last executing test programs: 3.208421911s ago: executing program 0 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(r3, 0x0) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) 2.515584275s ago: executing program 3 (id=2145): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x10, 0x2}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000002c0)=0x490) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010000000000000000000000ff00"/30], 0x0, 0x26, 0x0, 0x1}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000080)={'pimreg1\x00', @local}) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE]}, {0x58}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0x70}}, 0x20040000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6", 0x2d}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841", 0x3a}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$phonet(0x23, 0x2, 0x1) 2.34824775s ago: executing program 3 (id=2148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c) syz_emit_ethernet(0xf7, &(0x7f0000001fc0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4a3ff2", 0xc1, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}, {"d77010bccc638e41d335ff361ce886173572c1c6089e36cd551c13256174146b9ec3297ed6f7e4e855a2a473476a1f8f7842a7b9d5baa28f23d342e9d4c3ca479f46646411f3ae97c5c20a618be50ed5efa2acc9ffa20881cdb562d8d2afc05cc12d32916de708b279c53a377fb7e598643430e476a62642336ec479540ecc7239330f6ca802f72bd956c845bff0ad0116e6c290ba25c4833c826f5d1b2f16151638e676e08ef63a200e503f04"}}}}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) 2.160029034s ago: executing program 3 (id=2152): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x2, 0xfffe, 0x80000004, 0xbb, 0x8}}}}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x2, 0xfffe, 0x80000004, 0xbb, 0x8}}}}}, 0x0) (async) 1.965660344s ago: executing program 3 (id=2155): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x800, 0x0, 0x0, {0x2, 0x0, 0x94, 0x1, 0xff, 0x0, 0x0, 0x7, 0x3000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x34}}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x28, r9, 0xb15, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}}, 0x4) sendfile(r4, r8, 0x0, 0xffffffff004) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, [@generic={0x7, 0xa, 0x7, 0x1000, 0x258b}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r2, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0xed69212190cefdd1, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x10, 0x5, 0x5f}, {@multicast1, 0x4e24, 0x3, 0x5, 0xfffffffc, 0x5}}, 0x44) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 1.851863843s ago: executing program 4 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_newvlan={0x58, 0x70, 0x2, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048001}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x44}}, 0x800) 1.792044713s ago: executing program 0 (id=2158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xb90, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x59629}}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(0x4) getsockname(r9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20048090) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x1e, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) 1.71858676s ago: executing program 1 (id=2159): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xffff, 0x8}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001ad4b8d8af2d8a2e0672c88f74e80b76689559d5819ae0776df0eeff4ee0a2e31cbf67d848639d5aca1b1403ebaa82cf73a884680592e660b531c56eeb33ea059c77bebdb4d357e4f5a82ab46efc10411fb3ad54aa9675fc6cc3f3000a7a507bb57e758f4e72462a0e90f9daf7d23e13a2a24b7a8bd699520e93a2c27524", @ANYRES32=r3, @ANYBLOB="994900"/20, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05000000020000000500"/28], 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050aff010000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020800030900010073797a30000000000900030073797a320000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000090bfc43700000a20000000120a03000000000000000000050000080c0004800600014000f51200140000001100010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x36c729324289b989) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x1, 0x20000044) (async) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00004a", @ANYRES16=0x0, @ANYBLOB="01000000000000000000040000000800020005"], 0x1c}}, 0x0) (async) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x22}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc805}, 0x8800) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20044080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1.709318316s ago: executing program 2 (id=2160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 1.569390817s ago: executing program 4 (id=2161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r2, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffeba, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f600000000c0a03000000000000000000010000000900020073797a31000000003400038030000080080003400000000224000b80200001800a00010071756f7461000000100002800c00014084000000000000000900010073797a3000000000140000001000070000000000000000000000000a"], 0xe4}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000001240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000000408000440000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x90}, 0x1, 0x0, 0x0, 0x8080}, 0x10000000) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c0016"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.314203181s ago: executing program 1 (id=2162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r5, 0x401, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x14008080) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="ecef0000", @ANYRES16=r6, @ANYBLOB="01000000000000000000050000000800030000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000003800)=[{&(0x7f0000000380)="adde610ca770c4f1293b3b9ef08fad1cb6283c0a5ed8121f76091d7e070ed22c745bd6314788bbb73097bb940fc5bb10505355cdff80a616ec0007cce542657f8bfcb06af024b707a8ec7172160d5c099b900af3863750583009fe4cfdfef540511c6f47981817da999d520b0a659d6c0b796e78644961c9eb"}, {&(0x7f0000000440)="7d9b0426dd4923e790c169943468940cade74c9698"}, {&(0x7f0000001400)="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"}, {&(0x7f0000002400)="6c2ab3a188e7ade5c93f4c7c114e888e6c8232801006f85e6c5e91cd780845eb67407dbe545c695b5d64420e5065e9cc60179b74edd9bf11dbe790f0ee23dff32c4cd460462d8437412297a09ae3d6fc7e30a1f5f653005d1c5da07f58a5eeaee768"}, {&(0x7f0000002480)="73dc7c668acf14341e93163ab1f347d43fcb0d7757bc4a3a4fb2dff38e10293c93811ba857048346e55954c130e6d6f9fe6a440b8924d7514d2c4bb370f70386e432a21b3d69e54395300a5fe46852e34e0039ceaf4591b6df16340098341bed56d56f7926d90384becf66ba833582e883691144dc1b558d6786d8bf7d8cc1a09ae8532a1de29a26984a0edd2a7936e490919a10"}, {&(0x7f0000002540)="0d88a63655786f54d3220ceea94845aa137cb74cc7a32c0411ce4339ec1950a2d0be6c1488123bc4582e6893fb9b37f51b5cf632e083b3bf0e86f020bc176dc0ec8355745153d23383ef99586d987198bdec1e07b577879891136a3072a7b24c8d5976c6a12522640b00161a89a5a4ff74f01d3deff46851e5b2613bf2b7be15fba222ba2f526d8e3c33288acb922a4f290440bbf9ec2e180f75c5a5d0c46556adcd809f83400154665246af204d69956d1107c18d6645fb926eadb8a86510da3401e08792bc977c2c850d91e648267309585f42438e45bbf5d9"}, {&(0x7f0000002640)="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"}, {&(0x7f0000003640)="0ce80520be9a6abfe52e6b2be9439b7502893aad017780e987b96c738d2acde2e88082c3c000e68eb4539adad0a60ff3ed1f3b1349e3958710b526b1098d679516497eec105876f97e7958203f10370ecf35e507686f04249b6c4cc80cfaf69ac7cb48e460e6fda99980ea9343a82dcc4933d45bc4c0f528cde642277da5944cc7862d6be24247621cc6ca19433659d98e5d97f8f73e0e213b3eff7b07528ad61c9f82708322e9744e2149e79ce19dd2a6ea0dfa38606e474fc82e078cce35a51c298ec94b4bef9a26822727ef4de63f"}, {&(0x7f0000003740)="19b806a76b0e8c4a2eaeae65094b7a6cf00dca3eb52ade805b2ab1f03e4e43f352049a531cf212acdc1beec0b4fbdf37cdc00c035a724bbf50af5ce2d83317145a8889e4f283da02b2aa27d8a96d80fef1ea25670af6fc2179f2f471607e971f257ff37d0671632e9991aecf9bd16fea743464a783af1fbddd677115cc30003d1d07546ef7b2b0d689bbab121e4a95c505e888a50822615e42f4b1f312161e5abc679000fcaa9bcd965291fa5042c28250a311d152c55e59a9ac718a15073b"}], 0x1, 0x0, 0x0, 0x20008001}, 0x4000041) close(r8) close(r7) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendto$inet6(r1, &(0x7f00000002c0)="542426eeb23504e90ec4df8604b130259996843ce60b813821fa3228b0c1812721449e0ad6194a776f8ebe200df07ff4c9154692a08ef91a7ae38fafa97c769da8cb542245266a5ec3b01c5f82fb878bf24bd8d6e8d25a5c2973f1faad4c38df6c8924d05a6fb7869fa86c88b8898a3bcd6fc66eb627df0540caeb9b109b98355a29b63174d97e18f4b3cab8", 0x8c, 0x10, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x49) socket$packet(0x11, 0x3, 0x300) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) ppoll(&(0x7f0000000180)=[{r11}], 0x1, &(0x7f0000001340), 0x0, 0x0) 1.275636608s ago: executing program 4 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000003ac0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xfffffffd, 'ip6_vti0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 1.204905998s ago: executing program 0 (id=2164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x70, r3, 0x321, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x3}}}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="71d038c0"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r2], 0x44}}, 0x40848c0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0xc004) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xfffd, 0x3fc, 0x0, 0xd2}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x2f0, 0x16000065, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) 1.202072s ago: executing program 2 (id=2165): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x602, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)="93d90400000300b5b5", 0x9}], 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, &(0x7f0000000480)) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0xbbb0, 0x7, 0x528, 0xff, 0x8000]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r1, &(0x7f0000002480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002440)={&(0x7f0000001300)={0x1138, 0x27, 0x2, 0x70bd25, 0x25dfdbff, {0x15}, [@typed={0x8, 0x149, 0x0, 0x0, @fd=r0}, @nested={0x1028, 0x73, 0x0, 0x1, [@nested={0x4, 0x35}, @typed={0x8, 0x93, 0x0, 0x0, @pid=r6}, @typed={0x1004, 0x14a, 0x0, 0x0, @binary="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"}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@remote}]}, @generic="fcfdd8ad6dbf8cfe76de014f1fb8517b36310e139b41a2c5dae062824c70ebeaa2ab5b0900bfc67350eecc2d40ce3ecdfc98d872d6d0634b1ab1ee1b60564730a77376c96eabe51c9deb3cf081160cd84280ef326a26969005d332b21a4fd3fffac26be5d4b48cc2ef3afb7888ed80bf06e517cca80cbe4fb69de5029a3ed2361d28a7edf80cc836a9d448de1556af9cb47bd35e2a1f78c7f0331f5589eb107f4904e1d4cea7b6da7c8fae7a8d6e014c09078ffa9c10cbc3cf121b1b415b30bb2e3516b02f69374396b5ce87710719a01b65293349e26aadb391a25d882a7a56c65c2f68f4fdcd1bfa32dc58d9fc331d8146c1"]}, 0x1138}, 0x1, 0x0, 0x0, 0x40}, 0xc801) r7 = socket$inet(0x2, 0x3, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r8, &(0x7f00000012c0), 0x0}, 0x20) sendmmsg$inet(r7, &(0x7f0000000740)=[{{&(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x6}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB="1e4964927c3804eadcdf250000000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) ioctl$XFS_IOC_EXCHANGE_RANGE(r8, 0x40285881, &(0x7f0000000240)={r9, 0x0, 0xb79, 0xfffffffffffffffb, 0x10001, 0xf}) 1.112584995s ago: executing program 4 (id=2166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x5f, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3f6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@can_newroute={0x70, 0x18, 0x800, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x1, 0x0, 0xfffffffffffffffc, 0x3}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "9b2263fcfc394e98"}, 0x4}}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x0, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "94371b0868fa78de"}, 0x4}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1}, {0x3}}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) recvfrom$inet(r2, &(0x7f00000000c0)=""/18, 0x12, 0x2100, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x24, r6, 0x8d61ddcfedb48df, 0x70bd25, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', r8, 0x0, 0x1, 0x0, 0x8, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7f00, 0x10, 0x401, 0x3}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x442b3, 0x602a}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000005c0)=0x9a2) 1.065403391s ago: executing program 3 (id=2167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x38) (rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xb03, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYBLOB], 0xb0}}, 0x44004) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1fff01e3bb9ad809d5e1cace81ed0b66bce0b42a9e1b518077c20708215c2c4b4ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300000000000000", 0xd8}], 0x1}, 0x48002) (async, rerun: 32) r8 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) (async) sendmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000080000002000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001000000040000e0150104"], 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4b41f331}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) (rerun: 32) 1.009703086s ago: executing program 2 (id=2168): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) splice(r0, &(0x7f0000000000)=0x80, r0, &(0x7f0000000040)=0x8, 0x7, 0x1) 1.008053422s ago: executing program 1 (id=2169): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x484400, &(0x7f0000000080)={@_ha_fsid={[0x7fff, 0x5]}, {0x5, 0x401, 0x1, 0xff}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @private=0xa010102}], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x40, 0xb7, "a7a116ca8807c77cdaaebaaa7a4116bdc8b41da953d63f3ef69ff2793a634413a2adfedd2f356bfdd9e5e7247ccb9bd84c178815a0bf74b407fdf7218084a2403bf3058d4b89fc290a6ff37611838851e79253d2c178cfff989d8fa42d4ca389bf6a1341148d3b4bc45f0fe45994e2da9e9aeeeada1896f6c117804ee50f9bbd92fc7206788d8f1470c8a271c15af64193f316ae5f4c2f5b7e51d6370f9d4cd635ff18a124e7ea81efc2a60c01339ee7a1a8e30d0ebd72"}, 0xbf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}]}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1000000}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x30, 0x48, 0x2, 0x6, 0x48, 0x2, 0x9, 0x16, 0x9, 0x26, 0x24, 0x18, 0x9, 0x2, 0xc, 0x469aadf0e99f9adb, 0x5, 0x36, 0x6c, 0x24, 0x36]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4}, {0x2, 0x5}, {0x2, 0x6}, {0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x4, 0x0, 0x0, 0x7, 0x9, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x18, 0xcd, 0x7, 0x70, 0xff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x401, 0x6, 0xa, 0x7, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0xc, 0xeba5, 0x81, 0x3, 0x9, 0x1, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x3, 0x1ff, 0x70, 0x3ff, 0x8, 0x6]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x1a}, {0x1, 0x5}, {0x2, 0x9}, {0x5, 0x4}, {0x3, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {}, {0x7, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x4}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x2}, {0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0xc697, 0xf, 0x9, 0x0, 0x401, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8bbb, 0x4800, 0x9, 0x4, 0xb, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x0, 0x60, 0x2, 0x3, 0x24, 0x48, 0x16, 0x5, 0x2, 0x3, 0x4, 0x6c, 0x48, 0x1b, 0x6c, 0x48, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x32, 0xd, 0x100, 0x5, 0x5, 0x1, 0x400, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x6c, 0x4, 0x12, 0x2, 0x1b, 0x30, 0x1b, 0x38, 0xb, 0x6, 0x30, 0x48, 0x2, 0x6, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7d86, 0x1, 0x1, 0x3, 0x1e54, 0x81, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x7}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x1}, {0x2, 0x9}, {0x2, 0x8}, {0x7, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x4, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1ff, 0x4, 0x33c1, 0x2, 0x3ff, 0x61e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8004) connect$l2tp(r1, &(0x7f0000000800)={0x2, 0x0, @multicast2, 0x4}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000840)={[{0x0, 'io'}, {0x2d, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'perf_event'}, {0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2d, 'memory'}]}, 0x3d) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r4, 0x7c48260ff471e825, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xed63, 0x75}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x667c072ffd6852df) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x2, 0x7f, {{0x3b, 0x4, 0x3, 0x8, 0xec, 0x64, 0x0, 0x4c, 0x0, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x10, 0x22, 0x0, 0x9, [0x1, 0x8, 0xa5da]}, @ssrr={0x89, 0x17, 0x26, [@dev={0xac, 0x14, 0x14, 0x44}, @local, @loopback, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x3c, 0xdd, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x27}, {@loopback, 0xffffffff}, {@private=0xa010101, 0xfffffff9}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@broadcast, 0x8000}, {@loopback, 0x3}]}, @timestamp={0x44, 0xc, 0xa1, 0x0, 0xa, [0x1, 0x10000000]}, @lsrr={0x83, 0x17, 0x38, [@empty, @broadcast, @private=0xa010102, @multicast2, @local]}, @cipso={0x86, 0x47, 0x2, [{0x0, 0x8, "2333dab4e322"}, {0x6, 0xa, "1f9c55e8b3957c01"}, {0x1, 0x12, "baad8c8b9ce5d8fd75e23e853e671849"}, {0x7, 0x5, "08064b"}, {0x2, 0xa, "acecdbbadf635a78"}, {0x5, 0xe, "75c7a665979029592dc6c7c7"}]}, @noop, @noop, @generic={0x86, 0x7, "e4d04e7f78"}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000b40)={@private, @multicast2, 0x0}, &(0x7f0000000b80)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000c40)={'ip_vti0\x00', &(0x7f0000000bc0)={'sit0\x00', 0x0, 0x7, 0x8, 0x8, 0x4, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x66, 0x0, 0xc, 0x2f, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x2c, 0x28, 0x0, 0x9, [0x9, 0x1, 0x7f, 0x7c6, 0x6, 0x7, 0x1, 0x0, 0x8, 0x400]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d00)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000d40)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x7, 0xcb, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x1, 0x6, 0x0, 0x5}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e40)={0x0, @empty, @private}, &(0x7f0000000e80)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001000)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xa000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xdc, 0x0, 0x600, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001040)={0x0, 0xfe, "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"}, &(0x7f0000001180)=0x106) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000011c0)={0x0, 0x3c}, &(0x7f0000001200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001240)={r15, 0x9, 0xd, 0xcb, 0x100, 0x1, 0x8, 0x200, {r16, @in6={{0xa, 0x4e22, 0x0, @private2, 0x3}}, 0x7, 0x0, 0x10, 0xc98, 0x1}}, &(0x7f0000001300)=0xb0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001340)={r15, 0xfff}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008805}, 0x48810) 946.333216ms ago: executing program 0 (id=2170): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10) sendto$inet(r0, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001d80)={0x0, 0x8001}, &(0x7f0000001dc0)=0x8) (async) listen(r0, 0xda8c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) 909.732342ms ago: executing program 1 (id=2171): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) write(r0, &(0x7f0000000100)="2f183b4351", 0x5) 857.69328ms ago: executing program 2 (id=2172): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000000000000050000000000000000000000ffffffff070000000000000008000000000000000400000000000000040000000000000000000000000000000000000000c176f6cc45715e7d00000000000000000000006f0000000000000001000080000000000300000000000000000000000000000000000000000000000801000000000000000000000000000000100000000000000100000001000000030000000000000000000000000000000000000000a7ed66f53200000000000000000000000000000100000000000000e3060000000000000400000000000000000000000000000000000000000000008800000000000000000000000000000001000000000000000400000000000000abba00000000000000000000000000000000000000000000011000000000000000000000000000001000000000000000080000000000000007100000000000000000000000000000000000000000000003150000000000000000000000000000de5d08b40b378f46f8a1134d36c5be8d0461de16324668ce9676b99e83209c8c56ac1c1acb71957f82874e92817d6aeea583dba143f013881b01274d1d7f0e3750fc38d8908e849d9d3863a4901d41e59c2a94fc84765c21117c31e5e62994e4fb413537440e3fb97ddec6208ed79833bac8f9d7981d427c0c92364eb8b5cc14ce13e4bbc04481f9196e094882c7806a17dbc2f19394d9c578c4dcf8d09868a308e707c82dae3347dcdf4d26f9ef52a09ddd9e1eb49ee2a1550292d693d862c531a8450bf0e1c7d4bd89c5bdfc84c902db64af72bd2944654726d601d431045064c0bc38e4c3d90ee42c69c0b07bb9d4"]) socket$kcm(0xa, 0x5, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000004000000040000000000000e118c0000", @ANYRES32=r4, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050000000200000003000000010000ff0100000058887be99948a91ea3fe6f34ab6d8ccd631909e551d997873ff18bf74cc3e70932d81015af", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) connect$unix(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000440), &(0x7f0000000140)=r3}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) (async) socket$kcm(0xa, 0x5, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(r3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000004000000040000000000000e118c0000", @ANYRES32=r4, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050000000200000003000000010000ff0100000058887be99948a91ea3fe6f34ab6d8ccd631909e551d997873ff18bf74cc3e70932d81015af", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) connect$unix(r3, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000440), &(0x7f0000000140)=r3}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) (async) 786.716374ms ago: executing program 0 (id=2173): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x400}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 757.90377ms ago: executing program 1 (id=2174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000200081dc0000000000000000020000d4ae00"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf252e00000005002b00000000000a0001007770616e30000000060006000300000006000400a1aa00000c002d000202aaaaaaaaaaaa05002e000100000005002b0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) unshare(0x100000) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '.\x00'}, 0x6e) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x9, 0x2, 0x91, @random="4c01f00a4bb3"}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x5c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'gre0\x00', &(0x7f0000000d00)={'gre0\x00', 0x0, 0x1, 0x7800, 0x59, 0x1, {{0x40, 0x4, 0x0, 0x9, 0x100, 0x66, 0x0, 0x1, 0x4, 0x0, @remote, @remote, {[@timestamp={0x44, 0x2c, 0x97, 0x0, 0xe, [0x32b5550e, 0x9, 0x3, 0xcb, 0xc2, 0x6, 0x8, 0x101, 0x5, 0x8]}, @end, @cipso={0x86, 0x65, 0x0, [{0x7, 0x9, "1c013458b973dc"}, {0x1, 0x10, "ad91c2b3308493f1c9f3f1fd7a54"}, {0x1, 0x6, "3e559279"}, {0x0, 0x8, '$c\',!F'}, {0x0, 0x11, "106f839f4bd1c6954b66a2445dfe54"}, {0x7, 0x5, "a5303c"}, {0x0, 0x11, "e4ccdedc10cda3141d1675c495b90b"}, {0x7, 0x11, "43cf4c27e7c3979353d0c8a05668df"}]}, @timestamp_addr={0x44, 0x34, 0x96, 0x1, 0x6, [{@loopback, 0x9}, {@remote, 0x69}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x5}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "d6e02b9f88ac"}]}, @lsrr={0x83, 0xf, 0x81, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}, @noop, @lsrr={0x83, 0x7, 0xf9, [@rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000e80)={'gre0\x00', r9, 0x10, 0x20, 0x94c, 0xa3a6, {{0x7, 0x4, 0x1, 0x7, 0x1c, 0x64, 0x0, 0x9b, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@lsrr={0x83, 0x7, 0x82, [@empty]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x4}, 0x10}, 0x94) 664.984734ms ago: executing program 2 (id=2175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYBLOB="00000000498005000a0001004af29c3ff5b40000140035006d6163766c616e30"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYBLOB="00000000498005000a0001004af29c3ff5b40000140035006d6163766c616e30"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 656.395743ms ago: executing program 4 (id=2176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) r2 = socket(0x11, 0xa, 0x0) sendto$x25(r2, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c00018008000100636d70"], 0x84}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) 615.860669ms ago: executing program 0 (id=2177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto(r3, &(0x7f00000000c0)="b5ca8d518121360cf7a080c4d29932afcf3fc7d11b2b04f4a59afde6260117cf0f2ba55ed273729b2a18b279532b13d3e95311fd6cbd4d541655d3a75bfa9ef5ac0f11ef7def1681d559cf3f4b549786e6a52e94100fe6faf5b3b62bf3a9cd0e2e97c2bb028712e0995f670db9b41de424bd90f585c3bdccb7c935e5f46036210fd427016cf7e96ae2b33382309a09c40d0b0a8000a7d505745eea989944f328", 0xa0, 0x44800, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$xdp(r7, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001580)="343c24517eb7193a5b575d9874b47067f14488093d2c8c606fd5f839239c2131a7319cb8d3442a805d0e6e4a0bbc99ae61744cb0a4df6de6c45ed1e32ead7d21694ef21d2c01077a8e560d3a7b58bc06153630d55a2afde75723a3a8ca52b8a904673015", 0x64}, {&(0x7f0000001680)="6de0d3895f454d5799e570a74b5d4c4d787b002d8890b9c51508d853", 0x1c}], 0x2, 0x0, 0x0, 0x20008080}, 0x4040840) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000000)={'vlan0\x00', 0x7fffffff}) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}}, 0x0) 521.623504ms ago: executing program 4 (id=2178): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'lc\x00', 0x3, 0x1, 0x9}, 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x80, 0x8, 0xb697, 0x5, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x66, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @loopback, {[@end]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@getchain={0x34, 0x66, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xe, 0xe}, {0x9, 0xe}, {0x0, 0xffff}}, [{0x8, 0xb, 0x29dd3367}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 465.138446ms ago: executing program 2 (id=2179): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0xe4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x90) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0x20}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000040)}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 441.26579ms ago: executing program 1 (id=2180): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000a17000/0x2000)=nil, 0x2000, 0xb635773f07ebbeef, 0x12, 0xffffffffffffffff, 0xb2caa000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r2, 0x701, 0x0, 0x0, {0x41}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x8, 0x4, 0x3) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xf, 0xffaf}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5, 0xffff}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x20040014) 0s ago: executing program 3 (id=2181): r0 = socket(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[], 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x4edae18f6e332319, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$sock_SIOCDELRT(r2, 0x890c, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): SSID 50:50:50:50:50:50 [ 84.016000][ T5624] veth0_macvtap: entered promiscuous mode [ 84.069003][ T5624] veth1_macvtap: entered promiscuous mode [ 84.106863][ T3298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.142757][ T3298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.281894][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.332539][ T5829] tipc: Enabling of bearer rejected, failed to enable media [ 84.347282][ T5831] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8'. [ 84.357978][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.374178][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.375991][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.469261][ T676] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.503667][ T676] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.515063][ T5636] Bluetooth: hci2: command tx timeout [ 84.529071][ T676] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.541893][ T676] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.580571][ T5636] Bluetooth: hci0: command tx timeout [ 84.581011][ T50] Bluetooth: hci1: command tx timeout [ 84.586569][ T5636] Bluetooth: hci4: command tx timeout [ 84.600397][ T4941] Bluetooth: hci3: command tx timeout [ 84.835308][ T5847] Zero length message leads to an empty skb [ 84.910665][ T5847] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 84.934101][ T676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.962054][ T5847] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11'. [ 84.974637][ T676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.020821][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 85.266159][ T676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.298363][ T676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.502822][ T5879] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 85.527044][ T5879] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 85.651545][ T5884] x_tables: duplicate underflow at hook 3 [ 85.655200][ T5885] sock: sock_timestamping_bind_phc: sock not bind to device [ 85.835831][ T5891] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 85.847624][ T5891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 85.931047][ T5891] team0: Port device geneve1 added [ 86.168175][ T5904] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.263157][ T5912] xt_hashlimit: invalid interval [ 86.764245][ T996] cfg80211: failed to load regulatory.db [ 86.861845][ T5941] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 86.972512][ T5957] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 87.004459][ T5958] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 87.052603][ T5957] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 87.066038][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 87.071162][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'. [ 87.119458][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.39'. [ 87.177184][ T5962] dvmrp0: entered allmulticast mode [ 87.263379][ T5961] gretap1: entered promiscuous mode [ 87.279072][ T5961] gretap1: entered allmulticast mode [ 87.351440][ T5975] netlink: 'syz.2.41': attribute type 27 has an invalid length. [ 88.773353][ T6048] __nla_validate_parse: 11 callbacks suppressed [ 88.773371][ T6048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.63'. [ 88.878554][ T6050] syzkaller0: entered promiscuous mode [ 88.892238][ T6050] syzkaller0: entered allmulticast mode [ 89.776861][ T6057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.948971][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 90.175246][ T6080] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.275750][ T6082] netlink: 'syz.1.74': attribute type 8 has an invalid length. [ 90.692412][ T6087] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.76'. [ 90.708361][ T6064] syzkaller1: entered promiscuous mode [ 90.714096][ T6064] syzkaller1: entered allmulticast mode [ 90.725515][ T6074] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 90.804630][ T6090] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.76'. [ 91.197790][ T6115] netlink: 83 bytes leftover after parsing attributes in process `syz.4.83'. [ 91.819877][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 91.834766][ T6145] netlink: 88 bytes leftover after parsing attributes in process `syz.1.90'. [ 91.845125][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'. [ 92.029249][ T6153] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 92.118920][ T6159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.265503][ T6170] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:19999 [ 92.308690][ T6169] sctp: [Deprecated]: syz.4.97 (pid 6169) Use of int in maxseg socket option. [ 92.308690][ T6169] Use struct sctp_assoc_value instead [ 92.497664][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.99'. [ 92.528720][ T6178] netlink: 244 bytes leftover after parsing attributes in process `syz.2.100'. [ 93.275564][ T6203] macsec1: entered allmulticast mode [ 93.310487][ T6203] bond0: entered allmulticast mode [ 93.331241][ T6203] bond_slave_0: entered allmulticast mode [ 93.346025][ T6203] bond_slave_1: entered allmulticast mode [ 93.352709][ T6203] bond_slave_0: entered promiscuous mode [ 93.359324][ T6203] bond_slave_1: entered promiscuous mode [ 93.369825][ T6203] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 93.402881][ T6203] bond0: left allmulticast mode [ 93.422610][ T6203] bond_slave_0: left allmulticast mode [ 93.451734][ T6203] bond_slave_1: left allmulticast mode [ 93.729899][ T5631] bond_slave_0: left promiscuous mode [ 93.736506][ T5631] bond_slave_1: left promiscuous mode [ 93.797916][ T6234] __nla_validate_parse: 2 callbacks suppressed [ 93.797936][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 93.845954][ T6227] syzkaller0: entered promiscuous mode [ 93.867766][ T6227] syzkaller0: entered allmulticast mode [ 94.074637][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 94.329389][ T6257] xt_hashlimit: size too large, truncated to 1048576 [ 94.924332][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 94.975556][ T6293] ip6gretap1: entered promiscuous mode [ 94.986726][ T6293] ip6gretap1: entered allmulticast mode [ 95.146364][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 95.156454][ T6261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.440514][ T6313] Can't find ip_set type hrt [ 95.477544][ T6318] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.130'. [ 95.569918][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.579206][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.587628][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.596013][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.604488][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.612883][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.621355][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.629698][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.638085][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.646462][ T6324] tc action pedit unable to extract header offset for header type (0x5) [ 95.654865][ T6324] 0: reclassify loop, rule prio 0, protocol 800 [ 95.747902][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 96.420563][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.457629][ T6336] syz.1.130 (6336) used greatest stack depth: 17608 bytes left [ 96.497310][ T187] IPVS: starting estimator thread 0... [ 96.508083][ T6376] IPVS: ip_vs_edit_dest(): server weight less than zero [ 96.625731][ T6382] IPVS: using max 31 ests per chain, 74400 per kthread [ 96.924426][ T6394] syzkaller0: entered promiscuous mode [ 96.931953][ T6401] netlink: 'syz.2.149': attribute type 21 has an invalid length. [ 96.945215][ T6394] syzkaller0: entered allmulticast mode [ 96.955963][ T6401] netlink: 152 bytes leftover after parsing attributes in process `syz.2.149'. [ 96.975599][ T6394] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 97.220081][ T6412] SET target dimension over the limit! [ 97.320963][ T6419] IPv4: Oversized IP packet from 127.202.26.0 [ 97.600740][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 97.718111][ T6445] netlink: 68 bytes leftover after parsing attributes in process `syz.4.161'. [ 98.015475][ T6458] netlink: 'syz.2.165': attribute type 2 has an invalid length. [ 98.030817][ T5636] Bluetooth: hci4: command tx timeout [ 98.047313][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 98.751873][ T6496] batadv_slave_0: entered promiscuous mode [ 98.799018][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.885609][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.065346][ T6517] __nla_validate_parse: 2 callbacks suppressed [ 99.065363][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 99.758422][ T6551] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 99.778417][ T6551] netlink: 228 bytes leftover after parsing attributes in process `syz.1.184'. [ 99.932128][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 99.988708][ T6556] netlink: 'syz.3.186': attribute type 10 has an invalid length. [ 99.991856][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 100.023850][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.188'. [ 100.069817][ T6556] veth1_macvtap: left promiscuous mode [ 100.112019][ T11] hid-generic 0005:07C0:100E.0001: unknown main item tag 0x0 [ 100.136485][ T6556] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 100.192138][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 100.204504][ T11] hid-generic 0005:07C0:100E.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 100.616818][ T6589] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 100.635732][ T6589] bond1 (unregistering): Released all slaves [ 100.678469][ T6592] gretap0: entered promiscuous mode [ 100.693754][ T6592] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 100.755363][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880342cc000: rx timeout, send abort [ 100.865100][ T6603] syzkaller0: entered promiscuous mode [ 100.871775][ T6603] syzkaller0: entered allmulticast mode [ 101.001170][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 101.009809][ T6615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.255746][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058312000: rx timeout, send abort [ 101.266132][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880342cc000: abort rx timeout. Force session deactivation [ 101.359374][ T6627] netlink: 256 bytes leftover after parsing attributes in process `syz.4.207'. [ 101.567883][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 101.764081][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058312000: abort rx timeout. Force session deactivation [ 102.174387][ T6637] Bluetooth: MGMT ver 1.23 [ 102.910480][ T6724] bond1: option lp_interval: invalid value (0) [ 102.931704][ T6724] bond1: option lp_interval: allowed values 1 - 2147483647 [ 103.294428][ T6724] bond1 (unregistering): Released all slaves [ 103.484685][ T6741] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 103.527395][ T6744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'. [ 103.778543][ T6756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.236'. [ 105.607152][ T6716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.215164][ T6797] __nla_validate_parse: 1 callbacks suppressed [ 106.215182][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 106.258504][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 106.380945][ T6803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.548851][ T6807] netlink: 'syz.1.251': attribute type 6 has an invalid length. [ 106.565709][ T6807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.251'. [ 106.916635][ T6812] syzkaller0: entered promiscuous mode [ 106.923789][ T6812] syzkaller0: entered allmulticast mode [ 107.110693][ T6816] pim6reg: entered allmulticast mode [ 107.128456][ T6822] pim6reg: left allmulticast mode [ 107.321919][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 107.549758][ T6842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.957772][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 108.033248][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 108.125739][ T6875] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 108.160058][ T6877] openvswitch: netlink: IPv4 tunnel dst address is zero [ 108.180540][ T6877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.223558][ T6879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.225039][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.275'. [ 108.298258][ T6878] netlink: 64 bytes leftover after parsing attributes in process `syz.0.275'. [ 108.648366][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 108.714618][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 109.095814][ T6907] syzkaller0: entered promiscuous mode [ 109.106614][ T6909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.117387][ T6907] syzkaller0: entered allmulticast mode [ 109.723125][ T6927] netlink: 'syz.1.291': attribute type 3 has an invalid length. [ 109.737350][ T6927] netlink: 'syz.1.291': attribute type 2 has an invalid length. [ 110.099304][ T6934] bond1 (unregistering): Released all slaves [ 110.415168][ T6968] atomic_op ffff888028e3f198 conn xmit_atomic 0000000000000000 [ 110.815380][ T6992] pim6reg1: entered promiscuous mode [ 110.831952][ T6992] pim6reg1: entered allmulticast mode [ 110.845557][ T6985] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 111.109355][ T6996] IPVS: length: 38 != 8 [ 111.148803][ T7004] xt_hl: Unknown Hop Limit match mode: 206 [ 111.257063][ T7007] __nla_validate_parse: 8 callbacks suppressed [ 111.257082][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 111.299561][ T7009] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002 [ 111.322943][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 111.667364][ T7024] netlink: 5440 bytes leftover after parsing attributes in process `syz.0.317'. [ 111.682865][ T7026] netlink: 5440 bytes leftover after parsing attributes in process `syz.0.317'. [ 112.221437][ T7054] x_tables: duplicate underflow at hook 1 [ 112.250898][ T7054] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20000 [ 112.854055][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 114.128310][ T7085] bond0: entered promiscuous mode [ 114.157142][ T7085] bond_slave_0: entered promiscuous mode [ 114.177886][ T7085] bond_slave_1: entered promiscuous mode [ 114.194890][ T7085] batadv0: entered promiscuous mode [ 114.208488][ T7085] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 114.231178][ T7085] bond0: left promiscuous mode [ 114.248353][ T7085] bond_slave_0: left promiscuous mode [ 114.260886][ T7085] bond_slave_1: left promiscuous mode [ 114.278721][ T7085] batadv0: left promiscuous mode [ 114.466330][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 114.478007][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 114.644741][ T7117] netlink: 256 bytes leftover after parsing attributes in process `syz.1.343'. [ 114.679259][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 114.871364][ T7134] netlink: 'syz.0.348': attribute type 83 has an invalid length. [ 114.980718][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'. [ 115.047314][ T7147] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 115.081321][ T7145] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 115.148297][ T7152] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 115.162390][ T7152] bond1 (unregistering): Released all slaves [ 115.202091][ T7147] bond1: entered promiscuous mode [ 115.208269][ T7147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.260702][ T7150] bond2: option all_slaves_active: invalid value (222) [ 115.285594][ T7150] bond2 (unregistering): Released all slaves [ 115.438129][ T7165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.704573][ T7172] syzkaller0: entered promiscuous mode [ 115.710727][ T7172] syzkaller0: entered allmulticast mode [ 115.783507][ T7186] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 115.846476][ T48] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 116.296110][ T7172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.321199][ T7224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.158484][ T7260] __nla_validate_parse: 3 callbacks suppressed [ 118.158502][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 118.173907][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 118.296814][ T7260] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 118.327348][ T7260] bond2 (unregistering): Released all slaves [ 118.428607][ T7266] vlan2: entered allmulticast mode [ 118.434455][ T7266] veth1_virt_wifi: entered allmulticast mode [ 118.473392][ T7284] erspan0: entered promiscuous mode [ 118.499530][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 118.782085][ T7294] bond1: option all_slaves_active: invalid value (222) [ 118.817021][ T7294] bond1 (unregistering): Released all slaves [ 118.989717][ T7311] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 119.262906][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 119.399615][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.389'. [ 119.559788][ T7343] tipc: Started in network mode [ 119.568580][ T7343] tipc: Node identity 862bf46d75d7, cluster identity 4711 [ 119.582954][ T7343] tipc: Enabled bearer , priority 0 [ 119.604364][ T7343] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.394'. [ 119.664471][ T7343] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 119.691109][ T7343] 0ªX¹¦Dö»: entered allmulticast mode [ 119.837057][ T7349] syzkaller0: entered promiscuous mode [ 119.842747][ T7349] syzkaller0: entered allmulticast mode [ 119.849116][ T7349] tipc: Resetting bearer [ 119.902485][ T7341] tipc: Resetting bearer [ 120.076087][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.403'. [ 121.009427][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a14800: rx timeout, send abort [ 121.018056][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057a15c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 121.500954][ T7341] tipc: Disabling bearer [ 121.517731][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a14800: abort rx timeout. Force session deactivation [ 121.590120][ T5631] tipc: Node number set to 4093441133 [ 121.820957][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.829317][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.928554][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.939848][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.949484][ T7407] netlink: 180 bytes leftover after parsing attributes in process `syz.2.412'. [ 122.037085][ T7396] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 122.053189][ T7396] bond1 (unregistering): Released all slaves [ 122.094860][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.115371][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.139663][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.174482][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.275024][ T7419] netlink: 48 bytes leftover after parsing attributes in process `syz.2.414'. [ 122.423697][ T7435] tipc: Started in network mode [ 122.428725][ T7435] tipc: Node identity eeba4afb0ab5, cluster identity 4711 [ 122.436320][ T7435] tipc: Enabled bearer , priority 0 [ 122.453331][ T7434] tipc: Disabling bearer [ 122.533544][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 122.797989][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a15800: rx timeout, send abort [ 122.806614][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a59e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.856396][ T5636] block nbd0: Receive control failed (result -32) [ 122.906614][ T7456] netlink: 'syz.4.429': attribute type 1 has an invalid length. [ 122.936909][ T7456] bond1: option mode: invalid value (7) [ 122.944305][ T7456] bond1 (unregistering): Released all slaves [ 122.984085][ T7457] : renamed from dummy0 [ 123.096500][ T7464] xt_socket: unknown flags 0xe4 [ 123.116999][ T7464] netlink: 'syz.4.430': attribute type 15 has an invalid length. [ 123.135975][ T7464] netlink: 'syz.4.430': attribute type 15 has an invalid length. [ 123.136724][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 123.154180][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 123.167606][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 123.186629][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 123.306331][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a15800: abort rx timeout. Force session deactivation [ 123.491456][ T7483] __nla_validate_parse: 4 callbacks suppressed [ 123.491474][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 123.534046][ T7483] netlink: 'syz.2.437': attribute type 29 has an invalid length. [ 123.553456][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 123.562581][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 123.572400][ T7487] netlink: 'syz.2.437': attribute type 29 has an invalid length. [ 123.581280][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 123.607547][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 123.784239][ T7502] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 123.793157][ T7502] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 123.811726][ T7502] netlink: 'syz.2.443': attribute type 2 has an invalid length. [ 123.833705][ T7502] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 123.857872][ T7502] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 124.030163][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 124.039844][ T7514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.069156][ T7516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.447'. [ 124.121609][ T7521] trusted_key: syz.4.448 sent an empty control message without MSG_MORE. [ 124.278212][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'. [ 124.585689][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ec19000: rx timeout, send abort [ 124.594260][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802550a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.973383][ T7547] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 124.988508][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 125.001913][ T7547] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 125.043598][ T7547] bond1 (unregistering): Released all slaves [ 125.093971][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ec19000: abort rx timeout. Force session deactivation [ 125.235536][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'. [ 125.773638][ T7577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.134084][ T7584] geneve2: entered promiscuous mode [ 126.139432][ T7584] geneve2: entered allmulticast mode [ 126.148670][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 126.166787][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 126.190894][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 126.211822][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 126.251057][ T7586] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 126.267250][ T7586] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 126.285587][ T7586] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 126.319552][ T7586] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.337651][ T7587] tipc: Started in network mode [ 126.351349][ T7587] tipc: Node identity e2ec693ca2e6, cluster identity 4711 [ 126.366212][ T7586] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.373968][ T7587] tipc: Enabled bearer , priority 0 [ 126.392443][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b943800: rx timeout, send abort [ 126.401026][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d77c800: rx timeout, send abort [ 126.409499][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d77c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.424079][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b943800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.553244][ T7587] syzkaller0: entered promiscuous mode [ 126.560136][ T7587] syzkaller0: entered allmulticast mode [ 126.568651][ T7587] tipc: Resetting bearer [ 126.597121][ T7590] ip6gre1: entered allmulticast mode [ 126.701400][ T7593] Bluetooth: MGMT ver 1.23 [ 126.753216][ T12] tipc: Resetting bearer [ 126.799773][ T7585] tipc: Resetting bearer [ 127.298554][ T7534] Set syz1 is full, maxelem 65536 reached [ 127.732440][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b940800: rx timeout, send abort [ 127.740929][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056610800: rx timeout, send abort [ 127.749398][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056610800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.763854][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b940800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.442131][ T7585] tipc: Disabling bearer [ 128.451666][ T187] tipc: Node number set to 1074424124 [ 128.545364][ T7619] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 128.677865][ T7631] validate_nla: 11 callbacks suppressed [ 128.677884][ T7631] netlink: 'syz.2.478': attribute type 4 has an invalid length. [ 128.692221][ T7631] __nla_validate_parse: 9 callbacks suppressed [ 128.692237][ T7631] netlink: 224 bytes leftover after parsing attributes in process `syz.2.478'. [ 128.746974][ T7631] syzkaller1: entered promiscuous mode [ 128.753044][ T7631] syzkaller1: entered allmulticast mode [ 129.054345][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057835000: rx timeout, send abort [ 129.063015][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801dfe3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.562645][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057835000: abort rx timeout. Force session deactivation [ 131.705005][ T7634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.344678][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 132.354519][ T7743] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 132.356673][ T7739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.362921][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 132.392577][ T7745] syzkaller1: entered promiscuous mode [ 132.398218][ T7745] syzkaller1: entered allmulticast mode [ 132.614911][ T7755] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20003 [ 132.793459][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 132.826962][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836943][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849340][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 133.075622][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.4.518'. [ 133.138229][ T7793] netlink: 76 bytes leftover after parsing attributes in process `syz.4.518'. [ 133.185063][ T7796] Cannot find add_set index 0 as target [ 133.187330][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.199181][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.207420][ T7797] netlink: 'syz.4.518': attribute type 2 has an invalid length. [ 133.230860][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 133.316854][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 133.339171][ T7793] netlink: 52 bytes leftover after parsing attributes in process `syz.4.518'. [ 133.354266][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.362168][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.370719][ T7794] netlink: 124 bytes leftover after parsing attributes in process `syz.2.519'. [ 133.390065][ T7812] netlink: 'syz.1.525': attribute type 16 has an invalid length. [ 133.432764][ T7812] veth0_macvtap: entered allmulticast mode [ 133.978713][ T7845] __nla_validate_parse: 1 callbacks suppressed [ 133.978746][ T7845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.533'. [ 134.235728][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 134.308167][ T7853] netlink: 56 bytes leftover after parsing attributes in process `syz.4.536'. [ 134.372790][ T7865] syzkaller0: entered promiscuous mode [ 134.385206][ T7865] syzkaller0: entered allmulticast mode [ 134.586662][ T7869] netlink: 64 bytes leftover after parsing attributes in process `syz.2.540'. [ 134.657981][ T7869] syzkaller1: entered promiscuous mode [ 134.675256][ T7869] syzkaller1: entered allmulticast mode [ 135.033270][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'. [ 135.382974][ T7919] syzkaller0: entered promiscuous mode [ 135.399808][ T7919] syzkaller0: entered allmulticast mode [ 135.508248][ T7925] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 135.568181][ T7929] netlink: 260 bytes leftover after parsing attributes in process `syz.2.559'. [ 135.581846][ T7925] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.642757][ T7925] bond0: (slave team0): Enslaving as an active interface with an up link [ 135.781274][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 135.791093][ T7939] netlink: 'syz.4.562': attribute type 10 has an invalid length. [ 135.798923][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 135.857174][ T7939] geneve2: entered promiscuous mode [ 135.877053][ T7939] geneve2: entered allmulticast mode [ 136.107296][ T7956] syzkaller0: entered promiscuous mode [ 136.116364][ T7956] syzkaller0: entered allmulticast mode [ 136.166897][ T7956] netlink: 51 bytes leftover after parsing attributes in process `syz.4.567'. [ 136.194412][ T7958] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 136.505221][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 137.115842][ T8010] veth1_to_bridge: entered allmulticast mode [ 137.148093][ T8007] syzkaller0: entered promiscuous mode [ 137.190409][ T8007] syzkaller0: entered allmulticast mode [ 137.309853][ T8022] team0: entered promiscuous mode [ 137.341181][ T8022] team_slave_0: entered promiscuous mode [ 137.366190][ T8022] team_slave_1: entered promiscuous mode [ 137.419546][ T8022] erspan0: entered promiscuous mode [ 138.337310][ T8072] tipc: Enabled bearer , priority 10 [ 138.642506][ T8085] xt_CT: No such helper "snmp_trap" [ 138.795516][ T8097] bond3 (unregistering): Released all slaves [ 138.915458][ T8106] bridge3: entered allmulticast mode [ 139.228866][ T8133] veth1_to_bond: entered allmulticast mode [ 139.451483][ T11] tipc: Node number set to 3826207483 [ 139.472932][ T8122] veth1_to_bond: left allmulticast mode [ 139.894461][ T8168] __nla_validate_parse: 10 callbacks suppressed [ 139.894480][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 140.230489][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 140.316419][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 140.411543][ T8197] bond2: Invalid ad_actor_system MAC address. [ 140.418128][ T8197] bond2: option ad_actor_system: invalid value (1) [ 140.427892][ T8197] bond2 (unregistering): Released all slaves [ 140.664626][ T8217] batadv_slave_1: entered allmulticast mode [ 140.714216][ T8220] netlink: 'syz.3.632': attribute type 4 has an invalid length. [ 140.740163][ T8220] netlink: 'syz.3.632': attribute type 4 has an invalid length. [ 140.779763][ T8217] batadv_slave_1: left allmulticast mode [ 141.161540][ T8241] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 141.175335][ T8241] netlink: 'syz.0.638': attribute type 7 has an invalid length. [ 141.202188][ T8241] netlink: 'syz.0.638': attribute type 8 has an invalid length. [ 141.240965][ T8241] netlink: 208 bytes leftover after parsing attributes in process `syz.0.638'. [ 141.271806][ T8241] NCSI netlink: No device for ifindex 65584 [ 141.404390][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.478360][ T8245] bond3: (slave ip6gre0): Device is not bonding slave [ 141.485444][ T8245] bond3: option active_slave: invalid value (ip6gre0) [ 141.570740][ T8245] bond3 (unregistering): Released all slaves [ 141.834228][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 141.844700][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 144.024891][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 144.048579][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 144.152390][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.664'. [ 144.518677][ T8359] syzkaller0: entered promiscuous mode [ 144.552128][ T8359] syzkaller0: entered allmulticast mode [ 144.579872][ T8363] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 144.605063][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.671'. [ 144.623641][ T8359] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 144.661855][ T8369] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 144.823930][ T8369] bond1: entered promiscuous mode [ 144.836815][ T8369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.888039][ T8373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.903491][ T8373] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 144.922644][ T8373] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 144.936749][ T8373] bond1: (slave vti0): making interface the new active one [ 144.945624][ T8373] vti0: entered promiscuous mode [ 144.963448][ T8373] bond1: (slave vti0): Enslaving as an active interface with an up link [ 145.038755][ T8383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.084738][ T8381] syzkaller0: entered promiscuous mode [ 145.104808][ T8389] netlink: 'syz.0.677': attribute type 11 has an invalid length. [ 145.108527][ T8381] syzkaller0: entered allmulticast mode [ 145.173739][ T8396] __nla_validate_parse: 1 callbacks suppressed [ 145.173756][ T8396] netlink: 216 bytes leftover after parsing attributes in process `syz.3.679'. [ 145.256959][ T8394] netlink: 'syz.1.678': attribute type 3 has an invalid length. [ 145.264811][ T8394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.678'. [ 145.348280][ T8403] syzkaller0: entered promiscuous mode [ 145.362911][ T8403] syzkaller0: entered allmulticast mode [ 145.676752][ T8421] syzkaller1: entered promiscuous mode [ 145.706987][ T8421] syzkaller1: entered allmulticast mode [ 145.919419][ T8438] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 145.950236][ T8438] netlink: 'syz.3.691': attribute type 3 has an invalid length. [ 145.985922][ T8438] netlink: 224 bytes leftover after parsing attributes in process `syz.3.691'. [ 146.025211][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 146.059597][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 146.233266][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 146.306664][ T8458] ipt_ECN: cannot use operation on non-tcp rule [ 146.365473][ T8453] syzkaller0: entered promiscuous mode [ 146.397674][ T8453] syzkaller0: entered allmulticast mode [ 146.414628][ T8465] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 146.554145][ T8465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.572237][ T8465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.763741][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 146.898632][ T8487] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.704'. [ 147.006789][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 147.062529][ T8492] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 147.184329][ T8492] bond3: entered promiscuous mode [ 147.190090][ T8492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.265074][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 147.426537][ T8515] xt_hashlimit: size too large, truncated to 1048576 [ 147.432256][ T8516] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» [ 147.881192][ T8543] netlink: 'syz.0.720': attribute type 5 has an invalid length. [ 147.984212][ T8547] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 148.013613][ T8551] xt_nat: multiple ranges no longer supported [ 148.042362][ T8547] bond2 (unregistering): Released all slaves [ 148.343940][ T8561] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 148.378788][ T8561] bond2 (unregistering): Released all slaves [ 148.573177][ T8573] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 148.648478][ T8583] tipc: Failed to remove unknown binding: 66,1,1/0:638805008/638805010 [ 148.683644][ T8578] macvlan2: entered promiscuous mode [ 148.693096][ T8583] xt_policy: neither incoming nor outgoing policy selected [ 148.702542][ T8578] macvlan2: entered allmulticast mode [ 148.710616][ T8578] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 149.264992][ T8606] syzkaller0: entered promiscuous mode [ 149.284778][ T8606] syzkaller0: entered allmulticast mode [ 149.653054][ T8634] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.805076][ T8639] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.821780][ T8634] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 151.291941][ T8648] macvlan0: entered promiscuous mode [ 151.321821][ T8654] netlink: 'syz.1.752': attribute type 12 has an invalid length. [ 151.322212][ T8652] __nla_validate_parse: 6 callbacks suppressed [ 151.322226][ T8652] netlink: 116 bytes leftover after parsing attributes in process `syz.0.751'. [ 151.378270][ T8654] bond2: option primary_reselect: invalid value (255) [ 151.398811][ T8654] bond2 (unregistering): Released all slaves [ 151.764906][ T8656] syzkaller0: entered promiscuous mode [ 151.783173][ T8656] syzkaller0: entered allmulticast mode [ 153.593900][ T8705] nbd1: detected capacity change from 0 to 63 [ 153.648448][ T8717] netlink: 232 bytes leftover after parsing attributes in process `syz.2.764'. [ 153.673974][ T8717] netlink: 256 bytes leftover after parsing attributes in process `syz.2.764'. [ 154.098291][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 154.181801][ T8747] netlink: 'syz.2.773': attribute type 32 has an invalid length. [ 154.191483][ T8745] netlink: 'syz.0.772': attribute type 83 has an invalid length. [ 154.204373][ T8748] netlink: 332 bytes leftover after parsing attributes in process `syz.2.773'. [ 154.235788][ T8749] netlink: 'syz.2.773': attribute type 2 has an invalid length. [ 154.261571][ T5636] block nbd1: Receive control failed (result -104) [ 154.423895][ T8761] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 154.528616][ T8767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.557748][ T8767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.637800][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 154.689267][ T8782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.781'. [ 154.717567][ T8777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.813041][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 154.874758][ T8785] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 154.887983][ T8785] netlink: 'syz.3.783': attribute type 2 has an invalid length. [ 155.084038][ T8810] Cannot find add_set index 65532 as target [ 155.162279][ T8812] syzkaller0: entered promiscuous mode [ 155.170067][ T8812] syzkaller0: entered allmulticast mode [ 155.277559][ T8823] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 156.082007][ T8842] syzkaller0: entered promiscuous mode [ 156.087509][ T8842] syzkaller0: entered allmulticast mode [ 156.283723][ T8849] SET target dimension over the limit! [ 157.789139][ T8789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.811035][ T8847] netlink: 256 bytes leftover after parsing attributes in process `syz.4.801'. [ 157.981959][ T8852] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1Y#­¦ûËŒ [ 157.981959][ T8852] d]WÊ”+NC”m­÷Y<ƒ­9Åê [ 158.012792][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.804'. [ 158.052620][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 158.288897][ T8863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.328459][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 158.414510][ T8890] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 158.573222][ T8902] sock: sock_set_timeout: `syz.2.814' (pid 8902) tries to set negative timeout [ 158.691742][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 158.728422][ T8905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.815'. [ 158.752532][ T8907] gretap0: entered promiscuous mode [ 158.766584][ T8907] batman_adv: batadv0: Adding interface: gretap0 [ 158.787169][ T8907] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 158.849290][ T8907] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 159.399731][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'. [ 159.434325][ T8947] netlink: 'syz.1.825': attribute type 7 has an invalid length. [ 159.443441][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.825'. [ 159.486233][ T8954] pimreg3: entered allmulticast mode [ 159.503994][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 159.556586][ T8956] ipt_REJECT: TCP_RESET invalid for non-tcp [ 159.996846][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.836'. [ 160.228688][ T8994] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 160.368282][ T8998] bond4: Unable to set up delay as MII monitoring is disabled [ 160.379111][ T8998] bond4 (unregistering): Released all slaves [ 160.394328][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.558983][ T9016] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 160.582496][ T9013] syzkaller0: entered promiscuous mode [ 160.588338][ T9013] syzkaller0: entered allmulticast mode [ 160.723766][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.731060][ T9020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.740710][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.747994][ T9020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.760113][ T9020] bridge0: entered promiscuous mode [ 160.766050][ T9020] bridge0: entered allmulticast mode [ 161.108981][ T9035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.269183][ T9053] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 161.276715][ T9055] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 161.301961][ T9053] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 161.311891][ T9053] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 161.326962][ T9053] netlink: 'syz.4.859': attribute type 2 has an invalid length. [ 161.747658][ T9080] syzkaller0: entered promiscuous mode [ 161.764276][ T9080] syzkaller0: entered allmulticast mode [ 161.871694][ T9087] syzkaller0: entered promiscuous mode [ 161.881269][ T9087] syzkaller0: entered allmulticast mode [ 162.076277][ T9104] syz_tun: tun_net_xmit 42 [ 162.423433][ T9127] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 162.443421][ T9129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.604864][ T9142] syzkaller1: entered promiscuous mode [ 162.610718][ T9142] syzkaller1: entered allmulticast mode [ 162.619136][ T9142] lo: entered promiscuous mode [ 162.644550][ T9142] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 162.679631][ T9142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.767134][ T9127] bond2: (slave gretap1): making interface the new active one [ 162.786172][ T9127] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 163.035274][ T9165] __nla_validate_parse: 10 callbacks suppressed [ 163.035293][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.893'. [ 163.053416][ T9165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.893'. [ 163.088373][ T9171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.896'. [ 163.135298][ T9171] syzkaller1: entered promiscuous mode [ 163.140468][ C1] syz_tun: tun_net_xmit 42 [ 163.152651][ T9171] syzkaller1: entered allmulticast mode [ 163.274626][ T9179] dvmrp0: left allmulticast mode [ 163.352530][ T9181] tipc: Enabled bearer , priority 0 [ 163.390236][ T9182] syzkaller0: entered promiscuous mode [ 163.410004][ T9187] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 163.421495][ T9182] syzkaller0: entered allmulticast mode [ 163.494365][ T9182] tipc: Resetting bearer [ 163.536990][ T9194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.904'. [ 163.560240][ T9182] tipc: Disabling bearer [ 163.799819][ T9212] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 163.867546][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.999943][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 164.047141][ T5636] Bluetooth: hci4: link tx timeout [ 164.052170][ T9232] netlink: 'syz.1.916': attribute type 11 has an invalid length. [ 164.054135][ T5636] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 164.062435][ T9232] netlink: 220 bytes leftover after parsing attributes in process `syz.1.916'. [ 164.069754][ T5636] Bluetooth: hci4: link tx timeout [ 164.083269][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.104935][ T9232] syzkaller0: entered promiscuous mode [ 164.119145][ T9232] syzkaller0: entered allmulticast mode [ 164.180453][ C1] syz_tun: tun_net_xmit 42 [ 164.290899][ T9248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.389907][ T9258] tc_dump_action: action bad kind [ 164.548707][ T9269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.926'. [ 164.613533][ T9262] syzkaller0: entered promiscuous mode [ 164.626930][ T9262] syzkaller0: entered allmulticast mode [ 164.646598][ T9279] validate_nla: 2 callbacks suppressed [ 164.646616][ T9279] netlink: 'syz.0.928': attribute type 22 has an invalid length. [ 164.679986][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 164.789316][ T9287] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 164.902894][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.623744][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.941453][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.103336][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 166.324783][ T676] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.343450][ T676] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.379395][ T676] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.405561][ T676] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.741875][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.981347][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.062907][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 167.094418][ T9340] netlink: 'syz.2.945': attribute type 2 has an invalid length. [ 167.244908][ T9354] vlan2: entered promiscuous mode [ 167.257461][ T9341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.263837][ T9354] bridge0: entered promiscuous mode [ 167.357218][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 167.382382][ T9363] syzkaller0: entered promiscuous mode [ 167.406525][ T9363] syzkaller0: entered allmulticast mode [ 167.499277][ T9370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.508078][ T9370] IPv6: NLM_F_CREATE should be set when creating new route [ 167.515432][ T9370] IPv6: NLM_F_CREATE should be set when creating new route [ 167.684454][ T9385] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 167.902809][ T9398] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 167.919862][ T9399] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 167.942966][ T9401] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 168.023471][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.068802][ T9398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.165767][ T9399] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.179289][ T9409] __nla_validate_parse: 4 callbacks suppressed [ 168.179307][ T9409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.963'. [ 168.261556][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 168.310190][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 168.333503][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.353551][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 168.375518][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 168.407331][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.963'. [ 168.471565][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.483298][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.509570][ T975] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.666081][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.699101][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 168.711806][ T9440] Cannot find del_set index 3 as target [ 168.779784][ T9444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.787107][ T9444] IPv6: NLM_F_CREATE should be set when creating new route [ 168.794441][ T9444] IPv6: NLM_F_CREATE should be set when creating new route [ 168.818974][ T9447] xt_NFQUEUE: number of total queues is 0 [ 168.830666][ T9444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.888942][ T9447] xt_hashlimit: size too large, truncated to 1048576 [ 169.060915][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.223757][ T48] syz_tun: tun_net_xmit 86 [ 169.375933][ T9476] syzkaller0: entered promiscuous mode [ 169.390041][ T9476] syzkaller0: entered allmulticast mode [ 169.502019][ T9485] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 169.538920][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.549539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.580725][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.667273][ T9487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.677924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.698925][ T9487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.709797][ T9487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.729491][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.747912][ T9487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.987'. [ 169.841062][ T9510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.993'. [ 169.853404][ T9505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.991'. [ 170.102029][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.143068][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 170.270571][ C0] syz_tun: tun_net_xmit 86 [ 170.566311][ T9548] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 170.578539][ T9548] netlink: 'syz.0.1007': attribute type 7 has an invalid length. [ 170.592925][ T9548] netlink: 'syz.0.1007': attribute type 8 has an invalid length. [ 170.602090][ T9548] NCSI netlink: No device for ifindex 65584 [ 170.879353][ T9566] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 170.938000][ T9566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.026046][ T9566] gretap1: entered promiscuous mode [ 171.037547][ T9566] bond3: (slave gretap1): making interface the new active one [ 171.046938][ T9566] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 171.056556][ T9577] syzkaller0: entered promiscuous mode [ 171.074560][ T42] IPVS: starting estimator thread 0... [ 171.089246][ T9577] syzkaller0: entered allmulticast mode [ 171.205954][ T9585] IPVS: using max 25 ests per chain, 60000 per kthread [ 171.300500][ C0] syz_tun: tun_net_xmit 86 [ 171.598880][ T9622] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 171.724934][ T9622] bond5: entered promiscuous mode [ 171.738323][ T9622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.777526][ T9639] bond5: entered allmulticast mode [ 171.791379][ T9641] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 171.836869][ T9622] syzkaller0: entered promiscuous mode [ 171.855124][ T9622] syzkaller0: entered allmulticast mode [ 171.885106][ T9646] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 171.898010][ T9646] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 172.059554][ T9653] netlink: 'syz.0.1034': attribute type 4 has an invalid length. [ 172.086855][ T9661] batadv_slave_1: entered allmulticast mode [ 172.109442][ T9661] batadv_slave_1: left allmulticast mode [ 172.274132][ T9674] xt_hashlimit: size too large, truncated to 1048576 [ 172.319629][ T9677] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.337007][ T9679] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 172.601787][ T9692] netlink: 'syz.1.1046': attribute type 24 has an invalid length. [ 172.758802][ T9697] "syz.3.1047" (9697) uses obsolete ecb(arc4) skcipher [ 172.977316][ T9707] sctp: [Deprecated]: syz.3.1049 (pid 9707) Use of int in maxseg socket option. [ 172.977316][ T9707] Use struct sctp_assoc_value instead [ 173.002988][ C0] syz_tun: tun_net_xmit 86 [ 173.610874][ T9727] __nla_validate_parse: 47 callbacks suppressed [ 173.610893][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 173.874729][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'. [ 174.020518][ C0] syz_tun: tun_net_xmit 86 [ 174.089444][ T9757] pim6reg: entered allmulticast mode [ 174.134092][ T9759] dvmrp0: entered allmulticast mode [ 174.147664][ T9766] net_ratelimit: 6 callbacks suppressed [ 174.147684][ T9766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.213590][ T9761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1066'. [ 174.260930][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.468483][ T9777] netlink: 'syz.1.1071': attribute type 2 has an invalid length. [ 174.503516][ T9784] veth0: entered promiscuous mode [ 174.656803][ T9799] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 174.735364][ T9780] veth0: left promiscuous mode [ 174.751551][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.836995][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1077'. [ 174.842995][ T9805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1077'. [ 174.933798][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 175.060502][ C0] syz_tun: tun_net_xmit 86 [ 175.301222][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.408474][ T9831] netlink: 'syz.2.1086': attribute type 4 has an invalid length. [ 175.532639][ T9841] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1090'. [ 175.625082][ T9845] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1091'. [ 175.702744][ T9848] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1092'. [ 175.904647][ T9860] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 175.921211][ T9860] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 175.959082][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 175.983732][ T9861] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 175.994725][ T9861] netlink: 'syz.3.1094': attribute type 2 has an invalid length. [ 176.217462][ T9875] team_slave_1: entered promiscuous mode [ 176.227692][ T9875] vlan2: entered promiscuous mode [ 176.341696][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.356285][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.552239][ T9896] veth1_to_bond: entered allmulticast mode [ 176.562049][ T9896] veth1_to_bond: left allmulticast mode [ 176.567778][ T9897] bridge_slave_1: left allmulticast mode [ 176.591502][ T9897] bridge_slave_1: left promiscuous mode [ 176.604537][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.626879][ T9897] bridge_slave_0: left allmulticast mode [ 176.633480][ T9897] bridge_slave_0: left promiscuous mode [ 176.641839][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.772606][ T9910] tipc: Enabled bearer , priority 0 [ 176.785986][ T9911] syzkaller0: entered promiscuous mode [ 176.794133][ T9911] syzkaller0: entered allmulticast mode [ 176.803407][ T9911] tipc: Resetting bearer [ 176.907266][ T9917] tipc: Started in network mode [ 176.932516][ T9917] tipc: Node identity e0000001, cluster identity 4711 [ 176.960687][ T9917] tipc: Enabling of bearer rejected, failed to enable media [ 177.004093][ T9923] netlink: 'syz.4.1113': attribute type 75 has an invalid length. [ 177.310917][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.346648][ T9955] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 177.374578][ T9952] syzkaller0: entered promiscuous mode [ 177.383277][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.396301][ T9952] syzkaller0: entered allmulticast mode [ 177.497724][ T9958] netlink: 'syz.0.1122': attribute type 10 has an invalid length. [ 177.521506][ T9958] team0: entered allmulticast mode [ 177.532078][ T9958] team_slave_0: entered allmulticast mode [ 177.539273][ T9958] team_slave_1: entered allmulticast mode [ 177.546068][ T9958] geneve1: entered allmulticast mode [ 177.553073][ T9958] bridge0: port 3(team0) entered blocking state [ 177.586034][ T9958] bridge0: port 3(team0) entered disabled state [ 177.614132][ T9958] team0: entered promiscuous mode [ 177.631608][ T9958] team_slave_0: entered promiscuous mode [ 177.650962][ T9958] team_slave_1: entered promiscuous mode [ 177.657051][ T9958] geneve1: entered promiscuous mode [ 177.662365][ T9968] ipt_REJECT: TCP_RESET invalid for non-tcp [ 177.671797][ T9963] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 [ 177.694203][ T9968] sit0: entered promiscuous mode [ 177.708182][ T9966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.725420][ T9968] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 177.739156][ T9966] syzkaller1: entered promiscuous mode [ 177.759160][ T9966] syzkaller1: entered allmulticast mode [ 177.781331][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.862634][ T9972] netlink: 'syz.1.1128': attribute type 4 has an invalid length. [ 177.889972][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.976789][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.996544][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.005174][ T9986] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 178.006719][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.098802][ T9992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.143650][ T9998] netlink: 'syz.4.1134': attribute type 11 has an invalid length. [ 178.315795][T10004] nbd: nbd64 already in use [ 178.422102][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.613660][T10023] syzkaller0: entered promiscuous mode [ 178.619154][T10023] syzkaller0: entered allmulticast mode [ 178.899528][T10037] __nla_validate_parse: 15 callbacks suppressed [ 178.899550][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 179.091816][T10044] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1149'. [ 179.199864][T10048] xt_hashlimit: size too large, truncated to 1048576 [ 179.311146][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1154'. [ 179.418184][T10065] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1155'. [ 179.432476][T10064] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1156'. [ 179.462380][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.470025][T10064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1156'. [ 179.668384][T10077] openvswitch: netlink: Flow actions attr not present in new flow. [ 179.671211][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 179.740557][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 179.762654][T10074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 179.814167][T10081] bond6: (slave macvlan2): Opening slave failed [ 179.864342][T10093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.873837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.895355][T10083] tipc: Resetting bearer [ 179.946856][T10095] syzkaller1: entered promiscuous mode [ 179.957548][T10095] syzkaller1: entered allmulticast mode [ 179.983942][T10083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1163'. [ 180.079354][T10082] tipc: Resetting bearer [ 180.087674][T10102] xt_hashlimit: size too large, truncated to 1048576 [ 180.177310][T10111] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.208190][T10111] SET target dimension over the limit! [ 180.502444][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.537450][T10131] ip6t_srh: unknown srh match flags 4000 [ 180.822337][ C0] syz_tun: tun_net_xmit 86 [ 180.830013][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.916433][T10153] netlink: 'syz.4.1181': attribute type 7 has an invalid length. [ 180.954124][T10153] netlink: 'syz.4.1181': attribute type 7 has an invalid length. [ 180.954405][ T676] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 180.985480][ T5955] tipc: Resetting bearer [ 180.991938][ T676] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 181.010234][ T676] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 181.046628][ T676] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 181.096586][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 181.198570][T10170] xt_policy: too many policy elements [ 181.234774][T10170] validate_nla: 1 callbacks suppressed [ 181.234792][T10170] netlink: 'syz.1.1186': attribute type 2 has an invalid length. [ 181.532313][T10193] ipvlan2: entered allmulticast mode [ 181.537788][T10193] batadv_slave_1: entered allmulticast mode [ 181.544515][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.559802][T10193] batman_adv: batadv0: Adding interface: ipvlan2 [ 181.571401][T10193] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 181.592122][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.604476][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.614954][T10193] batman_adv: batadv0: Interface activated: ipvlan2 [ 181.860551][ C0] syz_tun: tun_net_xmit 86 [ 182.103618][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.217770][T10235] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.527190][T10255] bond0: (slave bond_slave_0): Releasing backup interface [ 182.581636][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.646535][T10269] netlink: 'syz.0.1219': attribute type 1 has an invalid length. [ 182.900635][ C0] syz_tun: tun_net_xmit 86 [ 183.047766][T10287] tipc: Enabling of bearer rejected, failed to enable media [ 183.195437][T10295] nbd: must specify at least one socket [ 184.072030][ T25] block nbd1: Possible stuck request ffff8880270e5080: control (read@0,1024B). Runtime 30 seconds [ 184.086893][ T25] block nbd1: Possible stuck request ffff8880270e5240: control (read@1024,1024B). Runtime 30 seconds [ 184.098257][ T25] block nbd1: Possible stuck request ffff8880270e5400: control (read@2048,1024B). Runtime 30 seconds [ 184.111168][ T25] block nbd1: Possible stuck request ffff8880270e55c0: control (read@3072,1024B). Runtime 30 seconds [ 184.533723][T10333] nbd2: detected capacity change from 0 to 63 [ 184.569426][T10341] __nla_validate_parse: 13 callbacks suppressed [ 184.569438][T10341] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1237'. [ 184.617612][ T5636] block nbd2: Receive control failed (result -104) [ 184.621148][T10359] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1245'. [ 184.625153][ T4941] block nbd2: Receive control failed (result -32) [ 184.664954][ T5357] net_ratelimit: 2 callbacks suppressed [ 184.664972][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.824857][ T676] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 184.863731][T10379] netlink: 'syz.1.1250': attribute type 39 has an invalid length. [ 184.870079][T10380] netlink: 'syz.1.1250': attribute type 39 has an invalid length. [ 184.926049][T10362] syzkaller0: entered promiscuous mode [ 184.936933][T10362] syzkaller0: entered allmulticast mode [ 185.315188][T10399] netlink: 'syz.1.1255': attribute type 8 has an invalid length. [ 185.374985][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 185.430599][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 185.445757][T10411] syz_tun: tun_net_xmit 86 [ 185.588229][T10420] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 185.692334][T10429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.711469][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.722172][T10429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.741007][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 185.875845][T10444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1268'. [ 185.951687][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.998264][T10448] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 186.034355][T10448] bond4 (unregistering): Released all slaves [ 186.249916][T10464] gre1: entered promiscuous mode [ 186.278619][T10464] gre1: entered allmulticast mode [ 186.374005][T10473] netlink: 'syz.0.1275': attribute type 1 has an invalid length. [ 186.500522][ C0] syz_tun: tun_net_xmit 86 [ 186.552839][T10484] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1277'. [ 186.582745][T10484] xt_nat: multiple ranges no longer supported [ 186.656823][T10492] syzkaller0: entered promiscuous mode [ 186.683535][T10492] syzkaller0: entered allmulticast mode [ 186.743643][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.910981][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.932952][T10507] gre0: entered promiscuous mode [ 186.937999][T10507] gre0: entered allmulticast mode [ 187.041749][T10521] lo: entered allmulticast mode [ 187.222767][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.274000][T10540] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1289'. [ 187.309254][T10540] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1289'. [ 187.456825][T10551] netlink: 'syz.1.1294': attribute type 26 has an invalid length. [ 187.477601][T10554] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 187.477975][T10552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'. [ 187.494119][T10554] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 187.501287][T10554] syzkaller1: Refused to change device type [ 187.550588][ C0] syz_tun: tun_net_xmit 86 [ 187.722856][T10563] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 187.787342][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.843465][T10572] tipc: Resetting bearer [ 187.898806][T10570] tipc: Resetting bearer [ 187.978339][T10586] syz_tun: tun_net_xmit 54 [ 188.021165][T10584] sctp: [Deprecated]: syz.3.1305 (pid 10584) Use of int in max_burst socket option. [ 188.021165][T10584] Use struct sctp_assoc_value instead [ 188.067736][T10578] syzkaller0: entered promiscuous mode [ 188.090222][T10578] syzkaller0: entered allmulticast mode [ 188.475352][ T5955] tipc: Resetting bearer [ 188.735506][T10625] syzkaller0: entered promiscuous mode [ 188.744363][T10625] syzkaller0: entered allmulticast mode [ 188.821000][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.043794][T10648] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 189.075843][T10648] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 189.247424][T10664] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 189.275264][ T187] IPVS: starting estimator thread 0... [ 189.380999][T10670] IPVS: using max 35 ests per chain, 84000 per kthread [ 189.411450][T10673] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 189.861055][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.941044][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.294901][T10713] tipc: Resetting bearer [ 190.347881][T10713] tipc: Resetting bearer [ 190.502365][T10730] gre0: entered promiscuous mode [ 190.512893][T10730] gre0: entered allmulticast mode [ 190.526166][ T133] tipc: Resetting bearer [ 190.901839][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.941174][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.389570][T10673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.667786][T10829] netlink: 'syz.1.1348': attribute type 2 has an invalid length. [ 192.752787][T10835] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 192.773809][T10833] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 192.828991][T10833] bond6: entered promiscuous mode [ 192.835155][T10833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.927741][T10857] netlink: 'syz.0.1353': attribute type 3 has an invalid length. [ 192.983061][T10860] __nla_validate_parse: 16 callbacks suppressed [ 192.983079][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1355'. [ 192.986567][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 193.401913][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 193.468099][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 193.565633][T10896] bridge3: entered promiscuous mode [ 193.584032][T10896] bridge3: entered allmulticast mode [ 193.586452][T10901] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 193.594893][T10896] team0: Port device bridge3 added [ 193.615349][T10901] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 193.795432][T10916] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 193.866666][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 193.876764][T10920] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1370'. [ 193.879240][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'. [ 193.929789][T10916] bond4: entered promiscuous mode [ 193.939363][T10916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.947946][T10923] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 193.958397][T10923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.999770][T10925] syz_tun: tun_net_xmit 86 [ 194.038451][T10916] bond4: (slave bridge4): making interface the new active one [ 194.049721][T10916] bridge4: entered promiscuous mode [ 194.057346][T10916] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 194.066460][T10918] bond4: entered allmulticast mode [ 194.073423][T10918] bridge4: entered allmulticast mode [ 194.231906][T10938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'. [ 194.271988][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.278467][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.368279][T10945] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 194.434186][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 194.485786][T10950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1378'. [ 194.799241][T10974] syz_tun: tun_net_xmit 86 [ 194.901291][ C0] syz_tun: tun_net_xmit 86 [ 195.060515][ C0] syz_tun: tun_net_xmit 86 [ 195.175042][T10992] netlink: 'syz.4.1389': attribute type 10 has an invalid length. [ 195.192621][T10993] netlink: 'syz.4.1389': attribute type 10 has an invalid length. [ 195.815656][T10990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.854019][T10990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.870629][ C0] syz_tun: tun_net_xmit 86 [ 195.940537][ C0] syz_tun: tun_net_xmit 86 [ 196.100627][ C0] syz_tun: tun_net_xmit 86 [ 196.227415][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.240070][T10992] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 196.390651][T11007] netlink: 'syz.1.1393': attribute type 4 has an invalid length. [ 196.402100][T11028] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 196.443234][T11016] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 196.452100][ T3298] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.471501][ T3298] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.498318][ T5734] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 196.518083][ T3298] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.537618][ T3298] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.900531][ C0] syz_tun: tun_net_xmit 86 [ 196.980633][ C0] syz_tun: tun_net_xmit 86 [ 197.026490][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 197.077158][T11080] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 197.096353][T11081] geneve4: entered promiscuous mode [ 197.382520][T11097] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 197.394149][T11094] TCP: TCP_TX_DELAY enabled [ 197.448846][T11097] erspan2: entered allmulticast mode [ 197.755584][T11116] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 197.768143][T11087] x_tables: unsorted entry at hook 1 [ 197.773835][T11119] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 197.943127][T11127] xt_TCPMSS: Only works on TCP SYN packets [ 197.961830][T11130] xt_TCPMSS: Only works on TCP SYN packets [ 197.964788][T11129] macvlan0: entered promiscuous mode [ 198.095337][T11139] tipc: Resetting bearer [ 198.195990][T11138] tipc: Resetting bearer [ 198.480050][T11165] __nla_validate_parse: 20 callbacks suppressed [ 198.480067][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 198.528561][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1433'. [ 198.542171][T11167] netlink: 11452 bytes leftover after parsing attributes in process `syz.0.1434'. [ 198.552126][T11165] gtp0: entered promiscuous mode [ 198.557582][T11165] gtp0: entered allmulticast mode [ 198.564928][T11168] netlink: 11452 bytes leftover after parsing attributes in process `syz.0.1434'. [ 198.580118][ T5955] tipc: Resetting bearer [ 201.377367][T11157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.467615][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.468034][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 201.474519][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 201.488878][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 201.685959][T11203] Cannot find del_set index 4 as target [ 201.863146][T11219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1448'. [ 201.932544][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 202.732378][T11286] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 202.811761][T11286] bond3: (slave geneve2): making interface the new active one [ 202.823109][T11286] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 202.838173][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 202.866347][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 202.878784][T11289] netlink: 'syz.4.1464': attribute type 10 has an invalid length. [ 202.883263][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 202.896514][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 202.904582][T11291] netlink: 'syz.1.1465': attribute type 10 has an invalid length. [ 202.979289][T11296] 8021q: VLANs not supported on lo [ 203.003599][T11298] netlink: 'syz.3.1467': attribute type 9 has an invalid length. [ 203.194143][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 203.234572][T11315] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1471'. [ 204.014080][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 206.419961][T11326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.983101][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 207.129063][T11408] bond7: entered promiscuous mode [ 207.174278][T11408] bond7: entered allmulticast mode [ 207.181525][T11410] netlink: 'syz.3.1495': attribute type 13 has an invalid length. [ 207.211905][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 207.285086][ T5955] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.302282][T11410] netlink: 'syz.3.1495': attribute type 13 has an invalid length. [ 207.323172][ T5955] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.363115][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 207.372808][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.392861][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.449634][T11421] syzkaller0: entered promiscuous mode [ 207.468805][T11421] syzkaller0: entered allmulticast mode [ 207.492148][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 207.610236][T11425] netlink: 'syz.4.1499': attribute type 17 has an invalid length. [ 207.616285][T11423] netlink: 'syz.4.1499': attribute type 17 has an invalid length. [ 207.724590][T11433] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 207.758850][T11433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1503'. [ 208.170458][T11449] xt_l2tp: invalid flags combination: 0 [ 208.219204][T11455] tipc: Resetting bearer [ 208.396917][T11455] syzkaller0: left promiscuous mode [ 208.417615][T11455] syzkaller0: left allmulticast mode [ 208.602260][T11451] tipc: Resetting bearer [ 208.753285][T11474] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1515'. [ 208.977390][T11484] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 209.101201][T11486] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 209.155881][T11490] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 209.173378][ T5955] tipc: Resetting bearer [ 209.191652][T11493] ipt_REJECT: TCP_RESET invalid for non-tcp [ 209.495256][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 209.548618][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1526'. [ 209.557953][T11510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1528'. [ 209.688907][T11514] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1530'. [ 210.593919][T11553] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1541'. [ 210.653779][T11554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1539'. [ 210.664723][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 210.716897][T11554] netlink: 'syz.4.1539': attribute type 7 has an invalid length. [ 210.772131][T11554] netlink: 'syz.4.1539': attribute type 8 has an invalid length. [ 210.788113][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1543'. [ 210.809241][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 210.937632][T11565] netlink: 'syz.3.1544': attribute type 4 has an invalid length. [ 211.071974][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1546'. [ 211.112814][T11571] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1546'. [ 211.799813][T11608] x_tables: duplicate underflow at hook 3 [ 211.952523][T11620] xt_hashlimit: size too large, truncated to 1048576 [ 211.996352][T11622] netlink: 'syz.4.1565': attribute type 10 has an invalid length. [ 212.489155][T11644] netlink: 'syz.0.1571': attribute type 9 has an invalid length. [ 212.882204][T11666] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 213.078111][T11666] bond5: entered promiscuous mode [ 213.114471][T11666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.179523][T11674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.191438][T11674] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 213.222482][T11674] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 213.243500][T11674] bond5: (slave ip6gre2): making interface the new active one [ 213.254234][T11674] ip6gre2: entered promiscuous mode [ 213.262429][T11674] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 213.295439][T11689] syz_tun: tun_net_xmit 86 [ 213.705621][T11705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 213.800206][T11713] syzkaller0: entered promiscuous mode [ 213.808375][T11713] syzkaller0: entered allmulticast mode [ 213.906545][T11720] openvswitch: netlink: Missing key (keys=40, expected=100) [ 214.112023][ T25] block nbd1: Possible stuck request ffff8880270e5080: control (read@0,1024B). Runtime 60 seconds [ 214.124462][ T25] block nbd1: Possible stuck request ffff8880270e5240: control (read@1024,1024B). Runtime 60 seconds [ 214.136454][ T25] block nbd1: Possible stuck request ffff8880270e5400: control (read@2048,1024B). Runtime 60 seconds [ 214.162022][ T25] block nbd1: Possible stuck request ffff8880270e55c0: control (read@3072,1024B). Runtime 60 seconds [ 214.222518][T11735] pim6reg: entered allmulticast mode [ 214.278176][T11737] bridge0: left promiscuous mode [ 214.305933][T11735] netlink: 'syz.0.1594': attribute type 7 has an invalid length. [ 214.317568][T11737] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.329303][T11735] netlink: 'syz.0.1594': attribute type 8 has an invalid length. [ 214.340491][ C1] syz_tun: tun_net_xmit 86 [ 214.352383][T11737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.380224][T11737] macvlan0: left promiscuous mode [ 214.423874][T11737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.435241][T11737] geneve2: left promiscuous mode [ 214.485994][T11737] bond6: left promiscuous mode [ 214.493623][T11728] pim6reg: left allmulticast mode [ 214.552068][T11735] bridge0: entered promiscuous mode [ 214.559918][T11735] ip6gretap0: entered promiscuous mode [ 214.568307][T11735] bridge0: left promiscuous mode [ 214.575886][T11735] ip6gretap0: left promiscuous mode [ 214.604072][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.625748][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.685982][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.716917][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.754430][ C0] syz_tun: tun_net_xmit 86 [ 214.767872][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 214.777881][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 214.785742][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 214.794448][ T1648] block nbd2: Dead connection, failed to find a fallback [ 214.802225][T11755] __nla_validate_parse: 5 callbacks suppressed [ 214.802242][T11755] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1602'. [ 214.833153][ T1648] block nbd2: shutting down sockets [ 214.840134][ T1648] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.855970][ T1648] Buffer I/O error on dev nbd2, logical block 1, async page read [ 214.864819][ T1648] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.875261][ T1648] Buffer I/O error on dev nbd2, logical block 0, async page read [ 214.878521][T11761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1601'. [ 214.883978][ T1648] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 214.902774][ T1648] Buffer I/O error on dev nbd2, logical block 2, async page read [ 214.912039][ T1648] Buffer I/O error on dev nbd2, logical block 3, async page read [ 214.923448][ T1648] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 214.934406][ T1648] Buffer I/O error on dev nbd2, logical block 0, async page read [ 214.939942][T11764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1601'. [ 214.946065][ T1648] Buffer I/O error on dev nbd2, logical block 1, async page read [ 214.962211][ T1648] Buffer I/O error on dev nbd2, logical block 2, async page read [ 214.970063][ T1648] Buffer I/O error on dev nbd2, logical block 3, async page read [ 214.986622][ T1723] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.996278][ T1723] Buffer I/O error on dev nbd2, logical block 0, async page read [ 215.000079][ T1648] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.017550][ T1648] Buffer I/O error on dev nbd2, logical block 1, async page read [ 215.029475][ T1648] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.039658][ T1648] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.051942][ T1648] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.062226][ T1648] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.074049][ T8835] ldm_validate_partition_table(): Disk read failed. [ 215.084646][ T8835] Dev nbd2: unable to read RDB block 0 [ 215.098601][ T8835] nbd2: unable to read partition table [ 215.124330][ T8835] ldm_validate_partition_table(): Disk read failed. [ 215.133895][ T8835] Dev nbd2: unable to read RDB block 0 [ 215.149502][ T8835] nbd2: unable to read partition table [ 215.357773][T11775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.380546][ C1] syz_tun: tun_net_xmit 86 [ 215.546403][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.562625][T11786] batadv_slave_1: entered promiscuous mode [ 215.694186][T11795] netlink: 'syz.2.1615': attribute type 6 has an invalid length. [ 215.780502][ C0] syz_tun: tun_net_xmit 86 [ 215.897294][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 215.920590][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 215.953308][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 216.019011][T11820] tipc: Enabling of bearer rejected, failed to enable media [ 216.058418][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1621'. [ 216.066197][T11824] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1622'. [ 216.251917][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'. [ 216.347839][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 216.598217][T11869] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.633416][T11865] sctp: [Deprecated]: syz.4.1634 (pid 11865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.633416][T11865] Use struct sctp_sack_info instead [ 216.776401][T11875] syz_tun: tun_net_xmit 86 [ 216.793543][T11875] syz_tun: tun_net_xmit 86 [ 216.820558][ C0] syz_tun: tun_net_xmit 86 [ 217.467958][T11896] gre0: left promiscuous mode [ 217.493853][T11896] gre0: left allmulticast mode [ 217.506136][T11896] sit0: left promiscuous mode [ 217.529652][T11904] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 217.536922][T11896] gtp0: left promiscuous mode [ 217.544327][T11896] gtp0: left allmulticast mode [ 217.566786][T11898] syzkaller0: entered promiscuous mode [ 217.581388][T11898] syzkaller0: entered allmulticast mode [ 217.612986][T11904] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 217.657232][ T975] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.675092][ T975] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 217.692183][ T975] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.703703][ T975] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 217.764591][ T975] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.777455][ T975] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 217.790487][ C0] syz_tun: tun_net_xmit 86 [ 217.791655][ T975] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.796143][ T975] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 217.861871][ C0] syz_tun: tun_net_xmit 86 [ 218.162682][T11932] netlink: 'syz.4.1654': attribute type 4 has an invalid length. [ 218.198730][T11939] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 218.209712][T11939] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.217807][T11939] gretap2: entered promiscuous mode [ 218.223487][T11939] gretap2: entered allmulticast mode [ 218.820795][ C0] syz_tun: tun_net_xmit 86 [ 218.900547][ C0] syz_tun: tun_net_xmit 86 [ 221.285926][T11942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.478111][T11978] netlink: 'syz.4.1664': attribute type 25 has an invalid length. [ 221.639427][T11998] __nla_validate_parse: 8 callbacks suppressed [ 221.639446][T11998] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1669'. [ 221.943097][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1672'. [ 222.077751][T12026] erspan0: left promiscuous mode [ 222.093081][T12026] erspan0: entered allmulticast mode [ 222.164288][T12022] netlink: 'syz.0.1675': attribute type 2 has an invalid length. [ 222.261459][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1680'. [ 222.291713][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1680'. [ 222.302225][T12038] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 222.403519][T12046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1681'. [ 222.771036][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1689'. [ 223.472186][T12113] nbd: must specify an index to disconnect [ 223.914740][T12143] siw: device registration error -23 [ 224.035609][T12151] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.104677][T12148] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 224.295770][T12148] bond6 (unregistering): Released all slaves [ 224.341255][ C0] syz_tun: tun_net_xmit 86 [ 224.657219][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 224.692036][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 224.726570][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 224.784213][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 225.234926][T12213] bond8: option all_slaves_active: invalid value (222) [ 225.248248][T12213] bond8 (unregistering): Released all slaves [ 225.271782][T12225] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 225.333366][T12216] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 225.351512][T12216] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.359534][T12216] gretap2: entered promiscuous mode [ 225.368086][T12216] gretap2: entered allmulticast mode [ 225.387851][ C0] syz_tun: tun_net_xmit 86 [ 225.533688][T12241] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 225.585072][T12241] bond5: entered promiscuous mode [ 225.598905][T12241] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.633048][T12241] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.640074][T12241] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 225.651036][T12241] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 225.665994][T12241] bond5: (slave vti0): making interface the new active one [ 225.673637][T12241] vti0: entered promiscuous mode [ 225.679655][T12241] bond5: (slave vti0): Enslaving as an active interface with an up link [ 225.811838][T12252] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 226.265379][T12278] tipc: Resetting bearer [ 226.283441][T12278] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 226.332277][T12278] syzkaller0: entered promiscuous mode [ 226.345109][T12278] syzkaller0: entered allmulticast mode [ 226.356144][T12278] tipc: Resetting bearer [ 226.390785][T12275] tipc: Resetting bearer [ 226.420499][ C0] syz_tun: tun_net_xmit 86 [ 226.428932][ T12] tipc: Resetting bearer [ 226.505808][T12285] 8021q: adding VLAN 0 to HW filter on device bond8 [ 226.713019][T12312] __nla_validate_parse: 12 callbacks suppressed [ 226.713040][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 226.808316][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 226.834557][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 226.849722][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1751'. [ 226.862495][T12303] syzkaller0: left promiscuous mode [ 226.867854][T12303] syzkaller0: left allmulticast mode [ 226.874091][T12303] tipc: Resetting bearer [ 226.883898][T12303] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.432115][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'. [ 227.466816][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'. [ 227.501281][T12359] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 227.598552][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1768'. [ 227.625435][T12372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1770'. [ 227.650710][T12359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.832249][T12386] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 227.840690][T12386] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 227.869357][T12386] tipc: Enabling of bearer rejected, already enabled [ 227.983153][T12392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1776'. [ 227.999214][T12400] netlink: 'syz.2.1778': attribute type 19 has an invalid length. [ 228.009768][T12392] unsupported nlmsg_type 40 [ 228.021458][T12399] netlink: 'syz.2.1778': attribute type 19 has an invalid length. [ 228.150665][T12404] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1780'. [ 228.837234][T12436] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 228.976226][T12460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.007640][T12458] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 229.175281][T12472] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.189034][T12470] erspan0: left allmulticast mode [ 229.584775][T12470] veth1_to_bridge: left allmulticast mode [ 229.838219][T12470] ip6gretap1: left promiscuous mode [ 229.844046][T12470] ip6gretap1: left allmulticast mode [ 229.852694][T12470] bond1: left promiscuous mode [ 229.868269][T12470] bond3: left promiscuous mode [ 229.893109][T12470] bond5: left promiscuous mode [ 229.899811][T12470] bond5: left allmulticast mode [ 229.956683][T12470] gre1: left promiscuous mode [ 229.964207][T12470] gre1: left allmulticast mode [ 230.065505][T12470] bond7: left promiscuous mode [ 230.070572][T12470] bond7: left allmulticast mode [ 230.164690][ T3298] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.198906][ T3298] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.214196][T12504] xt_socket: unknown flags 0x50 [ 230.230111][ T3298] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.261515][ T3298] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.287122][ T3298] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.310848][ T3298] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.355070][ T3298] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.386552][ T3298] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.407348][T12511] tipc: Resetting bearer [ 230.542489][T12508] tipc: Resetting bearer [ 230.611223][T12535] veth1_to_bond: entered allmulticast mode [ 230.621163][T12535] veth1_to_bond: left allmulticast mode [ 230.662237][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 230.791839][T12541] sit1: entered promiscuous mode [ 230.811069][T12541] sit1: entered allmulticast mode [ 230.900117][T12550] netlink: 'syz.4.1821': attribute type 1 has an invalid length. [ 231.064816][T12555] syzkaller0: entered promiscuous mode [ 231.074321][T12555] syzkaller0: entered allmulticast mode [ 231.173888][ T3298] tipc: Resetting bearer [ 231.198951][T12564] netlink: 'syz.2.1827': attribute type 10 has an invalid length. [ 231.242265][T12564] team0: entered allmulticast mode [ 231.270212][T12564] team_slave_0: entered allmulticast mode [ 231.288705][T12564] team_slave_1: entered allmulticast mode [ 231.311098][T12564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 231.316071][T12571] raw_sendmsg: syz.0.1830 forgot to set AF_INET. Fix it! [ 231.496409][T12579] siw: device registration error -23 [ 231.809577][T12594] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 231.822722][T12594] bond6 (unregistering): Released all slaves [ 231.924779][T12603] __nla_validate_parse: 16 callbacks suppressed [ 231.924800][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'. [ 232.384358][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1840'. [ 232.548584][T12642] xt_TCPMSS: Only works on TCP SYN packets [ 232.726685][T12653] netlink: 'syz.2.1844': attribute type 2 has an invalid length. [ 232.755126][T12653] : entered promiscuous mode [ 232.796598][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 233.459674][T12696] 8021q: adding VLAN 0 to HW filter on device bond9 [ 233.654223][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1861'. [ 233.785743][T12727] xt_hashlimit: size too large, truncated to 1048576 [ 233.800824][T12726] xt_hashlimit: size too large, truncated to 1048576 [ 233.819316][T12679] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 233.842214][T12729] xt_ecn: cannot match TCP bits for non-tcp packets [ 233.889091][T12729] netlink: 'syz.0.1865': attribute type 1 has an invalid length. [ 233.956969][T12737] Bluetooth: MGMT ver 1.23 [ 234.320230][T12759] sctp: [Deprecated]: syz.1.1875 (pid 12759) Use of int in max_burst socket option deprecated. [ 234.320230][T12759] Use struct sctp_assoc_value instead [ 234.375056][T12751] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1872'. [ 234.389754][T12761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1874'. [ 234.508705][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1877'. [ 234.524100][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 234.546888][T12769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1879'. [ 234.652785][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 234.738073][T12769] syzkaller0: entered promiscuous mode [ 234.745262][T12769] syzkaller0: entered allmulticast mode [ 234.763293][T12769] simple: basic_1 [ 234.891680][T12790] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.074116][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.356248][T12814] tipc: Enabled bearer , priority 0 [ 235.469880][T12814] syzkaller0: entered promiscuous mode [ 235.476409][T12814] syzkaller0: entered allmulticast mode [ 235.483560][T12814] tipc: Resetting bearer [ 235.724806][T12835] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 237.567494][T12810] tipc: Resetting bearer [ 237.622241][T12810] tipc: Disabling bearer [ 237.767475][T12855] IPVS: set_ctl: invalid protocol: 34 100.1.1.2:20002 [ 237.800188][T12855] 8021q: VLANs not supported on ip_vti0 [ 237.879166][T12851] __nla_validate_parse: 2 callbacks suppressed [ 237.879182][T12851] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1900'. [ 238.249372][T12890] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1911'. [ 238.249514][T12888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1910'. [ 238.259561][T12890] openvswitch: netlink: Message has 512 unknown bytes. [ 238.582654][T12483] IPVS: starting estimator thread 0... [ 238.680798][T12905] IPVS: using max 35 ests per chain, 84000 per kthread [ 238.854036][T12924] xt_hashlimit: size too large, truncated to 1048576 [ 238.905489][T12926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1920'. [ 239.306193][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b665000: rx timeout, send abort [ 239.315078][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b665000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 239.635600][T12919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.845698][T12965] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1931'. [ 239.949838][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 240.195368][T12987] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 240.208659][T12974] hsr_slave_1 (unregistering): left promiscuous mode [ 240.235097][T12987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.242376][T12990] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 240.253652][T12987] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 240.475221][T13007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.716329][T13026] nbd: must specify at least one socket [ 240.748032][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1946'. [ 240.769856][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1946'. [ 240.845325][T13028] syzkaller1: entered promiscuous mode [ 240.885520][T13028] syzkaller1: entered allmulticast mode [ 240.899860][T13038] tipc: Enabling of bearer rejected, failed to enable media [ 241.007812][T13038] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1949'. [ 241.304203][ T4941] block nbd3: Receive control failed (result -107) [ 241.331014][T13038] nbd3: detected capacity change from 0 to 63 [ 241.351111][ T50] block nbd3: Receive control failed (result -104) [ 241.367290][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 241.543488][T13074] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 244.182513][ T1648] block nbd1: Possible stuck request ffff8880270e5080: control (read@0,1024B). Runtime 90 seconds [ 244.193834][ T1648] block nbd1: Possible stuck request ffff8880270e5240: control (read@1024,1024B). Runtime 90 seconds [ 244.205454][ T1648] block nbd1: Possible stuck request ffff8880270e5400: control (read@2048,1024B). Runtime 90 seconds [ 244.216913][ T1648] block nbd1: Possible stuck request ffff8880270e55c0: control (read@3072,1024B). Runtime 90 seconds [ 244.631045][ T4991] udevd[4991]: worker [5632] /devices/virtual/block/nbd1 is taking a long time [ 255.701888][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.947003][T13092] __nla_validate_parse: 2 callbacks suppressed [ 263.947022][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 263.982317][T13081] bond6: option resend_igmp: invalid value (32767) [ 263.989522][T13081] bond6: option resend_igmp: allowed values 0 - 255 [ 264.003273][T13081] bond6 (unregistering): Released all slaves [ 264.047919][T13093] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 264.204373][T13093] bond10: entered promiscuous mode [ 264.211186][T13093] 8021q: adding VLAN 0 to HW filter on device bond10 [ 264.299589][T13093] bond10: (slave bridge4): making interface the new active one [ 264.312700][T13093] bridge4: entered promiscuous mode [ 264.322486][T13093] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 264.341066][T13108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1967'. [ 264.371140][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1967'. [ 264.505741][T13126] Set syz1 is full, maxelem 65536 reached [ 264.515137][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 264.582794][T13083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1963'. [ 264.708576][T13137] nftables ruleset with unbound chain [ 264.720212][T13137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1974'. [ 264.808840][T13141] xt_cluster: node mask cannot exceed total number of nodes [ 265.120957][T13162] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1982'. [ 265.271481][T13171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1983'. [ 265.285581][T13172] veth0_to_bond: entered allmulticast mode [ 265.402267][T13178] netlink: 'syz.2.1986': attribute type 39 has an invalid length. [ 265.441234][T13178] hsr_slave_0: left promiscuous mode [ 265.463846][T13178] hsr_slave_1: left promiscuous mode [ 265.615493][T13186] netlink: 'syz.0.1989': attribute type 49 has an invalid length. [ 265.722387][T13197] sock: sock_set_timeout: `syz.2.1992' (pid 13197) tries to set negative timeout [ 265.749193][T13186] ip6gretap0: entered promiscuous mode [ 265.769370][T13186] ip6gretap0: entered allmulticast mode [ 266.028339][T13206] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1995'. [ 266.207010][T13218] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2000'. [ 266.236416][T13220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.263175][T13223] openvswitch: netlink: IP tunnel TTL not specified. [ 266.277249][T13223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.323754][T13219] syzkaller0: entered promiscuous mode [ 266.348517][T13219] syzkaller0: entered allmulticast mode [ 266.562473][T13244] batadv_slave_1: entered allmulticast mode [ 266.578017][ T5286] veth0_vlan: left promiscuous mode [ 266.618945][ T5850] veth0_vlan: entered promiscuous mode [ 267.030995][T13219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.127530][T13243] batadv_slave_1: left allmulticast mode [ 267.322632][T13274] netlink: 'syz.1.2010': attribute type 9 has an invalid length. [ 267.593620][T13290] netlink: 'syz.3.2013': attribute type 11 has an invalid length. [ 267.674941][T13295] 0ªX¹¦Dö»: left allmulticast mode [ 267.762019][ T5955] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 267.817145][T13308] bridge7: entered promiscuous mode [ 267.827463][T13308] bridge7: entered allmulticast mode [ 268.119192][T13331] openvswitch: netlink: IP tunnel dst address not specified [ 268.245365][T13335] syzkaller0: entered promiscuous mode [ 268.265540][T13335] syzkaller0: entered allmulticast mode [ 268.759098][T13383] x_tables: duplicate underflow at hook 1 [ 268.900643][ T5955] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 269.206326][T13407] __nla_validate_parse: 3 callbacks suppressed [ 269.206345][T13407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2038'. [ 269.362675][T13426] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048) [ 269.398131][T13426] geneve3: entered promiscuous mode [ 269.408576][T13426] geneve3: entered allmulticast mode [ 269.419650][ T5955] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 269.456976][ T5955] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 269.507344][ T5955] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 269.555784][ T5955] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 269.737643][ T133] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 269.791174][T13449] netlink: 632 bytes leftover after parsing attributes in process `syz.3.2048'. [ 269.807837][T13450] netlink: 632 bytes leftover after parsing attributes in process `syz.3.2048'. [ 270.329836][T13489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.429595][T13496] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 270.553224][T13496] 8021q: adding VLAN 0 to HW filter on device bond11 [ 270.649124][ T57] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 270.957078][T13532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2066'. [ 271.058984][T13541] block nbd2: reconnected socket [ 271.082141][T13541] block nbd2: reconnected socket [ 271.195676][ T4941] block nbd2: Receive control failed (result -32) [ 271.195676][ T50] block nbd2: Receive control failed (result -32) [ 271.454799][T13563] netlink: 'syz.2.2071': attribute type 4 has an invalid length. [ 271.612655][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 271.704468][ T1723] block nbd3: Connection timed out, retrying (0/2 alive) [ 271.712290][ T1723] block nbd3: Connection timed out, retrying (0/2 alive) [ 271.721089][ T1723] block nbd3: Connection timed out, retrying (0/2 alive) [ 271.728277][ T10] block nbd3: Dead connection, failed to find a fallback [ 271.736481][ T10] block nbd3: shutting down sockets [ 271.743378][ T1723] block nbd3: Connection timed out, retrying (0/2 alive) [ 271.750721][ T10] blk_print_req_error: 134 callbacks suppressed [ 271.750737][ T10] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.767400][ T10] buffer_io_error: 138 callbacks suppressed [ 271.767417][ T10] Buffer I/O error on dev nbd3, logical block 1, async page read [ 271.782760][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.793520][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 271.801691][ T10] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.811743][ T10] Buffer I/O error on dev nbd3, logical block 3, async page read [ 271.819534][ T10] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.829137][ T10] Buffer I/O error on dev nbd3, logical block 2, async page read [ 271.837560][T13587] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.846929][T13587] Buffer I/O error on dev nbd3, logical block 0, async page read [ 271.854963][T13587] Buffer I/O error on dev nbd3, logical block 1, async page read [ 271.866198][T13587] Buffer I/O error on dev nbd3, logical block 2, async page read [ 271.874154][T13587] Buffer I/O error on dev nbd3, logical block 3, async page read [ 271.882320][T13587] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.891854][T13587] Buffer I/O error on dev nbd3, logical block 0, async page read [ 271.899740][T13587] Buffer I/O error on dev nbd3, logical block 1, async page read [ 271.908016][T13587] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.917637][T13587] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 271.927403][T13587] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.936931][T13587] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 271.949379][ T5642] ldm_validate_partition_table(): Disk read failed. [ 271.966485][ T5642] Dev nbd3: unable to read RDB block 0 [ 271.983702][ T5642] nbd3: unable to read partition table [ 272.071808][ T5642] ldm_validate_partition_table(): Disk read failed. [ 272.117521][ T5642] Dev nbd3: unable to read RDB block 0 [ 272.121102][ T133] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 272.153025][ T5642] nbd3: unable to read partition table [ 272.258170][T13608] netlink: 768 bytes leftover after parsing attributes in process `syz.1.2079'. [ 272.268913][T13609] netlink: 768 bytes leftover after parsing attributes in process `syz.1.2079'. [ 272.373112][T13617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2080'. [ 272.497518][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 272.506837][T13623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.553936][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 273.067327][ T57] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 273.597982][T13697] tipc: Resetting bearer [ 273.675553][T13695] tipc: Resetting bearer [ 274.263714][ T1648] block nbd1: Possible stuck request ffff8880270e5080: control (read@0,1024B). Runtime 120 seconds [ 274.274858][ T1648] block nbd1: Possible stuck request ffff8880270e5240: control (read@1024,1024B). Runtime 120 seconds [ 274.286411][ T1648] block nbd1: Possible stuck request ffff8880270e5400: control (read@2048,1024B). Runtime 120 seconds [ 274.297855][ T1648] block nbd1: Possible stuck request ffff8880270e55c0: control (read@3072,1024B). Runtime 120 seconds [ 274.494222][T13755] __nla_validate_parse: 4 callbacks suppressed [ 274.494240][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2111'. [ 274.774445][ T5955] tipc: Resetting bearer [ 274.785448][T13755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.853656][T13755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.872135][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.888253][T13761] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 275.082628][T13772] tipc: Resetting bearer [ 275.206157][T13772] tipc: Resetting bearer [ 275.608034][T13811] netlink: 'syz.2.2130': attribute type 2 has an invalid length. [ 275.631409][T13811] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2130'. [ 275.682568][T13811] netlink: 'syz.2.2130': attribute type 2 has an invalid length. [ 275.694466][T13811] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2130'. [ 275.788870][ T12] tipc: Resetting bearer [ 275.839064][T13821] x_tables: duplicate underflow at hook 3 [ 275.845115][T13831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2135'. [ 277.002312][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2146'. [ 277.048496][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2146'. [ 277.430649][T13902] tipc: Resetting bearer [ 277.572424][T13901] tipc: Resetting bearer [ 277.632878][T13913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2157'. [ 277.699195][T13904] IPVS: set_ctl: invalid protocol: 64977 100.1.1.2:20004 [ 277.717107][T13917] netlink: 'syz.2.2160': attribute type 2 has an invalid length. [ 277.719605][T13919] veth1_to_bond: entered allmulticast mode [ 277.776983][T13924] netlink: 'syz.0.2158': attribute type 12 has an invalid length. [ 277.785793][T13924] netlink: 'syz.0.2158': attribute type 29 has an invalid length. [ 277.796627][T13924] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2158'. [ 277.845547][T13927] netlink: 'syz.4.2161': attribute type 2 has an invalid length. [ 277.853997][T13927] netlink: 'syz.4.2161': attribute type 1 has an invalid length. [ 277.888756][T13927] netlink: 'syz.4.2161': attribute type 49 has an invalid length. [ 278.028073][T13919] veth1_to_bond: left allmulticast mode [ 278.170149][T13933] xt_cluster: node mask cannot exceed total number of nodes [ 278.247983][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 278.336561][T13940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.359536][T13940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.409269][T13940] bond0: (slave batadv0): Releasing backup interface [ 278.515799][ T133] tipc: Resetting bearer [ 278.703732][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 278.729568][T13971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.755826][T13971] netlink: 'syz.2.2175': attribute type 15 has an invalid length. [ 278.783328][ T133] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 278.783421][T13971] netlink: 'syz.2.2175': attribute type 15 has an invalid length. [ 278.807746][ T133] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 278.828821][ T133] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 279.958833][T13979] [ 279.961192][T13979] ====================================================== [ 279.968193][T13979] WARNING: possible circular locking dependency detected [ 279.975205][T13979] syzkaller #0 Not tainted [ 279.979604][T13979] ------------------------------------------------------ [ 279.986607][T13979] syz.0.2177/13979 is trying to acquire lock: [ 279.992658][T13979] ffffffff8ea84680 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 280.001892][T13979] [ 280.001892][T13979] but task is already holding lock: [ 280.009247][T13979] ffffffff8ea5eb20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 280.018819][T13979] [ 280.018819][T13979] which lock already depends on the new lock. [ 280.018819][T13979] [ 280.029225][T13979] [ 280.029225][T13979] the existing dependency chain (in reverse order) is: [ 280.038228][T13979] [ 280.038228][T13979] -> #7 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 280.045957][T13979] __mutex_lock+0x19d/0x1550 [ 280.051063][T13979] pcpu_alloc_noprof+0x231/0x1900 [ 280.056611][T13979] smpcfd_prepare_cpu+0xce/0x120 [ 280.062062][T13979] cpuhp_invoke_callback+0x434/0x810 [ 280.067862][T13979] _cpu_up+0x2ce/0x5b0 [ 280.072459][T13979] cpu_up+0x1d2/0x220 [ 280.076964][T13979] cpuhp_bringup_mask+0xb2/0x1a0 [ 280.082517][T13979] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 280.088852][T13979] bringup_nonboot_cpus+0x17/0x30 [ 280.094397][T13979] smp_init+0x32/0x110 [ 280.098988][T13979] kernel_init_freeable+0x27f/0x3e0 [ 280.104700][T13979] kernel_init+0x1d/0x1d0 [ 280.109559][T13979] ret_from_fork+0x514/0xb70 [ 280.114656][T13979] ret_from_fork_asm+0x1a/0x30 [ 280.121045][T13979] [ 280.121045][T13979] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 280.128781][T13979] cpus_read_lock+0x42/0x160 [ 280.133900][T13979] static_key_slow_inc+0x12/0x30 [ 280.139357][T13979] nbd_genl_reconfigure+0x1301/0x1e80 [ 280.145259][T13979] genl_family_rcv_msg_doit+0x233/0x340 [ 280.151723][T13979] genl_rcv_msg+0x614/0x7a0 [ 280.156762][T13979] netlink_rcv_skb+0x226/0x4a0 [ 280.162052][T13979] genl_rcv+0x28/0x40 [ 280.166560][T13979] netlink_unicast+0x7bb/0x940 [ 280.171835][T13979] netlink_sendmsg+0x813/0xb40 [ 280.177137][T13979] sock_sendmsg_nosec+0x13a/0x180 [ 280.182693][T13979] ____sys_sendmsg+0x54e/0x850 [ 280.187972][T13979] ___sys_sendmsg+0x2a5/0x360 [ 280.193184][T13979] __x64_sys_sendmsg+0x1b1/0x290 [ 280.198634][T13979] do_syscall_64+0x174/0x580 [ 280.203735][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.210142][T13979] [ 280.210142][T13979] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 280.217792][T13979] __mutex_lock+0x19d/0x1550 [ 280.222891][T13979] nbd_queue_rq+0x373/0x1150 [ 280.227988][T13979] blk_mq_dispatch_rq_list+0x499/0x1990 [ 280.234051][T13979] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 280.240889][T13979] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 280.247377][T13979] blk_mq_run_work_fn+0x16c/0x300 [ 280.252914][T13979] process_scheduled_works+0xa8e/0x14e0 [ 280.258973][T13979] worker_thread+0xa47/0xfb0 [ 280.264091][T13979] kthread+0x388/0x470 [ 280.268689][T13979] ret_from_fork+0x514/0xb70 [ 280.273791][T13979] ret_from_fork_asm+0x1a/0x30 [ 280.279075][T13979] [ 280.279075][T13979] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 280.286311][T13979] __mutex_lock+0x19d/0x1550 [ 280.291421][T13979] nbd_queue_rq+0xc1/0x1150 [ 280.296440][T13979] blk_mq_dispatch_rq_list+0x499/0x1990 [ 280.302501][T13979] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 280.309341][T13979] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 280.315830][T13979] blk_mq_run_work_fn+0x16c/0x300 [ 280.321376][T13979] process_scheduled_works+0xa8e/0x14e0 [ 280.327453][T13979] worker_thread+0xa47/0xfb0 [ 280.332565][T13979] kthread+0x388/0x470 [ 280.337148][T13979] ret_from_fork+0x514/0xb70 [ 280.342252][T13979] ret_from_fork_asm+0x1a/0x30 [ 280.347529][T13979] [ 280.347529][T13979] -> #3 (set->srcu){.+.+}-{0:0}: [ 280.354648][T13979] __synchronize_srcu+0xc9/0x2f0 [ 280.360100][T13979] elevator_switch+0x1e8/0x7b0 [ 280.365384][T13979] elevator_change+0x2fa/0x480 [ 280.370671][T13979] elevator_set_default+0x375/0x440 [ 280.376413][T13979] blk_register_queue+0x3f3/0x4e0 [ 280.381967][T13979] __add_disk+0x6cb/0xe30 [ 280.386821][T13979] add_disk_fwnode+0xfb/0x4b0 [ 280.392005][T13979] nbd_dev_add+0x733/0xb60 [ 280.396929][T13979] nbd_init+0x15f/0x1e0 [ 280.401588][T13979] do_one_initcall+0x250/0x870 [ 280.406863][T13979] do_initcall_level+0x10a/0x1a0 [ 280.412318][T13979] do_initcalls+0x59/0xa0 [ 280.417157][T13979] kernel_init_freeable+0x29d/0x3e0 [ 280.422866][T13979] kernel_init+0x1d/0x1d0 [ 280.427706][T13979] ret_from_fork+0x514/0xb70 [ 280.432805][T13979] ret_from_fork_asm+0x1a/0x30 [ 280.438082][T13979] [ 280.438082][T13979] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 280.445890][T13979] __mutex_lock+0x19d/0x1550 [ 280.450989][T13979] elevator_change+0x1af/0x480 [ 280.456287][T13979] elevator_set_none+0xb5/0x140 [ 280.461673][T13979] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 280.468086][T13979] nbd_start_device+0x189/0xb30 [ 280.473455][T13979] nbd_genl_connect+0x1597/0x1c10 [ 280.479080][T13979] genl_family_rcv_msg_doit+0x233/0x340 [ 280.485141][T13979] genl_rcv_msg+0x614/0x7a0 [ 280.490172][T13979] netlink_rcv_skb+0x226/0x4a0 [ 280.495441][T13979] genl_rcv+0x28/0x40 [ 280.499932][T13979] netlink_unicast+0x7bb/0x940 [ 280.505199][T13979] netlink_sendmsg+0x813/0xb40 [ 280.510474][T13979] sock_sendmsg_nosec+0x13a/0x180 [ 280.516018][T13979] ____sys_sendmsg+0x54e/0x850 [ 280.521298][T13979] ___sys_sendmsg+0x2a5/0x360 [ 280.526482][T13979] __x64_sys_sendmsg+0x1b1/0x290 [ 280.532019][T13979] do_syscall_64+0x174/0x580 [ 280.537125][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.543528][T13979] [ 280.543528][T13979] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 280.552125][T13979] blk_alloc_queue+0x544/0x690 [ 280.557407][T13979] __blk_mq_alloc_disk+0x194/0x390 [ 280.563029][T13979] nbd_dev_add+0x494/0xb60 [ 280.567954][T13979] nbd_init+0x15f/0x1e0 [ 280.572615][T13979] do_one_initcall+0x250/0x870 [ 280.577889][T13979] do_initcall_level+0x10a/0x1a0 [ 280.583337][T13979] do_initcalls+0x59/0xa0 [ 280.588197][T13979] kernel_init_freeable+0x29d/0x3e0 [ 280.593928][T13979] kernel_init+0x1d/0x1d0 [ 280.598772][T13979] ret_from_fork+0x514/0xb70 [ 280.603872][T13979] ret_from_fork_asm+0x1a/0x30 [ 280.609149][T13979] [ 280.609149][T13979] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 280.616351][T13979] __lock_acquire+0x1520/0x2cf0 [ 280.621712][T13979] lock_acquire+0x106/0x350 [ 280.626721][T13979] fs_reclaim_acquire+0x71/0x100 [ 280.632164][T13979] prepare_alloc_pages+0x15b/0x650 [ 280.637780][T13979] __alloc_frozen_pages_noprof+0x12f/0x380 [ 280.644090][T13979] __alloc_pages_noprof+0x10/0x100 [ 280.649838][T13979] pcpu_populate_chunk+0x181/0xb30 [ 280.655550][T13979] pcpu_alloc_noprof+0xbca/0x1900 [ 280.661091][T13979] br_vlan_add+0x24f/0x1060 [ 280.666116][T13979] __vlan_add+0x46b/0x29e0 [ 280.671043][T13979] nbp_vlan_add+0x27c/0xb20 [ 280.676151][T13979] br_vlan_info+0x100/0x470 [ 280.681166][T13979] br_process_vlan_info+0x61f/0x8b0 [ 280.686874][T13979] br_afspec+0x3a5/0x600 [ 280.691624][T13979] br_setlink+0x34f/0x830 [ 280.696463][T13979] rtnl_bridge_setlink+0x5b6/0x7e0 [ 280.702080][T13979] rtnetlink_rcv_msg+0x7b9/0xc00 [ 280.707542][T13979] netlink_rcv_skb+0x226/0x4a0 [ 280.712813][T13979] netlink_unicast+0x7bb/0x940 [ 280.718087][T13979] netlink_sendmsg+0x813/0xb40 [ 280.723373][T13979] sock_sendmsg_nosec+0x13a/0x180 [ 280.728906][T13979] ____sys_sendmsg+0x54e/0x850 [ 280.734178][T13979] ___sys_sendmsg+0x2a5/0x360 [ 280.739366][T13979] __x64_sys_sendmsg+0x1b1/0x290 [ 280.744824][T13979] do_syscall_64+0x174/0x580 [ 280.749920][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.756337][T13979] [ 280.756337][T13979] other info that might help us debug this: [ 280.756337][T13979] [ 280.766652][T13979] Chain exists of: [ 280.766652][T13979] fs_reclaim --> cpu_hotplug_lock --> pcpu_alloc_mutex [ 280.766652][T13979] [ 280.779439][T13979] Possible unsafe locking scenario: [ 280.779439][T13979] [ 280.786937][T13979] CPU0 CPU1 [ 280.792326][T13979] ---- ---- [ 280.797674][T13979] lock(pcpu_alloc_mutex); [ 280.802169][T13979] lock(cpu_hotplug_lock); [ 280.809182][T13979] lock(pcpu_alloc_mutex); [ 280.816193][T13979] lock(fs_reclaim); [ 280.820167][T13979] [ 280.820167][T13979] *** DEADLOCK *** [ 280.820167][T13979] [ 280.828295][T13979] 2 locks held by syz.0.2177/13979: [ 280.833488][T13979] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 280.843002][T13979] #1: ffffffff8ea5eb20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 280.853021][T13979] [ 280.853021][T13979] stack backtrace: [ 280.858928][T13979] CPU: 1 UID: 0 PID: 13979 Comm: syz.0.2177 Not tainted syzkaller #0 PREEMPT(full) [ 280.858962][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.858984][T13979] Call Trace: [ 280.858998][T13979] [ 280.859006][T13979] dump_stack_lvl+0xe8/0x150 [ 280.859026][T13979] print_circular_bug+0x2e1/0x300 [ 280.859048][T13979] check_noncircular+0x12e/0x150 [ 280.859068][T13979] __lock_acquire+0x1520/0x2cf0 [ 280.859084][T13979] ? is_bpf_text_address+0x292/0x2b0 [ 280.859100][T13979] ? is_bpf_text_address+0x26/0x2b0 [ 280.859116][T13979] ? kernel_text_address+0xa5/0xe0 [ 280.859135][T13979] ? __lock_acquire+0x683/0x2cf0 [ 280.859152][T13979] ? prepare_alloc_pages+0x15b/0x650 [ 280.859165][T13979] lock_acquire+0x106/0x350 [ 280.859180][T13979] ? prepare_alloc_pages+0x15b/0x650 [ 280.859195][T13979] ? stack_trace_save+0xa9/0x100 [ 280.859217][T13979] ? __pfx_stack_trace_save+0x10/0x10 [ 280.859240][T13979] fs_reclaim_acquire+0x71/0x100 [ 280.859254][T13979] ? prepare_alloc_pages+0x15b/0x650 [ 280.859267][T13979] prepare_alloc_pages+0x15b/0x650 [ 280.859284][T13979] __alloc_frozen_pages_noprof+0x12f/0x380 [ 280.859302][T13979] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 280.859320][T13979] ? pcpu_chunk_refresh_hint+0x80a/0x950 [ 280.859338][T13979] __alloc_pages_noprof+0x10/0x100 [ 280.859358][T13979] pcpu_populate_chunk+0x181/0xb30 [ 280.859382][T13979] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.859404][T13979] pcpu_alloc_noprof+0xbca/0x1900 [ 280.859431][T13979] br_vlan_add+0x24f/0x1060 [ 280.859453][T13979] __vlan_add+0x46b/0x29e0 [ 280.859472][T13979] ? __kasan_kmalloc+0x93/0xb0 [ 280.859488][T13979] ? __kmalloc_cache_noprof+0x32d/0x660 [ 280.859512][T13979] ? __kmalloc_cache_noprof+0x150/0x660 [ 280.859533][T13979] ? nbp_vlan_add+0x22a/0xb20 [ 280.859551][T13979] ? nbp_vlan_add+0x22a/0xb20 [ 280.859572][T13979] nbp_vlan_add+0x27c/0xb20 [ 280.859594][T13979] br_vlan_info+0x100/0x470 [ 280.859614][T13979] ? __pfx_br_vlan_info+0x10/0x10 [ 280.859636][T13979] br_process_vlan_info+0x61f/0x8b0 [ 280.859657][T13979] ? __pfx_br_process_vlan_info+0x10/0x10 [ 280.859676][T13979] ? __lock_acquire+0x683/0x2cf0 [ 280.859693][T13979] br_afspec+0x3a5/0x600 [ 280.859710][T13979] ? __lock_acquire+0x683/0x2cf0 [ 280.859728][T13979] ? __pfx_br_afspec+0x10/0x10 [ 280.859750][T13979] br_setlink+0x34f/0x830 [ 280.859769][T13979] ? __pfx_br_setlink+0x10/0x10 [ 280.859798][T13979] ? __kernel_text_address+0xd/0x30 [ 280.859815][T13979] ? unwind_get_return_address+0x4d/0x90 [ 280.859834][T13979] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 280.859856][T13979] ? arch_stack_walk+0xfb/0x150 [ 280.859876][T13979] ? mutex_is_locked+0x17/0x50 [ 280.859893][T13979] rtnl_bridge_setlink+0x5b6/0x7e0 [ 280.859912][T13979] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 280.859929][T13979] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 280.859944][T13979] rtnetlink_rcv_msg+0x7b9/0xc00 [ 280.859965][T13979] ? netlink_sendmsg+0x5d4/0xb40 [ 280.859983][T13979] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 280.860011][T13979] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.860034][T13979] ? __lock_acquire+0x683/0x2cf0 [ 280.860052][T13979] netlink_rcv_skb+0x226/0x4a0 [ 280.860068][T13979] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.860090][T13979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.860110][T13979] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.860126][T13979] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.860143][T13979] netlink_unicast+0x7bb/0x940 [ 280.860161][T13979] netlink_sendmsg+0x813/0xb40 [ 280.860180][T13979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.860198][T13979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.860217][T13979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.860233][T13979] sock_sendmsg_nosec+0x13a/0x180 [ 280.860255][T13979] ____sys_sendmsg+0x54e/0x850 [ 280.860274][T13979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.860296][T13979] ? import_iovec+0x73/0xa0 [ 280.860316][T13979] ___sys_sendmsg+0x2a5/0x360 [ 280.860335][T13979] ? __lock_acquire+0x683/0x2cf0 [ 280.860355][T13979] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.860377][T13979] ? futex_wait+0x2a2/0x390 [ 280.860415][T13979] ? __fget_files+0x2a/0x420 [ 280.860433][T13979] ? __fget_files+0x3a2/0x420 [ 280.860455][T13979] __x64_sys_sendmsg+0x1b1/0x290 [ 280.860476][T13979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.860503][T13979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.860523][T13979] do_syscall_64+0x174/0x580 [ 280.860541][T13979] ? trace_irq_disable+0x3b/0x140 [ 280.860558][T13979] ? clear_bhb_loop+0x40/0x90 [ 280.860577][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.860593][T13979] RIP: 0033:0x7f2a3a79de59 [ 280.860614][T13979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.860627][T13979] RSP: 002b:00007f2a3b71c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.860645][T13979] RAX: ffffffffffffffda RBX: 00007f2a3aa26090 RCX: 00007f2a3a79de59 [ 280.860656][T13979] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 280.860666][T13979] RBP: 00007f2a3a833e6f R08: 0000000000000000 R09: 0000000000000000 [ 280.860675][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.860685][T13979] R13: 00007f2a3aa26128 R14: 00007f2a3aa26090 R15: 00007ffc76396978 [ 280.860701][T13979] [ 281.541645][T13987] vlan0: mtu greater than device maximum