last executing test programs: 6.300160875s ago: executing program 4 (id=2947): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r4}, 0x18) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x13012, r0, 0x0) 5.274041442s ago: executing program 4 (id=2953): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400010600000000000000002b"], 0x14}}, 0x0) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='mm_vmscan_throttled\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e900"], 0x14}], 0x1}, 0x0) r8 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101, 0x0, 0xff, 'geneve0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x8a}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x9b7c908f2b8e1a95, 0x7, 0x4, 0x5, 0x2, 0x6], 0x6, 0x4}}}, @common=@ah={{0x30}, {[0x5e7, 0x5], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010101, 0xff, 0xff, 'bond_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x2, 0x1, 0x8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7, 0x2, [0x10, 0x35, 0x25, 0x13, 0x22, 0x2a, 0x3a, 0x6, 0x3b, 0x0, 0x22, 0x34, 0x1c, 0x18, 0x8, 0x20], 0x0, 0x101, 0x1ff}}}, {{@ip={@remote, @empty, 0x0, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_team\x00', {}, {0xff}, 0x29, 0x1, 0x66}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0x8], 0x1}}, @common=@addrtype={{0x30}, {0x1, 0x50d, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x401, 0x5, 0x0, 0x0, "853c33257b2d6b6a289a8fd1e96241b142b2bc3502c7504d6eb53ef50b190f6d7edb42e2b8b37064a354c62dd28b596f768c3f7d1e3616efa89d7d37dc9f3f64"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 5.032962476s ago: executing program 2 (id=2954): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) 4.840459359s ago: executing program 3 (id=2956): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="070000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x3) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611148000000000095"], &(0x7f00000004c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)=ANY=[@ANYRES16=r9], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.22079092s ago: executing program 3 (id=2958): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) unshare(0x8040480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}}, 0x1c}}, 0x0) unshare(0x6a040000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf008400"/32, @ANYRES32=r6, @ANYBLOB="04000800"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r7, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0xfb, 0x53, 0x3, 0x0, @loopback, @mcast2={0xff, 0x5}, 0x8, 0x700, 0x7d, 0x3ff}}) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) 4.201500809s ago: executing program 4 (id=2959): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000003000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186400000500000000000000040000007509fcff080000001591c0fffcffffffc7388000ffffffff70500800f8ffffff181500002290749b9db99368051ae21a466acd2b940f0fc9d4a4c5f14d02", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x1e, 0x1, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x1}}, 0x10) shutdown(r5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004700)=""/4093, 0xffd}, {&(0x7f0000001840)=""/4074, 0xfea}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000140)=""/177, 0xb1}, {&(0x7f0000000400)=""/193, 0xc1}], 0x6}, 0x102) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffff010000000001000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00050037193c99a8772efb0c000200ffff000000000000"], 0x3c}}, 0x20000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x5) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000380)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c7", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x33) 4.066887495s ago: executing program 1 (id=2960): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) unshare(0x8040480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}}, 0x1c}}, 0x0) unshare(0x6a040000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf008400"/32, @ANYRES32=r6, @ANYBLOB="04000800"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r7, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0xfb, 0x53, 0x3, 0x0, @loopback, @mcast2={0xff, 0x5}, 0x8, 0x700, 0x7d, 0x3ff}}) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) 4.00730199s ago: executing program 2 (id=2961): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(r3, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) listen(r1, 0x10000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) r10 = socket$netlink(0x10, 0x3, 0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, r11, 0x1, '\x00', r6, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) writev(r10, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 3.582458127s ago: executing program 2 (id=2962): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 3.530198433s ago: executing program 4 (id=2963): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r4}, 0x18) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x13012, r0, 0x0) 3.510305826s ago: executing program 0 (id=2964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.471301148s ago: executing program 1 (id=2965): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10}, {0xf, 0x9}, {0x0, 0xffff}}, ["", "", "", "", "", ""]}, 0x24}}, 0x1) unshare(0x6a040000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r9, @ANYBLOB="0004000000000000001d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100000200000000000000df98b07ed6c1497842eeab8c9b9bf61024e617f7409f7380f03ebc2cce1ccc2ae0058b1cb678014564d2bb8b574975057cf20738bc7a40cc9f8f9ae1f1da417c85d671588688b7f7837eec565c4efeb0549dc25016b7127ea17c73d52300000000"], 0x44}, 0x5}, 0x0) 3.29117497s ago: executing program 3 (id=2966): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettaction={0x84, 0x32, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xec}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x99}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x93, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x84}}, 0x40c4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) close(r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newtaction={0x1e04, 0x30, 0xffff, 0x0, 0x0, {}, [{0x1df0, 0x1, [@m_pedit={0x1dec, 0x7, 0x0, 0x0, {{0xa}, {0x1d34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x3, 0x1, 0x4, 0x1, 0xc60}, 0x7, 0x3, [{0x3ff, 0x4, 0x6af, 0x2, 0xffff, 0x6}, {0x1, 0x8, 0x9, 0x1ff, 0x7, 0xffffffff}]}, [{0x9, 0x10, 0x10, 0x1, 0x8, 0x9}, {0x0, 0x9, 0x80000001, 0x3, 0x5, 0x289}, {0x4, 0x2, 0x3, 0x0, 0xdcd, 0x6}, {0x9, 0x3ff, 0x4, 0x0, 0x7fff, 0x2}, {0x100000, 0xaf9c, 0x5, 0x9, 0x9, 0x40}, {0x0, 0x4, 0x10001, 0x10001, 0x0, 0x1}, {0x1, 0x0, 0x9, 0x2, 0xfff, 0x6}, {0x3, 0xffffff7f, 0x1000, 0xffffffff, 0x34c0712d, 0xd}, {0x5, 0x10000, 0x10000, 0xff, 0x100, 0x5}, {0xd, 0x2657, 0x8, 0x6, 0x7, 0xc2}, {0x400, 0x9, 0x40, 0x2, 0x5}, {0x50f, 0x7fffffff, 0x0, 0x2, 0x9, 0x7f}, {0xc000000, 0x6, 0xfff, 0x9, 0x6449, 0x101}, {0x6, 0x0, 0x7f, 0x0, 0x0, 0xb}, {0xc1, 0x800, 0x4, 0xffff7fff, 0x8, 0x6}, {0x8, 0xfffffffc, 0x3, 0x756, 0x78, 0xc}, {0x8, 0x1000, 0xffff, 0xdf, 0xfffffffd, 0x9}, {0x6, 0x3, 0x0, 0x8, 0x7fff, 0x5}, {0xfffffff8, 0x6, 0x1, 0x7, 0x5, 0x3}, {0x7, 0x5, 0x1000, 0x7, 0x7, 0x1}, {0x1, 0x9, 0x2, 0x2, 0x2, 0xdf57}, {0xd, 0x9, 0x1000, 0xfff, 0xd, 0x380000}, {0x101, 0x3, 0x8, 0x800, 0x8, 0x68}, {0xffff, 0x205dc7d7, 0x9, 0x500, 0x8, 0x10000}, {0x3, 0x2, 0x2, 0x9, 0x9, 0xfffffff7}, {0x7, 0x4, 0x1, 0x4, 0x5, 0x75}, {0x0, 0x9, 0x96, 0x0, 0xff, 0x2}, {0x7fffffff, 0x7, 0xebd, 0x9, 0x9, 0x7}, {0x4, 0x2, 0x6, 0x6, 0x5, 0x3}, {0x0, 0x9, 0x3, 0x5, 0x14bb, 0x6}, {0x5, 0x7, 0x4, 0x2, 0xfffeffff, 0x401}, {0x100, 0x6, 0x5, 0x1, 0x80000000, 0x1}, {0x400, 0x90, 0x2, 0x0, 0x6, 0x3}, {0x2, 0x81, 0x7ffe, 0x3, 0x8001, 0x1}, {0x6, 0x2, 0xf, 0xffff, 0x1000, 0xf1a}, {0x6, 0x9, 0xffffffff, 0x9, 0xe3, 0x1}, {0x19, 0x3, 0x7f, 0x81, 0x8000, 0x7ff}, {0x4, 0x8, 0xf, 0x7, 0x0, 0xf7e8}, {0x6, 0x5, 0x1, 0xff, 0xcc7, 0x1}, {0x5, 0x8000, 0x3, 0x7, 0x7, 0xe000000}, {0x1ff, 0x3, 0xff, 0x2, 0x1, 0x7fff}, {0x17d, 0x7, 0xa87, 0x3, 0x5f3, 0x5df}, {0xfff, 0x7, 0x2, 0xc, 0x3, 0x273}, {0x8, 0x0, 0xd36f, 0x1, 0x80, 0x8}, {0x8, 0xde, 0x80, 0x5, 0x6, 0xdd}, {0x9, 0xb, 0x81, 0x8004, 0x8, 0x3}, {0xd, 0x46, 0x3, 0x126d, 0x3, 0x185}, {0x94, 0x8000, 0x3, 0x40, 0x1000, 0x3}, {0x7fff, 0x4, 0x3b1, 0xfffffff7, 0x88, 0x5}, {0x1, 0x3ff, 0xebf5, 0x8, 0x0, 0x8}, {0x1, 0x0, 0x2, 0x7, 0x1, 0xfffffffd}, {0x4, 0x9, 0xfffffff0, 0x8, 0x4, 0x7}, {0xec1, 0x2, 0x5, 0x8, 0x3, 0x10000000}, {0xb, 0xc97d, 0x5, 0x4, 0x5, 0xfffffffb}, {0x6, 0x6, 0xb, 0x2, 0x9, 0xffffffff}, {0x8, 0xb1d, 0x2, 0x40, 0x1}, {0x3, 0x80, 0x5, 0x5, 0x1}, {0x200, 0x3, 0x2, 0xf5, 0x8, 0x71619b34}, {0x200, 0x7f, 0x7, 0x4, 0xfff, 0x4ac}, {0xaea5, 0x6, 0xde9f, 0x5, 0x4, 0x1358a6d}, {0x200000, 0x3, 0x205da, 0x2, 0x8, 0xff}, {0x4af, 0x3, 0x0, 0x2, 0xf3, 0x5}, {0x200, 0xff0, 0x4, 0x3, 0xfffffff7, 0x2}, {0x6, 0x80000000, 0x1, 0x7f, 0x94, 0x2}, {0x3, 0xc2, 0x380d1fd6, 0x5, 0x2, 0x13617aba}, {0x400, 0x8, 0x6, 0x3, 0x8, 0xff}, {0xd8, 0x7, 0x10001, 0x89, 0x46d, 0x8}, {0x7, 0x6, 0x4, 0x9, 0x2, 0x6}, {0xb3, 0xffffff0a, 0x3, 0x2, 0x5, 0xc}, {0x0, 0x10000006, 0xffffffff, 0x2, 0x9, 0xfffff6b0}, {0x0, 0x10000, 0x0, 0x6, 0xffffffff, 0x1}, {0x3, 0x5, 0x4, 0x8, 0x8, 0x7}, {0x6, 0x5, 0x800, 0x1000, 0x8, 0x7fff}, {0x1, 0x6, 0x6, 0xb320, 0x9}, {0x7, 0x9, 0x9, 0x2, 0x1, 0x101}, {0x5, 0x344, 0xcf55, 0xc, 0xff, 0x3}, {0x8, 0x0, 0x8, 0x40, 0x3, 0xaa5d}, {0x9, 0x81, 0x7, 0xbc3, 0x64378aa7}, {0x80000001, 0x6, 0x9, 0x900, 0x401, 0x7fffffff}, {0x4, 0x3, 0x8, 0x4}, {0x8, 0x3, 0xfffffffc, 0x5, 0x6, 0x3}, {0x8, 0x5, 0x5ee, 0x1000, 0x8, 0x3}, {0x6613, 0x800, 0x5, 0xb, 0x5, 0x4}, {0x7, 0x100, 0x9, 0x6, 0x8, 0x7e9}, {0x1, 0x40, 0x8, 0xfffffffe, 0x6, 0x7fff}, {0x7fffffff, 0x787, 0x2, 0xfffffff7, 0x0, 0x7}, {0x800, 0xfae, 0x4, 0x800, 0xc342, 0x6}, {0xa3b, 0xf, 0x3, 0x1, 0x981a, 0x2}, {0x9, 0x7f, 0x8, 0x1, 0xc3, 0x80000001}, {0x8001, 0xff, 0x5, 0x5, 0x9, 0x7ac2}, {0x400, 0x2, 0x81, 0x8000, 0x10000, 0x80000001}, {0x7, 0x7ff, 0x9, 0x8000, 0xffff0840, 0x8001}, {0x1000, 0x1, 0x25c8, 0x10001, 0x4, 0xaeb}, {0xff, 0x7f, 0x1, 0x7fff, 0x77, 0x6}, {0xfff, 0x125, 0x4e546363, 0x6, 0x7}, {0xffffb954, 0x5, 0x8000, 0x7, 0x5, 0x55}, {0x3, 0xffff, 0xe74e, 0x0, 0x9, 0x1}, {0x3, 0x6, 0x200, 0xe, 0x8, 0x6}, {0x401, 0xe4, 0x6, 0x2, 0x6, 0x7fffffff}, {0x4, 0x9, 0x1ff, 0x6, 0x4, 0x4}, {0x4, 0x6, 0x9, 0x5, 0xfffffff8, 0xa1}, {0x2, 0x91, 0x8, 0x0, 0x2, 0x10}, {0x80, 0x8, 0x0, 0x7, 0x8}, {0x1, 0xfffffffd, 0x6, 0x0, 0xa7b, 0x400}, {0x7, 0x7, 0x64, 0x2aa, 0x88f}, {0x1, 0x6, 0x0, 0x8, 0x7, 0x200}, {0xee9, 0xffffffff, 0x5, 0xd, 0x8, 0x8}, {0xe0, 0x4, 0x80, 0x100, 0x1000, 0x28715ee9}, {0x101, 0x6c88000, 0x8, 0x2, 0x3, 0x401}, {0xa32, 0x1000, 0x8, 0xff, 0x7, 0x4}, {0x9, 0x8, 0x9, 0x353, 0x3, 0x40000}, {0x8, 0x262, 0x7, 0x4c97, 0x3, 0x80000001}, {0x18, 0xfffffffb, 0x1, 0x158000, 0x7, 0x8001}, {0x6, 0x3, 0xfffffff2, 0x1, 0x7f, 0x1ff}, {0x3, 0x7, 0x9, 0x469, 0x8, 0x1}, {0x1, 0x7, 0x3, 0x1, 0x2, 0x68}, {0xcaf, 0x8, 0x4, 0x1, 0x0, 0x6}, {0x6, 0xd67c, 0x9, 0x8, 0x2, 0xead}, {0x1, 0xfffffffe, 0x40, 0x800, 0x638, 0x1d24}, {0x6, 0x4, 0x0, 0xffff, 0xffffffff, 0x7}, {0xff, 0x9, 0x9, 0x100, 0x9, 0x333}, {0x0, 0x3, 0x4000, 0x2, 0xffff0001, 0x6}, {0xc423, 0x7fff, 0x9, 0x200, 0x9, 0x6}, {0x7, 0x5a, 0x1000, 0x7, 0x7ff, 0x3}, {0x7, 0x101, 0x1000, 0x3, 0x9, 0x7}, {0x0, 0x2, 0x200, 0x9, 0xbc8a}, {0xfffffff9, 0x10, 0x9, 0xa, 0x5e7eb85a, 0x9}, {0x2, 0xac, 0x2, 0x1, 0xe, 0x1}], [{0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {0x6}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x6}, {}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x4}, {0x2}, {0x4}, {0x4, 0x1}, {0x5}, {0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x7}, {0x3}, {0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x1}, {0x4}, {0x2}, {0x5}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x2, 0x1}, {}, {0x3}, {}, {0x4}, {}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x49b61ba00946f8a3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x1}, {0x4}, {0x5}]}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0xfffffff6, 0x9, 0x3, 0x401, 0x4}, 0x10, 0x7, [{0x573, 0x7e7, 0x4, 0x1, 0x9, 0x6}, {0x9, 0x2, 0x8, 0x6, 0x1b, 0x40}, {0x6f, 0x7fff, 0x6, 0x1, 0x1c, 0x80000001}, {0x4, 0x8001, 0x4, 0x6, 0x9}, {0x0, 0x6f, 0x7de, 0x7, 0xdbc}, {0xc945, 0xe, 0x8, 0xfff, 0xfffeffff, 0x10000}, {0x90, 0x2, 0x6, 0x2, 0x1ffe, 0x7}, {0x3, 0x3ff, 0x8f3e, 0x1, 0x7, 0xfffffc4f}]}, [{0x10000, 0x1, 0x401, 0x5, 0x4, 0xf4be}, {0x8001, 0xb, 0xec9, 0xe6, 0x8000, 0x1}, {0x8, 0x5, 0x9, 0xa33d, 0x9, 0x5}, {0xd6ce, 0x10000, 0x1ff, 0x45b, 0x0, 0x6}, {0x7, 0x60000, 0xc87, 0xfaa, 0x7f, 0x200}, {0xfffffd5e, 0x3, 0x40, 0xfffffff9, 0x3ff, 0x8}, {0x180, 0xfffffff9, 0x2, 0xe0, 0x35587ba7, 0x3}, {0x10001, 0x7f, 0x0, 0x7e7e, 0x40, 0x21c52da0}, {0x2, 0x1, 0x5, 0xfffffffe, 0x46, 0x6}, {0x100, 0x1, 0x7, 0x2, 0xffffffff, 0x8}, {0x7fffffff, 0x3, 0x401, 0x7a, 0xffffffff, 0x7fffffff}, {0x81, 0x2, 0x9, 0x4, 0x665, 0x5}, {0x4, 0x1, 0xfffffffc, 0xd, 0x7, 0x4}, {0x7, 0x80, 0x7ff, 0x2, 0x80, 0xc}, {0x10001, 0x2, 0x80000001, 0x2, 0x6, 0x80}, {0x80000001, 0x704e, 0x61a3d8e0, 0x5, 0x4, 0x6}, {0x4, 0x5, 0x4, 0x7, 0xffffff00, 0xe9}, {0x2, 0x5, 0x400, 0x9, 0xfffffffe, 0x401}, {0x5, 0x8, 0x7, 0xd9b2, 0x0, 0x73b}, {0x73f, 0x9, 0xe, 0xff, 0x4, 0x1c9}, {0xfffffffd, 0x1, 0x0, 0x190, 0x1, 0xf}, {0x7, 0x6fd4f458, 0x9, 0xeac, 0xf, 0x2}, {0x3000000, 0x5, 0x6, 0xff, 0x7, 0x940}, {0x2, 0x1, 0x3ad, 0x10000}, {0x80000001, 0x0, 0x8, 0xfffffffc, 0x2, 0x7}, {0x80000000, 0xff, 0x0, 0x8, 0x25e, 0x8}, {0x80, 0x44, 0x4d9c, 0x10001, 0x561f58d9, 0x7}, {0x0, 0x2, 0x1681da55, 0x0, 0x6, 0x7}, {0x7fffffff, 0x7, 0x9, 0x2, 0x4, 0x8001}, {0x5, 0x10000, 0x55, 0x0, 0xaf, 0x9}, {0xa, 0x5, 0x2, 0x3, 0x23, 0x3}, {0x0, 0x2c8, 0x1, 0x8001, 0xffff3102, 0x5}, {0x1, 0x1, 0x3, 0x9, 0x6, 0x18000}, {0xf, 0x8001, 0x5, 0xe14, 0x8, 0x1ff}, {0x4, 0x40, 0x80, 0x80, 0x7, 0xc3f}, {0x5, 0x4, 0x3, 0x3ff, 0x7, 0x79000000}, {0x0, 0x400000e6, 0x8001, 0x1, 0x3, 0xe8e0}, {0x74, 0x5, 0x9, 0x0, 0x2, 0x5}, {0x4, 0x3, 0x8, 0x0, 0x6}, {0x8, 0x5, 0xec8, 0x3e, 0x6, 0x5}, {0x180, 0x187, 0x8, 0x10, 0x0, 0x40}, {0xfffffcbf, 0x3, 0x3, 0x2, 0x8000, 0x934b}, {0xfff, 0x8, 0x7, 0x5, 0x8, 0x4}, {0x1ff, 0x6, 0x5, 0x2, 0x41e}, {0x80000001, 0x8, 0xffa, 0x6, 0x20a, 0x4}, {0xfffffffa, 0x7f, 0x5, 0x3, 0x674, 0xbb}, {0xd54, 0x800, 0x9, 0x80, 0x0, 0x2c8}, {0x3679, 0x8, 0xfff, 0x9, 0x6, 0x5}, {0x0, 0xd5, 0x5, 0x5, 0x4, 0xfffffff8}, {0x3, 0x7, 0x40, 0x1, 0x9c32, 0x40}, {0x4, 0x7, 0x401, 0x5, 0x7, 0x9}, {0xfffffff7, 0x2, 0x1, 0xb36, 0x8fd1, 0x2}, {0x2, 0xb, 0xffffff80, 0x91, 0xfffffff9, 0x4}, {0x844, 0x8, 0x3, 0x1, 0x5, 0x7c9}, {0x2, 0x3, 0x3, 0x3, 0xa, 0xfd}, {0x4a22, 0x10001, 0x4, 0x5, 0x7, 0x1}, {0x2, 0x3, 0x10000, 0x3, 0x7, 0x7a0a7e05}, {0xe, 0x5, 0x0, 0x34, 0x6, 0x9}, {0x70, 0x8, 0x7, 0x2, 0x1, 0x652c}, {0x7, 0x9, 0xe9, 0x0, 0xffffffff, 0x1000}, {0x7, 0x9, 0x3, 0x1ff, 0x6, 0x9}, {0x8, 0x6, 0xffffff59, 0x0, 0x100, 0x17}, {0x1, 0x5, 0x1, 0x46b9, 0x4, 0xc29e}, {0x8, 0x4, 0x7f, 0x3, 0x4, 0xe}, {0x1, 0x8000, 0x8, 0x10000, 0x7ff, 0x3}, {0x0, 0x5, 0x1, 0x1d, 0xa0, 0xffffff00}, {0x7, 0x4, 0x51f, 0xc1b, 0x8, 0x3}, {0x4, 0xfffffffe, 0x4, 0x5, 0x3, 0xfa59}, {0x80, 0x401, 0x6, 0x4, 0x800, 0x3}, {0x4, 0x8, 0x717, 0x2, 0x7, 0x1}, {0x10000, 0xfffffffd, 0xfffffffb, 0x4, 0x8de, 0x7f}, {0x8, 0xf8c, 0xb, 0x7f, 0x8, 0x40}, {0x3, 0x10001, 0x7, 0x1000, 0x80000000, 0x2}, {0x1ff, 0x8d8a, 0x10, 0x4, 0x7, 0x2}, {0xfffffffb, 0x4, 0x3, 0x2, 0xff}, {0x5, 0x7, 0x0, 0x5, 0x0, 0x9}, {0x9, 0x4, 0x408, 0x7, 0xfffffff7, 0x85e}, {0x0, 0x0, 0x2, 0x7, 0x0, 0x5}, {0x4, 0x6, 0x7, 0x6, 0xffff, 0xad3c}, {0x5, 0xbf, 0x2, 0x5, 0x5, 0x7}, {0x9, 0x4, 0x1, 0x8, 0x3e, 0x1}, {0x4, 0x1, 0x2, 0x4380a5cf, 0x0, 0x80000001}, {0xc4, 0x4, 0x1, 0x4, 0xcd6c, 0xac}, {0x9, 0x54, 0x1000, 0x80, 0x680, 0x8}, {0x5925, 0x5, 0x39c, 0x0, 0x7, 0x2}, {0x1000, 0x37d1d753, 0xbcb, 0x2, 0x9, 0x1}, {0x7, 0x5d1, 0xfff, 0x5, 0x9, 0x18a}, {0x401, 0x6, 0x7, 0x3ff, 0x200, 0x4}, {0x1, 0x10001, 0x6, 0x6, 0x9, 0x6}, {0xf5, 0x6, 0x8, 0x7220, 0x5, 0x4}, {0x400, 0x3, 0xfffffff3, 0x1, 0x6, 0xfff}, {0x0, 0x8, 0x7000, 0x2, 0x0, 0x74}, {0x1, 0x8, 0x3, 0x3036bb18, 0x8, 0x1}, {0x8001, 0x3, 0x100, 0x6562, 0xf, 0x1}, {0x627, 0x3, 0x0, 0x2, 0x4, 0xc06}, {0x6, 0x9, 0x8000, 0x2, 0x80, 0xc0c9}, {0x5, 0xfc, 0x3, 0x7ff, 0x6, 0x358}, {0xe1, 0x6, 0x3, 0x8000, 0x140, 0x9}, {0x2, 0x4, 0x6, 0x5c0, 0x8, 0x835}, {0x1, 0x6, 0x20000, 0x0, 0x7, 0xfffffff9}, {0x7, 0x4, 0x98f, 0x40, 0x4, 0x7}, {0x788cfe9a, 0xfffffff6, 0x4, 0x4, 0x6, 0x3}, {0x4, 0x4, 0x2, 0x4, 0x28a1, 0x7ff}, {0xfff, 0x6, 0x401, 0x80000800, 0xffff62e3, 0x101}, {0x64b, 0x40, 0x9, 0xffff, 0x1, 0x7}, {0x59, 0x8, 0x5, 0x800, 0xfffffff9, 0x973}, {0x5, 0x9, 0x10001, 0x4, 0x5, 0x400}, {0x1, 0x400, 0x2, 0x6, 0x3, 0x5b1}, {0x2, 0x0, 0xfffffffc, 0x100, 0x5, 0x4}, {0x10000, 0x8, 0x5, 0x5, 0x401, 0xa03}, {0xffff, 0xe53, 0xfffffff9, 0xe33, 0x3, 0x7}, {0xe297, 0x9, 0x8, 0x7, 0x7, 0x81}, {0x9, 0x6, 0x5, 0x9, 0x0, 0x5}, {0x5, 0x3, 0xc, 0xa9a, 0x80000000, 0x3}, {0x4, 0x81f5, 0x2, 0x5, 0x0, 0x8000}, {0x6a77, 0x81, 0xffffffff, 0x2, 0x8, 0x4}, {0x7, 0x0, 0x1000, 0x14a5, 0x9, 0x8000}, {0xc30, 0x0, 0xffffff01, 0x5, 0xfffffff9, 0x8}, {0x3ff, 0x7, 0xffffffff, 0x5, 0x6, 0xb0}, {0x4b, 0x9, 0xffffffff, 0x6, 0x6980, 0x6}, {0x6, 0x40, 0x0, 0x4b53, 0x6, 0xbb}, {0xc0000000, 0x9, 0x2, 0x5, 0x6, 0x3}, {0x2, 0x7fff, 0x2, 0x3, 0x1, 0x9}, {0xfffffffe, 0x4, 0x0, 0x7, 0x0, 0x8001}, {0xc, 0x6, 0xfffffeff, 0x7, 0xf2de, 0x9}, {0x7, 0x7aee, 0x2, 0x5, 0xcbc, 0x6}, {0x2, 0x1ff, 0x8, 0x1c, 0x7, 0x8}, {0xcef, 0x7ff, 0x9, 0xa, 0x9, 0x2}], [{0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x45c7e880297fc804}, {0x2, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {}, {0x4}, {}, {}, {0x5}, {0x2}, {0x5, 0x2}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x2, 0x2}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x1, 0x19ff6112faee466c}, {}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2}, {0x7, 0x1}, {0x4}, {0x4, 0x1}, {0xfcbd2640dd672ee}, {0x121bb736e181b6c8}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x0, 0xb23bb446c6db001a}, {0x4}, {0x1}, {0x2}], 0x1}}]}, {0x8d, 0x6, "4705cb9e7d42a73924c7579c016847a8874dcee2df79d5f7651785caffa590f6448a329e08b714ddd75b6255eee5ab8938157d3fb119a071643c86dbe9d668c6e2e3aa9856d775a79d79bdb5098a89d808d7778582cd74c647b8f7b9c4b28a4840e39f93d5af7edff18610ef4b86ae4481d8a7275ddd0bc371379ac28902a119321894d4c6a22e2658"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}]}]}, 0x1e04}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8800) unshare(0x6a040000) r6 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 2.93412895s ago: executing program 0 (id=2967): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x10, 0x0, &(0x7f00000009c0)) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x44, 0x5) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r3, 0xa51bd000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x801, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x4000000) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r8 = socket(0x40000000015, 0x805, 0x0) getsockopt(r8, 0x114, 0x2721, 0x0, &(0x7f00000000c0)) 2.844722022s ago: executing program 0 (id=2968): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x13012, r0, 0x0) 2.715318281s ago: executing program 2 (id=2969): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@alg={0xe8, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) unshare(0x600) socket$can_raw(0x1d, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000440)={r2}) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000480)={@null, @null, 0x0, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x2e994000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r9}, &(0x7f0000000640), &(0x7f0000000680)=r8}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "1cada39d8690addcb6140ef0a44c891e2d40e66b93b2b009201faa8ec90551b7", "3187e62928c7c00b5a52d7c01805bdeab782f786926372aae781bc595c127637", "cfb986fae0e47196b31895f0302c37c54b016cbc89e90b58b1cefd387128b81b", "8c4d641ac35e562e37b307d5d78b6a2a424a7665f5a48b650109a6c7a2ef3685", "bf694a58936b5ed42e7ffa6bb9355cb78162d91fdfbc64ede4da0bda732f084f", "dd9bc8b0908e05e3ec595076", 0x0, 0x1, 0xc9f, 0x6, 0x80000000}}) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.540161117s ago: executing program 3 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 2.508929044s ago: executing program 1 (id=2971): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 2.467497592s ago: executing program 4 (id=2972): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) unshare(0x400) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) 1.680551946s ago: executing program 0 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000000000000020"], 0x60}}, 0x0) socket(0x1d, 0x2, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002400000000000000001"], 0x80}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff000000000000000000000000e000000100000000000000040000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe800000000000000000000000000020000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb7f000001000000000000000000000000ac14141a000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff0000000000000000000000000000000000000000ac1414bb000000000000000000000000000000000000000000000200"], 0x138}}, 0x0) 1.389268592s ago: executing program 1 (id=2974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r9, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) 1.38486406s ago: executing program 3 (id=2975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.0798314s ago: executing program 2 (id=2976): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) unshare(0x8040480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}}, 0x1c}}, 0x0) unshare(0x6a040000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf008400"/32, @ANYRES32=r6, @ANYBLOB="04000800"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r7, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0xfb, 0x53, 0x3, 0x0, @loopback, @mcast2={0xff, 0x5}, 0x8, 0x700, 0x7d, 0x3ff}}) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) 1.070129369s ago: executing program 1 (id=2977): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, 0x0, 0x10000) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 1.055486326s ago: executing program 3 (id=2978): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x3d) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r8}, 0x10) ppoll(&(0x7f00000002c0)=[{r3, 0x6000}, {r5, 0x2000}, {r4, 0xa0}], 0x3, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r9, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r10, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 635.135056ms ago: executing program 0 (id=2979): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079101c0000000000610408000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x50, 0x5, 0x200, 0x7, 0x0, 0x7, 0x3, 0x7}}], 0x48, 0x40}, 0x4040040) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r11) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b0073697000080008000900000006000400"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r13 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x0, 0x9}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x6, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x3, 0x3, 0x8d, 0x1]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{r1}, r14, 0x10, @inherit={0x90, &(0x7f0000000440)={0x0, 0x9, 0x37fffffffc, 0xb, {0x30, 0x3, 0x6, 0x5, 0x5}, [0x400, 0x7, 0x401, 0x3, 0x5, 0x63c, 0x8000, 0x9, 0x80000000]}}, @name="9a2e7e5ce530cd933956f8f6e3cc943353c96613938aff1324f099ea8b4cb16f882f8709e77cc66b07f7ee4263ba3d7a75941006b9415348fc0e1a231e41ee0dc74abb517800ad7ea22df4054bd58fae570fcf733da1d7d4008564ccd66c339c74e7b5122a78c65cc3ecb585d509bc6eec4beb067875d604563363139ce8237eb58ae4dad58ba977b804131ab97566175b0c989536e0884523e953a32a34f9122531bb441822859618cc36cf07bf1ef6d6f8ccf6f186e29f58ff4ba37d94c72f6193fd87c4df4657920a54596630e77420f3cc97e402a39a46abe6b83fcb9d1cec8e5098f5a76466a38098cb1af1d3eb4e20111aa11b2d6e6293c53353588bf61282bce43186c418edad4eb279f01e9fe19f33bc25411ddd3eb99544485d42953bde0e4335c41d2c5d2849c6815089800e2016ef9fb2450eecedbaf0632e84f02b01e2bb2faaeaff7e0baa4bc756d91c71c5d8cdc6c3dae3e83d883bf90d974c7e9930c6bfd84001234aaa3371fabe53a8add646968d4be7d5a15774155a9b35d76c4e35a3e0133a3f232cadc554d89c32819c29b019f6531ced4367c29a04281dfc07bd949fd1eb58ac83d2213c102e814e432bbb8ed3ce78e3333f224a35e36c85b265c10cdad6085ec8813c7958d502bb132b392f9ed590230b87922f6488aac8c80bab2a28c4a30c9b8b195b82628a32bf8184d2e4298d05552ae152ad5a8fc2b247096c33369d2cb14b4d77fc8aa3045fe5fe4fb14c5d45a8e6fb5a113157b216502ea8bca1a6c2f99719c05412710239b3dec9d47e18eda15a45a1a011467e910a25d5aebf79d549c48831aeb8e9d6a3bc96c2655f70459fe75976b9744af022bdfd93561339e0346c088e41ea16e5adc351beeb65f1bd34367f2269478330b6bec25df953dec4e4bb2e52d411cae8730776f72810485a474befb362a0e7eed2142a5e97998011f28f3c52485c38ec70445f6b73d171bd79593e54d8841637616ea482eb96bb2e690948dfb9222f578c2adb9710310a6b71646a60f80e60e796e8b6e3a756daa43ec4fcf847c095425effeb336f4cadf6afc5c0136ea7944576d8a40969fdf5c4d55ceaff4884525cb8a3ceec0b8c35e8cf2edf15a65d1da18b23c545a74357b29f0e16e3ce3124244afa52d142034d8c7a3963b6dd40a1c29b2f5a433078feb0b9bc4c188cef3158993325524310533e089c1d1427c13ba5bad5425bda530cbff718d777159b137ead47ff1b7195cdcf257dc94a247cc82528e2886feb488d3b84b58708a37767991f5670086be64099b548eab342ff12ada3a2b160f6a71bf3a50fa1c8d0d366c0bb98d7054180d6094cec9cd39fc6f568b32f1ca06c971b1bf0ea54fca78132ec7df7fbef6ac13813a27e63e415908f7d8d2f0befd15055371937b943fc2b90fc114602ad36c4441d0c015e012164bc9c00f29ebc1fc8f931c8d001d042eff6d770326777d8e1e12903f8a61fe3b40904c279b0a9c313eafd6a0ca738eba91930ccc553631b37676239313d7b6b79faec2ff5257b95e50fe8179395e519677260441f023f6dbe7e53db9b0ff9721bb1e49fa39f5989e13c048a5514199fcbc59a8ab924f4a83898b4a5f272e9a96d4d2acedbefbcbc1857c7663e3d1d5d967f02d907ac5ded03362f96c956271aeaf6f8a3452b1ec7e4bb8a5d3e79996c2bd6b669396517c067ecbadaff855b3d1bc3897db92c2e197b610b75557bddbeb5aba22c05ee08055e554f52700dbd442ab1e9aa4054f54248851dced0d038f6e0780284032633ff1aaa9c8208ea1be4e41962113ba59a46b6d536ac4853a75d5a512de15f5e128e9085728b0725da545827574515b4520e940f4a334cd75f41120c962f9d11c0dacd7f5c62d46c9f464b90af1983a8fabaf5dca627362a853b00bb58ec1a2995c743dcbeadd8a7038dadade938e8296b3d638253b0c59a577dc5786a886e8fabe5beca0c32696bba77bc6c51bd4ffecb38ffeb38c3bcd5411acd91972421ad32bf09a4d100caf51a5efe581a32334adcd5ecb3efece2e2e2174c42902bc9986f2f1b23c4277a52a15aa7d1918cac953f6acd26e3d3b2779af6519970d07dd49ec4e64a86883fa0a05987dbd485b474d9519399d905d979b135abc4d13f1b48c0db83e23a65b9841238098d1ba536641dda1a0d50ab24d1bbef4aa4d4fbe940e61a1dbf2223491cf36e53c2045dfeffcba9a9ac765ddf04cc5c8644a44f41041f1346a7b1c89731edf0d08f99c53a8de3112f0498931c1768cad648a1f61c30debefe13e8a886384ce9f89dbb4b8ad7495dc075a58fafa8e9f384851e1b9f5f014c1e8d864b56e57e0c87c93ae4381752becfbc3418daa2566391ed391710b319039f62246a013841bb14bac08d4a9c4317cef2bc6596af0e82d05e9d393473b89a53408f8afbdc55fec930e233cb2221506b1fad193b93f16c20425c4ab1a03d770381ccd6469b2007447b674cc03991b61badb1c5c65cfd36d98ab4dc311162dc88c230a35b01939b2ca467176a3910a4970e3f78df52f03e0ebff6550a4e2584c7d5e74f307f0ed6b3d3228e28185a617c2934779f26daa81af5ef0a4b060529fef9fee66b9d48f70d6feee5a43647689964768299cf27cd69d3149dec6e8cfdbccc87a07e38fb4de4395add9bb677959335c031fc2d96a63b267e1ba99d65d9e23300adb48afc411adbca33d0f26e955c69c0d223b62691191df9d8f5f9f1203d2b1f098479e8a1f44007bcbf0a6e0fe046895b94867442766da6dbb7df6387f48d9f940c993dbc2fb99785629fb01b1ca7f05425525a1a7633b950c37607e01b77521784f60aaed971ffac497cd83c633b4589ac88b6ee99dca089f9f2f89b5bedae7bbae1bbfb8ff3bce8270de64e9077ae12853e18dfddbccf31afda682bc85b35bacb80ad9810a04ca2ea49b8f2abaaa899c7ca76607024a4a062c7dc40ac02b174173f806284ee7ba37e255898c3d8fed7601cd2f3bbdfae092e6412cb4ad3c92f06ab07305b84784b020a49a60a0c77ab71392746f2b935441e82d19555b5590a4def9be96940837c1b75460e855990dfb181e68385bf2b0c37ef06b53d0d31570410a6f720b3e33465d80a2124d6bf3b20ed44bfea953723ed9ec96d23c8ef1094e1706ce032b831b2003d24fc991c4f3df68dc1414dd537e564eccfa8a2f24739a45fe1e4b118f1671635d79d4f8f2cb9db5a9b9c128810606380789f88a546c1ee43cba95a6aea253d0ac78d1752452bc8638b5a2c2cf15cdfa73a8f2002a9efda3de110bff09b53d12bd44b7575704dbdedcdda6cebfd4327c1bc747781ef35e8d2bbdbd87165d9f47df7ee5dc777d1157559ec38cbacb4e001e05af37b5ad8f3b7ff9723f619433e09a9d9894ca881f7ea16f051da8299278e107bf25ca72b8010db1a14475e5c78e44dbe8a2df8302898b6df584acf83209e4507833ffb7cfa78f4f374a4cf427f579f19b48fca262cde0fca3550cfa2f1d6c6edab773d731c3a28f94572d3d965345ca3e4f9eb3d2b87ab925e4d62ce17da2057fc47d0d93937a79c0c80a52a53fa4838687516fd603578ffde8a0dea59367303bc5814a6a27d4edca3cf481bce7360bf29e33acd3530ba38503521ca89c4ff542dac5fdf68859345f2b28f900dfac4e17f7528fc49f5b415c910b4115bb1464c9e8dfa67586bc73fda1834791b6424f7b9002e77ebd66c977c616b57d28fd8e49dd882588c10044ca820f2b99b2f925809060098f1d395bb6754a5f4ac6ad1050e4318292e8ffab63cf4c5cb511939ba248c2372a2e080ffbfb5aa2538b8905070fe4537b18a1ca55afcc9f4dbb8621d065ba0174fee33d3a27ed233554aa173e2e396762e5c3994438053d9eb97e1d26457e8779b632de22f899056aafa8912fcee47dad915f1ec16db69d715265f79e7dcf851bfbdbd66c818b895300838556abf7a27a458562be212efe6f47a5a49c2f87901eb6267e414c6bde7e43c9629ae39781c3da210edf181e82207adc099707ce9556c29c6e01a2a97f47ddca367d4c7aecc5c2bd9652dba77ca47324f95dbca46d5c1f407dac8ea7898fa9404ac9d00c11cbbb67fc6016686a862991df037e2034bbc186b3179997cd161d6beb25bb3f6dbd5d3e455ac03a8771f80b6477a7f91d516fc6966a13938ed8d0d8db13c13c10b455dbc5871248f9ea230a7ed18e7cf5aac0a76547007b0aaf6bc135599603394cf4e8557c9bbc2113dff232bc08b658d60454d8b6fc5197a68fb13d32f0c826987767e42298de5093af8b91340f41e6f728ff44a36e65f89765b2ee3b9e258f2cab3b0320b975b38ecd021ece535e6a605b4238b7cb2b5e1bdbb6806c0006b963c145bad56e7a0221b41df7b229977a3a4e9346f3a5350fffc2704bde04155238d13c6d261c054eaeec5150bdceac40f01d42ab7ef3ba5d000ba360ceef071e8520fd1aba91005470b5a532d90d8cdf74d75efd0fb23300f6c61ee4a9d96c16bd04f5d5ee3092a89cc26b83e2783b03fd089e8ad656015042965cc54d474e7ea41dd3b437fd6b35352b20546b16a8bade2b1f438b9dc7c612e7b1545c69a405b6bb1571f7562c14cd989141d5c99f92467640aedac6fb06e7c0f04326fd8b4941c5bfc898034916b94a2b63760527f244a07763df7d3b21ec2ca482911852cd0fa8e344f46ffda3a42d879343e59faa8e0fe8652b0decbb0828e4304cf7bac15033f48660bcf8ba0799e8ecd5da97707fa69f68a36e73d4b1da453dc696a7450b895d64b4aa42b66265ca0eb99d89315e14a7a8eeb1a5585f3261b80cb5712696857000ccadf229a4b5b04f80468f15c4abaf4e57167f8ea83a283016608f50b995d62e051e34638bc2dfa5fc687ec2e95973078897afda8666f8d8c05d6500c6aaaef1668dd2a5c3778fba81f1b4aa8de48b7042ef86faee8565ea347738746646178f69f4084dffb4b6c4c27cae5fd73d7e2d1b9f2342322983b70d15275cef74bbab6f055e6cfef32567fb201adca9086c29ec3b8221e792153f34a225ec5820760e7628671544e69b86011e1dfd9db71e3a556f6a9d1f7562e129572edcaf66655500e73ef08b0a6ba038f35090d5a50cbb82c254af49c8c72bdd9df13fe7d78ac1f171bf07843d7b793d188dae6e0addf0c31a92da1c1543f59cef2cb5dc8917d852646524155151200b6b2fd181d8ce37cbe7fc0df55b361c5f86ffe2e70a6674acd1289132b631da69bddab99f5cecd9d34a2e3435fc0eadaa01caa79415b699239dd65ec6d7c7b6a77cae652e19562de520dad2b176d84ea9890049db8b0f46115343f7a083b83ef7c146bd4bc5331741ad04ff040e9950ae3e935b54cd135c5dbe47b0149dbd763f481924658e0f91f17055a0f35bc872bf499ebeea8ccca4174770c74d17e68055ed5cf4077764019c3dfe8a0d063ae7efa523c4a8a329158071843835a0c738bac8e97552f015402c0bfe16c18b4d929dc43c9256856da4becbd90df9753c3d20f59045d06f4b6a3f3c939b2438b01c919fd58d47515fc250c0ce4707a3b897eb3c99aac5b4fe42e64f1f6d5d09919e27c62c7005765f3ef4c4a203a7de480bf6f7077f99766319d320b5da7b77e3f87110f2e642ecb1918426009099fffac83b334318cc4bce955ac8e63591288fc47c189334faae1a12cbe74a8f9861c6688"}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f00000001c0)=0x251, 0x4) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 437.576701ms ago: executing program 4 (id=2980): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000013000300060a0004090300f006e8ffff00000000080007003a3a09f8130002"], 0x44}, 0x1, 0x1000000}, 0x4000044) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) r7 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) connect$netlink(r7, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 424.446509ms ago: executing program 2 (id=2981): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, 0x0, 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r1 = epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffff0000c9c4582da77b47e7b1", @ANYRES16=r9, @ANYBLOB="000029bd7000fcdbdf257a0000000600fb00feff00000a00f9003a55195b2f8700000700f9005f60"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) close(0x4) 162.457804ms ago: executing program 0 (id=2982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x80c00) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'hsr0\x00', 0xd}) sendmmsg(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000280)}, {&(0x7f0000000c80)}, {&(0x7f0000000d40)}, {&(0x7f0000000300)="b5", 0x1}, {&(0x7f0000000f40)}], 0x5, &(0x7f0000004e00)=[{0x10, 0x109, 0x261}, {0x10, 0x29, 0x3}, {0x18, 0x117, 0x6, "20c4f1a95dd326"}, {0xeb8, 0x1, 0x64, "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"}, {0x38, 0xb9, 0x5, "b83704d37ae0a50fb392e9bf964ec84394707d7ea931748118a8bac0941de860199a5257"}], 0xf28}}], 0x1, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x35, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000009140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x200040d0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 0s ago: executing program 1 (id=2983): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000eda482"], 0x24}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000200000000004000000000000ff00000000", @ANYRES32=r2, @ANYBLOB="01000000010000000100"/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x1e, 0xff9, 0x8}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) kernel console output (not intermixed with test programs): unknown, defaulting to 1000 [ 393.265279][T12659] erspan0: left allmulticast mode [ 393.374859][T12659] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 393.413676][T12664] sctp: [Deprecated]: syz.1.1706 (pid 12664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.413676][T12664] Use struct sctp_sack_info instead [ 393.433142][T12664] sctp: [Deprecated]: syz.1.1706 (pid 12664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.433142][T12664] Use struct sctp_sack_info instead [ 393.647526][T12659] geneve2: left promiscuous mode [ 393.975704][T12659] veth5: left promiscuous mode [ 394.262553][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.278215][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.476314][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.505299][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.534149][T12669] lo speed is unknown, defaulting to 1000 [ 394.581370][T12693] netlink: 'syz.2.1709': attribute type 11 has an invalid length. [ 394.644430][T12693] netlink: 'syz.2.1709': attribute type 11 has an invalid length. [ 394.727838][T12693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1709'. [ 394.899389][T12677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.074217][T12698] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 395.139344][T12704] netlink: 'syz.3.1716': attribute type 10 has an invalid length. [ 395.148036][T12704] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1716'. [ 395.328432][T12708] bridge3: left allmulticast mode [ 395.352312][T12708] team1: left promiscuous mode [ 395.360147][T12708] team1: left allmulticast mode [ 395.377645][T12708] vlan5: left allmulticast mode [ 395.382574][T12708] bond3: left allmulticast mode [ 395.388006][T12708] gretap1: left allmulticast mode [ 396.403383][T12730] lo speed is unknown, defaulting to 1000 [ 396.625498][T12726] vlan2: entered promiscuous mode [ 396.642023][T12726] `: entered promiscuous mode [ 396.923971][T12741] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 396.943813][T12741] netlink: 'syz.2.1725': attribute type 3 has an invalid length. [ 396.958388][T12741] netlink: 'syz.2.1725': attribute type 2 has an invalid length. [ 396.977323][T12741] netlink: 'syz.2.1725': attribute type 3 has an invalid length. [ 396.988689][T12741] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1725'. [ 397.567814][T12756] netlink: 'syz.3.1727': attribute type 2 has an invalid length. [ 397.568000][T12743] lo speed is unknown, defaulting to 1000 [ 397.609230][T12756] : entered promiscuous mode [ 397.650956][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 398.084544][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 398.144150][T12773] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 398.153063][T12764] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 398.169410][T12773] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1731'. [ 398.232365][T12764] bond6 (unregistering): Released all slaves [ 398.657142][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5870 ms [ 398.665251][ C0] lec:lec_tx_timeout: lec0 [ 398.669941][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 398.952782][T12791] No such timeout policy "syz1" [ 399.888121][T12812] lo speed is unknown, defaulting to 1000 [ 400.102446][T12818] lo speed is unknown, defaulting to 1000 [ 400.208751][T12811] lo speed is unknown, defaulting to 1000 [ 400.237317][T12819] lo speed is unknown, defaulting to 1000 [ 400.251747][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 400.965674][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 400.985595][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1749'. [ 401.095084][T12843] netlink: 'syz.3.1746': attribute type 23 has an invalid length. [ 401.135449][T12849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.144624][T12849] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.154613][T12849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.187470][T12850] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1746'. [ 401.345618][T12858] sctp: [Deprecated]: syz.4.1748 (pid 12858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.345618][T12858] Use struct sctp_sack_info instead [ 402.586909][T12885] lo speed is unknown, defaulting to 1000 [ 403.040144][ T30] audit: type=1800 audit(1764216552.717:6): pid=12867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1752" name="cgroup.controllers" dev="tmpfs" ino=1806 res=0 errno=0 [ 403.519657][T12898] lo speed is unknown, defaulting to 1000 [ 403.817706][T12906] nbd1: detected capacity change from 0 to 63 [ 403.834151][T12911] block nbd1: NBD_DISCONNECT [ 403.841077][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 403.856067][T12911] block nbd1: Disconnected due to user request. [ 403.863612][T12911] block nbd1: shutting down sockets [ 403.886548][ T30] audit: type=1800 audit(1764216553.557:7): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1760" name="0" dev="tmpfs" ino=1842 res=0 errno=0 [ 403.910762][ C0] blk_print_req_error: 138 callbacks suppressed [ 403.910790][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.926258][ C0] buffer_io_error: 138 callbacks suppressed [ 403.926279][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 403.946386][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.955592][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 403.964294][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.973548][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 403.981473][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.990601][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 403.998613][ T8733] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.035240][ T8733] Buffer I/O error on dev nbd1, logical block 0, async page read [ 404.056493][ T8733] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.068508][ T8733] Buffer I/O error on dev nbd1, logical block 1, async page read [ 404.078152][ T8733] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.088332][ T8733] Buffer I/O error on dev nbd1, logical block 2, async page read [ 404.096859][ T8733] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.146871][ T8733] Buffer I/O error on dev nbd1, logical block 3, async page read [ 404.178168][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 404.213961][ T8733] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.251795][ T8733] Buffer I/O error on dev nbd1, logical block 0, async page read [ 404.261715][ T8733] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.271433][ T8733] Buffer I/O error on dev nbd1, logical block 1, async page read [ 404.398117][ T8733] ldm_validate_partition_table(): Disk read failed. [ 404.417133][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 404.425280][ C0] lec:lec_tx_timeout: lec0 [ 404.464815][ T8733] Dev nbd1: unable to read RDB block 0 [ 404.507676][T12934] IPVS: length: 132 != 8 [ 404.515560][ T8733] nbd1: unable to read partition table [ 404.587502][ T8733] ldm_validate_partition_table(): Disk read failed. [ 404.609057][ T8733] Dev nbd1: unable to read RDB block 0 [ 404.640119][ T8733] nbd1: unable to read partition table [ 404.720931][T12937] bond11: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 404.826137][T12937] bond11 (unregistering): Released all slaves [ 405.722762][T12958] lo speed is unknown, defaulting to 1000 [ 405.794613][T12960] lo speed is unknown, defaulting to 1000 [ 405.931151][T12970] netlink: 'syz.3.1778': attribute type 2 has an invalid length. [ 405.966908][T12972] netlink: 'syz.4.1777': attribute type 15 has an invalid length. [ 405.978277][T12968] pim6reg1: entered promiscuous mode [ 405.984116][T12968] pim6reg1: entered allmulticast mode [ 406.160178][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 406.358073][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 406.712512][T12992] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1783'. [ 407.057420][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 407.063638][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 407.937577][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 407.956471][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 409.062049][T13037] syzkaller1: entered promiscuous mode [ 409.076608][T13037] syzkaller1: entered allmulticast mode [ 409.705988][T13054] tipc: New replicast peer: 255.255.255.255 [ 409.731273][T13054] tipc: Enabled bearer , priority 10 [ 409.741874][T13054] netlink: 'syz.2.1798': attribute type 11 has an invalid length. [ 409.750662][T13054] netlink: 'syz.2.1798': attribute type 11 has an invalid length. [ 409.765525][T13054] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1798'. [ 409.969381][T13054] bridge6: entered promiscuous mode [ 409.984111][T13054] bridge6: entered allmulticast mode [ 410.210288][T13069] bond0: Caught tx_queue_len zero misconfig [ 410.293253][T13069] netlink: 'syz.2.1801': attribute type 2 has an invalid length. [ 410.339297][T13069] !: entered promiscuous mode [ 410.463074][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 410.698962][T13086] lo speed is unknown, defaulting to 1000 [ 410.888573][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1806'. [ 412.104109][T13124] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1806'. [ 412.555770][ T6046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.564652][ T6046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.622595][T13131] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1812'. [ 412.711314][T13134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1812'. [ 413.140191][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 413.148667][ C0] lec:lec_tx_timeout: lec0 [ 413.154015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 413.961957][T13166] lo speed is unknown, defaulting to 1000 [ 414.566030][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 414.596055][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1818'. [ 415.172202][T12990] Set syz1 is full, maxelem 65536 reached [ 415.350362][T13188] netlink: 'syz.1.1825': attribute type 1 has an invalid length. [ 415.362207][T13188] netlink: 'syz.1.1825': attribute type 3 has an invalid length. [ 415.381914][T13188] netlink: 'syz.1.1825': attribute type 2 has an invalid length. [ 415.428016][T13188] netlink: 'syz.1.1825': attribute type 3 has an invalid length. [ 415.436193][T13188] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1825'. [ 415.558474][T13191] pim6reg1: entered promiscuous mode [ 415.563868][T13191] pim6reg1: entered allmulticast mode [ 415.862234][T13207] lo speed is unknown, defaulting to 1000 [ 415.976843][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1828'. [ 416.660913][T13215] lo speed is unknown, defaulting to 1000 [ 416.898655][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 416.926170][T13222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1831'. [ 417.173798][T13227] netlink: 'syz.2.1833': attribute type 2 has an invalid length. [ 417.292283][T13227] : entered promiscuous mode [ 417.373846][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1833'. [ 417.530276][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 417.558241][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'. [ 417.590818][T13235] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1834'. [ 417.623837][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1834'. [ 417.960387][T13240] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 417.987285][T13240] netlink: 'syz.4.1838': attribute type 3 has an invalid length. [ 417.995081][T13240] netlink: 'syz.4.1838': attribute type 2 has an invalid length. [ 418.049504][T13240] netlink: 'syz.4.1838': attribute type 3 has an invalid length. [ 418.078655][T13240] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1838'. [ 418.167877][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 418.176049][ C0] lec:lec_tx_timeout: lec0 [ 418.716667][T13246] lo speed is unknown, defaulting to 1000 [ 419.016079][T13261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1842'. [ 419.311620][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'. [ 419.433278][T13272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1843'. [ 419.601517][T13278] xt_hashlimit: size too large, truncated to 1048576 [ 419.689334][T13281] tipc: Invalid UDP bearer configuration [ 419.689396][T13281] tipc: Enabling of bearer rejected, failed to enable media [ 420.635653][T13299] lo: entered allmulticast mode [ 420.643138][T13298] lo: left allmulticast mode [ 421.113673][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 421.411115][T13328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.454979][T13332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.495325][T13332] bond5: (slave bond0): Enslaving as an active interface with an up link [ 422.261989][T13328] bond5 (unregistering): (slave bond0): Releasing backup interface [ 422.274438][T13328] bond5 (unregistering): Released all slaves [ 422.305701][T13338] tipc: Enabled bearer , priority 0 [ 422.358558][T13341] tipc: Resetting bearer [ 422.377894][T13348] netlink: 'syz.0.1862': attribute type 10 has an invalid length. [ 422.421609][T13351] bond6: Unable to set down delay as MII monitoring is disabled [ 422.433420][T13351] bond6 (unregistering): Released all slaves [ 422.454168][T13323] lo speed is unknown, defaulting to 1000 [ 422.454257][T13355] lo: Caught tx_queue_len zero misconfig [ 422.483295][T13334] tipc: Disabling bearer [ 422.511344][T13348] bond0: (slave wlan1): Opening slave failed [ 422.843548][T13370] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 422.863441][T13369] __nla_validate_parse: 4 callbacks suppressed [ 422.863470][T13369] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1868'. [ 422.889163][T13369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.058102][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 423.334909][T13376] IPVS: Scheduler module ip_vs_ not found [ 423.370177][T13380] IPVS: length: 24 != 12792 [ 423.383474][T13370] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 423.395381][T13392] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20002 [ 423.520644][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 423.531203][T13394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1870'. [ 423.972276][T13411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.990145][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 424.029945][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1872'. [ 424.071672][T13408] lo speed is unknown, defaulting to 1000 [ 424.144251][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1873'. [ 424.368777][T13414] lo speed is unknown, defaulting to 1000 [ 424.426212][T13419] xt_CT: No such helper "pptp" [ 424.664243][ T52] Bluetooth: hci4: link tx timeout [ 424.670191][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 424.682073][ T52] Bluetooth: hci4: link tx timeout [ 424.687518][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 424.802741][T13434] siw: device registration error -23 [ 425.066124][T13437] tipc: Enabling of bearer rejected, failed to enable media [ 425.615982][ T52] Bluetooth: hci4: link tx timeout [ 425.621367][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 425.639056][ T52] Bluetooth: hci4: link tx timeout [ 425.644245][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 425.987538][ T52] Bluetooth: hci4: link tx timeout [ 425.992872][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 426.119635][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1882'. [ 426.183188][ T5836] Bluetooth: hci4: link tx timeout [ 426.197776][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 426.253687][T13468] ip6tnl0: Caught tx_queue_len zero misconfig [ 426.473653][T13483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.740432][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 428.107198][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 428.115388][ C0] lec:lec_tx_timeout: lec0 [ 428.120306][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.063908][ T13] wlan0: Trigger new scan to find an IBSS to join [ 430.186928][T13547] tipc: Enabling of bearer rejected, failed to enable media [ 430.795787][T13576] xt_hashlimit: size too large, truncated to 1048576 [ 431.084335][T13581] lo speed is unknown, defaulting to 1000 [ 432.097556][ T12] wlan0: Trigger new scan to find an IBSS to join [ 432.263796][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 432.275277][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1907'. [ 432.437381][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 432.457551][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 432.749845][T13627] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 432.893973][T13631] lo speed is unknown, defaulting to 1000 [ 433.098306][T13640] netlink: 'syz.1.1914': attribute type 10 has an invalid length. [ 433.121531][T13640] team0: left allmulticast mode [ 433.134126][T13640] team_slave_1: left allmulticast mode [ 433.142157][T13640] dummy0: left allmulticast mode [ 433.148115][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 433.156216][ C0] lec:lec_tx_timeout: lec0 [ 433.180667][T13640] bridge4: left allmulticast mode [ 433.199603][T13640] team0: left promiscuous mode [ 433.204657][T13640] team_slave_1: left promiscuous mode [ 433.218440][T13649] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 433.249724][T13640] dummy0: left promiscuous mode [ 433.286241][T13640] bridge4: left promiscuous mode [ 433.303325][T13640] bridge0: port 3(team0) entered disabled state [ 433.327421][T13640] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.348517][T13640] bond0: (slave team0): Enslaving as an active interface with an up link [ 433.624690][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 433.633998][T13663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1919'. [ 433.649398][T13661] netlink: 'syz.1.1917': attribute type 1 has an invalid length. [ 433.672190][T13661] netlink: 'syz.1.1917': attribute type 3 has an invalid length. [ 433.707236][T13661] netlink: 'syz.1.1917': attribute type 2 has an invalid length. [ 433.735209][T13661] netlink: 'syz.1.1917': attribute type 3 has an invalid length. [ 433.770176][T13661] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1917'. [ 434.127465][T13683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.262511][T13684] raw_sendmsg: syz.1.1923 forgot to set AF_INET. Fix it! [ 434.442383][T13688] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 434.830215][T13697] lo speed is unknown, defaulting to 1000 [ 435.055819][T13704] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 435.066007][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.075096][T13704] netlink: 'syz.4.1930': attribute type 3 has an invalid length. [ 435.083688][T13704] netlink: 'syz.4.1930': attribute type 2 has an invalid length. [ 435.093042][T13704] netlink: 'syz.4.1930': attribute type 3 has an invalid length. [ 435.102637][T13704] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1930'. [ 435.333637][T13709] lo speed is unknown, defaulting to 1000 [ 435.784902][T13724] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1933'. [ 436.239830][T13732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'. [ 436.465203][T13736] tipc: Enabling of bearer rejected, failed to enable media [ 436.984221][T13746] lo speed is unknown, defaulting to 1000 [ 437.292302][T13755] __nla_validate_parse: 1 callbacks suppressed [ 437.292324][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 438.177795][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 438.513842][T13777] validate_nla: 5 callbacks suppressed [ 438.513863][T13777] netlink: 'syz.4.1943': attribute type 1 has an invalid length. [ 438.588263][T13777] netlink: 'syz.4.1943': attribute type 3 has an invalid length. [ 438.616718][T13777] netlink: 'syz.4.1943': attribute type 2 has an invalid length. [ 438.658055][T13777] netlink: 'syz.4.1943': attribute type 3 has an invalid length. [ 438.674938][T13777] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1943'. [ 438.960654][T13791] netlink: 'syz.0.1946': attribute type 1 has an invalid length. [ 439.018184][T13791] netlink: 'syz.0.1946': attribute type 3 has an invalid length. [ 439.052134][T13791] netlink: 'syz.0.1946': attribute type 2 has an invalid length. [ 439.083447][T13791] netlink: 'syz.0.1946': attribute type 3 has an invalid length. [ 439.092908][T13791] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1946'. [ 439.365550][T13807] pim6reg1: entered promiscuous mode [ 439.382364][T13807] pim6reg1: entered allmulticast mode [ 439.723610][T13817] netlink: 'syz.2.1952': attribute type 10 has an invalid length. [ 439.751866][T13817] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.762156][T13817] bond0: (slave team0): Enslaving as an active interface with an up link [ 439.788891][T13817] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 440.289076][T13828] lo speed is unknown, defaulting to 1000 [ 440.876327][T13844] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1961'. [ 441.070013][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 441.272606][T13854] lo speed is unknown, defaulting to 1000 [ 441.465626][T13859] pim6reg1: entered promiscuous mode [ 441.481657][T13859] pim6reg1: entered allmulticast mode [ 441.908956][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'. [ 442.300625][T13877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1969'. [ 442.315712][T13877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1969'. [ 442.665746][T13881] lo speed is unknown, defaulting to 1000 [ 442.769547][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1971'. [ 443.173077][T13906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1974'. [ 443.187852][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 443.193715][T13910] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1973'. [ 443.195984][ C0] lec:lec_tx_timeout: lec0 [ 443.215176][T13906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1974'. [ 443.228456][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 443.241472][T13909] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 443.310836][T13901] lo speed is unknown, defaulting to 1000 [ 444.438762][T13940] validate_nla: 11 callbacks suppressed [ 444.438782][T13940] netlink: 'syz.1.1981': attribute type 1 has an invalid length. [ 444.525597][T13940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1981'. [ 445.546210][T13971] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 445.560607][T13971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.571334][T13969] syzkaller1: entered promiscuous mode [ 445.587311][T13969] syzkaller1: entered allmulticast mode [ 445.656806][T13971] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1987'. [ 445.792395][T13982] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 445.819286][T13982] netlink: 'syz.0.1989': attribute type 3 has an invalid length. [ 445.857952][T13982] netlink: 'syz.0.1989': attribute type 2 has an invalid length. [ 445.898293][T13982] netlink: 'syz.0.1989': attribute type 3 has an invalid length. [ 445.947922][T13982] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1989'. [ 446.386786][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1992'. [ 446.408663][T13995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.486947][T14004] netlink: 'syz.3.1993': attribute type 10 has an invalid length. [ 446.491683][T14003] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 446.589917][T13999] netlink: 'syz.3.1993': attribute type 1 has an invalid length. [ 446.646130][T14008] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 446.661586][T14008] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 446.768224][T14003] bond6: (slave gretap2): making interface the new active one [ 446.779242][T14003] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 446.826210][T14010] macvlan2: entered promiscuous mode [ 446.884001][T14010] macvlan2: entered allmulticast mode [ 446.907964][T14010] bond6: entered promiscuous mode [ 446.918616][T14010] gretap2: entered promiscuous mode [ 446.926959][T14010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.970309][T14010] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 446.988507][T14010] bond6: left promiscuous mode [ 446.996857][T14010] gretap2: left promiscuous mode [ 447.046276][T14014] IPVS: Scheduler module ip_vs_ not found [ 447.233329][T14024] netlink: 'syz.1.2000': attribute type 1 has an invalid length. [ 447.249127][T14020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.256024][T14024] netlink: 'syz.1.2000': attribute type 3 has an invalid length. [ 447.270872][T14020] bond0: (slave rose0): Enslaving as an active interface with an up link [ 447.509798][T14033] __nla_validate_parse: 3 callbacks suppressed [ 447.509819][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2002'. [ 448.066840][T14044] tipc: Invalid UDP bearer configuration [ 448.066991][T14044] tipc: Enabling of bearer rejected, failed to enable media [ 448.237897][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 448.246016][ C0] lec:lec_tx_timeout: lec0 [ 448.251270][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 448.855894][T14066] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 448.918822][T14066] bond0: (slave bond_slave_0): Releasing backup interface [ 448.952692][T14066] bond0: (slave bond_slave_1): Releasing backup interface [ 449.013478][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.048206][T14074] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2003'. [ 449.058442][T14066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.095390][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.134384][T14066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.170492][T14066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 449.201956][T14070] lo: Caught tx_queue_len zero misconfig [ 449.233877][T14072] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 449.270328][T14072] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 449.499134][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 449.778816][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2014'. [ 450.030292][T14106] pim6reg1: entered promiscuous mode [ 450.035751][T14106] pim6reg1: entered allmulticast mode [ 450.071652][T14112] tipc: Invalid UDP bearer configuration [ 450.071711][T14112] tipc: Enabling of bearer rejected, failed to enable media [ 450.213215][T14116] validate_nla: 3 callbacks suppressed [ 450.213236][T14116] netlink: 'syz.1.2020': attribute type 39 has an invalid length. [ 450.252861][T14116] hsr_slave_1 (unregistering): left promiscuous mode [ 450.542687][T14124] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 450.576966][T14124] netlink: 'syz.0.2023': attribute type 3 has an invalid length. [ 450.603102][T14124] netlink: 'syz.0.2023': attribute type 2 has an invalid length. [ 450.653678][T14124] netlink: 'syz.0.2023': attribute type 3 has an invalid length. [ 450.663757][T14124] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2023'. [ 450.869258][T14144] lo speed is unknown, defaulting to 1000 [ 450.912222][T14146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2035'. [ 451.725781][T14166] lo speed is unknown, defaulting to 1000 [ 451.889927][T14159] netlink: 'syz.2.2029': attribute type 10 has an invalid length. [ 451.902776][T14159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.917159][T14159] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 451.980899][T14175] pim6reg1: entered promiscuous mode [ 451.986394][T14175] pim6reg1: entered allmulticast mode [ 452.218319][T14181] tipc: Enabling of bearer rejected, failed to enable media [ 452.308486][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 452.323451][T14186] netlink: 'syz.2.2037': attribute type 30 has an invalid length. [ 452.479749][ T6038] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.498596][ T6038] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.511921][ T6038] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.530132][ T6038] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.953158][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 453.164623][T14216] geneve3: entered promiscuous mode [ 453.193676][ T6040] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 44734 - 0 [ 453.204100][T14208] lo speed is unknown, defaulting to 1000 [ 453.206472][ T6040] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 44734 - 0 [ 453.219452][ T6040] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 44734 - 0 [ 453.230328][ T1135] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 44734 - 0 [ 453.267928][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 453.276082][ C0] lec:lec_tx_timeout: lec0 [ 453.303622][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 453.484390][T14221] netlink: 'syz.4.2045': attribute type 4 has an invalid length. [ 454.378389][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2051'. [ 454.540191][T14254] bridge6: left promiscuous mode [ 454.555536][T14254] bridge6: left allmulticast mode [ 454.647379][T14254] geneve3: left promiscuous mode [ 454.652690][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2052'. [ 454.655955][ T6040] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.685649][ T6040] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 44734 - 0 [ 454.696410][ T6040] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.745982][ T6040] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 44734 - 0 [ 454.768609][T14258] hsr_slave_0: left promiscuous mode [ 454.803547][T14262] tipc: Enabling of bearer rejected, already enabled [ 454.822134][ T6040] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.836008][ T6040] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 44734 - 0 [ 454.894370][ T6040] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.937689][ T6040] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 44734 - 0 [ 454.986028][T14271] tipc: Can't bind to reserved service type 2 [ 454.999877][T14263] lo speed is unknown, defaulting to 1000 [ 455.070266][T14271] siw: device registration error -23 [ 455.108445][T14268] IPVS: Scheduler module ip_vs_sip not found [ 455.144602][T14271] netlink: 'syz.3.2058': attribute type 1 has an invalid length. [ 455.163196][T14271] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2058'. [ 455.182364][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 455.195706][T14277] lo speed is unknown, defaulting to 1000 [ 455.546755][T14284] syzkaller0: left promiscuous mode [ 455.557266][T14284] syzkaller0: left allmulticast mode [ 455.860203][T14295] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2064'. [ 455.920277][T14298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2066'. [ 456.314107][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 456.350047][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2070'. [ 456.428313][T14312] tipc: Invalid UDP bearer configuration [ 456.428372][T14312] tipc: Enabling of bearer rejected, failed to enable media [ 457.157617][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 457.250607][T14332] tipc: Enabling of bearer rejected, already enabled [ 457.876754][T14349] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 458.073576][T14356] __nla_validate_parse: 1 callbacks suppressed [ 458.073597][T14356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2080'. [ 458.223062][T14362] xt_limit: Overflow, try lower: 271964/0 [ 458.240512][T14362] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2082'. [ 458.273893][ T5965] lo speed is unknown, defaulting to 1000 [ 458.290135][ T5965] syz2: Port: 1 Link DOWN [ 458.333417][T14362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2082'. [ 459.137120][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 459.145228][ C0] lec:lec_tx_timeout: lec0 [ 459.150668][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 459.179590][T14383] lo speed is unknown, defaulting to 1000 [ 459.460508][T14391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2088'. [ 459.725265][T14398] syz_tun: entered allmulticast mode [ 459.806619][T14402] tipc: Invalid UDP bearer configuration [ 459.806676][T14402] tipc: Enabling of bearer rejected, failed to enable media [ 459.872922][T14403] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.995416][T14403] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.242571][T14420] netlink: 'syz.4.2096': attribute type 3 has an invalid length. [ 460.310379][T14403] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.348793][T14420] syz_tun: entered allmulticast mode [ 460.357286][T14420] dvmrp8: left allmulticast mode [ 460.430427][T14403] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.536087][T14424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.556431][T14424] 8021q: adding VLAN 0 to HW filter on device ` [ 460.574457][T14424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.603911][T14397] syz_tun: left allmulticast mode [ 460.611911][T14427] tipc: Invalid UDP bearer configuration [ 460.611972][T14427] tipc: Enabling of bearer rejected, failed to enable media [ 460.612708][T14421] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 460.689909][ T6046] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.749676][ T6040] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.804151][ T6046] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.822767][T14419] syz_tun: left allmulticast mode [ 460.913701][ T6046] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.101821][T14430] lo speed is unknown, defaulting to 1000 [ 461.446792][T14446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2102'. [ 462.354271][T14467] tipc: Enabling of bearer rejected, already enabled [ 463.139962][T14482] ip6tnl0: Caught tx_queue_len zero misconfig [ 463.695774][T14486] pim6reg1: entered promiscuous mode [ 463.705765][T14486] pim6reg1: entered allmulticast mode [ 463.726788][T14472] lo speed is unknown, defaulting to 1000 [ 464.123752][T14490] tipc: Invalid UDP bearer configuration [ 464.123809][T14490] tipc: Enabling of bearer rejected, failed to enable media [ 464.157821][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 464.165980][ C0] lec:lec_tx_timeout: lec0 [ 464.236067][T14493] tipc: Invalid UDP bearer configuration [ 464.236128][T14493] tipc: Enabling of bearer rejected, failed to enable media [ 464.457303][T14498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.471239][T14502] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2117'. [ 464.737537][T14507] netlink: 'syz.4.2119': attribute type 1 has an invalid length. [ 464.745642][T14507] netlink: 'syz.4.2119': attribute type 3 has an invalid length. [ 464.754163][T14507] netlink: 'syz.4.2119': attribute type 2 has an invalid length. [ 464.774741][T14507] netlink: 'syz.4.2119': attribute type 3 has an invalid length. [ 464.783003][T14507] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2119'. [ 464.815729][T14510] syzkaller0: entered promiscuous mode [ 464.822634][T14510] syzkaller0: entered allmulticast mode [ 464.946816][T14513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2121'. [ 465.143162][T14521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2121'. [ 465.156077][T14521] nbd: must specify at least one socket [ 465.243125][T14527] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2122'. [ 465.253936][T14527] lo: Caught tx_queue_len zero misconfig [ 465.459233][T14530] lo speed is unknown, defaulting to 1000 [ 465.896416][T14536] lo speed is unknown, defaulting to 1000 [ 466.503586][T14554] lo speed is unknown, defaulting to 1000 [ 466.782760][T14556] lo speed is unknown, defaulting to 1000 [ 466.807036][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 466.845521][T14562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2131'. [ 466.910661][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2132'. [ 467.079028][T14557] lo speed is unknown, defaulting to 1000 [ 467.139562][ T6046] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 467.163219][T14570] tipc: Invalid UDP bearer configuration [ 467.163274][T14570] tipc: Enabling of bearer rejected, failed to enable media [ 467.280420][T14571] syzkaller0: entered promiscuous mode [ 467.286353][T14571] syzkaller0: entered allmulticast mode [ 467.749110][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 468.310079][T14594] lo speed is unknown, defaulting to 1000 [ 468.333440][T14599] lo speed is unknown, defaulting to 1000 [ 468.418370][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 468.450038][T14598] lo speed is unknown, defaulting to 1000 [ 469.004732][T14620] lo speed is unknown, defaulting to 1000 [ 469.874121][T14642] lo speed is unknown, defaulting to 1000 [ 470.515646][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 470.553415][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2154'. [ 470.649086][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2156'. [ 470.687160][T14667] netlink: 'syz.3.2156': attribute type 30 has an invalid length. [ 470.723534][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'. [ 470.929126][T14670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.971315][T14673] bond0: (slave team0): Releasing backup interface [ 470.978417][T14673] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 471.067801][ T1135] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.076918][ T6046] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.168118][ T6046] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.194293][ T6046] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.220829][T14684] lo speed is unknown, defaulting to 1000 [ 471.430001][T14692] lo speed is unknown, defaulting to 1000 [ 471.500141][T14698] tipc: Invalid UDP bearer configuration [ 471.500201][T14698] tipc: Enabling of bearer rejected, failed to enable media [ 471.547758][T14700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'. [ 471.644926][T14703] syzkaller0: entered promiscuous mode [ 471.686524][T14703] syzkaller0: entered allmulticast mode [ 471.934088][T14707] erspan0: left allmulticast mode [ 471.979863][T14707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.050260][ T5909] lo speed is unknown, defaulting to 1000 [ 472.068406][ T5909] syz2: Port: 1 Link ACTIVE [ 472.162323][T14714] tipc: Invalid UDP bearer configuration [ 472.162381][T14714] tipc: Enabling of bearer rejected, failed to enable media [ 472.254994][T14715] pim6reg1: entered promiscuous mode [ 472.279264][T14715] pim6reg1: entered allmulticast mode [ 472.400807][T14722] netlink: 'syz.1.2169': attribute type 13 has an invalid length. [ 472.444435][T14722] netlink: 'syz.1.2169': attribute type 17 has an invalid length. [ 472.671505][T14722] syz_tun: left promiscuous mode [ 472.688573][T14718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.801911][T14722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.812239][T14722] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.825848][T14722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.963633][T14734] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.996627][T14734] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.019582][T14718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.150167][T14723] lo speed is unknown, defaulting to 1000 [ 473.163809][T14734] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.175166][T14734] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.344818][T14734] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.355159][T14734] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.355940][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 473.380171][T14743] netlink: 'syz.4.2173': attribute type 5 has an invalid length. [ 473.389561][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2173'. [ 473.444532][T14743] geneve3: entered promiscuous mode [ 473.460846][T14743] geneve3: entered allmulticast mode [ 473.500616][T14734] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.510986][T14734] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.532873][ T6038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 473.544317][ T6038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 473.565939][ T6038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 473.582964][ T6038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 473.644453][T14744] lo speed is unknown, defaulting to 1000 [ 473.970204][ T6046] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.979387][ T6046] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.997758][ T6046] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.006099][ T6046] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.069237][T14756] tipc: Invalid UDP bearer configuration [ 474.069297][T14756] tipc: Enabling of bearer rejected, failed to enable media [ 474.100852][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 474.109076][ C0] lec:lec_tx_timeout: lec0 [ 474.114985][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.155045][ T6040] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.164986][ T6040] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.237859][ T1135] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.250151][ T1135] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.758252][T14768] tipc: Enabling of bearer rejected, already enabled [ 474.993832][T14766] lo speed is unknown, defaulting to 1000 [ 474.994346][T14779] pim6reg1: entered promiscuous mode [ 475.039095][T14779] pim6reg1: entered allmulticast mode [ 477.210785][T14815] lo speed is unknown, defaulting to 1000 [ 477.430305][T14820] pim6reg1: entered promiscuous mode [ 477.435683][T14820] pim6reg1: entered allmulticast mode [ 477.492773][T14825] tipc: Invalid UDP bearer configuration [ 477.492831][T14825] tipc: Enabling of bearer rejected, failed to enable media [ 477.586018][T14823] lo speed is unknown, defaulting to 1000 [ 477.910600][T14832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2196'. [ 478.861765][T14857] tipc: Invalid UDP bearer configuration [ 478.861989][T14857] tipc: Enabling of bearer rejected, failed to enable media [ 479.137751][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 479.145879][ C0] lec:lec_tx_timeout: lec0 [ 479.731073][T14875] pim6reg1: entered promiscuous mode [ 479.736585][T14875] pim6reg1: entered allmulticast mode [ 479.876282][T14877] lo speed is unknown, defaulting to 1000 [ 480.071104][T14884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.560337][T14903] netlink: 'syz.2.2214': attribute type 3 has an invalid length. [ 480.579458][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 481.004192][T14918] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2217'. [ 481.040356][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 481.450597][T14923] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 481.456277][T14927] tipc: Enabling of bearer rejected, already enabled [ 481.465113][T14928] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 481.493365][T14928] ip6t_rpfilter: unknown options [ 481.782899][T14936] lo speed is unknown, defaulting to 1000 [ 481.855884][T14937] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 481.880436][T14937] bond7 (unregistering): Released all slaves [ 482.432204][T14947] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 482.497533][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 482.579917][T14951] lo speed is unknown, defaulting to 1000 [ 482.674649][T14957] pim6reg1: entered promiscuous mode [ 482.697934][T14957] pim6reg1: entered allmulticast mode [ 482.747722][T14961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2228'. [ 483.170738][T14960] lo speed is unknown, defaulting to 1000 [ 483.338721][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 483.537650][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 483.801456][T14971] bond0: (slave team0): Releasing backup interface [ 483.837748][T14971] team0 (unregistering): Port device team_slave_1 removed [ 483.858067][T14971] team0 (unregistering): Port device dummy0 removed [ 483.885025][T14971] team0 (unregistering): Port device bridge4 removed [ 484.139518][T14982] tipc: Invalid UDP bearer configuration [ 484.139579][T14982] tipc: Enabling of bearer rejected, failed to enable media [ 484.362054][T14987] pim6reg1: entered promiscuous mode [ 484.373240][T14987] pim6reg1: entered allmulticast mode [ 485.140078][T15001] tipc: Invalid UDP bearer configuration [ 485.140140][T15001] tipc: Enabling of bearer rejected, failed to enable media [ 485.536989][T15007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2239'. [ 485.876715][T15018] tipc: Enabling of bearer rejected, already enabled [ 486.311813][T15027] lo speed is unknown, defaulting to 1000 [ 486.328773][T15028] pim6reg1: entered promiscuous mode [ 486.336451][T15028] pim6reg1: entered allmulticast mode [ 487.455211][T15040] netlink: 'syz.2.2247': attribute type 13 has an invalid length. [ 487.479925][T15040] netlink: 'syz.2.2247': attribute type 17 has an invalid length. [ 487.660654][T15040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.683969][T15040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.706066][T15045] tipc: Invalid UDP bearer configuration [ 487.706127][T15045] tipc: Enabling of bearer rejected, failed to enable media [ 487.772366][T15040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.821287][T15041] lo speed is unknown, defaulting to 1000 [ 487.870258][T15040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.065712][T15050] pim6reg1: entered promiscuous mode [ 488.073591][T15050] pim6reg1: entered allmulticast mode [ 488.325933][T14943] Set syz1 is full, maxelem 65536 reached [ 488.626969][T15063] lo speed is unknown, defaulting to 1000 [ 488.673890][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2252'. [ 489.020901][T15077] tipc: Invalid UDP bearer configuration [ 489.020962][T15077] tipc: Enabling of bearer rejected, failed to enable media [ 489.122420][T15080] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2257'. [ 489.137113][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 489.145236][ C0] lec:lec_tx_timeout: lec0 [ 489.150540][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 489.196698][T15080] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2257'. [ 489.207027][T15080] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 489.524890][T15091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2258'. [ 490.140489][T15103] tipc: Enabling of bearer rejected, already enabled [ 490.922817][T15117] lo speed is unknown, defaulting to 1000 [ 491.044579][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2266'. [ 491.131194][T15098] lo speed is unknown, defaulting to 1000 [ 491.154937][T15122] lo speed is unknown, defaulting to 1000 [ 491.331151][T15130] tipc: Invalid UDP bearer configuration [ 491.331206][T15130] tipc: Enabling of bearer rejected, failed to enable media [ 492.154504][T15147] lo speed is unknown, defaulting to 1000 [ 492.302302][T15151] syz.3.2274 (15151) used obsolete PPPIOCDETACH ioctl [ 492.328424][T15150] veth0: entered promiscuous mode [ 492.407821][T15159] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2276'. [ 492.493303][T15147] netlink: 'syz.4.2275': attribute type 16 has an invalid length. [ 492.502669][T15147] netlink: 'syz.4.2275': attribute type 17 has an invalid length. [ 492.522164][T15147] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 492.550229][T15150] veth0: left promiscuous mode [ 492.963916][T15168] lo speed is unknown, defaulting to 1000 [ 493.224996][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 493.261054][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'. [ 493.369417][T15172] Ï: option downdelay: invalid value (18446744073709547007) [ 493.399273][T15172] Ï: option downdelay: allowed values 0 - 2147483647 [ 493.410521][T15172] Ï (unregistering): Released all slaves [ 493.441420][T15186] tipc: Invalid UDP bearer configuration [ 493.441478][T15186] tipc: Enabling of bearer rejected, failed to enable media [ 493.735850][T15194] tipc: Invalid UDP bearer configuration [ 493.736086][T15194] tipc: Enabling of bearer rejected, failed to enable media [ 494.157818][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 494.165936][ C0] lec:lec_tx_timeout: lec0 [ 494.824620][T15225] netlink: 'syz.3.2293': attribute type 39 has an invalid length. [ 494.936042][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'. [ 494.968074][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2295'. [ 495.079732][T15225] hsr_slave_1 (unregistering): left promiscuous mode [ 495.189122][T15234] lo speed is unknown, defaulting to 1000 [ 495.516100][T15242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2297'. [ 495.583898][T15246] tipc: Invalid UDP bearer configuration [ 495.583960][T15246] tipc: Enabling of bearer rejected, failed to enable media [ 495.603824][T15244] tipc: Invalid UDP bearer configuration [ 495.603883][T15244] tipc: Enabling of bearer rejected, failed to enable media [ 495.919335][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 495.948884][T15255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 496.082044][T15257] lo speed is unknown, defaulting to 1000 [ 496.509549][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 496.519751][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2306'. [ 496.593102][T15274] netlink: 'syz.1.2307': attribute type 39 has an invalid length. [ 496.803971][T15276] lo speed is unknown, defaulting to 1000 [ 497.065165][T15280] lo speed is unknown, defaulting to 1000 [ 497.333411][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 497.368939][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2314'. [ 497.972893][T15306] tipc: Enabling of bearer rejected, already enabled [ 498.064422][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 498.156137][T15314] netlink: 'syz.0.2318': attribute type 39 has an invalid length. [ 498.269034][T15320] netlink: 'syz.4.2321': attribute type 13 has an invalid length. [ 498.446604][T15323] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 498.498171][ T6038] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 498.737479][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 498.920685][T15340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 498.991787][T15339] 8021q: VLANs not supported on bond0 [ 499.172330][T15351] lo speed is unknown, defaulting to 1000 [ 499.591741][T15357] lo speed is unknown, defaulting to 1000 [ 500.273423][T15369] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 500.326152][T15375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 500.361355][T15369] netlink: 'syz.4.2334': attribute type 10 has an invalid length. [ 500.396190][T15369] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 500.661484][T15369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.691043][T15384] __nla_validate_parse: 6 callbacks suppressed [ 500.691082][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 500.694355][T15369] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 500.698257][T15384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2338'. [ 500.768656][T15383] tipc: Invalid UDP bearer configuration [ 500.768749][T15383] tipc: Enabling of bearer rejected, failed to enable media [ 500.791484][T15376] lo speed is unknown, defaulting to 1000 [ 501.378737][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 501.558010][T15395] lo speed is unknown, defaulting to 1000 [ 501.655891][T15406] netlink: 'syz.0.2343': attribute type 3 has an invalid length. [ 501.664534][T15406] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2343'. [ 502.096037][T15417] syzkaller0: entered promiscuous mode [ 502.111292][T15417] syzkaller0: entered allmulticast mode [ 502.167452][T15397] lo speed is unknown, defaulting to 1000 [ 502.207624][T15419] lo speed is unknown, defaulting to 1000 [ 502.238109][T15420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2346'. [ 502.402219][T15423] tipc: Enabling of bearer rejected, already enabled [ 502.430321][T15423] netlink: 'syz.3.2347': attribute type 11 has an invalid length. [ 502.456848][T15423] netlink: 'syz.3.2347': attribute type 11 has an invalid length. [ 502.475819][T15423] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2347'. [ 502.599441][T15423] bridge7: entered promiscuous mode [ 502.606210][T15423] bridge7: entered allmulticast mode [ 502.802970][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 502.812714][T15428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2349'. [ 502.933697][T15432] netlink: 'syz.2.2348': attribute type 11 has an invalid length. [ 502.973521][T15432] netlink: 'syz.2.2348': attribute type 11 has an invalid length. [ 503.018059][T15432] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2348'. [ 503.264844][T15422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.468098][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 503.803959][T15445] tipc: Invalid UDP bearer configuration [ 503.804019][T15445] tipc: Enabling of bearer rejected, failed to enable media [ 504.347643][T15463] netlink: 'syz.0.2357': attribute type 8 has an invalid length. [ 504.372634][T15462] lo speed is unknown, defaulting to 1000 [ 505.029264][T15464] lo speed is unknown, defaulting to 1000 [ 505.074669][T15469] lo speed is unknown, defaulting to 1000 [ 505.416372][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2361'. [ 505.964244][ T44] IPVS: starting estimator thread 0... [ 506.023957][T15504] pim6reg1: entered promiscuous mode [ 506.051591][T15504] pim6reg1: entered allmulticast mode [ 506.067953][T15513] IPVS: using max 31 ests per chain, 74400 per kthread [ 506.137447][T15512] lo speed is unknown, defaulting to 1000 [ 506.827923][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 507.483674][T15516] lo speed is unknown, defaulting to 1000 [ 507.604948][T15538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2371'. [ 508.621161][ T5927] lo speed is unknown, defaulting to 1000 [ 508.636866][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.667601][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.676649][ T5927] syz2: Port: 1 Link DOWN [ 508.729536][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.767960][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.814891][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.837304][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.856074][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.875035][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.892299][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 508.973099][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 509.009704][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 509.079851][ T5146] Bluetooth: hci4: link tx timeout [ 509.085070][ T5146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 509.383649][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 511.152443][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 511.958854][T15572] tipc: Invalid UDP bearer configuration [ 511.958918][T15572] tipc: Enabling of bearer rejected, failed to enable media [ 512.097126][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 512.105340][ C0] lec:lec_tx_timeout: lec0 [ 512.803658][T15603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2384'. [ 513.620128][T15609] tipc: Invalid UDP bearer configuration [ 513.620189][T15609] tipc: Enabling of bearer rejected, failed to enable media [ 513.665380][T15617] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 514.113149][T15629] tipc: Invalid UDP bearer configuration [ 514.113201][T15629] tipc: Enabling of bearer rejected, failed to enable media [ 514.233949][T15631] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2390'. [ 514.383292][T15637] pim6reg1: entered promiscuous mode [ 514.422590][T15637] pim6reg1: entered allmulticast mode [ 515.239065][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2397'. [ 515.388716][T15659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2398'. [ 516.287534][T15662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.332163][T15666] lo speed is unknown, defaulting to 1000 [ 516.376195][T15669] netlink: 'syz.3.2399': attribute type 3 has an invalid length. [ 516.489758][T15677] tipc: Invalid UDP bearer configuration [ 516.489808][T15677] tipc: Enabling of bearer rejected, failed to enable media [ 516.556550][T15678] tipc: Invalid UDP bearer configuration [ 516.556615][T15678] tipc: Enabling of bearer rejected, failed to enable media [ 516.605789][T15674] lo speed is unknown, defaulting to 1000 [ 517.001628][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 517.047962][T15688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2406'. [ 517.477328][T15697] tipc: Invalid UDP bearer configuration [ 517.477387][T15697] tipc: Enabling of bearer rejected, failed to enable media [ 517.763823][T15679] lo speed is unknown, defaulting to 1000 [ 518.688507][T15717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2412'. [ 518.916912][T15721] tipc: Invalid UDP bearer configuration [ 518.916973][T15721] tipc: Enabling of bearer rejected, failed to enable media [ 519.498333][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 519.508682][T15735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2418'. [ 519.522402][T15737] tipc: Invalid UDP bearer configuration [ 519.522463][T15737] tipc: Enabling of bearer rejected, failed to enable media [ 519.622260][T15715] lo speed is unknown, defaulting to 1000 [ 520.449673][T15754] netlink: 'syz.4.2423': attribute type 8 has an invalid length. [ 520.578048][T15757] tipc: Invalid UDP bearer configuration [ 520.578116][T15757] tipc: Enabling of bearer rejected, failed to enable media [ 520.816329][T15752] lo speed is unknown, defaulting to 1000 [ 520.953000][T15754] lo speed is unknown, defaulting to 1000 [ 521.626290][T15778] tipc: Invalid UDP bearer configuration [ 521.626350][T15778] tipc: Enabling of bearer rejected, failed to enable media [ 521.699145][T15782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2426'. [ 522.474841][T15792] tipc: Enabling of bearer rejected, failed to enable media [ 522.509364][T15788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2430'. [ 522.581202][T15788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2430'. [ 523.962495][T15788] macvlan0: entered allmulticast mode [ 523.968058][T15788] veth1_vlan: entered allmulticast mode [ 523.976433][T15813] tipc: Enabling of bearer rejected, already enabled [ 523.998116][T15814] syzkaller0: entered promiscuous mode [ 524.003657][T15814] syzkaller0: entered allmulticast mode [ 524.358920][T15837] netlink: 'syz.1.2439': attribute type 1 has an invalid length. [ 524.366874][T15837] netlink: 'syz.1.2439': attribute type 3 has an invalid length. [ 524.375569][T15837] netlink: 'syz.1.2439': attribute type 2 has an invalid length. [ 524.395386][T15837] netlink: 'syz.1.2439': attribute type 3 has an invalid length. [ 524.437188][T15837] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2439'. [ 524.686221][T15846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2441'. [ 525.639307][T15850] lo speed is unknown, defaulting to 1000 [ 527.140186][T15860] lo speed is unknown, defaulting to 1000 [ 527.497493][T15874] tipc: Invalid UDP bearer configuration [ 527.497556][T15874] tipc: Enabling of bearer rejected, failed to enable media [ 527.826181][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2451'. [ 528.050323][T15894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2453'. [ 528.212583][T15902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2454'. [ 528.282795][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2457'. [ 528.384418][T15910] netlink: 'syz.0.2454': attribute type 29 has an invalid length. [ 528.395260][T15909] tipc: Enabling of bearer rejected, already enabled [ 528.406223][T15908] veth0_to_bridge: left allmulticast mode [ 528.414094][T15908] veth0_to_bridge: left promiscuous mode [ 528.421992][T15908] bridge0: port 4(veth0_to_bridge) entered disabled state [ 528.445878][T15908] bridge_slave_1: left allmulticast mode [ 528.464824][T15908] bridge_slave_1: left promiscuous mode [ 528.479549][T15908] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.508232][T15908] bridge_slave_0: left promiscuous mode [ 528.521772][T15908] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.931211][T15919] tipc: Enabled bearer , priority 0 [ 528.941425][T15921] syzkaller0: entered promiscuous mode [ 528.948130][T15921] syzkaller0: entered allmulticast mode [ 528.982352][T15929] tipc: Resetting bearer [ 528.999241][T15914] tipc: Resetting bearer [ 529.023869][T15914] tipc: Disabling bearer [ 529.147702][T15936] tipc: Invalid UDP bearer configuration [ 529.147760][T15936] tipc: Enabling of bearer rejected, failed to enable media [ 529.248562][T15940] netlink: 'syz.1.2460': attribute type 8 has an invalid length. [ 529.309008][T15937] lo speed is unknown, defaulting to 1000 [ 529.408874][T15949] netlink: 'syz.4.2465': attribute type 1 has an invalid length. [ 529.428039][T15949] netlink: 'syz.4.2465': attribute type 3 has an invalid length. [ 529.446965][T15949] netlink: 'syz.4.2465': attribute type 2 has an invalid length. [ 529.484152][T15949] netlink: 'syz.4.2465': attribute type 3 has an invalid length. [ 529.538753][T15949] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2465'. [ 529.927145][T15940] lo speed is unknown, defaulting to 1000 [ 530.212946][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2468'. [ 530.276101][T15951] lo speed is unknown, defaulting to 1000 [ 530.451355][T15983] tipc: Invalid UDP bearer configuration [ 530.451413][T15983] tipc: Enabling of bearer rejected, failed to enable media [ 530.967190][T15991] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2470'. [ 531.090262][T15993] lo speed is unknown, defaulting to 1000 [ 531.334806][T15995] tipc: Invalid UDP bearer configuration [ 531.334859][T15995] tipc: Enabling of bearer rejected, failed to enable media [ 531.479630][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 531.736088][T16005] tipc: Enabled bearer , priority 0 [ 531.902901][T16008] syzkaller0: entered promiscuous mode [ 531.910163][T16008] syzkaller0: entered allmulticast mode [ 531.938638][T15998] tipc: Resetting bearer [ 531.979222][T15997] tipc: Resetting bearer [ 532.073427][T15997] tipc: Disabling bearer [ 532.231641][T16022] netlink: 'syz.4.2477': attribute type 1 has an invalid length. [ 532.262084][T16022] netlink: 'syz.4.2477': attribute type 3 has an invalid length. [ 532.296436][T16022] netlink: 'syz.4.2477': attribute type 2 has an invalid length. [ 532.342338][T16022] netlink: 'syz.4.2477': attribute type 3 has an invalid length. [ 532.388431][T16022] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2477'. [ 532.431620][T16032] macvtap0: entered promiscuous mode [ 532.477643][T16032] syz_tun: entered promiscuous mode [ 532.500187][T16032] syz_tun: left promiscuous mode [ 532.823527][T16045] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2483'. [ 532.971082][T16045] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 533.350195][T16040] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2483'. [ 533.440593][T16030] lo speed is unknown, defaulting to 1000 [ 533.593010][T16050] netlink: 'syz.4.2485': attribute type 13 has an invalid length. [ 533.601388][T16050] netlink: 'syz.4.2485': attribute type 17 has an invalid length. [ 533.755485][T16050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.766393][T16050] 8021q: adding VLAN 0 to HW filter on device ` [ 533.781281][T16050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.828687][T16057] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 533.866694][T16050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.888860][T16050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.971679][T16046] lo speed is unknown, defaulting to 1000 [ 533.994716][T16051] lo speed is unknown, defaulting to 1000 [ 534.865941][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 534.918954][T16078] netlink: 'syz.4.2489': attribute type 1 has an invalid length. [ 534.957243][T16078] netlink: 'syz.4.2489': attribute type 3 has an invalid length. [ 534.975407][T16078] netlink: 'syz.4.2489': attribute type 2 has an invalid length. [ 535.000153][T16078] netlink: 'syz.4.2489': attribute type 3 has an invalid length. [ 535.008405][T16078] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2489'. [ 535.264556][T16082] tipc: Invalid UDP bearer configuration [ 535.264619][T16082] tipc: Enabling of bearer rejected, failed to enable media [ 535.331027][T16091] tipc: Enabled bearer , priority 0 [ 535.343843][T16091] syzkaller0: entered promiscuous mode [ 535.366968][T16091] syzkaller0: entered allmulticast mode [ 535.398381][T16091] tipc: Resetting bearer [ 535.405904][T16090] tipc: Resetting bearer [ 535.413597][T16093] netlink: 'syz.3.2493': attribute type 1 has an invalid length. [ 535.424585][T16093] netlink: 'syz.3.2493': attribute type 3 has an invalid length. [ 535.433606][T16093] netlink: 'syz.3.2493': attribute type 2 has an invalid length. [ 535.442543][T16093] netlink: 'syz.3.2493': attribute type 3 has an invalid length. [ 535.443075][T16090] tipc: Disabling bearer [ 535.451220][T16093] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2493'. [ 535.716336][T16098] lo speed is unknown, defaulting to 1000 [ 536.280778][T16112] lo speed is unknown, defaulting to 1000 [ 536.823678][T16098] netlink: 'syz.2.2495': attribute type 6 has an invalid length. [ 538.682518][T16148] pim6reg1: entered promiscuous mode [ 538.685830][T16142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.704548][T16148] pim6reg1: entered allmulticast mode [ 538.755516][T16154] tipc: Invalid UDP bearer configuration [ 538.755580][T16154] tipc: Enabling of bearer rejected, failed to enable media [ 538.956270][T16159] tipc: Invalid UDP bearer configuration [ 538.956336][T16159] tipc: Enabling of bearer rejected, failed to enable media [ 539.061737][T16165] netlink: 'syz.3.2509': attribute type 13 has an invalid length. [ 539.179996][T16165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.193038][T16165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.209577][T15542] lo speed is unknown, defaulting to 1000 [ 539.215861][T15542] syz2: Port: 1 Link ACTIVE [ 539.251952][T16168] lo speed is unknown, defaulting to 1000 [ 539.306706][T16165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.382798][T16165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.632658][T16173] lo speed is unknown, defaulting to 1000 [ 540.220909][T16183] lo speed is unknown, defaulting to 1000 [ 540.229851][T16189] tipc: Enabled bearer , priority 0 [ 540.238170][T16189] syzkaller0: entered promiscuous mode [ 540.247776][T16189] syzkaller0: entered allmulticast mode [ 540.275574][T16189] tipc: Resetting bearer [ 540.319057][T16188] tipc: Resetting bearer [ 540.465707][T16188] tipc: Disabling bearer [ 540.572269][T16191] tipc: Invalid UDP bearer configuration [ 540.572329][T16191] tipc: Enabling of bearer rejected, failed to enable media [ 541.099737][T16194] pim6reg1: entered promiscuous mode [ 541.105134][T16194] pim6reg1: entered allmulticast mode [ 541.604176][T16210] tipc: Enabling of bearer rejected, failed to enable media [ 541.623421][T16211] syzkaller0: entered promiscuous mode [ 541.633248][T16211] syzkaller0: entered allmulticast mode [ 541.782853][T16219] tipc: Enabling of bearer rejected, already enabled [ 542.880486][T16236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2526'. [ 542.968778][T16234] lo speed is unknown, defaulting to 1000 [ 543.274973][T16240] tipc: Enabled bearer , priority 0 [ 543.435111][T16240] syzkaller0: entered promiscuous mode [ 543.442738][T16240] syzkaller0: entered allmulticast mode [ 543.531608][T16256] veth1_vlan: left allmulticast mode [ 543.783112][T16240] tipc: Resetting bearer [ 543.804418][T16239] tipc: Resetting bearer [ 543.912531][T16239] tipc: Disabling bearer [ 543.985408][T16251] lo speed is unknown, defaulting to 1000 [ 544.157334][T16269] pim6reg1: entered promiscuous mode [ 544.172002][T16269] pim6reg1: entered allmulticast mode [ 544.344592][T16272] lo speed is unknown, defaulting to 1000 [ 544.472374][T16276] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 544.485270][T16276] geneve0: entered promiscuous mode [ 544.684247][T16279] lo speed is unknown, defaulting to 1000 [ 544.691023][T16284] tipc: Enabling of bearer rejected, failed to enable media [ 544.858474][T16286] syzkaller0: entered promiscuous mode [ 544.872735][T16286] syzkaller0: entered allmulticast mode [ 544.933172][T16293] tipc: Invalid UDP bearer configuration [ 544.933233][T16293] tipc: Enabling of bearer rejected, failed to enable media [ 545.754107][T16317] lo speed is unknown, defaulting to 1000 [ 545.929322][T16323] lo speed is unknown, defaulting to 1000 [ 546.283967][T16334] tipc: Enabled bearer , priority 0 [ 546.329831][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'. [ 546.339461][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2545'. [ 546.364097][T16333] syzkaller0: entered promiscuous mode [ 546.398117][T16333] syzkaller0: entered allmulticast mode [ 546.443405][T16332] tipc: Resetting bearer [ 546.480645][T16340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2546'. [ 546.590141][T16332] tipc: Disabling bearer [ 546.725830][T16339] lo speed is unknown, defaulting to 1000 [ 546.734892][T16343] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2547'. [ 546.952086][T16341] lo speed is unknown, defaulting to 1000 [ 547.359501][T16354] lo speed is unknown, defaulting to 1000 [ 547.359591][T16352] tipc: Enabling of bearer rejected, failed to enable media [ 547.389614][T16352] syzkaller0: entered promiscuous mode [ 547.401764][T16352] syzkaller0: entered allmulticast mode [ 548.539751][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2556'. [ 548.554848][T16385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2556'. [ 548.905937][T16390] lo speed is unknown, defaulting to 1000 [ 548.922234][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 549.001109][T16394] tipc: Enabled bearer , priority 0 [ 549.020552][T16392] syzkaller0: entered promiscuous mode [ 549.026646][T16392] syzkaller0: entered allmulticast mode [ 549.164390][T16391] tipc: Resetting bearer [ 549.195549][T16391] tipc: Disabling bearer [ 549.240731][T16396] validate_nla: 1 callbacks suppressed [ 549.240759][T16396] netlink: 'syz.4.2559': attribute type 13 has an invalid length. [ 549.263344][T16398] netlink: 'syz.0.2560': attribute type 13 has an invalid length. [ 549.277556][T16396] netlink: 'syz.4.2559': attribute type 17 has an invalid length. [ 549.288236][T16398] netlink: 'syz.0.2560': attribute type 17 has an invalid length. [ 549.356382][T16396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.366748][T16396] 8021q: adding VLAN 0 to HW filter on device ` [ 549.386903][T16396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.482591][T16398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.493401][T16398] 8021q: adding VLAN 0 to HW filter on device ` [ 549.516182][T16398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.533782][T16409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.536595][T16409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.626220][T16400] lo speed is unknown, defaulting to 1000 [ 549.649814][T16408] lo speed is unknown, defaulting to 1000 [ 549.803954][T16399] lo speed is unknown, defaulting to 1000 [ 549.915218][T16414] pimreg: entered allmulticast mode [ 550.063073][T16397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.160877][T16422] lo speed is unknown, defaulting to 1000 [ 550.483224][T16434] bridge0: port 1(macvtap2) entered blocking state [ 550.496372][T16434] bridge0: port 1(macvtap2) entered disabled state [ 550.519159][T16434] macvtap2: entered allmulticast mode [ 550.525188][T16434] bridge0: entered allmulticast mode [ 550.564740][T16434] macvtap2: left allmulticast mode [ 550.597272][T16434] bridge0: left allmulticast mode [ 550.739906][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 550.790297][T16440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2567'. [ 550.840450][T16444] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2570'. [ 550.931647][T16443] lo speed is unknown, defaulting to 1000 [ 550.939553][T16445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2569'. [ 551.161582][T16451] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2572'. [ 551.400133][T16450] tipc: Enabled bearer , priority 0 [ 551.453738][T16454] syzkaller0: entered promiscuous mode [ 551.463891][T16454] syzkaller0: entered allmulticast mode [ 551.485944][T16446] tipc: Resetting bearer [ 551.569028][T16446] tipc: Disabling bearer [ 551.604233][T16456] lo speed is unknown, defaulting to 1000 [ 551.649679][T16466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2573'. [ 551.695681][T16452] lo speed is unknown, defaulting to 1000 [ 551.964113][T16471] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 551.973332][T16471] netlink: 'syz.4.2574': attribute type 3 has an invalid length. [ 551.983845][T16471] netlink: 'syz.4.2574': attribute type 2 has an invalid length. [ 551.995320][T16471] netlink: 'syz.4.2574': attribute type 3 has an invalid length. [ 552.004110][T16471] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2574'. [ 552.113011][T16475] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 552.305822][T16482] lo speed is unknown, defaulting to 1000 [ 552.550953][T16493] netlink: 'syz.3.2579': attribute type 13 has an invalid length. [ 552.559287][T16493] netlink: 'syz.3.2579': attribute type 17 has an invalid length. [ 552.616292][T16493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.850556][T16497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.489075][T16510] tipc: Invalid UDP bearer configuration [ 553.489139][T16510] tipc: Enabling of bearer rejected, failed to enable media [ 553.528050][T16491] lo speed is unknown, defaulting to 1000 [ 553.814865][T16515] tipc: Enabled bearer , priority 0 [ 553.836131][T16515] syzkaller0: entered promiscuous mode [ 553.860715][T16515] syzkaller0: entered allmulticast mode [ 553.992040][T16515] tipc: Resetting bearer [ 554.068446][T16518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.091241][T16518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.112026][T16514] tipc: Resetting bearer [ 554.143314][T16514] tipc: Disabling bearer [ 554.248825][T16525] __nla_validate_parse: 5 callbacks suppressed [ 554.248850][T16525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2587'. [ 554.341237][T16530] tipc: Failed to remove unknown binding: 66,1,1/150340962:3921873906/3921873908 [ 554.342218][T16518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.366066][T16530] tipc: Failed to remove unknown binding: 66,1,1/150340962:3921873906/3921873908 [ 554.389042][T16520] lo speed is unknown, defaulting to 1000 [ 554.405726][T16530] tipc: Failed to remove unknown binding: 66,1,1/150340962:3921873906/3921873908 [ 554.960961][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2593'. [ 554.970563][T16547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2593'. [ 555.205764][T16553] lo speed is unknown, defaulting to 1000 [ 555.874296][T16570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2599'. [ 555.919822][T16570] mac80211_hwsim hwsim10 wlan1: Device is already in use. [ 556.168931][T16570] bond0: (slave wlan1): Releasing backup interface [ 556.222512][T16570] bond0: Destroying bond [ 556.432252][T16584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2600'. [ 556.976139][T16570] bond0 (unregistering): Released all slaves [ 557.041534][T16574] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 557.052855][T16574] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 557.064243][T16574] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 557.190177][T16581] lo speed is unknown, defaulting to 1000 [ 557.199077][T16575] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 557.220538][T16575] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 557.268131][T16575] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 557.570954][T16595] pim6reg1: entered promiscuous mode [ 557.603931][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2605'. [ 557.618021][T16595] pim6reg1: entered allmulticast mode [ 557.626035][T16601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2605'. [ 557.650074][T16599] validate_nla: 2 callbacks suppressed [ 557.650095][T16599] netlink: 'syz.2.2604': attribute type 16 has an invalid length. [ 557.664027][T16599] netlink: 'syz.2.2604': attribute type 17 has an invalid length. [ 557.778417][T16605] IPv6: NLM_F_REPLACE set, but no existing node found! [ 557.859246][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'. [ 557.914693][T16604] tipc: Invalid UDP bearer configuration [ 557.914755][T16604] tipc: Enabling of bearer rejected, failed to enable media [ 558.073577][T16613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2607'. [ 558.286434][T16617] pim6reg1: entered promiscuous mode [ 558.319799][T16617] pim6reg1: entered allmulticast mode [ 558.491561][T16620] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 558.559434][T16622] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 558.711345][T16624] lo speed is unknown, defaulting to 1000 [ 558.771113][T16625] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 558.814097][T16629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2613'. [ 559.290187][T16645] netlink: 'syz.0.2619': attribute type 13 has an invalid length. [ 559.300014][T16645] netlink: 'syz.0.2619': attribute type 17 has an invalid length. [ 559.320315][T16645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.342282][T16646] netlink: 'syz.4.2618': attribute type 13 has an invalid length. [ 559.377199][T16646] netlink: 'syz.4.2618': attribute type 17 has an invalid length. [ 559.544619][T16653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.591188][T16646] 8021q: adding VLAN 0 to HW filter on device ` [ 559.607778][T16648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.738473][T16646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.768818][T16650] netlink: 'syz.1.2617': attribute type 12 has an invalid length. [ 559.952825][T16645] lo speed is unknown, defaulting to 1000 [ 559.975899][T16651] lo speed is unknown, defaulting to 1000 [ 560.130332][T16643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.142678][T16660] __nla_validate_parse: 2 callbacks suppressed [ 560.142701][T16660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2621'. [ 560.344725][T16659] lo speed is unknown, defaulting to 1000 [ 560.578590][ T5146] Bluetooth: hci0: command tx timeout [ 560.832239][T16674] tipc: Invalid UDP bearer configuration [ 560.832306][T16674] tipc: Enabling of bearer rejected, failed to enable media [ 560.951708][T16679] syzkaller0: entered promiscuous mode [ 560.959422][T16679] syzkaller0: entered allmulticast mode [ 561.189761][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'. [ 561.200019][T16685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2628'. [ 561.484632][T16694] tipc: Enabling of bearer rejected, already enabled [ 561.504304][T16693] lo speed is unknown, defaulting to 1000 [ 561.569787][T16688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2629'. [ 561.594128][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 562.455043][T16717] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 562.483063][T16717] netlink: 'syz.3.2637': attribute type 3 has an invalid length. [ 562.508036][T16717] netlink: 'syz.3.2637': attribute type 2 has an invalid length. [ 562.533970][T16717] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2637'. [ 562.834263][T16728] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 562.887503][T16729] syzkaller0: entered promiscuous mode [ 562.895899][T16729] syzkaller0: entered allmulticast mode [ 563.171446][T16741] syzkaller0: entered promiscuous mode [ 563.196536][T16741] syzkaller0: entered allmulticast mode [ 563.974860][T16747] tipc: Invalid UDP bearer configuration [ 563.974922][T16747] tipc: Enabling of bearer rejected, failed to enable media [ 564.117215][T16748] lo speed is unknown, defaulting to 1000 [ 564.595654][T16764] pim6reg1: entered promiscuous mode [ 564.668086][T16764] pim6reg1: entered allmulticast mode [ 564.714513][T16770] validate_nla: 1 callbacks suppressed [ 564.714535][T16770] netlink: 'syz.1.2651': attribute type 1 has an invalid length. [ 564.733811][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 564.763423][T16770] netlink: 'syz.1.2651': attribute type 3 has an invalid length. [ 564.775470][T16769] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 564.813847][T16770] netlink: 'syz.1.2651': attribute type 2 has an invalid length. [ 564.865117][T16770] netlink: 'syz.1.2651': attribute type 3 has an invalid length. [ 564.917401][T16770] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2651'. [ 564.994458][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 565.151455][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2653'. [ 565.593667][T16791] tipc: Invalid UDP bearer configuration [ 565.593729][T16791] tipc: Enabling of bearer rejected, failed to enable media [ 566.140410][T16798] syzkaller0: entered promiscuous mode [ 566.146341][T16798] syzkaller0: entered allmulticast mode [ 566.311645][T16803] syzkaller0: entered promiscuous mode [ 566.321069][T16803] syzkaller0: entered allmulticast mode [ 566.673491][T16805] bond5: option arp_validate: invalid value (18446744073491447809) [ 566.685264][T16805] bond5 (unregistering): Released all slaves [ 566.699748][T16809] netlink: 'syz.3.2660': attribute type 13 has an invalid length. [ 567.845230][T15542] lo speed is unknown, defaulting to 1000 [ 567.871251][T15542] syz2: Port: 1 Link DOWN [ 568.278645][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 569.122272][T16862] netlink: 'syz.1.2671': attribute type 1 has an invalid length. [ 569.132351][T16862] netlink: 'syz.1.2671': attribute type 3 has an invalid length. [ 569.141414][T16862] netlink: 'syz.1.2671': attribute type 2 has an invalid length. [ 569.150490][T16862] netlink: 'syz.1.2671': attribute type 3 has an invalid length. [ 569.159810][T16862] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2671'. [ 571.237499][T16848] lo speed is unknown, defaulting to 1000 [ 571.323353][T16872] syzkaller0: entered promiscuous mode [ 571.330581][T16872] syzkaller0: entered allmulticast mode [ 571.522004][T16877] lo speed is unknown, defaulting to 1000 [ 571.834063][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2679'. [ 571.892393][T16888] ip6tnl1: entered promiscuous mode [ 572.481399][T16904] tipc: Enabled bearer , priority 0 [ 572.494791][T16909] netlink: 'syz.1.2682': attribute type 1 has an invalid length. [ 572.510112][T16904] syzkaller0: entered promiscuous mode [ 572.516155][T16904] syzkaller0: entered allmulticast mode [ 572.522646][T16909] netlink: 'syz.1.2682': attribute type 3 has an invalid length. [ 572.583871][T16909] netlink: 'syz.1.2682': attribute type 2 has an invalid length. [ 572.623984][T16909] netlink: 'syz.1.2682': attribute type 3 has an invalid length. [ 572.810016][T16909] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2682'. [ 573.064207][T16903] tipc: Resetting bearer [ 573.180762][T16903] tipc: Disabling bearer [ 573.288286][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 573.296799][ C0] lec:lec_tx_timeout: lec0 [ 574.148161][T16926] pim6reg1: entered promiscuous mode [ 574.153547][T16926] pim6reg1: entered allmulticast mode [ 574.227673][T16935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2690'. [ 574.254479][T16929] lo speed is unknown, defaulting to 1000 [ 574.848265][T16946] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 574.911962][T16945] lo speed is unknown, defaulting to 1000 [ 575.101875][T16949] tipc: Enabled bearer , priority 0 [ 575.139614][T16949] syzkaller0: entered promiscuous mode [ 575.156764][T16949] syzkaller0: entered allmulticast mode [ 575.222148][T16948] tipc: Resetting bearer [ 575.252144][T16948] tipc: Disabling bearer [ 575.440168][T16962] lo speed is unknown, defaulting to 1000 [ 575.549880][T16965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2699'. [ 575.561021][T16965] unsupported nla_type 46362 [ 576.037453][T16969] lo speed is unknown, defaulting to 1000 [ 577.032366][T16998] tipc: Enabling of bearer rejected, already enabled [ 577.041244][T17000] netlink: 'syz.3.2707': attribute type 11 has an invalid length. [ 577.107553][T17000] netlink: 'syz.3.2707': attribute type 11 has an invalid length. [ 577.221956][T17000] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2707'. [ 577.236946][T16993] lo speed is unknown, defaulting to 1000 [ 577.489960][T17006] bridge0: entered promiscuous mode [ 577.495996][T17006] bridge0: entered allmulticast mode [ 577.769894][T17019] netlink: 'syz.4.2710': attribute type 11 has an invalid length. [ 577.816446][T17019] netlink: 'syz.4.2710': attribute type 11 has an invalid length. [ 577.893227][T17019] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2710'. [ 577.963390][T17024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.252600][T17016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.845010][T17041] tipc: Enabled bearer , priority 0 [ 578.876478][T17041] syzkaller0: entered promiscuous mode [ 578.897549][T17041] syzkaller0: entered allmulticast mode [ 579.032682][T17040] tipc: Resetting bearer [ 579.099704][T17040] tipc: Disabling bearer [ 579.376426][T17053] lo speed is unknown, defaulting to 1000 [ 579.794633][T17068] bond3: option mode: unable to set because the bond device has slaves [ 580.277726][T17078] tipc: Disabling bearer [ 580.422765][T17080] tipc: Invalid UDP bearer configuration [ 580.422825][T17080] tipc: Enabling of bearer rejected, failed to enable media [ 580.513870][T17092] tipc: Enabled bearer , priority 0 [ 580.552121][T17092] syzkaller0: entered promiscuous mode [ 580.560612][T17092] syzkaller0: entered allmulticast mode [ 580.571838][T17082] lo speed is unknown, defaulting to 1000 [ 580.649202][T17092] tipc: Resetting bearer [ 580.683116][T17091] tipc: Resetting bearer [ 580.752978][T17091] tipc: Disabling bearer [ 581.035549][T17085] lo speed is unknown, defaulting to 1000 [ 581.679228][T17113] lo speed is unknown, defaulting to 1000 [ 582.040108][T17130] Cannot find add_set index 0 as target [ 582.049546][T17129] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 582.127436][T17126] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2736'. [ 582.167636][T17129] netlink: 'syz.4.2737': attribute type 3 has an invalid length. [ 582.175551][T17129] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2737'. [ 582.189379][T17132] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 582.334968][T17134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2738'. [ 582.690376][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2741'. [ 582.828439][T17144] tipc: Enabled bearer , priority 0 [ 582.849191][T17144] syzkaller0: entered promiscuous mode [ 582.854919][T17144] syzkaller0: entered allmulticast mode [ 582.917818][T17144] tipc: Resetting bearer [ 582.949153][T17143] tipc: Resetting bearer [ 583.031720][T17149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2743'. [ 583.048593][T17143] tipc: Disabling bearer [ 583.089036][T17148] tipc: Invalid UDP bearer configuration [ 583.089102][T17148] tipc: Enabling of bearer rejected, failed to enable media [ 583.694135][T17166] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 583.812661][T17146] lo speed is unknown, defaulting to 1000 [ 583.820226][T17165] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2748'. [ 584.044050][T17170] tipc: Enabling of bearer rejected, already enabled [ 584.219098][T17178] netlink: 'syz.1.2752': attribute type 13 has an invalid length. [ 584.241849][T17178] netlink: 'syz.1.2752': attribute type 17 has an invalid length. [ 584.299981][T17178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.314553][T17178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.366198][T17180] lo speed is unknown, defaulting to 1000 [ 584.401873][T17178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.483538][T17178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.606640][T17190] lo speed is unknown, defaulting to 1000 [ 585.322193][T17203] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2758'. [ 585.369528][T17203] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 585.397500][T17202] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2758'. [ 585.468103][T17205] tipc: Invalid UDP bearer configuration [ 585.468175][T17205] tipc: Enabling of bearer rejected, failed to enable media [ 585.554733][T17192] lo speed is unknown, defaulting to 1000 [ 586.343768][T17225] tipc: Invalid UDP bearer configuration [ 586.343831][T17225] tipc: Enabling of bearer rejected, failed to enable media [ 586.640072][T17234] pim6reg1: entered promiscuous mode [ 586.650626][T17234] pim6reg1: entered allmulticast mode [ 587.568092][T17249] pim6reg1: entered promiscuous mode [ 587.573475][T17249] pim6reg1: entered allmulticast mode [ 588.582065][T17270] tipc: Enabled bearer , priority 0 [ 588.602474][T17270] tipc: Resetting bearer [ 588.683650][T17269] tipc: Disabling bearer [ 588.837809][T17276] netlink: 'syz.3.2779': attribute type 12 has an invalid length. [ 588.882267][T17276] netlink: 'syz.3.2779': attribute type 4 has an invalid length. [ 589.101476][T17279] lo speed is unknown, defaulting to 1000 [ 589.721471][T17293] netlink: 'syz.4.2784': attribute type 1 has an invalid length. [ 589.738091][T17293] netlink: 'syz.4.2784': attribute type 3 has an invalid length. [ 589.775146][T17293] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2784'. [ 589.788508][T17290] pim6reg1: entered promiscuous mode [ 589.794066][T17290] pim6reg1: entered allmulticast mode [ 590.013130][T17302] tipc: Invalid UDP bearer configuration [ 590.013198][T17302] tipc: Enabling of bearer rejected, failed to enable media [ 590.352848][T17314] netlink: 'syz.1.2790': attribute type 39 has an invalid length. [ 590.790177][T17318] pim6reg1: entered promiscuous mode [ 590.800666][T17318] pim6reg1: entered allmulticast mode [ 591.298269][T17329] lo speed is unknown, defaulting to 1000 [ 591.322223][T17332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2795'. [ 591.519289][T17333] lo speed is unknown, defaulting to 1000 [ 591.631143][T17335] lo speed is unknown, defaulting to 1000 [ 592.073032][T17344] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 592.080370][T15542] IPVS: starting estimator thread 0... [ 592.120083][T17350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2799'. [ 592.203063][T17350] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 592.208075][T17355] IPVS: using max 25 ests per chain, 60000 per kthread [ 592.252985][T17348] lo speed is unknown, defaulting to 1000 [ 592.269380][T17347] netlink: 'syz.2.2800': attribute type 13 has an invalid length. [ 592.330740][T17360] bond6: option arp_validate: invalid value (18446744073491447809) [ 592.570836][T17360] bond6 (unregistering): Released all slaves [ 593.300617][T17372] netlink: 'syz.1.2804': attribute type 13 has an invalid length. [ 593.317855][T17372] netlink: 'syz.1.2804': attribute type 17 has an invalid length. [ 593.435135][T17372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.453424][T17379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.480974][T17372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.564873][T17372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.725035][T17374] lo speed is unknown, defaulting to 1000 [ 593.725348][T17383] syzkaller0: entered promiscuous mode [ 593.740505][T17383] syzkaller0: entered allmulticast mode [ 594.158773][T17397] pim6reg1: entered promiscuous mode [ 594.176291][T17397] pim6reg1: entered allmulticast mode [ 594.460660][T17399] tipc: Invalid UDP bearer configuration [ 594.460720][T17399] tipc: Enabling of bearer rejected, failed to enable media [ 594.885042][T17409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 594.976748][T17407] lo speed is unknown, defaulting to 1000 [ 594.988706][T17408] lo speed is unknown, defaulting to 1000 [ 595.483383][T17424] syzkaller0: entered promiscuous mode [ 595.492185][T17424] syzkaller0: entered allmulticast mode [ 595.503605][T17419] pim6reg1: entered promiscuous mode [ 595.530327][T17419] pim6reg1: entered allmulticast mode [ 595.685995][T17430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2818'. [ 595.783484][T17429] lo speed is unknown, defaulting to 1000 [ 595.803005][T17432] netlink: 'syz.1.2819': attribute type 6 has an invalid length. [ 595.925852][T17434] tipc: Invalid UDP bearer configuration [ 595.925913][T17434] tipc: Enabling of bearer rejected, failed to enable media [ 596.285140][T17442] pim6reg1: entered promiscuous mode [ 596.298776][T17442] pim6reg1: entered allmulticast mode [ 596.853931][T17454] lo speed is unknown, defaulting to 1000 [ 596.894680][T17456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2825'. [ 597.072942][T17461] tipc: Invalid UDP bearer configuration [ 597.073002][T17461] tipc: Enabling of bearer rejected, failed to enable media [ 597.225174][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 597.261761][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2829'. [ 597.836008][T17487] pim6reg1: entered promiscuous mode [ 597.900813][T17487] pim6reg1: entered allmulticast mode [ 597.951246][T17494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2834'. [ 597.978465][T17493] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2833'. [ 598.052901][T17475] syzkaller0: entered promiscuous mode [ 598.066773][T17475] syzkaller0: entered allmulticast mode [ 598.160904][T17491] lo speed is unknown, defaulting to 1000 [ 598.170913][T17499] tipc: Enabled bearer , priority 0 [ 598.181796][T17499] syzkaller0: entered promiscuous mode [ 598.188440][T17499] syzkaller0: entered allmulticast mode [ 598.202276][T17499] tipc: Resetting bearer [ 598.265346][T17498] tipc: Resetting bearer [ 598.307951][T17498] tipc: Disabling bearer [ 598.331809][T17502] tipc: Invalid UDP bearer configuration [ 598.331868][T17502] tipc: Enabling of bearer rejected, failed to enable media [ 598.900536][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2838'. [ 598.940533][T17508] pim6reg1: entered promiscuous mode [ 598.964471][T17508] pim6reg1: entered allmulticast mode [ 599.023559][T17510] veth1_to_batadv: entered promiscuous mode [ 599.398065][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2840'. [ 599.691514][T17522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2841'. [ 599.805341][T17521] lo speed is unknown, defaulting to 1000 [ 600.042541][T17525] lo speed is unknown, defaulting to 1000 [ 600.090059][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 600.139129][T17528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2843'. [ 600.220826][T17530] tipc: Invalid UDP bearer configuration [ 600.220885][T17530] tipc: Enabling of bearer rejected, failed to enable media [ 600.442904][T17536] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 600.654082][T17536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 600.819639][T17539] 8021q: adding VLAN 0 to HW filter on device bond6 [ 600.856635][T17539] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 600.901682][T17539] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 601.135320][T17542] veth11: entered promiscuous mode [ 601.192094][T17542] bond6: (slave veth11): Enslaving as an active interface with a down link [ 601.549823][T17543] syzkaller0: entered promiscuous mode [ 601.556442][T17543] syzkaller0: entered allmulticast mode [ 601.992123][T17534] lo speed is unknown, defaulting to 1000 [ 602.440936][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2849'. [ 602.483744][T17565] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 602.589994][T17558] lo speed is unknown, defaulting to 1000 [ 602.649770][T17562] lo speed is unknown, defaulting to 1000 [ 603.213939][T17574] veth0: entered promiscuous mode [ 603.301068][T17574] veth0: left promiscuous mode [ 603.446070][T17574] lo speed is unknown, defaulting to 1000 [ 603.522764][T17581] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2853'. [ 603.535915][T17581] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 603.668221][T17582] lo speed is unknown, defaulting to 1000 [ 603.759455][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 603.788282][T17587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2855'. [ 603.964549][T17588] lo speed is unknown, defaulting to 1000 [ 604.075095][T17594] tipc: Invalid UDP bearer configuration [ 604.075151][T17594] tipc: Enabling of bearer rejected, failed to enable media [ 604.210357][T17597] sctp: [Deprecated]: syz.2.2858 (pid 17597) Use of int in max_burst socket option deprecated. [ 604.210357][T17597] Use struct sctp_assoc_value instead [ 604.285423][T17601] tipc: Invalid UDP bearer configuration [ 604.285481][T17601] tipc: Enabling of bearer rejected, failed to enable media [ 604.622656][T17611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2860'. [ 604.671313][T17613] netlink: 'syz.2.2862': attribute type 1 has an invalid length. [ 604.682139][T17613] netlink: 'syz.2.2862': attribute type 3 has an invalid length. [ 604.691539][T17613] netlink: 'syz.2.2862': attribute type 2 has an invalid length. [ 604.699963][T17613] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2862'. [ 604.754796][T17608] lo speed is unknown, defaulting to 1000 [ 604.913284][T17620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2863'. [ 605.380107][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 605.390796][T17632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2866'. [ 605.713320][T17630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.724381][T17630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.765724][T17652] netlink: 'syz.4.2870': attribute type 13 has an invalid length. [ 605.787781][T17652] netlink: 'syz.4.2870': attribute type 17 has an invalid length. [ 605.824648][T16499] lo speed is unknown, defaulting to 1000 [ 605.835341][T16499] syz2: Port: 1 Link ACTIVE [ 605.841470][T17640] tipc: Enabled bearer , priority 0 [ 605.893666][T17651] syzkaller0: entered promiscuous mode [ 605.906914][T17651] syzkaller0: entered allmulticast mode [ 605.985056][T17659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.008982][T17652] 8021q: adding VLAN 0 to HW filter on device ` [ 606.030105][T17652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 606.102952][T17661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.129611][T17650] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2868'. [ 606.170510][T17650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.269159][T17651] tipc: Resetting bearer [ 606.302684][T17638] tipc: Resetting bearer [ 606.334416][T17638] tipc: Disabling bearer [ 606.351263][T17653] lo speed is unknown, defaulting to 1000 [ 606.372127][T17655] lo speed is unknown, defaulting to 1000 [ 606.683246][T17672] netlink: 'syz.1.2873': attribute type 1 has an invalid length. [ 606.697742][T17672] netlink: 'syz.1.2873': attribute type 3 has an invalid length. [ 606.722413][T17672] netlink: 'syz.1.2873': attribute type 2 has an invalid length. [ 606.733527][T17673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2874'. [ 606.765489][T17672] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2873'. [ 606.792708][T17671] lo speed is unknown, defaulting to 1000 [ 606.896102][T17677] tipc: Invalid UDP bearer configuration [ 606.896164][T17677] tipc: Enabling of bearer rejected, failed to enable media [ 607.099769][T17684] netlink: 'syz.0.2877': attribute type 13 has an invalid length. [ 607.110752][T17684] netlink: 'syz.0.2877': attribute type 17 has an invalid length. [ 607.226244][T17691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2879'. [ 607.245008][T17684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.320308][T17684] 8021q: adding VLAN 0 to HW filter on device ` [ 607.638211][T17684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.871161][T17697] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2878'. [ 607.927563][T17698] bridge0: port 1(gretap0) entered blocking state [ 607.947635][T17698] bridge0: port 1(gretap0) entered disabled state [ 607.954309][T17698] gretap0: entered allmulticast mode [ 607.983160][T17698] gretap0: entered promiscuous mode [ 608.011930][T17689] lo speed is unknown, defaulting to 1000 [ 608.044092][T17684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.190307][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 608.203041][T17705] lo speed is unknown, defaulting to 1000 [ 608.243277][T17711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.250630][T17711] IPv6: NLM_F_CREATE should be set when creating new route [ 608.383801][T17713] batadv1: entered promiscuous mode [ 608.386460][T17714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2883'. [ 608.685499][T17714] lo speed is unknown, defaulting to 1000 [ 608.761841][T17721] lo speed is unknown, defaulting to 1000 [ 608.958675][T17727] nbd1: detected capacity change from 0 to 127 [ 609.054068][T17736] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2885'. [ 609.066921][T17736] nbd: couldn't find a device at index 0 [ 609.155768][ T52] block nbd1: Receive control failed (result -104) [ 609.510527][T17750] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 609.540310][T17740] lo speed is unknown, defaulting to 1000 [ 610.276458][T17763] tipc: Enabling of bearer rejected, already enabled [ 610.292766][T17772] netlink: 'syz.0.2893': attribute type 11 has an invalid length. [ 610.592583][T17783] lo speed is unknown, defaulting to 1000 [ 610.708436][T17785] __nla_validate_parse: 4 callbacks suppressed [ 610.708455][T17785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 610.777961][T17789] netlink: 'syz.2.2897': attribute type 1 has an invalid length. [ 610.787716][T17789] netlink: 'syz.2.2897': attribute type 2 has an invalid length. [ 610.865792][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'. [ 610.936332][T17799] netlink: 'syz.3.2899': attribute type 13 has an invalid length. [ 611.935426][T17788] lo speed is unknown, defaulting to 1000 [ 611.941553][T15542] lo speed is unknown, defaulting to 1000 [ 611.957762][T15542] syz2: Port: 1 Link DOWN [ 612.047876][T17814] pim6reg1: entered promiscuous mode [ 612.082058][T17814] pim6reg1: entered allmulticast mode [ 612.172093][T17816] macvlan2: entered promiscuous mode [ 612.189435][T17816] vlan0: entered promiscuous mode [ 612.254044][T17816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 612.268133][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 612.276707][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 612.288499][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 612.299291][ T56] block nbd1: Dead connection, failed to find a fallback [ 612.307860][ T56] block nbd1: shutting down sockets [ 612.315765][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 612.323388][ T56] blk_print_req_error: 138 callbacks suppressed [ 612.323411][ T56] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.343382][ T56] buffer_io_error: 138 callbacks suppressed [ 612.343402][ T56] Buffer I/O error on dev nbd1, logical block 0, async page read [ 612.358738][ T56] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.368143][ T56] Buffer I/O error on dev nbd1, logical block 3, async page read [ 612.376668][ T56] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.386002][ T56] Buffer I/O error on dev nbd1, logical block 2, async page read [ 612.394541][ T56] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.404427][ T56] Buffer I/O error on dev nbd1, logical block 1, async page read [ 612.414748][ T8733] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.425273][ T8733] Buffer I/O error on dev nbd1, logical block 0, async page read [ 612.433644][ T8733] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.442998][ T8733] Buffer I/O error on dev nbd1, logical block 1, async page read [ 612.451544][ T8733] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.468112][ T8733] Buffer I/O error on dev nbd1, logical block 2, async page read [ 612.477275][ T8733] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.486500][ T8733] Buffer I/O error on dev nbd1, logical block 3, async page read [ 612.495224][ T8733] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.504796][ T8733] Buffer I/O error on dev nbd1, logical block 0, async page read [ 612.519137][ T8733] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.528497][ T8733] Buffer I/O error on dev nbd1, logical block 1, async page read [ 612.541635][ T8733] ldm_validate_partition_table(): Disk read failed. [ 612.550530][ T8733] Dev nbd1: unable to read RDB block 0 [ 612.559932][ T8733] nbd1: unable to read partition table [ 612.581440][ T8733] ldm_validate_partition_table(): Disk read failed. [ 612.611984][ T8733] Dev nbd1: unable to read RDB block 0 [ 612.622935][ T8733] nbd1: unable to read partition table [ 612.667633][T17816] vlan0 (unregistering): left promiscuous mode [ 612.724746][T17833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2904'. [ 613.503786][T17847] tipc: Invalid UDP bearer configuration [ 613.503848][T17847] tipc: Enabling of bearer rejected, failed to enable media [ 614.442229][T17883] netlink: 'syz.0.2914': attribute type 8 has an invalid length. [ 614.815066][T17883] lo speed is unknown, defaulting to 1000 [ 614.860177][T17879] lo speed is unknown, defaulting to 1000 [ 614.881888][T17896] lo speed is unknown, defaulting to 1000 [ 615.306136][T17906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2919'. [ 615.555985][T17910] lo speed is unknown, defaulting to 1000 [ 615.892299][T17926] tipc: Invalid UDP bearer configuration [ 615.892362][T17926] tipc: Enabling of bearer rejected, failed to enable media [ 616.200859][T17932] tipc: Enabled bearer , priority 0 [ 616.260595][T17930] tipc: Resetting bearer [ 616.494655][T17935] syzkaller0: entered promiscuous mode [ 616.515259][T17935] syzkaller0: entered allmulticast mode [ 616.526892][T17927] tipc: Resetting bearer [ 616.598898][T17927] tipc: Disabling bearer [ 617.046181][T17958] wg1: entered promiscuous mode [ 617.053512][T17958] wg1: entered allmulticast mode [ 617.135529][T17963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.214391][T17963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.436615][T17955] lo speed is unknown, defaulting to 1000 [ 617.540659][T17966] lo speed is unknown, defaulting to 1000 [ 617.552585][T17967] lo speed is unknown, defaulting to 1000 [ 617.830046][T17978] tipc: Invalid UDP bearer configuration [ 617.830106][T17978] tipc: Enabling of bearer rejected, failed to enable media [ 617.921106][T17981] wg1: entered promiscuous mode [ 617.926112][T17981] wg1: entered allmulticast mode [ 618.263112][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 618.573333][T17988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.585677][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 618.882306][T18003] pim6reg1: entered promiscuous mode [ 618.898597][T18003] pim6reg1: entered allmulticast mode [ 621.863511][T18008] lo speed is unknown, defaulting to 1000 [ 621.863892][T18024] netlink: 'syz.2.2944': attribute type 13 has an invalid length. [ 621.885534][T18024] netlink: 'syz.2.2944': attribute type 17 has an invalid length. [ 621.919502][T18018] lo speed is unknown, defaulting to 1000 [ 622.022322][T18024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.044390][T18024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.155315][T18024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.163383][T18029] lo speed is unknown, defaulting to 1000 [ 622.236267][T18024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.858505][T18056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2951'. [ 622.929113][T18057] tipc: Enabled bearer , priority 0 [ 622.937968][T18057] syzkaller0: entered promiscuous mode [ 622.955136][T18057] syzkaller0: entered allmulticast mode [ 622.978317][T18057] tipc: Resetting bearer [ 623.000925][T18054] tipc: Resetting bearer [ 623.091976][T18054] tipc: Disabling bearer [ 623.136312][T18064] lo speed is unknown, defaulting to 1000 [ 623.431197][T18071] netlink: 'syz.0.2955': attribute type 13 has an invalid length. [ 623.445572][T18071] netlink: 'syz.0.2955': attribute type 17 has an invalid length. [ 623.530426][T18071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.592295][T18071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.611225][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2956'. [ 623.661187][T18071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.702973][T18073] lo speed is unknown, defaulting to 1000 [ 624.238874][T18083] nbd3: detected capacity change from 0 to 127 [ 624.309366][T18086] netlink: 'syz.4.2959': attribute type 39 has an invalid length. [ 624.355345][T18081] lo speed is unknown, defaulting to 1000 [ 624.419308][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 624.439275][T18089] lo speed is unknown, defaulting to 1000 [ 624.604938][ T52] block nbd3: Receive control failed (result -104) [ 624.878442][T18105] tipc: Enabled bearer , priority 0 [ 625.080675][T18105] syzkaller0: entered promiscuous mode [ 625.086876][T18105] syzkaller0: entered allmulticast mode [ 625.123711][T18108] lo speed is unknown, defaulting to 1000 [ 625.164710][T18121] tipc: Resetting bearer [ 625.195042][T18104] tipc: Resetting bearer [ 625.243472][T18104] tipc: Disabling bearer [ 625.255144][T18103] lo speed is unknown, defaulting to 1000 [ 625.306255][T18123] lo speed is unknown, defaulting to 1000 [ 626.133470][T18132] lo speed is unknown, defaulting to 1000 [ 626.683929][T18156] tipc: Invalid UDP bearer configuration [ 626.683991][T18156] tipc: Enabling of bearer rejected, failed to enable media [ 626.854264][T18143] lo speed is unknown, defaulting to 1000 [ 627.045174][T18162] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 627.528644][T18173] lo speed is unknown, defaulting to 1000 [ 627.754062][T18182] 8021q: adding VLAN 0 to HW filter on device bond9 [ 627.855658][T18182] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 627.882360][T18182] bond9: (slave macvlan0): Enslaving as a backup interface with a down link [ 627.908561][T18185] bond8: (slave erspan0): Releasing active interface [ 627.915447][T18185] ip6gretap1: entered promiscuous mode [ 627.940534][T18185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 628.366351][T18203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2982'. [ 628.658166][T18189] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 629.703544][ C0] ------------[ cut here ]------------ [ 629.709424][ C0] ODEBUG: free active (active state 0) object: ffff88805007ec90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 629.723209][ C0] WARNING: CPU: 0 PID: 5823 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 629.732812][ C0] Modules linked in: [ 629.737122][ C0] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 629.746625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.756879][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 629.762926][ C0] Code: 4c 89 ff e8 17 e0 92 fd 4d 8b 0f 48 c7 c7 80 12 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 5a 3a f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 4f ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 629.782632][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 629.788782][ C0] RAX: de3f444c65802300 RBX: dffffc0000000000 RCX: ffff88802da71e40 [ 629.796881][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 629.804932][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 629.812995][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffffffff8a3a1500 [ 629.821132][ C0] R13: ffffffff8bbf1400 R14: ffff88805007ec90 R15: ffffffff8b6cf7e0 [ 629.829193][ C0] FS: 000055558e828500(0000) GS:ffff888126135000(0000) knlGS:0000000000000000 [ 629.838204][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.844821][ C0] CR2: 0000001b30d10ff8 CR3: 00000000757fe000 CR4: 00000000003526f0 [ 629.852883][ C0] Call Trace: [ 629.856193][ C0] [ 629.859112][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 629.864729][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 629.869918][ C0] kfree+0x115/0x6d0 [ 629.873872][ C0] rose_timer_expiry+0x4cb/0x600 [ 629.878963][ C0] ? call_timer_fn+0x155/0x5f0 [ 629.883775][ C0] call_timer_fn+0x17e/0x5f0 [ 629.888441][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 629.893938][ C0] ? call_timer_fn+0xbe/0x5f0 [ 629.898692][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 629.903854][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.909127][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.914370][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 629.919911][ C0] __run_timer_base+0x61a/0x860 [ 629.924835][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 629.930329][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 629.936641][ C0] run_timer_softirq+0xb7/0x180 [ 629.941597][ C0] handle_softirqs+0x286/0x870 [ 629.946414][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 629.951274][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 629.956605][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 629.961898][ C0] __irq_exit_rcu+0xca/0x1f0 [ 629.966659][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 629.972047][ C0] irq_exit_rcu+0x9/0x30 [ 629.976336][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 629.982059][ C0] [ 629.985020][ C0] [ 629.988034][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.994060][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 629.999958][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 aa 2a 53 f6 48 89 df e8 02 c2 53 f6 e8 9d 8a 7d f6 fb bf 01 00 00 00 e2 b8 45 f6 65 8b 05 3b 78 24 07 85 c0 74 07 5b c3 cc cc cc cc [ 630.019650][ C0] RSP: 0018:ffffc9000415fc80 EFLAGS: 00000282 [ 630.025764][ C0] RAX: de3f444c65802300 RBX: ffff8880299c2500 RCX: de3f444c65802300 [ 630.033826][ C0] RDX: 0000000000000000 RSI: ffffffff8d711843 RDI: 0000000000000001 [ 630.041883][ C0] RBP: 0000000000000021 R08: ffffffff8f7d0477 R09: 1ffffffff1efa08e [ 630.049947][ C0] R10: dffffc0000000000 R11: fffffbfff1efa08f R12: 1ffff11005338533 [ 630.058009][ C0] R13: 0000000000000000 R14: 000000001c000004 R15: ffff8880299c2998 [ 630.066042][ C0] get_signal+0x11a7/0x1340 [ 630.070653][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 630.076254][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 630.082529][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 630.088158][ C0] exit_to_user_mode_loop+0x72/0x130 [ 630.093496][ C0] do_syscall_64+0x2bd/0xfa0 [ 630.098171][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.104272][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.110518][ C0] ? clear_bhb_loop+0x60/0xb0 [ 630.115350][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.121323][ C0] RIP: 0033:0x7f54de24d6e0 [ 630.125776][ C0] Code: 44 24 20 0f 29 44 24 30 0f 29 44 24 40 48 8b 44 24 08 ff d0 48 83 c4 50 31 c0 5b 5d 41 5c 41 5d 41 5e c3 0f 1f 80 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f [ 630.145479][ C0] RSP: 002b:00007ffc4f844a78 EFLAGS: 00000293 [ 630.151630][ C0] RAX: 0000000000000000 RBX: 000000000000077d RCX: 00007f54de3c2005 [ 630.159684][ C0] RDX: 00007ffc4f844a80 RSI: 00007ffc4f844bb0 RDI: 0000000000000011 [ 630.167733][ C0] RBP: 00007ffc4f8450cc R08: 0000000000000000 R09: 0000000000000000 [ 630.175828][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 630.183989][ C0] R13: 00000000000927c0 R14: 00000000000997e1 R15: 00007ffc4f845120 [ 630.192076][ C0] [ 630.195136][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 630.202446][ C0] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 630.211931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 630.222268][ C0] Call Trace: [ 630.225571][ C0] [ 630.228425][ C0] dump_stack_lvl+0x99/0x250 [ 630.233050][ C0] ? __asan_memcpy+0x40/0x70 [ 630.237835][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.243055][ C0] ? __pfx__printk+0x10/0x10 [ 630.247675][ C0] vpanic+0x237/0x6d0 [ 630.251700][ C0] ? __pfx_vpanic+0x10/0x10 [ 630.256233][ C0] panic+0xb9/0xc0 [ 630.260058][ C0] ? __pfx_panic+0x10/0x10 [ 630.264515][ C0] __warn+0x31b/0x4b0 [ 630.268571][ C0] ? debug_print_object+0x16b/0x1e0 [ 630.273844][ C0] ? debug_print_object+0x16b/0x1e0 [ 630.279088][ C0] report_bug+0x2be/0x4f0 [ 630.283447][ C0] ? debug_print_object+0x16b/0x1e0 [ 630.288674][ C0] ? debug_print_object+0x16b/0x1e0 [ 630.293896][ C0] ? debug_print_object+0x16d/0x1e0 [ 630.299217][ C0] handle_bug+0x84/0x160 [ 630.303488][ C0] exc_invalid_op+0x1a/0x50 [ 630.308015][ C0] asm_exc_invalid_op+0x1a/0x20 [ 630.312932][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 630.318758][ C0] Code: 4c 89 ff e8 17 e0 92 fd 4d 8b 0f 48 c7 c7 80 12 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 5a 3a f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 4f ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 630.338422][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 630.344506][ C0] RAX: de3f444c65802300 RBX: dffffc0000000000 RCX: ffff88802da71e40 [ 630.352523][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 630.360508][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 630.368493][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffffffff8a3a1500 [ 630.376498][ C0] R13: ffffffff8bbf1400 R14: ffff88805007ec90 R15: ffffffff8b6cf7e0 [ 630.384488][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 630.390168][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 630.395752][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 630.400910][ C0] kfree+0x115/0x6d0 [ 630.404835][ C0] rose_timer_expiry+0x4cb/0x600 [ 630.409788][ C0] ? call_timer_fn+0x155/0x5f0 [ 630.414563][ C0] call_timer_fn+0x17e/0x5f0 [ 630.419166][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 630.424635][ C0] ? call_timer_fn+0xbe/0x5f0 [ 630.429337][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 630.434471][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.439684][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.445085][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 630.450560][ C0] __run_timer_base+0x61a/0x860 [ 630.455542][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 630.460955][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 630.467249][ C0] run_timer_softirq+0xb7/0x180 [ 630.472133][ C0] handle_softirqs+0x286/0x870 [ 630.476924][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 630.481794][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 630.487097][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 630.492317][ C0] __irq_exit_rcu+0xca/0x1f0 [ 630.496924][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 630.502152][ C0] irq_exit_rcu+0x9/0x30 [ 630.506414][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 630.512070][ C0] [ 630.515008][ C0] [ 630.517953][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.523951][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 630.529772][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 aa 2a 53 f6 48 89 df e8 02 c2 53 f6 e8 9d 8a 7d f6 fb bf 01 00 00 00 e2 b8 45 f6 65 8b 05 3b 78 24 07 85 c0 74 07 5b c3 cc cc cc cc [ 630.549392][ C0] RSP: 0018:ffffc9000415fc80 EFLAGS: 00000282 [ 630.555478][ C0] RAX: de3f444c65802300 RBX: ffff8880299c2500 RCX: de3f444c65802300 [ 630.563501][ C0] RDX: 0000000000000000 RSI: ffffffff8d711843 RDI: 0000000000000001 [ 630.571486][ C0] RBP: 0000000000000021 R08: ffffffff8f7d0477 R09: 1ffffffff1efa08e [ 630.579502][ C0] R10: dffffc0000000000 R11: fffffbfff1efa08f R12: 1ffff11005338533 [ 630.587495][ C0] R13: 0000000000000000 R14: 000000001c000004 R15: ffff8880299c2998 [ 630.595503][ C0] get_signal+0x11a7/0x1340 [ 630.600044][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 630.605624][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 630.611831][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 630.617345][ C0] exit_to_user_mode_loop+0x72/0x130 [ 630.622640][ C0] do_syscall_64+0x2bd/0xfa0 [ 630.627252][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.633338][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.639588][ C0] ? clear_bhb_loop+0x60/0xb0 [ 630.644284][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.650189][ C0] RIP: 0033:0x7f54de24d6e0 [ 630.654616][ C0] Code: 44 24 20 0f 29 44 24 30 0f 29 44 24 40 48 8b 44 24 08 ff d0 48 83 c4 50 31 c0 5b 5d 41 5c 41 5d 41 5e c3 0f 1f 80 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f [ 630.674245][ C0] RSP: 002b:00007ffc4f844a78 EFLAGS: 00000293 [ 630.680327][ C0] RAX: 0000000000000000 RBX: 000000000000077d RCX: 00007f54de3c2005 [ 630.688305][ C0] RDX: 00007ffc4f844a80 RSI: 00007ffc4f844bb0 RDI: 0000000000000011 [ 630.696290][ C0] RBP: 00007ffc4f8450cc R08: 0000000000000000 R09: 0000000000000000 [ 630.704273][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 630.712254][ C0] R13: 00000000000927c0 R14: 00000000000997e1 R15: 00007ffc4f845120 [ 630.720255][ C0] [ 630.723606][ C0] Kernel Offset: disabled [ 630.727948][ C0] Rebooting in 86400 seconds..