last executing test programs: 2m6.472084232s ago: executing program 2 (id=4236): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a802000018014000300000000000000000001020004"], 0x40}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) 2m6.302915586s ago: executing program 2 (id=4238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="5986c661ebb42bfa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa03972917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c7526052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72f", 0xb0}, {&(0x7f0000000280)="1e25e80382bd1827bdc3f0fceccd579926a015127aa1976a5c33e96aeef6851a1b8f9d374b63e964057cdbce25017982ae54f374fe612cd9b1d538a0da89711c177750e23274fb6b86bf86ca307beef221e5b04445fbf8d2d72547a7b61915849eee34e5d637c40fd036e69c61b3110c9107895c3666a6be717dee1cf6cb144727efc7e284b75b2fc9ce3d39beddc7c3c1087cedf8dc0c905cdec76ff8fc0604efbd4c96ff5d0474c35aa339df54f4db", 0xb0}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, &(0x7f0000001d80)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r8, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6, @local}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x4090) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r12 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_mreqn(r12, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 2m6.003893606s ago: executing program 2 (id=4245): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000089000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001840)=ANY=[@ANYBLOB="000000000000000000000000180000000000000002000000"]) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x8) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x6, 0x40, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8, 0x7f, 0x7}}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@union={0x1, 0x8, 0x0, 0x5, 0x0, 0x3ff, [{0xb, 0x1, 0x101}, {0xc, 0x1, 0x3}, {0x8, 0x3, 0xca}, {0x0, 0x2, 0x6}, {0x2, 0x3, 0x99c}, {0xc, 0x1, 0x7fffffff}, {0x1, 0x0, 0xffff}, {0x2, 0x3}]}, @fwd={0x6}, @fwd={0xc}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x6}}, @float={0xf, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/147, 0xcf, 0x93, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 2m5.818447415s ago: executing program 2 (id=4248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r1}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) setsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000040)=0x10000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000580)=0x4000000, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000a6ff8f0008000000000000000c009000fdffffff8116b75a136798eee74b0e50940219c31e938ff2ac692c9392e737777c97c77cf24f13c987a66f5e04d65037e922a65ff896ef084a175d876d58be7ba792205a06c37122b3594eeb1c51bce70286c900000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 2m5.36051718s ago: executing program 2 (id=4255): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="6557746d7ecbf9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20021}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000004) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000180)=0x43e4, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r10}, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r10}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$NBD_CMD_STATUS(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x18}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="8100004a", @ANYRES16=r1, @ANYBLOB="01002abd70fdffebffc6c1a86ebe00"/29], 0x24}, 0x1, 0x0, 0x0, 0x240088c0}, 0x40011) 2m5.009482673s ago: executing program 2 (id=4259): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0xc000) (async, rerun: 64) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0xff, 0x2}, 0xfe}, 0x18) (async, rerun: 64) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000002c0)=0x1, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0xffffffffffffff62}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async, rerun: 32) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r10, 0x89ed, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async) unshare(0x400) (async) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, r12, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20e8d9ce}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xc5a0, @remote, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x20000144) (async) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003400)=ANY=[@ANYBLOB="3400000000000000022b025efbdbdd252411f26b0c0018000bac2200000000003110008014009200fe800000000000bf84b9e4d4b32094db520396cc6c0000000000000000aa0a002a00c5c9dec9bc28bf72636e877adcbebf06eef6868ba7fa8cb4ef4d2ed2ec233c85cc37b9b9dd3e1372f6126abe00b34cae982c85028fdde827314d91b42da3036dc1f091b04063503fca20bcaa2a2bb7540a920c0c9b181e71d052f8d6f84cf62c206880b21e64eb5d5815eaa91d9cb2f3d57917fc7c6dfa81991c5ae5a5f01adac42de89a5003d157d7d5c2d62168", @ANYRES32=r8, @ANYBLOB="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"], 0x1134}], 0x1, 0x0, 0x0, 0x41}, 0x0) 1m49.947633228s ago: executing program 32 (id=4259): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0xc000) (async, rerun: 64) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0xff, 0x2}, 0xfe}, 0x18) (async, rerun: 64) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000002c0)=0x1, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0xffffffffffffff62}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async, rerun: 32) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r10, 0x89ed, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async) unshare(0x400) (async) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, r12, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20e8d9ce}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xc5a0, @remote, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x20000144) (async) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003400)=ANY=[@ANYBLOB="3400000000000000022b025efbdbdd252411f26b0c0018000bac2200000000003110008014009200fe800000000000bf84b9e4d4b32094db520396cc6c0000000000000000aa0a002a00c5c9dec9bc28bf72636e877adcbebf06eef6868ba7fa8cb4ef4d2ed2ec233c85cc37b9b9dd3e1372f6126abe00b34cae982c85028fdde827314d91b42da3036dc1f091b04063503fca20bcaa2a2bb7540a920c0c9b181e71d052f8d6f84cf62c206880b21e64eb5d5815eaa91d9cb2f3d57917fc7c6dfa81991c5ae5a5f01adac42de89a5003d157d7d5c2d62168", @ANYRES32=r8, @ANYBLOB="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"], 0x1134}], 0x1, 0x0, 0x0, 0x41}, 0x0) 7.411149406s ago: executing program 5 (id=5633): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x721, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/104, 0x68}], 0x2) ioctl$int_out(r0, 0x1, &(0x7f0000000300)) sendmsg$key(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000340)={0x2, 0x6, 0x2, 0x2, 0x20f, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@empty, 0x2b, 0x10, 0x10}, @sadb_x_sec_ctx={0x201, 0x18, 0x1, 0x10, 0x1000, "0d047d7f81c986fe418875595c3f8c3148355ad067ca37c12fa56e600ecace8e3c8b188a60ee8865a5ac0a344572d66328d838158dc0443d77f9740819c7bf7128ed9374c8806f57560bcc449d94dd25ad2e74600c5a4e1f8216030d03acda3a09a910787f0d9141087a8099f305096130763e4e5297c53ad3f4d88c33ad7ab4997fa4e4b5ea4b8954adec6642c4c1eeb55b9e9991cc6250f6f4f2c5b0537bb12b64d6f7ed7583e896c4a58911e84b127dd0e0a3c84ae2486a89373a108fde37390ab1aa26186d80dd313c8ec460a124d74a574978c572456b4365035eb882df96ccf24d64f673ba89253f9e0bf1cfa8c673f4658e717d625788ad6cf6c7bc25d5068642394fa4e01129687ed01bcd8094f7c4ca1522e60376e8d8f1d8b8cdbbd42064da6e098f3e23b266761f52cd8d8e4a54be05dca74dbb96bbc60fff5b5704b94cc66e6ee92412e92ca417f67497fd56ccc76b9223c9a35d04608104c6ec7b44b6e912ef7fb42d4754003e625ec152aab69d287593f2cf8cc765b2f62fb5f0dcb45ca0c2a71b9216178dd0f3859440c497fdafe64af09b28b98ae9d0ad722c9a6991f9322186690ee7f0e35ff7bc2da4e02b49084e630a2bdc7c13c6828cceb1e383a2aed33604f56ed776d047a03625109f58f6894f441f5722a56ce9bbf8545d61ab03a6fd5634510e2cc64db8ebc4681ab64097b7774ceff961f6a2748d326791c860525f4b65e6dab4ce290f15a74f84ce44a46dc73456f80fab2b2d4589b319a22f50d5117746c120c06526719b09304a75892c5ef21713ea83bc67104b9344152ce930fbcc97f29717a1393daa5dab16bbd4827aebb963162c70819c7ad64d90f191655118b6619f0e360e21d5151eb44ab0af5a9ca763ca0cf19a4c6b35178bb0da389fd9c10dd8895a578e29f2421de4ff1f15061f31549064ae81d3395f7d1f3ea1fc676c561fc6f65ba1a0fa75eb4851a49d6c1beb9dbe9a00663d1d5f38db4a57de8bc4d0821c27b2030dff361b67e9a62bdd81a285f184e120da0ac589a380defc31869ae6675b9f1797eeee2d0d539cf248fa0161a878781cc1bb568f39282e7c1cd501e2ac0820446dd62fdbaaa8bce882a0f76a93066319c652769d3bc5829e04c31a59b0d002789dd22cdf1574bc19767ba479a2a0fbf363e86e27be2f12529d902204b92c82da05b121b5928f40b8a9388eb9533c773fc3ec97fbbb9be5abe2698a7ee3ac05796045eb6f77f5074d2a098f1a6dc90a2f86b083284388d461c112c7b5989a7fe4a0293af432fd96cf5ba0d10c33e05f11dbf061b00608120942ab3628c92762044d9ba4f2a0e9e1fe00c8ee5ae5b3719f578a0d656bfd7febf16c594efb7fedab1dda45d5cbce19e4a5f176c7b1d2188fb869a0f8c2837bbd436a52950a85c4a5b7d7baacd4941b06b5bb6f6a94d988398029e8214f94bdaada39de615965a51dfcec055fde9d33595999e9c76439d6d128f178deaee0adb2575a17c8b2333c892a66aa6c278b09a1f6266887426cc957d5fe7d2f8512cbf06b85a86bc75b8bc05c7e9eaebe76a75e4297f119a72ebab44196798207f1daa69f83ec5ce362511e8f48bbdb9f28631a02da7836aa11f18f2c7ae81bbf4d067e94eb294f7f943ba539b6faf9b170e6c678d4fd4a72ffaacb77e43f66dd62f962674d37e8ae6d1d096f87071c848883fdc3a5c162994bc3dcda9b2b9683063bf9b56167fc90f4d547b4753f57161a571c935437663f95cb58e03465f6af046df3a6b2c9ff2109614282fa8684f8e29982dd74bfe2f9b90798df1755daea759083730cdb3661f07b2834f6153073f33129c6c5d79cfc59cbe33a5c25e0aa367bbe1d291b05ee173de3d05e0ce0c7550c8a34f9e0084c93531793f0f04eed05873a28900dcfe3e1836146c42c8b83220513ea6ce750e43f774d7bb20ed8d7edf3c43443799e21c772278b7171242ac3da5d4797ee8062477c187105e6f7a022c767de1d332907ad898f615859fd907b667df93965ccef7b879f8ea8deb928c4c384579bd9b776f4d9af7c9999d1f51d1ba39bf6078b2525ace1f50682c3b86a3465664d24a50f9ec42322c60ba38c8b546503447cd5c69b245bf7389d83dfea7c182e5a0acf01bf7a6c821a2898f346d4c89477befde0801a3c33e3ab8d8d0aebdb2d149d880a5bbd55348309f6c3cc74914c6167c1e9d290d2b3415b802df2df23962014d21ce904e8bd8031f1aec41a20b094f0cdd807a6f54d7057cf6442124ff5868eea8e11390bef4d9dc4e3080b3df698fba2a96b1b048a2ee57b2040cddf4dc9ce40b5895d74398012ed760a464d5d1d0aded7f8989a19044f1f05d87631b75e5fa0b39fd0a67f1c720d82aac4be8e47a57695d0055f8ddf87de105b6cd103a2a42d277b3be31d2c569d30d023051b49b480e530a91a45f61ca1c3d0c4ba278852eaee76443b2ab1e122ec1b853640df83ceb7002df09d0ae2cbf0930ae8512d94fb6901405e11f2324ff3c6b0f5ed2ca47cceab8af251c18105faeda83c16cc5f6c6afe8989c33b0030151108ae80ef7736d3ce3898f060198dfcfec52af3b35ef8b6be194548f299729b850e7278cd865368e842e51d2376e1f61cb8c0d2799412d6394929efd3f550b1fdc5f0c4b46987a395aa18224427873a738c7f4ad2ce5c9325944ffa9f5e586f526a93a52465ca9a816d97d05f60bc23f1c964777923f9f514db69f926e416741163aa2a9766ac3407b663966f6b5f130ae5ec4f9c17885719324b23ba6b0a01156f573eeaf2896c9fc8b7962c052e8a2394574995e7d6475858348bb71a46659d2d0b521508b5326b8fb54110a88244b383645473088a7c40908f48f708724657100421b7f98376f0a1ce06f0ab5b13b74a0790c6e31b71a75b078ceb937723169044321d57849217e07f8f46feb89a4a766efba49586d597f15a5efb03a5185064c96e6f882493db1a107ee675795c179d3dcd839c8812e354c4ff46bb6927cbe54c3791767493f1757d0c9b60835a9dd8f204613d73e361ebde9c2b3aeb54af05d8e0b194b82f23f7479056208b4b4e7500b3b9f781b49e692a1702500f803e127af86846fb019c0a29da51f6495987605830b882f4bd6d12a5b133344e681f48db844a3ec1f4731dbc7909358b4acef5bd200d2aa813ca140237a8197c39d171f2755474bfcedff37239dad6201fdbcee56ab1b6bb5402110ed1b31e2a2d087212abf9e99e5b81a01d6ecfd518ceb32813a6c6e421ffb2d4bffb5d8ddc2b36bc66514546c94c1bc2a1fda88c5647e8d1b8cc850846fbd6530a317168ead42081b64e7f734c8702888f6541c6f3382339b6f6036af126d3392c02b035693f0d0c8b6972006a339dd6a586814cb657d007fb1897fee1731d7a39b80dcb7694634b59e27b9711411bf9db3eb5b936ea19d9f88c3fa94a774869403a29c8bb115ac1eecd3a0d6069f684864e8de3462b38ffe5f38c7a1d344bc5fafccfa2a8461e77240d9a40268a688634e9d8bb6fc2f49e92ae53a7d1e688c2185cd862a4ddb5619ae286d7c4298062e46198643d6d0335e86c994d69d4aa48ed981df14b318285f97cd15deac30a65a87d3d12313512f5c1aec28141b78dccc3d8d9dad72e3e0b67fd984f51c0c7696aeb018b17ffc08e06fc381b8e21a4504d5818eff1f474f423cdd43a3ab18a8c941bd9f3ad9e5884d52a560aef8d1792d0876eb30d4a49275a6df086e1e2c7a2401cae0b49218a159d524d8d72128ea4639019f870cce8143919701c90f8539d0a7fb6c666c10bd147fe77016ca9337658d7415bd1874ee3486715643d269159e726b0a225d3af978e716ac21f44bebb84cc09f70a11108537766a010d0eaac8d2955d52fd451f117c854b0d23887547226023c30f1ec7cd7f44420cd6f5ded0526f7c64adf352b51454d9088c6392aa79e7b1a7e57b807d2d50b3954e06ded3223f8e664bd292dbb6b2ffc51b58d5b017dcb28b7a517ded790bed8476b4d54a46cc0d6424a523fb2c742841621bd4c9a012057dc5e870b2045a70f8e96d151789282e380eccc2595ed483908e3dc3995e47390420b5106a30ce14f566702d3501a05c8782c1735dcd2151118593b6869e9da98a377fdef166e29817da8dd530a20c1d703f589da0e1be22b617674b5ece7be7a19a8642c21fc771c3896f31c3dc999e3594f5c004d94bd2078a115fbd5c985c1ae232e03a010072d5f5bc1a64410519bf4fdb190c9dce754c742b89e380df61d4e7609178f3f71d5c4f3f815185d8195aad29f7bf59beee8c831f5e1e0b7c38387508b441834f623a7282e719f807caf8d31d7a6570b9cbd0c999cbd9d0f2e136ad6a49b6e950f2265083de0a99ef98214d6ff0109ccdb3bf6afe77eda71e2eb241da06bedeb24cec6ae27db92a397643ebc81d591f9da8dacd93b502afa71a796a9152bcd62f316e5399a26c179b596b3932abd119f35056adf43df10dda7a34b6c0ccdb5b6670a2d24dfc20729f29c18af70ee4ed9ffd26397fdd2288bafb0e64b44cc06eb5f95d67a2f3df79a86f943ff30b17ec76d26151a001024a4b4dac80de1c1b71cad2b3e952b3a0d90ba3a53b6c487d8c4f8ee4e784617df55bfd898b38ef53260dea0544c8c8936237a5c795f231d8766af9890583b6da29c733ebe2fc0d40276e222bb215794644bc1f5d0b249f42b3ed11817e303d6be602ffd50ae4a3b1dcdbbad9df74629d6e2e45de7ccc7bc63c345e16aec5cb006bbdb3a83f153c6f55ded98ab448cfc95c2382dca5948f1b13b7bad850fd8df7a1dce15cbe6b454ba9d232f7e0ac66d8413e0d654cfc6c096ed6f54dc62949b949c926d4bcb72025dd0677c60b823f83be1a3f9fd9d9bcf85083a7d3bea7169d32781deeaafba9123e5e97e7944e96664bb7f30adb270eab94f146889a2b3b5127b2ac904a4f5d3be5016b38d27ed502a2a7d2d06ef43bea3dc3dc5846a0d9523d8395da25195eae6025676871bcb4038912cb3de129d8d01249c4026d8f26960f4ad8404ed7b451a0e82e82f836469374c7fdc8e1a301e68bf976ad3c12d3d6dea1d60190eb5ea14325c2073e98947f71ffc14eb123f1408051272f046857e27dcf022c3e0d456fbd5990ae56301750d8851861d237d5962d436b5daa1367da46945bf7e45ad6136b75f22c5b381786ff6bd5b47a39d1b60474a3fc91ac8537ca2274bbcf96b3555a61fc45d0a434e3a9e1ea7444acc8bdf290c5e2c48270e6a1edcd8179e0989aab9c7012b53c6141d6a9bb08b7c854c8b0e738647a4a51450e65315d9c2ee3e4dbc65f9a213d9752ec811ee6c3f521762f3557192d0f70e2dd1ddb88913bcf9651ad66aea543c04bf1674520d133fd4b4d5e4ca0e74fdf3dbe85212ff22ee947860ba62ca4606fa03e7edf17335aefa1c872497f23fa3891dfc2747ea6fdbf73b15eac5f00f0b2ade18247126ed868ebf1d10aaa8c9f1689da6f894d87a077174e6b576cf7ccfbba192397981e70e6bbd9b7e395310d0b40180c71fb5edf77fc05506e1e722359ab9665f2661c849d89017cf7705d99a3fe88fe41df981debae92bf4e8270f349f4650f00f0874b5cef8ab877ab0b9ba59fa15d8a2a89811c1d9bcc1b7a2b944ccc0924c9731609fcac526575c00f4333021db7057974fc13fe9be3de1911e12292831ccb7d59083751bad01326c36bf7e01b1255da9ee41afe7da6fc639b6c922efd1dbcb5624d331f1af9812456bce0f3c40f56ef1b7b463caae545e0ef7db62b"}, @sadb_sa={0x2, 0x1, 0x4d2, 0xc0, 0xf5, 0xf7, 0x3, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@private1, 0x2b, 0x14, 0x14}]}, 0x1078}}, 0x2000c041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x14b0da45fac206c4}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r3, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3516fa07}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x281}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_SSID={0x15, 0x34, @random="91250f2c2b39e5b5449967b57fee329d17"}]}, 0x90}, 0x1, 0x0, 0x0, 0x890}, 0x4000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001680)={0x0, 0x64, &(0x7f0000001600)=[@in6={0xa, 0x4e23, 0xffff0001, @remote, 0x69}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0xd1e}, @in6={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000016c0)=0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001700)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000001740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x84, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, [@NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x12, 0x4, "e43eb43f92a83b45314c1b7994bb"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f81727213"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x20068004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x160}}, 0x40000c0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001b40)={r4, @in6={{0xa, 0x4e23, 0x7fff, @mcast1, 0x218d}}}, 0x84) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001c00)={r6}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4004200}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x70}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) writev(r2, &(0x7f00000020c0)=[{&(0x7f0000001d80)="3e2816de26737d3f68babfbdf9bb6017de854722775a9320c185a81d75ccf54b9de14a2af14195764f6a5adbb706303df561e8c5e691cfb7", 0x38}, {&(0x7f0000001dc0)="ceb5fca926603b8c1648f125ae7c3959fe4054742487cecf206681b406476ef5c3f2930aa48d1f0b69cfa96aa62f68d38ce551e656d9fe9cf1873b8071171052ad829042ee9b8f9871fe4fbcc3c054954b1790d4b313785c0d5804b8ba0824ac", 0x60}, {&(0x7f0000001e40)="5b2f7d48b739700c597f578a4f6ef50cf90ef3209fdb145d8fe1eb1327ca9f9f740d689c44883b543367266848aeb682230b0fec57c11535e1d0697c305a508b148ed93ab359e9491ae7212fbd813a550f3e1e65ad5f20c13c5d4634f5a8ee948a", 0x61}, {&(0x7f0000001ec0)="b56fbb55bb027eb689240ea8cb2171330f427eb1ba80f061f8042ae8770bd68818b555643fd72330d2eee23a06b8c031edec87ea0c164d51af9d1f7e2f3e18180ebb83c973ed72fe65528af084e8de58f203aa3c2f7d4bb9c37c6e58e6c95b8ea2a677ae987dfb0fb1ea5be54cae39787ea4c300c788e5928a1ea2b3", 0x7c}, {&(0x7f0000001f40)="941ac0e065c6277643787b0fc895db127c74fef6267336f09e1d1a718baa57137da5563df344c9c78559a2f25e39b19d74c5ff10e311ffc0cc57ec6b083892f839c17498cb08624af913459a7a85497a3927b46438ec3e657ea9d671dbfd8ff6f46e27631198fcf5d35bb1744d33fd3fb57265a964890d5bb846f657f7302e325597877891bf1aaebf5ad40563ca3567cbb3069f6336072829e91ac03769760805d7daf7b20d2e343a351dad9d61c96bb26e", 0xb2}, {&(0x7f0000002000)="edf33fc3880672adf795476df7630302c8f04c14bd9105b477091ef8d85983868215cb7dd337cfc428c210f5361877277b98380a76bd38cf70c44fa2b119000bce5903a32d27b65130e98f84a36fe6587616f3406e4224d3f098b19b5a0152af1d52cad6122d77b8eff6169f93bcef1cd5f06f499c5d6fe6af3126e29d0cd7f2fa8b38bc484c36fd02c6d0a8de95a97a89416793593c3d525f1191952b49b0183d1f729d", 0xa4}], 0x6) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000002140)=""/143, &(0x7f0000002200)=0x8f) sendmsg$kcm(r6, &(0x7f0000002480)={&(0x7f0000002240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @private2, 0x6}}, 0x80, &(0x7f0000002380)=[{&(0x7f00000022c0)="625fc6ec0fd88277ab659585a8c22b3b031f0b58ce998c0e22fc45c35b81ec16faf4cd182440600f2541bcab258fe7ef86d46794ae3e8901cc55a2e1df9be599f52038b5ca31a86cf9300fa0a5afdb464c6758067e40e2f28ad5920f61bd09f11b7d712b5af26ec368a3dd8dc0541109b0bf57ddcbc59d8f", 0x78}, {&(0x7f0000002340)="9d1efca1ce4e08a23ef91e9a20a932c60bb655b00bc0c88914ba706ff69beaa6a43182ab3c3f4e4da1", 0x29}], 0x2, &(0x7f00000023c0)=[{0x28, 0x4, 0x5280f9ed, "b65e6bb77b9c4d11a14c7856ec4bb0153b4d119da28eaea9"}, {0x80, 0x117, 0x7, "4c801a250bf600c68302a3adef9792443ce3fe5d1147c978ed6abda4411b2373f9c3ea6cf860b727471130db1947497b9b74396cd1872afda8d5784a061609d3dcbf6bf17684b5bc57a7e7c768f39cba8cb01e6c927c45a9e45b0ece7f16c10ef0c44eba3ada07f7e545b2"}], 0xa8}, 0x10) socket(0x1d, 0x80000, 0x3) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r3, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r7) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r10, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x14, r11, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008844) 4.270290888s ago: executing program 5 (id=5640): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000100)='veth0_to_bond\x00') sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000100)='veth0_to_bond\x00') (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 4.246871317s ago: executing program 4 (id=5643): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x80}, 0x1, 0x7}, 0x0) 4.087271803s ago: executing program 4 (id=5644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) 4.026952568s ago: executing program 5 (id=5646): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000380)) (async) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x2002}, 0x80, 0x0}, 0xe07e872424dfafca) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000240007012ebd7000fddbdf25027c00000c0001800800020001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 3.964574325s ago: executing program 4 (id=5649): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x76000000}, 0x94) 3.913058624s ago: executing program 1 (id=5650): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000006, 0x10012, r0, 0x993e0000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x180}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) nanosleep(&(0x7f0000000200), 0x0) 3.79857228s ago: executing program 5 (id=5651): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r6, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="6105070202ff020181b40200db03ade5516e8d7006bd93772091ff4f0ef2bf2fbf18689b74c275acdb926f5659f98d10d03aa96431f003717715a11e35497f9c2079000bd25a91668f0d0084c961a8ff391f19f85dff5c794257c512ffb1e13264c35e90a6dd73864403764917af42e3d82ef770965743e769739cd9581e1b1f2b44b9385842405c7fdc6d0b09cfcf806df56dfa775d3e87771a2d85addb114f45743548be47c7d86ccbf7ffffefffffffff62d2202ed848740749f90000"], 0xbe) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r7) 3.797763399s ago: executing program 4 (id=5652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3.754695662s ago: executing program 1 (id=5654): socketpair(0x5, 0x805, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000840)={&(0x7f0000000600), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r4, 0xe29, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x200040c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in=@local}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xc, 0xffffffc0, 0x9, 0x97}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc840}, 0x24000001) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="120000001c000100030000000000000007"], 0x30}}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r7) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r9, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000110044dd5c5e8c34e45a0b3ed3800172010000000000f000000000000000", @ANYRES32=0x0, @ANYBLOB="09000100a008000014000300766c616e3000"/28], 0x34}}, 0x4084) 3.593786951s ago: executing program 0 (id=5657): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="03050000000000003800128009000100766c616e000000002800028006000100030204000c000200000000000e0000000c000200080000000f0000000400048008000500", @ANYRES32=r3], 0x60}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) 3.38704903s ago: executing program 4 (id=5660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 3.048996499s ago: executing program 3 (id=5665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x130, 0x130, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9}]}, @struct={0xa, 0x4, 0x0, 0x4, 0x1, 0x7, [{0x4, 0x1, 0x6}, {0xf, 0x3, 0x4}, {0x10, 0x3, 0x8}, {0x4, 0x4, 0x80000001}]}, @fwd={0xf}, @volatile={0x2, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x5}}, @enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x0, [{0x5, 0x0, 0xf37}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0xd, 0x4}, {0x8, 0x4}, {0x1, 0x4}]}, @fwd={0x8}, @union={0xb, 0x7, 0x0, 0x5, 0x0, 0x3f2d, [{0x4, 0x1, 0x595d}, {0xb}, {0x4, 0x1, 0x9}, {0x4, 0x4, 0x7}, {0x10, 0x2, 0x80}, {0x2, 0x0, 0x2}, {0x3, 0x2, 0x4}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x30, 0x5f, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000540)=""/173, 0x152, 0xad, 0x0, 0xfffffffe}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x2, 0x4, 0x6, 0x8011, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @value=r2}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) sendmsg$inet(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x40041) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0b00000064ed6dc918caf38e1612c2af52d3326a663ac2512c3f9e235d", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf2503000000"], 0x14}}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c00"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x39, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 2.964651612s ago: executing program 3 (id=5666): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {&(0x7f0000000980)="e865f05c7d89be06", 0x8}], 0x3}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r7}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 666.668092ms ago: executing program 1 (id=5667): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3991}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000300)={0x1a, "cdfb33d5a9db8643e3a7ac91b74212cef046967df558452a27395b9971a3087421238a5c06d08fdac4b47649f4f07b63224b51066a00ecbcbc25702ca7427d5e3dc5bdf5ccabbf7cc80ae62872e0d862af90ce040b959fcd9952060ded88b382f40e40635a90c53070ba6aa9252e9af5f8daa40f8afaa657a56883eeb7fee87c"}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x8, 0x2, 0x41, @empty, @empty, 0x7800, 0x7800, 0x5, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) 661.274082ms ago: executing program 0 (id=5668): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x8) sendto(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0), 0x4) r1 = socket(0x23, 0x5, 0x0) getsockopt(r1, 0x0, 0x0, 0x0, 0x0) 656.140254ms ago: executing program 3 (id=5669): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe0901, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfc, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES64=r7, @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) 655.569096ms ago: executing program 4 (id=5670): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4}, 0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) connect$tipc(r5, &(0x7f0000000000), 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x1, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x2}}, 0xb8}}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000280), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000072003303060000000400000007000000ff0d"], 0x18}}, 0x20000010) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) close(r9) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x800, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r11, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 596.43153ms ago: executing program 5 (id=5671): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket(0x1, 0x803, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6(0xa, 0x3, 0x1) (async) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0xffffffffffffff9c}}]}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000004, 0x6b}, {@rand_addr=0x64010102, 0x4e20, 0x2000, 0x8, 0x48001}}, 0x44) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r7, 0x0, 0xea, 0x1000, &(0x7f0000000400)="815c2def4244a851fcf0a21ca4ad110b86d9099bb69a5d17c2b030abb6dc3b9863b53652daa5090d59896b16911ba27689988b5c5679ff4d324971528857df881255cd86d6c3eb70ed22d2166650c518e484a74d65e3022808acc39f2c0d1ef2987f85c3f943b79ed35606515ece361ac841b794ed2849d5a076ec70fc06fb0a6f94db26b9dc58a46bef36d0f259cfaf2d1cfc17b8b2de32cd2a1977aeb9728777a8ea3b3ff5d903d6f41f2408822543260a1c729748e7ce8400b09ca6b9f3dd852cd7f3ffc0eb5490430eaf5da48735c51ef22a26b268d3d663a76bb6a309fa14f2c00f5a15557323be", &(0x7f0000000500)=""/4096, 0x5, 0x0, 0x9f, 0x2f, &(0x7f0000001500)="ee945ce05d442297163913a588290c5d2b7e4925cb5aedf79f9695694928d8eb5268dfb1f34e4222fb3bfe468a7b97e909b7090515824e8e7d70b01cdf34e005623ea4df2e553cdbcba6ef26d699cc0dd07f8554e36ad7fae3d188d8bb664a7648a0ef15e1e41f99a55a3ee3209d8ecdc62ec568618a2019056762fce4e5c47c86c7efd7fcd4c83b69d3db52a53e6940a8b0063bea17699967c59d9198c812", &(0x7f00000015c0)="5e1fe31645fe4f2462da5fc4c933c9e2299672c640a5bb37c4cec35728aef7356352ce2fc8a40f0fb6e6afdfe24077", 0x1, 0x0, 0x8}, 0x50) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x344}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x344}]}, 0x34}}, 0x0) 539.69657ms ago: executing program 0 (id=5672): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, "e9"}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef64bd465b9780e2bbe408ccc58187feb0e3d43347f989007a7c63f6dae682ecb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259620618c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a30536455bb774f7f154263178151ea93f5774b56a7142047326f940e95b8489e1c5650f5c61299a295f79c88456521cffdef93e29f10f4a11f0ca134a375a7ecfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d9823659d1945258fc668950e5aacfa06e1a212661b3f57a266c90e64efc8d8f730867202a9ee94e6a1f851337c2c9671d98a19bdc132c153b3ad843bdd308a07ba8f50a20cfd2c8b94e86ea0af0a9e0e9789ffd38f9b86da101e2266700"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x10, 0x8, 0x22, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r4, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 482.693407ms ago: executing program 1 (id=5673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x5, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={r4, 0x4}, &(0x7f0000000200)=0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000280)=@req={0x473, 0x6, 0xb, 0x6}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) close(r5) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x13) writev(r9, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000001bc0)={{r5}, r10, 0x0, @unused=[0x6, 0x981f, 0x6, 0xfffffffffffffff1], @devid}) accept4$ax25(r3, 0x0, 0x0, 0x80000) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r11, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 433.819857ms ago: executing program 0 (id=5674): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001980), 0x0, 0x40000000, &(0x7f0000001a80)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000000000400040000000000000000000000000004000100000000000000000100000000030017000000000002004e21000000000000000000000000000000000000000000000000000000007967f9a353c4f20ebeb24321e6bff79c175039c0"], 0xa0}}, 0x0) 414.625736ms ago: executing program 3 (id=5675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 283.089351ms ago: executing program 3 (id=5676): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a30000000000800410073697700140033006c6f0000000000000000000000000000040b4a58d9060b5ee5e2b5f01ccc983c8330bbd1e29b31a062384c299ee77435ba82205c9f8037d5496a8552e4898eb5ecb8a7b592937c62c8ae97d49b155600386153b7ef671e82bfe0e7f8663f7037c979ce271d055d3bc01244989ebfc9e3f9c7c8116e4b9338b5d0a151f0d1f99995538a0e9a34c34b"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24048800) 228.754692ms ago: executing program 1 (id=5677): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000052000100000000000000000001000000bb2bd0783cebcbfe820ae07f01367f89872e277482dc87ec40ee299ba1d815a97833a3b7c87df4281d76bc7e722717c2fdc0849e"], 0x14}, 0x1, 0x0, 0x0, 0x20091}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@getqdisc={0x34, 0x26, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0xffe0}, {0xffe0, 0xffff}, {0x0, 0x6}}, [{0x4}, {}, {0x4}, {0x4}, {}]}, 0x12}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008080) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000740)=0xffff800000000000) (async) r8 = socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x80108906, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x130, 0x1f0, 0x1f0, 0x0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffff00, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0xffffff00, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x0, @loopback, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x9e, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6_vti0\x00', r14, 0x2f, 0x3, 0x6, 0x0, 0xa, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0, 0x40, 0x80000001, 0x9c16}}) 205.015628ms ago: executing program 5 (id=5678): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x34, 0x2e, 0xe268a60f5632398d, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3}, {0x7, 0xffff}, {0x7, 0x4}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x7b5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) syz_emit_ethernet(0x131, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0xfb, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0xf3, 0x0, @wg=@data={0x4, 0x9, 0xa6, "a9d2dc138bfd18b6dab147479b31f004ca4c49931141adf3f2d0fa16226480d4f9ed3780580d808fddbec56ecddd155e4d71cab58d6528726e667370409b25aae1f119555040339ec214936bc5e32476d2955cf51025fb8816b5b30e419c13cbbd4a08671e79b8c61b8abce1f3ddd5be2842f0886fec2089c5bb3c0d6abdc874b3711536c475dd2b8ba690c1e4ca032b352fb7627d66f4b145947d96dce60fd045136bb456923bed32d3d3e0a0962c617becdd20a044b49789992ef2012975578d4b7cfa65e075874e2a686ae63abfb69d49d8affb82ff4e543c5a"}}}}}}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) sendmsg$kcm(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="af3e4619635753abe9e0f445d22245abb9bd6be6b4b8b28474f931658586cc151333fa1f95596ee370c1a3dd43d6f9ed030631ada8c7d592e3d7a1534e713ba72c22f7613ae347029141811700053c3db43582653afb56d000d789a3316a35a7cf9d281d52915100402caa611540b79f3b5313fda8510bf94b1a3ffa5313a52f283f97b28af5c15fd36e9630c661b65f3c75dde3c089f0af7615ccf98c9664920f2a7efb4b8d9c22f1fe7864223cc8528940c757af722dc7c6729e84d2a137833523e2195f4dbd56f4ee629bc88bbcd3adb0d7787d183385b3e252f5", 0xdc}, {&(0x7f0000001980)="fd5d8d57d48422096d676ce19bb057d9", 0x10}, {&(0x7f00000019c0)="47d329a86830b35f10cca698d6c41728f2295cfc05792dab7f6d994e5bb469740b508ba49d0b1a2d9598bba23d16e888f3cdf5b5af983fe7f02b62b39cd93418b28e2de0d1748ed494f051a2b54efd8224f5b6290df83640abd6f3383b52963060ce64e2f249ebd45a54dd9881eacafdf8d49a56975e979f5875e1f88508c3dc93f2d181a14246fbe39b928542417f2ba7ebf35a77", 0x95}, {&(0x7f0000001a80)="799da35936e4a028e50e29fd8262e817d9a0ae285dd5614611f7cfb56ac14ae0322add699392cba69b9b07661729c36bce585f75734ed8de3ecdf7fce6faa0cdcd4dd5799943b5dce0dd1d87a593bf7f84dd63dccf7b8c635f75a0602d7fd65365af994dea275357dec42513eafad8ad4297db1d5ddc9aca1bb1d38f44363b78f10d96db0b90b1269febc9b15a4c9caa2d81da2bed0769c1d301943f2ba8023b1ab75ac08c40d7f838ec12dc50d25b821e82c9e276ce963605d8cf61b1c33feaef254e182661947b581d1e2ac34da8992dddf23214eb91dd4ac425b88edb29df192d7623443aa736e4ad8c4ddb0c58c905defcae0e993bbd", 0xf8}], 0x5, &(0x7f0000001c00)=[{0xc0, 0x88, 0xd9a, "d94fb2c9ed5bebea4bc80fdf016207978a1ff271ff14a36a2ed9a6eb65120be4ac4bf225856a99d48364941210622ff3c3ee2d596658556ecde4981714afa1ebdce61f02f53115e0c720617aa8c2824d8f6ad3dfe7780256b04a3e1a3c0cf06a461fff9010a394a24df246fde0fa52d1532a52c236dcf8511164d4a470e71d6122ca2300570aa8dafcc4afce5e40b39340fe3887074e3bfe46f60d97fe9ab8403a5019c8c4de8a5531fe5e6bbde9ce2f"}, {0xe0, 0x103, 0x1, "d9a3be4364dd092f803792652350b695be24dc3e8987a5b51923a4f1f82807c62b4de67e609c2ed568c3c3a809be78d4cfb4392dc39b03d9633be61af448f46891988742b2ed4c290a1db3f3e698da2aca27da70c76ca69078c0c1239b96c13f004a3298936766ee02e5baebe9febe0c7227d5301003b847a28a841d09f149655c1a1ad43fc3e6946fce9cac5339095f6adb5893db48d7d04197163e298f7d6b7a975e48ea675bb9685642cf90dcf65e729cf09d52026116d469525b83c6cc2a5bda90aba1ed6d5a9069ecf948c7a9"}], 0x1a0}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff08}, 0x94) 197.782782ms ago: executing program 0 (id=5679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a3100000000300000000c0a010400000000000000000a0000000900010073797a31000000000900020073797a310000000004000380140000001100010000000000000000000100000a4f9832b613300fdb4c2bc4aaf7a7e03da0d11055ca53067d4fda31a4a6b20792cffd05a5996884926d3c002f6c5a9fac08055c0910ac573e02aa812f66132cab0b05000db43549ebfac0be06f4c1334e8e6c2792a02d33ac50f39aadb308de273e07a69664d29e86087496d089a2904f3fab4cb094d6bb32130e52d3eb639f9aa1d730dc35e63f03fb7d139b1b3d324599a8ead00d26082665e8c2d3f049769f0efafb088f60a9b5ff5f00000000b6e159bbd532a8a23452b9ff3e1282d007ec599d19561e945e857980d7a41dee2ea5083f148b5fd9a3da4582558e10f96a254b2e9a9e67e79cb6faad9cf8df42f03ca57eadeac7324c3c"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) syz_emit_ethernet(0xfc1, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) 95.199431ms ago: executing program 0 (id=5680): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x40e00, 0x0, '\x00', r1, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff78}, 0x94) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="7400000043000701fefffffffcdbdf25017c0000040045805c00018058005c802dde06dd2d6fb527ff41e9716a45cce84f369c2a36346365fd7f05704d7102cd0898a0a0a91a923e7e7a7afe1ceb1d481bfecb7b6a133a34ed1ecb8f348616e8abb9ea9c733c3c70c7af1225882ffac804002b80"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 87.623859ms ago: executing program 3 (id=5681): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r6, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="6105070202ff020181b40200db03ade5516e8d7006bd93772091ff4f0ef2bf2fbf18689b74c275acdb926f5659f98d10d03aa96431f003717715a11e35497f9c2079000bd25a91668f0d0084c961a8ff391f19f85dff5c794257c512ffb1e13264c35e90a6dd73864403764917af42e3d82ef770965743e769739cd9581e1b1f2b44b9385842405c7fdc6d0b09cfcf806df56dfa775d3e87771a2d85addb114f45743548be47c7d86ccbf7ffffefffffffff62d2202ed848740749f90000"], 0xbe) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=5682): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_ringparam={0x0, 0xffff9c7c, 0xb3, 0x8000000, 0xfffffffe, 0x9, 0x6, 0x5, 0x1}}) kernel console output (not intermixed with test programs): parsing attributes in process `syz.0.3638'. [ 437.024756][T18961] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3638'. [ 437.051852][T18961] macvtap1: entered allmulticast mode [ 437.062958][T18961] veth0_macvtap: entered allmulticast mode [ 437.206682][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3643'. [ 437.353059][T18990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'. [ 437.423034][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3648'. [ 437.770800][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3651'. [ 437.965391][T19020] macvtap1: entered promiscuous mode [ 437.975170][T19020] vlan0: entered promiscuous mode [ 437.982190][T19020] macvtap1: entered allmulticast mode [ 437.988064][T19020] vlan0: entered allmulticast mode [ 437.993511][T19020] veth0_vlan: entered allmulticast mode [ 438.235311][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3660'. [ 438.551020][T19066] validate_nla: 31 callbacks suppressed [ 438.551039][T19066] netlink: 'syz.3.3667': attribute type 1 has an invalid length. [ 438.602682][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 438.651077][ T5896] net_ratelimit: 8 callbacks suppressed [ 438.651093][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.701135][T19032] bridge3: port 1(bond4) entered blocking state [ 438.707867][T19032] bridge3: port 1(bond4) entered disabled state [ 438.716460][T19032] bond4: entered allmulticast mode [ 438.725854][T19032] bond4: entered promiscuous mode [ 438.805340][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3669'. [ 438.820696][T19066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.829832][T19069] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 438.891973][T19069] bond3: entered allmulticast mode [ 438.953173][T19071] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 439.052110][T19081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3672'. [ 439.120401][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.180505][T19096] vcan0: entered allmulticast mode [ 439.281186][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.677129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.686886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.696104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.839571][T19127] netlink: 'syz.0.3686': attribute type 4 has an invalid length. [ 439.862567][T19127] netlink: 'syz.0.3686': attribute type 1 has an invalid length. [ 439.876047][T19133] netlink: 'syz.3.3688': attribute type 1 has an invalid length. [ 439.887258][T19133] netlink: 'syz.3.3688': attribute type 1 has an invalid length. [ 439.895109][T19134] netlink: 'syz.3.3688': attribute type 1 has an invalid length. [ 439.903811][T19134] netlink: 'syz.3.3688': attribute type 1 has an invalid length. [ 439.915845][T19133] IPv4: Oversized IP packet from 127.202.26.0 [ 439.916991][T19130] netlink: 'syz.2.3687': attribute type 2 has an invalid length. [ 439.977944][T19130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.026358][ T5834] block nbd2: Receive control failed (result -1) [ 440.123133][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.160725][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.215103][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.253401][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.284639][T19154] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 440.381919][T19154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.501009][T19154] vlan2: entered promiscuous mode [ 440.520583][T19154] bond1: entered promiscuous mode [ 440.532955][T19154] vlan2: entered allmulticast mode [ 440.544566][T19154] bond1: entered allmulticast mode [ 440.557521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.729363][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.758928][T19189] netlink: 'syz.3.3700': attribute type 4 has an invalid length. [ 440.807769][T19189] .`: renamed from bond0 (while UP) [ 440.854274][T19193] syzkaller0: entered promiscuous mode [ 440.861586][T19193] syzkaller0: entered allmulticast mode [ 440.887337][T19197] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 443.656501][T19181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.850035][T19228] __nla_validate_parse: 17 callbacks suppressed [ 443.850057][T19228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3715'. [ 443.877786][ T5889] net_ratelimit: 5 callbacks suppressed [ 443.877802][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.929905][T19240] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3717'. [ 444.041929][T19251] validate_nla: 2 callbacks suppressed [ 444.043236][T19251] netlink: 'syz.3.3720': attribute type 1 has an invalid length. [ 444.059169][T19251] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 444.153317][T19234] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 444.197259][T19266] xt_hashlimit: size too large, truncated to 1048576 [ 444.205800][T19234] bond2: (slave lo): Enslaving as an active interface with an up link [ 444.253911][T19234] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 444.300556][T19250] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 444.566600][T19285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 444.604565][T19287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 444.615284][T19288] xt_hashlimit: size too large, truncated to 1048576 [ 444.992846][T19310] bridge0: port 1(bridge_slave_0) entered learning state [ 445.203241][T19331] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 445.301952][T19335] netlink: 822 bytes leftover after parsing attributes in process `syz.1.3738'. [ 445.319212][T19335] bridge: RTM_NEWNEIGH with unconfigured vlan 1033 on bridge0 [ 445.939649][T19353] sctp: [Deprecated]: syz.0.3744 (pid 19353) Use of int in max_burst socket option. [ 445.939649][T19353] Use struct sctp_assoc_value instead [ 446.171031][T19365] netlink: 'syz.4.3748': attribute type 1 has an invalid length. [ 446.218218][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 446.227727][T19378] netlink: 'syz.3.3750': attribute type 5 has an invalid length. [ 446.236319][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3750'. [ 449.076403][T19365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.275608][T19415] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.3762'. [ 449.294399][T19422] netlink: 'syz.0.3765': attribute type 1 has an invalid length. [ 449.473915][T19433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.549027][T19439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.635199][T19444] netlink: 'syz.4.3769': attribute type 1 has an invalid length. [ 449.712820][T19444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.867616][T19444] bond2: (slave geneve2): making interface the new active one [ 449.903783][T19453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3772'. [ 449.917872][T19444] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 450.186648][T19464] syz.4.3776 uses old SIOCAX25GETINFO [ 450.239506][T19466] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 450.274118][T19466] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 450.752608][T19492] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.830163][T19499] netlink: 'syz.2.3787': attribute type 1 has an invalid length. [ 450.867100][T19503] openvswitch: netlink: IP tunnel dst address not specified [ 450.902089][T19492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3784'. [ 450.910138][T19501] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3784'. [ 450.932565][T19492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3784'. [ 451.019539][T19505] bond5: (slave bridge4): making interface the new active one [ 451.029144][T19505] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 451.205701][T19511] vlan2: entered promiscuous mode [ 451.233014][T19511] bridge0: entered promiscuous mode [ 451.369323][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3794'. [ 451.449126][T19528] netlink: 'syz.3.3796': attribute type 26 has an invalid length. [ 451.480708][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3796'. [ 451.495203][T19528] netlink: 'syz.3.3796': attribute type 26 has an invalid length. [ 451.531519][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3796'. [ 451.549545][T19531] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3797'. [ 451.644867][T19539] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.939011][T19555] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 451.981239][T19555] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 451.987003][T19562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3805'. [ 452.003016][T19555] gretap1: entered promiscuous mode [ 452.015119][T19555] gretap1: entered allmulticast mode [ 452.455646][T19579] netlink: 'syz.3.3811': attribute type 9 has an invalid length. [ 453.008125][T19619] : renamed from team_slave_1 (while UP) [ 454.109305][T19644] netlink: 'syz.1.3828': attribute type 10 has an invalid length. [ 454.140977][T19644] veth0_macvtap: left promiscuous mode [ 454.334124][T19653] nbd: must specify a size in bytes for the device [ 454.445789][T19656] __nla_validate_parse: 6 callbacks suppressed [ 454.445807][T19656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3831'. [ 454.504263][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3831'. [ 454.768822][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3835'. [ 454.797885][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3834'. [ 454.800078][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3835'. [ 455.172950][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 455.219605][T19678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3841'. [ 455.303981][T19678] geneve2: entered promiscuous mode [ 455.350235][T19678] geneve2: entered allmulticast mode [ 455.363371][T19689] sctp: [Deprecated]: syz.3.3843 (pid 19689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.363371][T19689] Use struct sctp_sack_info instead [ 455.483730][T19690] geneve1: entered promiscuous mode [ 456.612462][T19721] openvswitch: netlink: Missing key (keys=40, expected=100) [ 458.415178][T19700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.787926][T19748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3859'. [ 458.913277][T19748] pim6reg1: entered promiscuous mode [ 458.928490][T19748] pim6reg1: entered allmulticast mode [ 458.966222][T19748] netlink: 'syz.0.3859': attribute type 1 has an invalid length. [ 458.998470][T19748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3859'. [ 459.494491][T19774] netlink: 'syz.0.3864': attribute type 11 has an invalid length. [ 459.546237][T19775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3865'. [ 459.574331][T19774] sctp: [Deprecated]: syz.0.3864 (pid 19774) Use of int in maxseg socket option. [ 459.574331][T19774] Use struct sctp_assoc_value instead [ 460.034326][T19796] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 460.285387][T19805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.333090][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 460.388273][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 460.617505][T19816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3876'. [ 460.644189][T19816] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 460.961158][T19833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3882'. [ 461.125073][T19846] netlink: 'syz.0.3885': attribute type 24 has an invalid length. [ 461.317510][T19859] netlink: 'syz.2.3886': attribute type 2 has an invalid length. [ 461.469845][T19859] v: entered promiscuous mode [ 461.593647][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3887'. [ 461.851172][T19869] netlink: 'syz.1.3890': attribute type 1 has an invalid length. [ 461.862616][T19869] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3890'. [ 461.948822][T19871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.372349][T19880] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 462.430389][T19885] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 462.453127][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'. [ 462.546160][T19884] veth0_macvtap: left promiscuous mode [ 462.972705][T19906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3900'. [ 463.212777][T19918] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.220023][T19918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.411737][T19927] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.3904'. [ 463.519048][T19931] xt_limit: Overflow, try lower: 604147548/4200216962 [ 463.929294][T19939] : entered promiscuous mode [ 463.977896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.990143][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 464.182139][T19961] syzkaller0: entered promiscuous mode [ 464.209554][T19961] syzkaller0: entered allmulticast mode [ 464.520456][T19974] netlink: 'syz.2.3919': attribute type 32 has an invalid length. [ 464.593006][T19974] bond6: option coupled_control: invalid value (192) [ 464.605843][T19974] bond6 (unregistering): Released all slaves [ 465.024751][T19986] __nla_validate_parse: 2 callbacks suppressed [ 465.024769][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 465.088762][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 465.156312][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 465.377909][T20005] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 465.451400][T20008] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3929'. [ 465.528797][T20014] sctp: [Deprecated]: syz.1.3931 (pid 20014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.528797][T20014] Use struct sctp_sack_info instead [ 465.582419][T20014] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3931'. [ 465.685445][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 466.014070][T20039] openvswitch: netlink: Duplicate key (type 2). [ 466.044841][T20039] netlink: 'syz.2.3938': attribute type 1 has an invalid length. [ 466.100799][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3938'. [ 466.108053][T20039] bond6: entered promiscuous mode [ 466.115355][T20039] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.124555][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3938'. [ 466.163630][T20039] bond6: (slave bridge5): making interface the new active one [ 466.171402][T20039] bridge5: entered promiscuous mode [ 466.178828][T20039] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 466.500075][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3940'. [ 466.517692][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3940'. [ 466.689643][T20074] lo speed is unknown, defaulting to 1000 [ 466.696536][T20074] lo speed is unknown, defaulting to 1000 [ 466.728638][T20074] lo speed is unknown, defaulting to 1000 [ 466.868146][T20074] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 466.913960][T20081] netlink: 'syz.3.3949': attribute type 2 has an invalid length. [ 466.950976][T20081] 9: entered promiscuous mode [ 467.026088][T20074] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 467.165430][T20086] pim6reg: entered allmulticast mode [ 467.255484][T20074] lo speed is unknown, defaulting to 1000 [ 467.285160][T20074] lo speed is unknown, defaulting to 1000 [ 467.372159][T20074] lo speed is unknown, defaulting to 1000 [ 467.453763][T20074] lo speed is unknown, defaulting to 1000 [ 467.502609][T20074] lo speed is unknown, defaulting to 1000 [ 467.553018][T20074] lo speed is unknown, defaulting to 1000 [ 467.594965][T20074] lo speed is unknown, defaulting to 1000 [ 467.635782][T20074] lo speed is unknown, defaulting to 1000 [ 467.714462][T20074] lo speed is unknown, defaulting to 1000 [ 468.269352][T20141] sctp: [Deprecated]: syz.3.3963 (pid 20141) Use of int in max_burst socket option deprecated. [ 468.269352][T20141] Use struct sctp_assoc_value instead [ 469.985596][T20213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.993713][T20213] IPv6: NLM_F_CREATE should be set when creating new route [ 470.001733][T20213] IPv6: NLM_F_CREATE should be set when creating new route [ 470.271993][T20226] __nla_validate_parse: 9 callbacks suppressed [ 470.272027][T20226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3989'. [ 470.278280][T20228] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 470.600021][T20236] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3994'. [ 470.626465][T20241] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3995'. [ 470.640766][T20243] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3997'. [ 470.676007][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3993'. [ 471.179819][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4003'. [ 471.350715][T20275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4007'. [ 471.388788][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4007'. [ 471.452405][T20282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4009'. [ 471.612257][T20281] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4009'. [ 471.842190][T20300] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 471.859034][ T1006] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.889962][ T1006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.932659][ T1006] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.954003][ T1006] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.070776][T17050] IPVS: starting estimator thread 0... [ 472.179224][T20312] IPVS: using max 28 ests per chain, 67200 per kthread [ 472.876678][T20354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.207442][T20367] bond3: entered promiscuous mode [ 473.212691][T20367] bond3: entered allmulticast mode [ 473.221410][T20367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.366403][T20380] xt_l2tp: v2 doesn't support IP mode [ 473.600959][T20394] netlink: 'syz.4.4039': attribute type 4 has an invalid length. [ 473.613087][T20396] openvswitch: netlink: Missing key (keys=40, expected=80) [ 475.583260][T20340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.600751][T20392] netlink: 'syz.4.4039': attribute type 1 has an invalid length. [ 475.623601][T20392] __nla_validate_parse: 5 callbacks suppressed [ 475.623619][T20392] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4039'. [ 475.840906][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4045'. [ 475.850001][T20403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4045'. [ 475.865684][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4045'. [ 475.882250][T20403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4045'. [ 475.892518][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4041'. [ 476.026220][T20411] netlink: 'syz.0.4044': attribute type 8 has an invalid length. [ 476.041145][T20418] netlink: 'syz.2.4046': attribute type 7 has an invalid length. [ 476.051726][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 476.087684][T20418] netlink: 'syz.2.4046': attribute type 7 has an invalid length. [ 476.122951][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 476.297780][T20436] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 476.322275][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4048'. [ 476.612693][T20449] syzkaller0: entered promiscuous mode [ 476.632526][T20449] syzkaller0: entered allmulticast mode [ 476.661029][T20455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4056'. [ 477.293303][T20484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.300650][T20484] IPv6: NLM_F_CREATE should be set when creating new route [ 477.339022][T20485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.481898][T20492] x_tables: duplicate underflow at hook 1 [ 478.311435][T20527] syzkaller0: entered promiscuous mode [ 478.321110][T20527] syzkaller0: entered allmulticast mode [ 478.500966][T20538] xt_NFQUEUE: number of total queues is 0 [ 480.595214][T20495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.800030][T20558] x_tables: duplicate underflow at hook 2 [ 480.972882][T20574] netlink: 'syz.1.4091': attribute type 1 has an invalid length. [ 481.161260][T20574] bond1: entered promiscuous mode [ 481.214185][T20574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.281061][T20590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.293222][T20590] bridge0: port 3(bond0) entered blocking state [ 481.300916][T20586] __nla_validate_parse: 5 callbacks suppressed [ 481.300931][T20586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4096'. [ 481.318623][T20590] bridge0: port 3(bond0) entered disabled state [ 481.325242][T20590] bond0: entered allmulticast mode [ 481.333395][T20590] bond0: entered promiscuous mode [ 481.341194][T20590] bridge0: port 3(bond0) entered blocking state [ 481.347602][T20590] bridge0: port 3(bond0) entered forwarding state [ 481.371291][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'. [ 481.380896][T20595] syzkaller0: entered promiscuous mode [ 481.394160][T20595] syzkaller0: entered allmulticast mode [ 481.407261][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'. [ 481.727941][T20617] openvswitch: netlink: Flow key attr not present in new flow. [ 481.906212][T20620] openvswitch: netlink: IP tunnel TTL not specified. [ 482.033103][T14621] bridge0: port 3(bond0) entered disabled state [ 482.122569][T20626] netlink: 'syz.4.4105': attribute type 2 has an invalid length. [ 482.172505][T20629] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.4106'. [ 482.203302][T20629] openvswitch: netlink: Message has 6 unknown bytes. [ 482.255093][T20638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4108'. [ 482.303816][T20638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'. [ 482.423319][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'. [ 482.425883][T20646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4109'. [ 482.896842][T20667] netlink: 'syz.3.4115': attribute type 1 has an invalid length. [ 482.899521][T20645] syzkaller0: entered promiscuous mode [ 482.917009][T20645] syzkaller0: entered allmulticast mode [ 482.967908][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4114'. [ 483.002920][T20666] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 483.024663][T20669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4114'. [ 483.044450][T20666] bond7 (unregistering): Released all slaves [ 483.240942][T20667] bond4: entered promiscuous mode [ 483.250318][T20667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.532199][T20671] bond4: (slave bridge4): making interface the new active one [ 483.543470][T20671] bridge4: entered promiscuous mode [ 483.563459][T20671] bridge4: left promiscuous mode [ 486.285320][T20707] sctp: [Deprecated]: syz.4.4121 (pid 20707) Use of int in max_burst socket option. [ 486.285320][T20707] Use struct sctp_assoc_value instead [ 486.341870][T20710] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 486.800494][T20730] __nla_validate_parse: 5 callbacks suppressed [ 486.800511][T20730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4132'. [ 486.804053][T20731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4132'. [ 486.840746][T20717] syzkaller1: entered promiscuous mode [ 486.848283][T20717] syzkaller1: entered allmulticast mode [ 486.874049][T20733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4133'. [ 487.131837][T20735] syzkaller0: entered promiscuous mode [ 487.169043][T20735] syzkaller0: entered allmulticast mode [ 487.481981][T20752] syzkaller1: entered promiscuous mode [ 487.498798][T20752] syzkaller1: entered allmulticast mode [ 487.612294][T20754] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 487.653551][T20759] netlink: 'syz.4.4142': attribute type 21 has an invalid length. [ 487.679680][T20759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4142'. [ 487.892238][T20772] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4146'. [ 487.986063][T20776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.006162][T20778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.167049][T20782] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4150'. [ 488.536496][T20793] veth0: entered promiscuous mode [ 488.573040][T20786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4152'. [ 488.782579][T20785] veth0: left promiscuous mode [ 489.115105][T20820] netlink: 'syz.3.4158': attribute type 2 has an invalid length. [ 489.172972][T20820] netlink: 'syz.3.4158': attribute type 2 has an invalid length. [ 489.217414][T20822] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.225101][T20822] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.326218][T20829] netlink: 'syz.1.4163': attribute type 10 has an invalid length. [ 489.400781][T20829] team0 (unregistering): Port device team_slave_0 removed [ 489.432614][T20829] team0 (unregistering): Port device team_slave_1 removed [ 489.733464][T20850] netlink: 'syz.1.4168': attribute type 4 has an invalid length. [ 489.800671][T20845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.931286][T20853] tipc: Enabled bearer , priority 14 [ 490.036225][T20854] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4170'. [ 490.056065][T20845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.259830][T20845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.473526][T20845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.541445][T20874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4176'. [ 490.631373][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4179'. [ 490.642589][T20877] set match dimension is over the limit! [ 490.654892][T20877] syzkaller1: entered promiscuous mode [ 490.667086][T20877] syzkaller1: entered allmulticast mode [ 490.754084][T20880] openvswitch: netlink: Flow actions attr not present in new flow. [ 490.923472][T14630] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.076089][T14617] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.147838][ T5896] tipc: Node number set to 29771104 [ 491.323506][T20904] can: request_module (can-proto-3) failed. [ 491.338431][T14630] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.551650][T20905] bond7: entered allmulticast mode [ 491.644793][T20909] veth5: entered allmulticast mode [ 491.673800][T20909] bond7: (slave veth5): Enslaving as an active interface with an up link [ 491.693215][T14619] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.710478][T20893] syzkaller1: entered promiscuous mode [ 491.716613][T20893] syzkaller1: entered allmulticast mode [ 494.229200][T20933] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 494.620528][T20920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.834348][T20969] netlink: 'syz.3.4203': attribute type 9 has an invalid length. [ 494.880281][T20972] netlink: 'syz.4.4205': attribute type 11 has an invalid length. [ 494.911147][T20972] __nla_validate_parse: 1 callbacks suppressed [ 494.911165][T20972] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4205'. [ 494.949964][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4204'. [ 494.978502][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4205'. [ 495.182197][T20989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4210'. [ 495.371125][T21000] netlink: 'syz.3.4216': attribute type 1 has an invalid length. [ 495.498451][T21000] bond6: entered promiscuous mode [ 495.513064][T21005] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4217'. [ 495.525388][T21000] bond6: entered allmulticast mode [ 495.533412][T21000] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.558190][T21012] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4218'. [ 495.728411][T21019] macvlan0: entered promiscuous mode [ 495.734974][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'. [ 495.786360][T21021] : renamed from virt_wifi0 [ 495.857405][T21024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 496.423253][T21049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4230'. [ 496.467498][T21051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4232'. [ 496.581197][T21049] macvlan3: entered promiscuous mode [ 496.586675][T21049] macvlan3: entered allmulticast mode [ 496.593866][T21049] bond2: (slave macvlan3): Opening slave failed [ 496.691505][T21054] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 496.704343][T21054] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 496.734368][T21070] netlink: 'syz.3.4235': attribute type 1 has an invalid length. [ 497.217138][T21093] veth1_macvtap: left promiscuous mode [ 497.330340][T21092] netlink: 'syz.0.4244': attribute type 10 has an invalid length. [ 497.661967][T21085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.030092][T21135] syzkaller1: entered promiscuous mode [ 498.039163][T21135] syzkaller1: entered allmulticast mode [ 498.283099][T21149] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 498.430847][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056862c00: rx timeout, send abort [ 498.482286][T21156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.524402][T21156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.931082][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041b54800: rx timeout, send abort [ 498.939670][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056862c00: abort rx timeout. Force session deactivation [ 498.961572][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888041b54800: connection exists (fe ff). last cmd: 20 [ 499.211516][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036fd8400: rx timeout, send abort [ 499.301124][T21192] netlink: 'syz.1.4272': attribute type 1 has an invalid length. [ 499.499438][T21198] tipc: Enabling of bearer rejected, failed to enable media [ 499.719778][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036fd8400: abort rx timeout. Force session deactivation [ 499.881335][T21214] openvswitch: netlink: Duplicate key (type 2). [ 499.995169][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803be06c00: rx timeout, send abort [ 500.111619][T21224] netlink: 'syz.0.4287': attribute type 39 has an invalid length. [ 500.376620][T21235] __nla_validate_parse: 11 callbacks suppressed [ 500.376668][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4289'. [ 500.395480][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4289'. [ 500.407537][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4289'. [ 500.453324][T21241] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4291'. [ 500.495325][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b1cdc00: rx timeout, send abort [ 500.503987][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803be06c00: abort rx timeout. Force session deactivation [ 500.531338][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88802b1cdc00: connection exists (fe ff). last cmd: 20 [ 500.544914][T21243] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4292'. [ 500.595342][T21245] netlink: 'syz.0.4293': attribute type 8 has an invalid length. [ 500.622409][T21245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4293'. [ 500.781305][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035780800: rx timeout, send abort [ 500.923386][T21260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4300'. [ 501.289593][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035780800: abort rx timeout. Force session deactivation [ 501.410802][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4304'. [ 501.562237][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036a50000: rx timeout, send abort [ 502.062103][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032cca400: rx timeout, send abort [ 502.070591][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036a50000: abort rx timeout. Force session deactivation [ 502.104927][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888032cca400: connection exists (fe ff). last cmd: 20 [ 502.354895][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b2d1800: rx timeout, send abort [ 502.404132][T21287] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4310'. [ 502.484845][T21294] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4312'. [ 502.508431][T21294] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 502.638404][T21300] bond3: Invalid ad_actor_system MAC address. [ 502.644548][T21300] bond3: option ad_actor_system: invalid value (1) [ 502.656298][T21300] bond3 (unregistering): Released all slaves [ 502.863153][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b2d1800: abort rx timeout. Force session deactivation [ 503.150493][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751abc00: rx timeout, send abort [ 503.213565][T21229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.651257][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803c3f2c00: rx timeout, send abort [ 503.659980][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751abc00: abort rx timeout. Force session deactivation [ 503.688695][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88803c3f2c00: connection exists (fe ff). last cmd: 20 [ 503.793227][T21349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.807816][T21346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.938455][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a8400: rx timeout, send abort [ 504.314275][T21381] netlink: 'syz.0.4337': attribute type 13 has an invalid length. [ 504.380753][T21381] gretap0: refused to change device tx_queue_len [ 504.402620][T21381] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 504.446783][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a8400: abort rx timeout. Force session deactivation [ 504.567827][T21393] netlink: 'syz.4.4342': attribute type 10 has an invalid length. [ 504.731977][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a9400: rx timeout, send abort [ 505.231217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805711e000: rx timeout, send abort [ 505.240265][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a9400: abort rx timeout. Force session deactivation [ 505.266664][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805711e000: connection exists (fe ff). last cmd: 20 [ 505.516661][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a8000: rx timeout, send abort [ 505.675224][T21440] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 505.688700][T21440] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 505.700289][T21440] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 505.702714][T21445] pimreg3: entered allmulticast mode [ 505.803567][T21455] tipc: Failed to remove unknown binding: 66,0,0/0:519982267/519982268 [ 505.813122][T21455] tipc: Failed to remove unknown binding: 66,0,0/0:519982267/519982268 [ 505.825330][T21455] netlink: 'syz.0.4359': attribute type 3 has an invalid length. [ 505.835427][T21455] __nla_validate_parse: 7 callbacks suppressed [ 505.835446][T21455] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4359'. [ 505.897467][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4359'. [ 506.024973][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a8000: abort rx timeout. Force session deactivation [ 506.052955][T21464] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 506.195271][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4364'. [ 506.207859][T21471] netlink: 'syz.0.4364': attribute type 5 has an invalid length. [ 506.215697][T21471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4364'. [ 506.232763][T21471] geneve2: entered promiscuous mode [ 506.240107][T21471] geneve2: entered allmulticast mode [ 506.249771][T14619] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 506.275273][T14619] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 506.298457][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a8c00: rx timeout, send abort [ 506.307915][T14619] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 506.357543][T14619] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 506.416354][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4366'. [ 506.465373][T21476] vlan3: entered allmulticast mode [ 506.471567][T21476] bridge5: entered allmulticast mode [ 506.601987][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4368'. [ 506.612006][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4368'. [ 506.670136][T21478] bridge5: port 1(bond3) entered blocking state [ 506.705359][T21478] bridge5: port 1(bond3) entered disabled state [ 506.754894][T21478] bond3: entered allmulticast mode [ 506.775493][T21478] bond3: entered promiscuous mode [ 506.794689][T21492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.803772][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c36c000: rx timeout, send abort [ 506.806698][T21489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.813782][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a8c00: abort rx timeout. Force session deactivation [ 506.825015][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88802c36c000: connection exists (fe ff). last cmd: 20 [ 506.852689][T21494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.866099][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4371'. [ 506.906210][T21491] vlan2: entered allmulticast mode [ 507.074981][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a8800: rx timeout, send abort [ 507.133706][T21505] netlink: 'syz.1.4375': attribute type 1 has an invalid length. [ 507.218639][T21507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4375'. [ 507.583275][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880751a8800: abort rx timeout. Force session deactivation [ 507.865433][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c7400: rx timeout, send abort [ 507.964539][T21519] syzkaller0: entered promiscuous mode [ 507.972403][T21519] syzkaller0: entered allmulticast mode [ 507.991103][T21519] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4380'. [ 508.019212][T21525] netlink: 'syz.1.4379': attribute type 1 has an invalid length. [ 508.064119][T21528] IPv6: NLM_F_CREATE should be specified when creating new route [ 508.247855][T21532] netlink: 'syz.4.4385': attribute type 18 has an invalid length. [ 508.259911][T21532] netlink: 'syz.4.4385': attribute type 18 has an invalid length. [ 508.273388][T21532] netlink: 'syz.4.4385': attribute type 23 has an invalid length. [ 508.365756][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880789c0400: rx timeout, send abort [ 508.374168][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c7400: abort rx timeout. Force session deactivation [ 508.396514][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880789c0400: connection exists (fe ff). last cmd: 20 [ 508.558613][T21477] Bluetooth: hci5: command 0x0406 tx timeout [ 508.567933][T21477] Bluetooth: hci4: command 0x0406 tx timeout [ 508.646479][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c6c00: rx timeout, send abort [ 508.764457][T21554] bond3: (slave ip6gretap0): Releasing active interface [ 508.856618][T21559] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 509.154727][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c6c00: abort rx timeout. Force session deactivation [ 509.430096][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c7c00: rx timeout, send abort [ 509.817655][T21601] nbd: must specify a device to reconfigure [ 509.930231][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880481a2c00: rx timeout, send abort [ 509.938768][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c7c00: abort rx timeout. Force session deactivation [ 509.959127][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880481a2c00: connection exists (fe ff). last cmd: 20 [ 510.051933][T21611] : entered promiscuous mode [ 510.156683][T21616] ipt_REJECT: TCP_RESET invalid for non-tcp [ 510.209156][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c5000: rx timeout, send abort [ 510.226133][T21622] sctp: [Deprecated]: syz.3.4412 (pid 21622) Use of int in max_burst socket option. [ 510.226133][T21622] Use struct sctp_assoc_value instead [ 510.717440][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c5000: abort rx timeout. Force session deactivation [ 510.991850][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033967c00: rx timeout, send abort [ 511.022443][T21659] __nla_validate_parse: 15 callbacks suppressed [ 511.022478][T21659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4425'. [ 511.024815][T21662] netlink: 'syz.4.4424': attribute type 9 has an invalid length. [ 511.492029][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880316a5000: rx timeout, send abort [ 511.501269][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033967c00: abort rx timeout. Force session deactivation [ 511.518326][T21679] netlink: 'syz.1.4431': attribute type 1 has an invalid length. [ 511.523613][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880316a5000: connection exists (fe ff). last cmd: 20 [ 511.534479][T21679] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4431'. [ 511.759549][T21691] ip6gre1: entered promiscuous mode [ 511.764806][T21691] ip6gre1: entered allmulticast mode [ 511.773581][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033965000: rx timeout, send abort [ 512.281805][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033965000: abort rx timeout. Force session deactivation [ 512.461714][T21714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.510406][T21721] netlink: 'syz.0.4445': attribute type 29 has an invalid length. [ 512.537438][T21721] netlink: 'syz.0.4445': attribute type 29 has an invalid length. [ 512.553168][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a62400: rx timeout, send abort [ 512.612488][T21721] netlink: 'syz.0.4445': attribute type 32 has an invalid length. [ 512.653398][T21724] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4446'. [ 512.855150][T21733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4450'. [ 512.888738][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'. [ 512.951358][T21733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4450'. [ 513.053336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b8c5800: rx timeout, send abort [ 513.063304][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a62400: abort rx timeout. Force session deactivation [ 513.083740][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88806b8c5800: connection exists (fe ff). last cmd: 20 [ 513.204065][T21747] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 513.333650][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a61400: rx timeout, send abort [ 513.458744][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4456'. [ 513.566590][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.582051][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.591018][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.611853][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.621908][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.739684][T21762] lo speed is unknown, defaulting to 1000 [ 513.841913][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a61400: abort rx timeout. Force session deactivation [ 514.057990][T21778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4462'. [ 514.124253][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ad53400: rx timeout, send abort [ 514.495431][T21803] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 514.522958][T21762] chnl_net:caif_netlink_parms(): no params data found [ 514.602774][T21803] syzkaller1: entered promiscuous mode [ 514.609619][T21803] syzkaller1: entered allmulticast mode [ 514.624399][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880918c5c00: rx timeout, send abort [ 514.632752][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ad53400: abort rx timeout. Force session deactivation [ 514.644519][T21810] netlink: 'syz.3.4467': attribute type 9 has an invalid length. [ 514.655081][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880918c5c00: connection exists (fe ff). last cmd: 20 [ 514.905053][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ee91400: rx timeout, send abort [ 514.991648][T21762] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.999657][T21762] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.007460][T21762] bridge_slave_0: entered allmulticast mode [ 515.019891][T21762] bridge_slave_0: entered promiscuous mode [ 515.029039][T21762] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.036312][T21762] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.044615][T21762] bridge_slave_1: entered allmulticast mode [ 515.052509][T21762] bridge_slave_1: entered promiscuous mode [ 515.093814][T21762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.107417][T21762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.148463][T21762] team0: Port device team_slave_0 added [ 515.157376][T21762] team0: Port device team_slave_1 added [ 515.252930][T21762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.269183][T21762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.320879][T21762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.354998][T21841] netlink: 'syz.1.4475': attribute type 29 has an invalid length. [ 515.365325][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4475'. [ 515.375779][T21762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.383634][T21762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.413362][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ee91400: abort rx timeout. Force session deactivation [ 515.456711][T21762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.576652][T21762] hsr_slave_0: entered promiscuous mode [ 515.583813][T21762] hsr_slave_1: entered promiscuous mode [ 515.598490][T21762] debugfs: 'hsr0' already exists in 'hsr' [ 515.604430][T21762] Cannot create hsr debugfs directory [ 515.678288][ T5834] Bluetooth: hci0: command tx timeout [ 515.691737][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053715400: rx timeout, send abort [ 516.191882][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804945d400: rx timeout, send abort [ 516.200587][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053715400: abort rx timeout. Force session deactivation [ 516.235930][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804945d400: connection exists (fe ff). last cmd: 20 [ 516.485923][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053715800: rx timeout, send abort [ 516.723942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.994189][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053715800: abort rx timeout. Force session deactivation [ 517.264614][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a3000: rx timeout, send abort [ 517.757780][ T5845] Bluetooth: hci0: command tx timeout [ 517.764823][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067bf2000: rx timeout, send abort [ 517.774272][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a3000: abort rx timeout. Force session deactivation [ 517.788659][T21818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.807302][T21762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 517.814408][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888067bf2000: connection exists (fe ff). last cmd: 20 [ 517.955441][T21762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.980206][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4480'. [ 517.984597][T21762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 518.033111][T21762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.064258][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a3400: rx timeout, send abort [ 518.113822][T21762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 518.138470][T21762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.160515][T21762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 518.174860][T21762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.530759][T21762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.572567][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a3400: abort rx timeout. Force session deactivation [ 518.589339][T21762] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.622943][T14630] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.630186][T14630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.693255][T14630] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.700513][T14630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.722264][T21901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4488'. [ 518.797953][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 518.855537][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a1000: rx timeout, send abort [ 519.035114][T21915] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4491'. [ 519.252911][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4494'. [ 519.285405][T21924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4494'. [ 519.334999][T21924] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.4494'. [ 519.346412][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043bde000: rx timeout, send abort [ 519.363797][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a1000: abort rx timeout. Force session deactivation [ 519.398114][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888043bde000: connection exists (fe ff). last cmd: 20 [ 519.465599][T21931] netlink: 'syz.1.4496': attribute type 58 has an invalid length. [ 519.476411][T21762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.487321][T21931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4496'. [ 519.532970][T21931] netlink: 'syz.1.4496': attribute type 1 has an invalid length. [ 519.559688][T21935] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 519.577733][T21937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4498'. [ 519.583839][T21931] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4496'. [ 519.648308][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a0400: rx timeout, send abort [ 519.837161][ T5834] Bluetooth: hci0: command tx timeout [ 519.870199][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4501'. [ 519.901699][T21959] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 519.909178][T21953] openvswitch: netlink: Flow key attr not present in new flow. [ 519.909851][T21950] pim6reg1: entered promiscuous mode [ 519.927480][T21950] pim6reg1: entered allmulticast mode [ 520.091681][T21968] syzkaller1: entered promiscuous mode [ 520.134289][T21968] syzkaller1: entered allmulticast mode [ 520.156587][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a0400: abort rx timeout. Force session deactivation [ 520.214427][T21975] netlink: 'syz.4.4506': attribute type 1 has an invalid length. [ 520.366189][T21985] netlink: 'syz.1.4507': attribute type 1 has an invalid length. [ 520.411803][T21975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.428074][T21971] smc: net device team0 applied user defined pnetid SYZ2 [ 520.435151][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066867000: rx timeout, send abort [ 520.802775][T21762] veth0_vlan: entered promiscuous mode [ 520.835374][T21762] veth1_vlan: entered promiscuous mode [ 520.929096][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880345e8800: rx timeout, send abort [ 520.937489][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066867000: abort rx timeout. Force session deactivation [ 520.971795][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880345e8800: connection exists (fe ff). last cmd: 20 [ 521.013637][T21762] veth0_macvtap: entered promiscuous mode [ 521.039460][T22012] team0: Cannot enslave team device to itself [ 521.048962][T22011] team0: Cannot enslave team device to itself [ 521.072418][T21762] veth1_macvtap: entered promiscuous mode [ 521.171955][T21762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.221766][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b2d8400: rx timeout, send abort [ 521.256322][T21762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.326269][T14627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.342098][T14627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.372736][T14627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.395239][T14627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.460062][T22023] pim6reg527: entered allmulticast mode [ 521.730039][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b2d8400: abort rx timeout. Force session deactivation [ 521.814119][T22040] netlink: 'syz.1.4523': attribute type 1 has an invalid length. [ 521.864896][T22040] netlink: 'syz.1.4523': attribute type 4 has an invalid length. [ 521.918288][ T5834] Bluetooth: hci0: command tx timeout [ 521.976857][T22041] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.985273][T22041] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.000361][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804945f000: rx timeout, send abort [ 522.023955][T14617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.069360][T14617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.176183][T22043] syzkaller1: entered promiscuous mode [ 522.196129][T22043] syzkaller1: entered allmulticast mode [ 522.245301][T22059] netlink: 'syz.0.4527': attribute type 1 has an invalid length. [ 522.302149][T14619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.352353][T14619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.500512][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041ab0c00: rx timeout, send abort [ 522.509278][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804945f000: abort rx timeout. Force session deactivation [ 522.542641][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888041ab0c00: connection exists (fe ff). last cmd: 20 [ 522.792603][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043537800: rx timeout, send abort [ 523.288738][T22084] netlink: 'syz.5.4455': attribute type 1 has an invalid length. [ 523.300889][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043537800: abort rx timeout. Force session deactivation [ 523.321108][T22103] netlink: 'syz.4.4537': attribute type 29 has an invalid length. [ 523.580263][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043537c00: rx timeout, send abort [ 523.833824][T22123] IPVS: set_ctl: invalid protocol: 107 100.1.1.2:20002 [ 523.893711][T22128] __nla_validate_parse: 7 callbacks suppressed [ 523.893729][T22128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4543'. [ 523.912509][T22129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4543'. [ 523.919567][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 524.080433][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807adae400: rx timeout, send abort [ 524.088778][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043537c00: abort rx timeout. Force session deactivation [ 524.115233][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807adae400: connection exists (fe ff). last cmd: 20 [ 524.365218][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043534800: rx timeout, send abort [ 524.873483][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043534800: abort rx timeout. Force session deactivation [ 525.143881][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043537000: rx timeout, send abort [ 525.644024][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c647400: rx timeout, send abort [ 525.652571][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043537000: abort rx timeout. Force session deactivation [ 525.675963][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804c647400: connection exists (fe ff). last cmd: 20 [ 525.925945][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043537400: rx timeout, send abort [ 525.974837][T22086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.236614][T22138] netlink: 'syz.1.4546': attribute type 2 has an invalid length. [ 526.284140][T22138] netlink: 'syz.1.4546': attribute type 2 has an invalid length. [ 526.434226][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043537400: abort rx timeout. Force session deactivation [ 526.715613][ C0] vcan0: j1939_tp_rxtimer: 0xffff888072d63800: rx timeout, send abort [ 526.815943][T22166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4553'. [ 526.914055][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4553'. [ 526.990273][T22171] IPVS: Error connecting to the multicast addr [ 527.004980][T22171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4555'. [ 527.215759][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a1400: rx timeout, send abort [ 527.224160][ C0] vcan0: j1939_tp_rxtimer: 0xffff888072d63800: abort rx timeout. Force session deactivation [ 527.246514][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880670a1400: connection exists (fe ff). last cmd: 20 [ 527.496486][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ebf8c00: rx timeout, send abort [ 527.658306][T22179] ipvlan3: entered promiscuous mode [ 527.670829][T22191] syzkaller0: entered promiscuous mode [ 527.678030][T22191] syzkaller0: entered allmulticast mode [ 528.004766][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ebf8c00: abort rx timeout. Force session deactivation [ 528.091658][T22211] No such timeout policy "syz1" [ 528.224106][T22219] IPv6: sit1: Disabled Multicast RS [ 528.248707][T22219] sit1: entered allmulticast mode [ 528.276643][T22224] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4572'. [ 528.289226][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ba95000: rx timeout, send abort [ 528.789259][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803b891000: rx timeout, send abort [ 528.799730][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ba95000: abort rx timeout. Force session deactivation [ 528.821071][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88803b891000: connection exists (fe ff). last cmd: 20 [ 528.894681][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4580'. [ 529.071045][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806afe7c00: rx timeout, send abort [ 529.144238][T22264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4582'. [ 529.166173][T22264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4582'. [ 529.290242][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'. [ 529.334372][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'. [ 529.579350][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806afe7c00: abort rx timeout. Force session deactivation [ 529.745192][T22293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4590'. [ 529.871634][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079825800: rx timeout, send abort [ 529.948464][T14618] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 530.072300][T22305] netlink: 204156 bytes leftover after parsing attributes in process `syz.3.4592'. [ 530.093529][T22305] netlink: Unknown conntrack attr (0) [ 530.361523][T22318] netlink: 'syz.3.4595': attribute type 12 has an invalid length. [ 530.369794][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880b1679400: rx timeout, send abort [ 530.379893][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079825800: abort rx timeout. Force session deactivation [ 530.408263][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880b1679400: connection exists (fe ff). last cmd: 20 [ 530.434174][T22318] bond8: option primary_reselect: invalid value (255) [ 530.444069][T22318] bond8 (unregistering): Released all slaves [ 530.658226][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c626000: rx timeout, send abort [ 530.734899][T22330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4598'. [ 530.844992][T22338] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4600'. [ 530.875680][T22338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4600'. [ 531.166508][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c626000: abort rx timeout. Force session deactivation [ 531.344868][T22353] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4604'. [ 531.449958][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ab4f000: rx timeout, send abort [ 531.490109][T22359] netlink: 'syz.1.4605': attribute type 32 has an invalid length. [ 531.950102][ C0] vcan0: j1939_tp_rxtimer: 0xffff888082de7000: rx timeout, send abort [ 531.959165][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ab4f000: abort rx timeout. Force session deactivation [ 531.993597][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888082de7000: connection exists (fe ff). last cmd: 20 [ 532.243560][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b80800: rx timeout, send abort [ 532.345005][T22390] netlink: 'syz.5.4613': attribute type 2 has an invalid length. [ 532.374549][T22390] netlink: 'syz.5.4613': attribute type 8 has an invalid length. [ 532.618209][T22406] chnl_net:caif_netlink_parms(): no params data found [ 532.751842][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b80800: abort rx timeout. Force session deactivation [ 533.035194][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f795000: rx timeout, send abort [ 533.063856][T22419] syzkaller1: entered allmulticast mode [ 533.094268][T22419] ipt_REJECT: TCP_RESET invalid for non-tcp [ 533.271080][T22437] netlink: 'syz.0.4622': attribute type 3 has an invalid length. [ 533.297994][T22437] netlink: 'syz.0.4622': attribute type 1 has an invalid length. [ 533.329719][T22437] NCSI netlink: No device for ifindex 813332851 [ 533.535342][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806638e000: rx timeout, send abort [ 533.543981][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f795000: abort rx timeout. Force session deactivation [ 533.571318][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88806638e000: connection exists (fe ff). last cmd: 20 [ 533.821608][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f797000: rx timeout, send abort [ 533.914945][T22435] erspan0: entered promiscuous mode [ 533.921219][T22435] erspan0: entered allmulticast mode [ 534.324710][T22472] syzkaller0: entered promiscuous mode [ 534.329902][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f797000: abort rx timeout. Force session deactivation [ 534.349243][T22472] syzkaller0: entered allmulticast mode [ 534.600604][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c111800: rx timeout, send abort [ 535.100728][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880895db400: rx timeout, send abort [ 535.109380][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c111800: abort rx timeout. Force session deactivation [ 535.137712][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880895db400: connection exists (fe ff). last cmd: 20 [ 535.146610][T22499] __nla_validate_parse: 8 callbacks suppressed [ 535.146643][T22499] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4636'. [ 535.175231][T22504] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20002 [ 535.387692][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057530000: rx timeout, send abort [ 535.630137][T22520] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4641'. [ 535.885660][T22533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4646'. [ 535.895980][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057530000: abort rx timeout. Force session deactivation [ 536.121478][T22539] openvswitch: netlink: IPv4 tun info is not correct [ 536.162593][T22541] netlink: 'syz.0.4647': attribute type 10 has an invalid length. [ 536.162613][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4648'. [ 536.178306][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf10800: rx timeout, send abort [ 536.217900][T22539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4648'. [ 536.261405][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4648'. [ 536.313349][T22539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4648'. [ 536.462027][T22553] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4652'. [ 536.553068][T22552] vlan2: entered promiscuous mode [ 536.591206][T22552] bridge0: entered promiscuous mode [ 536.678434][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807794ac00: rx timeout, send abort [ 536.685754][T22561] netlink: zone id is out of range [ 536.693441][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf10800: abort rx timeout. Force session deactivation [ 536.703536][T22561] netlink: zone id is out of range [ 536.718854][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807794ac00: connection exists (fe ff). last cmd: 20 [ 536.720681][T22561] netlink: zone id is out of range [ 536.779265][T22563] x9: renamed from bridge_slave_0 (while UP) [ 536.815643][T22561] netlink: zone id is out of range [ 536.893113][T22561] netlink: zone id is out of range [ 536.908671][T22561] netlink: zone id is out of range [ 536.914898][T22561] netlink: zone id is out of range [ 536.922150][T22561] netlink: zone id is out of range [ 536.928782][T22561] netlink: zone id is out of range [ 536.968829][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf10400: rx timeout, send abort [ 537.463090][T22580] netlink: 'syz.0.4659': attribute type 1 has an invalid length. [ 537.477666][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf10400: abort rx timeout. Force session deactivation [ 537.525085][T22580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4659'. [ 537.753031][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf10000: rx timeout, send abort [ 537.963400][T22601] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 538.235069][T22625] sctp: [Deprecated]: syz.0.4669 (pid 22625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.235069][T22625] Use struct sctp_sack_info instead [ 538.253210][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805744d800: rx timeout, send abort [ 538.261337][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf10000: abort rx timeout. Force session deactivation [ 538.289604][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805744d800: connection exists (fe ff). last cmd: 20 [ 538.388462][T22634] netlink: 'syz.5.4670': attribute type 2 has an invalid length. [ 538.409937][T22634] netlink: 'syz.5.4670': attribute type 3 has an invalid length. [ 538.437478][T22634] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4670'. [ 538.455005][T22632] netlink: 'syz.5.4670': attribute type 2 has an invalid length. [ 538.504264][T22632] netlink: 'syz.5.4670': attribute type 3 has an invalid length. [ 538.537969][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033bfc800: rx timeout, send abort [ 538.610696][T22639] netlink: 'syz.3.4673': attribute type 16 has an invalid length. [ 538.646391][T22639] netlink: 'syz.3.4673': attribute type 17 has an invalid length. [ 538.763553][T22639] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.770798][T22639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.778363][T22639] bridge0: port 1(1x9) entered blocking state [ 538.784843][T22639] bridge0: port 1(1x9) entered forwarding state [ 538.832619][T22639] 8021q: adding VLAN 0 to HW filter on device .` [ 538.866424][T14621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.886467][T14621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.046262][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033bfc800: abort rx timeout. Force session deactivation [ 539.227014][T22647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.316629][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044a6e400: rx timeout, send abort [ 539.535346][T22623] hsr_slave_1 (unregistering): left promiscuous mode [ 539.818089][ C0] vcan0: j1939_tp_rxtimer: 0xffff88808a87d000: rx timeout, send abort [ 539.826575][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044a6e400: abort rx timeout. Force session deactivation [ 539.860484][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88808a87d000: connection exists (fe ff). last cmd: 20 [ 539.978574][T22680] netlink: 'syz.0.4682': attribute type 1 has an invalid length. [ 540.009939][ T5845] Bluetooth: hci0: command 0x080f tx timeout [ 540.109787][T22690] netlink: 'syz.4.4685': attribute type 1 has an invalid length. [ 540.110457][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044a6e800: rx timeout, send abort [ 540.127731][T22693] netlink: 'syz.4.4685': attribute type 1 has an invalid length. [ 540.248220][T22683] bond4: (slave gretap2): making interface the new active one [ 540.284886][T22683] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 540.440906][T22710] __nla_validate_parse: 3 callbacks suppressed [ 540.440940][T22710] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4689'. [ 540.625784][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044a6e800: abort rx timeout. Force session deactivation [ 540.738004][T22720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4694'. [ 540.899012][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880895ad400: rx timeout, send abort [ 541.082986][T22738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.091115][T22738] IPv6: NLM_F_CREATE should be set when creating new route [ 541.099219][T22738] IPv6: NLM_F_CREATE should be set when creating new route [ 541.325931][T22750] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 541.395524][T22750] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 541.399397][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807674c400: rx timeout, send abort [ 541.410916][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880895ad400: abort rx timeout. Force session deactivation [ 541.434275][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807674c400: connection exists (fe ff). last cmd: 20 [ 541.448090][ C0] net_ratelimit: 46 callbacks suppressed [ 541.448108][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 541.531218][T22755] veth0_macvtap: left promiscuous mode [ 541.684250][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880895aec00: rx timeout, send abort [ 541.731447][T22768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4709'. [ 541.893642][T22778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4712'. [ 541.936285][T22766] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 542.192572][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880895aec00: abort rx timeout. Force session deactivation [ 542.254810][T22788] PKCS7: Unknown OID: [4] (bad) [ 542.269087][T22788] PKCS7: Only support pkcs7_signedData type [ 542.305198][T22788] lo: entered allmulticast mode [ 542.312285][T22783] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4714'. [ 542.317112][T22788] lo: left allmulticast mode [ 542.356316][T22783] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 542.471173][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880895ae800: rx timeout, send abort [ 542.571939][T22796] Bluetooth: MGMT ver 1.23 [ 542.813520][T22807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.952567][T22809] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4724'. [ 542.971323][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ee92800: rx timeout, send abort [ 542.979752][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880895ae800: abort rx timeout. Force session deactivation [ 543.009112][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804ee92800: connection exists (fe ff). last cmd: 20 [ 543.211665][T22828] validate_nla: 5 callbacks suppressed [ 543.211682][T22828] netlink: 'syz.0.4727': attribute type 1 has an invalid length. [ 543.242555][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'. [ 543.255701][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'. [ 543.268267][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dcb0800: rx timeout, send abort [ 543.406221][T22836] sctp: [Deprecated]: syz.0.4731 (pid 22836) Use of int in max_burst socket option deprecated. [ 543.406221][T22836] Use struct sctp_assoc_value instead [ 543.528428][T22842] netlink: 'syz.3.4733': attribute type 178 has an invalid length. [ 543.586246][T22846] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 543.773389][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4736'. [ 543.783221][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dcb0800: abort rx timeout. Force session deactivation [ 544.046408][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880544e9c00: rx timeout, send abort [ 544.179987][T22871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4742'. [ 544.230653][T22877] netlink: 'syz.0.4743': attribute type 11 has an invalid length. [ 544.546540][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880895ce800: rx timeout, send abort [ 544.556684][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880544e9c00: abort rx timeout. Force session deactivation [ 544.589209][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880895ce800: connection exists (fe ff). last cmd: 20 [ 544.839040][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ea5f400: rx timeout, send abort [ 545.348142][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ea5f400: abort rx timeout. Force session deactivation [ 545.407477][T22941] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 545.471963][T22944] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 545.630518][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf13800: rx timeout, send abort [ 545.797684][T22953] __nla_validate_parse: 3 callbacks suppressed [ 545.797703][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4766'. [ 545.903334][T22953] ipvlan4: entered promiscuous mode [ 545.996596][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'. [ 546.130699][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ffbc000: rx timeout, send abort [ 546.140031][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf13800: abort rx timeout. Force session deactivation [ 546.166366][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88803ffbc000: connection exists (fe ff). last cmd: 20 [ 546.185090][T22973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4773'. [ 546.390021][T22977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4773'. [ 546.404250][T22974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4772'. [ 546.409377][T22977] nbd: device at index 64 is going down [ 546.420007][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf13400: rx timeout, send abort [ 546.539477][T22984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4775'. [ 546.558476][T22985] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 546.704108][T22989] netlink: 'syz.4.4776': attribute type 1 has an invalid length. [ 546.840817][T22998] netlink: 'syz.0.4779': attribute type 1 has an invalid length. [ 546.856555][T22989] bond6: entered promiscuous mode [ 546.865818][T22989] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.885383][T23000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4780'. [ 546.919631][T22996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.926310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf13400: abort rx timeout. Force session deactivation [ 546.990103][T22996] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 547.012578][T23005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 547.035669][T22996] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 547.111842][T22996] bond6: (slave ip6gre1): making interface the new active one [ 547.142642][T22996] ip6gre1: entered promiscuous mode [ 547.154451][T22996] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 547.198553][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf13000: rx timeout, send abort [ 547.285919][T23003] syzkaller1: entered promiscuous mode [ 547.295236][T23003] syzkaller1: entered allmulticast mode [ 547.633926][T23031] netlink: 'syz.4.4787': attribute type 62 has an invalid length. [ 547.698987][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057515000: rx timeout, send abort [ 547.707986][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf13000: abort rx timeout. Force session deactivation [ 547.732011][T23036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4789'. [ 547.734321][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888057515000: connection exists (fe ff). last cmd: 20 [ 547.773005][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4788'. [ 547.984290][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf12c00: rx timeout, send abort [ 548.024768][T23048] netlink: 3604 bytes leftover after parsing attributes in process `syz.3.4793'. [ 548.203364][T23059] netlink: 'syz.3.4797': attribute type 21 has an invalid length. [ 548.223753][T23060] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 548.253511][T23059] netlink: 'syz.3.4797': attribute type 5 has an invalid length. [ 548.413750][T23068] netlink: 'syz.4.4798': attribute type 3 has an invalid length. [ 548.492569][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf12c00: abort rx timeout. Force session deactivation [ 548.773935][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf12800: rx timeout, send abort [ 549.084215][T23091] erspan0: entered promiscuous mode [ 549.110863][T23091] macvtap1: entered promiscuous mode [ 549.129886][T23091] macvtap1: entered allmulticast mode [ 549.139216][T23091] erspan0: entered allmulticast mode [ 549.194318][T23093] syzkaller0: entered promiscuous mode [ 549.222186][T23093] syzkaller0: entered allmulticast mode [ 549.274145][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035da3c00: rx timeout, send abort [ 549.282929][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cf12800: abort rx timeout. Force session deactivation [ 549.782469][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035da3c00: abort rx timeout. Force session deactivation [ 549.880793][T23131] netlink: 'syz.0.4817': attribute type 1 has an invalid length. [ 550.050925][T23131] bond5: entered promiscuous mode [ 550.056666][T23131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.136700][T23140] netlink: 'syz.3.4818': attribute type 10 has an invalid length. [ 550.835469][T23166] xt_TCPMSS: Only works on TCP SYN packets [ 550.892536][T23166] syzkaller0: entered promiscuous mode [ 550.907674][T23166] syzkaller0: entered allmulticast mode [ 551.068316][T23181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.263131][T23186] netlink: 'syz.4.4830': attribute type 1 has an invalid length. [ 551.313592][T23186] 8021q: adding VLAN 0 to HW filter on device bond7 [ 551.334291][T23186] vlan2: entered promiscuous mode [ 551.341249][T23186] bond7: entered promiscuous mode [ 551.346608][T23186] vlan2: entered allmulticast mode [ 551.352577][T23186] bond7: entered allmulticast mode [ 551.364881][T23194] __nla_validate_parse: 14 callbacks suppressed [ 551.364910][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'. [ 551.367651][T23186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4830'. [ 551.404201][T23186] bond7: (slave bridge3): making interface the new active one [ 551.412616][T23186] bridge3: entered promiscuous mode [ 551.418501][T23186] bridge3: entered allmulticast mode [ 551.436176][T23186] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 551.591047][T23201] netlink: 'syz.0.4835': attribute type 1 has an invalid length. [ 551.650044][T23202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.890359][T23213] bond0: Device is already in use. [ 551.913698][T23211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4838'. [ 551.967539][T23222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4842'. [ 552.125864][T23228] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 552.189441][T23228] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 552.479785][T23241] netlink: 'syz.0.4848': attribute type 4 has an invalid length. [ 552.554845][T23245] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4850'. [ 553.813152][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4866'. [ 553.943189][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4867'. [ 554.164428][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4867'. [ 554.327486][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4874'. [ 554.355992][T23329] openvswitch: netlink: Unknown nsh attribute 0 [ 554.603806][T23341] h: entered promiscuous mode [ 554.705284][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4881'. [ 554.712052][T23349] netlink: 'syz.1.4882': attribute type 1 has an invalid length. [ 554.753221][T23346] netlink: 'syz.3.4881': attribute type 5 has an invalid length. [ 554.801334][T23349] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.815277][T23346] netlink: 'syz.3.4881': attribute type 5 has an invalid length. [ 554.905053][T23349] bond4: (slave veth7): Enslaving as an active interface with a down link [ 554.962490][T23356] bond4: (slave veth0_to_bond): making interface the new active one [ 555.001455][T23356] veth0_to_bond: entered promiscuous mode [ 555.009445][T23356] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 555.080168][T23349] bond4: (slave veth9): Enslaving as an active interface with a down link [ 555.472757][T23374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.573979][ T29] audit: type=1107 audit(1776505233.035:4): pid=23373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';J%UA٠0ltݕ/ 6򊨊' [ 556.284983][T23408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.297247][T23408] netlink: 'syz.5.4900': attribute type 1 has an invalid length. [ 556.408437][T23415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.418255][T23415] bond2: (slave bond3): making interface the new active one [ 556.430905][T23415] bond2: (slave bond3): Enslaving as an active interface with an up link [ 556.473466][T23415] __nla_validate_parse: 7 callbacks suppressed [ 556.473485][T23415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4900'. [ 556.496206][T23408] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 556.554534][T23415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.015170][T23446] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 557.314623][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4913'. [ 557.891685][T23485] lo: MTU too low for tipc bearer [ 557.897535][T23485] tipc: Enabling of bearer rejected, failed to enable media [ 557.913213][T23485] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4922'. [ 558.191838][T23501] netlink: 'syz.1.4925': attribute type 1 has an invalid length. [ 558.270836][T23501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 558.324486][T23508] netlink: 'syz.3.4929': attribute type 61 has an invalid length. [ 558.351739][T23504] bond5: (slave veth11): Enslaving as an active interface with a down link [ 558.414317][T23501] netlink: 'syz.1.4925': attribute type 83 has an invalid length. [ 558.712089][T23526] netlink: 'syz.3.4932': attribute type 1 has an invalid length. [ 558.739581][T23527] netlink: 'syz.3.4932': attribute type 1 has an invalid length. [ 558.855820][T23533] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 558.874700][T23533] bond6: (slave lo): Enslaving as an active interface with an up link [ 558.889403][T23533] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 559.453551][T23550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'. [ 559.714284][T23562] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4940'. [ 559.863514][T23565] netlink: 'syz.1.4945': attribute type 2 has an invalid length. [ 559.899528][T23565] netlink: 'syz.1.4945': attribute type 2 has an invalid length. [ 560.449782][T23583] syzkaller0: entered promiscuous mode [ 560.965313][T23598] netlink: 'syz.3.4954': attribute type 12 has an invalid length. [ 561.380141][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4960'. [ 561.599303][T23625] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4963'. [ 561.612143][T23625] netlink: 'syz.0.4963': attribute type 1 has an invalid length. [ 561.779175][T23627] lo speed is unknown, defaulting to 1000 [ 562.325400][T23648] macvlan0: entered promiscuous mode [ 562.421071][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4971'. [ 562.435427][T23655] xt_TPROXY: Can be used only with -p tcp or -p udp [ 562.726216][T23660] sctp: [Deprecated]: syz.3.4973 (pid 23660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.726216][T23660] Use struct sctp_sack_info instead [ 562.767540][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'. [ 562.983864][T23680] netlink: 'syz.5.4980': attribute type 2 has an invalid length. [ 563.009472][T23683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4979'. [ 563.286812][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4982'. [ 563.543109][T23713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4986'. [ 563.641892][T23717] netlink: 81 bytes leftover after parsing attributes in process `syz.1.4987'. [ 563.722076][T23704] syzkaller1: entered promiscuous mode [ 563.737726][T23704] syzkaller1: entered allmulticast mode [ 563.801963][T23720] openvswitch: netlink: IP tunnel dst address not specified [ 563.867566][T23726] netlink: 'syz.3.4988': attribute type 1 has an invalid length. [ 564.348985][T23743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4994'. [ 564.743992][T23761] netlink: 'syz.3.4999': attribute type 1 has an invalid length. [ 564.754089][T23761] netlink: 'syz.3.4999': attribute type 2 has an invalid length. [ 564.768790][T23761] netlink: 'syz.3.4999': attribute type 1 has an invalid length. [ 565.339001][T23788] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.5006'. [ 565.877494][T23808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5011'. [ 566.029786][T23816] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 566.169348][T23822] sctp: [Deprecated]: syz.0.5015 (pid 23822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.169348][T23822] Use struct sctp_sack_info instead [ 566.218207][T14630] veth0_to_bond: left promiscuous mode [ 566.262754][T23826] syzkaller0: entered promiscuous mode [ 566.284834][T23826] syzkaller0: entered allmulticast mode [ 566.298187][T23825] netlink: 'syz.5.5017': attribute type 1 has an invalid length. [ 566.391083][T23825] syzkaller0: entered promiscuous mode [ 566.400802][T23825] syzkaller0: entered allmulticast mode [ 566.440466][T23825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.856535][T23852] netlink: 'syz.5.5024': attribute type 11 has an invalid length. [ 566.872832][T23852] __nla_validate_parse: 4 callbacks suppressed [ 566.872851][T23852] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5024'. [ 567.193853][T23859] netlink: 'syz.1.5027': attribute type 10 has an invalid length. [ 567.476180][T23865] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5030'. [ 567.589139][T23867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5031'. [ 567.934365][T23881] netlink: 'syz.4.5034': attribute type 11 has an invalid length. [ 567.975685][T23879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5036'. [ 567.977023][T23881] netlink: 'syz.4.5034': attribute type 11 has an invalid length. [ 568.017349][T23881] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5034'. [ 568.096302][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5038'. [ 568.149263][T23887] bridge_slave_1: left allmulticast mode [ 568.173604][T23887] bridge_slave_1: left promiscuous mode [ 568.195401][T23887] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.215762][T23895] xt_ipcomp: unknown flags 1D [ 568.272799][T23887] bridge_slave_0: left promiscuous mode [ 568.304250][T23887] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.775314][T23916] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 568.979974][T23931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5048'. [ 569.048634][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5048'. [ 569.223419][T23941] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 569.279690][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5053'. [ 569.352258][T23952] bond9: Invalid ad_actor_system MAC address. [ 569.359215][T23952] bond9: option ad_actor_system: invalid value (1) [ 569.441169][T23962] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5054'. [ 569.596627][T23952] bond9 (unregistering): Released all slaves [ 569.852827][T23974] syzkaller1: entered promiscuous mode [ 569.877052][T23974] syzkaller1: entered allmulticast mode [ 571.466378][T24063] xt_policy: output policy not valid in PREROUTING and INPUT [ 571.500048][T24065] netlink: 'syz.4.5074': attribute type 10 has an invalid length. [ 572.003829][T24087] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 572.069083][T24092] __nla_validate_parse: 3 callbacks suppressed [ 572.069119][T24092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5084'. [ 572.107764][T24096] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5086'. [ 572.118716][T24096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5086'. [ 572.460169][T24111] sch_tbf: burst 33 is lower than device syzkaller0 mtu (1500) ! [ 572.510211][T24111] syzkaller0: entered promiscuous mode [ 572.541356][T24111] syzkaller0: entered allmulticast mode [ 573.094707][T24131] netlink: 'syz.4.5098': attribute type 11 has an invalid length. [ 573.811498][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5107'. [ 573.962854][T24153] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5105'. [ 574.007693][T24162] lo speed is unknown, defaulting to 1000 [ 574.010357][T24153] Cannot find add_set index 0 as target [ 574.842047][T24198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5117'. [ 574.991587][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5118'. [ 575.120490][T24204] veth10: entered allmulticast mode [ 575.146499][T24208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5121'. [ 575.418052][T24215] netlink: 'syz.3.5123': attribute type 1 has an invalid length. [ 575.582897][T24218] bond9: (slave bridge10): Enslaving as a backup interface with an up link [ 575.635942][T24215] macvlan2: entered promiscuous mode [ 575.643636][T24215] macvlan2: entered allmulticast mode [ 575.651434][T24215] bond9: entered promiscuous mode [ 575.657497][T24215] bridge10: entered promiscuous mode [ 575.666438][T24215] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 575.673072][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5125'. [ 575.684232][T24215] bond9: left promiscuous mode [ 575.690340][T24215] bridge10: left promiscuous mode [ 575.727547][T24222] ip6tnl5: entered allmulticast mode [ 575.873345][T24229] netlink: 'syz.1.5127': attribute type 21 has an invalid length. [ 575.929816][T24233] netlink: 'syz.1.5127': attribute type 1 has an invalid length. [ 575.972579][T24229] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 575.987505][T24237] delete_channel: no stack [ 575.995335][T24229] bond7 (unregistering): Released all slaves [ 576.026238][T24236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5129'. [ 576.763664][T24268] vlan0 (unregistering): left allmulticast mode [ 576.772457][T24268] veth0_vlan (unregistering): left allmulticast mode [ 576.780120][T24268] vlan0 (unregistering): left promiscuous mode [ 577.191119][T24276] Bluetooth: MGMT ver 1.23 [ 577.201477][T24276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5140'. [ 577.785033][T24281] veth13: entered allmulticast mode [ 578.374336][T24329] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.5155'. [ 578.425751][T24332] netlink: 'syz.0.5154': attribute type 33 has an invalid length. [ 578.445289][T24331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5153'. [ 578.610337][T24332] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 578.628380][T24332] bond7 (unregistering): Released all slaves [ 578.813888][T24350] delete_channel: no stack [ 579.152239][T24366] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5162'. [ 579.325666][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5165'. [ 579.633018][T24378] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 579.707979][T24388] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 579.809227][T24385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5168'. [ 580.827744][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5166'. [ 580.864004][T24437] openvswitch: netlink: Message has 592 unknown bytes. [ 580.881293][T24437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.155271][T24450] netlink: 211792 bytes leftover after parsing attributes in process `syz.5.5183'. [ 581.216310][T24453] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5184'. [ 581.329504][T24457] netlink: zone id is out of range [ 581.361773][T24457] netlink: zone id is out of range [ 581.377476][T24457] netlink: zone id is out of range [ 581.420970][T24457] netlink: zone id is out of range [ 581.474777][T24457] netlink: zone id is out of range [ 581.503281][T24457] netlink: zone id is out of range [ 581.506144][T24461] netlink: 'syz.5.5186': attribute type 1 has an invalid length. [ 581.535437][T24457] netlink: zone id is out of range [ 581.619933][ T29] audit: type=1107 audit(1776505259.085:5): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 581.685442][ T29] audit: type=1107 audit(1776505259.085:6): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 581.780818][ T29] audit: type=1107 audit(1776505259.105:7): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 581.849091][ T29] audit: type=1107 audit(1776505259.105:8): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 581.915488][ T29] audit: type=1107 audit(1776505259.105:9): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 582.009947][ T29] audit: type=1107 audit(1776505259.105:10): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 582.104687][ T29] audit: type=1107 audit(1776505259.165:11): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 582.203717][ T29] audit: type=1107 audit(1776505259.225:12): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 582.293309][T24491] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5193'. [ 582.582281][T24498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5197'. [ 582.662924][T24498] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 582.955372][T24525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5199'. [ 583.083519][T24518] lo speed is unknown, defaulting to 1000 [ 583.144114][T24514] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 583.266222][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5205'. [ 583.349753][T24540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5205'. [ 583.640669][T24550] netlink: 'syz.0.5209': attribute type 1 has an invalid length. [ 583.652807][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5208'. [ 583.808493][T24557] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5210'. [ 583.840221][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5210'. [ 583.890847][T24557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5210'. [ 584.362902][T24576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5217'. [ 584.858614][T24597] tipc: Enabling of bearer rejected, failed to enable media [ 584.973390][T24603] netlink: 'syz.3.5225': attribute type 21 has an invalid length. [ 585.007446][T24603] netlink: 'syz.3.5225': attribute type 5 has an invalid length. [ 585.022599][T24607] netlink: 'syz.4.5226': attribute type 1 has an invalid length. [ 586.350747][T24650] netlink: 'syz.5.5243': attribute type 22 has an invalid length. [ 586.381156][T24650] netlink: 'syz.5.5243': attribute type 22 has an invalid length. [ 587.534157][T24708] netlink: 'syz.4.5260': attribute type 10 has an invalid length. [ 587.864579][T24725] net_ratelimit: 140 callbacks suppressed [ 587.864598][T24725] openvswitch: netlink: Tunnel attr 117 out of range max 16 [ 587.977442][T24727] __nla_validate_parse: 22 callbacks suppressed [ 587.977462][T24727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5268'. [ 588.038001][T24713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.300470][T24740] "syz.4.5272" (24740) uses obsolete ecb(arc4) skcipher [ 588.479900][T24713] veth0_macvtap: left allmulticast mode [ 588.556673][T14630] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.611340][T14630] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 588.640177][T14630] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.670751][T14630] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 588.699105][ T1111] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.738817][ T1111] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 588.773449][ T1111] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.818251][ T1111] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 589.336035][T24772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5277'. [ 589.410571][T24772] xfrm1: entered promiscuous mode [ 589.428491][T24772] xfrm1: entered allmulticast mode [ 589.459048][T24780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5282'. [ 589.509470][T24772] h: entered promiscuous mode [ 589.836171][T24783] tipc: Enabling of bearer rejected, failed to enable media [ 590.140205][T24800] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5288'. [ 590.580955][T24817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5293'. [ 590.648415][T24821] netlink: 'syz.3.5294': attribute type 1 has an invalid length. [ 590.706185][T24821] nbd: error processing sock list [ 591.014290][T24826] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5296'. [ 591.852454][T24856] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5303'. [ 591.888637][T24859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5305'. [ 592.288864][T24867] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 592.315191][T24867] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 592.431588][T24871] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 592.457752][T24871] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 592.506276][T24882] netlink: 'syz.1.5312': attribute type 62 has an invalid length. [ 592.802512][T24893] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 592.925969][T24902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5318'. [ 592.993270][T24906] xt_bpf: check failed: parse error [ 593.303724][T24913] netlink: 'syz.4.5322': attribute type 1 has an invalid length. [ 593.533108][T24925] bond10: (slave geneve3): making interface the new active one [ 593.547567][T24925] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 593.791033][T24938] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 593.838162][T24938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5328'. [ 594.261147][ T1111] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 594.270457][ T1111] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 594.281751][ T1111] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 594.388380][ T1111] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 594.532664][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5332'. [ 594.599000][T24955] netlink: 'syz.0.5335': attribute type 1 has an invalid length. [ 594.634986][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5335'. [ 594.661873][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5335'. [ 595.322397][T24981] netlink: 'syz.0.5341': attribute type 21 has an invalid length. [ 595.362009][T24981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5341'. [ 595.532482][T24984] xt_TPROXY: Can be used only with -p tcp or -p udp [ 595.630392][T24993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5346'. [ 595.784046][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5347'. [ 595.818815][T24995] openvswitch: netlink: Flow actions attr not present in new flow. [ 595.840182][T24999] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20001 [ 596.114296][T25010] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5351'. [ 596.161402][T25010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.824957][T25035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5358'. [ 596.889329][T25037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5360'. [ 597.059422][T25046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.709146][T25069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.835425][T25074] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 597.858783][T25074] syzkaller1: Linktype set failed because interface is up [ 597.868711][ T5889] syzkaller1: tun_net_xmit 90 [ 597.924689][T25078] syzkaller0: left allmulticast mode [ 598.346232][T25093] netlink: 'syz.0.5374': attribute type 1 has an invalid length. [ 598.387673][T25094] netlink: 'syz.0.5374': attribute type 1 has an invalid length. [ 598.504619][T25106] x9: left allmulticast mode [ 598.528949][ C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.545525][T25106] x9: left promiscuous mode [ 598.551742][T25106] bridge0: port 1(1x9) entered disabled state [ 598.583164][T25106] bridge_slave_1: left allmulticast mode [ 598.593273][T25106] bridge_slave_1: left promiscuous mode [ 598.603531][T25106] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.620255][T25106] .`: (slave bond_slave_0): Releasing backup interface [ 598.633775][T25106] .`: (slave bond_slave_1): Releasing backup interface [ 598.673093][T25106] team0: Port device team_slave_0 removed [ 598.686394][T25106] team0: Port device 26 removed [ 598.693488][T25106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.705622][T25106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.719089][T25106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.726586][T25106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.738806][T25106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 598.843722][T25113] vlan0: entered promiscuous mode [ 598.882674][T25113] team0: Port device vlan0 added [ 598.916189][T14630] bridge_slave_1: left allmulticast mode [ 598.940011][T14630] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.966345][T14630] bridge_slave_0: left allmulticast mode [ 598.986060][T14630] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.062241][T25123] __nla_validate_parse: 3 callbacks suppressed [ 599.062259][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5382'. [ 599.084109][T25124] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5381'. [ 599.109982][T14630] pimreg3: left allmulticast mode [ 599.531109][T14630] bond5 (unregistering): (slave gretap1): Releasing active interface [ 599.576397][T14630] bond2 (unregistering): (slave geneve2): Releasing active interface [ 599.835510][T14630] bond1 (unregistering): Released all slaves [ 599.858720][T14630] bond2 (unregistering): Released all slaves [ 599.880603][T14630] bond0 (unregistering): Released all slaves [ 599.906388][T14630] bond3 (unregistering): (slave lo): Releasing backup interface [ 599.919521][T14630] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 599.934965][T14630] bond3 (unregistering): Released all slaves [ 599.955183][T14630] bond4 (unregistering): Released all slaves [ 599.975636][T14630] bond5 (unregistering): Released all slaves [ 599.994233][T14630] bond6 (unregistering): Released all slaves [ 600.535943][T25124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.551473][T25124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.954114][T14630] : left promiscuous mode [ 600.996993][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5384'. [ 601.017512][T25145] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5388'. [ 601.027827][ T3493] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.053793][ T3493] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.165499][T25149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5389'. [ 601.210497][ T3493] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.225434][ T3493] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.237842][T14630] tipc: Left network mode [ 601.242488][ T3493] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.252473][ T3493] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.282405][ T3493] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.292438][ T3493] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.365856][T25160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5393'. [ 601.392800][ T3493] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.422207][ T3493] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.463907][ T3493] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.485672][T25171] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5396'. [ 601.518948][ T3493] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.859497][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5402'. [ 602.118727][T25211] xt_hashlimit: overflow, try lower: 3/0 [ 602.121478][T25203] xt_hashlimit: overflow, try lower: 3/0 [ 602.218420][T25218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5408'. [ 602.228077][T25217] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.5410'. [ 602.635663][T14630] hsr_slave_1: left promiscuous mode [ 602.642673][T14630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.655173][T14630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.671916][T14630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.693852][T14630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.721527][T25245] netlink: 'syz.4.5421': attribute type 1 has an invalid length. [ 602.731446][T14630] veth1_macvtap: left promiscuous mode [ 602.744311][T14630] veth0_macvtap: left promiscuous mode [ 602.751894][T14630] veth1_vlan: left promiscuous mode [ 602.752184][T25243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.943760][T14630] pim6reg (unregistering): left allmulticast mode [ 603.091975][T14630] team0 (unregistering): Port device team_slave_1 removed [ 603.116915][T14630] team0 (unregistering): Port device team_slave_0 removed [ 603.222861][T25239] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 603.232360][T25239] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 603.280801][T25245] 8021q: adding VLAN 0 to HW filter on device bond11 [ 603.331245][T25253] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 603.349845][T25253] bond4 (unregistering): Released all slaves [ 603.695822][T25292] xt_ipcomp: unknown flags 1D [ 603.891402][T14630] IPVS: stop unused estimator thread 0... [ 604.008734][T25310] tipc: Started in network mode [ 604.023677][T25310] tipc: Node identity 4, cluster identity 4711 [ 604.031555][T25310] tipc: Node number set to 4 [ 604.153166][T25318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.182601][T25321] Cannot find set identified by id 4 to match [ 604.270778][T25329] netlink: 'syz.1.5444': attribute type 3 has an invalid length. [ 604.412306][T25338] __nla_validate_parse: 2 callbacks suppressed [ 604.412325][T25338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5445'. [ 604.451089][T25341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.564064][T25338] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5445'. [ 604.888677][T25360] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 604.899823][T25377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5455'. [ 604.932494][T25360] bond4 (unregistering): Released all slaves [ 605.009683][T25367] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 605.550906][T25436] netlink: 'syz.0.5471': attribute type 1 has an invalid length. [ 605.559684][T25436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5471'. [ 605.961810][T25451] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5476'. [ 606.403706][T25481] ip6gre1: entered allmulticast mode [ 606.591203][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5490'. [ 606.637103][ T5845] Bluetooth: hci0: command 0x080f tx timeout [ 606.726319][T25512] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5493'. [ 606.857040][T25518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5495'. [ 606.884251][T25518] vcan0 (unregistering): left allmulticast mode [ 606.955987][T25527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5497'. [ 607.023934][T25530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5498'. [ 607.054313][T25523] vlan4: entered allmulticast mode [ 607.059729][T25523] hsr0: entered allmulticast mode [ 607.064943][T25523] hsr_slave_0: entered allmulticast mode [ 607.079261][T25523] hsr_slave_1: entered allmulticast mode [ 607.211977][T25536] syzkaller0: entered promiscuous mode [ 607.230886][T25536] syzkaller0: entered allmulticast mode [ 607.925573][T14630] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 607.990780][T25587] C: renamed from lo [ 608.029143][T25587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 608.493613][T25608] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 608.506284][T25608] bond4 (unregistering): Released all slaves [ 608.651382][T25614] syzkaller0: entered allmulticast mode [ 608.788972][T25618] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 608.801783][T25618] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 608.810808][T25618] gretap1: entered promiscuous mode [ 608.816059][T25618] gretap1: entered allmulticast mode [ 609.854935][T14630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.880225][T14630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.345061][T25673] syzkaller1: entered promiscuous mode [ 610.361206][T25673] syzkaller1: entered allmulticast mode [ 610.496615][T25673] can: request_module (can-proto-0) failed. [ 611.025734][T25683] __nla_validate_parse: 8 callbacks suppressed [ 611.025752][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5544'. [ 611.190971][T25692] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5547'. [ 611.205475][T25692] 8021q: VLANs not supported on gre0 [ 611.352244][T25696] netlink: 'syz.5.5548': attribute type 4 has an invalid length. [ 611.383108][T25694] netlink: 'syz.5.5548': attribute type 4 has an invalid length. [ 611.536632][T25705] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5551'. [ 611.586588][T25712] netlink: 'syz.4.5554': attribute type 1 has an invalid length. [ 611.621723][T25718] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5553'. [ 611.632178][T25712] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 611.639165][T25718] netlink: 'syz.5.5553': attribute type 11 has an invalid length. [ 611.810334][T25731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5558'. [ 612.001469][T25741] netlink: 'syz.4.5561': attribute type 10 has an invalid length. [ 612.028090][T25741] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5561'. [ 612.062927][T25740] ipvlan2: entered promiscuous mode [ 612.122687][T25746] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5564'. [ 612.196485][T25746] syzkaller1: entered promiscuous mode [ 612.210672][T25746] syzkaller1: entered allmulticast mode [ 612.231042][T25750] bond0: entered promiscuous mode [ 612.236219][T25750] bond_slave_0: entered promiscuous mode [ 612.244636][T25750] bond_slave_1: entered promiscuous mode [ 612.278278][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5565'. [ 612.391523][T25759] tipc: Enabling of bearer rejected, failed to enable media [ 612.419447][T25760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5568'. [ 612.508129][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5572'. [ 612.637583][T25786] x_tables: duplicate underflow at hook 1 [ 612.815979][T25796] netlink: 'syz.1.5577': attribute type 16 has an invalid length. [ 612.834662][T25796] netlink: 'syz.1.5577': attribute type 17 has an invalid length. [ 612.928196][T25796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.943051][T25796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.167449][T22032] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 613.206717][T25820] openvswitch: netlink: IP tunnel dst address not specified [ 613.366555][T25821] netlink: 'syz.0.5585': attribute type 5 has an invalid length. [ 613.413910][T25816] nbd3: detected capacity change from 0 to 63 [ 613.431984][T21547] block nbd3: Receive control failed (result -104) [ 613.432431][ T5845] block nbd3: Receive control failed (result -32) [ 613.449646][T15354] block nbd3: Send control failed (result -32) [ 613.460262][T15354] block nbd3: Request send failed, requeueing [ 613.482347][ T5162] block nbd3: Dead connection, failed to find a fallback [ 613.492683][ T5162] block nbd3: shutting down sockets [ 613.498822][ T5162] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.510420][ T5162] Buffer I/O error on dev nbd3, logical block 2, async page read [ 613.533344][T15354] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.543977][T15354] Buffer I/O error on dev nbd3, logical block 3, async page read [ 613.661920][T25838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.668637][T25841] xt_hashlimit: size too large, truncated to 1048576 [ 614.097494][T25865] bond10: option resend_igmp: invalid value (32767) [ 614.109043][T25865] bond10: option resend_igmp: allowed values 0 - 255 [ 614.122493][T25865] bond10 (unregistering): Released all slaves [ 614.399374][T25888] x_tables: duplicate underflow at hook 1 [ 614.496672][T25888] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 614.602328][T25900] netlink: 'syz.4.5608': attribute type 4 has an invalid length. [ 615.448836][T25966] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 615.603597][T25980] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode [ 615.611845][T25980] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 615.802332][T25990] can: request_module (can-proto-3) failed. [ 618.728714][T25989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.923286][T26025] netlink: 'syz.5.5640': attribute type 1 has an invalid length. [ 618.947555][T26028] bridge0: port 1(gretap0) entered blocking state [ 618.957230][T26029] x_tables: duplicate underflow at hook 1 [ 618.979190][T26028] bridge0: port 1(gretap0) entered disabled state [ 618.985850][T26025] __nla_validate_parse: 13 callbacks suppressed [ 618.985864][T26025] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5640'. [ 619.005408][T26028] gretap0: entered allmulticast mode [ 619.021864][T26028] gretap0: entered promiscuous mode [ 619.153491][T26042] netlink: 'syz.5.5646': attribute type 2 has an invalid length. [ 619.170353][T26042] netlink: 'syz.5.5646': attribute type 2 has an invalid length. [ 619.217282][T26046] bridge13: entered promiscuous mode [ 619.241280][T26046] bridge13: entered allmulticast mode [ 619.396615][T26055] syzkaller0: entered promiscuous mode [ 619.402592][T26055] syzkaller0: entered allmulticast mode [ 619.413188][T26055] netlink: 'syz.4.5652': attribute type 17 has an invalid length. [ 619.422398][T26055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5652'. [ 619.431744][T26055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5652'. [ 619.449530][T26055] gretap0: entered promiscuous mode [ 619.461560][T26055] gretap0: left promiscuous mode [ 619.521539][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5656'. [ 619.531338][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5656'. [ 619.541963][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5656'. [ 619.551288][T26068] : renamed from team_slave_1 [ 619.661192][T26082] syzkaller0: entered promiscuous mode [ 619.676105][T26082] syzkaller0: entered allmulticast mode [ 619.909606][T26097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5663'. [ 620.071390][T26102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5665'. [ 620.164651][T26106] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5666'. [ 622.336161][T26058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.626354][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5671'. [ 622.659456][T26119] syzkaller1: entered promiscuous mode [ 622.678932][T26119] syzkaller1: entered allmulticast mode [ 622.882205][T26137] siw: device registration error -23 [ 623.172924][T26145] [ 623.175298][T26145] ====================================================== [ 623.176065][T26163] netlink: zone id is out of range [ 623.182312][T26145] WARNING: possible circular locking dependency detected [ 623.182336][T26145] syzkaller #0 Not tainted [ 623.182346][T26145] ------------------------------------------------------ [ 623.182354][T26145] syz.5.5678/26145 is trying to acquire lock: [ 623.182366][T26145] ffffffff8f0a3568 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 623.182427][T26145] [ 623.182427][T26145] but task is already holding lock: [ 623.182434][T26145] ffff888078b05360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 623.182496][T26145] [ 623.182496][T26145] which lock already depends on the new lock. [ 623.182496][T26145] [ 623.182504][T26145] [ 623.182504][T26145] the existing dependency chain (in reverse order) is: [ 623.182512][T26145] [ 623.182512][T26145] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 623.182542][T26145] lock_sock_nested+0x41/0x100 [ 623.182565][T26145] inet_shutdown+0x6a/0x390 [ 623.182582][T26145] nbd_mark_nsock_dead+0x2e9/0x560 [ 623.182605][T26145] recv_work+0x1c2e/0x1d40 [ 623.182624][T26145] process_scheduled_works+0xb5d/0x1860 [ 623.225080][T26163] netlink: zone id is out of range [ 623.229158][T26145] worker_thread+0xa53/0xfc0 [ 623.229192][T26145] kthread+0x388/0x470 [ 623.229208][T26145] ret_from_fork+0x514/0xb70 [ 623.229233][T26145] ret_from_fork_asm+0x1a/0x30 [ 623.229258][T26145] [ 623.229258][T26145] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 623.229290][T26145] __mutex_lock+0x1a3/0x1550 [ 623.229315][T26145] nbd_queue_rq+0x37b/0x1100 [ 623.229335][T26145] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 623.229355][T26145] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 623.229377][T26145] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 623.229399][T26145] blk_mq_run_hw_queue+0x348/0x4f0 [ 623.229427][T26145] blk_mq_dispatch_list+0xd16/0xe10 [ 623.229454][T26145] blk_mq_flush_plug_list+0x48d/0x570 [ 623.229473][T26145] __blk_flush_plug+0x3ed/0x4d0 [ 623.229493][T26145] __submit_bio+0x28d/0x580 [ 623.229513][T26145] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 623.229532][T26145] block_read_full_folio+0x599/0x830 [ 623.229554][T26145] filemap_read_folio+0x137/0x3b0 [ 623.229572][T26145] do_read_cache_folio+0x358/0x590 [ 623.229591][T26145] read_part_sector+0xb6/0x2b0 [ 623.229609][T26145] adfspart_check_ICS+0xb1/0x960 [ 623.229628][T26145] bdev_disk_changed+0x817/0x1770 [ 623.229647][T26145] blkdev_get_whole+0x380/0x510 [ 623.229666][T26145] bdev_open+0x31e/0xd30 [ 623.229682][T26145] blkdev_open+0x470/0x610 [ 623.229701][T26145] do_dentry_open+0x785/0x14e0 [ 623.229722][T26145] vfs_open+0x3b/0x340 [ 623.229742][T26145] path_openat+0x2e08/0x3860 [ 623.229770][T26145] do_file_open+0x23e/0x4a0 [ 623.229796][T26145] do_sys_openat2+0x113/0x200 [ 623.229816][T26145] __x64_sys_openat+0x138/0x170 [ 623.229836][T26145] do_syscall_64+0x15f/0xf80 [ 623.229856][T26145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.229872][T26145] [ 623.229872][T26145] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 623.273505][T26163] netlink: zone id is out of range [ 623.276519][T26145] __mutex_lock+0x1a3/0x1550 [ 623.276551][T26145] nbd_queue_rq+0xc6/0x1100 [ 623.501738][T26145] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 623.507803][T26145] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 623.514647][T26145] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 623.521139][T26145] blk_mq_run_hw_queue+0x348/0x4f0 [ 623.526775][T26145] blk_mq_dispatch_list+0xd16/0xe10 [ 623.532492][T26145] blk_mq_flush_plug_list+0x48d/0x570 [ 623.538373][T26145] __blk_flush_plug+0x3ed/0x4d0 [ 623.543739][T26145] __submit_bio+0x28d/0x580 [ 623.548747][T26145] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 623.554883][T26145] block_read_full_folio+0x599/0x830 [ 623.560674][T26145] filemap_read_folio+0x137/0x3b0 [ 623.566242][T26145] do_read_cache_folio+0x358/0x590 [ 623.571859][T26145] read_part_sector+0xb6/0x2b0 [ 623.577130][T26145] adfspart_check_ICS+0xb1/0x960 [ 623.582574][T26145] bdev_disk_changed+0x817/0x1770 [ 623.588101][T26145] blkdev_get_whole+0x380/0x510 [ 623.593470][T26145] bdev_open+0x31e/0xd30 [ 623.598269][T26145] blkdev_open+0x470/0x610 [ 623.603196][T26145] do_dentry_open+0x785/0x14e0 [ 623.608469][T26145] vfs_open+0x3b/0x340 [ 623.613044][T26145] path_openat+0x2e08/0x3860 [ 623.618146][T26145] do_file_open+0x23e/0x4a0 [ 623.623161][T26145] do_sys_openat2+0x113/0x200 [ 623.628346][T26145] __x64_sys_openat+0x138/0x170 [ 623.633703][T26145] do_syscall_64+0x15f/0xf80 [ 623.638808][T26145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.645204][T26145] [ 623.645204][T26145] -> #5 (set->srcu){.+.+}-{0:0}: [ 623.652323][T26145] __synchronize_srcu+0xca/0x300 [ 623.657770][T26145] elevator_switch+0x1e8/0x7a0 [ 623.663039][T26145] elevator_change+0x2cc/0x450 [ 623.668307][T26145] elevator_set_default+0x36c/0x430 [ 623.674010][T26145] blk_register_queue+0x3e9/0x4e0 [ 623.679537][T26145] __add_disk+0x677/0xd50 [ 623.684375][T26145] add_disk_fwnode+0xfb/0x480 [ 623.689560][T26145] nbd_dev_add+0x72c/0xb50 [ 623.694482][T26145] nbd_init+0x168/0x1f0 [ 623.699153][T26145] do_one_initcall+0x250/0x870 [ 623.704431][T26145] do_initcall_level+0x104/0x190 [ 623.709880][T26145] do_initcalls+0x59/0xa0 [ 623.714719][T26145] kernel_init_freeable+0x2a6/0x3e0 [ 623.720428][T26145] kernel_init+0x1d/0x1d0 [ 623.725272][T26145] ret_from_fork+0x514/0xb70 [ 623.730374][T26145] ret_from_fork_asm+0x1a/0x30 [ 623.735652][T26145] [ 623.735652][T26145] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 623.743486][T26145] __mutex_lock+0x1a3/0x1550 [ 623.748613][T26145] elevator_change+0x1b3/0x450 [ 623.753881][T26145] elevator_set_none+0xb5/0x140 [ 623.759235][T26145] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 623.765553][T26145] nbd_start_device+0x17f/0xb10 [ 623.770910][T26145] nbd_genl_connect+0x165b/0x1cf0 [ 623.776440][T26145] genl_family_rcv_msg_doit+0x22a/0x330 [ 623.782492][T26145] genl_rcv_msg+0x61c/0x7a0 [ 623.787502][T26145] netlink_rcv_skb+0x232/0x4b0 [ 623.792781][T26145] genl_rcv+0x28/0x40 [ 623.797268][T26145] netlink_unicast+0x75c/0x8e0 [ 623.802548][T26145] netlink_sendmsg+0x813/0xb40 [ 623.807820][T26145] ____sys_sendmsg+0x972/0x9f0 [ 623.813123][T26145] ___sys_sendmsg+0x2a5/0x360 [ 623.818311][T26145] __x64_sys_sendmsg+0x1bd/0x2a0 [ 623.823762][T26145] do_syscall_64+0x15f/0xf80 [ 623.828862][T26145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.835259][T26145] [ 623.835259][T26145] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 623.843851][T26145] blk_alloc_queue+0x546/0x680 [ 623.849132][T26145] __blk_mq_alloc_disk+0x197/0x390 [ 623.854749][T26145] nbd_dev_add+0x499/0xb50 [ 623.859670][T26145] nbd_init+0x168/0x1f0 [ 623.864339][T26145] do_one_initcall+0x250/0x870 [ 623.869618][T26145] do_initcall_level+0x104/0x190 [ 623.875064][T26145] do_initcalls+0x59/0xa0 [ 623.879899][T26145] kernel_init_freeable+0x2a6/0x3e0 [ 623.885609][T26145] kernel_init+0x1d/0x1d0 [ 623.890452][T26145] ret_from_fork+0x514/0xb70 [ 623.895558][T26145] ret_from_fork_asm+0x1a/0x30 [ 623.900858][T26145] [ 623.900858][T26145] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 623.908063][T26145] fs_reclaim_acquire+0x71/0x100 [ 623.913504][T26145] __kmalloc_cache_noprof+0x40/0x660 [ 623.919300][T26145] cryptomgr_notify+0x85/0x930 [ 623.924576][T26145] notifier_call_chain+0x1ad/0x3d0 [ 623.930195][T26145] blocking_notifier_call_chain+0x6a/0x90 [ 623.936420][T26145] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 623.942211][T26145] crypto_alloc_tfm_node+0x13e/0x3f0 [ 623.948001][T26145] crypto_alloc_sync_skcipher+0x39/0xd0 [ 623.954058][T26145] rxkad_init+0x20/0xe0 [ 623.958726][T26145] rxrpc_init_security+0x72/0x120 [ 623.964259][T26145] af_rxrpc_init+0x13d/0x2e0 [ 623.969360][T26145] do_one_initcall+0x250/0x870 [ 623.974638][T26145] do_initcall_level+0x104/0x190 [ 623.980083][T26145] do_initcalls+0x59/0xa0 [ 623.984924][T26145] kernel_init_freeable+0x2a6/0x3e0 [ 623.990629][T26145] kernel_init+0x1d/0x1d0 [ 623.995478][T26145] ret_from_fork+0x514/0xb70 [ 624.000579][T26145] ret_from_fork_asm+0x1a/0x30 [ 624.005859][T26145] [ 624.005859][T26145] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 624.013926][T26145] down_read+0x47/0x2e0 [ 624.018594][T26145] blocking_notifier_call_chain+0x54/0x90 [ 624.024819][T26145] __crypto_register_alg+0x32b/0x3c0 [ 624.030617][T26145] crypto_register_alg+0x447/0x810 [ 624.036237][T26145] do_one_initcall+0x250/0x870 [ 624.041514][T26145] do_initcall_level+0x104/0x190 [ 624.046963][T26145] do_initcalls+0x59/0xa0 [ 624.051813][T26145] kernel_init_freeable+0x2a6/0x3e0 [ 624.057522][T26145] kernel_init+0x1d/0x1d0 [ 624.062371][T26145] ret_from_fork+0x514/0xb70 [ 624.067472][T26145] ret_from_fork_asm+0x1a/0x30 [ 624.072748][T26145] [ 624.072748][T26145] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 624.080290][T26145] __lock_acquire+0x15a5/0x2cf0 [ 624.085652][T26145] lock_acquire+0x106/0x350 [ 624.090664][T26145] down_write+0x96/0x200 [ 624.095415][T26145] crypto_alg_mod_lookup+0x211/0x5f0 [ 624.101209][T26145] crypto_alloc_tfm_node+0x13e/0x3f0 [ 624.107002][T26145] tls_set_sw_offload+0xa33/0x1780 [ 624.112629][T26145] tls_setsockopt+0xf3e/0x15c0 [ 624.117899][T26145] do_sock_setsockopt+0x17c/0x1b0 [ 624.123445][T26145] __x64_sys_setsockopt+0x13d/0x1b0 [ 624.129158][T26145] do_syscall_64+0x15f/0xf80 [ 624.134258][T26145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.140704][T26145] [ 624.140704][T26145] other info that might help us debug this: [ 624.140704][T26145] [ 624.150914][T26145] Chain exists of: [ 624.150914][T26145] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 624.150914][T26145] [ 624.163936][T26145] Possible unsafe locking scenario: [ 624.163936][T26145] [ 624.171365][T26145] CPU0 CPU1 [ 624.176720][T26145] ---- ---- [ 624.182069][T26145] lock(sk_lock-AF_INET6); [ 624.186591][T26145] lock(&nsock->tx_lock); [ 624.193517][T26145] lock(sk_lock-AF_INET6); [ 624.200526][T26145] lock(crypto_alg_sem); [ 624.204847][T26145] [ 624.204847][T26145] *** DEADLOCK *** [ 624.204847][T26145] [ 624.212988][T26145] 1 lock held by syz.5.5678/26145: [ 624.218084][T26145] #0: ffff888078b05360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 624.227825][T26145] [ 624.227825][T26145] stack backtrace: [ 624.233696][T26145] CPU: 0 UID: 0 PID: 26145 Comm: syz.5.5678 Not tainted syzkaller #0 PREEMPT(full) [ 624.233715][T26145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 624.233725][T26145] Call Trace: [ 624.233733][T26145] [ 624.233741][T26145] dump_stack_lvl+0xe8/0x150 [ 624.233764][T26145] print_circular_bug+0x2e1/0x300 [ 624.233790][T26145] check_noncircular+0x12e/0x150 [ 624.233815][T26145] __lock_acquire+0x15a5/0x2cf0 [ 624.233844][T26145] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 624.233861][T26145] lock_acquire+0x106/0x350 [ 624.233879][T26145] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 624.233902][T26145] down_write+0x96/0x200 [ 624.233922][T26145] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 624.233939][T26145] ? __pfx_down_write+0x10/0x10 [ 624.233960][T26145] ? crypto_larval_alloc+0x1bf/0x290 [ 624.233978][T26145] crypto_alg_mod_lookup+0x211/0x5f0 [ 624.233997][T26145] crypto_alloc_tfm_node+0x13e/0x3f0 [ 624.234018][T26145] tls_set_sw_offload+0xa33/0x1780 [ 624.234041][T26145] tls_setsockopt+0xf3e/0x15c0 [ 624.234064][T26145] ? __pfx_tls_setsockopt+0x10/0x10 [ 624.234087][T26145] ? __fget_files+0x2a/0x420 [ 624.234105][T26145] ? aa_sock_opt_perm+0xff/0x1a0 [ 624.234126][T26145] ? sock_common_setsockopt+0x36/0xc0 [ 624.234144][T26145] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 624.234163][T26145] do_sock_setsockopt+0x17c/0x1b0 [ 624.234186][T26145] __x64_sys_setsockopt+0x13d/0x1b0 [ 624.234209][T26145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.234225][T26145] do_syscall_64+0x15f/0xf80 [ 624.234242][T26145] ? trace_irq_disable+0x3b/0x140 [ 624.234259][T26145] ? clear_bhb_loop+0x40/0x90 [ 624.234275][T26145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.234291][T26145] RIP: 0033:0x7f26da59c819 [ 624.234305][T26145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.234319][T26145] RSP: 002b:00007f26db443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 624.234334][T26145] RAX: ffffffffffffffda RBX: 00007f26da815fa0 RCX: 00007f26da59c819 [ 624.234346][T26145] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000004 [ 624.234355][T26145] RBP: 00007f26da632c91 R08: 0000000000000028 R09: 0000000000000000 [ 624.234365][T26145] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 624.234375][T26145] R13: 00007f26da816038 R14: 00007f26da815fa0 R15: 00007ffc5efc69d8 [ 624.234393][T26145] [ 624.476088][T26163] netlink: zone id is out of range [ 624.485786][T26163] netlink: zone id is out of range [ 624.494759][T26163] netlink: zone id is out of range [ 624.500942][T26163] netlink: zone id is out of range [ 624.506247][T26163] netlink: set zone limit has 4 unknown bytes [ 626.108438][T26155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.436823][T21547] Bluetooth: hci2: command 0x0406 tx timeout