last executing test programs: 5.252906827s ago: executing program 3 (id=2368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x2c020080) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r1, &(0x7f0000000000)={0x11, 0x8, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macsec0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0xfdc3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) socket$inet_sctp(0x2, 0x1, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x8b4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x880, 0x2, [@TCA_MATCHALL_ACT={0x87c, 0x2, [@m_police={0x878, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x101, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x8, 0x1ff, 0xc063, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xefffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x4, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7ffffffe, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x7fffffff, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x6000, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x9, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0xf5, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42b7, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0x10d2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x12, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x6, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x5, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x1, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x6, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x1, 0x21ce8330, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x5, 0x6, '\x00'}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.605823582s ago: executing program 3 (id=2377): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe4e}, 0x1, 0x0, 0x0, 0xc800}, 0x80051) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x27, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x41145}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x8000) 3.755163431s ago: executing program 3 (id=2385): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x6, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x2e}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5b}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.40720576s ago: executing program 1 (id=2392): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'nq\x00', 0x2e, 0x5, 0x72}, 0x2c) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r1, 0x8008b705, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0270000000000000380012800b0001006272696467650000280002800c00230002060000000000000500250000000000050024000000000005002a"], 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) gettid() r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.405229799s ago: executing program 3 (id=2393): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x0) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000000c0)=0x4, 0x4) close(r4) socket(0x10, 0x809, 0x8) 3.158748436s ago: executing program 2 (id=2396): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x30]}}, 0x0, 0x1c, 0x0, 0x9, 0x7}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) r0 = socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xfffffffa}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r3, 0x1, 0x4}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2000000038750500140003006e657464657673696d3000000000000034001680300001802c000c801400"], 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x8804) 3.006920348s ago: executing program 4 (id=2397): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000025c0)={'erspan0\x00', &(0x7f0000002540)={'syztnl0\x00', 0x0, 0x40, 0x4e7ab993a8834bf4, 0x10000, 0xffffffff, {{0xc, 0x4, 0x3, 0xc, 0x30, 0x65, 0x0, 0x10, 0x4, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp_prespec={0x44, 0x1c, 0x68, 0x3, 0x7, [{@empty, 0x5}, {@empty}, {@rand_addr=0x64010102, 0x9}]}]}}}}}) sendmmsg$sock(r0, &(0x7f0000003880)=[{{&(0x7f00000005c0)=@nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000640)="dd53481c1ef87931c7af1120c7fec8de53a96ba80d4662dd11e4358dd85cf8dea037290640edc62ec17d54811879265b913b515f2b240367f3c5eb5f5dc730956348d62308450fce12bf1eb4f0b74b614ecc2a2de88450c8e407b9b1bdada0693a0aecf094025abb846845c65f9c086c5f64f87f26b831a97eb1944adfb4c663b89e626001db120027c4aa2c47d5d33e48860b0b6a976cdc7a", 0x99}, {&(0x7f0000000700)="56226c43e02fcb2e95e35c25b377d91c140fdafe9185c723afa59146e83473114caae99f08691ad9b319cde761f0b59b522f04c1cb9313a6318d25495477fe3790fcc6acbcc294be1962811a897398c3228db4be06f3fe769c2de5d5580356d0fd2ebc4ca847227a7ca213de1af777d013ca1b4d3c3da8bf8751943fdc9d0e0d44bb016d8f0db29666390ac55385b24f36b6c6a9f40dbcb0321e57dcb82a4748f7d3443648dcf5f6a51275db3aff4a8d6f61b6dadf29b38cd4143daac7cd729103a2d264a2fbbc9deba95c3931a5ab168bd92a1f0de0d62ee94b", 0xda}, {&(0x7f0000000800)="231394f2ababb42b9aeb606fe963554bb2c5d72aba754774611fd694ab8f226e1d8326a08195c79ec05c2cc396c2514b0eda44eb2250efc2623e0b106a7482b0b31718f329a2c5a0fc8cb6e7c26b66279b059b82a12959dee3106c2b2d019f6012a077b3a853b33497b03f772d64c9c34ed8fa77", 0x74}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="b11a671788c8a0a769ab38a19321b0c22fb414e19a5f6fa0f137691c", 0x1c}, {&(0x7f0000000900)="ddd4d1a8a78a5b7e584adae3895a8cf30d361b3585de0b51f0664713", 0x1c}, {&(0x7f0000000940)="3bfb23a497eff8c9d6a921ba2b4d690d6570cd5a4c69e29b0046aada441ae2b64fa8ac868f2387efd7efc02d7cfa942d2746d1854e46055ad8ed3a90cb80250d0da4c9e34e866d1e6633837384b7cb5737e7161cb079ef21c8a42c0e18063cef7cf916847350561b3712239f5b4fd8904b84271ca4", 0x75}, {&(0x7f00000009c0)="8cd273ddebe2e394c9ee45b0145fa75805c098f18b8b8afaae53d20d6a25f9ebf67a76b5fc96012a997cb26e186ce917bce5e4504905e1f7404311483e2e29640b3fe84d87e79c3a40a21bd7e409df7383282f1de3ab7bc77503b194778dca00a2bdbc7885373319e9d371d4455bcaced281ed9b2109259a92f690ee9f8f087b111aaa79dea455ed9f993ec4407ed9550a8980620ec085da09fa158625b2786b6199cbae6fea545c0cdc0dfb3f22c2e5f1d044d89690c32ad8ca254f9a6d3d7e66a8028a48c937d1d5e6cd22198d23a268e632f592380f33bfa30a03ee13daf2d1", 0xe1}, {&(0x7f0000000ac0)="392dacd814e71a34738d321969119bff534f4f19e4729f29fa4e8a5665c5828455352f0243d7593c594e416f531ed516b05084df5067d9ee0c", 0x39}, {&(0x7f0000000b00)="031b4b711cab996bd0dd3c1d3b0e991cff8b6d2260b0c19b15f9ec9cd16eb89cdd94109fc5907a421717d7bdd8609c46e731df69e34e855d976c66b2993555ee4dc714516dd36ddd0581141b09", 0x4d}], 0xa, &(0x7f0000000c40)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}, {{&(0x7f0000000cc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)="ef3ef01b1b88ce53cd92d9ec9edf116c280a41272e0400e8fda56a5af7ba157c9dae7b1912cb450450020b051f3b9021dcda813285e208aef5c709e008ad9ccdf724c8bcd7b182e613a2552bde0c0103a7f7997492ce2e46beabad4b2fe348a2f2e6dcb09bf2719687a33b1149e142669e5528326013ebe01a36059fc191f92e4c813d624626f2fe7fea635748155da7835ea81a5d8dafa097d65e92831a4b28757a6cf880868fcf29e702d052e7f9ec972a3062c02b9986289da03d952c", 0xbe}], 0x1, &(0x7f0000000e40)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x76}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x78}}, {{&(0x7f0000000ec0)=@ethernet={0x306}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f40)="8f7e4002e534f98e70ad7b1c7571ad570dd4a12ac33f4bb8be4d94a672274cbc4760ec18a3fb5a03d6553a69cd1a8fbab7f575087dc5505d21e393786ce05ea84f8c0967ae1dd6cf43ca3b841bf4d89110d67da7a854b3727e29b71a619bd6989b3b5dff9fd9d6812b618b6890f5c51dd04281814da4fd12313c064385b74644696e546b513e4a67a1e080dc0047ee56dc8289603a1903a4ec8270de60dd69e6e0939b8a00a40a49b03ac7b6bb393e16387635a6001100908341d9a6091d358e1d393b506c3eaeeac0c9fdd5c016b76c1b6c79ca449973", 0xd7}, {&(0x7f0000001040)="d578b685af355677ae787eefb5318489a11ea1649d207b8cca79ea9648ed72bf1ccfa633b625cb29c8a38d9176fa57d64b76639ef96ef5cb8dda1ee5bf66b0d15e3cb88b6a99f4df4259c7a0d35b5784de0ee88a3f24791fc1895f8b2c3a6cb9a3c0c76587f66c512bcaf6cb8d64ae8fb60056716172c4588647e5c6d888b45e1513b4c09494c55082000c7cc2b70143a49f230c9af9578b7a4d1abb62a4d4f8f464552ed5d789f94dc3a97ba8fdfb2ee2709e7d725bc1071ccf8464098f6bf2e28be11f827f78b95c0a93c0fc0b52e1497abe698a05b3d7b86446d7558c2fc4dc1de19a454019e06ece1a93e0", 0xed}, {&(0x7f0000001140)="ec87f238017e30101f180008301f80486d39e70af8f9d3bac2a1fda4ad5e3c4623da177816a863a3f8ecdac415a72f03730476e97afac7feea73934824f78e0995", 0x41}], 0x3, &(0x7f0000001200)=[@mark={{0x14, 0x1, 0x24, 0xa}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001240)="4e47b585f25b8cf5bd3cdf1158ecd96efe794eb8e8f9e107cc4976a107c74622ffd4b0c872a0b19a03b378e73c06b780850f1241a4707e91b925a4b147048c87841c8849f1f1055b6c7bde544936307a8b846118a268667a45405834800595ea17c66fc8e25944a31d4875be38fa0e62c17fe5e88dcdff01cb88f9d8cae18ea64e50fc26c1e7cb6ecbed5b334d5aa676fe80bab09255f560045f46337b340afbab159502264110d7583d1d5881eeba2d6c13a7b816839b62bb7317a611", 0xbd}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="e6a5a94f1f36fe4c1a0ec92d7c0856dae932ff1c6734f07a46fa6a253696c159db8bcd70e6b7c7d2da6b1bc28d5f72396a3e9b0f55fdd980ed0c98357f39e9afc8c50429cc044c3b4d4a7ba96115b0384df618f3c57eca0d8b5917c6d20fe30b5e5187f91b85005117321ac29e5fac894c7de6ca940007c23120973741", 0x7d}, {&(0x7f0000002380)="c69079fcf6648262abe9bc27bb21f8a6", 0x10}, {&(0x7f00000023c0)="9ee49776dec2314ebcf7cf61bcb4fa8cae0f40a8063157334c21513d6e3d798751883fc9952ab1ad2758d7c4de506a7a5c36533736d49c67490bccde770bb94b1700b3e79a788b", 0x47}], 0x5, &(0x7f00000024c0)=[@timestamping={{0x14, 0x1, 0x25, 0x4c3c}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x679}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xbdc0}}], 0x78}}, {{&(0x7f0000002600)=@ll={0x11, 0xf8, r2, 0x1, 0x9, 0x6, @remote}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002680)="1cab384f671e6584e326e40619e0ae03d2feba48bc1d6c2ff4c98e3d715b86cd82b14bead4821313af58ef87cfdd3d39cbd46a92616c2928ec0077ac0dd89ef003148ec684bcac293b0716dbc1f27e504b7a1bf7d663", 0x56}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="02835c4401dc56f6ea123d3198584f6748bc279bc7b9f22881cdd1f89bb05aa8b73b3c8ce5f9d3bfb1e50dc27800230fdf81865d8fe7021c649018ff3f7ff455362b4b43b94dfeae004a1ef0f0b3c2ac2d78e5fc752b3fcaa121bc5035a90d9eb9df5802701f531d7ec7d943cc5b9c9a0016a01afcf64850dd4d49f2f7e11b0c5adc6e79b9284d767110b74272f23839861c706bfde7e9c389335d33ec5e0f995eae46970dbbbc752b6df9aa6688367f82b4018ef5044b9342e9115d002e08ac", 0xc0}], 0x3, &(0x7f0000003800)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x48}}], 0x5, 0x20000005) 2.94235381s ago: executing program 2 (id=2398): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x10e, 0x0, &(0x7f0000000600)="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", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000200)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000240)="94", 0x1) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r4, 0x0, &(0x7f0000000400)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0xb3, 0x4) getsockopt$inet_opts(r7, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish-asm)\x00'}, 0x58) r8 = socket(0x1d, 0x800, 0x0) shutdown(r8, 0x2) unshare(0x2c020400) shutdown(r8, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x6, &(0x7f0000000900)=ANY=[@ANYRES16, @ANYRES32=r9, @ANYBLOB="000000850000001b0000009600"/24], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) 2.816979039s ago: executing program 4 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000100)=""/139, &(0x7f00000001c0)=0x8b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.63849225s ago: executing program 2 (id=2400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0xffffffffffffff7e}, 0x1, 0x0, 0x0, 0xc001801}, 0x8000) 2.565163913s ago: executing program 2 (id=2401): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x1}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)="109f1fe3e5d24fb7", 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x1407, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4014) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b"], 0x28}}, 0x4040) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r7) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c4}, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) 2.350290094s ago: executing program 4 (id=2403): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x71) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x34, 0x0, &(0x7f0000000500)) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x8, 0x10000000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000800)="e3bc03a46f04", 0x6}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x2, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0xb, 0x0, [@private=0xa010101, @private=0xa010101]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0xfc, 0x0}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x7f}]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'caif0\x00', @random="0200ac7f7f00"}) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f00000005c0)={{[0xd, 0x6, 0x3, 0x7ff]}, 0x0, 0x2, 0x240000, 0x0, &(0x7f0000000540)=[{{@_ha_fsid={[0x7]}, {0x5, 0x7, 0x2, 0xd085}}, 0x3, 0x0, 'caif0\x00'}, {{@_ha_fsid={[0xe27, 0x10001]}, {0x8, 0x8, 0x735, 0x5}}, 0x7, 0x0, '/M,.\x00'}, {{@_ha_fsid={[0x8, 0x4]}, {0xf6b8, 0x7, 0x4000000, 0xffffffffffff8000}}, 0x5d8, 0x0, 'vcan0\x00'}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, 0x0, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f00000000c0)={0x6, 'veth0_to_bridge\x00', {0x7}, 0x400}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000007000000060000000000001010000000000000000200000d0000000004000000030000000d00000003000000000000000000000300000000010000000300000004010000005f2e6161"], &(0x7f0000000000)=""/27, 0x5f, 0x1b, 0x1, 0x4}, 0x28) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@can_delroute={0x2c, 0x19, 0x1, 0x70bd2c, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_UID={0x8, 0xe, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008840}, 0x30004016) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_dellink={0x20, 0x11, 0x204, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x8204, 0x4808}}, 0x20}}, 0x8000002) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.882190778s ago: executing program 2 (id=2406): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast2}}, {{0xa, 0x0, 0x4, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfc}, {0x2, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x18}, 0x4008000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xfb}]}}]}, 0x3c}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffff}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6301}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x571098de95087dfb}, 0x4800) sendmmsg$inet6(r2, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="64bb6a97aaf0b87f190a4cba6feb816dfef1c47030d7e707ac33636c2579a098b5", 0x21}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4802d) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000580)=0x3) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffe0, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 1.881430337s ago: executing program 1 (id=2407): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c1}, 0x20008040) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x0, 0x700, 0x58, 0x1, {{0x2b, 0x4, 0x2, 0x4, 0xac, 0x66, 0x0, 0x6, 0x2f, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x4c, 0xcf, 0x3, 0x4, [{@private=0xa0100fe, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x2}, {@private=0xa010101, 0xf}, {@local, 0x9}, {@remote, 0xffffff96}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xa}, {@local, 0xfffffffe}, {@broadcast, 0x3ff}]}, @cipso={0x86, 0x3f, 0x0, [{0x6, 0x2}, {0x4, 0xf, "8057338e2a0fd6764c2d84db4d"}, {0x5, 0xa, "09267a7645c89805"}, {0x5, 0xb, "83a47ccf38b4353701"}, {0x5, 0x6, "0bf296e8"}, {0x2, 0x3, "fd"}, {0x7, 0x3, "be"}, {0x1, 0x7, "1745502950"}]}, @timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0x4, [{@remote, 0x4}]}]}}}}}) sendto(r2, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x35}, 0x80) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 1.579215248s ago: executing program 3 (id=2410): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) clock_gettime(0xffffffea, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) (async) shutdown(r2, 0x1) 1.495287754s ago: executing program 4 (id=2412): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5058b292eac8ba88a36aa1d7ee244885b5bb9fa6935849e6098ed884e7cb51726b360", 0x50}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4040800) recvmsg$qrtr(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) 1.435314945s ago: executing program 1 (id=2413): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="1000000000843f3983b600"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="04000000050000000100"/28], 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x3c, r5, 0x1, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x4e040) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) sendto$inet(r0, &(0x7f0000000100)="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", 0x1e1, 0x804, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="c3952208b7050906fff5981bd77f93613c9b0e7b54e07950321e7ff1c605e39e57ff5c67df421086d043a684104d497d20c5b85aac1ef4d752fb", 0x3a) 1.248987529s ago: executing program 1 (id=2415): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xfffffffffffffe41, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000001080), 0x0, 0xfff, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x30, &(0x7f00000003c0)=0x8, 0x4) r7 = socket$inet(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'gre0\x00', r8, 0x7, 0x7800, 0xffff, 0x8, {{0x1e, 0x4, 0x1, 0x0, 0x78, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, {[@timestamp={0x44, 0x14, 0x1d, 0x0, 0x7, [0x3, 0x7, 0xff, 0x62]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0xe, [{@rand_addr=0x64010101, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0xa0c}]}, @noop, @timestamp={0x44, 0x1c, 0x42, 0x0, 0x6, [0x9, 0xfffffffb, 0x10, 0x40, 0x6, 0xfffffff2]}, @timestamp={0x44, 0x14, 0x77, 0x0, 0x6, [0x1, 0x5, 0x1, 0x80]}]}}}}}) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x80000001) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103004d07000640975ecc0014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(0x4) unshare(0x400) 967.652396ms ago: executing program 0 (id=2417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x8, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c00000001000030400"/20, @ANYRES32=r7, @ANYBLOB="00000000041005000a000100aaaaaaaaaa2f000008001f00400000008cffffff7f00018014000500f4d0dd77fcdbae7ba3e1f7977289705414000400cd000000000000c3e91acfe20000140005009a09ac2bf8ccf1d356d60aba2e106ad91c0001800500060004000000080001000800000005000600000000002c00018014000400f3b0c32c5b04dba61d7fca767ef765d914000500e39ad797e930f37f2dbc25d2936346c90000"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 927.848412ms ago: executing program 4 (id=2418): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socketpair(0x29, 0xa, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x20008004) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1a0164cd5c98ceefc928ef630013e925778dd96c63679a3915deb6a96e31abc91b639e020df0000000000000003de7e4a0f94f5e123da1bb436c6f411189a5a2743bbd2689af2c362ed6850b3834b212409039375bd00512e1472f7a36ed6b19865af276d8", @ANYRES16=r4, @ANYRESHEX=r2], 0x6c}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000002c0)=0x79, 0x58) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="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", 0x16d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x24a}], 0x2}}], 0x2, 0x2090) socket(0x2b, 0x1, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x40000000015, 0x805, 0x0) getsockopt(r8, 0x114, 0x5, 0x0, &(0x7f00000000c0)) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, 0x0, &(0x7f0000000240)) 803.268978ms ago: executing program 1 (id=2419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f00000003c0)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x1d}]}}, "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"}}, 0xfce) 765.341968ms ago: executing program 0 (id=2420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000a00)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000000806030000000000000000000100000908000640000000020800064000000008080006400000001005000100070000000900020073797a300000000008000640000000040800064000000002"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 64) r6 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async, rerun: 32) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (rerun: 32) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000580)={r7, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) (async, rerun: 32) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) (rerun: 32) socket(0x2b, 0x1, 0x1) 755.429686ms ago: executing program 2 (id=2421): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) connect$packet(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095", @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="63258456205521b52b039c27e1f6e6215baa9340d8ce34518285675df71d5d73e9bb97ce45d94f8260755941b8c586e698a91b042cb7cc1cb532cf4ccd56cc"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c200000638af8ff00700000ff00000000bfa100000000000000000000000000ffbfa40000000000dd0773086db26610692a65f5c2040000f0ffffffb7", @ANYRES32=r4, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) socket(0x14, 0x2, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) connect$rose(r6, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) 515.346365ms ago: executing program 0 (id=2422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002f00007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 415.360239ms ago: executing program 0 (id=2423): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) (async) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r1, 0x4) listen(r1, 0x6) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) (async) unshare(0x8000400) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7", 0x5}], 0x1, 0x1) close(r4) (async) socket$packet(0x11, 0x2, 0x300) (async) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x8, 0x9, 0xd5}, 0x14) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x67, 0x9, 0x1, 0x7, 0x0, [0x40, 0x2, 0xb, 0x4]}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 403.885611ms ago: executing program 1 (id=2424): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000000000e05000000010000000000000000000001050000000800000000000000000000830000000001000000020000000180000000000000000000030000000002000000020000000b000000006161"], 0x0, 0x6c}, 0x28) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x48, r6, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0xfffffffd, 0x8}, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x5a8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4d8, 0xffffffff, 0xffffffff, 0x4d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'\x00', {0x4, 0x1, 0x1a, 0x0, 0xdedd, 0x10000000, 0x0, 0x1000, 0x78, 0x20}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x608) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x0, 0x61, 0x9}]}}]}}]}, 0x44}}, 0x2004c850) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a000008007400a819fca5"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYRES16=r8], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd70ddfcdbdf25ec00a5b0a011000000000000003164faec56a1198755dd1f0d9436", @ANYRES32=r11, @ANYBLOB="0c0099007aeb00006300000008009f0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000003}, 0x4000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r13, 0x1, 0x6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 170.144685ms ago: executing program 0 (id=2425): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008001300040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000082c010000000300000cf9bde768b9d4630000ff020000000000000000000000000001ff"], 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmmsg(r2, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10102, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000e14000828bd7000fd800000080003110200000008003c0005000000080001000100000008003c000400"/64], 0x40}, 0x1, 0x0, 0x0, 0x448c0}, 0x8810) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x1, 0x20, 0x6, 0x8, {{0x17, 0x4, 0x0, 0x18, 0x5c, 0x68, 0x0, 0x6, 0x6, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x16}, {[@rr={0x7, 0x23, 0xe3, [@empty, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @empty]}, @ssrr={0x89, 0x23, 0xec, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @multicast1, @loopback, @private=0xa010100]}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0xe, &(0x7f0000000480)=""/156, &(0x7f0000000540)=0x9c) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe00eeffffffffffffff00001c0000ff000000000000000000000000657d8cf6772d2474fd23b55ac1053ceee69ae5fd23f99353e4478f51464196950c9e0040ee45da31312c1f191b2d73d9fd6fb8857e1063ef7b71a77b1d95b116d5aaa3c97878019181c590bed527add07dcc6ede97642f0e9d02a28f6f709d4fc92317ea8d1654b7b9f20afaf61d4a2c55a65b6c5adb7dc428ae50d43ca8da5cbf4593cdc097272e58e22302e10719f94c6c2ca1fe57f932084fab74eb378548c8f550bbe1d6117760f9c20eb994cbb85e1eaee5b91987a8607527b31f2cb8afdedbe8dbf665bd5e5dba0599"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r6}, 0x38) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async, rerun: 32) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (rerun: 32) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r7, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) (async) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={r4, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2}, 0xc) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25020117800c00160006ac0f00000000001400010000000000000000000000ffff0000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe9482fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c290400eb000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 167.857296ms ago: executing program 3 (id=2426): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000f80000000000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@setlink={0x54, 0x13, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x1061}, [@IFLA_EVENT={0x8}, @IFLA_WEIGHT={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd27, 0x25dfdc02, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffff6, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x4fc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc084}, 0x2404c8c4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x42c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000}}]}]}}}, @IFLA_VFINFO_LIST={0x3bc, 0x16, 0x0, 0x1, [{0xdc, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x8}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xcf1, 0xd, 0x88a8}}, {0x14, 0x1, {0x7ff, 0xb00, 0xfcb2570, 0x8100}}, {0x14, 0x1, {0x2, 0x3c4, 0x6ffc, 0x88a8}}, {0x14, 0x1, {0x5, 0xf5, 0x7, 0x11150}}, {0x14, 0x1, {0xc, 0xb69, 0x6, 0x8100}}, {0x14, 0x1, {0x94, 0x932, 0x107, 0x8100}}, {0x14, 0x1, {0x10, 0x982, 0xfffffffd, 0x8100}}, {0x14, 0x1, {0x101, 0x807, 0xa90c, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x259, 0x2, 0x88a8}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xf41a77f, 0x7}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff4, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xea84, 0xc}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x18736dc8, 0xfffffff9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x4e4, 0x401, 0x88a8}}, {0x14, 0x1, {0x9, 0xd8, 0x1, 0x88a8}}, {0x14, 0x1, {0x9, 0x261, 0x1, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @broadcast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xe0d, 0x5}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0xffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3ff, 0xf}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x7fffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff, 0xd5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x4e4b, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x5c}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x7}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x5281b01}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x1, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x7, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7aa, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3429, 0x7ff}}]}, {0x104, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7ff, 0x565, 0x0, 0x88a8}}, {0x14, 0x1, {0x8, 0xc78, 0x71, 0x8100}}, {0x14, 0x1, {0x3, 0x69, 0x0, 0x8100}}, {0x14, 0x1, {0x4, 0x9d9, 0x80000001, 0x8100}}, {0x14, 0x1, {0xae85, 0x1af, 0xffffff5a, 0x88a8}}, {0x14, 0x1, {0x3ff, 0xa1e, 0x5, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @multicast}}, @IFLA_VF_RATE={0x10, 0x6, {0xe, 0x6fa, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x10000, 0x10001}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x3ff, 0x3, 0x81}}, @IFLA_VF_RATE={0x10, 0x6, {0x3cb9, 0xc8, 0x100}}]}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x28001}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000f80000000000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@setlink={0x54, 0x13, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x1061}, [@IFLA_EVENT={0x8}, @IFLA_WEIGHT={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd27, 0x25dfdc02, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffff6, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x4fc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc084}, 0x2404c8c4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x42c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000}}]}]}}}, @IFLA_VFINFO_LIST={0x3bc, 0x16, 0x0, 0x1, [{0xdc, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x8}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xcf1, 0xd, 0x88a8}}, {0x14, 0x1, {0x7ff, 0xb00, 0xfcb2570, 0x8100}}, {0x14, 0x1, {0x2, 0x3c4, 0x6ffc, 0x88a8}}, {0x14, 0x1, {0x5, 0xf5, 0x7, 0x11150}}, {0x14, 0x1, {0xc, 0xb69, 0x6, 0x8100}}, {0x14, 0x1, {0x94, 0x932, 0x107, 0x8100}}, {0x14, 0x1, {0x10, 0x982, 0xfffffffd, 0x8100}}, {0x14, 0x1, {0x101, 0x807, 0xa90c, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x259, 0x2, 0x88a8}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xf41a77f, 0x7}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff4, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xea84, 0xc}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x18736dc8, 0xfffffff9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x4e4, 0x401, 0x88a8}}, {0x14, 0x1, {0x9, 0xd8, 0x1, 0x88a8}}, {0x14, 0x1, {0x9, 0x261, 0x1, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @broadcast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xe0d, 0x5}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0xffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3ff, 0xf}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x7fffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff, 0xd5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x4e4b, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x5c}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x7}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x5281b01}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x1, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x7, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7aa, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3429, 0x7ff}}]}, {0x104, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7ff, 0x565, 0x0, 0x88a8}}, {0x14, 0x1, {0x8, 0xc78, 0x71, 0x8100}}, {0x14, 0x1, {0x3, 0x69, 0x0, 0x8100}}, {0x14, 0x1, {0x4, 0x9d9, 0x80000001, 0x8100}}, {0x14, 0x1, {0xae85, 0x1af, 0xffffff5a, 0x88a8}}, {0x14, 0x1, {0x3ff, 0xa1e, 0x5, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @multicast}}, @IFLA_VF_RATE={0x10, 0x6, {0xe, 0x6fa, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x10000, 0x10001}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x3ff, 0x3, 0x81}}, @IFLA_VF_RATE={0x10, 0x6, {0x3cb9, 0xc8, 0x100}}]}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x28001}, 0x8080) (async) 69.621286ms ago: executing program 0 (id=2427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x5, 0x401) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000000700000005000000d3000000b0400100", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200008001000000010000000700"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_LINK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40d1) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r3], 0x38}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtfilter={0x2518, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0xfff1, 0xb}, {0x10, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff6}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @rand_addr=0x64010100}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @dev={0xfe, 0x80, '\x00', 0x13}}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x2f, 0x80}}, @filter_kind_options=@f_route={{0xa}, {0x630, 0x2, [@TCA_ROUTE4_ACT={0x5f0, 0x6, [@m_xt={0x1d8, 0x20, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_TARG={0x77, 0x6, {0x7, 'security\x00', 0x0, 0x2, "e61244bdddd199934e064a4957fc9541621b3d9166c7f022720117c8828b65de55fe663a876ba4a87710b1865c831ccd17178cc1aa8fef9a4206c46ff3a4627ac1e3cff9784802287227ce4a43"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x3e}]}, {0xf6, 0x6, "a76330b2c8459ac433686ee2c8d03ffdff5123b3150caf43ccf3a17247646a362c69df1f143e8965f4517264899e97f57af05a7d43ae7bf3c4bf1fc281772775ca82bc25578c4fa87705079ef3b5f121b8c1c93b5626a46f72058adef6dcc29600ee73f28982b1937f7a44c612ce7a345d75e568229a22259ecf43139df6e9519d5906bc94e8151be809db12adebc6b66fc49cca674fceea044d4273f75014cc739e4d5fcbb01740acd0b5a80781283a37a0405043aa416f5a0753dc25d83d48d48d9359949a3bae86ad24ed7c75b68ab2e5966b92e3420c7c3b0ec736461d612e3708a4fdadd5b333cfcb8604b71503e11d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x74, 0x1d, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xe, 0x4, 0x9, 0x8}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x4, 0x0, 0x15, 0x8}, {0x8, 0x8, 0x7, 0x322b8631}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xc, 0x6, "3c560bb36c93e017"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x14c, 0x16, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x101}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x30e}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa0d0}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x141e}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4abe}]}, {0xd5, 0x6, "0eb74f869063cf74395df180a1be758da7c5f96855eccc6d313cbcf310cf2809929e5971661afa7810bed254b707ec34a1d79f4594334c45b45a12fbcc836a16cfe615556b74b490eefc7ef3826f65dd26e72ede9ff959353ea40dcd59c6b424cac80a2b03f356c8e915b49c4677da9764ccfc76ce34e3bb56e150946af928f66ec78fc8e50c9c3b5f9f4dccbc263e530cd221b65536ebc832059125fe87c87eb4f5f0c1d048d5f08396b05365cd24f39ec2c7bdfbce252a952986e8cb2974b50405ced55052733399852e74635f2af75a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x11c, 0xd, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1000, 0x400, 0x8, 0x1, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x47c0}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x270}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x9d, 0x6, "87f7310b242ad3117088b17a1242114b3bce15d0b09fdd480665b30f0eb3b4665344b9b1cdff088ae6f6966a20fb0bb9e703daa255503bac35fd99692f6fa724ea08598e48ffd3ab203e636c203e439b99ec9c386d945a7a013c70b4c55fe380813e2c30f5ce7a298fae3cf76d6e288472eec43fc54be7bd9a905abf9c07fd8b12fc8b14863169f143d4adc80dc44f36bd3f6cc3212bcc92c5"}, {0xc}, {0xc}}}, @m_ife={0x138, 0x1c, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x3}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb6}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x5e}]}}, @filter_kind_options=@f_u32={{0x8}, {0x298, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_vlan\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x82}, @TCA_U32_ACT={0x264, 0x7, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}]}, {0x42, 0x6, "c27d9415ea0a2152e8a01d84ef1179ff966f281d51d7410e4cbc6840a0a747a16bc92d73369566a967d4d83f1f29ac01bf54566836de04028cc23e3cf2a0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1ec, 0xf, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xa7, 0x6, {0x6, 'nat\x00', 0x3, 0x62c, "4b6a4a7484f162e33119c521f27030695a00e99e4774cb8dabb2d9dfeb5016ec0ea507959d6bad183919b88a0a18241d2af6ba96a4d8198085a51b818e72cdae50933341e0e2dfbdf848c35e97ba9b2ddd8a27425ac917765b65b178fcd6edfe5a48f21689a81f1b7b01b8f98e5d2ec5765ed2d038a05f7673f6a9d909"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0xc9, 0x6, "0945e1124bf508e1a8b977825eccacaebd2ee349c1a6ef2b17a0e43b031fac28889e4b10ddc959b4d3ef75249f6358aad7dd177e17fb67e9736c234a0d744aa442c642db040b24cb2ba74d2848c7b3ca69ff9bad492acbbd8377c27371110fcb317f6d60ab9713e5922d438ae67ebb3b602618d179ee70ba41908b54d4868d9cbf738f507dfa34b53405eab813e1aeda9a28c9513493ec5d100424e3253ea45ac6b4d63ad9eda0f8d7c50ebea6d61216aba3302c6e456ceac968567a66114ca0508ece7de5"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x1b94, 0x2, [@TCA_ROUTE4_ACT={0x1354, 0x6, [@m_xt={0x10c, 0x1e, 0x0, 0x0, {{0x7}, {0x4}, {0xe3, 0x6, "d08c73dde44819cda51bdf5d9136a49b462dfb392131b3a89690d4dd6cd4bcd694569a6f5b71b244be88db3c599cfa2d0a25d976b580700f5e12a5ecf2910c82858df5c149659a92910799aae6c8a18934af64192b7c218f13dca5a7e39870e504a1aa0ee869b26b6c65ca192e3c9e8545609828d53484d6320e3f2e03df3de6f2196529a493b82a625ad355d27108375cb5966115114aa768817356fc0b4bde4ef298cc01b2080f2f77dc748e502030161382fff4daeeaba85853adc6c61315228a77bdf1af56a87a8d58296abfe0636100ceda38c7590a8a2db1ec3bbdd2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x150, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x8000, 0x10000000, 0x1, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0xf9, 0x6, "b74e873ceddda3573d1195888b39eb4fd48850a9afbe8918e29c6b1550bfbc18c1c34ff64c688c1c7477d467937990766520840338cc542705af441fa23384f3cf8e59dd830c49051d4ee9c70de3aba8069e8d38aa218463ce6638e8bdcf31e4409ffba19dcf7e1e6347bcad7922f77265213516d20fcf9c9fc4be15474e8e45162c7dc692a63a4fe6a05feb629681e2ab8bedd43ed59cdd9444824f7648a24937df1f11ea0a19adfef04d7c22d58f1f5832fc0f3f90176a001d6cace7bedeaa3230e2ddfff0ee44a8c4c8e882479e321337767707af0b3461747484bc933176a9eec42b0530082c2b2ca905cfe06cb8a9f6b054c8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x103c, 0x20, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xb8, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0x82, 0x6, "7d44d61405fcf362bf77bb12eaec890cd7e9ec47729029d7b9d3047496b9dc02e4af17386afd9ada4892eb3fbd92e1854ec426f9ef30877a40611f8bca97fe216ef12fbca43a0ec8493816fe14554892276bff032fe9494b66770fa2516e80f0cc0d1a84ed22f748b8571c90e84eb63cdb91a6bbca5aa07a4ddb351fbe8f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x82c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xad2, 0xbe, 0x2, 0x800, 0x30, 0x5, 0x2, 0x8, 0x9, 0xa8, 0x6, 0x7, 0x0, 0x3, 0xe2, 0xffffff0d, 0x19d, 0x1000, 0x8, 0x8, 0x0, 0x1, 0x5563dcdb, 0x0, 0x5, 0x0, 0x5, 0xc7e, 0x10, 0x2, 0x5, 0x2f0a, 0x2, 0x9e, 0x5, 0x1, 0xffffffff, 0x1, 0x7, 0x43, 0x2, 0x3, 0xc, 0x8, 0x7, 0x7, 0xfffffff9, 0x2, 0x4, 0x4, 0x3, 0x1, 0x2, 0xfd89, 0x6, 0x0, 0x8, 0x8, 0x5, 0x36d, 0x9, 0x1000000, 0x105, 0x3, 0xc777, 0x5, 0x5, 0x7, 0x0, 0x6, 0x200000, 0x3, 0x1, 0x0, 0x4, 0x8, 0x800, 0x8, 0x8, 0x401, 0x3, 0x6, 0x9, 0x4, 0x654, 0xfffffff7, 0x6, 0x1, 0x8, 0x6, 0x81, 0x9, 0x3, 0x10, 0xfffffffd, 0x30, 0x5, 0x7, 0x2, 0xfffffff6, 0x8, 0x40, 0x80, 0x5d, 0xfffffffa, 0x0, 0x2, 0x1, 0xfffffffe, 0x80000001, 0x8, 0x7217, 0x4, 0x8, 0x8, 0xfffffffc, 0x3, 0x80, 0x1, 0x6, 0x1000, 0x5, 0x0, 0x0, 0x7ff, 0xc, 0x81, 0x100, 0xb, 0x81, 0x1, 0x4, 0x6, 0xffff, 0x3, 0x101, 0x3, 0xfdc, 0xf6400000, 0x71f5, 0x3, 0x80000000, 0x40, 0x8, 0x6, 0x1396, 0x4, 0x5, 0x9, 0x1ff, 0x7, 0x2, 0x207aec31, 0x7fffffff, 0x4, 0x0, 0xffff, 0xff, 0x9, 0x5, 0x2, 0x0, 0x1, 0xe9, 0x8, 0x1, 0x5, 0x3, 0x0, 0x7, 0x0, 0x5, 0xe8, 0x40, 0x101, 0xe, 0x7, 0xc29a, 0x8, 0xd, 0xffffffff, 0x6, 0x8001, 0xffffffff, 0x80000000, 0x92, 0x8000, 0x80, 0xc, 0x7, 0xb, 0x40, 0x8a, 0x40, 0x3, 0xd5ff, 0x3, 0x5, 0x0, 0x3, 0x9, 0x1c6, 0xe, 0x7f, 0x5, 0xa, 0x2, 0x8, 0xff, 0x6, 0x6, 0x9, 0x9, 0x5d40fa94, 0x2, 0x25, 0x8, 0x800, 0xe, 0x1000, 0x1, 0x400, 0x5, 0xffff8000, 0x1000, 0x3, 0xff, 0x5, 0x9, 0x6, 0x104a960, 0xb, 0x5, 0x3, 0x4, 0xf1e, 0x6, 0x6, 0x19b70e24, 0x4, 0x0, 0x81, 0x1, 0x1b9f, 0x78, 0x2, 0x9, 0x8, 0x0, 0x0, 0x5, 0x5, 0xb19c, 0x7, 0x100]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x5, 0x4, 0x1, 0x10000, 0x2, 0x8, 0xf, 0x1, 0x0, 0x120000, 0xd, 0x3, 0x4, 0x8, 0x0, 0xffffffcd, 0x7ff, 0x0, 0x30, 0x7fffffff, 0xffffffff, 0x6, 0x6, 0x3, 0x0, 0x9, 0x7, 0x5, 0xe384, 0x0, 0x8, 0x9, 0x1000, 0x3, 0x81c, 0x6, 0x100, 0x7d8c, 0x3, 0x6, 0x856, 0x100, 0xa, 0x4180000, 0x7, 0x3, 0x1, 0xa1c, 0x7, 0x6, 0x4, 0x1, 0x8, 0x8, 0x4, 0x8, 0x3, 0xff, 0x5, 0x5, 0x7, 0x7, 0x8, 0x10000, 0xa882, 0x80, 0xe37, 0x9f28, 0x3, 0x7, 0x3ff, 0x4, 0x1, 0x0, 0xfffffffc, 0xe, 0x10000, 0x2, 0x9, 0x81, 0xec7, 0xffff0d18, 0xb, 0x0, 0x2, 0xd8, 0x9, 0x5, 0x3, 0xf, 0x0, 0x9ea, 0x8, 0x2, 0x77, 0xa, 0x200, 0x5, 0x6, 0xc345, 0x8, 0x3ff, 0xc79b, 0xf, 0x0, 0x8, 0x8, 0x6, 0x800, 0x2, 0x7, 0x3, 0x7, 0x9, 0x2, 0xe, 0x9, 0x3, 0x1, 0x1ff, 0xf, 0xa60, 0xeb, 0x8000, 0xc04d, 0x401, 0x4, 0x0, 0x1ff, 0x9, 0xefcd, 0x6, 0xff8000, 0xba1, 0x6, 0xfffffc62, 0x0, 0x4e, 0xd, 0x3, 0x1, 0x6, 0x2, 0x2, 0x1fff, 0x69, 0x3, 0x3, 0x80000001, 0x1, 0x3, 0xd53a, 0x6, 0x5, 0x7, 0x2, 0x2, 0x1, 0x10001, 0x6, 0x1, 0xfffffffb, 0x5, 0x4, 0x28ac, 0x1, 0x1, 0x9, 0x1, 0x9, 0xf, 0xcc, 0x7fff, 0xb114, 0xc3e, 0x3ff, 0x8, 0x0, 0x4, 0x4, 0x80, 0xffffffff, 0x3ff, 0x5, 0x7, 0x3, 0x10001, 0xfffffff9, 0x6, 0xeb0, 0x5, 0x33b2026c, 0xefcd, 0x81, 0x80, 0xfffffff9, 0xffffffff, 0xbd, 0x1f22, 0x6, 0x2, 0x1, 0x0, 0x9, 0x3, 0x68e4, 0x8, 0x0, 0x69a1, 0x1, 0x1fed32ec, 0x6, 0x2, 0x8, 0x4, 0x6, 0x0, 0x80, 0x200, 0x3ff, 0x4, 0x1, 0x9, 0x10, 0x1, 0x106, 0x96, 0x10000, 0x8001, 0x4, 0x0, 0x475, 0x6, 0x5, 0x5, 0x2, 0x3, 0x200, 0xfffffff9, 0x4, 0x7, 0x80, 0xe, 0x9, 0x3ba, 0x5, 0x5, 0x9, 0x6, 0x3, 0x0, 0x7, 0x9, 0x7, 0x2]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xab}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa3}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}]}, 0x2518}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 4 (id=2428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0xa, &(0x7f0000000040)=[0x100008, 0x0, 0x1, 0x2, 0x1000, 0x5, 0xd4, 0x4, 0xb1, 0xfffefffffffffff7], 0x4, 0x2}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) kernel console output (not intermixed with test programs): T8343] netlink: 'syz.4.533': attribute type 32 has an invalid length. [ 202.235810][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 202.560460][ T8363] netlink: 64110 bytes leftover after parsing attributes in process `syz.3.536'. [ 202.954616][ T8373] tipc: Started in network mode [ 202.973924][ T8373] tipc: Node identity ac14140f, cluster identity 4711 [ 202.999772][ T8373] tipc: New replicast peer: 172.20.20.170 [ 203.023366][ T8373] tipc: Enabled bearer , priority 10 [ 203.634180][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 203.732547][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 204.152951][ T5902] tipc: Node number set to 2886997007 [ 204.275859][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 204.317140][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.547'. [ 204.522038][ T8416] xt_l2tp: invalid flags combination: 0 [ 205.047278][ T8430] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 205.576969][ T8444] ip6gre1: entered promiscuous mode [ 205.617230][ T8444] ip6gre1: entered allmulticast mode [ 205.912283][ T8453] netlink: 'syz.3.555': attribute type 1 has an invalid length. [ 206.021279][ T145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.062803][ T5835] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.072717][ T145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.096283][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 206.104590][ C1] lec:lec_tx_timeout: lec0 [ 206.109666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 206.267086][ T5835] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.685131][ T8485] netlink: 'syz.2.565': attribute type 10 has an invalid length. [ 206.704636][ T8485] __nla_validate_parse: 2 callbacks suppressed [ 206.704654][ T8485] netlink: 224 bytes leftover after parsing attributes in process `syz.2.565'. [ 206.781755][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 206.782786][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 206.788011][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 207.011009][ T29] audit: type=1800 audit(1776606802.585:5): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.564" name="memory.events" dev="tmpfs" ino=592 res=0 errno=0 [ 207.016761][ T980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.087479][ T8502] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 207.164274][ T8505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.568'. [ 207.615316][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 207.830096][ T8517] netlink: 'syz.2.571': attribute type 5 has an invalid length. [ 208.103977][ T8531] netlink: 68 bytes leftover after parsing attributes in process `syz.2.575'. [ 208.160610][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 208.252117][ T5145] block nbd1: Receive control failed (result -1) [ 208.381015][ T8544] gre0: left promiscuous mode [ 208.405545][ T8544] gre0: left allmulticast mode [ 208.502899][ T8544] netlink: 148 bytes leftover after parsing attributes in process `syz.0.577'. [ 208.546407][ T8544] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 208.824229][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.580'. [ 208.983236][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 209.042358][ T8564] syzkaller1: entered promiscuous mode [ 209.065793][ T8560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.580'. [ 209.086097][ T8564] syzkaller1: entered allmulticast mode [ 209.289905][ T8570] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 209.312343][ T8570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.137959][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.116277][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 211.124548][ C1] lec:lec_tx_timeout: lec0 [ 211.129880][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.183611][ T8657] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 211.275345][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 211.524467][ T8672] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 211.542748][ T8672] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 211.564272][ T8672] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 211.591235][ T8672] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 211.601108][ T8672] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 211.609348][ T8672] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 212.014438][ T8695] __nla_validate_parse: 3 callbacks suppressed [ 212.014458][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 212.080396][ T8695] netlink: 244 bytes leftover after parsing attributes in process `syz.4.606'. [ 212.439884][ T8710] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 212.457533][ T8710] netlink: 'syz.3.609': attribute type 2 has an invalid length. [ 212.559209][ T8710] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 212.572385][ T8710] netlink: 'syz.3.609': attribute type 3 has an invalid length. [ 212.588159][ T8710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.609'. [ 212.724218][ T8715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.611'. [ 212.725428][ T8718] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 213.274927][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 213.903750][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 214.099308][ T8791] xt_hashlimit: size too large, truncated to 1048576 [ 215.125970][ T8825] syzkaller0: entered promiscuous mode [ 215.134670][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 215.153232][ T8825] syzkaller0: entered allmulticast mode [ 215.382530][ T8841] lo: entered allmulticast mode [ 215.392653][ T8841] lo: left allmulticast mode [ 215.620448][ T8853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.648'. [ 215.647552][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 215.652231][ T8853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'. [ 216.136686][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 216.145984][ C1] lec:lec_tx_timeout: lec0 [ 216.151120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 216.262195][ T8880] syzkaller0: entered promiscuous mode [ 216.286851][ T8880] syzkaller0: entered allmulticast mode [ 216.389915][ T8889] veth3: entered promiscuous mode [ 218.142430][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.649167][ T8883] __nla_validate_parse: 5 callbacks suppressed [ 218.649191][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 218.686435][ T8898] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 218.760846][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 218.802768][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 218.817601][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 218.829947][ T8918] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 218.839274][ T8924] netlink: 580 bytes leftover after parsing attributes in process `syz.3.670'. [ 218.849737][ T8918] bridge3: entered allmulticast mode [ 218.862099][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.670'. [ 219.835128][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.678'. [ 219.877095][ T8956] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 220.095584][ T8937] lec:lec_atm_close: lec0: Shut down! [ 220.159594][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.552474][ T8977] validate_nla: 1 callbacks suppressed [ 220.552494][ T8977] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 220.629132][ T8977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.822628][ T8984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.684'. [ 220.979232][ T8989] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 221.167409][ T8995] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.382360][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 221.729377][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 221.778461][ T9008] netlink: 'syz.1.690': attribute type 4 has an invalid length. [ 222.004881][ T9013] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.040468][ T9015] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.305252][ T9023] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 222.399897][ T9034] C: renamed from team_slave_0 [ 222.440046][ T9034] netlink: 'syz.1.697': attribute type 8 has an invalid length. [ 222.462447][ T9033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.495537][ T9034] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 222.693872][ T9045] netlink: 'syz.4.699': attribute type 2 has an invalid length. [ 222.804744][ T9049] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 222.993358][ T9025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.149522][ T9063] sctp: [Deprecated]: syz.4.705 (pid 9063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.149522][ T9063] Use struct sctp_sack_info instead [ 223.264272][ T9049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.346513][ T9073] netlink: 'syz.2.708': attribute type 21 has an invalid length. [ 223.514411][ T9051] gretap1: left allmulticast mode [ 223.520906][ T9051] macsec1: left promiscuous mode [ 223.527156][ T9051] macvlan2: left allmulticast mode [ 223.543085][ T9051] ip6gre1: left promiscuous mode [ 223.550970][ T9051] ip6gre1: left allmulticast mode [ 223.559805][ T9051] bridge3: left allmulticast mode [ 223.613909][ T9025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.850698][ T9025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.914233][ T9086] __nla_validate_parse: 4 callbacks suppressed [ 223.914254][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 223.962056][ T9086] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 224.026139][ T9025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.114925][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 224.194156][ T9092] vlan2: entered promiscuous mode [ 224.224866][ T9092] dummy0: entered promiscuous mode [ 224.378148][ T9103] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.718'. [ 224.512605][ T6713] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.625249][ T6712] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.701165][ T742] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.870563][ T9025] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.995004][ T9025] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.096810][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 225.099838][ T9025] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.104920][ C1] lec:lec_tx_timeout: lec0 [ 225.120594][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.171595][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.725'. [ 225.233856][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.725'. [ 225.279415][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.725'. [ 225.420917][ T9139] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.728'. [ 225.580854][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 226.156576][ T9180] netlink: 'syz.1.740': attribute type 10 has an invalid length. [ 226.177287][ T9180] team0: Device ipvlan1 failed to register rx_handler [ 226.205232][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'. [ 226.325345][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.742'. [ 226.378900][ T9187] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 226.395381][ T9187] bond4 (unregistering): Released all slaves [ 226.532362][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 226.590710][ T9196] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 227.365674][ T9225] xt_CT: No such helper "netbios-ns" [ 227.718680][ T9247] raw_sendmsg: syz.1.760 forgot to set AF_INET. Fix it! [ 228.230480][ T9272] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 228.683837][ T9286] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 228.705300][ T9286] dummy0: entered promiscuous mode [ 228.749294][ T9286] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 228.946544][ T9294] __nla_validate_parse: 14 callbacks suppressed [ 228.946565][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.773'. [ 229.065990][ T9300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 229.183904][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 229.659445][ T9317] IPVS: length: 528 != 840 [ 229.723807][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.780'. [ 229.807501][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.780'. [ 229.970178][ T9323] netlink: 'syz.3.781': attribute type 11 has an invalid length. [ 230.006429][ T9323] netlink: 'syz.3.781': attribute type 23 has an invalid length. [ 230.025949][ T9323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.781'. [ 230.136279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 230.144663][ C1] lec:lec_tx_timeout: lec0 [ 230.149655][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 230.441036][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 230.841749][ T9352] netlink: 'syz.4.790': attribute type 6 has an invalid length. [ 230.914217][ T9353] netlink: 'syz.3.789': attribute type 1 has an invalid length. [ 230.942701][ T9353] netlink: 224 bytes leftover after parsing attributes in process `syz.3.789'. [ 230.973032][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.792'. [ 230.998114][ T9360] bridge0: port 3(vlan2) entered blocking state [ 231.026638][ T9360] bridge0: port 3(vlan2) entered disabled state [ 231.067286][ T9360] vlan2: entered allmulticast mode [ 231.084237][ T9360] geneve0: entered allmulticast mode [ 231.110920][ T9360] vlan2: entered promiscuous mode [ 231.124544][ T9360] geneve0: entered promiscuous mode [ 231.380865][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 231.455342][ T9387] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 231.745851][ T9392] tun0: tun_chr_ioctl cmd 2148553947 [ 231.933842][ T9400] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 231.971011][ T9400] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 231.997167][ T9390] syz.2.798 (9390) used greatest stack depth: 17216 bytes left [ 231.999200][ T9400] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 232.355675][ T9429] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 232.371323][ T9416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.676407][ T9439] tipc: Started in network mode [ 232.685441][ T9439] tipc: Node identity , cluster identity 4711 [ 232.991523][ T9449] syzkaller0: entered promiscuous mode [ 233.010632][ T9449] syzkaller0: entered allmulticast mode [ 233.828807][ T9475] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 233.874094][ T9482] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 233.954012][ T9479] netlink: 'syz.3.822': attribute type 5 has an invalid length. [ 234.026847][ T9491] netlink: 'syz.1.823': attribute type 1 has an invalid length. [ 234.045678][ T9491] netlink: 'syz.1.823': attribute type 2 has an invalid length. [ 234.093948][ T9491] __nla_validate_parse: 4 callbacks suppressed [ 234.093969][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 234.328091][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 234.359006][ T9503] netlink: 261 bytes leftover after parsing attributes in process `syz.4.828'. [ 234.605675][ T9524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.835'. [ 234.655145][ T9525] netlink: 104 bytes leftover after parsing attributes in process `syz.4.835'. [ 234.689091][ T9524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.835'. [ 234.718480][ T9524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.835'. [ 234.744304][ T9524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.835'. [ 234.758433][ T9524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.835'. [ 234.783009][ T9524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.835'. [ 234.962192][ T9524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.978886][ T9524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.126500][ T6712] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.156262][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 235.164383][ C1] lec:lec_tx_timeout: lec0 [ 235.169274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 235.176472][ T6712] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.208254][ T6712] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.218670][ T6712] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.422020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.454714][ T9546] clip:clip_setentry: non-CLIP VCC [ 235.684507][ T9558] netlink: 'syz.3.845': attribute type 2 has an invalid length. [ 235.788339][ T9558] tipc: Enabled bearer , priority 0 [ 235.939488][ T9558] syzkaller0: entered promiscuous mode [ 235.958104][ T9558] syzkaller0: entered allmulticast mode [ 235.980039][ T9558] tipc: Resetting bearer [ 236.137684][ T9577] IPVS: Error connecting to the multicast addr [ 236.149141][ T9556] tipc: Resetting bearer [ 238.343942][ T9556] tipc: Disabling bearer [ 238.354141][ T9578] IPVS: Error connecting to the multicast addr [ 238.607254][ T9607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.600235][ T9672] __nla_validate_parse: 158 callbacks suppressed [ 239.600258][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'. [ 239.638551][ T9669] geneve2: entered promiscuous mode [ 239.638655][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'. [ 239.724990][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 239.733969][ T9653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.758297][ T9653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.851959][ T9653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.887950][ T9653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 240.107482][ T9701] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 240.176264][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 240.184353][ C1] lec:lec_tx_timeout: lec0 [ 240.189139][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 240.389243][ T9701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.458447][ T9708] bond2: (slave gretap2): making interface the new active one [ 240.501829][ T9708] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 240.933393][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 241.043224][ T9729] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 241.141811][ T9736] pimreg: entered allmulticast mode [ 241.228938][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'. [ 241.290030][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'. [ 241.390026][ T9750] GUP no longer grows the stack in syz.3.888 (9750): 200000003000-20000000a000 (200000001000) [ 241.406616][ T9752] netlink: 'syz.4.887': attribute type 2 has an invalid length. [ 241.432273][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: syz.3.888 Not tainted syzkaller #0 PREEMPT(full) [ 241.432302][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.432315][ T9750] Call Trace: [ 241.432323][ T9750] [ 241.432333][ T9750] dump_stack_lvl+0xe8/0x150 [ 241.432370][ T9750] __get_user_pages+0x2453/0x29d0 [ 241.432423][ T9750] ? __gup_longterm_locked+0xc4e/0x1630 [ 241.432451][ T9750] ? down_read_killable+0x1bb/0x340 [ 241.432480][ T9750] ? try_get_folio+0xec/0x650 [ 241.432513][ T9750] __gup_longterm_locked+0xdcf/0x1630 [ 241.432566][ T9750] gup_fast_fallback+0x1d82/0x22e0 [ 241.432627][ T9750] ? __pfx_gup_fast_fallback+0x10/0x10 [ 241.432655][ T9750] ? is_valid_gup_args+0x11f/0x200 [ 241.432681][ T9750] ? get_user_pages_fast+0x4d/0xb0 [ 241.432706][ T9750] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 241.432737][ T9750] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 241.432770][ T9750] iov_iter_get_pages2+0x5e/0xa0 [ 241.432794][ T9750] __se_sys_vmsplice+0x7b3/0x1490 [ 241.432840][ T9750] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 241.432872][ T9750] ? __pfx_futex_wake+0x10/0x10 [ 241.432923][ T9750] ? _raw_spin_unlock+0x28/0x50 [ 241.432980][ T9750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.433005][ T9750] do_syscall_64+0x15f/0xf80 [ 241.433028][ T9750] ? trace_irq_disable+0x3b/0x140 [ 241.433050][ T9750] ? clear_bhb_loop+0x40/0x90 [ 241.433073][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.433092][ T9750] RIP: 0033:0x7f7d1f99c819 [ 241.433113][ T9750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.433129][ T9750] RSP: 002b:00007f7d208b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 241.433163][ T9750] RAX: ffffffffffffffda RBX: 00007f7d1fc15fa0 RCX: 00007f7d1f99c819 [ 241.433179][ T9750] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 241.433190][ T9750] RBP: 00007f7d1fa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 241.433203][ T9750] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 241.433215][ T9750] R13: 00007f7d1fc16038 R14: 00007f7d1fc15fa0 R15: 00007fff4683d708 [ 241.433258][ T9750] [ 241.486052][ T9754] netlink: 'syz.4.887': attribute type 2 has an invalid length. [ 241.720839][ T9752] !©9: entered promiscuous mode [ 241.745380][ T9759] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°Y\£Á [ 241.745380][ T9759] 3 VH†5rºBnœæ [ 241.754651][ T9754] !©9: left promiscuous mode [ 241.857711][ T9768] netlink: 6 bytes leftover after parsing attributes in process `syz.3.891'. [ 241.892724][ T9768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.220723][ T9780] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 242.250064][ T9784] netlink: 68 bytes leftover after parsing attributes in process `syz.4.894'. [ 242.263663][ T9786] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 242.679150][ T9791] bridge5: entered promiscuous mode [ 242.904514][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 243.267208][ T9827] Cannot find set identified by id 3 to match [ 244.281433][ T9878] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 244.378135][ T9878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.917'. [ 244.431498][ T9881] netlink: 'syz.1.917': attribute type 10 has an invalid length. [ 244.511651][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.549971][ T9881] bond0: (slave team0): Enslaving as an active interface with an up link [ 244.761283][ T9892] __nla_validate_parse: 1 callbacks suppressed [ 244.761301][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.920'. [ 245.196256][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 245.204872][ C1] lec:lec_tx_timeout: lec0 [ 245.210447][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 245.255499][ T9898] syzkaller0: entered promiscuous mode [ 245.279774][ T9898] syzkaller0: entered allmulticast mode [ 245.281811][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 245.295877][ T9912] netlink: 48 bytes leftover after parsing attributes in process `syz.3.927'. [ 245.530154][ T9889] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 245.728815][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 248.288306][ T9939] x_tables: unsorted entry at hook 3 [ 248.396017][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 248.407586][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 248.425138][ T9942] netlink: 'syz.3.934': attribute type 12 has an invalid length. [ 248.434186][ T9942] netlink: 'syz.3.934': attribute type 11 has an invalid length. [ 248.448255][ T9946] netlink: 56 bytes leftover after parsing attributes in process `syz.2.933'. [ 248.551009][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 248.613601][ T9953] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 248.635365][ T9953] netlink: 224 bytes leftover after parsing attributes in process `syz.2.933'. [ 249.137503][ T9972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.940'. [ 249.459388][ T9985] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 249.495250][ T9985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.558411][ T9997] netlink: 'syz.0.949': attribute type 4 has an invalid length. [ 249.721263][ T9983] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 250.226418][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 250.234514][ C1] lec:lec_tx_timeout: lec0 [ 250.239896][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 250.284888][T10032] __nla_validate_parse: 2 callbacks suppressed [ 250.284907][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.957'. [ 250.519602][T10038] netlink: 44 bytes leftover after parsing attributes in process `syz.3.959'. [ 250.528616][T10033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 250.916432][T10057] tipc: Enabling of bearer rejected, failed to enable media [ 251.188743][ T6709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.392132][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 251.741609][T10090] atomic_op ffff888033b92998 conn xmit_atomic 0000000000000000 [ 251.795842][T10096] netlink: 732 bytes leftover after parsing attributes in process `syz.3.975'. [ 251.848650][T10096] netlink: 732 bytes leftover after parsing attributes in process `syz.3.975'. [ 251.919024][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 252.798369][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 253.140427][T10143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.432287][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 253.610509][T10171] netlink: 'syz.3.990': attribute type 30 has an invalid length. [ 253.625909][T10170] netlink: 256 bytes leftover after parsing attributes in process `syz.1.991'. [ 253.664363][T10170] unsupported nlmsg_type 40 [ 253.811171][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.996'. [ 253.926629][T10171] bond0: option arp_missed_max: invalid value (0) [ 253.943357][T10171] bond0: option arp_missed_max: allowed values 1 - 255 [ 254.023037][T10171] bond0 (unregistering): Released all slaves [ 254.235255][T10193] pim6reg: entered allmulticast mode [ 254.248790][T10196] pim6reg: left allmulticast mode [ 254.817558][T10221] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 255.072573][T10228] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 255.745655][T10259] __nla_validate_parse: 2 callbacks suppressed [ 255.745679][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 255.789681][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 255.881532][T10259] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1007'. [ 255.903952][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.056327][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 256.064531][ C1] lec:lec_tx_timeout: lec0 [ 256.069685][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 256.292074][T10280] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1013'. [ 256.298261][T10279] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 256.395951][T10280] netlink: 680 bytes leftover after parsing attributes in process `syz.2.1013'. [ 256.431240][T10280] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1013'. [ 257.138667][T10306] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 257.166637][T10306] netlink: 352 bytes leftover after parsing attributes in process `syz.4.1016'. [ 257.199748][T10319] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1018'. [ 257.298202][T10306] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 257.367004][T10306] netlink: 352 bytes leftover after parsing attributes in process `syz.4.1016'. [ 257.568393][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 258.161068][T10346] €Â: renamed from dummy0 [ 258.312756][T10357] netlink: 'syz.4.1026': attribute type 11 has an invalid length. [ 258.945434][T10376] netlink: 'syz.4.1031': attribute type 33 has an invalid length. [ 258.994348][T10376] `: renamed from team0 [ 259.050383][T10380] netlink: 'syz.3.1032': attribute type 29 has an invalid length. [ 259.399535][T10394] netlink: 'syz.1.1037': attribute type 1 has an invalid length. [ 259.419098][T10395] syzkaller0: entered promiscuous mode [ 259.431645][T10394] netlink: 'syz.1.1037': attribute type 8 has an invalid length. [ 259.461255][T10395] syzkaller0: entered allmulticast mode [ 259.846986][T10415] netlink: 'syz.3.1041': attribute type 4 has an invalid length. [ 260.072305][T10423] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 260.258866][T10423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.076269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 261.084822][ C1] lec:lec_tx_timeout: lec0 [ 261.090303][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.180675][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.213148][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.491680][T10434] bond4: (slave veth5): Enslaving as an active interface with a down link [ 261.505437][T10423] bond4: (slave dummy0): making interface the new active one [ 261.514743][T10423] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 261.533345][T10441] bond4: (slave dummy0): Releasing active interface [ 261.555012][T10454] __nla_validate_parse: 37 callbacks suppressed [ 261.555034][T10454] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1050'. [ 261.643846][T10449] bridge0: entered promiscuous mode [ 261.663180][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.687366][T10449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.720686][T10465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.740932][ T7610] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.771940][ T7610] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.794903][ T7610] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.846578][ T7610] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.246909][T10516] tipc: Enabling of bearer rejected, failed to enable media [ 262.313980][T10516] tipc: Enabling of bearer rejected, failed to enable media [ 262.321282][T10521] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 262.505190][T10528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1066'. [ 262.692800][T10539] block nbd0: reconnected socket [ 262.759294][T10540] netlink: 'syz.4.1069': attribute type 11 has an invalid length. [ 262.798115][T10540] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1069'. [ 262.830691][ T5145] block nbd0: Unexpected reply (50331648) 0000000000000000 [ 262.962104][T10551] netlink: 'syz.3.1072': attribute type 10 has an invalid length. [ 262.970590][T10551] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1072'. [ 263.065232][T10555] netlink: 'syz.3.1072': attribute type 27 has an invalid length. [ 263.168088][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 263.322178][T10558] bond0: (slave bond_slave_1): Releasing backup interface [ 263.870457][ T29] audit: type=1804 audit(1776606859.445:6): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1082" name="/newroot/209/cgroup.controllers" dev="tmpfs" ino=1092 res=1 errno=0 [ 263.954748][ T29] audit: type=1800 audit(1776606859.465:7): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1082" name="cgroup.controllers" dev="tmpfs" ino=1092 res=0 errno=0 [ 264.041804][T10597] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 264.099274][T10596] netlink: 'syz.1.1084': attribute type 22 has an invalid length. [ 264.127561][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'. [ 264.177024][T10596] netlink: 'syz.1.1084': attribute type 22 has an invalid length. [ 264.238576][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'. [ 264.304582][T10615] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1084'. [ 264.375216][T10618] sctp: [Deprecated]: syz.2.1087 (pid 10618) Use of int in maxseg socket option. [ 264.375216][T10618] Use struct sctp_assoc_value instead [ 264.409419][T10619] nbd: nbd0 already in use [ 264.417595][T10619] block nbd0: NBD_DISCONNECT [ 264.425238][T10619] block nbd0: Send disconnect failed -32 [ 264.431471][T10614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.434914][T10614] 8021q: adding VLAN 0 to HW filter on device ` [ 264.441915][T10619] block nbd0: shutting down sockets [ 264.462472][T10614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.618778][T10626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1091'. [ 264.652296][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 264.746941][T10623] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 264.793622][T10623] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 265.059260][T10640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.249633][T10646] syzkaller0: entered promiscuous mode [ 265.273243][T10646] syzkaller0: entered allmulticast mode [ 265.644478][T10658] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 265.671759][T10658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.692895][T10658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.742509][T10658] hsr0: entered promiscuous mode [ 265.794790][T10667] netlink: 'syz.2.1102': attribute type 27 has an invalid length. [ 265.795792][T10658] bridge0: port 4(hsr0) entered blocking state [ 265.886473][T10658] bridge0: port 4(hsr0) entered disabled state [ 265.895841][T10658] hsr0: entered allmulticast mode [ 265.910965][T10658] hsr_slave_0: entered allmulticast mode [ 265.926413][T10658] hsr_slave_1: entered allmulticast mode [ 266.106463][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 266.114750][ C1] lec:lec_tx_timeout: lec0 [ 266.119508][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 266.486069][T10674] team0: Port device team_slave_0 removed [ 266.569827][T10474] syz0: Port: 1 Link DOWN [ 266.671478][T10684] __nla_validate_parse: 13 callbacks suppressed [ 266.671501][T10684] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1109'. [ 266.722371][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'. [ 267.109699][T10694] tap0: tun_chr_ioctl cmd 1074025680 [ 267.418790][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 267.532697][T10712] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 267.706086][T10723] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.767837][T10726] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1121'. [ 267.922154][T10725] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 268.134479][T10741] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 268.228322][T10744] veth0: entered promiscuous mode [ 268.258401][T10741] bond0: entered promiscuous mode [ 268.289807][T10741] bond_slave_0: entered promiscuous mode [ 268.621302][T10763] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 268.819020][T10739] bond0: left promiscuous mode [ 268.835294][T10739] bond_slave_0: left promiscuous mode [ 268.880697][T10739] veth0: left promiscuous mode [ 269.202098][T10778] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1136'. [ 269.219485][T10778] x_tables: duplicate underflow at hook 2 [ 269.429850][T10789] syzkaller1: entered promiscuous mode [ 269.453013][T10789] syzkaller1: entered allmulticast mode [ 269.760892][T10802] tipc: Started in network mode [ 269.773895][T10802] tipc: Node identity ac14140f, cluster identity 4711 [ 269.781998][T10802] tipc: New replicast peer: 255.255.255.255 [ 269.790221][T10802] tipc: Enabled bearer , priority 10 [ 269.802728][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1144'. [ 269.821125][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 270.474245][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 270.497502][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 270.524586][T10831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.600178][T10832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1152'. [ 270.619098][T10837] openvswitch: netlink: IP tunnel dst address not specified [ 270.662880][T10837] netlink: 'syz.4.1157': attribute type 13 has an invalid length. [ 270.686983][T10837] netlink: 'syz.4.1157': attribute type 17 has an invalid length. [ 270.896020][T10837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.918276][T10837] 8021q: adding VLAN 0 to HW filter on device ` [ 270.944894][T10837] dummy0: left promiscuous mode [ 270.973806][T10837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.039872][T10478] tipc: Node number set to 2886997007 [ 271.126306][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 271.135176][ C1] lec:lec_tx_timeout: lec0 [ 271.140539][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 271.624530][T10864] syzkaller0: entered promiscuous mode [ 271.636392][T10864] syzkaller0: entered allmulticast mode [ 271.653148][T10844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.034558][T10874] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 273.119898][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 273.164029][T10894] xfrm0: entered promiscuous mode [ 273.189894][T10894] xfrm0: entered allmulticast mode [ 273.221209][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 273.518723][T10911] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1172'. [ 273.531695][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 273.923242][T10932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1174'. [ 273.977046][T10935] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 274.054349][T10940] netlink: 'syz.3.1179': attribute type 10 has an invalid length. [ 274.055095][T10935] netlink: 'syz.0.1180': attribute type 2 has an invalid length. [ 274.115037][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 274.211679][T10940] team0: Device ipvlan1 failed to register rx_handler [ 274.279057][T10936] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 274.305034][T10936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1179'. [ 274.979976][T10971] geneve2: entered allmulticast mode [ 275.183844][T10976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1191'. [ 275.213110][T10976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1191'. [ 275.234213][T10980] IPv6: NLM_F_REPLACE set, but no existing node found! [ 275.502230][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 275.546471][T10988] nbd: illegal input index -1113835520 [ 275.807971][T11007] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 275.875308][T11010] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 275.891664][T11010] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 276.156232][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 276.164335][ C1] lec:lec_tx_timeout: lec0 [ 276.169503][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.381116][T11030] ip6gre1: entered promiscuous mode [ 276.396384][T11030] ip6gre1: entered allmulticast mode [ 276.410654][ T742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.436238][ T742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.447130][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.494024][T11036] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.520432][T11030] netlink: 'syz.4.1205': attribute type 11 has an invalid length. [ 276.649691][T11034] syzkaller1: entered promiscuous mode [ 276.668223][T11034] syzkaller1: entered allmulticast mode [ 276.708328][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.795183][T11050] netlink: 'syz.0.1210': attribute type 13 has an invalid length. [ 276.805757][T11050] netlink: 'syz.0.1210': attribute type 17 has an invalid length. [ 277.102384][T11067] sctp: [Deprecated]: syz.2.1217 (pid 11067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.102384][T11067] Use struct sctp_sack_info instead [ 277.257403][T10474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 277.351589][T11080] syzkaller0: entered promiscuous mode [ 277.388896][T11080] 0: reclassify loop, rule prio 0, protocol 800 [ 277.447166][T11083] netlink: zone id is out of range [ 277.463930][T11083] netlink: zone id is out of range [ 277.472413][T11083] netlink: zone id is out of range [ 277.483938][T11083] netlink: zone id is out of range [ 277.492802][T11083] netlink: zone id is out of range [ 277.511648][T11083] netlink: zone id is out of range [ 277.559977][T11083] netlink: zone id is out of range [ 277.565295][T11083] netlink: zone id is out of range [ 277.865102][T11098] Bluetooth: MGMT ver 1.23 [ 277.888197][T11100] tipc: Enabled bearer , priority 0 [ 277.908084][T11100] syzkaller0: entered promiscuous mode [ 277.921952][T11100] syzkaller0: entered allmulticast mode [ 278.040556][T11100] tipc: Resetting bearer [ 278.069100][T11099] tipc: Resetting bearer [ 278.118315][T11099] tipc: Disabling bearer [ 278.413282][T11123] __nla_validate_parse: 10 callbacks suppressed [ 278.413304][T11123] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1234'. [ 278.612620][T11119] syzkaller0: entered promiscuous mode [ 278.630797][T11119] syzkaller0: entered allmulticast mode [ 278.845469][T11140] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1237'. [ 279.249739][T11122] delete_channel: no stack [ 280.254836][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 280.381148][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.176269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 281.184401][ C1] lec:lec_tx_timeout: lec0 [ 281.189071][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.810832][T11167] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 281.869474][T11167] net_ratelimit: 355 callbacks suppressed [ 281.869488][T11167] openvswitch: netlink: Actions may not be safe on all matching packets [ 281.981938][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1246'. [ 282.110726][T11181] syzkaller1: entered allmulticast mode [ 282.132743][T11187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1249'. [ 282.163794][T11181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.835539][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 282.865492][T11206] openvswitch: netlink: Flow actions attr not present in new flow. [ 283.045003][T11216] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 283.210329][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1261'. [ 283.280098][T11235] x_tables: duplicate underflow at hook 1 [ 283.357180][T11229] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 283.375072][T11229] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 283.446066][T11234] bond5: (slave gretap1): making interface the new active one [ 283.456990][T11234] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 283.473719][T11216] macvlan2: entered promiscuous mode [ 283.479525][T11216] macvlan2: entered allmulticast mode [ 283.485766][T11216] bond5: entered promiscuous mode [ 283.491675][T11216] gretap1: entered promiscuous mode [ 283.498251][T11216] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 283.508806][T11216] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 283.521819][T11216] bond5: left promiscuous mode [ 283.527241][T11216] gretap1: left promiscuous mode [ 284.128759][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 284.255185][T11273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1272'. [ 284.277971][T11273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1272'. [ 284.281895][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1274'. [ 284.300892][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 284.391843][T11278] ipvlan1: entered promiscuous mode [ 284.408131][T11278] ipvlan1: left promiscuous mode [ 284.841832][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1278'. [ 285.204214][T11318] netlink: 'syz.3.1283': attribute type 21 has an invalid length. [ 285.230110][T11318] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1283'. [ 285.283383][T11320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1282'. [ 285.359757][T11320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1282'. [ 285.854460][T11343] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1288'. [ 286.196242][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 286.204894][ C1] lec:lec_tx_timeout: lec0 [ 286.210027][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 286.542552][T11379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 286.599893][T11385] nbd: must specify at least one socket [ 286.841821][T11394] netlink: 'syz.1.1295': attribute type 13 has an invalid length. [ 286.883023][T11394] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 287.380293][T11413] bond6: Unable to set down delay as MII monitoring is disabled [ 287.424444][T11413] bond6 (unregistering): Released all slaves [ 287.951036][T11435] bridge_slave_0: default FDB implementation only supports local addresses [ 287.999049][T11435] netlink: 'syz.3.1306': attribute type 29 has an invalid length. [ 288.018671][T11435] netlink: 'syz.3.1306': attribute type 29 has an invalid length. [ 288.272163][T11448] bond6: entered promiscuous mode [ 288.278520][T11448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.384015][T11447] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.395589][T11447] bond7: entered promiscuous mode [ 288.405697][T11447] bond6: (slave bond7): Enslaving as an active interface with an up link [ 288.422812][T11452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.536390][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.554832][T11459] bond8: option downdelay: invalid value (18446744073709547007) [ 288.563627][T11459] bond8: option downdelay: allowed values 0 - 2147483647 [ 288.575707][T11459] bond8 (unregistering): Released all slaves [ 288.644458][T11460] bond8: option downdelay: invalid value (18446744073709547007) [ 288.652591][T11460] bond8: option downdelay: allowed values 0 - 2147483647 [ 288.665864][T11460] bond8 (unregistering): Released all slaves [ 288.857657][T11466] bridge1: left promiscuous mode [ 288.870620][T11466] veth3: left promiscuous mode [ 288.896902][T11466] bond6: left promiscuous mode [ 288.906777][T11466] bond7: left promiscuous mode [ 289.132826][T11470] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 289.936567][T11473] openvswitch: netlink: IP tunnel dst address not specified [ 290.049613][T11480] netlink: 'syz.0.1316': attribute type 13 has an invalid length. [ 290.098676][T11480] netlink: 'syz.0.1316': attribute type 17 has an invalid length. [ 290.328917][T11492] __nla_validate_parse: 8 callbacks suppressed [ 290.328947][T11492] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1319'. [ 290.343417][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 290.386282][T11492] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 290.406550][T11492] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1319'. [ 290.453194][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 290.575998][T11506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1318'. [ 290.692505][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.700494][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.854488][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 291.023756][T11515] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 291.134256][T11517] rdma_rxe: rxe_newlink: failed to add gre0 [ 291.153301][T11473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.184021][T11473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.227110][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 291.235777][ C1] lec:lec_tx_timeout: lec0 [ 291.240542][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.407754][T11485] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 291.422465][T11495] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1320'. [ 291.458606][T11495] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1320'. [ 291.628376][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 291.693688][T11515] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.719307][T11516] bond8: (slave ip6erspan0): making interface the new active one [ 291.730816][T11516] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 291.765733][T11530] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1326'. [ 291.784225][T11518] erspan0: left promiscuous mode [ 291.813359][T11533] netlink: 'syz.4.1324': attribute type 10 has an invalid length. [ 291.817432][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.834614][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.847643][T11518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.945408][T11533] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 292.532780][T11564] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 292.586880][T11564] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 292.669923][T11564] veth1_vlan: left promiscuous mode [ 293.065810][T11585] netem: invalid attributes len -1 [ 293.087119][T11585] netem: change failed [ 293.184027][T11595] netlink: 'syz.4.1341': attribute type 9 has an invalid length. [ 293.192903][T11595] netlink: 'syz.4.1341': attribute type 7 has an invalid length. [ 293.202279][T11595] netlink: 'syz.4.1341': attribute type 8 has an invalid length. [ 293.662602][T11620] netlink: 'syz.2.1342': attribute type 13 has an invalid length. [ 294.208238][T11645] netlink: 'syz.4.1350': attribute type 2 has an invalid length. [ 294.241117][T11644] vlan3: entered promiscuous mode [ 294.448066][T11656] netlink: 'syz.3.1354': attribute type 1 has an invalid length. [ 295.384646][T11687] __nla_validate_parse: 6 callbacks suppressed [ 295.384665][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 295.397437][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 295.847287][T11694] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.664197][T11736] vcan0: tx address claim with dlc 0 [ 296.681906][T11741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1371'. [ 296.800428][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 296.899851][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 297.016227][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 297.024869][ C1] lec:lec_tx_timeout: lec0 [ 297.031051][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 297.455438][T11753] syzkaller0: entered promiscuous mode [ 297.473020][T11753] syzkaller0: entered allmulticast mode [ 297.503117][T11762] IPVS: Error connecting to the multicast addr [ 300.348132][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'. [ 300.613155][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'. [ 300.656603][T11821] tunl0: Caught tx_queue_len zero misconfig [ 301.071241][T11840] bond9: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 301.084322][T11840] bond9: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 301.122658][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 301.159684][T11850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.615049][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 301.734874][T11866] macsec0: entered promiscuous mode [ 301.764640][T11866] vlan2: entered promiscuous mode [ 301.797371][T11866] bridge0: entered promiscuous mode [ 301.942131][T11886] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 302.056341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 302.064463][ C1] lec:lec_tx_timeout: lec0 [ 302.069675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.111840][T11893] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20003 [ 302.116026][T11886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.224012][T11889] bond4: (slave veth3): Enslaving as an active interface with a down link [ 302.302982][T11892] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 302.310415][T11892] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 302.361877][T11878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.379253][T11904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.452049][T11878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1399'. [ 302.566746][T11909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1409'. [ 302.834002][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805acdf800: rx timeout, send abort [ 303.222694][T11934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1415'. [ 303.246870][T11934] ipvlan1: entered promiscuous mode [ 303.253995][T11934] ipvlan1: left promiscuous mode [ 303.344057][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805acdf800: abort rx timeout. Force session deactivation [ 303.693594][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1421'. [ 303.781115][T11962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1421'. [ 304.525166][T11976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1425'. [ 304.537030][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.690258][T11976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.121228][T11976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.164120][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 305.372979][T12010] xt_ecn: cannot match TCP bits for non-tcp packets [ 305.454303][T11976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.612110][T11976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.908573][T12032] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 306.101289][ T742] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.138838][ T742] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.223372][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 306.232854][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1445'. [ 306.257378][T12041] bond4: option lacp_active: invalid value (8) [ 306.291250][T12041] bond4 (unregistering): Released all slaves [ 306.454899][ T9652] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.606621][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.076492][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 307.084798][ C1] lec:lec_tx_timeout: lec0 [ 307.090139][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 307.468472][T12097] netlink: 'syz.0.1455': attribute type 1 has an invalid length. [ 307.500934][T12097] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.519593][T12097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.527177][T12097] IPv6: NLM_F_CREATE should be set when creating new route [ 307.534613][T12097] IPv6: NLM_F_CREATE should be set when creating new route [ 307.542124][T12097] IPv6: NLM_F_CREATE should be set when creating new route [ 307.581395][T12100] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 307.612986][T12100] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1456'. [ 307.721479][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1459'. [ 307.817017][T12109] syzkaller0: entered promiscuous mode [ 307.827447][T12109] syzkaller0: entered allmulticast mode [ 308.068331][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 308.095474][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 308.114329][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 308.134568][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 308.163884][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 308.196442][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 308.478025][T12132] syzkaller0: entered promiscuous mode [ 308.530703][T12132] syzkaller0: entered allmulticast mode [ 308.627203][T12143] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 309.954709][T12186] tipc: Enabled bearer , priority 0 [ 309.984212][T12186] syzkaller0: entered promiscuous mode [ 310.006399][T12186] syzkaller0: entered allmulticast mode [ 310.107306][T12186] tipc: Resetting bearer [ 310.140598][T12185] tipc: Resetting bearer [ 310.183857][T12185] tipc: Disabling bearer [ 310.450037][T12209] tunl0: left promiscuous mode [ 310.559584][T12209] bridge1: left allmulticast mode [ 310.584320][T12209] bond3: left promiscuous mode [ 310.653430][T12209] wireguard0: left promiscuous mode [ 310.700998][T12209] geneve2: left allmulticast mode [ 311.474334][T12261] __nla_validate_parse: 18 callbacks suppressed [ 311.474358][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 312.106231][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 312.114436][ C1] lec:lec_tx_timeout: lec0 [ 312.120380][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.415214][T12280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1493'. [ 314.214187][T12277] tipc: Enabling of bearer rejected, failed to enable media [ 314.637648][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1498'. [ 315.037802][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1496'. [ 315.583755][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1505'. [ 316.015648][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 316.105914][T12348] batadv_slave_0: Caught tx_queue_len zero misconfig [ 316.241504][T12363] lo speed is unknown, defaulting to 1000 [ 316.278433][T12363] lo speed is unknown, defaulting to 1000 [ 316.324960][T12365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.331809][T12366] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1511'. [ 316.333606][T12365] IPv6: NLM_F_CREATE should be set when creating new route [ 316.348476][T12365] IPv6: NLM_F_CREATE should be set when creating new route [ 316.391446][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1510'. [ 316.401397][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 316.420290][T12363] lo speed is unknown, defaulting to 1000 [ 316.490230][T12372] nbd: must specify at least one socket [ 316.530666][T12363] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 316.694309][T12363] lo speed is unknown, defaulting to 1000 [ 316.774459][T12363] lo speed is unknown, defaulting to 1000 [ 316.854618][T12363] lo speed is unknown, defaulting to 1000 [ 316.882685][T12363] lo speed is unknown, defaulting to 1000 [ 316.915801][T12363] lo speed is unknown, defaulting to 1000 [ 317.078816][T12389] xt_policy: neither incoming nor outgoing policy selected [ 317.136467][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 317.144603][ C1] lec:lec_tx_timeout: lec0 [ 317.150012][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.220709][T12397] sctp: [Deprecated]: syz.2.1517 (pid 12397) Use of int in max_burst socket option deprecated. [ 317.220709][T12397] Use struct sctp_assoc_value instead [ 317.324848][T12391] netlink: 'syz.2.1517': attribute type 2 has an invalid length. [ 317.368532][T12391] netlink: 'syz.2.1517': attribute type 27 has an invalid length. [ 317.401585][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 317.567112][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 317.718181][T12415] lo speed is unknown, defaulting to 1000 [ 318.253637][T12440] sctp: [Deprecated]: syz.4.1527 (pid 12440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.253637][T12440] Use struct sctp_sack_info instead [ 318.327496][T12446] sctp: [Deprecated]: syz.4.1527 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.327496][T12446] Use struct sctp_sack_info instead [ 318.606550][T12456] netlink: 'syz.2.1531': attribute type 1 has an invalid length. [ 318.674793][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1534'. [ 318.728400][T12459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1534'. [ 318.833921][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'. [ 318.848743][T12456] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.278939][T12482] IPVS: length: 172 != 8 [ 319.599619][T12504] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 320.362449][T12534] netlink: 'syz.0.1548': attribute type 58 has an invalid length. [ 321.032504][T12555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1555'. [ 321.083087][T12558] tipc: New replicast peer: 255.255.255.255 [ 321.084260][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 321.096862][T12558] tipc: Enabled bearer , priority 10 [ 321.107331][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1555'. [ 321.124232][T12555] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1555'. [ 321.134908][T12555] ksmbd: Unknown IPC event: 1, ignore. [ 321.142426][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 321.186388][ T9644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.214634][ T9644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.400984][T12570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.979062][T12587] bond0: entered promiscuous mode [ 321.996841][T12587] bond_slave_0: entered promiscuous mode [ 322.040368][T12587] bond_slave_1: entered promiscuous mode [ 322.068766][T12587] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 322.102656][T12587] batadv0: entered promiscuous mode [ 322.156213][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.164530][ C1] lec:lec_tx_timeout: lec0 [ 322.169550][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.363079][T12594] syzkaller0: entered promiscuous mode [ 322.375888][T12594] syzkaller0: entered allmulticast mode [ 324.961168][T12619] __nla_validate_parse: 3 callbacks suppressed [ 324.961193][T12619] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1574'. [ 325.165142][T12623] netlink: 'syz.4.1575': attribute type 1 has an invalid length. [ 325.167567][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'. [ 325.217130][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 325.283470][T12623] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.293632][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 325.323635][T12634] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1576'. [ 325.348350][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 325.362342][T12634] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1576'. [ 325.386410][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 325.531649][T12642] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 325.595404][T12646] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 325.698656][T12646] team0: Port device dummy0 removed [ 325.810743][T12650] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1581'. [ 325.883644][T12649] lo speed is unknown, defaulting to 1000 [ 325.934269][T12655] netlink: 'syz.0.1584': attribute type 1 has an invalid length. [ 325.967626][T12652] netlink: set zone limit has 4 unknown bytes [ 326.135601][T12666] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1586'. [ 326.504298][T12677] bond5: Removing last arp target with arp_interval on [ 326.920398][T12688] syzkaller0: entered promiscuous mode [ 326.936830][T12688] syzkaller0: entered allmulticast mode [ 327.176298][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.184485][ C1] lec:lec_tx_timeout: lec0 [ 327.189557][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.962119][T12733] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 328.293539][T12736] netlink: 'syz.3.1603': attribute type 39 has an invalid length. [ 330.095033][T12733] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 330.264170][T12741] __nla_validate_parse: 4 callbacks suppressed [ 330.264195][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 330.301515][T12700] lo speed is unknown, defaulting to 1000 [ 330.339009][T12744] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 330.349500][T12744] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1605'. [ 330.419754][T12747] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1607'. [ 330.430419][T12741] veth0: Caught tx_queue_len zero misconfig [ 330.460104][T12749] netlink: 'syz.3.1608': attribute type 3 has an invalid length. [ 330.479459][T12749] netlink: 'syz.3.1608': attribute type 1 has an invalid length. [ 330.490092][T12749] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1608'. [ 330.510879][T12747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.528198][T12750] block nbd0: not configured, cannot reconfigure [ 330.550345][T12747] bond0 (unregistering): Released all slaves [ 330.618744][T12756] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1605'. [ 331.375329][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1611'. [ 331.417181][T12766] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1611'. [ 331.606671][T12766] bond0: entered promiscuous mode [ 331.633889][T12766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.661710][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1612'. [ 331.740489][T12788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1617'. [ 331.819472][T12771] vlan2: left promiscuous mode [ 331.833885][T12771] bridge0: left promiscuous mode [ 331.887241][ T48] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 331.906954][ T48] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 331.952839][ T48] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 331.984733][ T48] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 332.133608][T12796] syzkaller1: entered promiscuous mode [ 332.140889][T12796] syzkaller1: entered allmulticast mode [ 332.197047][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 332.205189][ C1] lec:lec_tx_timeout: lec0 [ 332.211299][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.579486][T12818] lo speed is unknown, defaulting to 1000 [ 333.317136][T12854] tipc: Can't bind to reserved service type 2 [ 333.350682][T12855] netlink: 'syz.3.1631': attribute type 8 has an invalid length. [ 333.375279][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 333.599085][T12863] pim6reg1: entered promiscuous mode [ 333.622899][T12863] pim6reg1: entered allmulticast mode [ 334.719867][T12912] tipc: Enabled bearer , priority 0 [ 334.733145][T12912] syzkaller0: entered promiscuous mode [ 334.743276][T12912] syzkaller0: entered allmulticast mode [ 334.873449][T12912] tipc: Resetting bearer [ 334.932969][T12911] tipc: Resetting bearer [ 335.077027][T12911] tipc: Disabling bearer [ 335.129100][T12930] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 335.225679][T12930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.281374][T12936] bond0: (slave veth3): Enslaving as an active interface with a down link [ 335.388530][T12930] bond0: (slave veth5): Enslaving as an active interface with a down link [ 335.468760][T12942] __nla_validate_parse: 4 callbacks suppressed [ 335.468784][T12942] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1652'. [ 336.195062][T12946] lo speed is unknown, defaulting to 1000 [ 336.355108][T12972] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1658'. [ 336.469129][T12972] bond7 (unregistering): Released all slaves [ 336.760644][T12986] netlink: 'syz.4.1663': attribute type 8 has an invalid length. [ 337.226330][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.234659][ C1] lec:lec_tx_timeout: lec0 [ 337.240056][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.321072][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 337.464055][T13011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1669'. [ 337.495299][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 337.534598][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 337.820165][T13026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'. [ 337.898414][T13026] geneve0: entered promiscuous mode [ 337.940848][T13034] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1672'. [ 337.960251][T13034] openvswitch: netlink: Message has 16 unknown bytes. [ 338.183609][T13029] lo speed is unknown, defaulting to 1000 [ 338.270081][T13047] netlink: 'syz.3.1676': attribute type 13 has an invalid length. [ 338.318295][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1678'. [ 338.333002][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1678'. [ 338.852188][T13069] netlink: 'syz.1.1682': attribute type 13 has an invalid length. [ 338.896700][T13069] netlink: 'syz.1.1682': attribute type 17 has an invalid length. [ 339.184323][T13086] xt_hashlimit: size too large, truncated to 1048576 [ 339.191505][T13069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.225669][T13069] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.239539][ T5145] Bluetooth: hci3: link tx timeout [ 339.248222][ T5145] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 339.300189][T13069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.329732][ T796] lo speed is unknown, defaulting to 1000 [ 339.359399][ T796] syz2: Port: 1 Link ACTIVE [ 339.460616][T13083] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 339.493697][T13092] –: renamed from dummy0 [ 340.948798][T13144] xt_time: unknown flags 0xf4 [ 341.152863][T13152] delete_channel: no stack [ 341.301762][T13156] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 341.321122][T13161] __nla_validate_parse: 3 callbacks suppressed [ 341.321142][T13161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1699'. [ 341.341253][ T5145] Bluetooth: hci3: command 0x0406 tx timeout [ 341.415599][T13156] bond7 (unregistering): Released all slaves [ 341.667850][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1703'. [ 341.948437][T13177] bridge_slave_1: left allmulticast mode [ 341.971205][T13177] bridge_slave_1: left promiscuous mode [ 341.989749][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.033599][T13177] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 342.325694][T13189] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1708'. [ 342.332378][T13187] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1707'. [ 342.367419][T13195] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1707'. [ 342.503402][T13202] xt_hashlimit: size too large, truncated to 1048576 [ 343.016221][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 343.024525][ C1] lec:lec_tx_timeout: lec0 [ 343.031097][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.923215][T13241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1720'. [ 343.948523][T13241] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1720'. [ 343.974558][T13241] netlink: 'syz.0.1720': attribute type 5 has an invalid length. [ 343.996667][T13241] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1720'. [ 344.255838][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'. [ 344.495807][T13251] No such timeout policy "syz1" [ 344.752642][T13257] lo speed is unknown, defaulting to 1000 [ 348.056613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 348.064663][ C1] lec:lec_tx_timeout: lec0 [ 348.069841][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 353.076274][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 353.085164][ C1] lec:lec_tx_timeout: lec0 [ 364.328183][T13319] pimreg: entered allmulticast mode [ 364.349074][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 364.350195][T13319] pimreg: left allmulticast mode [ 364.794260][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 364.823846][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 365.073904][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 365.107505][T13362] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1748'. [ 365.168428][T13356] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.318035][T13368] pim6reg1: entered promiscuous mode [ 365.347438][T13368] pim6reg1: entered allmulticast mode [ 365.512666][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 365.773870][T13380] x_tables: duplicate underflow at hook 4 [ 365.782097][T13382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.830633][T13383] ip6_vti0: entered promiscuous mode [ 365.851284][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 366.502027][T13411] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 366.536755][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 366.579391][T13411] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 366.619533][T13411] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 366.681405][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 366.717735][T13411] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 366.753882][T13411] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 366.786082][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 366.820319][T13411] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 366.862636][T13434] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 366.971759][T13432] C (unregistering): left promiscuous mode [ 367.006031][T13432] team0: Port device C removed [ 367.262886][T13458] xt_bpf: check failed: parse error [ 367.346374][T13466] dummy0: Caught tx_queue_len zero misconfig [ 367.625616][T13474] can: request_module (can-proto-5) failed. [ 367.780430][T13485] wg0: Master is either lo or non-ether device [ 368.355934][T13512] xt_hashlimit: size too large, truncated to 1048576 [ 368.782587][T13529] bond6: (slave bond_slave_1): Device is not our slave [ 368.832602][T13529] bond6: option active_slave: invalid value (bond_slave_1) [ 368.902209][T13529] bond6 (unregistering): Released all slaves [ 369.600798][T13566] __nla_validate_parse: 3 callbacks suppressed [ 369.600818][T13566] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1800'. [ 369.660669][T13560] syzkaller0: entered promiscuous mode [ 369.667596][T13560] syzkaller0: entered allmulticast mode [ 369.675386][T13562] ip6tnl0: Caught tx_queue_len zero misconfig [ 370.002197][T13582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'. [ 372.710497][T13576] netlink: 'syz.1.1803': attribute type 8 has an invalid length. [ 372.737494][ T6759] lec:lec_start_xmit: lec0:No lecd attached [ 372.942924][T13598] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 373.129984][T13603] bond6: option all_slaves_active: invalid value (5) [ 373.164061][T13603] bond6 (unregistering): Released all slaves [ 373.223747][T13611] IPVS: persistence engine module ip_vs_pe_… not found [ 373.450670][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 373.500133][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 373.794210][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 373.954631][T13644] netlink: 'syz.3.1820': attribute type 13 has an invalid length. [ 373.963501][T13644] netlink: 'syz.3.1820': attribute type 17 has an invalid length. [ 373.977031][T13644] netlink: 'syz.3.1820': attribute type 27 has an invalid length. [ 374.088118][T13644] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 374.101238][T13644] bond2 (unregistering): Released all slaves [ 374.110154][T13650] netlink: 'syz.0.1817': attribute type 12 has an invalid length. [ 374.143609][T13650] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1817'. [ 374.213946][T13651] block nbd2: not configured, cannot reconfigure [ 374.229844][T13624] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 374.383311][T13649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.422440][T13658] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 374.916898][T13676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.055360][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1824'. [ 375.098642][T13682] IPVS: Scheduler module ip_vs_ not found [ 375.134875][T13665] xfrm0: left promiscuous mode [ 375.144901][T13665] xfrm0: left allmulticast mode [ 375.177303][T13665] bridge5: left promiscuous mode [ 375.220731][T13665] vlan3: left promiscuous mode [ 375.289773][T13680] ±ÿ: renamed from lo [ 375.299432][T13671] lec:lec_atm_close: lec0: Shut down! [ 375.391294][T13678] lo speed is unknown, defaulting to 1000 [ 375.508976][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1830'. [ 375.665318][T13700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1831'. [ 375.805219][T13700] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 375.879754][T13703] netlink: 'syz.2.1832': attribute type 5 has an invalid length. [ 375.950465][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 376.415804][T13740] lo speed is unknown, defaulting to 1000 [ 376.463890][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1840'. [ 376.555652][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 376.604269][T13749] €Â: entered promiscuous mode [ 376.611663][T13749] macvtap0: entered promiscuous mode [ 376.617819][T13749] macvtap0: entered allmulticast mode [ 376.623909][T13749] €Â: entered allmulticast mode [ 376.629747][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 376.685936][T13750] €Â: left allmulticast mode [ 376.691694][T13750] €Â: left promiscuous mode [ 376.699822][T13754] syzkaller0: entered promiscuous mode [ 376.711253][T13754] syzkaller0: entered allmulticast mode [ 376.930410][T13764] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1844'. [ 376.966110][T13764] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1844'. [ 377.826615][T13792] bridge0: left promiscuous mode [ 377.872339][T13792] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.920655][T13792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.057527][ T9644] wlan1: Trigger new scan to find an IBSS to join [ 378.072940][T13783] bond1 (unregistering): Released all slaves [ 378.100631][T13786] nbd0: detected capacity change from 0 to 127 [ 378.408438][T13827] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 378.421113][ T5841] block nbd0: Receive control failed (result -104) [ 378.617987][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 378.709249][T13833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.735161][T13837] bond2: (slave batadv1): Opening slave failed [ 378.753861][T13834] lo speed is unknown, defaulting to 1000 [ 379.171341][T13847] hsr_slave_0: left promiscuous mode [ 379.190747][T13847] hsr_slave_1: left promiscuous mode [ 379.255797][T13847] hsr0 (unregistering): left allmulticast mode [ 379.288140][T13847] hsr0 (unregistering): left promiscuous mode [ 379.313760][T13847] bridge0: port 4(hsr0) entered disabled state [ 379.557708][T13867] xt_TCPMSS: Only works on TCP SYN packets [ 379.990679][ T29] audit: type=1804 audit(1776606975.565:8): pid=13884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1869" name="/newroot/350/cgroup.controllers" dev="tmpfs" ino=1816 res=1 errno=0 [ 380.014860][ T29] audit: type=1800 audit(1776606975.565:9): pid=13884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1869" name="cgroup.controllers" dev="tmpfs" ino=1816 res=0 errno=0 [ 380.132614][T13889] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 380.169317][T13889] 8021q: adding VLAN 0 to HW filter on device bond6 [ 380.182029][T13889] bond6: (slave dummy0): making interface the new active one [ 380.191184][T13889] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 380.221216][T13892] xt_bpf: check failed: parse error [ 381.016343][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 381.024726][ C1] lec:lec_tx_timeout: lec0 [ 381.029385][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 381.097019][ T9644] wlan1: Trigger new scan to find an IBSS to join [ 381.341488][T13822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.599058][T13903] netlink: 'syz.2.1875': attribute type 13 has an invalid length. [ 381.638771][T13908] netlink: 'syz.0.1877': attribute type 8 has an invalid length. [ 381.676740][T13903] gretap0: refused to change device tx_queue_len [ 381.712839][T13903] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 381.745172][ T1726] block nbd0: Connection timed out, retrying (0/1 alive) [ 381.759767][ T1726] block nbd0: Connection timed out, retrying (0/1 alive) [ 381.772447][ T11] block nbd0: Dead connection, failed to find a fallback [ 381.780084][ T11] block nbd0: shutting down sockets [ 381.790805][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.801372][ T1726] block nbd0: Connection timed out, retrying (0/1 alive) [ 381.808808][ T1726] block nbd0: Connection timed out, retrying (0/1 alive) [ 381.819939][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 381.830387][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.839673][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 381.848252][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.857508][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 381.867215][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.876598][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 381.887891][T13334] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.899500][T13334] Buffer I/O error on dev nbd0, logical block 0, async page read [ 381.908332][T13334] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.917606][T13334] Buffer I/O error on dev nbd0, logical block 1, async page read [ 381.927536][T13334] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.937084][T13334] Buffer I/O error on dev nbd0, logical block 2, async page read [ 381.945226][T13334] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.954794][T13334] Buffer I/O error on dev nbd0, logical block 3, async page read [ 381.963099][T13334] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.973184][T13334] Buffer I/O error on dev nbd0, logical block 0, async page read [ 381.981527][T13334] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.990933][T13334] Buffer I/O error on dev nbd0, logical block 1, async page read [ 382.004665][T13334] ldm_validate_partition_table(): Disk read failed. [ 382.015630][T13334] Dev nbd0: unable to read RDB block 0 [ 382.023153][ T9651] wlan1: Creating new IBSS network, BSSID a2:86:59:be:d0:4d [ 382.024836][T13334] nbd0: unable to read partition table [ 382.071200][T13334] ldm_validate_partition_table(): Disk read failed. [ 382.082175][T13334] Dev nbd0: unable to read RDB block 0 [ 382.091640][T13334] nbd0: unable to read partition table [ 382.359880][T13935] syzkaller0: entered promiscuous mode [ 382.740994][T13947] __nla_validate_parse: 3 callbacks suppressed [ 382.741025][T13947] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.1886'. [ 382.796565][T13947] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.1886'. [ 382.850381][T13952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1891'. [ 382.864885][T13949] netlink: 'syz.4.1889': attribute type 5 has an invalid length. [ 383.629646][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 383.755223][T13996] 8021q: VLANs not supported on caif0 [ 383.775595][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 383.831962][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 383.842764][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 383.913579][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'. [ 383.939829][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 383.958042][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 384.002081][T14004] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.028530][T14004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.464247][T14032] openvswitch: netlink: IP tunnel dst address not specified [ 384.842266][T14052] ip6gre2: entered promiscuous mode [ 385.090846][T14065] nlmon0: Caught tx_queue_len zero misconfig [ 385.460681][T14074] netlink: 'syz.1.1924': attribute type 1 has an invalid length. [ 385.495551][T14073] sctp: [Deprecated]: syz.2.1925 (pid 14073) Use of int in maxseg socket option. [ 385.495551][T14073] Use struct sctp_assoc_value instead [ 385.621584][T14074] bond6: entered promiscuous mode [ 385.627424][T14074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 385.644956][T14079] 8021q: adding VLAN 0 to HW filter on device bond6 [ 385.652487][T14079] bond6: (slave vti1): The slave device specified does not support setting the MAC address [ 385.665491][T14079] bond6: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 385.685694][T14079] bond6: (slave vti1): making interface the new active one [ 385.693466][T14079] vti1: entered promiscuous mode [ 385.700244][T14079] bond6: (slave vti1): Enslaving as an active interface with an up link [ 385.749743][T14084] bridge0: entered promiscuous mode [ 385.984630][T14088] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 386.018256][T14088] netlink: 'syz.2.1928': attribute type 2 has an invalid length. [ 386.036753][T14088] netlink: 'syz.2.1928': attribute type 2 has an invalid length. [ 386.051523][T14088] netlink: 'syz.2.1928': attribute type 2 has an invalid length. [ 386.063262][T14088] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 386.066185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 386.079317][ C1] lec:lec_tx_timeout: lec0 [ 386.090898][T14088] netlink: 'syz.2.1928': attribute type 2 has an invalid length. [ 386.671206][T14104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.682427][T14104] 8021q: adding VLAN 0 to HW filter on device ` [ 386.695531][T14104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.882161][T14094] netlink: 'syz.3.1930': attribute type 4 has an invalid length. [ 386.933252][T14096] netlink: 'syz.3.1930': attribute type 4 has an invalid length. [ 386.988907][T14094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.113378][T14115] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20004 [ 387.153318][T14123] lo speed is unknown, defaulting to 1000 [ 387.843289][T14146] __nla_validate_parse: 126 callbacks suppressed [ 387.843312][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 387.878032][T14146] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1943'. [ 387.898046][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 388.034551][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 388.085627][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 388.117720][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 388.305039][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1947'. [ 388.724744][T14174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1950'. [ 388.762902][T14182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1953'. [ 388.790228][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'. [ 388.851716][T14185] netlink: 'syz.2.1952': attribute type 6 has an invalid length. [ 389.032574][T14189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.048943][T14190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.321753][T14208] syzkaller1: tun_chr_ioctl cmd 3223345253 [ 389.387723][T14209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.397340][T14202] syzkaller1: tun_chr_ioctl cmd 35108 [ 389.489230][T14209] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 389.521576][T14209] bond3: (slave batadv1): making interface the new active one [ 389.532345][T14209] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 389.706895][T14219] syzkaller1: entered promiscuous mode [ 389.719259][T14219] syzkaller1: entered allmulticast mode [ 390.262735][T14249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.341233][ T5902] lo speed is unknown, defaulting to 1000 [ 390.354648][ T5902] syz2: Port: 1 Link DOWN [ 390.447801][T14257] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 390.498961][T14262] netem: incorrect ge model size [ 390.512223][T14262] netem: change failed [ 390.897374][T14280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.949978][T14286] validate_nla: 2 callbacks suppressed [ 390.949998][T14286] netlink: 'syz.3.1980': attribute type 19 has an invalid length. [ 391.319326][T14298] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 391.345293][T14298] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 392.051762][T14336] netlink: 'syz.1.1995': attribute type 3 has an invalid length. [ 392.086480][T14336] nbd: nbd1 already in use [ 392.094807][T14336] block nbd1: NBD_DISCONNECT [ 392.106961][T14336] block nbd1: Send disconnect failed -104 [ 392.118652][T14336] block nbd1: shutting down sockets [ 392.711685][T14370] lo speed is unknown, defaulting to 1000 [ 392.800906][T14380] netlink: 'syz.4.2005': attribute type 4 has an invalid length. [ 392.824330][T14380] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 392.977747][T14388] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 393.023833][T14388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.061943][T14388] __nla_validate_parse: 19 callbacks suppressed [ 393.061976][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 394.150601][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'. [ 394.163464][T14429] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 394.214584][T14419] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2016'. [ 394.241867][T14427] syzkaller0: entered promiscuous mode [ 394.264956][T14427] syzkaller0: entered allmulticast mode [ 394.300714][T14435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2019'. [ 394.337997][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 394.370813][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 394.556440][T14440] netlink: 'syz.1.2020': attribute type 2 has an invalid length. [ 394.804888][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 394.851495][T14455] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 394.987928][T14459] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 394.997194][T14459] netlink: 728 bytes leftover after parsing attributes in process `syz.3.2027'. [ 394.999555][T14455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 395.298006][T14477] netlink: 'syz.2.2029': attribute type 1 has an invalid length. [ 395.318978][T14479] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 395.463204][T14477] 8021q: adding VLAN 0 to HW filter on device bond11 [ 395.511161][T14477] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2029'. [ 395.592504][T14484] vlan2: entered promiscuous mode [ 395.614994][T14484] bond11: entered promiscuous mode [ 395.631442][T14484] vlan2: entered allmulticast mode [ 395.637677][T14501] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2033'. [ 395.640958][T14484] bond11: entered allmulticast mode [ 395.720753][T14477] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 395.738945][T14477] bond11: (slave batadv1): making interface the new active one [ 395.747229][T14477] batadv1: entered promiscuous mode [ 395.752937][T14477] batadv1: entered allmulticast mode [ 395.765516][T14477] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 395.780075][ T5841] block nbd1: Receive control failed (result -32) [ 396.284344][T14536] netlink: 'syz.3.2043': attribute type 2 has an invalid length. [ 396.484466][T14543] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 396.508635][T14540] lo speed is unknown, defaulting to 1000 [ 396.765775][T14553] IPVS: set_ctl: invalid protocol: 20551 10.1.1.2:20257 [ 396.893826][T14559] lo speed is unknown, defaulting to 1000 [ 399.058822][T14526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.402422][T14582] __nla_validate_parse: 3 callbacks suppressed [ 399.402443][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 399.420740][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 400.523581][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.541660][T14642] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 400.565465][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.611716][T14642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2072'. [ 400.810124][T14661] Bluetooth: MGMT ver 1.23 [ 400.822474][T14659] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2077'. [ 401.123987][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2080'. [ 401.270035][T14679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.062809][T14712] netlink: ct family unspecified [ 402.076784][T14712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.931292][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 402.943994][ T9651] wlan1: Trigger new scan to find an IBSS to join [ 403.061428][T14730] lo: Caught tx_queue_len zero misconfig [ 403.104824][T14730] netlink: 'syz.3.2093': attribute type 5 has an invalid length. [ 403.225820][T14734] 8021q: adding VLAN 0 to HW filter on device bond8 [ 403.251635][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 403.337854][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'. [ 404.920065][T14771] netlink: 'syz.3.2102': attribute type 1 has an invalid length. [ 404.959852][T14771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 404.969905][T14771] bond4: (slave bond5): making interface the new active one [ 404.978131][T14771] bond4: (slave bond5): Enslaving as an active interface with an up link [ 404.998525][T14771] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 405.064576][T14774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2102'. [ 405.075482][T14774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.817562][T14741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.920489][ T12] wlan1: Trigger new scan to find an IBSS to join [ 406.079433][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2106'. [ 406.092508][T14776] vti0: entered allmulticast mode [ 406.113612][T14782] tipc: New replicast peer: 255.255.255.255 [ 406.151350][T14782] tipc: Enabled bearer , priority 10 [ 406.304572][T14780] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2104'. [ 406.346884][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2104'. [ 406.554357][T14803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2113'. [ 406.826919][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2118'. [ 406.836885][T14825] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2118'. [ 406.863060][T14815] bond12: entered allmulticast mode [ 406.887836][T14815] 8021q: adding VLAN 0 to HW filter on device bond12 [ 407.000086][T14832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2119'. [ 407.062903][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 407.242173][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2122'. [ 407.264763][T14841] veth15: entered allmulticast mode [ 407.293010][T14832] bond8 (unregistering): Released all slaves [ 407.422398][T14849] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 407.570513][T14859] lo speed is unknown, defaulting to 1000 [ 407.858768][ T9651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.483000][T14890] lo speed is unknown, defaulting to 1000 [ 409.241192][T14917] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 409.260278][T14917] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 409.272872][T14917] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 409.300291][T14919] netlink: 'syz.1.2136': attribute type 2 has an invalid length. [ 409.353302][T14926] bridge0: port 3(vlan3) entered blocking state [ 409.384855][T14926] bridge0: port 3(vlan3) entered disabled state [ 409.404220][T14926] vlan3: entered allmulticast mode [ 409.414844][T14926] bridge0: entered allmulticast mode [ 409.461584][T14926] vlan3: left allmulticast mode [ 409.481139][T14926] bridge0: left allmulticast mode [ 409.554563][T14951] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 410.076221][T14965] syzkaller1: entered promiscuous mode [ 410.119524][T14965] syzkaller1: entered allmulticast mode [ 410.197771][T14969] __nla_validate_parse: 5 callbacks suppressed [ 410.197794][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 410.894715][T14988] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2142'. [ 411.153441][T14999] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 411.244885][T15000] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2144'. [ 411.355389][T15007] tipc: Enabling of bearer rejected, media not registered [ 411.458398][T15009] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2145'. [ 411.894244][T15035] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 411.894244][T15035] Please contact the netfilter-devel mailing list or update your nftables rules. [ 412.008245][T15038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.062101][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.240167][T15042] netlink: 'syz.0.2157': attribute type 3 has an invalid length. [ 412.273184][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2152'. [ 412.286359][T15042] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2157'. [ 412.445901][T15061] netlink: 'syz.1.2160': attribute type 4 has an invalid length. [ 412.503307][T15063] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2160'. [ 412.650836][T15072] batadv_slave_1: entered promiscuous mode [ 412.684166][T15069] batadv_slave_1: left promiscuous mode [ 412.823728][T15075] netlink: 'syz.3.2163': attribute type 6 has an invalid length. [ 413.632679][T15114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2174'. [ 413.751087][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 413.800649][T15120] 8021q: adding VLAN 0 to HW filter on device bond8 [ 413.846811][T15120] netlink: 364 bytes leftover after parsing attributes in process `syz.1.2175'. [ 413.872305][T15120] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 414.081186][T15126] netlink: 'syz.0.2176': attribute type 21 has an invalid length. [ 414.141729][T15128] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 414.264277][T15135] netlink: 'syz.3.2180': attribute type 11 has an invalid length. [ 414.284844][T15135] netlink: 'syz.3.2180': attribute type 23 has an invalid length. [ 414.609191][T15156] netlink: 'syz.1.2185': attribute type 10 has an invalid length. [ 414.698954][T15156] geneve3: entered promiscuous mode [ 414.733357][ T9645] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.770628][ T9645] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.797754][ T9645] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.814454][ T9645] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.183663][T15178] bond6: (slave dummy0): Releasing active interface [ 415.252988][T15178] batman_adv: batadv0: Adding interface: dummy0 [ 415.281204][T15178] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.360782][T15178] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 415.642434][T15203] __nla_validate_parse: 8 callbacks suppressed [ 415.642458][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2198'. [ 415.713496][T15204] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2198'. [ 416.126827][T15216] netlink: 'syz.2.2204': attribute type 1 has an invalid length. [ 416.210328][T15211] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 416.234088][T15211] bond6 (unregistering): Released all slaves [ 416.237339][T15229] x_tables: duplicate underflow at hook 1 [ 416.331045][T15216] bond13: entered promiscuous mode [ 416.342207][T15233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2205'. [ 416.353663][T15216] 8021q: adding VLAN 0 to HW filter on device bond13 [ 416.367779][T15218] syzkaller0: entered promiscuous mode [ 416.374426][T15218] syzkaller0: entered allmulticast mode [ 416.425124][T15235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2206'. [ 416.480980][T15227] vlan5: entered allmulticast mode [ 416.504865][T15227] bond13: entered allmulticast mode [ 416.547188][T15230] bond13: (slave bridge7): making interface the new active one [ 416.555032][T15230] bridge7: entered promiscuous mode [ 416.561440][T15230] bridge7: entered allmulticast mode [ 416.569595][T15230] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 416.612236][T15243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2208'. [ 416.670799][T15243] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.707212][T15243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.714922][T15243] IPv6: NLM_F_CREATE should be set when creating new route [ 416.722272][T15243] IPv6: NLM_F_CREATE should be set when creating new route [ 416.729676][T15243] IPv6: NLM_F_CREATE should be set when creating new route [ 416.751651][T15247] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2209'. [ 416.785009][T15251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2211'. [ 416.884014][T15256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.922289][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2210'. [ 416.944522][T15257] IPv6: sit3: Disabled Multicast RS [ 417.079994][T15263] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2213'. [ 417.201477][T15267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2215'. [ 417.221883][T15267] sch_fq: defrate 4294967293 ignored. [ 417.264803][T15269] IPVS: Error connecting to the multicast addr [ 417.439592][T15239] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 417.808743][T15292] netlink: 'syz.3.2222': attribute type 13 has an invalid length. [ 417.883199][T15304] netlink: 'syz.2.2224': attribute type 3 has an invalid length. [ 418.018749][T15293] lo speed is unknown, defaulting to 1000 [ 418.198945][T15323] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 418.452953][T15328] lo: Caught tx_queue_len zero misconfig [ 418.482056][T15328] netem: incorrect ge model size [ 418.499910][T15328] netem: change failed [ 420.195301][T15405] lo speed is unknown, defaulting to 1000 [ 420.768052][T15418] lo speed is unknown, defaulting to 1000 [ 421.371684][T15438] lo speed is unknown, defaulting to 1000 [ 421.688916][T15448] __nla_validate_parse: 21 callbacks suppressed [ 421.688937][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 421.728118][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 421.964841][T15458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2263'. [ 422.098799][T15464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2265'. [ 422.527478][T15466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2265'. [ 422.757987][T15474] vlan2: left promiscuous mode [ 422.777571][T15474] bond11: left promiscuous mode [ 422.791511][T15474] batadv1: left promiscuous mode [ 422.821042][T15474] vlan2: left allmulticast mode [ 422.849295][T15474] bond11: left allmulticast mode [ 422.873067][T15474] batadv1: left allmulticast mode [ 422.906115][T15474] vti0: left allmulticast mode [ 422.949071][T15474] bond12: left allmulticast mode [ 423.001355][T15474] bond13: left promiscuous mode [ 423.018238][T15474] bridge7: left promiscuous mode [ 423.032778][T15474] vlan5: left allmulticast mode [ 423.045135][T15474] bond13: left allmulticast mode [ 423.067624][T15474] bridge7: left allmulticast mode [ 423.167932][T15498] netlink: 'syz.4.2272': attribute type 10 has an invalid length. [ 423.254339][T15498] batman_adv: batadv0: Removing interface: dummy0 [ 423.426988][T15498] `: Port device dummy0 added [ 423.442640][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 423.512171][T15513] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2276'. [ 423.534092][T15504] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 423.605960][T15492] lo speed is unknown, defaulting to 1000 [ 424.033910][T15534] Unknown options in mask 6 [ 424.063491][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2281'. [ 424.265259][T15534] lo speed is unknown, defaulting to 1000 [ 424.786822][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 424.823944][T15565] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2289'. [ 425.162551][T15577] tipc: Enabling of bearer rejected, already enabled [ 425.341188][T15576] bridge0: port 2(veth0_to_bridge) entered blocking state [ 425.366109][T15576] bridge0: port 2(veth0_to_bridge) entered disabled state [ 425.390290][T15576] veth0_to_bridge: entered allmulticast mode [ 425.430130][T15576] veth0_to_bridge: entered promiscuous mode [ 425.507435][T15584] bond9: (slave vcan1): refused to change device type [ 425.651443][T15599] bond0: entered promiscuous mode [ 425.674821][T15599] batadv0: entered promiscuous mode [ 425.702981][T15599] debugfs: 'hsr0' already exists in 'hsr' [ 425.720451][T15599] Cannot create hsr debugfs directory [ 425.748841][T15599] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 425.770325][T15599] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 425.788416][T15599] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 425.798165][T15599] bond0: left promiscuous mode [ 425.810533][T15599] batadv0: left promiscuous mode [ 425.866008][T15587] lo speed is unknown, defaulting to 1000 [ 426.142417][T15613] 8021q: adding VLAN 0 to HW filter on device bond14 [ 426.313227][T15618] macsec2: entered promiscuous mode [ 426.327653][T15618] bond14: entered promiscuous mode [ 426.333983][T15618] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 426.359432][T15618] bond14: left promiscuous mode [ 426.395226][T15633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.425387][T15621] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 426.683805][T15641] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.745614][T15641] bond3: (slave lo): Enslaving as an active interface with an up link [ 426.798242][T15641] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 426.877847][T15642] lo speed is unknown, defaulting to 1000 [ 426.944413][T15650] __nla_validate_parse: 5 callbacks suppressed [ 426.944436][T15650] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2309'. [ 427.354215][T15667] veth1_to_bridge: entered allmulticast mode [ 427.367756][T15667] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 427.777003][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'. [ 427.797597][T15690] netlink: 'syz.0.2316': attribute type 8 has an invalid length. [ 427.836613][T15693] tipc: Enabled bearer , priority 0 [ 427.957585][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 428.037337][T15693] syzkaller0: entered promiscuous mode [ 428.053343][T15693] syzkaller0: entered allmulticast mode [ 428.072023][T15693] tipc: Resetting bearer [ 428.245472][T15700] netlink: 'syz.0.2319': attribute type 13 has an invalid length. [ 428.268231][T15700] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2319'. [ 428.548845][ T9651] tipc: Resetting bearer [ 428.565352][T15692] tipc: Resetting bearer [ 431.253541][T15692] tipc: Disabling bearer [ 431.267017][T15699] batadv0: entered promiscuous mode [ 431.273009][T15699] batadv0: entered allmulticast mode [ 431.281963][T15699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.653659][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 431.853096][T15748] veth0_macvtap: left promiscuous mode [ 431.944916][T15748] xt_hashlimit: max too large, truncated to 1048576 [ 431.978206][T15755] syzkaller0: entered promiscuous mode [ 432.004514][T15755] syzkaller0: entered allmulticast mode [ 432.034183][T15756] syzkaller1: entered promiscuous mode [ 432.051240][T15756] syzkaller1: entered allmulticast mode [ 432.775280][T15797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2340'. [ 432.857205][T15781] bond6 (unregistering): Released all slaves [ 433.294593][T15821] tipc: Started in network mode [ 433.305610][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 433.324741][T15821] tipc: Node identity e0000001, cluster identity 4711 [ 433.351637][T15821] tipc: Enabling of bearer rejected, failed to enable media [ 433.379588][T15823] syz.0.2348 uses old SIOCAX25GETINFO [ 433.598867][T15829] netlink: 'syz.0.2349': attribute type 64 has an invalid length. [ 433.753637][T15834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2351'. [ 433.990821][T15846] netlink: 'syz.4.2353': attribute type 4 has an invalid length. [ 434.053602][T15843] netlink: 'syz.4.2353': attribute type 4 has an invalid length. [ 434.319944][T15861] nbd: must specify an index to disconnect [ 434.518512][T15870] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2359'. [ 434.720929][T15878] bond0: Caught tx_queue_len zero misconfig [ 434.745691][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'. [ 435.201820][T15905] netlink: 'syz.2.2367': attribute type 39 has an invalid length. [ 435.438886][T15915] openvswitch: netlink: Actions may not be safe on all matching packets [ 435.606690][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2371'. [ 435.679793][T15928] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 435.754377][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 435.940166][T15939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2377'. [ 435.994608][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'. [ 436.014897][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'. [ 436.178601][T15939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 436.286102][T15962] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 436.582045][ T6759] lec:lec_start_xmit: lec0:No lecd attached [ 436.775636][T15979] netlink: 'syz.2.2386': attribute type 11 has an invalid length. [ 437.422122][T16003] lo speed is unknown, defaulting to 1000 [ 437.431710][T16014] tipc: Started in network mode [ 437.446798][T16014] tipc: Node identity 080211000001, cluster identity 4711 [ 437.457745][T16016] ipt_ECN: cannot use operation on non-tcp rule [ 437.481038][T16014] tipc: Enabled bearer , priority 0 [ 437.549363][T16018] can: request_module (can-proto-0) failed. [ 437.586629][T16014] tipc: Resetting bearer [ 438.254952][T16037] __nla_validate_parse: 4 callbacks suppressed [ 438.254976][T16037] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2403'. [ 438.423449][T16037] bond0 (unregistering): left promiscuous mode [ 438.461505][T16037] bond_slave_0: left promiscuous mode [ 438.503145][T16037] bond_slave_1: left promiscuous mode [ 438.566598][T16037] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 438.608129][T16037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.659159][T16037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.691941][T16037] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 438.710717][T16037] bond0 (unregistering): Released all slaves [ 438.747924][T10469] tipc: Node number set to 134418688 [ 439.104539][T16073] netlink: 'syz.0.2414': attribute type 2 has an invalid length. [ 439.153686][T16073] l2: entered promiscuous mode [ 439.293372][T16081] netlink: 'syz.0.2416': attribute type 1 has an invalid length. [ 439.333285][T16081] bond11: entered promiscuous mode [ 439.340675][T16081] 8021q: adding VLAN 0 to HW filter on device bond11 [ 439.539678][T16091] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2417'. [ 439.645632][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'. [ 440.172613][T16120] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.199521][T16120] veth0: entered promiscuous mode [ 440.209156][T16120] bond0: entered promiscuous mode [ 440.214279][T16120] bond_slave_0: entered promiscuous mode [ 440.227764][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.271763][T16120] bond_slave_1: entered promiscuous mode [ 440.455202][T16116] [ 440.457631][T16116] ====================================================== [ 440.464938][T16116] WARNING: possible circular locking dependency detected [ 440.472128][T16116] syzkaller #0 Not tainted [ 440.476658][T16116] ------------------------------------------------------ [ 440.483767][T16116] syz.1.2424/16116 is trying to acquire lock: [ 440.489845][T16116] ffff888026d63418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 440.499337][T16116] [ 440.499337][T16116] but task is already holding lock: [ 440.506732][T16116] ffff888026d62ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 440.516941][T16116] [ 440.516941][T16116] which lock already depends on the new lock. [ 440.516941][T16116] [ 440.527371][T16116] [ 440.527371][T16116] the existing dependency chain (in reverse order) is: [ 440.536665][T16116] [ 440.536665][T16116] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 440.545546][T16116] blk_alloc_queue+0x546/0x680 [ 440.551054][T16116] __blk_mq_alloc_disk+0x197/0x390 [ 440.556780][T16116] nbd_dev_add+0x499/0xb50 [ 440.561945][T16116] nbd_init+0x168/0x1f0 [ 440.566641][T16116] do_one_initcall+0x250/0x870 [ 440.571941][T16116] do_initcall_level+0x104/0x190 [ 440.577599][T16116] do_initcalls+0x59/0xa0 [ 440.582456][T16116] kernel_init_freeable+0x2a6/0x3e0 [ 440.588709][T16116] kernel_init+0x1d/0x1d0 [ 440.593664][T16116] ret_from_fork+0x514/0xb70 [ 440.598785][T16116] ret_from_fork_asm+0x1a/0x30 [ 440.604177][T16116] [ 440.604177][T16116] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 440.611401][T16116] fs_reclaim_acquire+0x71/0x100 [ 440.616868][T16116] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 440.623528][T16116] __alloc_skb+0x1d0/0x7d0 [ 440.628786][T16116] __ip6_append_data+0x2d6d/0x3f70 [ 440.634533][T16116] ip6_append_data+0x10f/0x280 [ 440.639832][T16116] rawv6_sendmsg+0x12d3/0x18e0 [ 440.645133][T16116] ____sys_sendmsg+0x80a/0x9f0 [ 440.650525][T16116] ___sys_sendmsg+0x2a5/0x360 [ 440.655743][T16116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 440.661219][T16116] do_syscall_64+0x15f/0xf80 [ 440.666521][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.672942][T16116] [ 440.672942][T16116] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 440.680685][T16116] lock_sock_nested+0x41/0x100 [ 440.685988][T16116] inet_shutdown+0x6a/0x390 [ 440.691020][T16116] nbd_mark_nsock_dead+0x2e9/0x560 [ 440.696669][T16116] recv_work+0x1c2e/0x1d40 [ 440.701615][T16116] process_scheduled_works+0xb5d/0x1860 [ 440.708342][T16116] worker_thread+0xa53/0xfc0 [ 440.713731][T16116] kthread+0x388/0x470 [ 440.718357][T16116] ret_from_fork+0x514/0xb70 [ 440.723666][T16116] ret_from_fork_asm+0x1a/0x30 [ 440.729066][T16116] [ 440.729066][T16116] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 440.736725][T16116] __mutex_lock+0x1a3/0x1550 [ 440.741937][T16116] nbd_queue_rq+0x37b/0x1100 [ 440.747315][T16116] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 440.753593][T16116] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 440.760646][T16116] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 440.767337][T16116] blk_mq_run_hw_queue+0x348/0x4f0 [ 440.772989][T16116] blk_mq_dispatch_list+0xd16/0xe10 [ 440.778894][T16116] blk_mq_flush_plug_list+0x48d/0x570 [ 440.784877][T16116] __blk_flush_plug+0x3ed/0x4d0 [ 440.790261][T16116] __submit_bio+0x28d/0x580 [ 440.795294][T16116] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 440.801634][T16116] block_read_full_folio+0x599/0x830 [ 440.807705][T16116] filemap_read_folio+0x137/0x3b0 [ 440.813344][T16116] do_read_cache_folio+0x358/0x590 [ 440.819076][T16116] read_part_sector+0xb6/0x2b0 [ 440.824367][T16116] adfspart_check_ICS+0xb1/0x960 [ 440.829838][T16116] bdev_disk_changed+0x817/0x1770 [ 440.835495][T16116] blkdev_get_whole+0x380/0x510 [ 440.841007][T16116] bdev_open+0x31e/0xd30 [ 440.845789][T16116] blkdev_open+0x470/0x610 [ 440.850740][T16116] do_dentry_open+0x785/0x14e0 [ 440.856073][T16116] vfs_open+0x3b/0x340 [ 440.860759][T16116] path_openat+0x2e08/0x3860 [ 440.865900][T16116] do_file_open+0x23e/0x4a0 [ 440.871130][T16116] do_sys_openat2+0x113/0x200 [ 440.876437][T16116] __x64_sys_openat+0x138/0x170 [ 440.881817][T16116] do_syscall_64+0x15f/0xf80 [ 440.886932][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.893354][T16116] [ 440.893354][T16116] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 440.900677][T16116] __mutex_lock+0x1a3/0x1550 [ 440.905804][T16116] nbd_queue_rq+0xc6/0x1100 [ 440.910835][T16116] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 440.916911][T16116] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 440.923902][T16116] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 440.930603][T16116] blk_mq_run_hw_queue+0x348/0x4f0 [ 440.936257][T16116] blk_mq_dispatch_list+0xd16/0xe10 [ 440.942006][T16116] blk_mq_flush_plug_list+0x48d/0x570 [ 440.947907][T16116] __blk_flush_plug+0x3ed/0x4d0 [ 440.953288][T16116] __submit_bio+0x28d/0x580 [ 440.958323][T16116] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 440.964487][T16116] block_read_full_folio+0x599/0x830 [ 440.970301][T16116] filemap_read_folio+0x137/0x3b0 [ 440.975940][T16116] do_read_cache_folio+0x358/0x590 [ 440.981751][T16116] read_part_sector+0xb6/0x2b0 [ 440.987854][T16116] adfspart_check_ICS+0xb1/0x960 [ 440.993510][T16116] bdev_disk_changed+0x817/0x1770 [ 440.999151][T16116] blkdev_get_whole+0x380/0x510 [ 441.004532][T16116] bdev_open+0x31e/0xd30 [ 441.009294][T16116] blkdev_open+0x470/0x610 [ 441.014395][T16116] do_dentry_open+0x785/0x14e0 [ 441.019688][T16116] vfs_open+0x3b/0x340 [ 441.024319][T16116] path_openat+0x2e08/0x3860 [ 441.029445][T16116] do_file_open+0x23e/0x4a0 [ 441.034805][T16116] do_sys_openat2+0x113/0x200 [ 441.040007][T16116] __x64_sys_openat+0x138/0x170 [ 441.045392][T16116] do_syscall_64+0x15f/0xf80 [ 441.050512][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.056954][T16116] [ 441.056954][T16116] -> #1 (set->srcu){.+.+}-{0:0}: [ 441.064091][T16116] __synchronize_srcu+0xca/0x300 [ 441.069768][T16116] elevator_switch+0x1e8/0x7a0 [ 441.075108][T16116] elevator_change+0x2cc/0x450 [ 441.080518][T16116] elevator_set_default+0x36c/0x430 [ 441.086255][T16116] blk_register_queue+0x3e9/0x4e0 [ 441.091902][T16116] __add_disk+0x677/0xd50 [ 441.096765][T16116] add_disk_fwnode+0xfb/0x480 [ 441.102070][T16116] nbd_dev_add+0x72c/0xb50 [ 441.107104][T16116] nbd_init+0x168/0x1f0 [ 441.111806][T16116] do_one_initcall+0x250/0x870 [ 441.117119][T16116] do_initcall_level+0x104/0x190 [ 441.122791][T16116] do_initcalls+0x59/0xa0 [ 441.127748][T16116] kernel_init_freeable+0x2a6/0x3e0 [ 441.133500][T16116] kernel_init+0x1d/0x1d0 [ 441.138508][T16116] ret_from_fork+0x514/0xb70 [ 441.143906][T16116] ret_from_fork_asm+0x1a/0x30 [ 441.149440][T16116] [ 441.149440][T16116] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 441.157355][T16116] __lock_acquire+0x15a5/0x2cf0 [ 441.162741][T16116] lock_acquire+0x106/0x350 [ 441.167871][T16116] __mutex_lock+0x1a3/0x1550 [ 441.173188][T16116] elevator_change+0x1b3/0x450 [ 441.178609][T16116] elevator_set_none+0xb5/0x140 [ 441.183999][T16116] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 441.190422][T16116] nbd_start_device+0x17f/0xb10 [ 441.195818][T16116] nbd_genl_connect+0x165b/0x1cf0 [ 441.201617][T16116] genl_family_rcv_msg_doit+0x22a/0x330 [ 441.207826][T16116] genl_rcv_msg+0x61c/0x7a0 [ 441.212860][T16116] netlink_rcv_skb+0x232/0x4b0 [ 441.218156][T16116] genl_rcv+0x28/0x40 [ 441.222660][T16116] netlink_unicast+0x75c/0x8e0 [ 441.227956][T16116] netlink_sendmsg+0x813/0xb40 [ 441.233252][T16116] ____sys_sendmsg+0x972/0x9f0 [ 441.238548][T16116] ___sys_sendmsg+0x2a5/0x360 [ 441.243764][T16116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.249330][T16116] do_syscall_64+0x15f/0xf80 [ 441.254543][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.260962][T16116] [ 441.260962][T16116] other info that might help us debug this: [ 441.260962][T16116] [ 441.271200][T16116] Chain exists of: [ 441.271200][T16116] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 441.271200][T16116] [ 441.285311][T16116] Possible unsafe locking scenario: [ 441.285311][T16116] [ 441.292765][T16116] CPU0 CPU1 [ 441.298483][T16116] ---- ---- [ 441.303931][T16116] lock(&q->q_usage_counter(io)#51); [ 441.309507][T16116] lock(fs_reclaim); [ 441.316049][T16116] lock(&q->q_usage_counter(io)#51); [ 441.324217][T16116] lock(&q->elevator_lock); [ 441.329079][T16116] [ 441.329079][T16116] *** DEADLOCK *** [ 441.329079][T16116] [ 441.337574][T16116] 6 locks held by syz.1.2424/16116: [ 441.342773][T16116] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.351059][T16116] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 441.360133][T16116] #2: ffff888026cc51c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 441.371811][T16116] #3: ffff888026cc50d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 441.383059][T16116] #4: ffff888026d62ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 441.393871][T16116] #5: ffff888026d62f28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 441.404940][T16116] [ 441.404940][T16116] stack backtrace: [ 441.410920][T16116] CPU: 1 UID: 0 PID: 16116 Comm: syz.1.2424 Not tainted syzkaller #0 PREEMPT(full) [ 441.410941][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 441.410951][T16116] Call Trace: [ 441.410959][T16116] [ 441.410966][T16116] dump_stack_lvl+0xe8/0x150 [ 441.410992][T16116] print_circular_bug+0x2e1/0x300 [ 441.411019][T16116] check_noncircular+0x12e/0x150 [ 441.411046][T16116] __lock_acquire+0x15a5/0x2cf0 [ 441.411076][T16116] ? elevator_change+0x1b3/0x450 [ 441.411091][T16116] lock_acquire+0x106/0x350 [ 441.411111][T16116] ? elevator_change+0x1b3/0x450 [ 441.411130][T16116] __mutex_lock+0x1a3/0x1550 [ 441.411151][T16116] ? elevator_change+0x1b3/0x450 [ 441.411167][T16116] ? rcu_is_watching+0x15/0xb0 [ 441.411191][T16116] ? work_grab_pending+0x3d1/0x990 [ 441.411215][T16116] ? elevator_change+0x1b3/0x450 [ 441.411230][T16116] ? __pfx___mutex_lock+0x10/0x10 [ 441.411249][T16116] ? enable_work+0x17f/0x230 [ 441.411263][T16116] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.411284][T16116] ? __cancel_work_sync+0xf7/0x110 [ 441.411299][T16116] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 441.411318][T16116] elevator_change+0x1b3/0x450 [ 441.411336][T16116] elevator_set_none+0xb5/0x140 [ 441.411351][T16116] ? __pfx_elevator_set_none+0x10/0x10 [ 441.411368][T16116] ? xa_load+0x1db/0x210 [ 441.411390][T16116] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 441.411416][T16116] ? kernfs_add_one+0x477/0x5c0 [ 441.411446][T16116] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 441.411470][T16116] ? sysfs_add_file_mode_ns+0x259/0x300 [ 441.411492][T16116] nbd_start_device+0x17f/0xb10 [ 441.411513][T16116] ? device_create_file+0xf4/0x1b0 [ 441.411532][T16116] nbd_genl_connect+0x165b/0x1cf0 [ 441.411548][T16116] ? __pfx___nla_validate_parse+0x10/0x10 [ 441.411568][T16116] ? __pfx_nbd_genl_connect+0x10/0x10 [ 441.411586][T16116] ? rcu_is_watching+0x15/0xb0 [ 441.411609][T16116] ? trace_kmalloc+0x2a/0xf0 [ 441.411634][T16116] ? __nla_parse+0x40/0x60 [ 441.411650][T16116] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 441.411668][T16116] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 441.411689][T16116] genl_family_rcv_msg_doit+0x22a/0x330 [ 441.411710][T16116] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.411732][T16116] ? __lock_acquire+0x6b5/0x2cf0 [ 441.411756][T16116] genl_rcv_msg+0x61c/0x7a0 [ 441.411775][T16116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.411791][T16116] ? __pfx_nbd_genl_connect+0x10/0x10 [ 441.411812][T16116] netlink_rcv_skb+0x232/0x4b0 [ 441.411835][T16116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.411852][T16116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.411880][T16116] ? down_read+0x270/0x2e0 [ 441.411900][T16116] ? genl_rcv+0xd/0x40 [ 441.411917][T16116] genl_rcv+0x28/0x40 [ 441.411932][T16116] netlink_unicast+0x75c/0x8e0 [ 441.411956][T16116] netlink_sendmsg+0x813/0xb40 [ 441.411983][T16116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.412006][T16116] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.412028][T16116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.412054][T16116] ____sys_sendmsg+0x972/0x9f0 [ 441.412079][T16116] ? __might_fault+0xaf/0x130 [ 441.412103][T16116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.412130][T16116] ? import_iovec+0x73/0xa0 [ 441.412147][T16116] ___sys_sendmsg+0x2a5/0x360 [ 441.412170][T16116] ? __lock_acquire+0x6b5/0x2cf0 [ 441.412193][T16116] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.412219][T16116] ? futex_wake+0x4ac/0x580 [ 441.412245][T16116] ? __fget_files+0x2a/0x420 [ 441.412265][T16116] ? __fget_files+0x3a0/0x420 [ 441.412288][T16116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.412313][T16116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.412341][T16116] ? rcu_is_watching+0x15/0xb0 [ 441.412367][T16116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.412384][T16116] do_syscall_64+0x15f/0xf80 [ 441.412403][T16116] ? trace_irq_disable+0x3b/0x140 [ 441.412420][T16116] ? clear_bhb_loop+0x40/0x90 [ 441.412444][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.412461][T16116] RIP: 0033:0x7f69c2f9c819 [ 441.412476][T16116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.412491][T16116] RSP: 002b:00007f69c3ebb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.412509][T16116] RAX: ffffffffffffffda RBX: 00007f69c3215fa0 RCX: 00007f69c2f9c819 [ 441.412521][T16116] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 441.412532][T16116] RBP: 00007f69c3032c91 R08: 0000000000000000 R09: 0000000000000000 [ 441.412542][T16116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.412552][T16116] R13: 00007f69c3216038 R14: 00007f69c3215fa0 R15: 00007fff64bab6f8 [ 441.412571][T16116] [ 441.874097][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 441.882201][ C1] lec:lec_tx_timeout: lec0 [ 441.887610][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 441.954350][T16115] bond0: left promiscuous mode [ 441.962531][T16115] bond_slave_0: left promiscuous mode [ 441.968405][T16115] bond_slave_1: left promiscuous mode [ 441.971092][ T5841] block nbd2: Receive control failed (result -32) [ 441.974325][T16115] veth0: left promiscuous mode [ 441.980906][ T5841] block nbd2: Receive control failed (result -32) [ 447.256292][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms [ 447.264453][ C1] lec:lec_tx_timeout: lec0