last executing test programs: 2.718939764s ago: executing program 2 (id=2250): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffffd, 0xe, 0xfff, 0x391c}) 2.527148978s ago: executing program 0 (id=2255): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400980, &(0x7f0000000040)={@_ha_fsid={[0xfff, 0x101]}, {0x6, 0x1, 0xfff, 0x6}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x1000, 0xbd, &(0x7f0000000140)="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", &(0x7f0000001140)=""/189, 0x8, 0x0, 0x13, 0xf7, &(0x7f0000001200)="547ad0e7fe552e4e32ec117395e8fa059e307b", &(0x7f0000001240)="83e2ec9f8ce23b48b2bba32bce97213952318f478fde7a4e1e9e251115095cd04767681d05cc869150ff78105ca63f376ae5a53846a9174c7fc994cad5de9f26c470ae188c9ed4d4a34833382afecbff930903054a57ad9650212435e04d0024cf3165ffe9de1a75d93031f552553b7e9eaed6db80f5abc88c8d8b2c1e482e0e940e4ef5a701934994db458f1568d78a690d4cb07811c72f00f5f3c6fbe1ee0f74a518e8bbe129c2a6dda993c9428bc8f6e455169e398001f1f78eecf850f81949fe3e9ea2638839a8544827364a5d054e91cd02315f790d90215ba652912e11f56ea40a8fe5271b9bafd5628936579069ea8b5e0b8d33", 0x4, 0x0, 0x5}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000014c0)={@ifindex, 0x32, 0x1, 0x2000, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000014c0)={@ifindex=0x0, 0x32, 0x1, 0x2000, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001540), 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001540)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@cgroup=r0, r0, 0x2f, 0x28, 0x0, @void, @void, @void, @value=r3, r2}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@cgroup=r0, r0, 0x2f, 0x28, 0x0, @void, @void, @void, @value=r3, r2}, 0x20) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001580)={r3}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000015c0)={r0, r0, 0x4, r4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001600)={@ifindex=r1, r0, 0x11, 0x14, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001680), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x44, r6, 0x328, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x44}}, 0x40) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000017c0), r5) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000017c0), r5) sendmsg$NFT_BATCH(r0, &(0x7f0000001c00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x39}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6f9c89b6}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32a8f6c6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xf0, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "6c3b5eb8e5ec279080a99b4dbac686564b6363ec47c60e1057a612fcf510c32fb45ed4befe766bf51a4e2aa812f319665e19ba69f428fcd3f73a27f4c3d0943ec994a561f8f7d717b10043b2286d4b80c6ca1491d4a11d51e77b59cbab89ee9bea1f8ac4333efe657a885a0867b1c7c491073bbc4e240e55035537c8c3a741ab1cc7a2fe325006fc47e8836426b2832387ea"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x89ee4de7832cea87, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x6, 0x0, 0x0, {0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x11, 0x8, "dc41c0732d19e383924c75f1b9"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xd}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x348}, 0x1, 0x0, 0x0, 0x4010}, 0x40040c0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000001c00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x39}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6f9c89b6}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32a8f6c6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xf0, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "6c3b5eb8e5ec279080a99b4dbac686564b6363ec47c60e1057a612fcf510c32fb45ed4befe766bf51a4e2aa812f319665e19ba69f428fcd3f73a27f4c3d0943ec994a561f8f7d717b10043b2286d4b80c6ca1491d4a11d51e77b59cbab89ee9bea1f8ac4333efe657a885a0867b1c7c491073bbc4e240e55035537c8c3a741ab1cc7a2fe325006fc47e8836426b2832387ea"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x89ee4de7832cea87, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x6, 0x0, 0x0, {0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x11, 0x8, "dc41c0732d19e383924c75f1b9"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xd}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x348}, 0x1, 0x0, 0x0, 0x4010}, 0x40040c0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001c40)={0x8}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001c40)={0x8}, 0x8) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001c80)={r0}, 0x8) openat$cgroup_freezer_state(r8, &(0x7f0000001cc0), 0x2, 0x0) (async) openat$cgroup_freezer_state(r8, &(0x7f0000001cc0), 0x2, 0x0) r9 = accept4$inet6(r0, 0x0, &(0x7f0000001d00), 0x800) bind$inet6(r9, &(0x7f0000001d40)={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe0d}, 0x1c) close(r4) (async) close(r4) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r8, 0x111, 0x4, 0x0, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001dc0)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001d80)={@ifindex=r1, r4, 0x1b, 0x20, r4, @void, @void, @void, @value=r11}, 0x20) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) sendmmsg$inet6(r8, &(0x7f0000002580)=[{{&(0x7f0000001e00)={0xa, 0x4e24, 0xfffffff8, @local, 0x5}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001e40)="40e06682486b08fa1dc502335ed7651b430067e0f58a047961feb836dda2e1e83b3559b8892b0d7182be95fb532e84761cee2672ce8cee6aed2a7f7aa5859ad74c764332259ae51f11b6d6c4f627288572a913a69aa7b3afd066fe43daff90cb71e0c0c1e74bd606492de2ceeb4245e4e7051e132005173d8073fa8ef70d6afb88da87aeb0a0cc382fc546ddebca642040408db4e406ca385ae524c28b1d05d9e8a856bcf0b1d10e8568e1191019e2b97cccb84346fe12a22128fd8d28c7f431c8b39cd6e700f546b34370da009b9e12712b933b7a", 0xd5}, {&(0x7f0000001f40)="0966f409dafc6a08caff1d31e2b93b77751e4b6a897d02578e30c6373fc3a1bb83c9340f42a0305c1d887612001e022c86d27c5d0a80bbc05dcd213bba4b2b4a9951ba038b749503a9242ecf7d2724c8a87792d880e792f617a3f216b251d063e72ab9e0edbb0b1262f832b6b4e1ad9c973d304616b2e6bab1a9bd0f0cf5c0e5989b3ba8f8cf3e3b", 0x88}, {&(0x7f0000002000)="3f942b2ad8da4a5c3077d24f27dbdb882a6888ceb7464ef3e545f48c346474a8bf162a59220cb73d87949315e983c7eaec8ae52e2daade7e232fb410379c06f7e74a8aa999a487decc747458a5f9017983fe49afb2edeee07d828f8de82bdf6c50c4cc6634cfba75116001b5743dbbe57fa8a6182cf0ee15780952c9f659a110eb78ff54c88561027f616e43598cac138e427c128a750b9c18d65140c9c60cb8e37f01afe09186de1b94bf1dc61117c2220053f547532ff7569af10f2da46eb46a78a315af1d3fc06b530797a9a48d3c24fbc09b6a", 0xd5}, {&(0x7f0000002100)="242b19f97e52308e13fa5f9c98414792facd7b59b3a93330680fa4dde404eb9e1ff46e88269b172c067a14f0ddaa9bcf", 0x30}], 0x4}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002180)="c9caca98a48bd6", 0x7}], 0x1, &(0x7f0000002200)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2b}}, @enc_lim={0x4, 0x1, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x89f}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffff369}}], 0x90}}, {{&(0x7f00000022c0)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xdf8e}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002300)="ed49f38d55db09e6a8c9496d1ecbfc3d4fc46a951f74df47f236cb01426e730a36e656f4f14338afada9248e9c67482b01e3680440138b97f25724ac32b90abc967f50ffe191a3d1088e1407e288f0e679aeeeaa22f59aa88bc30af8f13804815937a92eac472b1f1612499b68bd1062a9c2bf1e", 0x74}, {&(0x7f0000002380)="1088f309b9a22d7188af1967cdd69c1a1f617556d59afed8773c2046318612d064b78149a89faf2fe6f3bc53e751a55e8a2f659e5b0e1660", 0x38}, {&(0x7f00000023c0)="d747f2ee604d03696b01216550d22e4f4b456227d9e17a30bb36031fdccea155419b59f9a12d847dd34895f2ea1c0b1dd6050547549ddc20299a458893db6bb6ef40bcb8d613c45cd3428b1b2d1ba50ee42bea9d8c9647d4b502bf4dfbd8e8960909b8affe169ee551de", 0x6a}, {&(0x7f0000002440)="800439b0f47b4ea289257159fab653a510102ecea07f9bdcdc368b769902f50d422d7b67674ef0c57885d2d4a63cc0a1369c02cf15cb48c6738c7ea0750898fc2ea15f2e96503a228a96a03c144bba2e5d236922222e010fb0801992ab09ab169d0fbd51019bf0c1ad1b240ce00be2f7379568fce6ce867caba64091eb94b7c5ea8efe4346847b5a2494afd7e39aafdcd354a827cb8a67557ccaefd1f262a6bf0522e28ed2078e5809ec338e961a1ae4a202bc62", 0xb4}], 0x4, &(0x7f0000002540)}}], 0x3, 0x1) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x2010, r10, 0x100000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002640)={r4, r1, 0x25, 0x5, @void}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000002680)={0x0, 0x4327, 0x5}, 0xc) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x44, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 2.464365171s ago: executing program 2 (id=2258): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x5, 0x9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES64=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) 2.311621439s ago: executing program 0 (id=2259): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273"], 0x294}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000040)={0x7, 0xdb, 0xff, 0x86, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x0) 2.311237706s ago: executing program 3 (id=2260): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x80408}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x7, 0x6, 0xffff, 0x7, "8cd69b", 0x80000001, [0xfff, 0x4, 0x2, 0x7fffffff, 0xdf, 0x40]}}) 2.288905827s ago: executing program 2 (id=2261): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4ce0279d80000007910000000009500"/28], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0xfffffffd}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x158}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x80000001, 0x0, 0xce03d4}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000600000010090000000000000000000000008300000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000b80)={@remote, 0x0}, &(0x7f0000000bc0)=0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r0}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0xded, '\x00', 0x0, r2, 0x2, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x20, &(0x7f00000009c0)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x6, 0x5, 0x0, 0x2, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], &(0x7f0000000ac0)='syzkaller\x00', 0x5, 0x45, &(0x7f0000000b00)=""/69, 0x41100, 0x2, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0xc, 0x10001, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r9, r10, r11], 0x0, 0x10, 0x4}, 0x94) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x2, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x48041}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x728, 0x478, 0x0, 0xffffffff, 0x118, 0x0, 0x658, 0x658, 0xffffffff, 0x658, 0x658, 0x5, &(0x7f0000000080), {[{{@ipv6={@loopback, @mcast1, [0xff000000, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'netdevsim0\x00', 'sit0\x00', {}, {0xff}, 0x2b, 0x47, 0x6, 0x5}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@multicast1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, @icmp_id=0x65, @port=0x4e21}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_virt_wifi\x00', 'veth0\x00', {0xff}, {}, 0x3a, 0x9, 0x4, 0x20}, 0x0, 0x318, 0x360, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x9, 0x6], 0x80000001, 0x10, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', @local, @mcast2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, @remote, @mcast2, @remote], 0xb}}, @common=@rt={{0x138}, {0x9, [0x3, 0x5], 0x5, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast1, @local, @empty, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xb}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@private=0xa010100, @port=0x4e22, @port=0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x14, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0x7f, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private2, @ipv4=@empty, @port=0x4e22, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788) 2.163746346s ago: executing program 3 (id=2263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001ac0)={0xc60, 0x32, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x93, 0x0, 0x0, @fd}, @typed={0x8, 0x4f, 0x0, 0x0, @pid}, @nested={0x1c, 0x144, 0x0, 0x1, [@typed={0xc, 0x106, 0x0, 0x0, @u64}, @typed={0x8, 0x14d, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x136}]}, @nested={0xc1b, 0xd8, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x110}, @generic="871e79a776ce3d4dd883108f8f6b7571aa10af6e4040487548f6e5a0b7c2d757891bf7468e5b1e9d5a41c9ced7f57f143f635e3ad8e4503045b830908300609eee28d313738ef361375dd4c7aa52ab9a346c8c0d8f395b6abf69e0ed4324665e24fbec6809d21cd08fedbed2e566654d7125c10ceaff6bc00b3d6f98d97b368635fb4a18757acd1a40272a9dbdeae8d817c45726758c7120612170650530a3bf9e134aecb6a678431711e4ac3ecbbd6816c4ea9e27d60e9e6a46ab04f637d8b74772173d31b9d1bcaca7cfbf61c5c2ffcbad0a0a381eafa221bf94451191bd73072ef7831e4ed1029b91ec8cea123835b8b3865dd05679ec3e009b890254710be7f6848525d1a99e303db7d49fd1e3a3926b684c7179cc3985d6c8d26480e7b7d62cb0d7a8de439c74960a195b10164a2a2f77ace515b47e49aa4f8d4c3393ab545e3c036587451c754a279bce9f3479e02d862d8f2fda354a40de7448ebfb12ff45abf7a4b18b41ffefb9cf89e03dd18ccd71b5765a24c744bf374f31d924d7eeae6d8d3f8a96c13214f85462e906ceb2134d1afbf2feeba4c04619185d1c41bc3601ba37fe2c3fe252b22385e50119072d314e38ca395b681300dfdebe07b2ae9e12921b27d6ed5c09e9c936da6e88c1700d2cecfccdba1cc0c4b0895aa82f343973506f9f3da877f5c362364c890a7ffecfe2d37c70627854b9e86706be7fc31699de5f5f5036246e7bf9c8b4fd79f0ed433bb3f05a6cf48bfa69c9ad88b991f2acd44cc01d3b5c9e09dbb6d717b2398e380638402aa6addd88dfc065f790992262fa17a13503dce9b2596d26efaad4c15551ee404b1ce2ca1a065d038fbc975ad5fdfccc7cb3b95bcf6ddfbd5da522aeb3ec37ed27d438e59071916037c6ec8413ff1095f87e090e8e0e44b1ee633b4ce8457290badc7a63a47c55c388f5f78526c0a8ee5436487888f06bc4f750ad484490f39269eca8c23ff548ec432514f4953a21549bc94827e6e545430b78d870aafc9186e7e22bcba2c2446d60a4830b8983a6b9170de2475d829a7233c0f48b60e9dde0bf9fcae75bc992d90b281dcaeb86894cc088745c01f7b4246fd443aeb4c0b46dfdbb7cd0727231a06b44eb082a74f584ac0614c44b5c2f8cad54669bfce5f3fb633efaf1e41b6c734a1ee0301157540a42c638996973f1f99ab0441f7f3250908e74037773b4adde32d7a158467b2298df7c599a9ebad840a6212700a64777c8050289822d34eec67533d1d2865ccb7a899b6a42feeb82a8ab62f66331f915c5134229599bdb42d75c42c277504dcdb7ac3026a2fe731b893c68237eb3b6ef82249e7627ecd0dc66d6f796593fe9427fd468db6292c9d685bed0f286a90c95451cdf897f7617bf691bf92745fde98728481af7241f04ac4b3c13b7d0258475a5a4bbce286075e0b6b3eff6f54697e70a20a2f17d0be1ae93f313554f192451c2a7289b743be0b6bbd71e735540cfe78b5b59c5669aa94ca0282db5f8351771c33fc9c7d974d5b6d7bce18ed9eb6c8431a4da33be531a67f57dca1db012e5d4c56cbb1af281d17ab0785ec6ddfedf92a1c7b3e27f713c68aa5723c4e494fa6b7d05d3085404686761f93713d4d5f208940362a1935de30b0579aec20ad9be9cf6213779f322bf5079394484585e499a4bc8ef2cdbb209023182300318c83e8d19d48ffa41a95c77aa46d3c2f87caf826c36ddfa4695cc8e390cf8a6494576d66a530c4d6cd3242a0d4cab540586baa18ec426ed178ebbc9adcd56460f8b6f794104c37d9ba074c834413399de91ce73c9dbed335618cc3ad80760373b86392a51f6c965317354cdf1b90807ea893a79ec8bf04f81598023c134af8e1d52d256cf6d86256728de16ad45ac383e7bdbd088d02111245c0e47e997b16deec3c94d44d16fc28e87e5f4721d9b9509369c32944de0171cea36f6ea85bb0d7b9eb34d8f5d448355f1a3dcd4ef432bef588a7e18831a9853b033f515b560d30fb9c8ed6bd2fe5385aec95756245adfd4622ec8dfbc5ad0e36614b8ea297d64048baed928c0cc67a0905fe8340923894a93ebd76c952e2999fb819c1ecc6dd3693ff378886ebf60277b8392046dddcb2da611f06005be4e4c5755ccd570420e86ff9b7fb5d0ed7f89f3d09325ef8fce965c582725722b667c0fbcfe049d64b14c948051976852141f27f43310d09db97624c9b9feb9d22bf8fa49da8cc2ab8eb0f61f7f95cb1470c69919ea3eba5bf48c06d9fb9fe964ab446cd42a52c0fc7c5ec2f18075439e49719a3dc5fad88ea7b386abd36de7c3ecce6f3679e78572eaae2d875ed9bce85452fca0f2cd08f8104d4b863ea8e922aa1dfe3e430401a53b6006ca4dbee24af30c29670bb2f6433abf7b3efa924506bca7a015bfd521410bf2b936f3359ad74c52b4e0c43149f05b62e41d4fa1dba34bd8dcf80a4057cd071d44ff68dd409d822d0263e39656df42a95b47887cea1052bd0b87880cb22fe8a4ec420712977eb1700ca7cf0519f49a6dcf9ae747a5fcc93192f5021555f3a797d5ea71fbb56d6d0fd8866744d8605c2dfc17ed87756299aaebb52d3f0877e7ffedfb330c0a073eff1c2557263716b1156a98ad44bcb82cff8162c6b795016b7ffb801bff6366004cb934096b8659db0e2c35bb5c6376f5623ed415cc5b10c92eedb0fcca374cf460223d2832f08c5d74e8a674eaca0c6aaed32061267c97156320a155ac2f0e89d2fc15eb88b03ae3b73cd7521edff36f501b7050a3636432fd88c982cb010895448d9587dd71b64a428eebca4016b1f33688abca49ec566bf91531adace55ff83c7bb8cdfa8383bc60a8c318ecf7d8f13361f87898f629effb7249b35a7b3e95008763ddad6692034ad2b421c36c68611885c592f8827ef9251ba8c3a7130c9c59917a2a0c38df3e3b82ad570729de06689175a433b2acc99c21749f5c46d58a142d7eb99b1dd3a48d10de5b39cb59539555e8fac768469cb0b0ea4d7e313b411fd01487b5476498c8d822a68d2bc9e20f08b738a7cf37a6708e7dcd23ae78961c5672e4e6691486eef7a6afb59c6344efa9fdcaeade7e3d5493683c3fff3ad203c7bd5f1c8271231c3c1b413e10da53f6a72667ac852d98a5a8bd4d96bd29650a8de06b29310b17b8a85c37698fedd6057a067d0d505c6478caecc586296a04f0d67a78d342fda3b67f54da96cf907df67abfbdce9fbfe4c32af581fa37eae51a9a6cab6fdc31e86b396cdbf86137e536164738ffee7284bd81c5eabc9bb8bb16f849f6dbe8dee0dd436b4a9e4a5fe478529cba81d940fd823aea8a97a5ac0c09cc740bfa12f45525e4a9f18a6c9993959cb68b6cca067890cf17f0f3b77cca603d24ed14bc03b36b4a9831f27bfa6dd415d329dda9eefb6db24a1e5bfa98d8bb9670fc11072c65a2877c044286482282d284b2ed5d511474e92ab3b9bddb626015012401008f93a8ec41acf8f82c3953668e75f41deef01f9d571ba4a411260c2ab192ed06613cc5db6319b00db28ba3dfa2adc739fb390469a4266eb6834df943a2396d9aadd04d1f3ed790939319d71037a1f56b5760c358d40009a559627a0c66486e088276209b7d1461eda63b008bea0f0ed30e2e7134bc38dc00f67c72cb9d24aab539b412a94b06006d8eee43c1c393e33154d8f60ef0182ffe429c60311f963e0596a0a54652d6817097df6d02440d022402f0c76e97046cc9019a1af97963f2ffce514a45f1db5c5b19944f25cf1c7092b529ce140d3f45fe1853ff4f3fdf62bce72a7d1a0951473a01016a303ba3aebdd1c9861727d84b18115d4f008c1fcfc102de245244637e131171b7490fc98d479d4044923abfde34394b0a68ee44bc58b5b6c94143e4466e87212fc463586225acd1ca42a887c828a3cfe116c48917dcc0e930ab185ac3d2fb73f7f60d8c17ebd70264b55b7dd6ca6597e1956f5324668e749ddf9a1311e4f94f0aa07312cd9ca1281fdee813d18a53b1c8e1f713411aeac7d7cd6b26c7cad7fcf67948ab74061ab27eff6ed22f6b727fc5be3a97d5e0d50a574ae886e7c07c39161feeed36fdea59ca9bc84c0d6c55b179daadb4e9330d6d2a344a8f65a4ae38b06132795264838bd21030ad761516308d991bab054f73926c3a5eac89a4e391a59b0ac1b8a2b96a6468a4a1f7f3470bcddf3b35b6a312f6ad3009b244e4aba7f9068bf8e9d63993ae3c43381bfbdd71afdb36248590fa098bdcc42c3bd8a10e61dd91cbedab542369135f9fdedf4742b79fc175608f8b4f594647eb0e114b25a166c8b1e668f034d25b5fd2179f"]}]}, 0xc60}], 0x1, 0x0, 0x0, 0x44010}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) 1.935637678s ago: executing program 4 (id=2268): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040100000100000002000000000000000000000000000000000000002511edc1c4079f26e0ac386c881bf202abc398abb9c4c5d65130f2e330257d9feef1a722772483225ce6afea89383721f26795067eed2ce94ca7c13ab4d38dcddccac69a60e2b40142667cd93bd7c264a71061382fdfe2386cdb8cbb3bdbd42c0c7bafd46105e339193a005f10727d25bf685165e25f1fd3a5e902"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x9, 0x129, {{0x16, 0x4, 0x3, 0x17, 0x58, 0x64, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@ssrr={0x89, 0xb, 0x4d, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0xeb, 0x0, 0xf}, @noop, @timestamp_addr={0x44, 0x1c, 0x3e, 0x1, 0x4, [{@empty}, {@remote, 0x9}, {@local, 0xe68b}]}, @ssrr={0x89, 0x13, 0x96, [@remote, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r1, &(0x7f0000000040)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x59) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8003, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000303050100000000000000001500000308000340000000ff0c000200fffffffe00000e420c0002000000002100000001"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x2004c851) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000200)) 1.787369089s ago: executing program 1 (id=2270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r1, 0xf5f) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, r3, 0x0, 0x1, 0x9, 0x8, "ae8cc62160a5d3c94b9a0cd787a042cc7ddee9f2c7179b49c69c3c8852c47bda639ae29d0f00ec223a695e7920cc9114143ae7222b96eb0dc72b93f302796c", 0xe}, 0x60) r4 = accept(r1, 0x0, 0x0) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/240, 0xf0}], 0x3, &(0x7f0000000600)=""/28, 0x1c}, 0x7}], 0x1, 0x42, &(0x7f0000000680)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a010200000000000000000100"], 0xe8}}, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x8, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffa8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000000300)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24000004) 1.358842347s ago: executing program 0 (id=2271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xfff6}, {0x1, 0xe}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/114, 0x72}], 0x2, 0x0, 0x300}, 0x562a}], 0x3ffffffffffff27, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000140)={r7}, &(0x7f0000000040)=0x8) r8 = socket$caif_stream(0x25, 0x1, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r1) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x94, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xfd}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x7}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x1}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xa}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xee}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6}]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x7f}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1000}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffff7}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x40005) accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r7, 0x7fff, 0x16eb}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1.321091647s ago: executing program 2 (id=2272): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000400)=0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_ethernet(0x1022, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='veth0_macvtap\x00') 1.22266907s ago: executing program 3 (id=2273): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34010000140000012bbd7000fbdbdf252c81fd00010081cffff541902582541a256c969c2b0879e79342200321a973062c0e935e701c919e2b51d97fe7a2e308b31dfd46f41a9b72bd186c5d1d7c29359e6a2b26afd24c38f30758ee0eeeab772d207c27809dab63955f86b9aa8148f748e7700d209d19cccf87acbe9f11fd3067aa0363a34a15f05293999599e417fd8835dd6dd362e41267fd756f03800343a8991aeb56fcf86888b6372489fc39791d92a9ed0b34d7f3ff053b6de2057619cb20aad419926e114efd8369f5d0e8b72632308efd7ec240904133472480667ad6f7ef894267204037739b8324b33f14ef7651b97c18c6f0ea3a5671c361671e5c8165bc39152a028c9542e966e44c5bce557d62e34c9f822e5f0000001e000100845412f509350f5138fa2264dace004716cf14"], 0x134}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) sendmsg$nl_netfilter(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0xf, 0xa, 0x201, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r3, @ANYRESOCT, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0xfffffd9b, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.200560168s ago: executing program 2 (id=2274): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.150646799s ago: executing program 2 (id=2275): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x4, 0x0, 0x800000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x20, 0x2c0, 0x6, 0x80, 0x4, 0xe5, 0x80, 0x78, 0xac, 0xa3, [0x90, 0x6, 0x5, 0xff, 0x2, 0x88b1, 0x6, 0x8]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, 0xffffffffffffffff}, 0x94) 1.002828667s ago: executing program 3 (id=2276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xfffffffe, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async, rerun: 32) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r13, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r15, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async, rerun: 64) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, r13, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xca, 0x2a, [@ssid={0x0, 0xa, @random="12b4efaa9b874d078ad4"}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @void, @val=0xf, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x34, 0x3}}, @ibss={0x6, 0x2, 0x2}, @mesh_config={0x71, 0x7, {0x4, 0x1, 0x1, 0x1}}, @tim={0x5, 0x91, {0x9, 0x4f, 0x67, "765c7d03b2ec0c22966a13a0c9fa39da1277ba1df79845c67ea8044e299744ecdad263b8f341fe8f88f07cd4a230eae59fd961873ee86cdc3a7168fec9b0c6e3fdee0ef29116e7bcc5709a9174239a5d128fb3e1f0342cc3d3e3be877b6fb85eea2fef3fdadb4db5974e21d7ba4bbd245ec96fac75b249f96d046dae81a85957acc8d8c561a6d9dc920b7dec503e"}}, @dsss={0x3, 0x1, 0x28}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0x36}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x766fb1d192742fd4}, 0x48000) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) 946.0761ms ago: executing program 4 (id=2277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 893.161023ms ago: executing program 1 (id=2278): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080), 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 711.160255ms ago: executing program 1 (id=2279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r1, 0x0) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8df}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000040)="24d59ac41cfeb3d3e6a02fd215b566f667560630ce51a0e71db7160139ea902797a495ae5f876087ead4e7e4f7891cf31a5aec7836831e77f6e69d37b2990cc2fbdbd9f882f730f8308c7e4d5cdd9a74ec5f21e95371b6692f4cfa33d7b7e9e0cc55fee0a1c1b88ed1b2e84fb91adb64111dca0001720eae536dd4a03bebf2823ff58f577989062f56d8438aa636588b94484e680f4ea5cc599553720183b77e089d6da91819d996d07260dfd66b22942c9321549fe96ba51be15e237591", 0xbe}, {&(0x7f0000000100)="4428c8f59cc4e8b19aa04492a99de866c99fc3862643c655879110174b0faee023a49b2c7911", 0x26}, {&(0x7f0000000200)="51a1fc209c74849af9cab863fafbe083dcfaecc592ae86e321f7a0d594056d8e1856ce4eec0ffebd829a5534b5e7dfd8cb00b651916c0a5cc03f67e9475cd0d059d6e72e85617d6eb890c6efc93f5a2690cf1e16e3e24836275c", 0x5a}, {&(0x7f0000000280)="16435ed08d7eef5c17fee3023882dfa69510f24d58a009fc92a2048a6319ac1017ff8fb47cc66acfd9cb22d051f730a53cefd0e7226d1a6e58d4cec370eb2e33ae10f156b35ec9ffa3b06e710f9de7092b7b6562e972309d68294105da", 0x5d}, {&(0x7f0000000300)="2b43084413c88260b7bf8d6cddfded54e2d550c1ca3e7203bd108d77845fbf8d73c0bcc4cf5c974efa413970e5f2b79decf6cbd671b897a9ea91294ebbec8c62ad20f4304232c24540ac0ed6bcc1e1a6a44049a15af22224696234c19337ead5c539ceca95ade273c590a9f138bf1e43e2458cf2846fd3d7f43a4e8775a333bc8a16ebd5", 0x84}, {&(0x7f00000003c0)="e23e9971b830c15da7b3aa4ef82e2ca098313a07acd476615960512d61bc0b2741d65aded9d3832075e864355df5160aae80ed98a81f3636b38c3640c5630d06ff63e8a83559b5b9932dcf1691ed665792667d60d12fd958b88f10d6b5dfab8a0e88b3c147f9f409a62a95ae29084d6b8cfb7f8a66f407cee0", 0x79}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="ea89663ba8f8a9828adf82c2e9d4ad63f02c055352c9c39f478d52af44055c32", 0x20}, {&(0x7f0000000600)="ba0286998c2d50dc0f663e44f16cf67ce00d965373abe39e4c79a72a1d7fd13748bbc9baf2cafc61e12ed178", 0x2c}, {&(0x7f0000000640)="2722c8ad45794d7f38baf5f18ebd9cc486872fb326a100db49f7b6dc2a7e4dc7d96b68eacad1c7de7308e9200a1650ad6c674ed775d87cd37a9e649d726ffcbf5358881dd6f74c670c96fe9afd941a0741eb2eb04afcd5d238", 0x59}], 0xa, &(0x7f0000000780)}}], 0x1, 0x40040) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000440)=@phonet={0x23, 0x1, 0x1}, 0x80, 0x0}}], 0x2, 0x0) 708.796578ms ago: executing program 4 (id=2280): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x808}, 0x4000044) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000240)={{0x0, 0x0, 0x8, 0x2, 0x401}, [{0x10, 0x7db68cf, 0xc, 0xc0}, {0x401, 0x6, 0x24}, {0x0, 0x6, 0xf9, 0x8}, {0x3, 0xb, 0x61, 0x6}]}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x10c, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff507c}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffe00}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb70}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x184b}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2dc78339}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20040051) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) 626.913076ms ago: executing program 1 (id=2281): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='\\.*^\x00', 0x0, &(0x7f0000000180)={@align, {0x0, 0x8, 0x1}}, 0xffff, &(0x7f00000001c0), &(0x7f0000000200)=0x8}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x4040004) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r3, 0x4, 0x8, 0xf, 0x1, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x40, 0x9}}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x13, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000007c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x54880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 549.991816ms ago: executing program 4 (id=2282): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300f8ffffffffffff0500000008000300", @ANYRES32], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 463.652118ms ago: executing program 1 (id=2283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800500150000000000080012400000000005000500020000000500040000000000160003"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0xa4, r3, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xa4}}, 0x4000) sendmsg(r1, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) 371.960605ms ago: executing program 0 (id=2284): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x4, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) 371.013636ms ago: executing program 3 (id=2285): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r1, 0x95052000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) 302.449722ms ago: executing program 4 (id=2286): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) 176.540124ms ago: executing program 1 (id=2287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) socket$packet(0x11, 0x3, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x3, 'gretap0\x00', {0xd}, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000480)=0x84) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000002c0)={@loopback, @multicast2, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000004c0)={r9, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010101}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 173.953463ms ago: executing program 0 (id=2288): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) 83.770149ms ago: executing program 3 (id=2289): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x21, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c0}, 0x20004910) 83.295241ms ago: executing program 4 (id=2290): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b2a, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r5, 0x2, 0x70bd29, 0x100002, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r10 = accept4(r9, 0x0, 0x0, 0x80800) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r11, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x15, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004015) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) recvmmsg(r10, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1}, 0x3}], 0x1, 0x40000060, 0x0) sendmsg$xdp(r10, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x4, r2, 0x38}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="ca5d999c0ae7170b677ba06ffad26d76e30bd93000fa1af543f35ff9af6a828ab612aecc077147eb9ef691882f49b9d9cbe3228d0f0d23a2", 0x38}, {&(0x7f0000000180)="6a328d8f794cbcc8d1be9869d315d4fbed635ba7ac038da1de705dc5b07ac79ae4b70adbaf00b31aa96add1deb89b5e5e6b7d6ce9be479e25f1fe15e5af7e80ca332cdb5b29a8998439e0265fa638b146059998d7597df9e62cc27a831b9e533d59b613bc6536dfbf698d5c77259b76be74cac8e5cbd573c9d912378ff1b788a97c5fa9de0d933763e2b3062df2872810cc6fb6d6b7fc924ba132b92b1a1032e3e70fa9acae5c743d7b3b0e4475df1f002163fe5ece7773ef7d00f5305c591319380094b5e3b5ab79326a016936972f9d03b12a117600e", 0xd7}, {&(0x7f0000000280)="453dff096c42e576538ff2545f4c4eb7db0bb7a3dfbcf3cde998c2a8a026aea478b0f2598480d5101c6f4becd01d479a0c3164e3260b7348197b55f82cb20ac9055bc48fcb69023a9e82f748fb4b8440286445", 0x53}], 0x3}, 0x4040090) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @null, @bpq0, 0x8, 'syz1\x00', @null, 0xfff, 0x3, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) 0s ago: executing program 0 (id=2291): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'wg0\x00', @local}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f00000003c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYBLOB="4246b0fe2010dbc32eaaa21264992672ff0900271e4e7cf738f7886d9381474b9460"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="925b349ea6b39e0361c5c85c1040408815121a6122274f215f3669c2dd6be20dea3a23caf847a6972ec95d4956bf448fb1914aae7bf7818cbc2a414078d4c4a30dbfee11242a45fff014a322b50efae4", 0x50}, {&(0x7f0000001ec0)="ace7554d97072f48f8c4bde07358fc81a08edd792e1c460b2a38f029c6b0ac1560b568eda7fd761c9526d8cd8889e57fc958f830509972aecc730c7d54c81ad18b1edead8cb1510b1a1fa8652f8cafa77e8adfd56b548efc57e134a13fe375879920aa95560d5815a14749f81e9dda65e1bd62020c98b39f3dbe", 0x7a}, {&(0x7f0000001f40)="040ee99e50fbe93501ddb60c68d7d3977d4a7d18e9116abc02abe178f81e602c80353811e8a1e151a6fb2d1482566ebb43b4cb21027ae13a2f1dcabaa42c7d8c218b9b637d1ca26c54b40aa5ee211a70673ec702433f338389c071b71cc2d01b10a8c4eb627f798127c83497050efac866ef6f48c23d2a9b63566ed523931321a436d5d16c85747dc2533f27254855061c2817286f41c4996106e4e46ef0dd0926", 0xa1}], 0x4}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x101) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000280)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r10, 0x0, 0xff00, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FICLONERANGE(r12, 0x4020940d, &(0x7f0000000000)={{r10}, 0x101, 0x9, 0x5}) kernel console output (not intermixed with test programs): 18 callbacks suppressed [ 93.658881][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 93.772106][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.811494][ T6084] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.842158][ T6084] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.886084][ T6084] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.926789][ T6084] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.979251][ T6444] netlink: 548 bytes leftover after parsing attributes in process `syz.4.121'. [ 94.036670][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 94.067098][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 94.076855][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 94.147993][ T6454] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20002 [ 94.235226][ T6456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 94.260717][ T6456] nbd: nbd64 already in use [ 94.402212][ T6471] xt_hashlimit: size too large, truncated to 1048576 [ 94.516306][ T5850] udevd[5850]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 94.585479][ T6480] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 94.638854][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.648882][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.860660][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.989415][ T6496] syzkaller0: entered promiscuous mode [ 95.003540][ T6496] syzkaller0: entered allmulticast mode [ 95.029967][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 95.069504][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 95.294676][ T6515] netlink: 144 bytes leftover after parsing attributes in process `syz.0.142'. [ 95.358207][ T6509] tipc: Started in network mode [ 95.371586][ T6516] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 95.382997][ T6509] tipc: Node identity ac14140f, cluster identity 4711 [ 95.391372][ T6509] tipc: Enabled bearer , priority 10 [ 95.398681][ T10] IPVS: starting estimator thread 0... [ 95.502196][ T6521] IPVS: using max 35 ests per chain, 84000 per kthread [ 95.885712][ T6550] netlink: 68 bytes leftover after parsing attributes in process `syz.4.152'. [ 95.929221][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.126629][ T6565] netem: invalid attributes len -24 [ 96.142982][ T6565] netem: change failed [ 96.250145][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.333255][ T6577] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 96.519520][ T10] tipc: Node number set to 2886997007 [ 96.581681][ T6587] net_ratelimit: 1 callbacks suppressed [ 96.581700][ T6587] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 96.692010][ T6587] xt_hashlimit: size too large, truncated to 1048576 [ 96.971884][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.036608][ T6617] xt_hashlimit: size too large, truncated to 1048576 [ 97.214149][ T6616] bridge_slave_0 (unregistering): left allmulticast mode [ 97.246083][ T6616] bridge_slave_0 (unregistering): left promiscuous mode [ 97.269193][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.383320][ T6630] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.623540][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.632986][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.708027][ T6646] tipc: Invalid UDP bearer configuration [ 97.708077][ T6646] tipc: Enabling of bearer rejected, failed to enable media [ 98.012897][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.076870][ T6671] sctp: [Deprecated]: syz.3.191 (pid 6671) Use of int in max_burst socket option. [ 98.076870][ T6671] Use struct sctp_assoc_value instead [ 98.136970][ T6673] netlink: 'syz.0.192': attribute type 25 has an invalid length. [ 98.178468][ T6673] netlink: 'syz.0.192': attribute type 28 has an invalid length. [ 98.189319][ T6676] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 98.304266][ T6683] syzkaller0: entered promiscuous mode [ 98.319094][ T6683] syzkaller0: entered allmulticast mode [ 98.608373][ T6697] pim6reg1: entered promiscuous mode [ 98.633061][ T6697] pim6reg1: entered allmulticast mode [ 98.667283][ T6702] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 98.708163][ T6699] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 98.767646][ T6699] bridge_slave_1: left allmulticast mode [ 98.805339][ T6699] bridge_slave_1: left promiscuous mode [ 98.820276][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.861262][ T6699] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 98.897832][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.985480][ T6717] __nla_validate_parse: 9 callbacks suppressed [ 98.985498][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 99.053287][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.102589][ T6726] netlink: 112 bytes leftover after parsing attributes in process `syz.1.211'. [ 99.369498][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 99.458222][ T6752] netlink: 'syz.1.220': attribute type 29 has an invalid length. [ 99.485133][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 99.530728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.759525][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 99.770248][ T6771] openvswitch: netlink: Unknown nsh attribute 0 [ 99.954850][ T6776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.227'. [ 99.992369][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.230'. [ 100.013091][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.230'. [ 100.031001][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.230'. [ 100.166858][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.230'. [ 100.248750][ T6800] xt_l2tp: invalid flags combination: 8 [ 100.362538][ T6801] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 100.384071][ T6801] bond2 (unregistering): Released all slaves [ 100.911064][ T6826] "syz.4.242" (6826) uses obsolete ecb(arc4) skcipher [ 100.954297][ T6836] syzkaller0: entered promiscuous mode [ 100.960118][ T6836] syzkaller0: entered allmulticast mode [ 100.996875][ T6836] block nbd0: Unsupported socket: should be TCP or UNIX. [ 101.476529][ T6848] tipc: Enabled bearer , priority 10 [ 101.492967][ T6859] netlink: 'syz.2.252': attribute type 21 has an invalid length. [ 101.628611][ T6863] net_ratelimit: 4 callbacks suppressed [ 101.628630][ T6863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.845169][ T6871] netlink: 'syz.4.256': attribute type 11 has an invalid length. [ 102.679524][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.978542][ T6929] netlink: 'syz.2.266': attribute type 58 has an invalid length. [ 103.125652][ T6939] veth1_macvtap: left promiscuous mode [ 103.954842][ T6980] ip6gre1: entered promiscuous mode [ 103.973692][ T6980] ip6gre1: entered allmulticast mode [ 103.981142][ T6982] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 104.195709][ T6995] __nla_validate_parse: 18 callbacks suppressed [ 104.195725][ T6995] netlink: 64 bytes leftover after parsing attributes in process `syz.0.282'. [ 104.226473][ T6980] macvtap1: entered allmulticast mode [ 104.237478][ T6980] veth0_macvtap: entered allmulticast mode [ 104.625132][ T7019] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 104.824824][ T7028] netlink: 'syz.2.289': attribute type 25 has an invalid length. [ 104.898242][ T7020] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 104.978881][ T7019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.287'. [ 105.020967][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 105.300748][ T7053] netlink: 'syz.0.294': attribute type 5 has an invalid length. [ 105.508878][ T7070] netlink: 104 bytes leftover after parsing attributes in process `syz.2.297'. [ 105.549297][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 105.558479][ T7074] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 105.603327][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.297'. [ 105.720366][ T7080] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.300'. [ 105.817141][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.301'. [ 105.921961][ T7097] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 105.972221][ T7087] bond2: entered promiscuous mode [ 105.984777][ T7087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.088100][ T7102] macvlan0: entered promiscuous mode [ 106.231206][ T7108] netlink: 64 bytes leftover after parsing attributes in process `syz.2.308'. [ 106.307285][ T7107] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.308'. [ 106.675708][ T7131] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.703135][ T7131] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 107.070462][ T7155] netlink: 'syz.3.322': attribute type 30 has an invalid length. [ 107.231747][ T7147] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.269692][ T7147] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 107.368615][ T7148] macvlan2: entered promiscuous mode [ 107.383235][ T7148] macvlan2: entered allmulticast mode [ 107.407329][ T7148] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 107.466584][ T7155] netlink: 'syz.3.322': attribute type 30 has an invalid length. [ 107.531741][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.545706][ T7146] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.688735][ T7155] netlink: 'syz.3.322': attribute type 30 has an invalid length. [ 107.799385][ T7191] netlink: 'syz.4.327': attribute type 21 has an invalid length. [ 107.819338][ T7155] netlink: 'syz.3.322': attribute type 30 has an invalid length. [ 107.838543][ T7155] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 107.856575][ T7191] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.872952][ T7191] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 108.365162][ T7214] gretap0: entered promiscuous mode [ 108.470659][ T7214] gretap0: left promiscuous mode [ 108.494309][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.569539][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.900709][ T7232] tipc: Enabling not permitted [ 108.909923][ T7232] tipc: Enabling of bearer rejected, failed to enable media [ 108.943869][ T7233] veth0: entered promiscuous mode [ 108.973718][ T7234] veth0: left promiscuous mode [ 109.209675][ T5162] Bluetooth: hci4: command tx timeout [ 109.290058][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.529126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.611185][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.686316][ T7274] validate_nla: 1 callbacks suppressed [ 109.686334][ T7274] netlink: 'syz.4.350': attribute type 23 has an invalid length. [ 110.318419][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.439640][ T7281] syzkaller1: entered promiscuous mode [ 110.459158][ T7281] syzkaller1: entered allmulticast mode [ 110.569162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.650987][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.822792][ T7317] netlink: 'syz.1.361': attribute type 64 has an invalid length. [ 111.002531][ T7324] batman_adv: batadv0: Adding interface: dummy0 [ 111.025956][ T7324] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.131924][ T7324] batman_adv: batadv0: Interface activated: dummy0 [ 111.151708][ T7331] erspan0: entered allmulticast mode [ 111.365837][ T7345] nft_compat: unsupported protocol 0 [ 111.394758][ T7353] nft_compat: unsupported protocol 0 [ 111.571545][ T7360] __nla_validate_parse: 8 callbacks suppressed [ 111.571565][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.374'. [ 111.617620][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.374'. [ 111.630114][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.374'. [ 111.630374][ T7363] Bluetooth: MGMT ver 1.23 [ 111.660932][ T7363] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 111.719941][ T7363] netlink: 'syz.3.375': attribute type 39 has an invalid length. [ 111.917662][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 112.005948][ T7374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.413044][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 112.528195][ T7402] 8021q: VLANs not supported on sit0 [ 112.612284][ T7398] tipc: Enabled bearer , priority 0 [ 112.649383][ C0] net_ratelimit: 4 callbacks suppressed [ 112.649401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.661142][ T7414] netlink: 'syz.4.391': attribute type 3 has an invalid length. [ 112.718503][ T7414] netlink: 666 bytes leftover after parsing attributes in process `syz.4.391'. [ 112.721273][ T7397] tipc: Disabling bearer [ 112.809538][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.984242][ T7427] netlink: 'syz.1.396': attribute type 21 has an invalid length. [ 112.994336][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 113.012700][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 113.030426][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 113.699057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.849378][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.739569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.890548][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.369244][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.500671][ T7404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.674949][ T7441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 115.769021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.883316][ T7457] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 115.929959][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.013951][ T7458] xfrm1: entered allmulticast mode [ 116.064140][ T7458] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 116.124180][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.134097][ T7472] netlink: 'syz.1.410': attribute type 32 has an invalid length. [ 116.144562][ T7458] bridge_slave_1: left allmulticast mode [ 116.151238][ T7458] bridge_slave_1: left promiscuous mode [ 116.157599][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.203068][ T7458] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 116.308760][ T7472] bond3: option coupled_control: invalid value (192) [ 116.328338][ T7472] bond3 (unregistering): Released all slaves [ 116.367289][ T7484] geneve2: entered promiscuous mode [ 116.372899][ T7484] geneve2: entered allmulticast mode [ 116.395122][ T6080] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.412931][ T6080] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.439201][ T6080] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.534410][ T6080] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.551617][ T7489] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.611728][ T5906] IPVS: starting estimator thread 0... [ 116.644333][ T7498] xt_cgroup: invalid path, errno=-2 [ 116.650530][ T7495] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 116.734521][ T7497] IPVS: using max 33 ests per chain, 79200 per kthread [ 116.743039][ T7500] __nla_validate_parse: 3 callbacks suppressed [ 116.743058][ T7500] netlink: 64 bytes leftover after parsing attributes in process `syz.3.420'. [ 116.767951][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 116.799625][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 116.840782][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 116.922734][ T7513] tap0: tun_chr_ioctl cmd 1074025676 [ 116.936929][ T7513] tap0: owner set to 0 [ 116.947523][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 116.950334][ T7506] tipc: Started in network mode [ 116.995342][ T7506] tipc: Node identity b24855ff6207, cluster identity 4711 [ 117.006976][ T7506] tipc: Enabled bearer , priority 0 [ 117.033396][ T7510] syzkaller0: entered promiscuous mode [ 117.042582][ T7510] syzkaller0: entered allmulticast mode [ 117.088246][ T7506] tipc: Resetting bearer [ 117.120819][ T7505] tipc: Resetting bearer [ 117.172172][ T7505] tipc: Disabling bearer [ 117.204473][ T7531] netlink: 256 bytes leftover after parsing attributes in process `syz.0.424'. [ 117.221946][ T7528] syzkaller0: entered promiscuous mode [ 117.229991][ T7528] syzkaller0: entered allmulticast mode [ 117.280782][ T7528] netlink: 'syz.3.427': attribute type 26 has an invalid length. [ 117.310489][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 117.341083][ T7528] netlink: 'syz.3.427': attribute type 26 has an invalid length. [ 117.359512][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 117.849335][ C0] net_ratelimit: 3 callbacks suppressed [ 117.849356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.009394][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.046670][ T7577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.086331][ T7577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'. [ 118.186548][ T7582] xt_hashlimit: size too large, truncated to 1048576 [ 118.207973][ T7581] syzkaller0: entered promiscuous mode [ 118.232424][ T7581] syzkaller0: entered allmulticast mode [ 118.491080][ T7601] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 118.716393][ T7618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.746124][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 118.889013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.050717][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.615748][ T7670] netlink: 'syz.3.465': attribute type 5 has an invalid length. [ 119.732199][ T7675] netlink: 'syz.2.468': attribute type 3 has an invalid length. [ 119.852601][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.929033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.957547][ T7685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.028426][ T7693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.068369][ T7683] pim6reg1: entered promiscuous mode [ 120.080482][ T7683] pim6reg1: entered allmulticast mode [ 120.597095][ T7720] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 120.682061][ T7727] netlink: 'syz.4.484': attribute type 10 has an invalid length. [ 120.834902][ T7741] Cannot find set identified by id 65534 to match [ 121.074212][ T7753] can: request_module (can-proto-0) failed. [ 121.161610][ T7761] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 121.185641][ T7761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.894963][ T5897] net_ratelimit: 7 callbacks suppressed [ 122.894977][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.049096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.209706][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.516296][ T7720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.099256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.257191][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.468620][ T7829] __nla_validate_parse: 7 callbacks suppressed [ 124.468637][ T7829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.513'. [ 124.533828][ T7837] netlink: 'syz.0.516': attribute type 21 has an invalid length. [ 124.561793][ T7837] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.576896][ T7836] syzkaller1: entered promiscuous mode [ 124.584392][ T7836] syzkaller1: entered allmulticast mode [ 124.757117][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 124.851975][ T7852] netlink: 148 bytes leftover after parsing attributes in process `syz.3.522'. [ 124.933659][ T7848] nbd0: detected capacity change from 0 to 127 [ 124.939451][ T7854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.023101][ T7861] netlink: 72 bytes leftover after parsing attributes in process `syz.2.525'. [ 125.055758][ T7862] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 125.129033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.185416][ T7862] bond4: entered promiscuous mode [ 125.206525][ T7862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.290501][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.352422][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.372639][ T7879] batadv_slave_0: entered promiscuous mode [ 125.414672][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 125.569859][ T7887] netlink: 'syz.2.531': attribute type 4 has an invalid length. [ 125.584001][ T5162] block nbd0: Receive control failed (result -104) [ 125.594616][ T7890] veth0: entered promiscuous mode [ 125.614003][ T7889] veth0: left promiscuous mode [ 125.628817][ T7888] netlink: 32 bytes leftover after parsing attributes in process `syz.1.532'. [ 125.943234][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.964856][ T7912] syzkaller0: entered promiscuous mode [ 125.970638][ T7912] syzkaller0: entered allmulticast mode [ 125.978015][ T7912] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 125.990803][ T7906] block nbd1: server does not support multiple connections per device. [ 126.001621][ T7906] block nbd1: shutting down sockets [ 126.169042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.268597][ T7925] netlink: 'syz.3.545': attribute type 8 has an invalid length. [ 126.329345][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.343830][ T7928] x_tables: duplicate underflow at hook 1 [ 126.408797][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.575851][ T7951] netlink: 48 bytes leftover after parsing attributes in process `syz.3.550'. [ 126.882801][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 126.974771][ T7978] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 127.037559][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.556'. [ 127.041553][ T7978] bond0: (slave lo): Error: Device can not be enslaved while up [ 127.104693][ T7981] ip6erspan0: entered promiscuous mode [ 127.215823][ T7988] netlink: 80 bytes leftover after parsing attributes in process `syz.1.559'. [ 127.464374][ T7948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.249030][ C0] net_ratelimit: 6 callbacks suppressed [ 128.249047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.273317][ T8048] vcan0: tx address claim with dest, not broadcast [ 128.409700][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.466322][ T8056] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 128.595565][ T8062] Cannot find set identified by id 0 to match [ 128.599689][ T8063] netlink: 'syz.1.580': attribute type 5 has an invalid length. [ 129.299073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.454986][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.025261][ T8054] kthread_run failed with err -4 [ 130.091888][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.160881][ T8071] __nla_validate_parse: 2 callbacks suppressed [ 130.160899][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 130.192943][ T8077] netlink: 96 bytes leftover after parsing attributes in process `syz.3.585'. [ 130.252992][ T8077] netlink: 'syz.3.585': attribute type 21 has an invalid length. [ 130.266023][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 130.278218][ T8076] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 130.280108][ T8077] netlink: 156 bytes leftover after parsing attributes in process `syz.3.585'. [ 130.317187][ T8082] netlink: 'syz.1.586': attribute type 10 has an invalid length. [ 130.339711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.369981][ T8086] netlink: 'syz.1.586': attribute type 10 has an invalid length. [ 130.436038][ T8082] team0: Port device dummy0 added [ 130.479914][ T8086] team0: Port device dummy0 removed [ 130.491208][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.516594][ T8086] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.561048][ T8087] dvmrp0: entered allmulticast mode [ 130.832675][ T8119] xt_hashlimit: size too large, truncated to 1048576 [ 130.894666][ T5906] IPVS: starting estimator thread 0... [ 130.905851][ T8121] geneve2: entered promiscuous mode [ 130.923845][ T8121] geneve2: entered allmulticast mode [ 130.999320][ T8128] IPVS: using max 28 ests per chain, 67200 per kthread [ 131.120326][ T8132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.369007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.415306][ T8149] netlink: 'syz.1.604': attribute type 3 has an invalid length. [ 131.527455][ T8157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.733789][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 131.861872][ T8170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 131.944403][ T8179] bond5: option miimon: invalid value (18446744073709551585) [ 131.952225][ T8179] bond5: option miimon: allowed values 0 - 2147483647 [ 131.964998][ T8179] bond5 (unregistering): Released all slaves [ 132.033125][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 132.052291][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 132.086141][ T8194] netlink: 220 bytes leftover after parsing attributes in process `syz.1.618'. [ 132.185445][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 132.523815][ T8220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.621'. [ 132.566492][ T8223] xt_hashlimit: size too large, truncated to 1048576 [ 132.822379][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.831383][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.388085][ T8268] netlink: 'syz.0.634': attribute type 2 has an invalid length. [ 133.449372][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.458639][ C0] net_ratelimit: 20 callbacks suppressed [ 133.458657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.476203][ T8278] netlink: 'syz.4.639': attribute type 83 has an invalid length. [ 133.609743][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.811786][ T8295] netlink: 'syz.2.644': attribute type 24 has an invalid length. [ 134.275149][ T8314] bond1 (unregistering): Released all slaves [ 134.489001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.547322][ T8324] Bluetooth: MGMT ver 1.23 [ 134.650456][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.187429][ T8366] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 135.242341][ T8363] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 135.245139][ T8371] netlink: 'syz.3.665': attribute type 2 has an invalid length. [ 135.273641][ T8368] __nla_validate_parse: 81 callbacks suppressed [ 135.273657][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 135.311022][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 135.481379][ T8381] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.668'. [ 135.529002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.568862][ T8385] IPVS: Unknown mcast interface: pimreg [ 135.596556][ T8381] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.668'. [ 135.621674][ T8381] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.668'. [ 135.652469][ T8381] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.668'. [ 135.680733][ T8381] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.668'. [ 135.692339][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.722789][ T8381] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.668'. [ 135.774505][ T8381] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.668'. [ 135.813680][ T8381] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.668'. [ 135.952655][ T8406] netlink: 'syz.2.675': attribute type 5 has an invalid length. [ 135.974250][ T8415] netlink: 'syz.2.675': attribute type 5 has an invalid length. [ 135.992647][ T8403] netlink: 'syz.2.675': attribute type 11 has an invalid length. [ 136.054824][ T8403] C: renamed from lo (while UP) [ 136.109706][ T8403] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 136.150678][ T8421] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 136.164936][ T8421] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 136.176712][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.416000][ T8426] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.569254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.002220][ T8474] pim6reg: entered allmulticast mode [ 137.041114][ T8479] pim6reg: left allmulticast mode [ 137.499571][ T8497] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 137.539363][ T8497] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 137.861969][ T8523] validate_nla: 2 callbacks suppressed [ 137.861986][ T8523] netlink: 'syz.4.709': attribute type 4 has an invalid length. [ 138.008408][ T8530] tipc: Enabling of bearer rejected, media not registered [ 138.273123][ T8540] bond6 (unregistering): Released all slaves [ 138.393504][ T8536] : entered promiscuous mode [ 138.542495][ T8563] netlink: 'syz.4.718': attribute type 8 has an invalid length. [ 138.649041][ C0] net_ratelimit: 3 callbacks suppressed [ 138.649060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.811733][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.221723][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.707824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.852860][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.729979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.889633][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.681913][ T8583] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 141.776525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.809752][ T8586] bridge3: entered promiscuous mode [ 141.815950][ T8586] bridge3: entered allmulticast mode [ 141.836167][ T8586] team0: Port device bridge3 added [ 141.846092][ T8589] bridge0: port 3(team0) entered blocking state [ 141.859926][ T8589] bridge0: port 3(team0) entered disabled state [ 141.874441][ T8589] team0: entered allmulticast mode [ 141.880832][ T8611] __nla_validate_parse: 71 callbacks suppressed [ 141.880849][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 141.880896][ T8589] team_slave_0: entered allmulticast mode [ 141.907008][ T8589] team_slave_1: entered allmulticast mode [ 141.929640][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.930345][ T8589] team0: entered promiscuous mode [ 141.944501][ T8589] team_slave_0: entered promiscuous mode [ 141.951546][ T8589] team_slave_1: entered promiscuous mode [ 141.968032][ T8589] bridge0: port 3(team0) entered blocking state [ 141.975937][ T8589] bridge0: port 3(team0) entered forwarding state [ 142.251870][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.393176][ T8628] tipc: Enabled bearer , priority 0 [ 142.405895][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'. [ 142.512112][ T8628] tipc: Disabling bearer [ 142.547162][ T8633] syzkaller1: entered promiscuous mode [ 142.578135][ T8633] syzkaller1: entered allmulticast mode [ 142.628280][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.743'. [ 142.654685][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 142.901170][ T8662] xt_ecn: cannot match TCP bits for non-tcp packets [ 142.997806][ T8658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.025901][ T8658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.281499][ T8658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.313504][ T8658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.537846][ T8658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.538277][ T8641] infiniband syz0: set down [ 143.550207][ T8658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.585059][ T8641] infiniband syz0: added ipvlan0 [ 143.611047][ T8641] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 143.617313][ T8641] infiniband syz0: Couldn't open port 1 [ 143.633556][ T8641] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 143.653230][ T8641] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 143.670951][ T8641] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 143.746903][ T8658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.763959][ T8641] RDS/IB: syz0: added [ 143.768741][ T8658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.770229][ T8641] smc: adding ib device syz0 with port count 1 [ 143.787641][ T8641] smc: ib device syz0 port 1 has no pnetid [ 143.849114][ C0] net_ratelimit: 4 callbacks suppressed [ 143.849131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.009629][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.024028][ T8709] ip6tnl1: entered allmulticast mode [ 144.032795][ T6084] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.041785][ T6084] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.130505][ T6084] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.150182][ T6084] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.184788][ T8715] netlink: 'syz.1.757': attribute type 7 has an invalid length. [ 144.194833][ T8715] netlink: 'syz.1.757': attribute type 8 has an invalid length. [ 144.216274][ T6084] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.235572][ T6084] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.236030][ T8717] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 144.324301][ T6081] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.344640][ T6081] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.691887][ T8736] netlink: 'syz.3.763': attribute type 12 has an invalid length. [ 144.789815][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 144.889017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.049691][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.166665][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 145.204755][ T8769] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 145.290485][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.467140][ T8776] bond3: entered promiscuous mode [ 145.473862][ T8776] bond3: entered allmulticast mode [ 145.480182][ T8776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.594542][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.779'. [ 145.929209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.942274][ T8803] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.784'. [ 146.092053][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.182336][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 146.293966][ T8814] Cannot find del_set index 1 as target [ 146.556650][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 146.765161][ T8833] netlink: 'syz.4.796': attribute type 2 has an invalid length. [ 146.969048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.125092][ T8843] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.139481][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.148507][ T8843] __nla_validate_parse: 2 callbacks suppressed [ 147.148527][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 147.189042][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 147.374470][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.381876][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.560660][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.575862][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.746301][ T35] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.767748][ T8844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.778211][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.778245][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 147.778298][ T35] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.778322][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.778345][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 147.778378][ T35] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.778400][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.778423][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 147.778455][ T35] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.778478][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.778500][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 148.009035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.415461][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 148.731251][ T8924] netlink: 64 bytes leftover after parsing attributes in process `syz.0.815'. [ 148.922598][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 149.049251][ C0] net_ratelimit: 3 callbacks suppressed [ 149.049267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.086718][ T8938] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 149.090155][ T8937] : entered promiscuous mode [ 149.135590][ T8938] netlink: 280 bytes leftover after parsing attributes in process `syz.4.820'. [ 149.195069][ T8942] H: renamed from dummy0 (while UP) [ 149.210230][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.411550][ T8950] syzkaller0: entered promiscuous mode [ 149.439589][ T8950] syzkaller0: entered allmulticast mode [ 149.537571][ T8955] xt_hashlimit: size too large, truncated to 1048576 [ 149.843142][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.832'. [ 149.920424][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 150.029848][ T8980] netlink: 48 bytes leftover after parsing attributes in process `syz.0.836'. [ 150.044133][ T8980] tipc: Enabling of bearer rejected, already enabled [ 150.091016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.252187][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.523531][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 151.129065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.291330][ T8874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.373561][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.565722][ T5854] Bluetooth: hci4: link tx timeout [ 151.573453][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.588351][ T5854] Bluetooth: hci4: link tx timeout [ 151.594019][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.769194][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 151.823664][ T5854] Bluetooth: hci4: link tx timeout [ 151.831520][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.853461][ T5854] Bluetooth: hci4: link tx timeout [ 151.858649][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.969698][ T5854] Bluetooth: hci4: link tx timeout [ 151.975086][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.991776][ T9085] netlink: 'syz.1.860': attribute type 1 has an invalid length. [ 152.025969][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.169360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.279599][ T9094] bond2: entered promiscuous mode [ 152.285241][ T9094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.330762][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.371769][ T9107] Bluetooth: MGMT ver 1.23 [ 152.374207][ T9110] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 152.655138][ T5854] Bluetooth: hci4: link tx timeout [ 152.660857][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.105337][ T5854] Bluetooth: hci4: link tx timeout [ 153.110946][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.386600][ T9156] __nla_validate_parse: 68 callbacks suppressed [ 153.386617][ T9156] netlink: 80 bytes leftover after parsing attributes in process `syz.4.876'. [ 153.423360][ T9156] netlink: 80 bytes leftover after parsing attributes in process `syz.4.876'. [ 153.691695][ T5854] Bluetooth: hci4: link tx timeout [ 153.698283][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.743299][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 153.781624][ T5854] Bluetooth: hci4: link tx timeout [ 153.787331][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.853506][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 153.953169][ T9185] netlink: 'syz.2.882': attribute type 21 has an invalid length. [ 153.977676][ T9175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.061207][ T9175] bond5 (unregistering): Released all slaves [ 154.107139][ T9185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.882'. [ 154.249049][ C0] net_ratelimit: 2 callbacks suppressed [ 154.249066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.409306][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.727243][ T9218] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 154.783259][ T9218] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 154.812425][ T9218] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 154.830103][ T9218] netlink: 'syz.1.890': attribute type 2 has an invalid length. [ 154.856883][ T9218] netlink: 76 bytes leftover after parsing attributes in process `syz.1.890'. [ 154.878651][ T9223] netlink: 88 bytes leftover after parsing attributes in process `syz.3.892'. [ 155.049973][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.093893][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.893'. [ 155.213387][ T11] block nbd0: Possible stuck request ffff888027250000: control (read@0,1024B). Runtime 30 seconds [ 155.226746][ T11] block nbd0: Possible stuck request ffff8880272501c0: control (read@1024,1024B). Runtime 30 seconds [ 155.237832][ T11] block nbd0: Possible stuck request ffff888027250380: control (read@2048,1024B). Runtime 30 seconds [ 155.251981][ T11] block nbd0: Possible stuck request ffff888027250540: control (read@3072,1024B). Runtime 30 seconds [ 155.289261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.451394][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.805102][ T9267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.899'. [ 156.211401][ T9298] netlink: 56 bytes leftover after parsing attributes in process `syz.4.910'. [ 156.231788][ T9298] netlink: 'syz.4.910': attribute type 29 has an invalid length. [ 156.263172][ T9299] netlink: 'syz.4.910': attribute type 29 has an invalid length. [ 156.281280][ T9298] netlink: 'syz.4.910': attribute type 29 has an invalid length. [ 156.304026][ T9299] netlink: 'syz.4.910': attribute type 4 has an invalid length. [ 156.323615][ T9299] netlink: 17 bytes leftover after parsing attributes in process `syz.4.910'. [ 156.332692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.493690][ T8874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.540065][ T9263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.596906][ T9263] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 156.848881][ T9263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.861111][ T9263] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 156.924209][ T9263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.948687][ T9263] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 157.039081][ T9263] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.060823][ T9263] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 157.192426][ T9263] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.227541][ T9263] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 157.242327][ T9346] bridge0: port 3(team0) entered disabled state [ 157.249126][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.369061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.530534][ T8874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.093183][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.348084][ T9412] netlink: 'syz.4.938': attribute type 19 has an invalid length. [ 158.403318][ T9387] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 158.451335][ T9387] bond5 (unregistering): Released all slaves [ 158.712100][ T29] audit: type=1800 audit(1777096028.624:2): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.933" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 158.734343][ T9389] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 158.755294][ T9389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 158.770192][ T9389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 159.080991][ T9449] __nla_validate_parse: 6 callbacks suppressed [ 159.081010][ T9449] netlink: 9 bytes leftover after parsing attributes in process `syz.4.948'. [ 159.345816][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 159.381315][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'. [ 159.436277][ T9477] dvmrp0: entered allmulticast mode [ 159.459074][ C0] net_ratelimit: 3 callbacks suppressed [ 159.459091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.612543][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.687403][ T9492] netlink: 104 bytes leftover after parsing attributes in process `syz.2.958'. [ 159.916199][ T9506] veth1_macvtap: left promiscuous mode [ 159.953752][ T9506] macsec0: entered promiscuous mode [ 159.980871][ T9506] macsec0: entered allmulticast mode [ 160.041168][ T9510] veth1_macvtap: entered promiscuous mode [ 160.052632][ T9510] veth1_macvtap: entered allmulticast mode [ 160.060242][ T9510] macsec0: left promiscuous mode [ 160.065526][ T9510] macsec0: left allmulticast mode [ 160.072739][ T9510] veth1_macvtap: left allmulticast mode [ 160.128862][ T9513] netlink: 'syz.4.963': attribute type 1 has an invalid length. [ 160.489035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.649653][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.732849][ T9554] ipvlan2: entered promiscuous mode [ 160.735255][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.977'. [ 160.992071][ T9571] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 161.005735][ T9569] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 161.021741][ T9569] bond0: (slave wlan1): Opening slave failed [ 161.042187][ T9568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.074470][ T9571] bond5: invalid ARP target 0.0.0.0 specified for addition [ 161.084901][ T9571] bond5: option arp_ip_target: invalid value (0) [ 161.096493][ T9571] bond5 (unregistering): Released all slaves [ 161.130522][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.188294][ T9584] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 161.529283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.690278][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.757134][ T9603] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.935442][ T9626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.967461][ T9626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.093089][ T9634] netlink: 'syz.3.994': attribute type 8 has an invalid length. [ 162.115304][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 162.170612][ T9634] bond0: entered promiscuous mode [ 162.177360][ T9634] bond_slave_0: entered promiscuous mode [ 162.199228][ T9634] bond_slave_1: entered promiscuous mode [ 162.251773][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.252420][ T9634] gretap0: entered promiscuous mode [ 162.302312][ T9634] hsr1: entered promiscuous mode [ 162.429658][ T9650] netlink: 'syz.1.999': attribute type 21 has an invalid length. [ 162.448760][ T9650] netlink: 128 bytes leftover after parsing attributes in process `syz.1.999'. [ 162.460976][ T9652] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 162.493453][ T9656] netlink: 'syz.1.999': attribute type 21 has an invalid length. [ 162.505218][ T9654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1000'. [ 162.515517][ T9652] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.524107][ T9652] gretap1: entered promiscuous mode [ 162.531019][ T9656] netlink: 128 bytes leftover after parsing attributes in process `syz.1.999'. [ 162.531398][ T9654] netlink: 396 bytes leftover after parsing attributes in process `syz.0.1000'. [ 162.550718][ T9652] gretap1: entered allmulticast mode [ 162.595904][ T9650] netlink: 'syz.1.999': attribute type 4 has an invalid length. [ 162.632841][ T9650] netlink: 'syz.1.999': attribute type 5 has an invalid length. [ 162.662516][ T9656] netlink: 'syz.1.999': attribute type 4 has an invalid length. [ 162.680823][ T9656] netlink: 'syz.1.999': attribute type 5 has an invalid length. [ 162.918784][ T9675] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 163.614950][ T9720] vlan2: entered promiscuous mode [ 163.636279][ T9720] gretap0: entered promiscuous mode [ 163.683849][ T9712] vxcan1 speed is unknown, defaulting to 1000 [ 163.694014][ T9712] vxcan1 speed is unknown, defaulting to 1000 [ 163.706698][ T9712] vxcan1 speed is unknown, defaulting to 1000 [ 163.709166][ T9726] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 163.737114][ T9726] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 164.447439][ T9712] infiniband P±ý>: set active [ 164.452309][ T809] vxcan1 speed is unknown, defaulting to 1000 [ 164.475733][ T9712] infiniband P±ý>: added vxcan1 [ 164.544598][ T9712] smbdirect: ib_dev[P±ý>]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 164.560107][ T9712] smbdirect: ib_dev[P±ý>]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 164.577734][ T9712] smbdirect: ib_dev[P±ý>]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 164.611508][ T9712] RDS/IB: P±ý>: added [ 164.615670][ T9712] smc: adding ib device P±ý> with port count 1 [ 164.626110][ T9712] smc: ib device P±ý> port 1 has no pnetid [ 164.638006][ T809] vxcan1 speed is unknown, defaulting to 1000 [ 164.649353][ C0] net_ratelimit: 5 callbacks suppressed [ 164.649369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.677899][ T9712] vxcan1 speed is unknown, defaulting to 1000 [ 164.705361][ T9774] wg1: entered promiscuous mode [ 164.723389][ T9774] wg1: entered allmulticast mode [ 164.815498][ T9777] __nla_validate_parse: 5 callbacks suppressed [ 164.815518][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 164.834955][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.874968][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 165.073715][ T9790] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1035'. [ 165.274041][ T9805] validate_nla: 1 callbacks suppressed [ 165.274057][ T9805] netlink: 'syz.1.1038': attribute type 4 has an invalid length. [ 165.293798][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.430162][ T9813] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 165.531943][ T9712] vxcan1 speed is unknown, defaulting to 1000 [ 165.699058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.854051][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.029495][ T9835] gretap0: entered promiscuous mode [ 166.046290][ T9835] vlan2: entered promiscuous mode [ 166.364876][ T9857] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 166.394153][ T9857] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1053'. [ 166.417863][ T9857] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 166.439893][ T9857] netlink: 'syz.0.1053': attribute type 8 has an invalid length. [ 166.452574][ T9712] vxcan1 speed is unknown, defaulting to 1000 [ 166.474546][ T9857] netlink: 606 bytes leftover after parsing attributes in process `syz.0.1053'. [ 166.504340][ T9856] syzkaller0: entered promiscuous mode [ 166.516428][ T9856] syzkaller0: entered allmulticast mode [ 166.552297][ T9856] netlink: 'syz.2.1052': attribute type 10 has an invalid length. [ 166.617008][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1054'. [ 166.729497][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.737274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.834934][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'. [ 166.835110][ T9880] ip6t_srh: unknown srh invflags 4000 [ 166.890566][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.903291][ T9882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1057'. [ 167.198006][ T9892] netlink: 'syz.0.1059': attribute type 3 has an invalid length. [ 167.224091][ T9892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1059'. [ 167.273079][ T9712] vxcan1 speed is unknown, defaulting to 1000 [ 167.621573][ T9922] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1064'. [ 167.769358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.939103][ T9935] IPv6: addrconf: prefix option has invalid lifetime [ 167.939423][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.978715][ T9712] vxcan1 speed is unknown, defaulting to 1000 [ 168.474254][ T8872] IPVS: starting estimator thread 0... [ 168.599550][ T9966] IPVS: using max 40 ests per chain, 96000 per kthread [ 168.988742][ T9992] bond1: Invalid ad_actor_system MAC address. [ 168.995636][ T9992] bond1: option ad_actor_system: invalid value (1) [ 169.006632][ T9992] bond1 (unregistering): Released all slaves [ 169.076527][ T9999] netlink: 'syz.4.1088': attribute type 17 has an invalid length. [ 169.155070][ T9992] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 169.185990][ T9992] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 169.254311][T10005] bridge3: entered promiscuous mode [ 169.259788][T10005] bridge3: entered allmulticast mode [ 169.286438][T10005] team0: Port device bridge3 added [ 169.849072][ C0] net_ratelimit: 3 callbacks suppressed [ 169.849090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.020438][T10049] __nla_validate_parse: 14 callbacks suppressed [ 170.020457][T10049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 170.063693][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 170.088229][T10049] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 170.141559][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 170.180643][T10068] netlink: 'syz.1.1103': attribute type 2 has an invalid length. [ 170.238603][T10049] bond0: (slave wlan1): Opening slave failed [ 170.252950][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 170.698078][T10089] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1113'. [ 171.119370][T10094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.295535][T10107] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1120'. [ 171.314181][T10107] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1120'. [ 171.338496][T10107] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1120'. [ 171.673578][T10134] syzkaller0: entered promiscuous mode [ 171.689354][T10134] syzkaller0: entered allmulticast mode [ 171.703816][T10129] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 171.792975][T10136] tipc: Enabled bearer , priority 10 [ 171.886463][T10144] SET target dimension over the limit! [ 172.183826][T10162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.235430][T10166] netlink: 'syz.3.1136': attribute type 3 has an invalid length. [ 172.284025][T10168] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 172.384473][T10172] xt_hashlimit: size too large, truncated to 1048576 [ 172.503749][T10174] xt_CT: No such helper "pptp" [ 172.543970][T10180] xt_CT: No such helper "pptp" [ 172.911718][ T8872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.945930][ T8872] tipc: Node number set to 3494860287 [ 173.001242][ T8872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.245602][ T809] IPVS: starting estimator thread 0... [ 173.254405][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 173.259154][T10229] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.359271][T10235] IPVS: using max 36 ests per chain, 86400 per kthread [ 173.436616][T10242] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1157'. [ 173.629544][T10248] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 173.713277][T10252] atomic_op ffff888031294198 conn xmit_atomic 0000000000000000 [ 173.803359][T10252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.818885][T10252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.834601][T10252] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 173.848610][T10252] bond0 (unregistering): Released all slaves [ 174.010379][T10263] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 174.029015][T10263] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 174.239442][T10279] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 174.534307][T10302] netlink: 'syz.4.1169': attribute type 11 has an invalid length. [ 174.570380][T10302] netlink: 'syz.4.1169': attribute type 11 has an invalid length. [ 174.800253][T10286] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 174.826619][T10293] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 174.848514][T10310] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 174.862586][T10295] syzkaller1: entered promiscuous mode [ 174.873421][T10295] syzkaller1: entered allmulticast mode [ 174.879836][T10310] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 175.029377][T10328] __nla_validate_parse: 9 callbacks suppressed [ 175.029394][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'. [ 175.130501][T10334] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.167457][T10336] tipc: Started in network mode [ 175.172675][T10336] tipc: Node identity fff, cluster identity 10 [ 175.182835][T10336] tipc: Node number set to 4095 [ 175.307139][T10345] : entered promiscuous mode [ 175.324994][T10341] tipc: Enabled bearer , priority 0 [ 175.344666][T10343] netlink: 'syz.4.1179': attribute type 1 has an invalid length. [ 175.354524][T10341] syzkaller0: entered promiscuous mode [ 175.362084][T10343] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1179'. [ 175.374257][T10341] syzkaller0: entered allmulticast mode [ 175.479120][T10341] tipc: Resetting bearer [ 175.505748][T10340] tipc: Resetting bearer [ 175.562810][T10340] tipc: Disabling bearer [ 175.686928][T10360] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.720990][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 175.763155][T10368] netlink: 'syz.1.1187': attribute type 11 has an invalid length. [ 175.793967][T10367] netlink: 'syz.1.1187': attribute type 11 has an invalid length. [ 175.996296][T10382] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 176.004788][T10382] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1191'. [ 176.161408][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'. [ 176.407862][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 176.434024][T10401] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 176.755171][T10422] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 176.783127][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1201'. [ 176.796382][T10426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1204'. [ 177.069082][T10445] vlan1: entered allmulticast mode [ 177.074452][T10445] hsr0: entered allmulticast mode [ 177.081649][T10445] hsr_slave_0: entered allmulticast mode [ 177.087587][T10445] hsr_slave_1: entered allmulticast mode [ 177.097090][T10445] netlink: 'syz.3.1210': attribute type 30 has an invalid length. [ 177.151859][T10445] bond7: option arp_missed_max: invalid value (0) [ 177.162110][T10438] netlink: set zone limit has 4 unknown bytes [ 177.169441][T10445] bond7: option arp_missed_max: allowed values 1 - 255 [ 177.687998][T10445] bond7 (unregistering): Released all slaves [ 177.731505][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'. [ 177.794961][T10462] netlink: 'syz.1.1214': attribute type 61 has an invalid length. [ 177.803288][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 178.265208][T10479] x_tables: duplicate entry at hook 1 [ 178.301404][T10482] netlink: 'syz.1.1220': attribute type 14 has an invalid length. [ 178.392694][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.418979][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.436201][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.476759][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.568703][T10496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.936032][T10518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.487169][T10546] bridge0: port 3(ipvlan2) entered blocking state [ 179.496310][T10546] bridge0: port 3(ipvlan2) entered disabled state [ 179.504021][T10546] ipvlan2: entered allmulticast mode [ 179.534390][T10546] bridge0: entered allmulticast mode [ 179.551259][T10546] ipvlan2: left allmulticast mode [ 179.562330][T10546] bridge0: left allmulticast mode [ 180.172745][T10597] __nla_validate_parse: 4 callbacks suppressed [ 180.172762][T10597] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1259'. [ 180.310706][T10599] netlink: 'syz.0.1260': attribute type 4 has an invalid length. [ 180.313911][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 180.446207][T10603] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.483667][T10603] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 180.614867][T10611] macvlan2: entered promiscuous mode [ 180.629454][T10611] macvlan2: entered allmulticast mode [ 180.652596][T10611] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 181.088825][T10639] can: request_module (can-proto-0) failed. [ 181.131596][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 181.167304][T10650] hsr_slave_0: left promiscuous mode [ 181.195239][T10650] hsr_slave_1: left promiscuous mode [ 185.289557][ T11] block nbd0: Possible stuck request ffff888027250000: control (read@0,1024B). Runtime 60 seconds [ 185.300533][ T11] block nbd0: Possible stuck request ffff8880272501c0: control (read@1024,1024B). Runtime 60 seconds [ 185.311585][ T11] block nbd0: Possible stuck request ffff888027250380: control (read@2048,1024B). Runtime 60 seconds [ 185.322555][ T11] block nbd0: Possible stuck request ffff888027250540: control (read@3072,1024B). Runtime 60 seconds [ 187.729943][ T5211] udevd[5211]: worker [5858] /devices/virtual/block/nbd0 is taking a long time [ 194.254102][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.260552][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.340856][T10681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1279'. [ 205.435779][T10685] SET target dimension over the limit! [ 205.668088][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 205.843161][T10706] netlink: 'syz.4.1287': attribute type 29 has an invalid length. [ 205.870520][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1288'. [ 205.881759][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1288'. [ 205.958576][T10710] netlink: 'syz.4.1287': attribute type 29 has an invalid length. [ 206.114199][T10716] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1290'. [ 206.161721][T10712] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 206.311872][T10726] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1296'. [ 206.323612][T10712] veth0: entered promiscuous mode [ 206.356173][T10711] veth0: left promiscuous mode [ 206.375098][T10725] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1296'. [ 206.385537][T10728] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1295'. [ 206.464354][T10728] syzkaller0: entered promiscuous mode [ 206.484262][T10730] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 206.498694][T10728] syzkaller0: entered allmulticast mode [ 206.505938][T10730] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1297'. [ 206.598079][T10731] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 206.617989][T10731] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1297'. [ 206.668875][T10731] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 206.879922][T10756] netlink: 'syz.0.1299': attribute type 12 has an invalid length. [ 206.903893][T10755] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 206.923686][T10755] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 207.080124][T10764] openvswitch: netlink: Message has 6 unknown bytes. [ 207.258764][T10775] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 207.353844][T10783] bridge: RTM_NEWNEIGH with invalid ether address [ 207.365863][T10783] bridge: RTM_NEWNEIGH with invalid ether address [ 207.560056][ T6084] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.598198][T10800] bond0: Caught tx_queue_len zero misconfig [ 207.645305][ T6084] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.702661][ T6084] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.725373][ T6084] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.822940][T10805] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 208.032975][T10818] netlink: 'syz.0.1324': attribute type 4 has an invalid length. [ 208.668800][T10844] bond2: entered promiscuous mode [ 208.701822][T10844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.813171][T10849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.832156][T10849] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 208.846579][T10849] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 208.908397][T10849] bond2: (slave ip6gre1): making interface the new active one [ 208.927880][T10849] ip6gre1: entered promiscuous mode [ 208.937164][T10849] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 208.955181][T10852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.815434][T10921] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 210.299760][T10944] siw: device registration error -23 [ 211.407867][T11003] __nla_validate_parse: 22 callbacks suppressed [ 211.407886][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 211.481913][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 211.794335][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 211.909637][T11032] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1392'. [ 211.957288][T11036] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 212.048898][T11042] validate_nla: 4 callbacks suppressed [ 212.058436][T11042] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 212.085049][T11042] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 212.098018][T11042] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 212.110799][T11042] netlink: 'syz.2.1395': attribute type 2 has an invalid length. [ 212.137917][T11042] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1395'. [ 212.231927][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 212.319316][T11042] syzkaller0: entered promiscuous mode [ 212.333851][T11042] syzkaller0: entered allmulticast mode [ 212.345960][T11057] geneve2: entered promiscuous mode [ 212.353594][T11057] geneve2: entered allmulticast mode [ 212.376675][T11045] pim6reg1: entered promiscuous mode [ 212.382515][T11045] pim6reg1: entered allmulticast mode [ 212.846279][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 214.676241][T11083] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 214.678106][T11095] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.822463][T11100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.078514][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 215.167620][T11099] netlink: 'syz.1.1411': attribute type 5 has an invalid length. [ 215.186057][T11115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.204849][T11115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1416'. [ 215.236016][T11113] netlink: 'syz.1.1411': attribute type 5 has an invalid length. [ 215.388535][ T11] block nbd0: Possible stuck request ffff888027250000: control (read@0,1024B). Runtime 90 seconds [ 215.400621][ T11] block nbd0: Possible stuck request ffff8880272501c0: control (read@1024,1024B). Runtime 90 seconds [ 215.412384][ T11] block nbd0: Possible stuck request ffff888027250380: control (read@2048,1024B). Runtime 90 seconds [ 215.425834][ T11] block nbd0: Possible stuck request ffff888027250540: control (read@3072,1024B). Runtime 90 seconds [ 215.466865][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1419'. [ 215.825385][T11148] lo: entered allmulticast mode [ 216.134500][T11161] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 216.164712][T11161] netlink: 'syz.2.1425': attribute type 4 has an invalid length. [ 216.191373][T11165] netlink: 'syz.3.1427': attribute type 12 has an invalid length. [ 216.259415][T11168] netlink: 'syz.2.1428': attribute type 8 has an invalid length. [ 216.414652][T11176] gretap1: entered promiscuous mode [ 216.423904][T11176] gretap1: entered allmulticast mode [ 216.478606][T11174] tipc: Failed to remove unknown binding: 66,1,1/4095:3819463523/3819463526 [ 216.588806][T11181] __nla_validate_parse: 4 callbacks suppressed [ 216.588822][T11181] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1432'. [ 216.653616][T11186] dvmrp0: entered allmulticast mode [ 216.799645][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1435'. [ 217.348807][T11216] bond4: option min_links: invalid value (18446744073709551614) [ 217.375782][T11216] bond4: option min_links: allowed values 0 - 2147483647 [ 217.401460][T11216] bond4 (unregistering): Released all slaves [ 217.772885][T11230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1445'. [ 217.812333][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 217.871304][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 218.134981][T11247] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1450'. [ 218.135856][T11246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1451'. [ 218.169186][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1451'. [ 218.365403][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 218.461285][T11264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1457'. [ 219.140447][T11257] vlan2: entered promiscuous mode [ 219.145535][T11257] geneve1: entered promiscuous mode [ 219.151202][T11257] vlan2: entered allmulticast mode [ 219.156345][T11257] geneve1: entered allmulticast mode [ 219.450363][T11290] No such timeout policy "syz1" [ 220.367127][T11329] xt_HMARK: spi-set and port-set can't be combined [ 220.761039][T11359] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 220.786719][T11361] netlink: 'syz.0.1483': attribute type 4 has an invalid length. [ 220.813268][T11361] netlink: 'syz.0.1483': attribute type 4 has an invalid length. [ 221.073915][T11376] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 221.084203][T11376] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.642824][T11405] netlink: 'syz.4.1497': attribute type 3 has an invalid length. [ 222.320932][T11446] __nla_validate_parse: 13 callbacks suppressed [ 222.320951][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 222.396687][T11446] bond0: entered promiscuous mode [ 222.522320][T11451] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 222.523680][T11418] syz.2.1499 (11418) used greatest stack depth: 17152 bytes left [ 222.646214][T11453] netlink: 'syz.4.1510': attribute type 15 has an invalid length. [ 222.660302][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1510'. [ 223.010502][T11480] netlink: 'syz.1.1516': attribute type 6 has an invalid length. [ 223.045614][T11482] xt_socket: unknown flags 0x8 [ 223.047110][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 223.067857][T11476] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 223.069615][T11480] netlink: 'syz.1.1516': attribute type 6 has an invalid length. [ 223.094635][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 223.104760][T11476] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 223.137735][T11476] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 223.253752][T11491] syzkaller1: entered promiscuous mode [ 223.270936][T11491] syzkaller1: entered allmulticast mode [ 223.307369][T11491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1518'. [ 223.333224][T11491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.986846][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 224.028703][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 224.081955][T11531] netlink: 'syz.0.1528': attribute type 3 has an invalid length. [ 224.724072][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 224.776005][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'. [ 224.823217][T11580] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1544'. [ 224.838091][T11580] 0·: renamed from hsr_slave_1 (while UP) [ 225.277302][T11580] 0·: entered allmulticast mode [ 225.286594][T11580] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 225.601650][T11604] gtp2: entered promiscuous mode [ 226.263368][T11652] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 226.287049][T11652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.347042][T11656] x_tables: duplicate underflow at hook 1 [ 226.420816][T11657] netlink: 'syz.2.1568': attribute type 21 has an invalid length. [ 226.458759][T11662] netlink: 'syz.4.1571': attribute type 29 has an invalid length. [ 226.484657][T11662] netlink: 'syz.4.1571': attribute type 29 has an invalid length. [ 226.508376][T11662] netlink: 'syz.4.1571': attribute type 32 has an invalid length. [ 226.532449][T11668] tipc: Enabled bearer , priority 0 [ 226.561215][T11667] delete_channel: no stack [ 226.906722][T11687] tipc: Enabling of bearer rejected, failed to enable media [ 227.055102][T11699] netlink: 'syz.3.1583': attribute type 4 has an invalid length. [ 227.155763][T11705] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.921259][T11761] netlink: 'syz.2.1602': attribute type 51 has an invalid length. [ 227.943693][T11761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.962109][T11761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.980709][T11760] tipc: Enabling of bearer rejected, already enabled [ 227.998241][T11760] tipc: Enabling of bearer rejected, already enabled [ 228.258816][T11781] netlink: 'syz.2.1606': attribute type 1 has an invalid length. [ 228.317718][T11786] __nla_validate_parse: 3 callbacks suppressed [ 228.317730][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1607'. [ 228.365886][T11781] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.388384][T11788] bond5: (slave veth7): Enslaving as an active interface with a down link [ 228.436596][T11788] netlink: 'syz.2.1606': attribute type 1 has an invalid length. [ 228.451766][T11788] netlink: 'syz.2.1606': attribute type 2 has an invalid length. [ 228.513127][T11781] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 228.532159][T11795] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 228.890772][T11807] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1616'. [ 228.921072][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1618'. [ 229.158092][T11818] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1620'. [ 229.795528][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1628'. [ 229.845833][T11856] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1628'. [ 229.946745][T11864] bond6: option all_slaves_active: invalid value (222) [ 229.969401][T11864] bond6 (unregistering): Released all slaves [ 230.122312][T11868] netlink: 'syz.4.1632': attribute type 2 has an invalid length. [ 230.145315][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 230.306790][T11876] netlink: 396 bytes leftover after parsing attributes in process `syz.4.1634'. [ 230.354116][T11873] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.707865][T11906] netlink: 'syz.2.1641': attribute type 11 has an invalid length. [ 230.733435][T11906] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1641'. [ 230.742364][T11908] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.822800][T11910] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1642'. [ 231.242668][T11939] sctp: [Deprecated]: syz.2.1648 (pid 11939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.242668][T11939] Use struct sctp_sack_info instead [ 231.321884][T11939] sctp: [Deprecated]: syz.2.1648 (pid 11939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.321884][T11939] Use struct sctp_sack_info instead [ 231.884244][T11964] validate_nla: 2 callbacks suppressed [ 231.884322][T11964] netlink: 'syz.2.1656': attribute type 2 has an invalid length. [ 231.898833][T11964] netlink: 'syz.2.1656': attribute type 5 has an invalid length. [ 232.413022][T11983] netlink: 'syz.4.1661': attribute type 3 has an invalid length. [ 232.748579][T11995] openvswitch: netlink: Actions may not be safe on all matching packets [ 232.818415][T11999] netlink: 'syz.2.1666': attribute type 21 has an invalid length. [ 232.837197][T11999] netlink: 'syz.2.1666': attribute type 5 has an invalid length. [ 232.858809][T11999] netlink: 'syz.2.1666': attribute type 6 has an invalid length. [ 233.877476][T12058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.111220][T12060] tipc: Started in network mode [ 234.135992][T12060] tipc: Node identity e626593164b3, cluster identity 4711 [ 234.163421][T12060] tipc: Enabled bearer , priority 0 [ 234.291437][T12070] syzkaller0: entered promiscuous mode [ 234.308893][T12070] syzkaller0: entered allmulticast mode [ 234.318242][T12070] tipc: Resetting bearer [ 234.346106][T12068] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 234.361273][T12059] tipc: Resetting bearer [ 234.498130][T12087] __nla_validate_parse: 10 callbacks suppressed [ 234.498151][T12087] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1683'. [ 234.587035][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 234.605190][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 235.209508][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.402111][T12059] tipc: Disabling bearer [ 236.557979][ T8876] tipc: Node number set to 2190825777 [ 236.558626][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1685'. [ 236.783808][T12114] netlink: 'syz.1.1691': attribute type 1 has an invalid length. [ 236.846869][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1690'. [ 237.058739][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1695'. [ 237.092267][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1695'. [ 237.428168][T12146] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1701'. [ 237.671279][T12134] netlink: 'syz.0.1696': attribute type 2 has an invalid length. [ 237.756855][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 237.801059][T12157] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 238.026736][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 238.229588][T12181] tipc: Enabled bearer , priority 0 [ 238.263170][T12181] syzkaller0: entered promiscuous mode [ 238.289124][T12181] syzkaller0: entered allmulticast mode [ 238.343599][T12181] tipc: Resetting bearer [ 238.362197][T12177] tipc: Resetting bearer [ 238.393176][T12177] tipc: Disabling bearer [ 238.488840][T12197] netlink: 'syz.0.1714': attribute type 1 has an invalid length. [ 238.816515][T12214] syzkaller0: entered promiscuous mode [ 238.831517][T12214] syzkaller0: entered allmulticast mode [ 238.903425][T12216] syzkaller0: create flow: hash 2125860369 index 1 [ 238.935238][T12218] x_tables: duplicate underflow at hook 1 [ 239.111250][ T6089] syzkaller0: tun_net_xmit 76 [ 239.130135][ T6089] syzkaller0: tun_net_xmit 48 [ 239.139288][ T5921] syzkaller0: tun_net_xmit 76 [ 239.183326][T12211] syzkaller0: delete flow: hash 2125860369 index 1 [ 241.704670][T12270] __nla_validate_parse: 1 callbacks suppressed [ 241.704688][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 241.737088][T12275] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1738'. [ 241.748573][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'. [ 242.113068][T12290] geneve2: left promiscuous mode [ 242.126290][T12290] bond2: left promiscuous mode [ 242.132359][T12290] ipvlan2: left promiscuous mode [ 242.141693][T12290] gretap1: left promiscuous mode [ 242.214328][T12287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'. [ 242.288753][T12304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1746'. [ 242.311459][T12302] netlink: 'syz.2.1747': attribute type 23 has an invalid length. [ 242.413232][T12308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.463060][T12313] tipc: Enabling of bearer rejected, already enabled [ 242.648021][T12321] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1754'. [ 242.673967][T12322] openvswitch: netlink: Message has 592 unknown bytes. [ 242.682467][T12322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.926194][T12337] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 243.077880][T12337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.143104][T12344] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 243.160683][T12337] bond7: (slave ip6gretap1): making interface the new active one [ 243.181560][T12337] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 243.241330][T12345] macvlan2: entered promiscuous mode [ 243.261975][T12345] macvlan2: entered allmulticast mode [ 243.282177][T12350] ip6tnl0: Caught tx_queue_len zero misconfig [ 243.444334][T12349] syzkaller0: entered promiscuous mode [ 243.459307][T12349] syzkaller0: entered allmulticast mode [ 243.631638][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1766'. [ 245.459406][ T11] block nbd0: Possible stuck request ffff888027250000: control (read@0,1024B). Runtime 120 seconds [ 245.470536][ T11] block nbd0: Possible stuck request ffff8880272501c0: control (read@1024,1024B). Runtime 120 seconds [ 245.483219][ T11] block nbd0: Possible stuck request ffff888027250380: control (read@2048,1024B). Runtime 120 seconds [ 245.494365][ T11] block nbd0: Possible stuck request ffff888027250540: control (read@3072,1024B). Runtime 120 seconds [ 245.925640][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 245.998296][T12403] syzkaller1: entered promiscuous mode [ 246.015361][T12403] syzkaller1: entered allmulticast mode [ 246.406141][T12422] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 246.435027][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 246.470616][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'. [ 246.504776][T12422] netlink: 'syz.2.1781': attribute type 2 has an invalid length. [ 246.524936][T12422] netlink: 'syz.2.1781': attribute type 2 has an invalid length. [ 246.546568][T12422] netlink: 'syz.2.1781': attribute type 2 has an invalid length. [ 246.565396][T12435] IPVS: length: 239 != 24 [ 246.738254][T12438] ipvlan3: entered allmulticast mode [ 246.755183][T12438] batadv_slave_1: entered allmulticast mode [ 246.797469][T12438] batman_adv: batadv0: Adding interface: ipvlan3 [ 246.823872][T12438] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.871072][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.882495][T12428] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 246.901219][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.913277][T12438] batman_adv: batadv0: Interface activated: ipvlan3 [ 246.930444][T12429] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 246.942731][T12429] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1783'. [ 246.995784][T12428] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 247.008397][T12429] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 247.255529][T12450] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.261157][T12432] vxcan1 speed is unknown, defaulting to 1000 [ 247.282565][T12452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1789'. [ 247.307571][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1789'. [ 247.333444][T12452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1789'. [ 247.376167][T12452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1789'. [ 247.418156][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1789'. [ 247.449594][T12452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1789'. [ 247.476610][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 247.515365][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 247.516890][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 247.887893][T12477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.442142][T12495] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.481887][T12494] netlink: 'syz.4.1801': attribute type 1 has an invalid length. [ 248.710662][T12497] tipc: Enabled bearer , priority 0 [ 248.788694][T12496] tipc: Disabling bearer [ 248.883834][T12508] netlink: 'syz.0.1804': attribute type 10 has an invalid length. [ 248.910010][T12496] delete_channel: no stack [ 248.932707][T12508] bridge_slave_1: left allmulticast mode [ 248.947933][T12508] bridge_slave_1: left promiscuous mode [ 248.983772][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.044245][T12508] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 249.157539][T12515] netlink: 'syz.2.1809': attribute type 39 has an invalid length. [ 249.644592][T12538] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.592033][T12568] syzkaller0: entered promiscuous mode [ 250.597785][T12568] syzkaller0: entered allmulticast mode [ 251.157866][T12602] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 253.128488][T12619] __nla_validate_parse: 13 callbacks suppressed [ 253.128504][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 253.526222][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1847'. [ 253.556808][T12641] xt_l2tp: v2 tid > 0xffff: 1114244 [ 253.589477][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 253.603705][T12644] netlink: 'syz.0.1846': attribute type 10 has an invalid length. [ 253.614251][T12635] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 253.641308][T12644] vxcan1: entered promiscuous mode [ 253.642865][T12635] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 253.646628][T12644] vxcan1: entered allmulticast mode [ 253.689678][T12635] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 253.724313][T12644] team0: Device vxcan1 is of different type [ 253.756542][T12635] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 253.778739][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 253.789518][T12635] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 253.957481][ T6080] smbdirect: ib_dev[syz2] removed [ 253.974625][T12652] tipc: Enabled bearer , priority 24 [ 254.595582][T12665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1856'. [ 254.605298][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 254.998321][T12698] netlink: 'syz.2.1864': attribute type 6 has an invalid length. [ 255.134284][T12705] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 255.595661][T12735] netlink: 'syz.1.1876': attribute type 1 has an invalid length. [ 255.675570][T12740] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 255.693429][T12742] sctp: [Deprecated]: syz.1.1876 (pid 12742) Use of int in maxseg socket option. [ 255.693429][T12742] Use struct sctp_assoc_value instead [ 255.693593][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.715819][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.716608][T12740] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 255.743587][T12735] bond5: entered promiscuous mode [ 255.751857][T12740] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.1877'. [ 255.768579][T12735] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.790483][T12746] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 255.840828][T12742] bond5: (slave bridge5): making interface the new active one [ 255.859314][T12753] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 255.867069][T12742] bridge5: entered promiscuous mode [ 255.887169][T12753] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 255.896165][T12753] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.1877'. [ 255.906939][T12742] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 255.919419][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'. [ 255.986849][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'. [ 256.209605][T12767] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 256.232954][T12767] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 256.244610][T12767] netlink: 'syz.2.1885': attribute type 8 has an invalid length. [ 256.675881][T12791] xt_l2tp: wrong L2TP version: 0 [ 256.893489][T12812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.945340][T12818] xt_socket: unknown flags 0x8 [ 256.955673][T12818] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 257.003446][T12824] sctp: [Deprecated]: syz.3.1903 (pid 12824) Use of int in max_burst socket option. [ 257.003446][T12824] Use struct sctp_assoc_value instead [ 257.379887][T12845] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 257.424642][T12849] openvswitch: netlink: IP tunnel dst address not specified [ 257.715310][ T349] tipc: Subscription rejected, illegal request [ 258.099211][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 258.107107][T12883] gtp4: entered promiscuous mode [ 258.125281][T12883] gtp4: entered allmulticast mode [ 258.206489][T12891] __nla_validate_parse: 81 callbacks suppressed [ 258.206508][T12891] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1931'. [ 258.271922][T12890] netlink: 'syz.3.1930': attribute type 11 has an invalid length. [ 258.281557][T12895] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1932'. [ 258.310088][T12890] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1930'. [ 258.666054][T12922] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1941'. [ 258.767230][T12929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1944'. [ 259.401153][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1951'. [ 259.415473][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1951'. [ 259.457304][T12967] IPv6: NLM_F_REPLACE set, but no existing node found! [ 259.680041][T12974] syzkaller1: entered promiscuous mode [ 259.698904][T12974] syzkaller1: entered allmulticast mode [ 259.845068][T12984] sit2: entered promiscuous mode [ 259.886270][T12984] sit2: entered allmulticast mode [ 260.041273][T13002] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1960'. [ 260.560360][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 260.616783][T13045] validate_nla: 2 callbacks suppressed [ 260.616802][T13045] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 260.739132][T13051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1975'. [ 260.967880][T13045] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.017246][T13049] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 261.084034][T13053] bond6: (slave gretap1): making interface the new active one [ 261.095316][T13053] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 261.141701][T13074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.173645][T13074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.213200][T13074] bond0 (unregistering): Released all slaves [ 261.500681][T13102] netlink: 'syz.4.1990': attribute type 1 has an invalid length. [ 261.508513][T13102] netlink: 'syz.4.1990': attribute type 1 has an invalid length. [ 261.536192][T13098] team0: Port device team_slave_0 removed [ 261.546869][T13102] syz_tun: entered allmulticast mode [ 261.564076][T13102] Cannot find add_set index 0 as target [ 261.868220][T13126] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 262.104061][T13136] syzkaller1: entered promiscuous mode [ 262.125082][T13136] syzkaller1: entered allmulticast mode [ 262.671435][T13162] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 263.061459][T13188] netlink: 'syz.1.2007': attribute type 10 has an invalid length. [ 263.126530][T13188] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 263.157536][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.171923][T13188] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 263.190739][T13189] ip6_vti0: entered promiscuous mode [ 263.210357][T13185] __nla_validate_parse: 70 callbacks suppressed [ 263.210375][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 263.258032][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 263.321332][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 263.367228][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 263.475317][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 263.494925][T13206] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2018'. [ 263.515977][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2018'. [ 263.607162][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 263.671703][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 263.700326][T13225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2022'. [ 263.724907][T13220] syzkaller0: entered promiscuous mode [ 263.774210][T13220] syzkaller0: entered allmulticast mode [ 267.245391][T13285] netlink: 'syz.0.2039': attribute type 1 has an invalid length. [ 267.296130][T13276] veth3: entered allmulticast mode [ 267.317085][T13285] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 267.321581][T13297] netlink: 'syz.2.2042': attribute type 1 has an invalid length. [ 267.457505][T13302] delete_channel: no stack [ 267.637065][T13318] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 267.762223][T13318] bond3: entered promiscuous mode [ 267.768132][T13318] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.799902][T13325] macvtap1: entered allmulticast mode [ 267.825922][T13330] bond3: (slave bridge4): making interface the new active one [ 267.833792][T13330] bridge4: entered promiscuous mode [ 267.842619][T13330] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 267.990726][T13329] tipc: Enabled bearer , priority 0 [ 268.067334][T13329] syzkaller0: entered promiscuous mode [ 268.074000][T13329] syzkaller0: entered allmulticast mode [ 268.081640][T13329] tipc: Resetting bearer [ 268.211191][T13326] tipc: Resetting bearer [ 268.473583][T13366] __nla_validate_parse: 7 callbacks suppressed [ 268.473604][T13366] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2062'. [ 268.882943][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 270.544538][T13326] tipc: Disabling bearer [ 270.553392][T13363] netlink: 'syz.0.2062': attribute type 12 has an invalid length. [ 270.561663][T13363] netlink: 'syz.0.2062': attribute type 29 has an invalid length. [ 270.569819][T13363] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2062'. [ 270.581067][T13363] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2062'. [ 270.595495][T13381] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 270.595543][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 270.625564][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.651490][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.683996][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.715011][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.735338][T13386] xt_l2tp: unknown flags: 10 [ 270.907062][T13398] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 271.015940][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 271.145383][T13398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.217012][T13404] bond0: (slave geneve3): making interface the new active one [ 271.231457][T13404] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 271.241147][ T6078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.252760][ T6078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.267097][ T6078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.295382][ T6078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.410585][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 271.458134][T13422] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 271.495116][T13422] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2079'. [ 272.057580][T13448] syzkaller0: entered promiscuous mode [ 272.083609][T13448] syzkaller0: entered allmulticast mode [ 272.107875][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'. [ 272.137893][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'. [ 272.216642][T13465] netlink: 'syz.1.2093': attribute type 5 has an invalid length. [ 272.426858][T13479] xt_hashlimit: size too large, truncated to 1048576 [ 272.438122][T13469] syzkaller1: entered promiscuous mode [ 272.454746][T13469] syzkaller1: entered allmulticast mode [ 273.026912][T13513] syzkaller0: entered promiscuous mode [ 273.040673][T13513] syzkaller0: entered allmulticast mode [ 273.132084][T13524] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 273.312173][T13527] netlink: 'syz.1.2113': attribute type 29 has an invalid length. [ 273.466497][T13543] netlink: 'syz.3.2117': attribute type 29 has an invalid length. [ 273.503225][T13546] netlink: 'syz.3.2117': attribute type 29 has an invalid length. [ 273.513577][T13545] __nla_validate_parse: 3 callbacks suppressed [ 273.513595][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2118'. [ 273.533514][T13543] netlink: 'syz.3.2117': attribute type 29 has an invalid length. [ 273.573175][T13546] netlink: 'syz.3.2117': attribute type 29 has an invalid length. [ 273.592787][T13546] netlink: 'syz.3.2117': attribute type 29 has an invalid length. [ 273.621286][T13549] netlink: 'syz.3.2117': attribute type 29 has an invalid length. [ 273.660720][T13549] netlink: 'syz.3.2117': attribute type 29 has an invalid length. [ 273.769194][T13546] netlink: 'syz.3.2117': attribute type 29 has an invalid length. [ 273.794967][T13564] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 273.983742][T13572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.058642][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2129'. [ 274.247456][T13583] bridge3: port 1(bond6) entered blocking state [ 274.261992][T13583] bridge3: port 1(bond6) entered disabled state [ 274.268725][T13583] bond6: entered allmulticast mode [ 274.278100][T13583] bond6: entered promiscuous mode [ 274.538327][T13608] 8021q: adding VLAN 0 to HW filter on device bond8 [ 274.547169][T13613] lo: entered promiscuous mode [ 274.555442][T13613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.577785][T13608] bond5: (slave veth0_to_bond): Releasing active interface [ 274.607652][T13608] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 274.670431][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2137'. [ 274.682870][T13616] 8021q: adding VLAN 0 to HW filter on device bond9 [ 274.702498][T13616] bond8: (slave bond9): Enslaving as an active interface with a down link [ 274.994610][T13639] lo: entered allmulticast mode [ 275.003392][T13639] lo: left allmulticast mode [ 275.173686][T13654] bond4: entered promiscuous mode [ 275.180029][T13654] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.219581][T13654] macvtap2: entered allmulticast mode [ 275.288326][T13654] bond4: (slave bridge5): making interface the new active one [ 275.315834][T13654] bridge5: entered promiscuous mode [ 275.336383][T13654] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 275.391416][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 275.522269][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 275.541359][ T11] block nbd0: Possible stuck request ffff888027250000: control (read@0,1024B). Runtime 150 seconds [ 275.552641][ T11] block nbd0: Possible stuck request ffff8880272501c0: control (read@1024,1024B). Runtime 150 seconds [ 275.567459][ T11] block nbd0: Possible stuck request ffff888027250380: control (read@2048,1024B). Runtime 150 seconds [ 275.578816][ T11] block nbd0: Possible stuck request ffff888027250540: control (read@3072,1024B). Runtime 150 seconds [ 275.590887][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 275.603659][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 276.202366][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 276.308380][T13710] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2165'. [ 276.535732][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2169'. [ 276.716110][T13734] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 276.747365][T13734] bridge_slave_1: default FDB implementation only supports local addresses [ 277.385610][T13767] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 277.424841][T13767] bond8 (unregistering): Released all slaves [ 277.537338][T13780] gretap3: entered promiscuous mode [ 277.543537][T13780] batman_adv: batadv0: Adding interface: gretap3 [ 277.550277][T13780] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 277.570880][T13780] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 277.954155][ T5162] block nbd1: Receive control failed (result -1) [ 278.977626][T13846] validate_nla: 7 callbacks suppressed [ 278.977645][T13846] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 279.062804][T13846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.098795][T13850] bond5: (slave veth0_to_bond): making interface the new active one [ 279.113547][T13850] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 279.130415][T13856] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 279.145591][T13858] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 279.154112][T13846] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 279.154137][T13846] netlink: 'syz.0.2205': attribute type 2 has an invalid length. [ 279.281520][T13859] bond8: (slave gretap2): making interface the new active one [ 279.304335][T13859] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 279.432250][T13869] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 279.458404][T13869] netlink: 'syz.2.2213': attribute type 2 has an invalid length. [ 279.473611][T13871] xt_hashlimit: size too large, truncated to 1048576 [ 279.808677][T13892] bridge5: entered promiscuous mode [ 279.838773][T13892] bridge5: entered allmulticast mode [ 279.841653][T13894] netlink: 'syz.4.2220': attribute type 11 has an invalid length. [ 279.881275][T13892] team0: Port device bridge5 added [ 279.890311][T13898] netlink: 'syz.4.2220': attribute type 11 has an invalid length. [ 279.902488][T13892] __nla_validate_parse: 10 callbacks suppressed [ 279.902506][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 279.995809][T13902] FAULT_INJECTION: forcing a failure. [ 279.995809][T13902] name failslab, interval 1, probability 0, space 0, times 1 [ 280.078546][T13902] CPU: 0 UID: 0 PID: 13902 Comm: syz.1.2224 Not tainted syzkaller #0 PREEMPT(full) [ 280.078571][T13902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.078588][T13902] Call Trace: [ 280.078596][T13902] [ 280.078603][T13902] dump_stack_lvl+0xe8/0x150 [ 280.078635][T13902] should_fail_ex+0x412/0x560 [ 280.078667][T13902] should_failslab+0xa8/0x100 [ 280.078692][T13902] __kmalloc_cache_noprof+0x88/0x660 [ 280.078714][T13902] ? nft_setelem_flush+0xfb/0x530 [ 280.078739][T13902] nft_setelem_flush+0xfb/0x530 [ 280.078757][T13902] ? nft_pernet+0x23/0x240 [ 280.078786][T13902] nft_bitmap_walk+0x135/0x290 [ 280.078815][T13902] nf_tables_delsetelem+0x181b/0x1fd0 [ 280.078853][T13902] ? __pfx_nf_tables_delsetelem+0x10/0x10 [ 280.078884][T13902] ? __nla_validate_parse+0x2480/0x2dc0 [ 280.078924][T13902] ? __pfx___nla_validate_parse+0x10/0x10 [ 280.078948][T13902] ? __pfx_nf_tables_newset+0x10/0x10 [ 280.078972][T13902] ? __pfx_nft_setelem_flush+0x10/0x10 [ 280.078990][T13902] ? nfnl_pernet+0x23/0x240 [ 280.079022][T13902] ? __nla_parse+0x40/0x60 [ 280.079044][T13902] nfnetlink_rcv+0x123e/0x27b0 [ 280.079104][T13902] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 280.079176][T13902] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.079205][T13902] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.079223][T13902] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.079247][T13902] netlink_unicast+0x75c/0x8e0 [ 280.079284][T13902] netlink_sendmsg+0x813/0xb40 [ 280.079312][T13902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.079335][T13902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.079363][T13902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.079388][T13902] ____sys_sendmsg+0x972/0x9f0 [ 280.079407][T13902] ? __might_fault+0xaf/0x130 [ 280.079431][T13902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.079458][T13902] ? import_iovec+0x73/0xa0 [ 280.079483][T13902] ___sys_sendmsg+0x2a5/0x360 [ 280.079501][T13902] ? __lock_acquire+0x6b5/0x2cf0 [ 280.079531][T13902] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.079586][T13902] ? __fget_files+0x2a/0x420 [ 280.079605][T13902] ? __fget_files+0x3a0/0x420 [ 280.079633][T13902] __x64_sys_sendmsg+0x1bd/0x2a0 [ 280.079655][T13902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.079686][T13902] ? __pfx_ksys_write+0x10/0x10 [ 280.079716][T13902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.079736][T13902] do_syscall_64+0x15f/0xf80 [ 280.079761][T13902] ? clear_bhb_loop+0x40/0x90 [ 280.079784][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.079802][T13902] RIP: 0033:0x7fe305b9cdd9 [ 280.079820][T13902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.079835][T13902] RSP: 002b:00007fe306a7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.079854][T13902] RAX: ffffffffffffffda RBX: 00007fe305e15fa0 RCX: 00007fe305b9cdd9 [ 280.079867][T13902] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 280.079879][T13902] RBP: 00007fe306a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 280.079889][T13902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.079899][T13902] R13: 00007fe305e16038 R14: 00007fe305e15fa0 R15: 00007ffe0c8ea028 [ 280.079930][T13902] [ 280.100570][T13915] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.283835][T13916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 280.697042][T13933] netlink: 'syz.4.2231': attribute type 1 has an invalid length. [ 280.777821][T13933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2231'. [ 280.815140][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 280.830254][T13933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2231'. [ 280.839836][T13929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2231'. [ 280.865757][T13941] xt_ecn: cannot match TCP bits for non-tcp packets [ 280.879171][T13941] xt_ecn: cannot match TCP bits for non-tcp packets [ 280.916614][T13941] xt_ecn: cannot match TCP bits for non-tcp packets [ 281.064127][T13945] xt_CT: No such helper "syz1" [ 281.242043][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 281.338635][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'. [ 281.360350][T13968] FAULT_INJECTION: forcing a failure. [ 281.360350][T13968] name failslab, interval 1, probability 0, space 0, times 0 [ 281.391270][T13968] CPU: 0 UID: 0 PID: 13968 Comm: syz.0.2244 Not tainted syzkaller #0 PREEMPT(full) [ 281.391294][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.391305][T13968] Call Trace: [ 281.391313][T13968] [ 281.391320][T13968] dump_stack_lvl+0xe8/0x150 [ 281.391353][T13968] should_fail_ex+0x412/0x560 [ 281.391387][T13968] should_failslab+0xa8/0x100 [ 281.391414][T13968] __kmalloc_cache_noprof+0x88/0x660 [ 281.391445][T13968] ? nft_setelem_flush+0xfb/0x530 [ 281.391470][T13968] nft_setelem_flush+0xfb/0x530 [ 281.391489][T13968] ? nft_pernet+0x23/0x240 [ 281.391519][T13968] nft_bitmap_walk+0x135/0x290 [ 281.391551][T13968] nf_tables_delsetelem+0x181b/0x1fd0 [ 281.391591][T13968] ? __pfx_nf_tables_delsetelem+0x10/0x10 [ 281.391622][T13968] ? __nla_validate_parse+0x2480/0x2dc0 [ 281.391663][T13968] ? __pfx___nla_validate_parse+0x10/0x10 [ 281.391691][T13968] ? __pfx_nf_tables_newset+0x10/0x10 [ 281.391719][T13968] ? __pfx_nft_setelem_flush+0x10/0x10 [ 281.391739][T13968] ? nfnl_pernet+0x23/0x240 [ 281.391775][T13968] ? __nla_parse+0x40/0x60 [ 281.391800][T13968] nfnetlink_rcv+0x123e/0x27b0 [ 281.391861][T13968] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 281.391934][T13968] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.391962][T13968] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.391980][T13968] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.392004][T13968] netlink_unicast+0x75c/0x8e0 [ 281.392041][T13968] netlink_sendmsg+0x813/0xb40 [ 281.392070][T13968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.392092][T13968] ? aa_sock_msg_perm+0xf1/0x1b0 [ 281.392113][T13968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.392143][T13968] ____sys_sendmsg+0x972/0x9f0 [ 281.392164][T13968] ? __might_fault+0xaf/0x130 [ 281.392190][T13968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.392220][T13968] ? import_iovec+0x73/0xa0 [ 281.392245][T13968] ___sys_sendmsg+0x2a5/0x360 [ 281.392264][T13968] ? __lock_acquire+0x6b5/0x2cf0 [ 281.392294][T13968] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.392350][T13968] ? __fget_files+0x2a/0x420 [ 281.392369][T13968] ? __fget_files+0x3a0/0x420 [ 281.392397][T13968] __x64_sys_sendmsg+0x1bd/0x2a0 [ 281.392421][T13968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.392456][T13968] ? __pfx_ksys_write+0x10/0x10 [ 281.392486][T13968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.392506][T13968] do_syscall_64+0x15f/0xf80 [ 281.392533][T13968] ? clear_bhb_loop+0x40/0x90 [ 281.392555][T13968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.392574][T13968] RIP: 0033:0x7f988d59cdd9 [ 281.392590][T13968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.392606][T13968] RSP: 002b:00007f988e39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.392626][T13968] RAX: ffffffffffffffda RBX: 00007f988d815fa0 RCX: 00007f988d59cdd9 [ 281.392639][T13968] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 281.392650][T13968] RBP: 00007f988e39f090 R08: 0000000000000000 R09: 0000000000000000 [ 281.392661][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.392672][T13968] R13: 00007f988d816038 R14: 00007f988d815fa0 R15: 00007ffe4dd9f108 [ 281.392702][T13968] [ 282.185339][T14010] netlink: 'syz.1.2254': attribute type 4 has an invalid length. [ 282.240693][T14017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2258'. [ 282.507185][T14033] x_tables: duplicate underflow at hook 1 [ 282.533830][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 282.920659][T14061] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2270'. [ 282.931645][T14061] lo: Caught tx_queue_len zero misconfig [ 283.321187][T14065] bond0: (slave gre0): refused to change device type [ 284.133670][T14099] vlan2: entered promiscuous mode [ 284.143873][T14099] erspan0: entered promiscuous mode [ 284.308686][T14108] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2086193997/2086193998 [ 284.330239][T14108] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2086193997/2086193998 [ 284.333248][T14109] netlink: 'syz.1.2283': attribute type 3 has an invalid length. [ 284.634389][T14120] bpq0: entered promiscuous mode [ 284.658040][T14120] [ 284.660410][T14120] ====================================================== [ 284.667437][T14120] WARNING: possible circular locking dependency detected [ 284.674478][T14120] syzkaller #0 Not tainted [ 284.678901][T14120] ------------------------------------------------------ [ 284.685922][T14120] syz.4.2290/14120 is trying to acquire lock: [ 284.691990][T14120] ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 284.701513][T14120] [ 284.701513][T14120] but task is already holding lock: [ 284.708919][T14120] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 284.718520][T14120] [ 284.718520][T14120] which lock already depends on the new lock. [ 284.718520][T14120] [ 284.728987][T14120] [ 284.728987][T14120] the existing dependency chain (in reverse order) is: [ 284.738004][T14120] [ 284.738004][T14120] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 284.745917][T14120] _raw_spin_lock_bh+0x36/0x50 [ 284.751210][T14120] nr_rt_ioctl+0x40c/0xf90 [ 284.756139][T14120] sock_do_ioctl+0x101/0x320 [ 284.761247][T14120] sock_ioctl+0x5c6/0x7f0 [ 284.766092][T14120] __se_sys_ioctl+0xfc/0x170 [ 284.771212][T14120] do_syscall_64+0x15f/0xf80 [ 284.776342][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.782759][T14120] [ 284.782759][T14120] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 284.790757][T14120] _raw_spin_lock_bh+0x36/0x50 [ 284.796042][T14120] nr_rt_ioctl+0x215/0xf90 [ 284.800972][T14120] sock_do_ioctl+0x101/0x320 [ 284.806081][T14120] sock_ioctl+0x5c6/0x7f0 [ 284.810927][T14120] __se_sys_ioctl+0xfc/0x170 [ 284.816033][T14120] do_syscall_64+0x15f/0xf80 [ 284.821171][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.827581][T14120] [ 284.827581][T14120] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 284.835398][T14120] __lock_acquire+0x15a5/0x2cf0 [ 284.840773][T14120] lock_acquire+0x106/0x350 [ 284.845808][T14120] _raw_spin_lock_bh+0x36/0x50 [ 284.851087][T14120] nr_rt_device_down+0xbe/0x860 [ 284.856448][T14120] nr_device_event+0x137/0x150 [ 284.861732][T14120] notifier_call_chain+0x1ad/0x3d0 [ 284.867358][T14120] __dev_notify_flags+0x16d/0x310 [ 284.872896][T14120] netif_change_flags+0xe8/0x1a0 [ 284.878347][T14120] dev_change_flags+0x130/0x270 [ 284.883708][T14120] dev_ioctl+0x7b4/0x1150 [ 284.888557][T14120] sock_do_ioctl+0x23e/0x320 [ 284.893663][T14120] sock_ioctl+0x5c6/0x7f0 [ 284.898511][T14120] __se_sys_ioctl+0xfc/0x170 [ 284.903622][T14120] do_syscall_64+0x15f/0xf80 [ 284.908737][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.915147][T14120] [ 284.915147][T14120] other info that might help us debug this: [ 284.915147][T14120] [ 284.925360][T14120] Chain exists of: [ 284.925360][T14120] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 284.925360][T14120] [ 284.939176][T14120] Possible unsafe locking scenario: [ 284.939176][T14120] [ 284.946620][T14120] CPU0 CPU1 [ 284.951976][T14120] ---- ---- [ 284.957329][T14120] lock(nr_neigh_list_lock); [ 284.962001][T14120] lock(&nr_node->node_lock); [ 284.969281][T14120] lock(nr_neigh_list_lock); [ 284.976482][T14120] lock(nr_node_list_lock); [ 284.981068][T14120] [ 284.981068][T14120] *** DEADLOCK *** [ 284.981068][T14120] [ 284.989202][T14120] 2 locks held by syz.4.2290/14120: [ 284.994388][T14120] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 285.003194][T14120] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 285.013202][T14120] [ 285.013202][T14120] stack backtrace: [ 285.019084][T14120] CPU: 0 UID: 0 PID: 14120 Comm: syz.4.2290 Not tainted syzkaller #0 PREEMPT(full) [ 285.019108][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.019121][T14120] Call Trace: [ 285.019130][T14120] [ 285.019140][T14120] dump_stack_lvl+0xe8/0x150 [ 285.019173][T14120] print_circular_bug+0x2e1/0x300 [ 285.019198][T14120] check_noncircular+0x12e/0x150 [ 285.019219][T14120] __lock_acquire+0x15a5/0x2cf0 [ 285.019246][T14120] ? __lock_acquire+0x6b5/0x2cf0 [ 285.019270][T14120] ? dsa_user_netdevice_event+0x495/0x2850 [ 285.019290][T14120] ? packet_notifier+0x121/0xf70 [ 285.019311][T14120] ? nr_rt_device_down+0xbe/0x860 [ 285.019324][T14120] lock_acquire+0x106/0x350 [ 285.019347][T14120] ? nr_rt_device_down+0xbe/0x860 [ 285.019362][T14120] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 285.019383][T14120] ? nr_rt_device_down+0xbe/0x860 [ 285.019397][T14120] _raw_spin_lock_bh+0x36/0x50 [ 285.019416][T14120] ? nr_rt_device_down+0xbe/0x860 [ 285.019430][T14120] nr_rt_device_down+0xbe/0x860 [ 285.019444][T14120] ? nr_device_event+0x12f/0x150 [ 285.019470][T14120] nr_device_event+0x137/0x150 [ 285.019493][T14120] notifier_call_chain+0x1ad/0x3d0 [ 285.019513][T14120] __dev_notify_flags+0x16d/0x310 [ 285.019531][T14120] ? __pfx___dev_notify_flags+0x10/0x10 [ 285.019545][T14120] ? __dev_change_flags+0x5a0/0x7e0 [ 285.019562][T14120] ? __pfx___dev_change_flags+0x10/0x10 [ 285.019579][T14120] ? full_name_hash+0x92/0xe0 [ 285.019595][T14120] netif_change_flags+0xe8/0x1a0 [ 285.019613][T14120] dev_change_flags+0x130/0x270 [ 285.019630][T14120] dev_ioctl+0x7b4/0x1150 [ 285.019654][T14120] sock_do_ioctl+0x23e/0x320 [ 285.019676][T14120] ? __pfx_sock_do_ioctl+0x10/0x10 [ 285.019696][T14120] ? do_futex+0x395/0x420 [ 285.019716][T14120] sock_ioctl+0x5c6/0x7f0 [ 285.019736][T14120] ? __pfx_sock_ioctl+0x10/0x10 [ 285.019755][T14120] ? __fget_files+0x2a/0x420 [ 285.019770][T14120] ? __fget_files+0x3a0/0x420 [ 285.019790][T14120] ? __fget_files+0x2a/0x420 [ 285.019806][T14120] ? bpf_lsm_file_ioctl+0x9/0x20 [ 285.019827][T14120] ? __pfx_sock_ioctl+0x10/0x10 [ 285.019846][T14120] __se_sys_ioctl+0xfc/0x170 [ 285.019865][T14120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.019882][T14120] do_syscall_64+0x15f/0xf80 [ 285.019903][T14120] ? trace_irq_disable+0x3b/0x140 [ 285.019923][T14120] ? clear_bhb_loop+0x40/0x90 [ 285.019941][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.019956][T14120] RIP: 0033:0x7f3c78d9cdd9 [ 285.019972][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.019987][T14120] RSP: 002b:00007f3c79b7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.020004][T14120] RAX: ffffffffffffffda RBX: 00007f3c79015fa0 RCX: 00007f3c78d9cdd9 [ 285.020016][T14120] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 285.020027][T14120] RBP: 00007f3c78e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 285.020037][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.020047][T14120] R13: 00007f3c79016038 R14: 00007f3c79015fa0 R15: 00007ffe0f4c5618 [ 285.020066][T14120]