517572][T15531] netlink: 'syz.3.2749': attribute type 2 has an invalid length. [ 310.555500][T15531] __nla_validate_parse: 7 callbacks suppressed [ 310.555519][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2749'. [ 310.850016][ T30] audit: type=1800 audit(1766769185.344:2): pid=15540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2751" name="memory.events" dev="tmpfs" ino=2685 res=0 errno=0 [ 310.921248][ T30] audit: type=1804 audit(1766769185.344:3): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2751" name="/newroot/523/memory.events" dev="tmpfs" ino=2685 res=1 errno=0 [ 311.367185][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2755'. [ 311.412127][ T5834] Bluetooth: hci5: command tx timeout [ 312.374560][T15589] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2764'. [ 312.677342][T15601] lo: entered allmulticast mode [ 312.698537][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 312.712062][T15601] tunl0: entered allmulticast mode [ 312.719221][T15601] gre0: entered allmulticast mode [ 312.726432][T15601] gretap0: entered allmulticast mode [ 312.734209][T15601] erspan0: entered allmulticast mode [ 312.740921][T15601] ip_vti0: entered allmulticast mode [ 312.760163][T15601] ip6_vti0: entered allmulticast mode [ 312.768072][T15601] sit0: entered allmulticast mode [ 312.781764][T15601] ip6tnl0: entered allmulticast mode [ 312.790377][T15601] ip6gre0: entered allmulticast mode [ 312.801583][T15601] ip6gretap0: entered allmulticast mode [ 312.810609][T15601] vcan0: entered allmulticast mode [ 312.823492][T15601] bond0: entered allmulticast mode [ 312.831026][T15601] bridge_slave_1: entered allmulticast mode [ 312.837969][T15614] netlink: 'syz.3.2770': attribute type 16 has an invalid length. [ 312.849060][T15615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'. [ 312.858619][T15601] nlmon0: entered allmulticast mode [ 312.858660][T15614] netlink: 'syz.3.2770': attribute type 3 has an invalid length. [ 312.866063][T15601] caif0: entered allmulticast mode [ 312.872016][T15614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2770'. [ 312.877585][T15601] batadv0: entered allmulticast mode [ 312.892743][T15601] vxcan0: entered allmulticast mode [ 312.898692][T15601] vxcan1: entered allmulticast mode [ 312.905528][T15601] wg0: entered allmulticast mode [ 312.912456][T15601] wg1: entered allmulticast mode [ 312.917880][T15601] wg2: entered allmulticast mode [ 312.924188][T15601] veth0_to_bridge: entered allmulticast mode [ 312.933073][T15601] bridge_slave_0: entered allmulticast mode [ 312.946865][T15601] veth1_to_bridge: entered allmulticast mode [ 312.963783][T15601] veth0_to_bond: entered allmulticast mode [ 312.969739][T15601] bond_slave_0: entered allmulticast mode [ 312.976015][T15601] veth1_to_bond: entered allmulticast mode [ 312.982263][T15601] bond_slave_1: entered allmulticast mode [ 312.988131][T15601] veth0_to_team: entered allmulticast mode [ 312.995013][T15601] team_slave_0: entered allmulticast mode [ 313.000893][T15601] veth1_to_team: entered allmulticast mode [ 313.008979][T15601] team_slave_1: entered allmulticast mode [ 313.015891][T15601] veth0_to_batadv: entered allmulticast mode [ 313.022214][T15601] batadv_slave_0: entered allmulticast mode [ 313.028263][T15601] xfrm0: entered allmulticast mode [ 313.034026][T15601] veth0_to_hsr: entered allmulticast mode [ 313.040914][T15601] macvlan0: entered allmulticast mode [ 313.047561][T15601] geneve0: entered allmulticast mode [ 313.055026][T15601] macsec2: entered allmulticast mode [ 313.060400][T15601] syztnl0: entered allmulticast mode [ 313.066269][T15601] bridge1: entered allmulticast mode [ 313.072513][T15601] mac80211_hwsim hwsim17 ÿ: entered allmulticast mode [ 313.080575][T15601] bridge2: entered allmulticast mode [ 313.088379][T15601] bond4: entered allmulticast mode [ 313.093844][T15601] bridge3: entered allmulticast mode [ 313.103245][T15601] ip6gre2: entered allmulticast mode [ 313.110444][T15601] ip6erspan0: left promiscuous mode [ 313.118002][T15601] netdevsim netdevsim4 eth0: entered allmulticast mode [ 313.125482][T15601] netdevsim netdevsim4 eth1: entered allmulticast mode [ 313.132908][T15601] netdevsim netdevsim4 eth2: entered allmulticast mode [ 313.139909][T15601] netdevsim netdevsim4 eth3: entered allmulticast mode [ 313.148245][T15601] vxlan1: entered allmulticast mode [ 313.155993][T15601] bond5: left promiscuous mode [ 313.162528][T15601] vlan2: left promiscuous mode [ 313.167323][T15601] geneve1: left promiscuous mode [ 313.172954][T15601] bridge4: entered allmulticast mode [ 313.178353][T15601] bridge5: entered allmulticast mode [ 313.183915][T15601] mac80211_hwsim hwsim20 wlan2: entered allmulticast mode [ 313.193513][T15601] gtp1: entered allmulticast mode [ 313.200029][T15601] ip6tnl2: entered allmulticast mode [ 313.206056][T15601] ip6gre3: entered allmulticast mode [ 313.213373][T15601] bridge6: entered allmulticast mode [ 313.218983][T15601] xfrm2: entered allmulticast mode [ 313.225502][T15601] gre2: entered allmulticast mode [ 313.231944][T15601] bond6: entered allmulticast mode [ 313.237173][T15601] bridge7: entered allmulticast mode [ 313.242686][T15601] : entered allmulticast mode [ 313.247629][T15601] ip6tnl3: entered allmulticast mode [ 313.254133][T15601] bond7: entered allmulticast mode [ 313.290926][ T8283] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.313551][ T8283] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.395170][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 313.434521][ T8283] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.459462][ T8283] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.483421][ T5834] Bluetooth: hci5: command tx timeout [ 313.516171][T15472] chnl_net:caif_netlink_parms(): no params data found [ 313.832475][T15647] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 313.864892][T15647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2778'. [ 313.932968][T15650] ipvlan1: entered promiscuous mode [ 314.032756][T15472] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.041033][T15472] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.058295][T15472] bridge_slave_0: entered allmulticast mode [ 314.078953][T15472] bridge_slave_0: entered promiscuous mode [ 314.096609][T15472] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.114752][T15472] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.171408][T15472] bridge_slave_1: entered allmulticast mode [ 314.185214][T15472] bridge_slave_1: entered promiscuous mode [ 314.350294][T15676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.637990][T15472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.667772][T15472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.711890][T15691] tc_dump_action: action bad kind [ 314.752501][T15472] team0: Port device team_slave_0 added [ 314.779496][T15472] team0: Port device team_slave_1 added [ 314.847063][T15698] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2792'. [ 314.947392][T15472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.956683][T15472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.989196][T15703] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2793'. [ 314.989605][T15472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.023526][T15703] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 315.073073][T15703] bond7: entered promiscuous mode [ 315.078881][T15703] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.092023][T15472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.099210][T15472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.141332][T15472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.383730][T15472] hsr_slave_0: entered promiscuous mode [ 315.405456][T15472] hsr_slave_1: entered promiscuous mode [ 315.415096][T15472] debugfs: 'hsr0' already exists in 'hsr' [ 315.433495][T15472] Cannot create hsr debugfs directory [ 315.532009][T15727] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 315.560466][T15727] netlink: 'syz.0.2801': attribute type 2 has an invalid length. [ 315.562679][ T5834] Bluetooth: hci5: command tx timeout [ 315.578521][T15727] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 315.592775][T15729] __nla_validate_parse: 3 callbacks suppressed [ 315.592795][T15729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2802'. [ 315.628178][T15727] netlink: 'syz.0.2801': attribute type 3 has an invalid length. [ 315.658228][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 315.681328][T15735] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 316.102701][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2807'. [ 316.132834][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'. [ 316.549106][T15472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.574496][T15472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.618135][T15472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.662431][T15472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.971538][T15472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.043758][T15472] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.096281][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.103564][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.127025][T15796] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 317.155319][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.162573][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.270575][T15801] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2819'. [ 317.408341][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.587753][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 317.644671][ T5834] Bluetooth: hci5: command tx timeout [ 317.663115][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'. [ 317.741476][T15472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.794524][T15472] veth0_vlan: entered promiscuous mode [ 317.806285][T15472] veth1_vlan: entered promiscuous mode [ 317.836418][T15472] veth0_macvtap: entered promiscuous mode [ 317.864843][T15472] veth1_macvtap: entered promiscuous mode [ 317.930639][T15827] sock: sock_set_timeout: `syz.4.2829' (pid 15827) tries to set negative timeout [ 317.932251][T15472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.969401][T15472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.058565][ T2977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.092749][ T2977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.116513][ T2977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.159010][ T2977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.592212][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.644721][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.684848][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 318.793035][ T8300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.826937][ T8300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.949964][T15872] netlink: 'syz.2.2837': attribute type 21 has an invalid length. [ 318.958944][T15872] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2837'. [ 319.000067][T15872] tipc: Enabled bearer , priority 0 [ 319.048610][T15872] syzkaller0: entered promiscuous mode [ 319.055535][T15872] syzkaller0: entered allmulticast mode [ 319.085984][T15872] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 319.153659][T15872] tipc: Resetting bearer [ 319.170568][T15871] tipc: Resetting bearer [ 319.252944][T15871] tipc: Disabling bearer [ 319.507234][T15898] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.747794][T15915] netlink: 'syz.3.2847': attribute type 2 has an invalid length. [ 319.757648][T15915] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2847'. [ 319.783799][T15919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.899104][T15919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.901038][T15929] xt_TCPMSS: Only works on TCP SYN packets [ 320.134297][T15939] syzkaller1: entered promiscuous mode [ 320.139999][T15939] syzkaller1: entered allmulticast mode [ 320.257320][T15941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.280295][T15941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.944363][T15987] openvswitch: netlink: Flow actions attr not present in new flow. [ 321.258155][T16009] netlink: 'syz.0.2876': attribute type 19 has an invalid length. [ 321.269221][T16006] __nla_validate_parse: 6 callbacks suppressed [ 321.269241][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2877'. [ 321.291289][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 321.366557][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2880'. [ 321.396623][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2877'. [ 321.396711][T16009] netlink: 'syz.0.2876': attribute type 19 has an invalid length. [ 321.415003][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 321.421342][T16016] openvswitch: netlink: Unknown nsh attribute 0 [ 321.521010][ T8288] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.551561][ T8288] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.564094][T16021] netlink: 'syz.0.2876': attribute type 19 has an invalid length. [ 321.575875][ T8288] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.589162][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 321.606189][T16006] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 321.618201][T16006] bond8: (slave vcan1): Error -95 calling set_mac_address [ 321.635736][ T8288] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.655919][T16021] netlink: 'syz.0.2876': attribute type 19 has an invalid length. [ 321.675928][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 321.861086][T16042] netlink: 4108 bytes leftover after parsing attributes in process `syz.3.2884'. [ 321.875690][T16042] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 321.922088][T16042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.950883][T16048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2887'. [ 321.989145][T16043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.131797][T16064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2889'. [ 322.705604][T16102] netlink: 'syz.1.2898': attribute type 17 has an invalid length. [ 322.912625][T16112] erspan0: entered promiscuous mode [ 322.947024][T16116] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 323.086104][T16070] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 323.770817][T16162] vlan2: entered promiscuous mode [ 323.800509][T16162] bridge0: entered promiscuous mode [ 324.034700][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.044685][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.053752][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.064896][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.073115][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.116709][T16166] pim6reg527: entered allmulticast mode [ 324.377662][T16179] bridge0: entered allmulticast mode [ 324.414139][T16167] wlan0 speed is unknown, defaulting to 1000 [ 324.421676][T16181] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.438380][T16181] team0: Cannot enslave team device to itself [ 324.834500][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.938223][T16201] netlink: 'syz.2.2931': attribute type 29 has an invalid length. [ 324.964945][T16205] netlink: 'syz.2.2931': attribute type 29 has an invalid length. [ 325.005480][T16201] netlink: 'syz.2.2931': attribute type 29 has an invalid length. [ 325.051925][T16201] netlink: 'syz.2.2931': attribute type 29 has an invalid length. [ 325.082329][T16201] netlink: 'syz.2.2931': attribute type 29 has an invalid length. [ 325.102411][T16167] C speed is unknown, defaulting to 1000 [ 325.469518][T16229] IPVS: length: 106 != 24 [ 326.121557][ T5834] Bluetooth: hci2: command tx timeout [ 326.148879][T16261] veth0_to_hsr: entered promiscuous mode [ 326.166171][T16261] veth0_to_hsr: entered allmulticast mode [ 326.255813][T16261] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 326.552024][T16276] __nla_validate_parse: 23 callbacks suppressed [ 326.552045][T16276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2955'. [ 326.896889][T16167] chnl_net:caif_netlink_parms(): no params data found [ 326.982779][T16167] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.989958][T16167] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.997629][T16167] bridge_slave_0: entered allmulticast mode [ 327.006043][T16167] bridge_slave_0: entered promiscuous mode [ 327.014485][T16167] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.022083][T16167] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.029280][T16167] bridge_slave_1: entered allmulticast mode [ 327.036924][T16167] bridge_slave_1: entered promiscuous mode [ 327.068953][T16167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.082406][T16167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.116665][T16167] team0: Port device team_slave_0 added [ 327.124849][T16167] team0: Port device team_slave_1 added [ 327.152876][T16167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.159890][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.189751][T16167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.202903][T16167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.209897][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.236502][T16167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.285913][T16167] hsr_slave_0: entered promiscuous mode [ 327.292731][T16167] hsr_slave_1: entered promiscuous mode [ 327.298854][T16167] debugfs: 'hsr0' already exists in 'hsr' [ 327.305587][T16167] Cannot create hsr debugfs directory [ 327.709617][T16167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 327.720176][T16167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 327.730330][T16167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 327.740664][T16167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 327.818864][T16167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.839905][T16167] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.854004][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.861228][ T8301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.879152][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.886360][ T8301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.069127][T16167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.211437][ T5834] Bluetooth: hci2: command tx timeout [ 328.269402][T16167] veth0_vlan: entered promiscuous mode [ 328.280582][T16167] veth1_vlan: entered promiscuous mode [ 328.313916][T16167] veth0_macvtap: entered promiscuous mode [ 328.324631][T16167] veth1_macvtap: entered promiscuous mode [ 328.346889][T16167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.359781][T16167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.376567][ T8284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.386288][ T8284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.396403][ T8284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.406485][ T8284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.482433][ T8288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.497313][ T8288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.526142][ T8284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.536142][ T8284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.281350][ T5834] Bluetooth: hci2: command tx timeout [ 332.362175][ T5834] Bluetooth: hci2: command tx timeout [ 382.284867][T16322] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 382.285989][T16321] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2958'. [ 382.299339][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2962'. [ 382.334156][T16315] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 382.346703][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'. [ 382.351737][T16315] bond1 (unregistering): Released all slaves [ 382.559625][T16333] validate_nla: 6 callbacks suppressed [ 382.559671][T16333] netlink: 'syz.3.2963': attribute type 20 has an invalid length. [ 382.615367][T16333] IPv6: NLM_F_CREATE should be specified when creating new route [ 382.725886][T16342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2965'. [ 382.787734][T16344] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 382.809403][T16344] netlink: 'syz.2.2967': attribute type 1 has an invalid length. [ 382.836864][T16344] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2967'. [ 383.399000][T16385] netlink: 'syz.2.2977': attribute type 11 has an invalid length. [ 383.441263][T16385] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2977'. [ 383.490092][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2980'. [ 383.771530][T16408] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2987'. [ 383.824494][T16412] netlink: 'syz.1.2984': attribute type 11 has an invalid length. [ 383.913929][T16412] netlink: 'syz.1.2984': attribute type 4 has an invalid length. [ 383.938827][T16418] netlink: 'syz.0.2988': attribute type 1 has an invalid length. [ 383.951444][T16412] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.2984'. [ 383.980024][T16416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2989'. [ 384.073837][T16411] netlink: 'syz.1.2984': attribute type 11 has an invalid length. [ 384.107778][T16411] netlink: 'syz.1.2984': attribute type 4 has an invalid length. [ 384.254729][T16432] netlink: 'syz.2.2990': attribute type 7 has an invalid length. [ 384.492593][T16442] netlink: 'syz.4.2996': attribute type 21 has an invalid length. [ 384.527098][T16442] netlink: 'syz.4.2996': attribute type 5 has an invalid length. [ 384.574701][T16445] tipc: Enabled bearer , priority 0 [ 384.582352][T16445] syzkaller0: entered promiscuous mode [ 384.587861][T16445] syzkaller0: entered allmulticast mode [ 384.611585][T16445] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 384.661248][T16445] tipc: Resetting bearer [ 384.826391][T16469] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 384.852384][T16445] [ 384.854755][T16445] ====================================================== [ 384.861778][T16445] WARNING: possible circular locking dependency detected [ 384.868809][T16445] syzkaller #0 Not tainted [ 384.873242][T16445] ------------------------------------------------------ [ 384.880265][T16445] syz.2.2998/16445 is trying to acquire lock: [ 384.886508][T16445] ffff888142b205a0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b4/0x450 [ 384.895923][T16445] [ 384.895923][T16445] but task is already holding lock: [ 384.903287][T16445] ffff888142b20060 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 384.913486][T16445] [ 384.913486][T16445] which lock already depends on the new lock. [ 384.913486][T16445] [ 384.923893][T16445] [ 384.923893][T16445] the existing dependency chain (in reverse order) is: [ 384.932907][T16445] [ 384.932907][T16445] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 384.941518][T16445] blk_alloc_queue+0x52f/0x610 [ 384.946811][T16445] __blk_mq_alloc_disk+0x15c/0x340 [ 384.952471][T16445] nbd_dev_add+0x46c/0xae0 [ 384.957422][T16445] nbd_init+0x168/0x1f0 [ 384.962117][T16445] do_one_initcall+0x1fb/0x820 [ 384.967406][T16445] do_initcall_level+0x104/0x190 [ 384.972902][T16445] do_initcalls+0x59/0xa0 [ 384.977757][T16445] kernel_init_freeable+0x334/0x4b0 [ 384.983474][T16445] kernel_init+0x1d/0x1d0 [ 384.988326][T16445] ret_from_fork+0x599/0xb30 [ 384.993438][T16445] ret_from_fork_asm+0x1a/0x30 [ 384.998725][T16445] [ 384.998725][T16445] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 385.005940][T16445] fs_reclaim_acquire+0x72/0x100 [ 385.011405][T16445] kmem_cache_alloc_node_noprof+0x48/0x720 [ 385.017898][T16445] __alloc_skb+0x255/0x430 [ 385.022860][T16445] tcp_stream_alloc_skb+0x3d/0x350 [ 385.028508][T16445] tcp_sendmsg_locked+0x1ab8/0x5520 [ 385.034238][T16445] tcp_sendmsg+0x2f/0x50 [ 385.039009][T16445] __sock_sendmsg+0x19c/0x270 [ 385.044239][T16445] sock_write_iter+0x279/0x360 [ 385.049529][T16445] vfs_write+0x5c9/0xb30 [ 385.054293][T16445] ksys_write+0x145/0x250 [ 385.059146][T16445] do_syscall_64+0xfa/0xf80 [ 385.064177][T16445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.070588][T16445] [ 385.070588][T16445] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 385.078239][T16445] lock_sock_nested+0x48/0x100 [ 385.083622][T16445] inet_shutdown+0x6a/0x390 [ 385.088652][T16445] nbd_mark_nsock_dead+0x2e9/0x560 [ 385.094311][T16445] recv_work+0x1b38/0x1c50 [ 385.099245][T16445] process_scheduled_works+0xad1/0x1770 [ 385.105314][T16445] worker_thread+0x8a0/0xda0 [ 385.110429][T16445] kthread+0x711/0x8a0 [ 385.115018][T16445] ret_from_fork+0x599/0xb30 [ 385.120132][T16445] ret_from_fork_asm+0x1a/0x30 [ 385.125422][T16445] [ 385.125422][T16445] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 385.133070][T16445] __mutex_lock+0x187/0x1350 [ 385.138187][T16445] nbd_queue_rq+0x257/0xf10 [ 385.143221][T16445] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 385.149288][T16445] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 385.156140][T16445] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 385.162658][T16445] blk_mq_run_hw_queue+0x348/0x4f0 [ 385.168314][T16445] blk_mq_dispatch_list+0xd0b/0xe00 [ 385.174046][T16445] blk_mq_flush_plug_list+0x469/0x550 [ 385.179948][T16445] __blk_flush_plug+0x3d3/0x4b0 [ 385.185326][T16445] __submit_bio+0x2d0/0x5a0 [ 385.190358][T16445] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 385.196536][T16445] block_read_full_folio+0x599/0x830 [ 385.202346][T16445] filemap_read_folio+0x117/0x380 [ 385.207889][T16445] do_read_cache_folio+0x358/0x590 [ 385.213524][T16445] read_part_sector+0xb6/0x2b0 [ 385.218817][T16445] adfspart_check_ICS+0xa4/0xa50 [ 385.224466][T16445] bdev_disk_changed+0x75f/0x14b0 [ 385.230014][T16445] blkdev_get_whole+0x380/0x510 [ 385.235392][T16445] bdev_open+0x31e/0xd30 [ 385.240161][T16445] blkdev_open+0x457/0x600 [ 385.245113][T16445] do_dentry_open+0x7ce/0x1420 [ 385.250436][T16445] vfs_open+0x3b/0x340 [ 385.255034][T16445] path_openat+0x340e/0x3dd0 [ 385.260148][T16445] do_filp_open+0x1fa/0x410 [ 385.265168][T16445] do_sys_openat2+0x121/0x200 [ 385.270373][T16445] __x64_sys_openat+0x138/0x170 [ 385.275749][T16445] do_syscall_64+0xfa/0xf80 [ 385.280870][T16445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.287286][T16445] [ 385.287286][T16445] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 385.294503][T16445] __mutex_lock+0x187/0x1350 [ 385.299619][T16445] nbd_queue_rq+0xc8/0xf10 [ 385.304572][T16445] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 385.310653][T16445] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 385.317620][T16445] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 385.324167][T16445] blk_mq_run_hw_queue+0x348/0x4f0 [ 385.329827][T16445] blk_mq_dispatch_list+0xd0b/0xe00 [ 385.335554][T16445] blk_mq_flush_plug_list+0x469/0x550 [ 385.341467][T16445] __blk_flush_plug+0x3d3/0x4b0 [ 385.346841][T16445] __submit_bio+0x2d0/0x5a0 [ 385.351867][T16445] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 385.358021][T16445] block_read_full_folio+0x599/0x830 [ 385.363832][T16445] filemap_read_folio+0x117/0x380 [ 385.369379][T16445] do_read_cache_folio+0x358/0x590 [ 385.375010][T16445] read_part_sector+0xb6/0x2b0 [ 385.380313][T16445] adfspart_check_ICS+0xa4/0xa50 [ 385.385808][T16445] bdev_disk_changed+0x75f/0x14b0 [ 385.391377][T16445] blkdev_get_whole+0x380/0x510 [ 385.396753][T16445] bdev_open+0x31e/0xd30 [ 385.401521][T16445] blkdev_open+0x457/0x600 [ 385.406486][T16445] do_dentry_open+0x7ce/0x1420 [ 385.411793][T16445] vfs_open+0x3b/0x340 [ 385.416475][T16445] path_openat+0x340e/0x3dd0 [ 385.421588][T16445] do_filp_open+0x1fa/0x410 [ 385.426636][T16445] do_sys_openat2+0x121/0x200 [ 385.431845][T16445] __x64_sys_openat+0x138/0x170 [ 385.437223][T16445] do_syscall_64+0xfa/0xf80 [ 385.442245][T16445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.448684][T16445] [ 385.448684][T16445] -> #1 (set->srcu){.+.+}-{0:0}: [ 385.455842][T16445] __synchronize_srcu+0x96/0x390 [ 385.461315][T16445] elevator_switch+0x12b/0x5f0 [ 385.466619][T16445] elevator_change+0x2cd/0x450 [ 385.471910][T16445] elevator_set_default+0x1af/0x2b0 [ 385.477636][T16445] blk_register_queue+0x34e/0x3f0 [ 385.483188][T16445] __add_disk+0x677/0xd50 [ 385.488043][T16445] add_disk_fwnode+0xfc/0x480 [ 385.493285][T16445] nbd_dev_add+0x717/0xae0 [ 385.498249][T16445] nbd_init+0x168/0x1f0 [ 385.502942][T16445] do_one_initcall+0x1fb/0x820 [ 385.508241][T16445] do_initcall_level+0x104/0x190 [ 385.513808][T16445] do_initcalls+0x59/0xa0 [ 385.518682][T16445] kernel_init_freeable+0x334/0x4b0 [ 385.524407][T16445] kernel_init+0x1d/0x1d0 [ 385.529265][T16445] ret_from_fork+0x599/0xb30 [ 385.534375][T16445] ret_from_fork_asm+0x1a/0x30 [ 385.539668][T16445] [ 385.539668][T16445] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 385.547499][T16445] __lock_acquire+0x15a6/0x2cf0 [ 385.552873][T16445] lock_acquire+0x117/0x340 [ 385.557895][T16445] __mutex_lock+0x187/0x1350 [ 385.563013][T16445] elevator_change+0x1b4/0x450 [ 385.568301][T16445] elevator_set_none+0x98/0x110 [ 385.573711][T16445] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 385.580076][T16445] nbd_start_device+0x17f/0xb10 [ 385.585479][T16445] nbd_genl_connect+0x1353/0x1900 [ 385.591038][T16445] genl_family_rcv_msg_doit+0x215/0x300 [ 385.597107][T16445] genl_rcv_msg+0x60e/0x790 [ 385.602130][T16445] netlink_rcv_skb+0x208/0x470 [ 385.607421][T16445] genl_rcv+0x28/0x40 [ 385.612009][T16445] netlink_unicast+0x82f/0x9e0 [ 385.617308][T16445] netlink_sendmsg+0x805/0xb30 [ 385.622623][T16445] __sock_sendmsg+0x21c/0x270 [ 385.627838][T16445] ____sys_sendmsg+0x505/0x820 [ 385.633133][T16445] ___sys_sendmsg+0x21f/0x2a0 [ 385.638345][T16445] __x64_sys_sendmsg+0x19b/0x260 [ 385.643853][T16445] do_syscall_64+0xfa/0xf80 [ 385.648881][T16445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.655302][T16445] [ 385.655302][T16445] other info that might help us debug this: [ 385.655302][T16445] [ 385.665526][T16445] Chain exists of: [ 385.665526][T16445] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 385.665526][T16445] [ 385.679299][T16445] Possible unsafe locking scenario: [ 385.679299][T16445] [ 385.686747][T16445] CPU0 CPU1 [ 385.692113][T16445] ---- ---- [ 385.697473][T16445] lock(&q->q_usage_counter(io)#52); [ 385.702878][T16445] lock(fs_reclaim); [ 385.709404][T16445] lock(&q->q_usage_counter(io)#52); [ 385.717352][T16445] lock(&q->elevator_lock); [ 385.721960][T16445] [ 385.721960][T16445] *** DEADLOCK *** [ 385.721960][T16445] [ 385.730123][T16445] 6 locks held by syz.2.2998/16445: [ 385.735333][T16445] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 385.743646][T16445] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 385.752727][T16445] #2: ffff888024f671d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1a80 [ 385.764135][T16445] #3: ffff888024f670d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1a80 [ 385.775192][T16445] #4: ffff888142b20060 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 385.785820][T16445] #5: ffff888142b20098 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x199/0x450 [ 385.796820][T16445] [ 385.796820][T16445] stack backtrace: [ 385.802719][T16445] CPU: 0 UID: 0 PID: 16445 Comm: syz.2.2998 Not tainted syzkaller #0 PREEMPT(full) [ 385.802738][T16445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.802748][T16445] Call Trace: [ 385.802755][T16445] [ 385.802762][T16445] dump_stack_lvl+0x189/0x250 [ 385.802783][T16445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.802801][T16445] ? __pfx__printk+0x10/0x10 [ 385.802822][T16445] ? print_lock_name+0xde/0x100 [ 385.802843][T16445] print_circular_bug+0x2e2/0x300 [ 385.802864][T16445] check_noncircular+0x12e/0x150 [ 385.802884][T16445] __lock_acquire+0x15a6/0x2cf0 [ 385.802907][T16445] ? elevator_change+0x1b4/0x450 [ 385.802924][T16445] lock_acquire+0x117/0x340 [ 385.802938][T16445] ? elevator_change+0x1b4/0x450 [ 385.802956][T16445] ? work_grab_pending+0x44f/0x990 [ 385.802976][T16445] __mutex_lock+0x187/0x1350 [ 385.802992][T16445] ? elevator_change+0x1b4/0x450 [ 385.803012][T16445] ? enable_work+0x1b9/0x2b0 [ 385.803029][T16445] ? elevator_change+0x1b4/0x450 [ 385.803046][T16445] ? enable_work+0x21a/0x2b0 [ 385.803062][T16445] ? queue_hctx+0x1e/0x240 [ 385.803076][T16445] ? __pfx___mutex_lock+0x10/0x10 [ 385.803095][T16445] ? __cancel_work_sync+0xf7/0x110 [ 385.803113][T16445] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 385.803133][T16445] elevator_change+0x1b4/0x450 [ 385.803154][T16445] elevator_set_none+0x98/0x110 [ 385.803172][T16445] ? __pfx_elevator_set_none+0x10/0x10 [ 385.803192][T16445] ? xa_load+0x1ea/0x210 [ 385.803210][T16445] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 385.803236][T16445] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 385.803252][T16445] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 385.803277][T16445] ? sysfs_add_file_mode_ns+0x259/0x300 [ 385.803301][T16445] nbd_start_device+0x17f/0xb10 [ 385.803325][T16445] ? device_create_file+0xf4/0x1b0 [ 385.803347][T16445] nbd_genl_connect+0x1353/0x1900 [ 385.803370][T16445] ? __pfx_nbd_genl_connect+0x10/0x10 [ 385.803392][T16445] ? rcu_is_watching+0x15/0xb0 [ 385.803411][T16445] ? __nla_parse+0x40/0x60 [ 385.803427][T16445] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 385.803447][T16445] genl_family_rcv_msg_doit+0x215/0x300 [ 385.803464][T16445] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 385.803482][T16445] ? __lock_acquire+0x6b6/0x2cf0 [ 385.803499][T16445] genl_rcv_msg+0x60e/0x790 [ 385.803515][T16445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.803527][T16445] ? __pfx_nbd_genl_connect+0x10/0x10 [ 385.803552][T16445] netlink_rcv_skb+0x208/0x470 [ 385.803569][T16445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.803583][T16445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.803606][T16445] ? down_read+0x274/0x2e0 [ 385.803622][T16445] ? genl_rcv+0xd/0x40 [ 385.803634][T16445] genl_rcv+0x28/0x40 [ 385.803646][T16445] netlink_unicast+0x82f/0x9e0 [ 385.803665][T16445] ? __pfx_netlink_unicast+0x10/0x10 [ 385.803681][T16445] ? netlink_sendmsg+0x642/0xb30 [ 385.803706][T16445] ? skb_put+0x11b/0x210 [ 385.803724][T16445] netlink_sendmsg+0x805/0xb30 [ 385.803745][T16445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.803764][T16445] ? aa_sock_msg_perm+0xf1/0x1b0 [ 385.803783][T16445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.803798][T16445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.803816][T16445] __sock_sendmsg+0x21c/0x270 [ 385.803837][T16445] ____sys_sendmsg+0x505/0x820 [ 385.803856][T16445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.803876][T16445] ? import_iovec+0x74/0xa0 [ 385.803894][T16445] ___sys_sendmsg+0x21f/0x2a0 [ 385.803911][T16445] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.803930][T16445] ? futex_wake+0x4b2/0x560 [ 385.803957][T16445] ? __fget_files+0x2a/0x420 [ 385.803975][T16445] ? __fget_files+0x3a0/0x420 [ 385.803995][T16445] __x64_sys_sendmsg+0x19b/0x260 [ 385.804013][T16445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.804035][T16445] ? do_syscall_64+0xbe/0xf80 [ 385.804051][T16445] do_syscall_64+0xfa/0xf80 [ 385.804067][T16445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.804081][T16445] ? clear_bhb_loop+0x60/0xb0 [ 385.804097][T16445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.804112][T16445] RIP: 0033:0x7f532038f749 [ 385.804126][T16445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.804140][T16445] RSP: 002b:00007f53211a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.804157][T16445] RAX: ffffffffffffffda RBX: 00007f53205e5fa0 RCX: 00007f532038f749 [ 385.804168][T16445] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 385.804178][T16445] RBP: 00007f5320413f91 R08: 0000000000000000 R09: 0000000000000000 [ 385.804188][T16445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.804197][T16445] R13: 00007f53205e6038 R14: 00007f53205e5fa0 R15: 00007fffb3052658 [ 385.804213][T16445] [ 386.275402][T16444] tipc: Resetting bearer [ 386.296879][T16444] tipc: Disabling bearer [ 386.328973][ T5834] block nbd3: Receive control failed (result -32) [ 386.329024][ T5844] block nbd3: Receive control failed (result -32) [ 386.336956][ T5149] block nbd3: Receive control failed (result -32) [ 386.392722][T16465] netlink: 'syz.3.3004': attribute type 3 has an invalid length. [ 386.400890][T16465] netlink: 'syz.3.3004': attribute type 1 has an invalid length.