last executing test programs: 3.159222282s ago: executing program 0 (id=4970): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@delchain={0x3c, 0x65, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xd, 0x1}, {0x0, 0x6}, {0x4, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xa0, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0x6b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendmmsg$sock(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r8, 0x37d2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r9, 0x58, &(0x7f00000006c0)}, 0x10) accept4$llc(r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x2) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000008140)=ANY=[@ANYBLOB="c4220000120001000000000000000000100000000c0000000000000000000000a42221"], 0x22c4}], 0x100000000000030d}, 0x0) 2.768371509s ago: executing program 2 (id=4979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@deltclass={0x5c, 0x29, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {0xffff, 0x6}, {0x10, 0xf}}, [@TCA_RATE={0x0, 0x5, {0x5, 0x81}}, @TCA_RATE={0x6, 0x5, {0xd1, 0xf}}, @tclass_kind_options=@c_fq_codel={0xffffffffffffffcd}, @tclass_kind_options=@c_ingress={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$packet(0x11, 0x1, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000150001031200"/20], 0x14}}, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafcffffffffff48004508001c00c500008002907800003d00e000035ebf6669bc41319c00"], 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) 2.207400967s ago: executing program 0 (id=4983): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x51, 0xb619, '.\x00'}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0xa4, &(0x7f0000000680)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x0, @local}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0xa0a9, @mcast2, 0x1}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000007c0)={r6, 0x2, 0x30}, &(0x7f0000000800)=0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000380)) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000340)="08000000010000", 0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000041000100fcff05000400000001000000040048225b40bdd035241a80100001800c00108006000b007b00000004000200"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r5}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x54, 0x68, 0x200, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, 0x1}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_GROUP={0x34, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0xeb}, {0x1, 0x7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x2004c004) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r8], 0x14}, 0x1, 0x0, 0x0, 0x400c090}, 0x2000c010) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x3}}, 0x14, &(0x7f0000000100)={0x0, 0x1b}, 0x7}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.198419243s ago: executing program 2 (id=4984): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x13) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x13) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) 1.929874094s ago: executing program 2 (id=4988): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000003c0)=0xc) (async) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0xffffffffffffffff, 0x12) (async) mmap(&(0x7f0000a8d000/0x3000)=nil, 0x3000, 0x3000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x4010030, 0xffffffffffffffff, 0xaba00000) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) 1.887321863s ago: executing program 0 (id=4990): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) (async) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) 1.762639128s ago: executing program 0 (id=4993): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001300), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) connect$inet6(r0, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) 1.183955769s ago: executing program 1 (id=4999): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @mcast2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e544524014004009412080000001e1ea6324d0093fcf19b49f31d0000000000000076a8a20122e4dbbe00000000000000000000000000000100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) r4 = socket$kcm(0x2, 0xa, 0x2) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x304) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) close(r7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) (rerun: 32) sendmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6000801) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) 1.152034174s ago: executing program 1 (id=5000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xffffff9c}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xda9}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd700000000246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0cc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0x9c}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0xffff0000, 0x10, 0x0, &(0x7f0000000980)="2b206d3c9d84609e73fb074824b354de", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.061671724s ago: executing program 3 (id=5003): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r1, 0x33, "e51daf900dffbe101d70f1fb1c75832f7cadb3783806c2294200f0bf40651eee57ecbcc793ef8d936a56bb85cee66ac8c606b7"}, &(0x7f00000000c0)=0x3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_LABELS_MASK={0x1c, 0x17, [0x1a76, 0x7, 0x7, 0xffff, 0x4, 0x8fab]}]}, 0x4c}}, 0x884) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48801}, 0x20000010) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)={0x354, r7, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x38}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffb23}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf75}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x762cd40e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfbd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1889}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "d8266357824a4a7c69822ac46f50760f99bc9aeaaaaaf37e110cfc0917da2328b98294"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "cad9c148afa40a9fbbf2e0f3548b4a47656a289e880a8f5573178c877d356fcfe33d5a60ee7051893a36f7c3fdc166fdac1fe57535d4cf34421d6d300a351d4240f20ac8ff1801cfb2d01eb1dce810f2a3220f6260e797b1a0c7b07dfd719c9bac9225a4804aa483f6fe2c902261ab75b3de2caf39862cee4f8fe6cbc1e8446de9aa729e678f61da7ea66b41a201da8d7e4b0c89fe47036d7b13510f6cedcca962e9cda50d15b572edd528d3f6daa6703dd79e8b8bc90539f26ca5a80b511839bbebbfaea4322512"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x4}, 0x80) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000940)={'ah\x00'}, &(0x7f0000000980)=0x1e) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r8, &(0x7f00000009c0), &(0x7f0000000a00)=0x12, 0x80800) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000a40)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x80, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2c}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000801) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000d00)={r0, &(0x7f0000000c00)=':\x00', 0x58d001, &(0x7f0000000c40)={@_ha_fsid={[0x8, 0x6]}, {0x7, 0x8cbd, 0x2b043bb1, 0x2b}}, 0x7, &(0x7f0000000c80), &(0x7f0000000cc0)=0x1}) connect$tipc(r9, &(0x7f0000000d40)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r9) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000dc0)={r1, 0x6, 0x200}, &(0x7f0000000e00)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000e40)={r1, 0x4}, &(0x7f0000000e80)=0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000fc0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x8, &(0x7f0000000ec0)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xab81}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000f00)='GPL\x00', 0x0, 0x6e, &(0x7f0000000f40)=""/110, 0x41000, 0xe, '\x00', r10, 0x25, r9, 0x8, &(0x7f0000001000)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001040)={0x3, 0x6, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001080)=[r9, r9], &(0x7f00000010c0)=[{0x0, 0x2, 0xa, 0x4}, {0x0, 0x1, 0x0, 0x4}], 0x10, 0x1000}, 0x94) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r11, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40880) syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000001340)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, @in6={0xa, 0x4e20, 0x1ff, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, @in6={0xa, 0x4e20, 0x1, @empty, 0x5}], 0x64) write$tun(r9, &(0x7f00000013c0)={@val={0x0, 0x86dd}, @void, @x25={0x0, 0x2, 0xf, "ff627a8e872c2dd992c30b0ba495769afdd8e30ffeffc7cf15f6b539da8a78ab3c9cbbc64610de063ccbb6141026c5b0df8ea9a6c61af7b0a510efc47f41603b03239ac1940dec66fbebc91dfac5c3ffb3b1824830c05824b11dadb3385f3a55db57b1fd30c77447f685dd253c524308e15b866d2f6e0ba54eb2daad54ab521be3946588ed18625018f4416cb711f25d9b155d4793f84cd09e9bcbab82b6c646c8fa5453600fd9b6227ee18bdd06901e15f3cb9ef38afbcc9ba066ad4b293c46263e5a8be927c2b59e3a5bfb7c9bc1bd79f5fc101eb9c571829d896785f5018b9c49"}}, 0xe9) 1.047133653s ago: executing program 1 (id=5004): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008800) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}, 0x20000}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r4, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", ""]}, 0x24}}, 0x40) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000090027bd7000"/20], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x3c, 0x2d, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff1}, {0x7, 0xfff3}, {0xffe0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xe, 0x81}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8800) 988.025924ms ago: executing program 2 (id=5006): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x83, 0x0, 0x4000850}, 0x40) 890.965019ms ago: executing program 3 (id=5007): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000bc00000095", @ANYRES8=r2, @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) write$cgroup_int(r3, &(0x7f0000000140)=0xffffffffffffffff, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000020000000fb667e000000000014001a80100002800c00018008000f00179248bcf44ba0d85f3cd6fb9001000000724455e219cafaa336858666c423d9676ad2e5"], 0x3c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)='%pB \x00'}, 0x20) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000240)={0x0, r5, r4, 0x0, 0x3, '\x00', {0x2, 0xb, 0xfff, 0xfff, 0x3187, 0x6, 0x3, 0x1, {0xe, 0x3}, {0x4, 0x80000001}, {0x8d, 0x4}, 0xfffffffffffffff3, 0xf422, 0x7, 0x4b72c5f9, 0x8000, 0x3, 0x6, 0x0, 0x9, 0x7ff, '\x00', 0x4, 0x1, 0xfffc, 0x6}}) setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000000400)=0x4, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 839.238678ms ago: executing program 4 (id=5008): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000005a0013010000000000000000000000001c00028008000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xebe, 0x7, 0x3b52, 0x2, 0x1000, 0x1, 0x3, 0x2}}) 838.069852ms ago: executing program 1 (id=5009): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="7bbade96240bb23183c975744cbf555af620eeb878996299a04442d23453", 0x1e) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x1, 0x0, 0x0, @str='wlan0\x00'}]}, 0x20}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x80, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1}}, 0x70, 0xb, 0x6, 0x8, 0x3}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r6, 0x4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000100)={0x4, 0x4, 0x2, 0x9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x28) 767.119736ms ago: executing program 4 (id=5010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xffffffffffffff64, 0x6, 0x200000000}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044811) syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff03076804268c989e14f088a8", 0x0, 0x20001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a30000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d05000200070000003c0001800c00010062697477697365002c000280080002400000000a08000340000000010800064000000000080001400000001204000580040004800900010073797a30"], 0x110}}, 0x0) getsockopt(r3, 0xff, 0x1, 0x0, &(0x7f0000000040)) 726.577201ms ago: executing program 0 (id=5011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000140), 0x80000003, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@private2, 0x0}, &(0x7f0000000200)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xb}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4048000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x8e, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2d, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @alu={0x7, 0x0, 0xa, 0x9, 0x9, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, @jmp={0x5, 0x0, 0x7, 0x6, 0x6, 0x80, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x6f, &(0x7f0000000780)=""/111, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x1, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r0], &(0x7f00000008c0)=[{0x3, 0x3, 0x6, 0xa}, {0x4, 0x4, 0x9}, {0x2, 0x2}, {0x5, 0x3, 0x3, 0x7}, {0x4, 0x1, 0x4, 0x8}, {0x3, 0x5, 0x10, 0xa}], 0x10, 0x5907}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x12, 0x9, 0x1, 0x0, 0x2200, r0, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xd, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000044493b469a3c0703002b0000cac9bda50be950d4e903b8cc2b3a185b33869cd387dbd47f9f8c3ad660bcb9f27d0e5469b7ae953b79f08b601c419f7ecb78cd490ed600"/101, @ANYRES32=r0, @ANYBLOB="00000000ff7f0000"], &(0x7f0000000140)='syzkaller\x00', 0x6864, 0x2d, &(0x7f0000000180)=""/45, 0x41100, 0x2, '\x00', r1, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x7, 0x7fffffff}, 0x10, r5, r6, 0x2, &(0x7f0000000b40)=[r0, r0, r0, r0, r7, r0], &(0x7f0000000b80)=[{0x3, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x9, 0x9}], 0x10, 0x9}, 0x94) 647.506804ms ago: executing program 1 (id=5012): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40246, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 646.716937ms ago: executing program 3 (id=5013): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="20008295dc5fd400001000010700000000000000000a0000000c0002006e6c383032313100f45007ee392a2028d8308b895f967475f96e1540753870144cabfe386dedf36168bb9859f7d97da7388551e2d36c8d1bf8a0c34d8bfcf24226448270f28da811921fc0e00e5f903626c09f0aa7f0fa0a6db3819e638085fd8e07f51c84bb1a69c5a5d6bb7bf61cd0f220fd03f8b716d48470c8b2a1eb2f6325ce1620be038d3a62a72a0672097b8eb24b8d090d4569220738f74be6bc"], 0x20}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000300)=0x9, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000ac0)={{r4, &(0x7f0000000380)='nl80211\x00', 0x200, &(0x7f00000003c0)={@align=0x40000000000000, {0x3, 0x5, 0x9, 0x2}}, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x9}, 0x5, &(0x7f0000000940)=[{0x2, 0xfff, &(0x7f0000000580)='nl80211\x00', &(0x7f00000005c0)="b6e587532caeaabd6dd31f50211f912ec6ff76c54582336a641bf4f351aee6dd8ca76ae10d1f205ccef2022dbdd568", 0x2f, 0x30}, {0x2, 0x7f, &(0x7f0000000600)='vcan0\x00', &(0x7f0000000640)="3a8c9581903e32721dbb37204eeeb0488e9ef6e3fbabda1b43366a3826ca5c34a0a34f47", 0x24, 0x12}, {0x2, 0x4, &(0x7f0000000680)='vcan0\x00', &(0x7f00000006c0)="cc5f9cfd871c764601a4b0ce031227d181378a750eabccd608b93886849ea3e482c531e905d76ba3bdd5db0c78388a927a892495cbd300"/67, 0x43, 0x20}, {0x2, 0xa, &(0x7f0000000740)='GPL\x00', &(0x7f0000000780)="86827e8b3c3440b37578ab293cc7f5a2668325f560226007cfcc48be34648c5e28c839d83aa8192fb2bc2eb98ef79e2265eeffbd2ec61e45c197541a019fa58c4804dd5de2daadd8f09bf191d6880e8cc31b9d05f32b9dec97d0d055144f5fd8e54ea096724c214310621fc09bc5578079584c51ebbbcfe6c5754629f4500508b958aedeab9c1caf41a7692dc65f06e8654edb0d83cd178967f979b09447e65b", 0xa0}, {0x3, 0x8, &(0x7f0000000440)='$!\xe7+*\x05\x00?\xea\xedKyD~\xc6b\xd8L\xad\x96?\xea\'K\xe6N\xfeS3\x10\xf4\xa2>\x82%\xa6\xa8\xa4~\x8c\t \x85W\xf4<\xe11\xc8<\x81q\x84\x02YH\xbd\x16%\xe3\x8e\xf5&x\xc4*Mbh}\xc6\xb4\x11\xc9@<\"\x0f\xb6 \x80\xa5\x18\xae\x82CK\xd6\x06\xd1\xde\xa9=\xbd\xeca\x04_\a6\x00\x89K\xde\xd1p\x19\xc2\xaf]\x84Y', &(0x7f0000000880)="7bb0abd3238e677574e35a09ecf1c4b3145f8c18ea21b7af18ab08a194efd58c9acdae7460d73b17c97a1ae63e6f24c776b5631dd8b2171c2274760b6395264b76be706d0add9d63ec92292879ff3400a39b8a344c08c32dac6f9d8dcb586b992cf7dc69a24e58460937ae54da3878dd4eea2cae61bc16ff8854fc85cb5c44ccb8bedf172ae498470ec2d0f1983e6183225cf6734a265e7db33314ca", 0x9c}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x8, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="b5dc677c0e82a2bb74b6c26d40d43e291f36610bd9b3e4bd6845df0c7ecca302ed94d65e25281526a1e0d95af1177c6ee0147b74dcade1c9e710457487240a4020f3a9d7fe21b353917db9208d84b860b328507bfeb5ad93bd8a10f8bbfd07ae6412b20371cfed57b2d1fac1d3d6f6146bc655b5c70c08ea7e98b2e24656575267f3a1f618be", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x81, 0x0, &(0x7f0000000dc0)="63eced8e46dc3f0adf3389f7b9867ecc034feea9037a3f23dacacd3e1b15e8166d4cb03c493fd007e7aed9fd8eb6ce3d7f6af5bf3c59396113928e51ee32a8bce3a69f0b243d4c08dbe53bee5245127ca818e510fd52d4b7486b8cc5b9041b4ec5430a4a8fdfa33567380964cffbb00d23acd0ec88c2c7b287d432d08c820e0f5b", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000009c0)) write(r3, &(0x7f0000000000), 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010001000000000000010040000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000140000000140800034000000002080002400000001208000800000000000900010073797a30"], 0x108}}, 0x0) 630.126273ms ago: executing program 1 (id=5014): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffb, 0x4000, 0x1, 0x400, 0xd, 0x20, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0x80087601, 0xfffffffffffffffe) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000)=0x6, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x600}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) socket$nl_route(0x10, 0x3, 0x0) 605.958511ms ago: executing program 4 (id=5015): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, &(0x7f00000000c0)=0x14) (async) getsockname$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) (async) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'nr0\x00', 0x1ff, 0x1c0000}) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000300)=@req={0x1, 0x9, 0x6d89, 0x5}, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2173, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) setsockopt(r2, 0x96, 0xd, &(0x7f00000004c0)="865fa2bc51831423bd1dd0730d5b19ab00f1d1c6ff5b6e7b0a5a192c183c6bf36d0abb40b4b52d78d2e7c551c390", 0x2e) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000500)={'veth1_to_batadv\x00', {0x2, 0x0, @local}}) (async) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0), 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x19, &(0x7f0000000600)=@raw=[@tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x30}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000700)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', r5, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0x1, r2, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000008c0)={r6, r7, 0x4, r2}, 0x10) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000900)={r2, 0x7f, 0xfffffffffffffffe, 0xfffffffffffffff9}) (async, rerun: 32) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r9, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x29ec}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}}, 0x801) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000a80)={0x0, @in6={{0xa, 0x4e22, 0x8, @loopback, 0x2}}, 0xcf1, 0xf04}, &(0x7f0000000b40)=0x90) getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000b80)=@assoc_value={r10}, &(0x7f0000000bc0)=0x8) socket$unix(0x1, 0x5, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000f80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c40)={0x2f4, 0x14, 0x200, 0x70bd2c, 0x25dfdbfc, {0x2, 0xac}, [@INET_DIAG_REQ_BYTECODE={0x57, 0x1, "12ebd13a994370ef1b4e1ea83e8e22bbbdd64b0d66baf63eb41a713c1ff64cc372e38fc5efe0efe11c9ccc88132d6dc2a5c0a743c3c6435ab0641018c9d4513633dd0f59e11c117f7c2c44eaab96313b09d322"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "d115dafd8f4a82c51d5ea4c4db1c3da9b1de96e23d8f05851be5414a2b6907ae9d872fe71b9c78388db62ec23c4cd805579d6b8f21fc86dda3d9a5d0b2894a75bb597e9f1a5e4d2caea6317db07068c76a99dd66834c9fd2f75582d0dcec0a98785de6f91e2d7b3f977600041a05a8450e1902"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "629f1bb42d500752b78d31633afe42f93b8083ba51def70fc312ad3630c8acac9ca0bcb3c36a69a7f5cc50e01e5d46bc60e3d5167507e0f45d666d6c059937f787166afdce83011e433ba830d14435a4f6c7101fe4a6303b2307b2ab3c0cce537008f4ebae9419c6a8ce41dcae96de2a8b15ecd516a5d9cf9c7e7780a556fc2107119f47bf3e43582f991c6e8f94f373f528c32bb11b3886d3dd9dbab65fe7479c74252b155f6ae21e13b7"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "5b7b1f82af6acb357aedff211f02add05393e4482d"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "9cf17d9e452d4b02e16686c6129065c9e3b137f04c2d0c3cd3197c68ede6cc529961ac2025b6775adfaaced5746d4d4d47ea780c7e424bbae2fc874185322dffb12663bd61cd218087927671d0be2ca1d8d92477d80caf5a6ccbb30f43a82e90128c4c1db58c560e33c35896cef13baef38936a3240b5badedba1447d8e97236b011733a9fa0cac2fd38090a752d872e81b722000f2b65d2f6dec92f1d464829285493d9"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "6569ad21c467afeb01af6483fb67ce2b581b7e9b4f0bd4b842ce5ca1540f37db8d62006e273e2a4d6a3f805be3b9696636a9c2f2d4ea7e2842760d8c54150c31fb376a314124c6c69fbe79d921be7a32137ae4ff4f3f3654fc1206b26fa563c55a759aa7e79ae0a5c4a09f671354f255389ca10f20b04ca8cf96941109287a7cca5bfecf245b581e7d916170e2e1628d4856045c88"}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8080}, 0x400c800) r11 = accept4$tipc(r8, &(0x7f0000000fc0), &(0x7f0000001000)=0x10, 0x800) ioctl$SIOCGETNODEID(r11, 0x89e1, &(0x7f0000001040)) (async) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000001480)={{'\x00', 0x2}, {0x2c3}, 0x5, 0x0, 0x0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)="5b36fe01e2c5f5a862923a9a706eae1fb582eb0855a50cb0cae4c69e239239f9d09ea99ef8825ff16106917ac7609aa15ab1759d11f64d7cb37e017802a926f8a405ac0df0bba5f02ad365ae37645302aff95b7ff49632760423a5f92fe3a71d890eb616772ed319b9c96393c5702adc0b7a3fcad70f33f06c0aba3c1e88e55ee96eb6d4443b6e5593eddc8f6590cc597dd1f25ba909c92d4882ce25c7c5c397507616b9f01b032d106bae33611151c460615639bb3b26f5d4f8b5939039409c2434bafdc5dcdc05a95817e048eee8a1b023ca165754a23f9fefefe2085edc734e6077c9ddc9ea311da4fc3b", 0xec, 0x0, &(0x7f0000001200)={0x2, 0x19d, {0x1, 0xc, 0xc4, "476a9b513c896a2fed528364fd31356f5c8f063df3b6bccf5c5383f1420b4d71acf56cfb99cc6dede7872a83f6f79ff422b86619474f6aaf889c5c9c446efe25d720afa55f008c6c6371a629c9bfa0f99ec66689260d207b2fba980f8fa5c5c914bcdbbc5455aececc7d63bd6e804b496653add901d2a578b5310a710a1df836f540c499139a15ac1dfd2ba7d49ffd4f29490052aafdf85fcf494f831cc91aafda9b0bda2dce6c0e9b0997a4473d7c203291fe06db33fbf273898c1f3831f85db09a96df", 0xcc, "777f0226b749ed6670810685640abc8ae502de0d0d049b9bf4581555e4596e671a3bf942d6363ea60cacb4ddd7ccd27ae16d8775efb2012062b4a14f6c9427944f24a606dad95967ca584f3670231ce5df274fb187bab1eadb61ea8c758adf933c2513751fbea7c0d45ddbd7288da83df5934f3cbaf3b140c2cb97a82c23ef210abfa79aa1e65ddc1590e704e56003df927223145e94b60b8b1d738f9c67b9a05a403ac766d56ac5a3c6acd9b2841fe78f493f3b2c8272f16c539e0c605da3e698449c486a0442a8c7972e77"}, 0xb5, "fa192c90747d97cd0185149a611f967c0629ff7062786f47272176279f9540fb0400341b46005d9a544198fc15c9c4740affd9f4225730a9a947e70ed4df6eaf996c2f0a447351935468a53b5816b95477c744222066f26ced0a51c89d50c439ed5b43a9a0890f2fb40f996855bea60415544907344c39860378361ca4bc529aa493428386b8579f3ababd04138b5d65f7159b72b789f124dee5a4d826c7687a3438aa1d6e015ec16fca8aebb43079682d982dd89b"}, 0x25e}) 447.010153ms ago: executing program 4 (id=5016): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000904fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02550400040000001c0012800b0001006970766c616e00000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="605913b1445604d8d77a482e8024f3505b1e5da233872ae70488a56d6d2b1ddc000000000000000000ae0415b9b8260709fa82a835d6a54e7086f6b6b5254957c77d60dcf6c5c33decc70de2c46705d2adc1727a7abf6d89878443e5e367c365a8311ab152b26186e0adfca46e1cee60acaa7e0be66275f3f399a99de73a73ed63a98b8a2b4905da457004d1ab4b251b04685b4c51b11773a4cb960439b269c4a5da35663a56f133ae6dc776b3c3caf57a46d945db"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0xa8, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x34}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0xfffffffffffffe9c, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x40}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r6, &(0x7f0000000240)}, 0x20) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000140)={r2, 0x0, 0x6, 0x7, 0x5, 0xf}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000140)={r10}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000380)={r10, @in6={{0xa, 0x4e22, 0xa, @local, 0x8}}, 0xc3d, 0x7}, &(0x7f0000000440)=0x90) 413.598684ms ago: executing program 3 (id=5017): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000811}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 256.800359ms ago: executing program 4 (id=5018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x15c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4a66}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8000000}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x63fd}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xff46}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8800}, 0x8054) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001801ffffffff0000180000001800000004730000020000000000000c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0xfffd, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffdfffffffffffff, 0x7fffffff, 0x10000}, {0x0, 0x2, 0x40800000000000, 0x800000000000000}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x1, 0x8, 0x49}]}]}, 0xfc}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r10, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0xd, "6f03057a91f875ccf5bd5d"}, {0x0, 0xf, "6253659c41d7cea461f45f9d37"}, {0x0, 0x2}]}]}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5}}) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r11, 0x89e2, &(0x7f0000000000)) 162.692341ms ago: executing program 2 (id=5019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 161.47622ms ago: executing program 3 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0xe6c, 0x3, 0x4, 0x3}) 126.259829ms ago: executing program 0 (id=5021): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet(0x2, 0x1, 0x400) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) getsockopt$sock_int(r3, 0x1, 0x2e, 0x0, &(0x7f0000000500)=0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 88.33029ms ago: executing program 4 (id=5022): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x2000c003) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x36, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRES32], 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) 23.550519ms ago: executing program 2 (id=5023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 3 (id=5024): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40246, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): [T18278] IPv6: NLM_F_CREATE should be set when creating new route [ 416.453249][T18291] bond0: (slave bond_slave_0): Releasing backup interface [ 416.455020][T18299] netlink: 'syz.0.3379': attribute type 2 has an invalid length. [ 416.468616][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3379'. [ 416.496032][T18291] bond0: (slave bond_slave_1): Releasing backup interface [ 416.528615][T18291] team0: Port device team_slave_0 removed [ 416.562187][T18291] team0: Port device team_slave_1 removed [ 416.568702][T18291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.577183][T18291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.587349][T18291] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 416.686783][T18300] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 416.748456][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.760025][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.772756][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 416.989165][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.999801][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.010334][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 417.281022][ T1116] bond0: (slave netdevsim1): Releasing backup interface [ 417.312888][T18337] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3387'. [ 417.324654][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.353217][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.379261][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 417.405429][T18344] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 417.546931][T18344] bond1: entered promiscuous mode [ 417.556085][T18344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.564472][T18161] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.574515][T18161] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.582584][T18161] bridge_slave_0: entered allmulticast mode [ 417.589819][T18161] bridge_slave_0: entered promiscuous mode [ 417.632712][T18161] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.642876][T18161] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.661837][T18161] bridge_slave_1: entered allmulticast mode [ 417.675012][T18161] bridge_slave_1: entered promiscuous mode [ 417.748827][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.760612][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.772697][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 417.898366][T18161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.933309][T18363] SET target dimension over the limit! [ 417.943856][T18161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.033048][T18161] team0: Port device team_slave_0 added [ 418.094381][T18161] team0: Port device team_slave_1 added [ 418.113354][ T5646] Bluetooth: hci2: command tx timeout [ 418.161121][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'. [ 418.187789][T18373] netlink: 'syz.2.3395': attribute type 11 has an invalid length. [ 418.197542][T18375] netlink: 'syz.1.3397': attribute type 15 has an invalid length. [ 418.204260][T18161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.213197][T18161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.239832][T18161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.308575][T18375] netlink: 'syz.1.3397': attribute type 15 has an invalid length. [ 418.309200][T18161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.349290][T18161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.382819][T18161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.439451][T14397] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 418.459118][T14397] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 418.542428][T14397] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 418.576075][T14397] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 418.595764][T18393] __nla_validate_parse: 5 callbacks suppressed [ 418.595781][T18393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3402'. [ 418.757298][T18402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3405'. [ 418.789265][T18161] hsr_slave_0: entered promiscuous mode [ 418.802672][T18161] hsr_slave_1: entered promiscuous mode [ 418.815330][T18161] debugfs: 'hsr0' already exists in 'hsr' [ 418.829861][T18161] Cannot create hsr debugfs directory [ 419.042600][ T1116] dummy0: left allmulticast mode [ 419.066623][ T1116] dummy0: left promiscuous mode [ 419.100811][ T1116] bridge0: port 3(dummy0) entered disabled state [ 419.147093][ T1116] bridge_slave_1: left allmulticast mode [ 419.154758][ T1116] bridge_slave_1: left promiscuous mode [ 419.163148][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.182956][ T1116] bridge_slave_0: left allmulticast mode [ 419.197056][ T1116] bridge_slave_0: left promiscuous mode [ 419.210083][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.262782][ T1116] dvmrp8: left allmulticast mode [ 419.497958][T18443] netlink: 'syz.4.3413': attribute type 3 has an invalid length. [ 419.526671][T18443] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3413'. [ 420.183586][ T5646] Bluetooth: hci2: command tx timeout [ 420.492465][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.504446][ T1116] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 420.516017][ T1116] bond0 (unregistering): (slave team0): Releasing backup interface [ 420.529765][ T1116] bond0 (unregistering): Released all slaves [ 420.540915][ T1116] bond1 (unregistering): Released all slaves [ 420.555430][ T1116] bond2 (unregistering): Released all slaves [ 420.569175][ T1116] bond3 (unregistering): Released all slaves [ 420.589845][ T1116] bond4 (unregistering): Released all slaves [ 420.609104][ T1116] bond5 (unregistering): (slave veth5): Releasing active interface [ 420.621027][ T1116] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 420.635585][ T1116] bond5 (unregistering): Released all slaves [ 420.651471][ T1116] bond6 (unregistering): Released all slaves [ 420.666175][ T1116] bond7 (unregistering): Released all slaves [ 420.680089][ T1116] bond8 (unregistering): Released all slaves [ 420.703472][ T1116] bond9 (unregistering): Released all slaves [ 420.718300][ T1116] bond10 (unregistering): Released all slaves [ 420.734977][ T1116] bond11 (unregistering): Released all slaves [ 420.769423][T18424] team0 (unregistering): Port device team_slave_0 removed [ 420.779726][T18424] team0 (unregistering): Port device team_slave_1 removed [ 420.800186][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 420.825292][T18486] h: entered promiscuous mode [ 420.889366][T18490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3417'. [ 421.005987][ T1116] tipc: Disabling bearer [ 421.026926][ T1116] tipc: Left network mode [ 421.103116][T18499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3419'. [ 421.383031][T18494] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.390763][T18494] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.692391][T18494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.713297][T18494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.908858][ T6037] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 421.942957][ T6037] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.974994][ T6037] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 422.015630][ T6037] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.140157][T18510] xfrm0 speed is unknown, defaulting to 1000 [ 422.147366][ T6037] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 422.174538][ T6037] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.261673][ T5646] Bluetooth: hci2: command tx timeout [ 422.302510][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 422.322361][ T6037] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 422.331997][ T6037] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.718611][T18563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3430'. [ 422.744395][T18563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3430'. [ 422.757248][T18563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3430'. [ 422.918663][T18510] lo speed is unknown, defaulting to 1000 [ 423.398086][T18589] gtp0: entered allmulticast mode [ 423.587017][T18510] lo speed is unknown, defaulting to 1000 [ 423.914884][T18610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.922220][T18610] IPv6: NLM_F_CREATE should be set when creating new route [ 423.958989][ T1116] batman_adv: batadv0: Interface deactivated: wlan0 [ 424.095213][ T1116] batman_adv: batadv0: Removing interface: wlan0 [ 424.674942][T18161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 424.726326][T18649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3446'. [ 424.754868][T18161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.774233][T18161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 424.844421][T18161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.876514][T18161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 424.938219][T18161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.966602][T18161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 425.237279][T18161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.428711][T18679] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3453'. [ 425.454610][T18680] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3453'. [ 425.695539][T18161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.763826][T18161] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.829458][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.836706][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.913545][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.920823][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.399313][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'. [ 426.634165][T18735] netlink: 'syz.0.3466': attribute type 178 has an invalid length. [ 427.456353][ T1116] hsr_slave_0: left promiscuous mode [ 427.474021][ T1116] hsr_slave_1: left promiscuous mode [ 427.499201][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.519071][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.603788][ T1116] veth1_macvtap: left promiscuous mode [ 427.611871][ T1116] veth0_macvtap: left promiscuous mode [ 427.617660][ T1116] veth1_vlan: left promiscuous mode [ 427.624795][ T1116] veth0_vlan: left promiscuous mode [ 427.986165][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 428.019632][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 428.142752][ T3370] smc: removing ib device sz1 [ 428.238261][ T134] smbdirect: ib_dev[sy2] removed [ 428.254940][ T3370] smbdirect: ib_dev[sz1] removed [ 428.296048][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3481'. [ 428.587355][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.595099][T18796] bridge0: port 1(1x9) entered disabled state [ 429.157054][T18796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.957582][T18801] kthread_run failed with err -4 [ 429.977649][ T5832] lo speed is unknown, defaulting to 1000 [ 429.991762][ T5832] infiniband sy2: ib_query_port failed (-19) [ 430.124992][ T6037] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.155822][ T6037] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.177048][T18161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.220109][ T6037] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.252804][T18823] netlink: 'syz.4.3483': attribute type 1 has an invalid length. [ 430.263500][ T6037] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.278856][ T6037] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.307774][ T6037] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.347127][ T6037] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.387827][ T6037] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.392623][T18823] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3483'. [ 430.412783][T18825] netlink: 'syz.4.3483': attribute type 3 has an invalid length. [ 430.586389][T18161] veth0_vlan: entered promiscuous mode [ 430.653931][T18161] veth1_vlan: entered promiscuous mode [ 430.808062][T18844] syzkaller0: entered promiscuous mode [ 430.818468][T18844] syzkaller0: entered allmulticast mode [ 430.825826][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3491'. [ 430.924522][T18161] veth0_macvtap: entered promiscuous mode [ 431.014837][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 431.055165][T18161] veth1_macvtap: entered promiscuous mode [ 431.147899][T18161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.159301][T18857] netlink: 'syz.2.3494': attribute type 1 has an invalid length. [ 431.364128][T18857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.392701][T18161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.483375][ T6040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.514521][ T6040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.558257][ T6040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.573213][ T1116] IPVS: stop unused estimator thread 0... [ 431.590925][ T6040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.713876][T18876] xt_cluster: node mask cannot exceed total number of nodes [ 431.813922][T14636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.832453][T14636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.962798][T14636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.982756][T14636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.189550][T18911] syzkaller0: entered promiscuous mode [ 432.233814][T18911] syzkaller0: entered allmulticast mode [ 432.339371][T18927] Cannot find set identified by id 65534 to match [ 432.445001][T18933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3514'. [ 432.893973][T18942] netlink: 'syz.2.3516': attribute type 1 has an invalid length. [ 432.917884][T18942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.934215][T18942] bond3: (slave geneve2): making interface the new active one [ 432.942840][T18942] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 432.953843][ T3370] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 432.963613][ T3370] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 432.975556][ T3370] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 432.984887][ T3370] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 434.971782][T18895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.178989][T18955] vlan1: entered allmulticast mode [ 435.186949][T18955] veth0_vlan: entered allmulticast mode [ 435.385829][T18967] vlan2: entered promiscuous mode [ 435.403144][T18967] geneve1: entered promiscuous mode [ 435.418844][T18967] vlan2: entered allmulticast mode [ 435.437564][T18967] geneve1: entered allmulticast mode [ 435.648141][T18985] IPv6: NLM_F_CREATE should be specified when creating new route [ 436.318191][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'. [ 436.581217][T19044] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 436.683996][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3550'. [ 436.782678][T19060] netlink: 'syz.1.3551': attribute type 1 has an invalid length. [ 436.927913][T19060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.943012][T19063] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 436.966931][T19068] macvlan2: entered promiscuous mode [ 437.016465][T19074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3555'. [ 437.026698][T19068] macvlan2: entered allmulticast mode [ 437.041706][T19068] bond1: entered promiscuous mode [ 437.047274][T19068] veth0_to_bond: entered promiscuous mode [ 437.054522][T19068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 437.065106][T19068] bond1: left promiscuous mode [ 437.070227][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3555'. [ 437.093430][T19068] veth0_to_bond: left promiscuous mode [ 437.306151][T19084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3557'. [ 437.336586][T19084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3557'. [ 437.550445][T19099] h: entered promiscuous mode [ 437.579798][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 437.678661][T19105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3562'. [ 437.798253][T19112] syzkaller0: entered promiscuous mode [ 437.810288][T19112] syzkaller0: entered allmulticast mode [ 438.005087][T19117] syzkaller0: entered promiscuous mode [ 438.021106][T19117] syzkaller0: entered allmulticast mode [ 438.045784][T19117] tipc: Started in network mode [ 438.055796][T19117] tipc: Node identity , cluster identity 4711 [ 438.074602][T19117] tipc: Failed to obtain node identity [ 438.101854][T19117] tipc: Enabling of bearer rejected, failed to enable media [ 438.375199][T19150] ip6t_srh: unknown srh invflags 4000 [ 438.444073][T19156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3576'. [ 438.654317][T19172] netlink: 'syz.4.3581': attribute type 30 has an invalid length. [ 438.716995][T19172] bond2: option arp_missed_max: invalid value (0) [ 438.724566][T19172] bond2: option arp_missed_max: allowed values 1 - 255 [ 438.737752][T19172] bond2 (unregistering): Released all slaves [ 438.789443][T19184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'. [ 439.412500][T19218] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 440.203585][T19266] netlink: 'syz.1.3606': attribute type 1 has an invalid length. [ 441.114185][ T5635] IPVS: starting estimator thread 0... [ 441.120591][T19310] IPVS: sh: FWM 3 0x00000003 - no destination available [ 441.225935][T19311] IPVS: using max 29 ests per chain, 69600 per kthread [ 441.331474][T19323] netlink: 'syz.3.3622': attribute type 1 has an invalid length. [ 441.475457][T19313] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.483256][T19313] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.789246][T19313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.827280][T19313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.317100][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.356598][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.390458][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.433400][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.586996][T19360] __nla_validate_parse: 8 callbacks suppressed [ 442.587016][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3629'. [ 442.814372][T19374] xfrm1: entered allmulticast mode [ 442.926506][T19389] syzkaller0: entered promiscuous mode [ 442.937725][T19389] syzkaller0: entered allmulticast mode [ 442.942218][T19391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3639'. [ 442.962726][T19379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3636'. [ 442.981470][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3634'. [ 442.995012][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3634'. [ 443.073031][T19397] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3640'. [ 443.161895][T19402] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3641'. [ 443.383245][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 443.404521][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 443.501590][T19425] netlink: 'syz.1.3649': attribute type 10 has an invalid length. [ 443.532693][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.547830][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.575322][T19423] IPVS: set_ctl: invalid protocol: 2 172.30.0.2:20003 [ 443.582412][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.635918][T19425] bond1: (slave veth0_to_bond): Releasing backup interface [ 443.668207][T19425] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 443.688772][T19427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.714029][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.953797][T19445] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3656'. [ 444.217789][T19456] xt_socket: unknown flags 0x8 [ 444.449229][T19470] netlink: 'syz.2.3665': attribute type 1 has an invalid length. [ 444.488300][T19470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.629924][T19487] macvlan0: entered promiscuous mode [ 444.761492][T19491] xfrm0 speed is unknown, defaulting to 1000 [ 445.215368][T19515] openvswitch: netlink: Message has 4 unknown bytes. [ 445.325383][T19522] bond1: option xmit_hash_policy: invalid value (64) [ 445.337924][T19522] bond1 (unregistering): Released all slaves [ 448.192461][T19515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.377483][T19545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.391414][T19546] netlink: 'syz.3.3688': attribute type 2 has an invalid length. [ 448.450658][T19548] netlink: 'syz.0.3690': attribute type 64 has an invalid length. [ 448.690000][T19572] __nla_validate_parse: 7 callbacks suppressed [ 448.690019][T19572] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3695'. [ 448.747881][T19574] netlink: 'syz.0.3697': attribute type 1 has an invalid length. [ 448.781274][T19579] netlink: 'syz.3.3698': attribute type 21 has an invalid length. [ 448.796471][T19579] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3698'. [ 448.807741][T19579] netlink: 'syz.3.3698': attribute type 4 has an invalid length. [ 448.826356][T19579] netlink: 'syz.3.3698': attribute type 5 has an invalid length. [ 448.846675][T19583] netlink: 'syz.3.3698': attribute type 21 has an invalid length. [ 448.863268][T19579] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3698'. [ 448.872120][T19585] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3700'. [ 448.874770][T19583] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3698'. [ 448.893001][T19583] netlink: 'syz.3.3698': attribute type 4 has an invalid length. [ 448.902982][T19583] netlink: 'syz.3.3698': attribute type 5 has an invalid length. [ 448.924300][T19583] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3698'. [ 448.979134][T19591] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3702'. [ 449.034923][T19596] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 449.056774][T19596] batman_adv: batadv0: Adding interface: gretap1 [ 449.064038][T19596] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.091904][T19596] batman_adv: batadv0: Interface activated: gretap1 [ 449.147299][T19597] xfrm0 speed is unknown, defaulting to 1000 [ 449.253859][T19605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3706'. [ 449.466962][T19614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3709'. [ 449.552053][T19618] Cannot find del_set index 0 as target [ 449.767128][ T3370] nci: nci_rx_work: unknown MT 0x7 [ 449.958370][T19631] syzkaller0: entered promiscuous mode [ 449.964355][T19631] syzkaller0: entered allmulticast mode [ 449.976286][T19634] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 450.213141][T19646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3718'. [ 452.662756][T19623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.837032][T19670] validate_nla: 1 callbacks suppressed [ 452.837086][T19670] netlink: 'syz.4.3722': attribute type 1 has an invalid length. [ 452.865753][T19673] xt_hashlimit: invalid rate [ 452.936694][T19670] bond2: entered promiscuous mode [ 452.949860][T19670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.053378][T19678] bond2: (slave bridge3): making interface the new active one [ 453.098493][T19678] bridge3: entered promiscuous mode [ 453.115879][T19678] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 453.426157][T19724] xt_socket: unknown flags 0xe4 [ 453.442939][ T30] audit: type=1800 audit(1782946434.129:8): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3737" name="memory.events" dev="tmpfs" ino=992 res=0 errno=0 [ 453.466342][ T30] audit: type=1804 audit(1782946434.129:9): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3737" name="/newroot/192/memory.events" dev="tmpfs" ino=992 res=1 errno=0 [ 453.489313][ T1116] nci: nci_rx_work: unknown MT 0x7 [ 453.964246][T19752] __nla_validate_parse: 1 callbacks suppressed [ 453.964274][T19752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3745'. [ 453.993328][ T3370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.012505][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.022953][ T3370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.098077][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 454.165399][T19757] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3747'. [ 454.392112][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.645695][T19772] vlan2: entered allmulticast mode [ 454.742229][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.395284][T19717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.804654][T19801] netlink: 'syz.1.3761': attribute type 3 has an invalid length. [ 456.889247][T19807] netlink: 'syz.4.3763': attribute type 3 has an invalid length. [ 456.975670][T14636] nci: nci_rx_work: unknown MT 0x7 [ 457.158925][T19829] netlink: 'syz.1.3768': attribute type 39 has an invalid length. [ 457.162374][T19825] bond3: option miimon: invalid value (18446744073709486085) [ 457.175287][T19825] bond3: option miimon: allowed values 0 - 2147483647 [ 457.185111][T19831] netlink: 'syz.4.3767': attribute type 11 has an invalid length. [ 457.185398][T19825] bond3 (unregistering): Released all slaves [ 457.240362][T19831] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3767'. [ 457.700988][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.857525][T19808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.174900][T19872] bond1: option resend_igmp: invalid value (32767) [ 460.218719][T19872] bond1: option resend_igmp: allowed values 0 - 255 [ 460.244161][T19872] bond1 (unregistering): Released all slaves [ 460.272156][T19876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3779'. [ 460.299021][T19876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3779'. [ 460.326808][T19888] netlink: 'syz.2.3784': attribute type 12 has an invalid length. [ 461.273152][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 461.339944][T19950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3800'. [ 461.384534][ T58] nci: nci_rx_work: unknown MT 0x7 [ 461.411742][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3804'. [ 461.446106][T19960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3804'. [ 461.512291][T19973] netlink: 'syz.1.3804': attribute type 1 has an invalid length. [ 461.574068][T19975] netlink: 'syz.2.3807': attribute type 10 has an invalid length. [ 461.583373][T19975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3807'. [ 461.599001][T19975] team0: Port device geneve1 added [ 461.604614][ T3370] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.613601][ T3370] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.622632][T19975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3807'. [ 461.632438][ T3370] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.641501][ T3370] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.679726][T19979] netlink: 'syz.4.3809': attribute type 1 has an invalid length. [ 461.703005][T19979] bond3: entered promiscuous mode [ 461.709598][T19979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.730917][T19979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.738223][T19979] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 461.749145][T19979] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 461.761606][T19979] bond3: (slave ip6gre1): making interface the new active one [ 461.769110][T19979] ip6gre1: entered promiscuous mode [ 461.778132][T19979] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 461.788739][T19981] netlink: 'syz.4.3809': attribute type 5 has an invalid length. [ 462.443824][T19989] pim6reg527: entered allmulticast mode [ 464.279811][T19955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.454050][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'. [ 464.463181][T19994] netlink: 'syz.4.3814': attribute type 18 has an invalid length. [ 464.472453][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3814'. [ 464.476347][T19991] openvswitch: netlink: Actions may not be safe on all matching packets [ 464.528465][T19991] netlink: 'syz.1.3815': attribute type 1 has an invalid length. [ 464.542323][T20001] netlink: 'syz.0.3817': attribute type 1 has an invalid length. [ 464.556211][T19994] netlink: 'syz.4.3814': attribute type 18 has an invalid length. [ 464.624534][T20001] Cannot find del_set index 3 as target [ 464.843423][T20018] openvswitch: netlink: IP tunnel dst address not specified [ 465.148509][ T6037] nci: nci_rx_work: unknown MT 0x7 [ 465.169029][T20044] ipt_REJECT: ECHOREPLY no longer supported. [ 465.367270][T20041] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 465.627202][T20067] syzkaller0: entered promiscuous mode [ 465.632891][T20067] syzkaller0: entered allmulticast mode [ 465.644868][T20067] __nla_validate_parse: 5 callbacks suppressed [ 465.644882][T20067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'. [ 465.701563][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.920267][T20075] netlink: 'syz.0.3837': attribute type 9 has an invalid length. [ 465.988236][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'. [ 466.005428][T20079] vlan3: entered allmulticast mode [ 466.148863][T20082] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 466.157678][T20082] syzkaller0: entered promiscuous mode [ 466.164077][T20082] syzkaller0: entered allmulticast mode [ 466.265298][T20083] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 468.015759][T20033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.169965][T20085] netlink: 'syz.4.3840': attribute type 21 has an invalid length. [ 468.194473][T20085] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3840'. [ 468.211503][T20085] netlink: 'syz.4.3840': attribute type 5 has an invalid length. [ 468.232490][T20085] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3840'. [ 468.248538][T20088] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 468.417936][T20101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.444790][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 468.465921][T20097] bond4: option resend_igmp: invalid value (32767) [ 468.472912][T20106] netlink: 'syz.3.3848': attribute type 24 has an invalid length. [ 468.490145][T20106] Cannot find del_set index 0 as target [ 468.496851][T20097] bond4: option resend_igmp: allowed values 0 - 255 [ 468.516796][T20097] bond4 (unregistering): Released all slaves [ 468.622624][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 468.644369][T20110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3847'. [ 468.695180][ T6037] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.722803][ T6037] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.733653][ T6037] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.743457][ T6037] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.012080][T14636] nci: nci_rx_work: unknown MT 0x7 [ 469.138625][T20124] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.146311][T20124] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.420085][T20124] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 471.892665][T20129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.083335][T20170] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3866'. [ 472.283726][T20192] bridge_slave_0: left promiscuous mode [ 472.292567][T20192] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.312653][T20192] bridge_slave_1: left allmulticast mode [ 472.326134][T20192] bridge_slave_1: left promiscuous mode [ 472.332918][T20192] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.350557][T20192] bond0: (slave bond_slave_0): Releasing backup interface [ 472.381328][T20192] bond0: (slave bond_slave_1): Releasing backup interface [ 472.416633][T20192] team0: Port device team_slave_0 removed [ 472.425716][T20204] IPv6: Can't replace route, no match found [ 472.444295][T20204] IPv6: Can't replace route, no match found [ 472.448918][T20192] team0: Port device team_slave_1 removed [ 472.483079][T20192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.496813][T20192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.507874][T20192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.518628][T20208] netlink: 'syz.2.3873': attribute type 13 has an invalid length. [ 472.531676][T20192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.547168][T20192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.593938][T20209] veth0: entered promiscuous mode [ 472.656457][T20197] xt_TPROXY: Can be used only with -p tcp or -p udp [ 472.683063][T20201] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.694447][T20198] veth0: left promiscuous mode [ 472.701327][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.948922][ T3370] nci: nci_rx_work: unknown MT 0x7 [ 473.250189][T20246] batadv_slave_0: Caught tx_queue_len zero misconfig [ 473.384142][T19342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.864330][T20220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.055354][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 476.104281][T20270] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3894'. [ 476.204401][T20275] netlink: 'syz.3.3896': attribute type 11 has an invalid length. [ 476.228360][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 476.282645][ T3370] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.291897][T20275] netlink: 'syz.3.3896': attribute type 11 has an invalid length. [ 476.309988][ T3370] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.321978][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 476.343253][T20282] netlink: 'syz.1.3898': attribute type 1 has an invalid length. [ 476.369104][ T3370] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.379656][ T3370] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.413369][T20287] Bluetooth: MGMT ver 1.23 [ 476.461559][ T3370] nci: nci_rx_work: unknown MT 0x7 [ 476.525645][T20295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3903'. [ 476.549149][ T3370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.557418][ T3370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.580230][T19342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.691617][T19342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.702430][T20305] openvswitch: netlink: Missing valid actions attribute. [ 476.709615][T20305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.755066][T20308] C: renamed from lo (while UP) [ 476.761965][T20308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 476.882242][T20314] netlink: 'syz.4.3909': attribute type 1 has an invalid length. [ 476.904758][T20314] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.006223][T20317] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3910'. [ 477.551323][T19342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.394021][T20288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.403606][T20304] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3905'. [ 479.596663][T20333] netlink: 'syz.1.3914': attribute type 1 has an invalid length. [ 479.649988][T20341] Bluetooth: MGMT ver 1.23 [ 479.683769][T20341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3916'. [ 479.763844][T20347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3917'. [ 479.950457][T20360] xt_TCPMSS: Only works on TCP SYN packets [ 480.057367][T20367] IPVS: set_ctl: invalid protocol: 98 100.1.1.0:20000 [ 480.126023][ T3370] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.149223][ T3370] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.167553][T20380] openvswitch: netlink: Actions may not be safe on all matching packets [ 480.176268][ T3370] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.208133][ T3370] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.280013][T20376] gre1: entered promiscuous mode [ 480.302756][T20390] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3928'. [ 480.328386][T20382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 480.349025][T20382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 480.420853][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.485629][T20395] syzkaller0: entered promiscuous mode [ 480.519682][T20395] syzkaller0: entered allmulticast mode [ 480.531469][T20397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3931'. [ 480.715139][T20395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3930'. [ 480.727486][T20395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3930'. [ 480.737262][T20395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3930'. [ 480.747364][T20395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3930'. [ 480.757459][T20395] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3930'. [ 480.767255][T20417] syz_tun: entered allmulticast mode [ 480.896802][T20411] xfrm0 speed is unknown, defaulting to 1000 [ 481.066471][T20415] syz_tun: left allmulticast mode [ 481.656138][T20469] netlink: 'syz.1.3952': attribute type 1 has an invalid length. [ 481.684721][T20471] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 481.701255][ T5646] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 481.711113][ T5646] Bluetooth: hci2: command 0x0401 tx timeout [ 481.725999][T20471] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 481.761332][T20471] gretap1: entered promiscuous mode [ 481.767752][T20471] gretap1: entered allmulticast mode [ 481.831881][T20469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.845285][T20472] bond0: (slave veth0_to_bond): Releasing backup interface [ 481.864344][T20472] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 481.881622][T20475] macvlan2: entered promiscuous mode [ 481.887459][T20475] macvlan2: entered allmulticast mode [ 482.044801][T20485] netlink: 'syz.1.3957': attribute type 10 has an invalid length. [ 482.060337][T20485] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 482.236508][ T6037] bond0: (slave bond_slave_0): interface is now down [ 482.256785][T20498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.274026][ T6037] bond0: (slave bond_slave_1): interface is now down [ 482.287912][T20498] block nbd4: Unsupported socket: should be TCP or UNIX. [ 482.369118][ T6037] bond0: now running without any active interface! [ 482.681270][T20520] netlink: 'syz.2.3969': attribute type 4 has an invalid length. [ 482.830252][T20528] ip6tnl0: Caught tx_queue_len zero misconfig [ 483.202241][T20557] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 483.353796][T20568] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 483.362419][T20568] netlink: zone id is out of range [ 483.367683][T20568] netlink: zone id is out of range [ 483.375123][T20568] netlink: zone id is out of range [ 483.381306][T20568] netlink: zone id is out of range [ 483.386671][T20568] netlink: zone id is out of range [ 483.392052][T20568] netlink: zone id is out of range [ 483.397395][T20568] netlink: get zone limit has 4 unknown bytes [ 483.620483][T20584] xt_hashlimit: overflow, try lower: 3/0 [ 483.867168][T20598] x_tables: duplicate underflow at hook 3 [ 485.938248][T20535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.136994][T20603] __nla_validate_parse: 15 callbacks suppressed [ 486.137014][T20603] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3991'. [ 486.190548][T20607] syzkaller0: entered promiscuous mode [ 486.207932][T20607] syzkaller0: entered allmulticast mode [ 486.311320][T20603] netlink: 'syz.4.3991': attribute type 1 has an invalid length. [ 486.319278][T20603] netlink: 756 bytes leftover after parsing attributes in process `syz.4.3991'. [ 486.332678][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3991'. [ 486.521309][T20627] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4000'. [ 486.567666][T20629] macsec1: entered allmulticast mode [ 486.578263][T20629] bond0: entered allmulticast mode [ 486.587118][T20629] bond_slave_0: entered allmulticast mode [ 486.593607][T20629] bond_slave_1: entered allmulticast mode [ 486.600044][T20629] dummy0: entered allmulticast mode [ 486.604433][T20627] netlink: 'syz.3.4000': attribute type 1 has an invalid length. [ 486.614321][T20629] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 486.622014][T20629] bond0: left allmulticast mode [ 486.623728][T20627] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4000'. [ 486.627186][T20629] bond_slave_0: left allmulticast mode [ 486.641237][T20627] netlink: 'syz.3.4000': attribute type 23 has an invalid length. [ 486.644553][T20629] bond_slave_1: left allmulticast mode [ 486.659707][T20629] dummy0: left allmulticast mode [ 486.727604][T20634] 8021q: VLANs not supported on syzkaller0 [ 486.934491][T20645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4005'. [ 486.950811][T20634] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4002'. [ 487.044606][T20634] bond7 (unregistering): Released all slaves [ 487.059466][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'. [ 487.118540][T20664] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4009'. [ 487.145689][T20659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4008'. [ 488.267969][ T5646] Bluetooth: hci5: command 0x0406 tx timeout [ 490.065801][T20677] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 490.071718][T20678] syzkaller0: entered promiscuous mode [ 490.086277][T20678] syzkaller0: entered allmulticast mode [ 490.355477][T20701] netlink: 'syz.0.4018': attribute type 83 has an invalid length. [ 490.516636][ T134] nci: nci_rx_work: unknown MT 0x7 [ 490.607497][T20721] netlink: 'syz.2.4022': attribute type 39 has an invalid length. [ 490.819052][T20732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.830458][T20732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.840583][T20732] bond0 (unregistering): Released all slaves [ 493.403396][T20704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.413407][T20719] netlink: 'syz.3.4023': attribute type 2 has an invalid length. [ 493.429277][T20719] netlink: 'syz.3.4023': attribute type 2 has an invalid length. [ 493.660396][T20747] __nla_validate_parse: 3 callbacks suppressed [ 493.660415][T20747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4028'. [ 493.699301][T20752] netlink: 'syz.1.4032': attribute type 1 has an invalid length. [ 494.267456][ T58] nci: nci_rx_work: unknown MT 0x7 [ 494.297925][T20796] bridge2: entered promiscuous mode [ 494.329147][T20796] bridge2: entered allmulticast mode [ 494.359592][T19335] IPVS: starting estimator thread 0... [ 494.370370][T20801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4045'. [ 494.453890][T20804] IPVS: using max 34 ests per chain, 81600 per kthread [ 497.104125][T20782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.369324][T20838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.383219][T20841] netlink: 'syz.4.4054': attribute type 1 has an invalid length. [ 497.398936][T20835] bridge6: entered promiscuous mode [ 497.422524][T20835] bridge6: entered allmulticast mode [ 497.431680][T20835] team0: Port device bridge6 added [ 497.443084][T20844] bridge0: port 3(team0) entered blocking state [ 497.462314][T20839] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4053'. [ 497.466137][T20844] bridge0: port 3(team0) entered disabled state [ 497.485269][T20844] team0: entered allmulticast mode [ 497.511941][T20844] team_slave_0: entered allmulticast mode [ 497.528187][T20844] team_slave_1: entered allmulticast mode [ 497.552209][T20844] geneve1: entered allmulticast mode [ 497.565341][T20844] team0: entered promiscuous mode [ 497.570579][T20844] team_slave_0: entered promiscuous mode [ 497.582539][T20844] team_slave_1: entered promiscuous mode [ 497.600199][T20844] geneve1: entered promiscuous mode [ 497.623135][T20860] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4056'. [ 497.823745][T20863] netlink: 'syz.4.4059': attribute type 21 has an invalid length. [ 497.840521][T20863] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.857186][T20863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.864516][T20863] IPv6: NLM_F_CREATE should be set when creating new route [ 497.872016][T20863] IPv6: NLM_F_CREATE should be set when creating new route [ 497.879282][T20863] IPv6: NLM_F_CREATE should be set when creating new route [ 497.901572][T20878] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4062'. [ 497.947966][T20850] syz.1.4055 (20850) used greatest stack depth: 16736 bytes left [ 497.962357][ T1172] nci: nci_rx_work: unknown MT 0x7 [ 498.196186][T20897] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 498.284773][T20904] netlink: 'syz.4.4068': attribute type 1 has an invalid length. [ 498.291476][T20906] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4069'. [ 498.367301][T20904] bond5: (slave geneve2): making interface the new active one [ 498.389442][T20904] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 498.401410][T14636] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 498.410411][T14636] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 498.421534][T14636] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 498.430379][T14636] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 498.500897][ T4945] Bluetooth: hci1: command 0x0406 tx timeout [ 498.657371][T20924] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 498.699782][T20924] syzkaller0: entered promiscuous mode [ 498.721596][T20924] syzkaller0: entered allmulticast mode [ 498.784372][T20927] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 499.124748][T20943] xt_l2tp: v2 doesn't support IP mode [ 499.152113][T20943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.345146][T20948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4076'. [ 500.789146][T20871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.956011][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4078'. [ 501.001093][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4078'. [ 501.220851][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'. [ 501.309141][T20979] lo: entered promiscuous mode [ 501.315805][T20979] tunl0: entered promiscuous mode [ 501.322564][T20979] gre0: entered promiscuous mode [ 501.327809][T20979] gretap0: entered promiscuous mode [ 501.339586][T20979] erspan0: entered promiscuous mode [ 501.345875][T20979] ip_vti0: entered promiscuous mode [ 501.364353][T20979] ip6_vti0: entered promiscuous mode [ 501.379985][T20979] sit0: entered promiscuous mode [ 501.387637][T20979] ip6tnl0: entered promiscuous mode [ 501.396965][T20979] ip6gre0: entered promiscuous mode [ 501.406375][T20979] syz_tun: entered promiscuous mode [ 501.414822][T20979] ip6gretap0: entered promiscuous mode [ 501.421308][T20979] bridge0: entered promiscuous mode [ 501.427113][T20979] vcan0: entered promiscuous mode [ 501.434945][T20979] team0: entered promiscuous mode [ 501.440117][T20979] team_slave_0: entered promiscuous mode [ 501.446767][T20979] team_slave_1: entered promiscuous mode [ 501.453198][T20979] dummy0: entered promiscuous mode [ 501.461792][T20979] nlmon0: entered promiscuous mode [ 501.467194][T20979] batadv0: entered promiscuous mode [ 501.474350][T20979] vxcan0: entered promiscuous mode [ 501.480114][T20979] vxcan1: entered promiscuous mode [ 501.495581][T20994] netlink: 5061 bytes leftover after parsing attributes in process `syz.0.4085'. [ 501.500325][T20997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4090'. [ 501.505339][T20979] veth0: entered promiscuous mode [ 501.505527][T20979] veth1: entered promiscuous mode [ 501.526123][T20979] wg0: entered promiscuous mode [ 501.531237][T20979] wg1: entered promiscuous mode [ 501.536836][T20979] wg2: entered promiscuous mode [ 501.544918][T20979] veth0_to_bridge: entered promiscuous mode [ 501.551659][T20979] veth1_to_bridge: entered promiscuous mode [ 501.557892][T20979] veth0_to_bond: entered promiscuous mode [ 501.563932][T20979] bond_slave_0: entered promiscuous mode [ 501.569729][T20979] veth1_to_bond: entered promiscuous mode [ 501.575730][T20979] bond_slave_1: entered promiscuous mode [ 501.582569][T20979] veth0_to_team: entered promiscuous mode [ 501.588509][T20979] veth1_to_team: entered promiscuous mode [ 501.594633][T20979] veth0_to_batadv: entered promiscuous mode [ 501.601194][T20979] batadv_slave_0: entered promiscuous mode [ 501.607561][T20979] veth1_to_batadv: entered promiscuous mode [ 501.609869][T21001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.614047][T20979] batadv_slave_1: entered promiscuous mode [ 501.628540][T20979] xfrm0: entered promiscuous mode [ 501.634266][T21002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4090'. [ 501.644779][T20979] veth0_to_hsr: entered promiscuous mode [ 501.650627][T20979] veth1_to_hsr: entered promiscuous mode [ 501.656615][T20979] hsr0: entered promiscuous mode [ 501.661801][T20979] veth1_virt_wifi: entered promiscuous mode [ 501.667813][T20979] veth0_virt_wifi: entered promiscuous mode [ 501.674220][T20979] virt_wifi0: entered promiscuous mode [ 501.679969][T20979] vlan0: entered promiscuous mode [ 501.685411][T20979] vlan1: entered promiscuous mode [ 501.690821][T20979] macvlan0: entered promiscuous mode [ 501.696305][T20979] macvlan1: entered promiscuous mode [ 501.702108][T20979] ipvlan0: entered promiscuous mode [ 501.708142][T20979] ipvlan1: entered promiscuous mode [ 501.714137][T20979] macvtap0: entered promiscuous mode [ 501.719567][T20979] macsec0: entered promiscuous mode [ 501.725051][T20979] geneve0: entered promiscuous mode [ 501.730518][T20979] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 501.738320][T20979] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 501.745881][T20979] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 501.753332][T20979] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 501.761130][T20979] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 501.768353][T20979] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 501.775598][T20979] veth2: entered promiscuous mode [ 501.781062][T20979] veth3: entered promiscuous mode [ 501.786294][T20979] bridge1: entered promiscuous mode [ 501.792070][T20979] veth4: entered promiscuous mode [ 501.797216][T20979] veth5: entered promiscuous mode [ 501.802603][T20979] gre1: entered promiscuous mode [ 501.807674][T20979] vxlan0: entered promiscuous mode [ 501.813901][T20979] mac80211_hwsim hwsim40 wlan2: entered promiscuous mode [ 501.821492][T20979] ip6gre1: entered promiscuous mode [ 501.826832][T20979] gre2: entered promiscuous mode [ 501.831954][T20979] ip6_vti1: entered promiscuous mode [ 501.851863][T20994] 0XD: renamed from gretap0 [ 501.859323][T20994] 0XD: left promiscuous mode [ 501.865742][T20994] 0XD: entered allmulticast mode [ 502.069772][T21012] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4093'. [ 502.082974][T21018] netlink: 'syz.0.4095': attribute type 2 has an invalid length. [ 502.092034][T21018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.551929][T21039] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4101'. [ 502.782367][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 503.081421][T21060] netlink: 'syz.0.4107': attribute type 1 has an invalid length. [ 503.090009][T21060] netlink: 'syz.0.4107': attribute type 1 has an invalid length. [ 503.099696][T21060] netlink: 'syz.0.4107': attribute type 2 has an invalid length. [ 503.109412][T21062] netlink: 'syz.1.4108': attribute type 2 has an invalid length. [ 503.138579][T21067] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 503.336239][T21079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.445153][T21087] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 503.778718][T21098] lo: Caught tx_queue_len zero misconfig [ 503.796187][T21098] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 503.967949][T21112] xt_hashlimit: size too large, truncated to 1048576 [ 504.463492][T21136] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 504.715832][T21150] lo speed is unknown, defaulting to 1000 [ 504.731905][T21150] lo speed is unknown, defaulting to 1000 [ 504.745198][T21150] lo speed is unknown, defaulting to 1000 [ 504.751787][T21155] __nla_validate_parse: 13 callbacks suppressed [ 504.751804][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 504.754199][T21150] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 504.786168][T21150] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 504.813830][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 504.828353][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 504.833118][T21150] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 504.852753][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 504.876460][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 504.906878][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 504.917832][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4136'. [ 504.930201][T21150] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 504.937813][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 504.939303][T21158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4136'. [ 504.962885][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 504.994113][T21150] lo speed is unknown, defaulting to 1000 [ 505.006202][T21150] lo speed is unknown, defaulting to 1000 [ 505.018473][T21150] lo speed is unknown, defaulting to 1000 [ 505.045992][T21150] lo speed is unknown, defaulting to 1000 [ 505.059706][T21150] lo speed is unknown, defaulting to 1000 [ 505.077600][T21150] lo speed is unknown, defaulting to 1000 [ 505.094927][T21150] lo speed is unknown, defaulting to 1000 [ 505.105476][T21150] lo speed is unknown, defaulting to 1000 [ 505.114238][T21150] lo speed is unknown, defaulting to 1000 [ 505.121544][T21156] smc: removing ib device syz1 [ 505.446518][T21175] C: renamed from lo [ 505.458408][T21156] smbdirect: ib_dev[syz1] removed [ 505.487715][T21175] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 505.568717][T21178] netlink: 'syz.4.4143': attribute type 10 has an invalid length. [ 505.816335][T21178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.843211][T21178] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 505.855110][T21193] macvtap0: entered allmulticast mode [ 505.872188][T21193] veth0_macvtap: entered allmulticast mode [ 505.896314][T21180] tipc: Enabling of bearer rejected, failed to enable media [ 506.549824][T21220] xt_hashlimit: size too large, truncated to 1048576 [ 506.716890][T21231] xt_CONNSECMARK: invalid mode: 0 [ 506.882765][T21236] xt_TPROXY: Can be used only with -p tcp or -p udp [ 507.299063][T21249] IPVS: sh: FWM 3 0x00000003 - no destination available [ 507.794595][T21271] netlink: 'syz.4.4167': attribute type 29 has an invalid length. [ 507.804617][T21271] netlink: 'syz.4.4167': attribute type 12 has an invalid length. [ 508.724095][T21314] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 508.793161][T21297] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 508.840476][T21297] bond5 (unregistering): Released all slaves [ 509.446497][T21331] can: request_module (can-proto-0) failed. [ 510.054519][T21351] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 510.102652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.113957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.160350][T21363] netlink: 'syz.0.4194': attribute type 1 has an invalid length. [ 510.192706][T21363] __nla_validate_parse: 41 callbacks suppressed [ 510.192732][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4194'. [ 510.203436][T21365] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4195'. [ 510.377586][T21373] openvswitch: netlink: Missing key (keys=40, expected=100) [ 510.393680][T21379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4199'. [ 510.441659][T21373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4198'. [ 510.500832][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 510.688796][T21396] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 510.725779][T21396] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 510.745508][T21396] gretap2: entered promiscuous mode [ 510.752018][T21396] gretap2: entered allmulticast mode [ 510.930350][T19330] lo speed is unknown, defaulting to 1000 [ 510.939426][T21408] syzkaller0: entered promiscuous mode [ 510.947509][T21408] syzkaller0: entered allmulticast mode [ 510.951327][T19330] syz2: Port: 1 Link ACTIVE [ 511.222217][T21424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4216'. [ 511.241736][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4216'. [ 511.251163][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4216'. [ 511.274052][T21424] nbd: socks must be embedded in a SOCK_ITEM attr [ 511.342958][T21425] xt_nat: multiple ranges no longer supported [ 511.417958][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4221'. [ 511.451624][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4220'. [ 511.474088][T21439] netlink: 'syz.3.4220': attribute type 30 has an invalid length. [ 511.513638][T21439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4220'. [ 511.527792][T21437] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 511.535753][T21437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.639576][T21448] netlink: 'syz.2.4223': attribute type 1 has an invalid length. [ 511.707931][T21448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.776832][T21448] bond0: (slave geneve4): making interface the new active one [ 511.787486][T21448] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 511.999497][T21474] Unsupported ieee802154 address type: 0 [ 512.537160][T21507] syzkaller0: entered promiscuous mode [ 512.551372][T21507] syzkaller0: entered allmulticast mode [ 512.937678][T21539] netlink: 'syz.4.4255': attribute type 3 has an invalid length. [ 513.017793][T21547] macsec1: entered promiscuous mode [ 513.023493][T21547] bridge0: entered promiscuous mode [ 513.029104][T21547] macsec1: entered allmulticast mode [ 513.039085][T21547] bridge0: entered allmulticast mode [ 513.049607][T21547] bridge0: port 3(macsec1) entered blocking state [ 513.056643][T21547] bridge0: port 3(macsec1) entered disabled state [ 513.075521][T21547] bridge0: left allmulticast mode [ 513.120162][T19338] bridge0: left promiscuous mode [ 513.157418][T21558] netlink: 'syz.4.4259': attribute type 10 has an invalid length. [ 513.241790][T21549] syzkaller0: entered promiscuous mode [ 513.256273][T21549] syzkaller0: entered allmulticast mode [ 513.321189][T21557] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 513.444322][T21575] xt_socket: unknown flags 0x50 [ 513.877712][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 516.206350][T21585] __nla_validate_parse: 16 callbacks suppressed [ 516.206370][T21585] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4267'. [ 516.289445][T21593] openvswitch: netlink: Missing key (keys=40, expected=100) [ 516.300454][T21589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4268'. [ 516.436369][T21589] veth5: entered allmulticast mode [ 516.440142][T21605] xt_hashlimit: size too large, truncated to 1048576 [ 516.479663][T21609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4273'. [ 516.553543][T21613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4275'. [ 516.662926][T21617] netlink: zone id is out of range [ 516.686634][T21617] netlink: zone id is out of range [ 516.730195][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4277'. [ 516.997891][ T3370] bridge_slave_1: left promiscuous mode [ 517.009414][T21630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4279'. [ 517.022987][ T3370] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.045159][ T3370] bridge_slave_0: left allmulticast mode [ 517.062354][ T3370] bridge_slave_0: left promiscuous mode [ 517.063989][T21636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4282'. [ 517.078251][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.190018][ T3370] pim6reg: left allmulticast mode [ 517.203651][ T3370] lo: left allmulticast mode [ 517.211261][ T3370] pimreg3: left allmulticast mode [ 517.225101][T21646] x_tables: duplicate underflow at hook 1 [ 517.236564][T21647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4282'. [ 517.445277][ T3370] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 517.472320][ T3370] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 517.481180][ T3370] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 42:38:a7:e0:d3:db - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 517.604708][ T3370] bond8 (unregistering): (slave ip6gre3): Releasing backup interface [ 517.648571][ T3370] bond23 (unregistering): (slave ip6gretap3): Releasing active interface [ 517.754969][ T3370] bond12 (unregistering): (slave gretap1): Releasing active interface [ 517.797986][ T3370] bond26 (unregistering): (slave geneve4): Releasing active interface [ 517.870538][ T3370] bond11 (unregistering): (slave bridge4): Releasing active interface [ 517.914048][ T3370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.927177][ T3370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.937301][ T3370] bond0 (unregistering): (slave bond22): Releasing backup interface [ 517.946547][ T3370] bond0 (unregistering): Released all slaves [ 517.957318][ T3370] bond1 (unregistering): Released all slaves [ 517.975639][ T3370] bond2 (unregistering): Released all slaves [ 517.990316][ T3370] bond3 (unregistering): (slave veth5): Releasing backup interface [ 518.000382][ T3370] bond3 (unregistering): Released all slaves [ 518.022723][ T3370] bond4 (unregistering): Released all slaves [ 518.043054][ T3370] bond5 (unregistering): Released all slaves [ 518.059831][ T3370] bond6 (unregistering): Released all slaves [ 518.074970][ T3370] bond7 (unregistering): Released all slaves [ 518.088810][ T3370] bond8 (unregistering): Released all slaves [ 518.113118][ T3370] bond9 (unregistering): Released all slaves [ 518.127400][ T3370] bond10 (unregistering): Released all slaves [ 518.163487][ T3370] bond11 (unregistering): Released all slaves [ 518.177428][ T3370] bond12 (unregistering): Released all slaves [ 518.194362][ T3370] bond13 (unregistering): Released all slaves [ 518.208583][ T3370] bond14 (unregistering): Released all slaves [ 518.229804][ T3370] bond15 (unregistering): Released all slaves [ 518.243803][ T3370] bond16 (unregistering): Released all slaves [ 518.258175][ T3370] bond17 (unregistering): Released all slaves [ 518.277765][ T3370] bond18 (unregistering): Released all slaves [ 518.297230][ T3370] bond19 (unregistering): Released all slaves [ 518.314070][ T3370] bond20 (unregistering): Released all slaves [ 518.327648][ T3370] bond21 (unregistering): Released all slaves [ 518.351688][ T3370] bond22 (unregistering): Released all slaves [ 518.367859][ T3370] bond23 (unregistering): Released all slaves [ 518.386008][ T3370] bond24 (unregistering): Released all slaves [ 518.399541][ T3370] bond25 (unregistering): Released all slaves [ 518.423427][ T3370] bond26 (unregistering): Released all slaves [ 518.523505][T21636] team0: entered promiscuous mode [ 518.542611][T21636] team0: entered allmulticast mode [ 518.866785][T21683] xt_hashlimit: size too large, truncated to 1048576 [ 518.969921][ T3370] : left promiscuous mode [ 519.197390][T21704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4298'. [ 519.506822][T21716] netlink: 'syz.3.4301': attribute type 3 has an invalid length. [ 519.534583][T21722] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 519.583986][ T3370] tipc: Left network mode [ 519.837930][ T3370] IPVS: stopping backup sync thread 12279 ... [ 520.062581][T21752] netlink: 'syz.0.4310': attribute type 2 has an invalid length. [ 520.082948][T21752] netlink: 'syz.0.4310': attribute type 2 has an invalid length. [ 520.132196][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.152884][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.169196][T21752] ip6gre2: entered allmulticast mode [ 520.176744][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.188884][T21762] netlink: 'syz.0.4310': attribute type 2 has an invalid length. [ 520.199637][T21762] netlink: 'syz.0.4310': attribute type 2 has an invalid length. [ 520.208913][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.221906][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.233583][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.278091][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.295915][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.307378][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.324855][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.327657][T21769] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.4314'. [ 520.339822][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.356683][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.367992][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.427283][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.455747][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.490136][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.528760][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.578926][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.617675][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.659898][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.687964][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.706324][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.734485][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.764759][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.786289][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.811778][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.825862][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.837647][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.849129][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.865584][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.877175][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.896207][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.911916][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.017081][T21784] batman_adv: batadv0: Interface deactivated: gretap1 [ 521.028688][T21784] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 521.105526][T21782] syzkaller0: entered promiscuous mode [ 521.120274][T21782] syzkaller0: entered allmulticast mode [ 521.146207][T14623] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.168648][T14623] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.454680][T21815] __nla_validate_parse: 1 callbacks suppressed [ 521.454699][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4321'. [ 523.989261][T14623] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.999039][T14623] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.008706][T21794] syzkaller1: entered promiscuous mode [ 524.014669][T21794] syzkaller1: entered allmulticast mode [ 524.166492][T21829] veth1_to_bond: entered allmulticast mode [ 524.174758][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4324'. [ 524.202471][ T3370] hsr_slave_0: left promiscuous mode [ 524.215401][ T3370] hsr_slave_1: left promiscuous mode [ 524.234747][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.250135][ T3370] veth1_vlan: left allmulticast mode [ 524.251391][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'. [ 524.886436][T21828] veth1_to_bond (unregistering): left allmulticast mode [ 524.966819][T21839] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 525.007724][T21841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.019803][T21841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.090054][T21841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.109428][T21841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.138617][T21841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 525.165809][T21841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.185963][T21841] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 525.208078][T21841] veth1_vlan: left promiscuous mode [ 525.220208][T21841] veth0_vlan: left promiscuous mode [ 525.228243][T21841] veth0_vlan: entered promiscuous mode [ 525.236885][T21841] veth1_vlan: entered promiscuous mode [ 525.252527][T21841] veth1_macvtap: left promiscuous mode [ 525.265863][T21841] veth1_macvtap: entered promiscuous mode [ 525.283964][T21841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 525.293180][T21841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 525.305529][T21841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.320436][T21841] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 525.338623][T21879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4334'. [ 525.359842][T14609] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.367109][T14609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.378814][T14609] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.386061][T14609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.568637][T14623] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 525.596699][T14623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.625074][T14623] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 525.647755][T14623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.677824][T21878] bridge0: port 4(syz_tun) entered blocking state [ 525.691008][T21878] bridge0: port 4(syz_tun) entered disabled state [ 525.709979][T21878] syz_tun: entered allmulticast mode [ 525.749538][T21878] syz_tun: entered promiscuous mode [ 525.774405][T14623] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 525.803095][T14623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.831976][T14623] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 525.856372][T14623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.947030][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4340'. [ 525.956303][T21907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.963749][T21907] IPv6: NLM_F_CREATE should be set when creating new route [ 525.971065][T21907] IPv6: NLM_F_CREATE should be set when creating new route [ 526.319173][T21928] xt_hashlimit: size too large, truncated to 1048576 [ 526.357328][T21931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4344'. [ 526.362352][ T3370] IPVS: stop unused estimator thread 0... [ 526.485806][ T4945] Bluetooth: hci2: link tx timeout [ 526.511435][ T4945] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 526.527309][ T4945] Bluetooth: hci2: link tx timeout [ 526.537645][ T4945] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 526.857874][T21961] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4349'. [ 526.879933][T21961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4349'. [ 526.903582][T21961] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4349'. [ 526.928059][T21961] netlink: 'syz.1.4349': attribute type 2 has an invalid length. [ 526.957269][T21961] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4349'. [ 527.080406][T21965] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 527.105990][T21965] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 527.509548][T22006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 527.636771][T22021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4364'. [ 527.686735][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4360'. [ 527.758734][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4360'. [ 527.926384][T22047] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4370'. [ 528.069293][T22056] netlink: 'syz.2.4373': attribute type 39 has an invalid length. [ 528.079461][T22054] gretap0: entered promiscuous mode [ 528.149546][T22062] netlink: 'syz.0.4374': attribute type 1 has an invalid length. [ 528.178317][T22056] syz_tun (unregistering): left allmulticast mode [ 528.215654][T22056] syz_tun (unregistering): left promiscuous mode [ 528.225592][T22056] bridge0: port 4(syz_tun) entered disabled state [ 528.334670][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 528.360083][T22060] gretap0: left promiscuous mode [ 528.373728][T22056] netlink: 'syz.2.4373': attribute type 39 has an invalid length. [ 528.383238][T22062] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 528.453571][T22056] netlink: 'syz.2.4373': attribute type 39 has an invalid length. [ 528.531776][T22056] netlink: 'syz.2.4373': attribute type 39 has an invalid length. [ 528.570062][T22056] netlink: 'syz.2.4373': attribute type 39 has an invalid length. [ 528.582339][ T4945] Bluetooth: hci2: command 0x0401 tx timeout [ 528.630920][T22056] netlink: 'syz.2.4373': attribute type 39 has an invalid length. [ 528.660200][T22056] netlink: 'syz.2.4373': attribute type 39 has an invalid length. [ 528.713975][T22056] netlink: 'syz.2.4373': attribute type 39 has an invalid length. [ 529.030107][T22102] bond5: option coupled_control: invalid value (192) [ 529.045193][T22102] bond5 (unregistering): Released all slaves [ 529.430473][T22134] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 529.576645][T22143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.643983][T22143] syzkaller1: entered promiscuous mode [ 529.664750][T22143] syzkaller1: entered allmulticast mode [ 529.779876][T22150] geneve2: entered promiscuous mode [ 529.801528][T22150] geneve2: entered allmulticast mode [ 530.457525][T22186] syz_tun: entered allmulticast mode [ 530.489224][T22186] dvmrp8: entered allmulticast mode [ 530.509779][T22185] syz_tun: left allmulticast mode [ 530.648023][T22193] bond4: option all_slaves_active: invalid value (222) [ 530.661840][ T4945] Bluetooth: hci2: command 0x0401 tx timeout [ 530.676990][T22193] bond4 (unregistering): Released all slaves [ 531.199280][T22226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.444297][T22245] syzkaller0: entered promiscuous mode [ 531.456979][T22245] syzkaller0: entered allmulticast mode [ 531.562988][T22251] 8021q: adding VLAN 0 to HW filter on device bond8 [ 531.589418][T22251] bond8 (unregistering): Released all slaves [ 531.690500][T22258] gtp0: entered promiscuous mode [ 531.695795][T22258] gtp0: entered allmulticast mode [ 531.885397][T22272] __nla_validate_parse: 19 callbacks suppressed [ 531.885417][T22272] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4430'. [ 531.908653][T22274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4431'. [ 531.969502][T22279] batadv1: entered allmulticast mode [ 532.253212][T22306] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4439'. [ 532.400035][T22312] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.4442'. [ 532.446745][T22312] 0XD: renamed from gretap0 (while UP) [ 532.503928][T22312] 0XD: entered allmulticast mode [ 532.540030][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4448'. [ 532.562517][T22328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4448'. [ 532.592839][T22331] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 532.687374][T22338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4450'. [ 532.728269][T22341] validate_nla: 61 callbacks suppressed [ 532.728288][T22341] netlink: 'syz.2.4451': attribute type 1 has an invalid length. [ 532.828543][T22341] 8021q: adding VLAN 0 to HW filter on device bond8 [ 533.407772][T22388] openvswitch: netlink: Missing valid actions attribute. [ 533.422598][T22388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.671578][T22416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4471'. [ 534.589038][T22430] C: renamed from lo (while UP) [ 534.598748][T22430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 534.803736][T22444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4480'. [ 534.832671][T22444] lo speed is unknown, defaulting to 1000 [ 534.874736][T22454] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 534.892986][T22454] netlink: 'syz.1.4482': attribute type 1 has an invalid length. [ 535.688793][T22473] xt_ecn: cannot match TCP bits for non-tcp packets [ 536.535021][T22398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.695837][T22478] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4487'. [ 536.742706][T22485] netlink: 'syz.4.4491': attribute type 1 has an invalid length. [ 536.819265][T22490] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 536.850515][T22490] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 536.904765][T22500] syzkaller0: entered promiscuous mode [ 536.921184][T22500] syzkaller0: entered allmulticast mode [ 537.458640][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4501'. [ 537.476035][T22516] syz_tun: entered allmulticast mode [ 537.494178][T22516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4500'. [ 537.513821][T22516] netlink: 'syz.3.4500': attribute type 1 has an invalid length. [ 537.527442][T22516] : renamed from dummy0 [ 537.563109][T22512] syz_tun: left allmulticast mode [ 537.869273][T22537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.881820][T22540] nbd: must specify a device to reconfigure [ 537.940091][T22544] netlink: 724 bytes leftover after parsing attributes in process `syz.2.4509'. [ 538.044549][T22550] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 538.185165][T22557] team_slave_1: Caught tx_queue_len zero misconfig [ 538.195716][T22550] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 538.234288][T22557] netlink: 'syz.2.4514': attribute type 1 has an invalid length. [ 538.254321][T22557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.264785][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4516'. [ 538.286768][T22565] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4516'. [ 538.308258][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4516'. [ 538.415963][T22576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 538.423323][T22576] IPv6: NLM_F_CREATE should be set when creating new route [ 538.648417][T22588] netlink: 'syz.1.4525': attribute type 11 has an invalid length. [ 538.743522][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'. [ 538.769760][T22592] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4527'. [ 538.900406][T22600] netlink: 'syz.1.4529': attribute type 1 has an invalid length. [ 538.961970][T22600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 538.993779][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 539.011061][T22604] bond5: (slave geneve2): making interface the new active one [ 539.032272][T22604] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 539.065326][T14609] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.097852][T14609] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.168361][T14609] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.193511][T14609] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.321133][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4536'. [ 539.348897][T22614] syzkaller0: entered promiscuous mode [ 539.361784][T22614] syzkaller0: entered allmulticast mode [ 539.506674][T22632] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 539.545997][T14609] nci: nci_rx_work: unknown MT 0x7 [ 539.671621][T22641] netlink: 'syz.3.4541': attribute type 5 has an invalid length. [ 539.706945][T22641] netlink: 'syz.3.4541': attribute type 5 has an invalid length. [ 539.844055][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.857459][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.870104][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.876691][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.883337][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.889535][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.908595][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.915802][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.922191][T22649] ipt_REJECT: TCP_RESET invalid for non-tcp [ 540.401292][T22673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.408545][T22673] IPv6: NLM_F_CREATE should be set when creating new route [ 540.459102][T22677] pimreg: entered allmulticast mode [ 541.220984][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 542.021348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.413784][T22627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.797452][T22695] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4555'. [ 543.003996][T22703] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4558'. [ 543.226300][T22715] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4560'. [ 543.242943][T22720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4562'. [ 543.272449][T22720] netlink: 'syz.0.4562': attribute type 5 has an invalid length. [ 543.298107][T22720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4562'. [ 543.347827][T22720] geneve2: entered promiscuous mode [ 543.373049][T22720] geneve2: entered allmulticast mode [ 543.399514][T14621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 543.439328][T14621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 543.480335][T14621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 543.521921][T14621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 544.076704][T22766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.084011][T22766] IPv6: NLM_F_CREATE should be set when creating new route [ 544.491428][T22796] netlink: 'syz.4.4581': attribute type 2 has an invalid length. [ 544.509746][T19338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.823104][T22813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.144793][T14623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.173001][T14623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.611702][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.461339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.872256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.800055][T22842] netlink: 'syz.1.4596': attribute type 1 has an invalid length. [ 569.820486][T22847] netlink: 'syz.4.4599': attribute type 83 has an invalid length. [ 569.834986][T22842] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.887345][T22842] vlan2: entered promiscuous mode [ 569.900343][T22842] bond6: entered promiscuous mode [ 569.911196][T22842] vlan2: entered allmulticast mode [ 569.933671][T22842] bond6: entered allmulticast mode [ 569.959748][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4603'. [ 569.985558][T22851] bond6: (slave bridge5): making interface the new active one [ 569.993562][T22851] bridge5: entered promiscuous mode [ 570.003234][T22851] bridge5: entered allmulticast mode [ 570.020866][T22851] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 570.246170][T22872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4605'. [ 570.279284][T22877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4608'. [ 570.309360][T22877] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4608'. [ 570.374164][T22883] syzkaller0: entered promiscuous mode [ 570.379767][T22883] syzkaller0: entered allmulticast mode [ 570.717857][T22904] syzkaller0: entered promiscuous mode [ 570.723658][T22904] syzkaller0: entered allmulticast mode [ 571.394689][T22936] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.817420][T22959] IPVS: Unknown mcast interface: vcan0 [ 571.872893][T22961] sctp: [Deprecated]: syz.4.4633 (pid 22961) Use of int in maxseg socket option. [ 571.872893][T22961] Use struct sctp_assoc_value instead [ 572.236018][T22973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4636'. [ 572.475959][T22980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4637'. [ 572.491211][T22980] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 572.491211][T22980] Please contact the netfilter-devel mailing list or update your nftables rules. [ 572.544140][T22987] vlan2: entered allmulticast mode [ 572.549443][T22987] bond0: entered allmulticast mode [ 572.555824][T22987] geneve4: entered allmulticast mode [ 572.741964][T22992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4642'. [ 572.752042][T22992] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4642'. [ 572.942873][T23001] netlink: 'syz.4.4645': attribute type 10 has an invalid length. [ 572.966889][T23002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4643'. [ 572.993397][T23008] netlink: 'syz.1.4647': attribute type 75 has an invalid length. [ 573.075159][T23011] bond7: option resend_igmp: invalid value (32767) [ 573.082395][T23011] bond7: option resend_igmp: allowed values 0 - 255 [ 573.096094][T23011] bond7 (unregistering): Released all slaves [ 573.168431][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4648'. [ 573.197532][T23008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.220878][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.018232][ T30] audit: type=1107 audit(1782946554.699:10): pid=23062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً٠0ltݕ/' [ 574.043168][T23067] netlink: 'syz.1.4661': attribute type 2 has an invalid length. [ 574.215804][T23075] netlink: 'syz.1.4663': attribute type 1 has an invalid length. [ 574.501173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.528340][T23098] openvswitch: netlink: Missing key (keys=40, expected=100) [ 574.557560][T23098] netlink: 'syz.1.4670': attribute type 1 has an invalid length. [ 574.824707][T23117] xt_hashlimit: size too large, truncated to 1048576 [ 574.864922][T23114] netlink: 'syz.3.4680': attribute type 1 has an invalid length. [ 574.958305][T23132] gtp0: entered promiscuous mode [ 574.966760][T23132] gtp0: entered allmulticast mode [ 574.978345][T23133] __nla_validate_parse: 9 callbacks suppressed [ 574.978364][T23133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4682'. [ 575.140811][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.152868][T23141] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4685'. [ 575.238672][T23150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4688'. [ 575.370348][T23157] netlink: 'syz.1.4689': attribute type 1 has an invalid length. [ 575.415172][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4689'. [ 575.573143][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4693'. [ 575.614626][T23177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4693'. [ 575.637393][T23174] SET target dimension over the limit! [ 575.649805][T23180] netlink: 'syz.3.4693': attribute type 11 has an invalid length. [ 575.658964][T23177] netlink: 'syz.3.4693': attribute type 11 has an invalid length. [ 575.667530][T23180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4693'. [ 575.684463][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4693'. [ 575.687870][T23180] netlink: 'syz.3.4693': attribute type 11 has an invalid length. [ 575.749563][T23177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4693'. [ 575.749674][T23180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4693'. [ 575.780141][T23177] netlink: 'syz.3.4693': attribute type 11 has an invalid length. [ 575.998086][T23204] netlink: 'syz.3.4701': attribute type 11 has an invalid length. [ 576.086978][T23212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.771102][T23251] bridge0: Caught tx_queue_len zero misconfig [ 576.820315][T23251] netlink: 'syz.2.4712': attribute type 1 has an invalid length. [ 576.863185][T23259] netlink: 'syz.4.4716': attribute type 2 has an invalid length. [ 576.886142][T14624] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.905821][T23262] netlink: 'syz.0.4717': attribute type 1 has an invalid length. [ 576.916762][T14624] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 576.934956][T14624] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 576.970168][T23268] IPVS: ip_vs_edit_dest(): server weight less than zero [ 576.980443][T19342] IPVS: starting estimator thread 0... [ 577.076215][T23270] IPVS: using max 27 ests per chain, 64800 per kthread [ 577.097294][T23269] bond4: Removing last ns target with arp_interval on [ 577.238532][T23285] syzkaller1: entered promiscuous mode [ 577.889444][T23325] tipc: Enabling of bearer rejected, failed to enable media [ 578.020403][T23333] netlink: 'syz.2.4738': attribute type 11 has an invalid length. [ 578.081881][T23335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.097309][T23337] netlink: 'syz.4.4740': attribute type 1 has an invalid length. [ 578.137035][T23337] macvtap1: entered allmulticast mode [ 578.152775][T23337] macvtap2: entered allmulticast mode [ 578.192947][T23337] bond6: (slave bridge4): making interface the new active one [ 578.217959][T23337] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 578.285776][T23344] block nbd0: reconnected socket [ 578.299679][T23344] nbd: error processing sock list [ 578.320309][ T50] block nbd0: Receive control failed (result -32) [ 579.066559][T23387] lo speed is unknown, defaulting to 1000 [ 579.964657][T23450] team0: No ports can be present during mode change [ 580.187682][T23462] __nla_validate_parse: 21 callbacks suppressed [ 580.187703][T23462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4777'. [ 580.226421][T23463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.255128][T23463] openvswitch: netlink: Key type 114 is out of range max 32 [ 580.453082][T23477] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4782'. [ 580.467441][T23477] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4782'. [ 580.487093][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4782'. [ 580.510563][T23480] validate_nla: 1 callbacks suppressed [ 580.510581][T23480] netlink: 'syz.2.4783': attribute type 1 has an invalid length. [ 581.010972][T23517] netlink: 'syz.3.4791': attribute type 4 has an invalid length. [ 581.019872][T23515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4790'. [ 581.241574][T23528] syzkaller1: entered promiscuous mode [ 581.265660][T23528] syzkaller1: entered allmulticast mode [ 581.412594][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4795'. [ 581.424392][T23537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4795'. [ 581.434910][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4795'. [ 581.444373][T23537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4795'. [ 581.492038][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 581.529482][T23546] gtp2: entered promiscuous mode [ 581.560993][T23546] gtp2: entered allmulticast mode [ 581.795466][T23557] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.824217][ T30] audit: type=1107 audit(1782946562.509:11): pid=23558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 582.241941][T23577] xt_ipcomp: unknown flags 1D [ 582.387563][T23586] xt_recent: Unsupported userspace flags (000000b1) [ 582.421433][T23580] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 582.554090][T23591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 585.605116][T23622] __nla_validate_parse: 2 callbacks suppressed [ 585.605155][T23622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4819'. [ 585.850393][T23630] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 586.010970][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4825'. [ 586.072404][T23647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4827'. [ 586.072867][T23644] netlink: 'syz.1.4826': attribute type 12 has an invalid length. [ 586.101362][T23644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4826'. [ 586.176958][T23650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4828'. [ 586.208749][T23650] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4828'. [ 586.238478][T23652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4829'. [ 586.297865][T23650] veth7: entered promiscuous mode [ 586.311978][T23650] netlink: 'syz.0.4828': attribute type 11 has an invalid length. [ 586.319946][T23650] netlink: 'syz.0.4828': attribute type 1 has an invalid length. [ 586.329807][T23650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4828'. [ 586.346988][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4829'. [ 586.565386][T23673] syzkaller1: entered promiscuous mode [ 586.578126][T23673] syzkaller1: entered allmulticast mode [ 586.668476][T23672] syzkaller0: entered promiscuous mode [ 586.689090][T23672] syzkaller0: entered allmulticast mode [ 586.776185][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4838'. [ 586.795312][T23681] gretap0: entered promiscuous mode [ 586.934188][T23695] netlink: 'syz.4.4842': attribute type 8 has an invalid length. [ 587.828522][T14609] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.857648][T14609] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.879275][T14609] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.898613][T14609] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.298304][T14637] nci: nci_rx_work: unknown MT 0x7 [ 588.364705][T23769] bond7: entered promiscuous mode [ 588.377328][T23769] bond7: entered allmulticast mode [ 588.595308][T23786] netlink: 'syz.4.4870': attribute type 9 has an invalid length. [ 588.924896][T23792] ip6gre2: entered allmulticast mode [ 589.496390][T23809] syz.4.4878: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 589.511963][T23809] CPU: 1 UID: 0 PID: 23809 Comm: syz.4.4878 Not tainted syzkaller #0 PREEMPT(full) [ 589.511979][T23809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.511994][T23809] Call Trace: [ 589.512075][T23809] [ 589.512145][T23809] dump_stack_lvl+0xe8/0x150 [ 589.512263][T23809] warn_alloc+0x24c/0x270 [ 589.512300][T23809] ? stack_depot_save_flags+0x33/0x800 [ 589.512410][T23809] ? __pfx_warn_alloc+0x10/0x10 [ 589.512457][T23809] ? kasan_save_track+0x3e/0x80 [ 589.512477][T23809] ? __kasan_kmalloc+0x93/0xb0 [ 589.512488][T23809] ? xsk_setsockopt+0x52a/0x960 [ 589.512578][T23809] ? do_sock_setsockopt+0x17c/0x1b0 [ 589.512667][T23809] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 589.512689][T23809] ? do_syscall_64+0x174/0x580 [ 589.512728][T23809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.512759][T23809] __vmalloc_node_range_noprof+0x12c/0x1730 [ 589.512790][T23809] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 589.512808][T23809] ? __kasan_kmalloc+0x93/0xb0 [ 589.512819][T23809] ? __kmalloc_cache_noprof+0x32d/0x660 [ 589.512835][T23809] ? __kmalloc_cache_noprof+0x150/0x660 [ 589.512852][T23809] vmalloc_user_noprof+0xad/0xe0 [ 589.512868][T23809] ? xskq_create+0xbf/0x170 [ 589.512883][T23809] xskq_create+0xbf/0x170 [ 589.512901][T23809] xsk_init_queue+0x8a/0xe0 [ 589.512927][T23809] xsk_setsockopt+0x52a/0x960 [ 589.512951][T23809] ? __fget_files+0x2a/0x420 [ 589.512984][T23809] ? __pfx_xsk_setsockopt+0x10/0x10 [ 589.513003][T23809] ? __pfx_aa_sk_perm+0x10/0x10 [ 589.513060][T23809] ? aa_sock_opt_perm+0xff/0x1a0 [ 589.513104][T23809] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 589.513135][T23809] ? __pfx_xsk_setsockopt+0x10/0x10 [ 589.513150][T23809] do_sock_setsockopt+0x17c/0x1b0 [ 589.513164][T23809] __x64_sys_setsockopt+0x13d/0x1b0 [ 589.513176][T23809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.513189][T23809] do_syscall_64+0x174/0x580 [ 589.513198][T23809] ? trace_irq_disable+0x3b/0x140 [ 589.513216][T23809] ? clear_bhb_loop+0x40/0x90 [ 589.513229][T23809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.513240][T23809] RIP: 0033:0x7f7f0659de59 [ 589.513258][T23809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.513271][T23809] RSP: 002b:00007f7f047d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 589.513310][T23809] RAX: ffffffffffffffda RBX: 00007f7f06826090 RCX: 00007f7f0659de59 [ 589.513318][T23809] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 589.513324][T23809] RBP: 00007f7f06633e6f R08: 0000000000000004 R09: 0000000000000000 [ 589.513330][T23809] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.513336][T23809] R13: 00007f7f06826128 R14: 00007f7f06826090 R15: 00007ffcf6e37eb8 [ 589.513354][T23809] [ 589.513409][T23809] Mem-Info: [ 589.798624][T23809] active_anon:6008 inactive_anon:0 isolated_anon:0 [ 589.798624][T23809] active_file:8 inactive_file:43086 isolated_file:0 [ 589.798624][T23809] unevictable:768 dirty:84 writeback:0 [ 589.798624][T23809] slab_reclaimable:12667 slab_unreclaimable:120312 [ 589.798624][T23809] mapped:30384 shmem:1348 pagetables:1484 [ 589.798624][T23809] sec_pagetables:0 bounce:0 [ 589.798624][T23809] kernel_misc_reclaimable:0 [ 589.798624][T23809] free:1302437 free_pcp:8576 free_cma:0 [ 589.843857][T23809] Node 0 active_anon:24032kB inactive_anon:0kB active_file:32kB inactive_file:172136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121536kB dirty:336kB writeback:0kB shmem:3856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15956kB pagetables:5812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 589.879070][T23809] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 589.912280][T23809] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.944870][T23809] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 589.951200][T23809] Node 0 DMA32 free:1254112kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23980kB inactive_anon:0kB active_file:32kB inactive_file:172136kB unevictable:1536kB writepending:336kB zspages:0kB present:3129332kB managed:2551436kB mlocked:0kB bounce:0kB free_pcp:30932kB local_pcp:22368kB free_cma:0kB [ 589.985342][T23809] lowmem_reserve[]: 0 0 0 0 0 [ 589.990138][T23809] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.020152][T23809] lowmem_reserve[]: 0 0 0 0 0 [ 590.025454][T23809] Node 1 Normal free:3943900kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.057487][T23809] lowmem_reserve[]: 0 0 0 0 0 [ 590.062283][T23809] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 590.075213][T23809] Node 0 DMA32: 4501*4kB (UME) 2467*8kB (UME) 590*16kB (UME) 496*32kB (UME) 188*64kB (UM) 332*128kB (UME) 192*256kB (UM) 74*512kB (UME) 35*1024kB (UME) 5*2048kB (UM) 245*4096kB (UM) = 1254220kB [ 590.094939][T23809] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 590.106648][T23809] Node 1 Normal: 1*4kB (U) 7*8kB (UM) 10*16kB (UM) 2*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 960*4096kB (M) = 3943900kB [ 590.123918][T23809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.133675][T23809] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 590.143116][T23809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.152938][T23809] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 590.162373][T23809] 44428 total pagecache pages [ 590.167079][T23809] 0 pages in swap cache [ 590.171321][T23809] Free swap = 124996kB [ 590.175520][T23809] Total swap = 124996kB [ 590.179671][T23809] 2097051 pages RAM [ 590.183855][T23809] 0 pages HighMem/MovableOnly [ 590.188570][T23809] 427421 pages reserved [ 590.192778][T23809] 0 pages cma reserved [ 591.113807][T23754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.413037][T23828] __nla_validate_parse: 5 callbacks suppressed [ 591.413056][T23828] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4884'. [ 591.474661][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4882'. [ 591.570746][T23832] netlink: 'syz.3.4886': attribute type 1 has an invalid length. [ 591.593147][T23834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4888'. [ 591.617161][T23832] bond5: entered promiscuous mode [ 591.624780][T23832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.658002][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'. [ 591.675066][T23832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4886'. [ 591.699351][T23832] bond5: entered allmulticast mode [ 591.827380][T23832] bond5: (slave bridge2): making interface the new active one [ 591.846161][T23832] bridge2: entered promiscuous mode [ 591.864371][T23832] bridge2: entered allmulticast mode [ 591.885256][T23832] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 591.907228][T23848] netlink: 'syz.0.4891': attribute type 1 has an invalid length. [ 592.024310][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.036023][T23849] netlink: 'syz.4.4889': attribute type 1 has an invalid length. [ 592.051057][T23848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.058905][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.066067][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.068367][T23849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4889'. [ 592.073858][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.089524][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.096954][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.104670][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.111560][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.118364][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.125928][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.132802][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.139604][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.152531][T23848] macvlan3: entered promiscuous mode [ 592.157875][T23848] macvlan3: entered allmulticast mode [ 592.163648][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.170476][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.178836][T23848] bond1: entered promiscuous mode [ 592.184584][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.193589][T23848] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 592.200706][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.208942][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.216598][T23848] bond1: left promiscuous mode [ 592.237509][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.246161][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.253017][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.264686][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.275571][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.283202][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.286536][T23852] gretap0: entered promiscuous mode [ 592.289930][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.289963][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.313407][T23852] bond1: (slave gretap0): making interface the new active one [ 592.327948][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.335297][T23852] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 592.344112][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.351192][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.360967][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.367986][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.374925][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.381807][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.389458][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.396888][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.427452][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.445266][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.466897][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.507460][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.533604][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.551209][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.567661][T23860] netlink: 'syz.0.4893': attribute type 1 has an invalid length. [ 592.582464][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.601907][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.625187][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.649575][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.679082][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.691758][T23860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 592.700962][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.707850][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.715504][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.728155][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.735372][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.743248][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.750089][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.757625][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.766029][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.773326][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.780193][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.780203][T23865] bond2: (slave veth9): Enslaving as an active interface with a down link [ 592.796337][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.803567][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.811374][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.818320][T23854] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 592.825524][T23869] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 592.849926][T23869] bond2: (slave batadv1): making interface the new active one [ 592.877889][T23869] batadv1: entered promiscuous mode [ 592.883752][T23869] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 592.993678][T23865] bond2: (slave veth11): Enslaving as an active interface with a down link [ 593.242960][T23892] syz_tun: entered allmulticast mode [ 593.301632][T23886] syz_tun: left allmulticast mode [ 593.390971][T23899] syzkaller1: entered promiscuous mode [ 593.420723][T23899] syzkaller1: entered allmulticast mode [ 593.708671][T23929] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4911'. [ 593.828482][T23936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4915'. [ 593.863829][T23936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4915'. [ 594.075190][T23951] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4919'. [ 594.115113][T23954] netlink: 'syz.1.4920': attribute type 3 has an invalid length. [ 594.150070][T23954] openvswitch: netlink: Missing valid actions attribute. [ 594.166296][T23954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.293776][T23970] netlink: 'syz.2.4925': attribute type 8 has an invalid length. [ 594.663938][T23993] syzkaller0: entered promiscuous mode [ 594.680783][T23993] syzkaller0: entered allmulticast mode [ 594.692632][T23997] IPv6: NLM_F_REPLACE set, but no existing node found! [ 594.701303][T23998] IPv6: NLM_F_REPLACE set, but no existing node found! [ 594.823404][T24003] syzkaller1: entered promiscuous mode [ 594.841608][T24003] syzkaller1: entered allmulticast mode [ 595.100376][T24016] lo speed is unknown, defaulting to 1000 [ 595.591730][T24058] openvswitch: netlink: Missing key (keys=40, expected=100) [ 595.718226][T24049] syzkaller0: entered promiscuous mode [ 595.732265][T24049] syzkaller0: entered allmulticast mode [ 595.755066][T24069] netlink: 'syz.1.4953': attribute type 142 has an invalid length. [ 595.755997][T24063] netlink: 'syz.1.4953': attribute type 142 has an invalid length. [ 595.819099][T24062] vlan3: entered allmulticast mode [ 595.837215][T24062] bond0: entered allmulticast mode [ 595.852470][T24062] bond_slave_0: entered allmulticast mode [ 595.868019][T24062] bond_slave_1: entered allmulticast mode [ 595.878492][T24062] dummy0: entered allmulticast mode [ 595.903675][T24081] nbd: must specify at least one socket [ 596.029852][T24087] netlink: 'syz.0.4959': attribute type 1 has an invalid length. [ 596.222816][T24098] openvswitch: netlink: Message has 512 unknown bytes. [ 598.978726][T24113] tipc: Started in network mode [ 599.011691][T24113] tipc: Node identity e0000001, cluster identity 4711 [ 599.036943][T24113] tipc: Enabling of bearer rejected, failed to enable media [ 599.089063][T24126] __nla_validate_parse: 12 callbacks suppressed [ 599.089082][T24126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4974'. [ 599.117793][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 599.245899][T24132] bond6: entered promiscuous mode [ 599.288397][T24132] bond7: entered promiscuous mode [ 599.363775][T24139] syzkaller0: entered promiscuous mode [ 599.369655][T24139] syzkaller0: entered allmulticast mode [ 599.398481][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4979'. [ 599.900821][T24152] netlink: 'syz.0.4983': attribute type 1 has an invalid length. [ 599.945763][T24152] bond3: entered promiscuous mode [ 599.953133][T24152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 599.974451][T24152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4983'. [ 599.983787][T24152] openvswitch: netlink: Flow key attr not present in new flow. [ 600.032126][T24152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.046269][T24152] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 600.065809][T24152] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 600.090149][T24152] bond3: (slave vti0): making interface the new active one [ 600.098355][T24152] vti0: entered promiscuous mode [ 600.106648][T24152] vti0: left promiscuous mode [ 600.133405][T24165] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4987'. [ 600.268740][T24176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.284333][T24177] netlink: 'syz.0.4990': attribute type 2 has an invalid length. [ 600.303827][T24182] xt_hashlimit: size too large, truncated to 1048576 [ 600.408720][T24188] sctp: [Deprecated]: syz.0.4993 (pid 24188) Use of int in max_burst socket option deprecated. [ 600.408720][T24188] Use struct sctp_assoc_value instead [ 600.436904][T24188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.634912][T24193] geneve3: entered promiscuous mode [ 600.646402][ T3370] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 34399 - 0 [ 600.675401][T24193] netlink: 'syz.1.4995': attribute type 1 has an invalid length. [ 600.675861][ T3370] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 34399 - 0 [ 600.701582][ T3370] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 34399 - 0 [ 600.753832][ T3370] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 34399 - 0 [ 600.777440][T24193] netlink: 'syz.1.4995': attribute type 1 has an invalid length. [ 600.807563][T24193] netlink: 'syz.1.4995': attribute type 11 has an invalid length. [ 600.817757][T24193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4995'. [ 600.828786][T24198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 601.278581][T24238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5008'. [ 601.300028][T24241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5007'. [ 601.424620][T24246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 601.697659][T24262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5016'. [ 601.727183][T24262] netlink: 'syz.4.5016': attribute type 7 has an invalid length. [ 601.740973][T24262] netlink: 'syz.4.5016': attribute type 8 has an invalid length. [ 601.749831][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5016'. [ 602.080736][T24282] vlan3: entered promiscuous mode [ 602.094415][T24282] erspan0: entered promiscuous mode [ 602.133342][T14623] [ 602.135726][T14623] ====================================================== [ 602.142885][T14623] WARNING: possible circular locking dependency detected [ 602.150000][T14623] syzkaller #0 Not tainted [ 602.154455][T14623] ------------------------------------------------------ [ 602.161557][T14623] kworker/u8:31/14623 is trying to acquire lock: [ 602.167907][T14623] ffffffff8ea5eb20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 602.177615][T14623] [ 602.177615][T14623] but task is already holding lock: [ 602.184961][T14623] ffffffff8e7f6cc0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 602.194287][T14623] [ 602.194287][T14623] which lock already depends on the new lock. [ 602.194287][T14623] [ 602.204673][T14623] [ 602.204673][T14623] the existing dependency chain (in reverse order) is: [ 602.213668][T14623] [ 602.213668][T14623] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 602.221237][T14623] __mutex_lock+0x19d/0x1550 [ 602.226636][T14623] __alloc_workqueue+0xa9c/0x2060 [ 602.232165][T14623] alloc_workqueue_noprof+0xe3/0x210 [ 602.237955][T14623] padata_alloc+0xbe/0x360 [ 602.242879][T14623] pcrypt_init_padata+0x27/0x100 [ 602.248391][T14623] pcrypt_init+0x60/0xc0 [ 602.253227][T14623] do_one_initcall+0x250/0x870 [ 602.258495][T14623] do_initcall_level+0x10a/0x1a0 [ 602.264028][T14623] do_initcalls+0x59/0xa0 [ 602.268867][T14623] kernel_init_freeable+0x29d/0x3e0 [ 602.274573][T14623] kernel_init+0x1d/0x1d0 [ 602.279455][T14623] ret_from_fork+0x514/0xb70 [ 602.284568][T14623] ret_from_fork_asm+0x1a/0x30 [ 602.289839][T14623] [ 602.289839][T14623] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 602.297565][T14623] cpus_read_lock+0x42/0x160 [ 602.302704][T14623] static_key_slow_inc+0x12/0x30 [ 602.308150][T14623] nbd_genl_reconfigure+0x1301/0x1e80 [ 602.314109][T14623] genl_family_rcv_msg_doit+0x233/0x340 [ 602.320234][T14623] genl_rcv_msg+0x614/0x7a0 [ 602.325247][T14623] netlink_rcv_skb+0x226/0x4a0 [ 602.330514][T14623] genl_rcv+0x28/0x40 [ 602.335005][T14623] netlink_unicast+0x7bb/0x940 [ 602.340272][T14623] netlink_sendmsg+0x813/0xb40 [ 602.345540][T14623] sock_sendmsg_nosec+0x13a/0x180 [ 602.351079][T14623] ____sys_sendmsg+0x54e/0x850 [ 602.356348][T14623] ___sys_sendmsg+0x2a5/0x360 [ 602.361530][T14623] __x64_sys_sendmsg+0x1b1/0x290 [ 602.366971][T14623] do_syscall_64+0x174/0x580 [ 602.372063][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.378461][T14623] [ 602.378461][T14623] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 602.386089][T14623] __mutex_lock+0x19d/0x1550 [ 602.391182][T14623] nbd_queue_rq+0x373/0x1150 [ 602.396278][T14623] blk_mq_dispatch_rq_list+0x499/0x1990 [ 602.402428][T14623] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 602.409298][T14623] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 602.415783][T14623] blk_mq_run_work_fn+0x16c/0x300 [ 602.421314][T14623] process_scheduled_works+0xa8e/0x14e0 [ 602.427370][T14623] worker_thread+0xa47/0xfb0 [ 602.432469][T14623] kthread+0x388/0x470 [ 602.437046][T14623] ret_from_fork+0x514/0xb70 [ 602.442143][T14623] ret_from_fork_asm+0x1a/0x30 [ 602.447414][T14623] [ 602.447414][T14623] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 602.454608][T14623] __mutex_lock+0x19d/0x1550 [ 602.459703][T14623] nbd_queue_rq+0xc1/0x1150 [ 602.464711][T14623] blk_mq_dispatch_rq_list+0x499/0x1990 [ 602.470772][T14623] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 602.477605][T14623] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 602.484089][T14623] blk_mq_run_work_fn+0x16c/0x300 [ 602.489620][T14623] process_scheduled_works+0xa8e/0x14e0 [ 602.495674][T14623] worker_thread+0xa47/0xfb0 [ 602.500779][T14623] kthread+0x388/0x470 [ 602.505701][T14623] ret_from_fork+0x514/0xb70 [ 602.510800][T14623] ret_from_fork_asm+0x1a/0x30 [ 602.516073][T14623] [ 602.516073][T14623] -> #4 (set->srcu){.+.+}-{0:0}: [ 602.523182][T14623] __synchronize_srcu+0xc9/0x2f0 [ 602.528663][T14623] elevator_switch+0x1e8/0x7b0 [ 602.534018][T14623] elevator_change+0x2fa/0x480 [ 602.539290][T14623] elevator_set_default+0x375/0x440 [ 602.544997][T14623] blk_register_queue+0x3f3/0x4e0 [ 602.550576][T14623] __add_disk+0x6cb/0xe30 [ 602.555435][T14623] add_disk_fwnode+0xfb/0x4b0 [ 602.560618][T14623] nbd_dev_add+0x733/0xb60 [ 602.565551][T14623] nbd_init+0x15f/0x1e0 [ 602.570322][T14623] do_one_initcall+0x250/0x870 [ 602.575608][T14623] do_initcall_level+0x10a/0x1a0 [ 602.581058][T14623] do_initcalls+0x59/0xa0 [ 602.585895][T14623] kernel_init_freeable+0x29d/0x3e0 [ 602.591602][T14623] kernel_init+0x1d/0x1d0 [ 602.596439][T14623] ret_from_fork+0x514/0xb70 [ 602.601536][T14623] ret_from_fork_asm+0x1a/0x30 [ 602.606809][T14623] [ 602.606809][T14623] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 602.614611][T14623] __mutex_lock+0x19d/0x1550 [ 602.619704][T14623] elevator_change+0x1af/0x480 [ 602.624984][T14623] elevator_set_none+0xb5/0x140 [ 602.630347][T14623] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 602.636659][T14623] nbd_start_device+0x189/0xb30 [ 602.642047][T14623] nbd_genl_connect+0x1597/0x1c10 [ 602.647577][T14623] genl_family_rcv_msg_doit+0x233/0x340 [ 602.653633][T14623] genl_rcv_msg+0x614/0x7a0 [ 602.658644][T14623] netlink_rcv_skb+0x226/0x4a0 [ 602.663912][T14623] genl_rcv+0x28/0x40 [ 602.668403][T14623] netlink_unicast+0x7bb/0x940 [ 602.673671][T14623] netlink_sendmsg+0x813/0xb40 [ 602.678941][T14623] sock_sendmsg_nosec+0x13a/0x180 [ 602.684473][T14623] ____sys_sendmsg+0x54e/0x850 [ 602.689740][T14623] ___sys_sendmsg+0x2a5/0x360 [ 602.694920][T14623] __x64_sys_sendmsg+0x1b1/0x290 [ 602.700366][T14623] do_syscall_64+0x174/0x580 [ 602.705461][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.711860][T14623] [ 602.711860][T14623] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 602.720483][T14623] blk_alloc_queue+0x544/0x690 [ 602.725758][T14623] __blk_mq_alloc_disk+0x194/0x390 [ 602.731376][T14623] nbd_dev_add+0x494/0xb60 [ 602.736298][T14623] nbd_init+0x15f/0x1e0 [ 602.740959][T14623] do_one_initcall+0x250/0x870 [ 602.746231][T14623] do_initcall_level+0x10a/0x1a0 [ 602.751679][T14623] do_initcalls+0x59/0xa0 [ 602.756526][T14623] kernel_init_freeable+0x29d/0x3e0 [ 602.762229][T14623] kernel_init+0x1d/0x1d0 [ 602.767066][T14623] ret_from_fork+0x514/0xb70 [ 602.772161][T14623] ret_from_fork_asm+0x1a/0x30 [ 602.777434][T14623] [ 602.777434][T14623] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 602.784629][T14623] fs_reclaim_acquire+0x71/0x100 [ 602.790071][T14623] prepare_alloc_pages+0x15b/0x650 [ 602.795688][T14623] __alloc_frozen_pages_noprof+0x12f/0x380 [ 602.802005][T14623] __alloc_pages_noprof+0x10/0x100 [ 602.807619][T14623] pcpu_populate_chunk+0x181/0xb30 [ 602.813242][T14623] pcpu_alloc_noprof+0xbca/0x1900 [ 602.818776][T14623] xt_percpu_counter_alloc+0x145/0x1e0 [ 602.824845][T14623] translate_table+0x1311/0x2040 [ 602.830339][T14623] ip6t_register_table+0x112/0x320 [ 602.835956][T14623] ip6table_security_table_init+0x41/0x70 [ 602.842222][T14623] xt_find_table_lock+0x311/0x400 [ 602.847759][T14623] xt_request_find_table_lock+0x26/0x100 [ 602.853900][T14623] do_ip6t_get_ctl+0x77b/0x12f0 [ 602.859256][T14623] nf_getsockopt+0x26e/0x290 [ 602.864476][T14623] ipv6_getsockopt+0x213/0x2c0 [ 602.869818][T14623] do_sock_getsockopt+0x51d/0x7e0 [ 602.875349][T14623] __x64_sys_getsockopt+0x1a4/0x240 [ 602.881052][T14623] do_syscall_64+0x174/0x580 [ 602.886147][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.892545][T14623] [ 602.892545][T14623] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 602.900261][T14623] __lock_acquire+0x1520/0x2cf0 [ 602.905643][T14623] lock_acquire+0x106/0x350 [ 602.910654][T14623] __mutex_lock+0x19d/0x1550 [ 602.915752][T14623] pcpu_alloc_noprof+0x231/0x1900 [ 602.921288][T14623] __alloc_workqueue+0xb2c/0x2060 [ 602.926820][T14623] alloc_workqueue_noprof+0xe3/0x210 [ 602.932611][T14623] __rds_conn_create+0x130d/0x2250 [ 602.938321][T14623] rds_conn_create+0x43/0x60 [ 602.943420][T14623] rds_tcp_accept_one+0x44f/0xd40 [ 602.949022][T14623] rds_tcp_accept_worker+0x1d/0x70 [ 602.954639][T14623] process_scheduled_works+0xa8e/0x14e0 [ 602.960698][T14623] worker_thread+0xa47/0xfb0 [ 602.965797][T14623] kthread+0x388/0x470 [ 602.970370][T14623] ret_from_fork+0x514/0xb70 [ 602.975463][T14623] ret_from_fork_asm+0x1a/0x30 [ 602.980733][T14623] [ 602.980733][T14623] other info that might help us debug this: [ 602.980733][T14623] [ 602.990947][T14623] Chain exists of: [ 602.990947][T14623] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 602.990947][T14623] [ 603.003980][T14623] Possible unsafe locking scenario: [ 603.003980][T14623] [ 603.011441][T14623] CPU0 CPU1 [ 603.016864][T14623] ---- ---- [ 603.022309][T14623] lock(wq_pool_mutex); [ 603.026551][T14623] lock(cpu_hotplug_lock); [ 603.033559][T14623] lock(wq_pool_mutex); [ 603.040305][T14623] lock(pcpu_alloc_mutex); [ 603.044792][T14623] [ 603.044792][T14623] *** DEADLOCK *** [ 603.044792][T14623] [ 603.052948][T14623] 4 locks held by kworker/u8:31/14623: [ 603.058384][T14623] #0: ffff888032722140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 603.069318][T14623] #1: ffffc900026d7c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 603.082007][T14623] #2: ffff8880769ba460 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40 [ 603.092700][T14623] #3: ffffffff8e7f6cc0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 603.102432][T14623] [ 603.102432][T14623] stack backtrace: [ 603.108302][T14623] CPU: 0 UID: 0 PID: 14623 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 603.108320][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 603.108331][T14623] Workqueue: krdsd rds_tcp_accept_worker [ 603.108350][T14623] Call Trace: [ 603.108357][T14623] [ 603.108364][T14623] dump_stack_lvl+0xe8/0x150 [ 603.108382][T14623] print_circular_bug+0x2e1/0x300 [ 603.108402][T14623] check_noncircular+0x12e/0x150 [ 603.108422][T14623] __lock_acquire+0x1520/0x2cf0 [ 603.108438][T14623] ? check_path+0x21/0x40 [ 603.108455][T14623] ? check_noncircular+0xda/0x150 [ 603.108472][T14623] ? add_lock_to_list+0xc7/0x100 [ 603.108489][T14623] ? lockdep_unlock+0x5d/0xd0 [ 603.108501][T14623] ? __lock_acquire+0x13e8/0x2cf0 [ 603.108517][T14623] ? pcpu_alloc_noprof+0x231/0x1900 [ 603.108537][T14623] lock_acquire+0x106/0x350 [ 603.108551][T14623] ? pcpu_alloc_noprof+0x231/0x1900 [ 603.108575][T14623] __mutex_lock+0x19d/0x1550 [ 603.108589][T14623] ? pcpu_alloc_noprof+0x231/0x1900 [ 603.108610][T14623] ? __pfx___mutex_trylock_common+0x10/0x10 [ 603.108630][T14623] ? pcpu_alloc_noprof+0x231/0x1900 [ 603.108649][T14623] ? trace_contention_end+0x3d/0x140 [ 603.108673][T14623] ? __pfx___mutex_lock+0x10/0x10 [ 603.108685][T14623] ? __mutex_lock+0x30d/0x1550 [ 603.108703][T14623] ? __pfx___mutex_lock+0x10/0x10 [ 603.108717][T14623] pcpu_alloc_noprof+0x231/0x1900 [ 603.108737][T14623] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 603.108764][T14623] __alloc_workqueue+0xb2c/0x2060 [ 603.108786][T14623] alloc_workqueue_noprof+0xe3/0x210 [ 603.108804][T14623] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 603.108822][T14623] ? mutex_init_lockdep+0xdf/0x110 [ 603.108840][T14623] __rds_conn_create+0x130d/0x2250 [ 603.108857][T14623] ? __rds_conn_create+0x2d2/0x2250 [ 603.108877][T14623] ? __pfx___rds_conn_create+0x10/0x10 [ 603.108894][T14623] ? __ipv6_chk_addr_and_flags+0x688/0x7e0 [ 603.108980][T14623] ? __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 603.108999][T14623] rds_conn_create+0x43/0x60 [ 603.109017][T14623] rds_tcp_accept_one+0x44f/0xd40 [ 603.109037][T14623] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 603.109056][T14623] ? rcu_is_watching+0x15/0xb0 [ 603.109073][T14623] ? process_scheduled_works+0xa20/0x14e0 [ 603.109093][T14623] rds_tcp_accept_worker+0x1d/0x70 [ 603.109110][T14623] process_scheduled_works+0xa8e/0x14e0 [ 603.109138][T14623] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.109161][T14623] ? assign_work+0x3cf/0x5d0 [ 603.109181][T14623] worker_thread+0xa47/0xfb0 [ 603.109210][T14623] kthread+0x388/0x470 [ 603.109225][T14623] ? __pfx_worker_thread+0x10/0x10 [ 603.109243][T14623] ? __pfx_kthread+0x10/0x10 [ 603.109258][T14623] ret_from_fork+0x514/0xb70 [ 603.109275][T14623] ? __pfx_ret_from_fork+0x10/0x10 [ 603.109290][T14623] ? __switch_to+0xc89/0x1420 [ 603.109312][T14623] ? __pfx_kthread+0x10/0x10 [ 603.109327][T14623] ret_from_fork_asm+0x1a/0x30 [ 603.109350][T14623] [ 605.081146][T14623] batadv1: left promiscuous mode [ 607.781246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog