last executing test programs: 4.41126238s ago: executing program 1 (id=4818): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f0000001a00)=""/205, 0xcd}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/4062, 0xfde}, {&(0x7f0000001b00)=""/210, 0xd2}, {&(0x7f0000001880)=""/131, 0x83}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000880)=""/4089, 0xff9}, {&(0x7f00000004c0)=""/235, 0xeb}], 0xa}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f0000001a00)=""/205, 0xcd}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/4062, 0xfde}, {&(0x7f0000001b00)=""/210, 0xd2}, {&(0x7f0000001880)=""/131, 0x83}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000880)=""/4089, 0xff9}, {&(0x7f00000004c0)=""/235, 0xeb}], 0xa}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 4.007871202s ago: executing program 1 (id=4823): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000180)=0x800001, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r2, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r1, 0xfffff7fe) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 3.977968952s ago: executing program 1 (id=4824): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0xf4, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x9, 0x8, 0x4, 0x2, 0x5, 0x4, 0x5}}, {0xe, 0x2, [0x8, 0x2, 0xec56, 0x2, 0x2]}}, {{0x1c, 0x1, {0x4c, 0x4, 0x0, 0x3, 0x0, 0x4, 0x4, 0x3}}, {0xa, 0x2, [0x8, 0x3a4, 0x2]}}, {{0x1c, 0x1, {0x6e, 0xfa, 0x0, 0x5, 0x0, 0xffff, 0x4, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x81, 0x40, 0xe06, 0xe7a, 0x0, 0x0, 0x7, 0x4}}, {0xc, 0x2, [0x6fa, 0x7f, 0x8, 0x2]}}, {{0x1c, 0x1, {0x5, 0x4, 0x2, 0x94, 0x0, 0x5, 0x5, 0x2}}, {0x8, 0x2, [0x2, 0x800]}}]}]}, 0xf4}}, 0x20008000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0xc4ec, @rand_addr=' \x01\x00', 0xf0}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)='~', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r7, 0x1) (async) shutdown(r7, 0x1) r8 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000b00)={{0x3, @null}, [@bcast, @default, @default, @default, @default, @default, @remote, @bcast]}, &(0x7f0000000900)=0x48, 0x80000) ioctl$SIOCAX25DELFWD(r8, 0x89eb, &(0x7f0000000940)={@null, @bcast}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0xfa, 0x81, 0x8, 0x7, 0x2d, 0xb8, 0x5, 0x8, 0x9, 0x3, 0x3, 0xa, 0x6, 0xe}, 0xe) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000080)=@raw=[@ringbuf_query, @ringbuf_query, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000180)=""/124, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x1, 0x5, 0xe, 0xc}, {0x0, 0x1, 0xb}, {0x0, 0x1, 0xc, 0x7}, {0x2, 0x3, 0xf, 0x3}, {0x0, 0x1, 0xb, 0xa}, {0x4, 0x3, 0xe, 0x5}], 0x10, 0x7f}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r9, 0x0, 0x25, 0x12, @val=@kprobe_multi=@syms={0x1, 0x8, &(0x7f0000000740)=[&(0x7f0000000540)=' \x01\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='#\x00', &(0x7f0000000640)='-\x00', &(0x7f0000000680)='\']]/.,*\'\xcb-+)}\':+d+.\x00', &(0x7f00000006c0)='!{\'\x00', &(0x7f0000000700)='(*%@[^:\xa4\'\'\x00'], 0x0, 0x9}}, 0x30) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r9, 0x0, 0x25, 0x12, @val=@kprobe_multi=@syms={0x1, 0x8, &(0x7f0000000740)=[&(0x7f0000000540)=' \x01\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='#\x00', &(0x7f0000000640)='-\x00', &(0x7f0000000680)='\']]/.,*\'\xcb-+)}\':+d+.\x00', &(0x7f00000006c0)='!{\'\x00', &(0x7f0000000700)='(*%@[^:\xa4\'\'\x00'], 0x0, 0x9}}, 0x30) 3.854725989s ago: executing program 4 (id=4827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_getrule={0x0, 0x22, 0x2, 0x70bd2d, 0x25dfdbfc, {0x2, 0x14, 0x80, 0x6, 0x9, 0x0, 0x0, 0x3, 0x10005}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21060}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x9c4d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4080) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60102200}, 0xc, &(0x7f0000001540)={&(0x7f0000000b40)=@deltclass={0x9cc, 0x29, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x6, 0x5}, {0xc, 0x6}}, [@c_atm={{0x8}, {0x104, 0x2, [@TCA_ATM_HDR={0x39, 0x3, "ad007d100b8253174b5f4887facdfd3424e9deb4b95b1a297b3c9cb226dad90b7d0d0f41db7549f37a3a4e1a56acd3adc4d5cd23ae"}, @TCA_ATM_HDR={0x32, 0x3, "46d23a080ec46198b1d2a2047a7ad33007507d7d54a2b350a15ef31f53a8e556f0efec7608c925985d840743e587"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x10}}, @TCA_ATM_HDR={0x29, 0x3, "77349b95403a7f44d346c8524104e9303c0e49d358cd3a1bd3aba2ac64a0e9a728bb397d0f"}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xd}}, @TCA_ATM_HDR={0x32, 0x3, "7d05a4e11406d76a809aeba1e23d17c6d36d72e743677a152ff0568d5b3a9bef6cd8819905145aeafd4cefe523e4"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xd}}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa}}]}}, @c_cbq={{0x8}, {0x864, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xba, 0x1, 0x2, 0x2, 0x6c8, 0x6}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0x7}, 0xa6, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x7, 0x4, 0xc5b, 0xdd9, 0xd, 0x5, 0x5, 0x6, 0x2, 0x6, 0xfffffff3, 0x4b5c, 0x1, 0x7, 0x5, 0x6, 0xfffffff9, 0x4, 0x80000000, 0x0, 0x10000, 0x7, 0xffff, 0x401, 0xa2, 0x3, 0x5, 0x1, 0x1ff, 0x8e, 0x5, 0xfffffffe, 0x1, 0xc, 0x5, 0x40000, 0x0, 0x5, 0xe, 0x10001, 0x7, 0x10000, 0x401, 0x7, 0x9, 0x3, 0x4, 0x7, 0x42, 0xa7, 0x7b76, 0x10001, 0x3, 0x4, 0x1, 0xffffffff, 0x0, 0x45c, 0x6, 0x793, 0x80000000, 0x8, 0x4b, 0x1, 0x1, 0x2, 0x3, 0x401, 0x200, 0x5, 0x9, 0x7, 0x85, 0x1, 0x0, 0x100, 0x3, 0x3, 0x6, 0x3, 0xffff5ed4, 0x5, 0xf7, 0x8, 0x9, 0x1, 0x2, 0x57e, 0x8, 0x80000001, 0x6, 0x8, 0x8, 0x200, 0x0, 0x4, 0xb7, 0x8c, 0x2, 0x6, 0xfffffffd, 0x6a65, 0x3, 0x7, 0xfff, 0x4, 0x7, 0xfffffff4, 0x6133, 0x89b, 0x80, 0x40, 0x72, 0x9, 0x3ff, 0x8001, 0xe2, 0x40, 0x9, 0xfffffffd, 0xac14, 0x8, 0x60d, 0x8001, 0x7f, 0x6, 0x3, 0x3, 0x4, 0x7, 0x4, 0x1de, 0x28c, 0x54, 0x6, 0x2, 0x3, 0x7, 0x200, 0x0, 0x6, 0xec, 0x9, 0x9, 0x4, 0x7fff, 0x81, 0x1, 0xffffffff, 0x0, 0x0, 0xfb, 0xf2, 0x8, 0x3, 0x2, 0xdd03, 0x1000, 0x5, 0xf, 0x200000, 0x80000000, 0x1, 0x401, 0x78, 0x9, 0x4, 0x0, 0x3, 0xffffffff, 0x3, 0x800, 0x7, 0xff, 0x5, 0xe, 0x5, 0x8, 0x0, 0x291e6c67, 0x5, 0x4ad5f302, 0x7, 0x1, 0x10, 0x1, 0x8f, 0x73, 0x5, 0x80000000, 0xfff, 0x8, 0xfff, 0x81, 0x9, 0x7, 0x80000001, 0x400, 0x3, 0xfffffffd, 0x7, 0x1, 0x1, 0xfffffc01, 0x1a9c, 0x8, 0x1, 0x4, 0xaa, 0x80000001, 0x10000, 0x100, 0xffffffff, 0x8, 0x8, 0x732, 0x10001, 0x1, 0x6, 0xffff, 0x2, 0x1, 0x9794, 0xd825, 0x6, 0x5, 0x0, 0x1, 0x0, 0x411, 0x720e, 0x8, 0x3, 0x4, 0x3, 0x9, 0x4b9a, 0x2, 0x5, 0x8a, 0xf, 0x2, 0xc9, 0x1, 0x6, 0x10, 0x8, 0xd, 0x8, 0x6, 0x1ff, 0x3, 0x3, 0xff, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x8, 0x5, 0x6, 0x10001, 0x3ff, 0x3, 0x7fffffff, 0x3, 0x28, 0x2, 0x6, 0x2, 0x6, 0x7, 0x401, 0x0, 0x7f, 0xfd, 0xa27f, 0x6, 0x7f, 0x7, 0x6, 0x7, 0x0, 0x6, 0x9, 0x7, 0xfff, 0x7dc0, 0xffffff1b, 0x4, 0xffffffff, 0x3, 0x4, 0x6, 0xffff, 0x7f, 0x3a3, 0xe, 0x52ec, 0x7, 0x5, 0xf7, 0x2, 0xfff, 0x4, 0xffffff80, 0x45c, 0x8, 0x2, 0x5, 0x21f4, 0x9, 0xcce9, 0xb7db, 0xff, 0x808, 0x2, 0x10001, 0xa, 0x7, 0xffff, 0x4, 0x3b2, 0xb, 0xfffffffd, 0x3, 0x3, 0x0, 0x7, 0x2, 0x7, 0x4, 0xd, 0x4, 0x5, 0x6, 0x0, 0x3, 0xfd, 0x7, 0x10001, 0x5ba, 0xa, 0xffff, 0xfffffffd, 0x62f1, 0x10000, 0x9, 0x863c, 0x200, 0x4, 0x188b, 0xf, 0x0, 0x0, 0x9, 0x7, 0x400, 0x2, 0x1000, 0x5, 0x6, 0x3, 0x10, 0xcf0a, 0x2, 0x1, 0x51c7, 0xfffffff7, 0x3, 0x800, 0x115, 0x1, 0x9, 0xf5a, 0x7, 0x1, 0xd, 0x5, 0x2, 0x9, 0xffffffff, 0x6, 0x10, 0x9, 0x2, 0x40, 0x7, 0x16d, 0x9a31, 0x1, 0x9, 0xffffffff, 0x4, 0x9, 0x9, 0x100, 0x7, 0xc, 0x2, 0x8001, 0x8, 0x9, 0x182, 0x7, 0x3, 0x1, 0x7ff, 0xc54, 0x3, 0x9, 0x5, 0x0, 0x8, 0x9, 0x5, 0x7, 0x4a2, 0x8, 0x6, 0xffffff00, 0xa, 0x9, 0x0, 0x7, 0x100, 0x1, 0x334, 0x1, 0x22, 0x8, 0xdd67, 0x3, 0x3, 0xd, 0x7, 0x0, 0x50, 0x4, 0x2, 0x1, 0x7, 0x101, 0xe, 0x6, 0x40, 0x4, 0x2, 0x80000001, 0x8, 0x254b, 0x3, 0x1a, 0x3, 0x5, 0xff, 0x0, 0xe, 0x10001, 0x5, 0x2, 0x5, 0x3, 0x53, 0x2, 0x4, 0x2, 0x5, 0x1, 0x3, 0x3, 0x8, 0x4c62, 0x5, 0x10, 0x7fffffff, 0x1, 0x80000001, 0x9, 0x80000000, 0x0, 0x1ff, 0x8, 0xffff0001, 0x7b81, 0x200, 0x9, 0xffff, 0x0, 0x5, 0x10000, 0x1, 0xeeb, 0x7, 0x7, 0x1, 0x3, 0x7, 0xa, 0x3, 0x0, 0x8, 0x1, 0x3ff, 0x7, 0xfffffff8, 0x625, 0x0, 0x0, 0x8, 0x3ff, 0xe6b, 0x45]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xffe3}, 0x7fff, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x27, 0x1, 0x4, 0x7, 0x7, 0x8000, 0x101, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0xfa, 0x1, 0x400, 0x200, 0x9, 0x2}}]}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x6, 0xfe, 0x40, 0x1, 0xb81}}]}}]}, 0x9cc}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x9000000, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000408000b40000000002c0004802800018008000100667764001c000280080002400000000a080003400000000808000140000000170900010073797a3000"], 0xc8}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000003f000008000a00", @ANYRES32=r7, @ANYBLOB="140012800b000100627269050000000000000080"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.818687222s ago: executing program 1 (id=4829): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000180)='.\xa1P\xed\x9b\x16k \x01\x96\xbc\xda\x13\x00\x02\'\x00\x00\x00\x00', 0x44081, &(0x7f00000001c0)={@align=0x4, {0xe1f6, 0x3, 0x7, 0x13}}, 0x87d7, &(0x7f0000000380), &(0x7f0000000440)=0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffd, 0xb, 0xffffffff}, 0x10}, 0x94) unshare(0x6a040000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x14044, 0x4) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r7, 0x884, 0x80, &(0x7f0000000000)="1400187e09000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) 3.59482286s ago: executing program 4 (id=4832): r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/217, 0xd9}], 0x6, &(0x7f00000005c0)=""/4096, 0x1000}, 0x2001) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001600)="008bf4bb22785098d7da1ea9a5c90d2e19bc06e867bd07dd8795e0719ece8b1570b2a9243f946791b38d53c1d89e576db9ee66ecab298aaec9ff3e4fc7f38bde67c51b41b5edd3c4319f174d5217a20e6b604e461eb90414fde3669e7906db39bec29ac381c739ce874c9ea039971de6c611b03e0ac5d277541cc343c72853074093cf", 0x83}, {&(0x7f00000016c0)="d7b6652530cc64d50b2d18c518da5daebb8a7870084aebf3c73f5c0fbf1cd4e11c8415a2b2a887aea4de8fdf5592e29e7660e98a68eba8b067dec21c6349c5cd6687e55325554c2348e891899c", 0x4d}, {&(0x7f0000001740)="7d61aadb5bbb4977e1774ce4a22b11bf1342b7668d83dedf91793f22d10573a9f675daf69cc765f4264bd583070949f011594fa2dfa301fb2ccbc7bf45bd8c443e9fb51e76c177ee574bc4715b3ac07c2ca29e72c600f2c3d837310aaae3807857bc6e44df9dda79876521ba868e500242a46e8f47ba31bffacf1b1e1348fe76fb4e4a8b55913e803658be39abacc995a4fe4059f8647450628254934bbf953cf4edbd7e5f5613ba680935f13d252577815d1b384066a1b446df2fead00d0a320f88236b99df7584", 0xc8}], 0x3, &(0x7f0000001880)=[{0xb0, 0x6, 0x0, "9e02b83fc6092ed1d66aa2436dda81af66eb8472bae95d8e6de49f7cd4d588b93cb9357fd09ea0f096e0f84b8bb370a4120488136947eedf203301fcffdc4f47fd0413c22a29b7997efb0fb6eae9ba4de9e5e1deaa7ed6de2c05afc64bd16606965ccddec068f900713ac7e5cb67fb3640e7727288ac7db7256361aeaf06f7c2fea127c7f11480434b411985a8c3437c39886f413a6d2dc1d4090ae207b629"}, {0x88, 0x10f, 0x2, "599a8c9293fe04dae32143fb5b10da36c14e0ed2296934fb5a4cae4f14c4211369d1732c9420cb9632ff65d334fdb78b53fdcea87b114038f46a2722f79bdee94eb0254a5c5a8807592d92ada44b2c86faddf741283ab8ebf61793126a8d489e9fd7a2ed7bc9df19a5def1fe88a4f1539da471ca"}, {0xb0, 0x11, 0x3, "9b9932b617d1f198cb80650d3cc0646eb981e3b8aeb1b0e43d09e810b62b2e60c83dceee8b746fe59a33f1cb521e39e9d46e5f1794cc8d9b62d49889c06d89d369c0ca7c0fb0d63a52af46c3aca0dccb42c53fa14eca1e8d518364305a0311481ff3ede0c2588a62b30c75829e14d6b7ac550a555c3c0e51c75a181ae9805d3e32347e007fbdfe53f1ddf47bbee3920b1612646bf3db3473a1"}, {0x90, 0x115, 0x5, "ffedc4f19f2aace9b29773c170ffe18f9573119e5a21bd5a0a3797dddfe03803aaba3ced5aaf1ab17bcf49dd7e2a2feb915593daa415bac754fdaeccb8942bfcf52b42cc7dcbf76b2d70514b1639123444d5e247732e536907604592d463878f92912f4819cf36a36612a02a09bfc110b314330a31fe6d34acec6c"}], 0x278}, 0x4008040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001c00)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) vmsplice(r0, &(0x7f0000001ec0)=[{&(0x7f0000001d00)="454c512305e94dabd23b26dd927d51da49365ad76bb389784898998871c631c929aff4bcb49eccd3b1a4acf404bb40fb153e36551a94a92d9c45a4c49fb3e943e5b27066655a048dbf8ad357a6f383c97823e891df7ef8db0b5058bea6ef55790bc855ab01792643197c85166d29a3e3a7706a03120a6053cfda95424a5fb7855e3a0c418952c3a0cb890a3c08f30d7135fe718e9239589ac75a91b7d7bb75a0aa34690dd435bbca20a28383764ce6736dac01b99428287bdc2f1aff3f5e5de3826d3fe77125ff56c444104266b173047818427e0510dd182186f8b8f94e45db6c3bdee7", 0xe4}, {&(0x7f0000001e00)="65c2a2c802bb2e3741815e4f84420550837257e6b29fde95bef88dcce15930d336fc644e3bc0fc35b4f4f5228c75b42f11577317f21f58bcf3281455e828ee17b9d34baae2a865b4118b823a5670c1134f72c67a64a059c69557524d871d75acc4161da3e3f6d431e9c3a2b1c357424e804ca31ddf6eb857efbc54575c33e55408c8160af98b0e6a", 0x88}], 0x2, 0xe) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000001f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x0, @loopback, 0x2}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001f80)="bc88802a4950f375e7e79130dc22c1ee63c6eef075b2b658b6a7c86668656e1a0127c12619ab22737d72458a058d312d33bc01391d3f5828ab2b59187fb7d0764957f9f6c770135f07dff08115cea4f271deee394367dc09e3a78ade7aa52f667c0e5d7c05d92eb2048199f5a5a1b4e454431547202b4f18887efa8f53763d9b4bfa5b9ef22b2a0cb628e14cfb3a92ea9a47be87d59e49a9c2", 0x99}], 0x1}, 0x20080) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x18, 0x3f9, 0x4, 0x70bd26, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0xd4}, 0x2080009) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x6c, r6, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000008) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000002340)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x35, 0x0, "58a13c6bdcb64594d265a00718b3bbb57bff53b1287632e84b4547e274ce63163eb2fc2fa7f2f4dbf7ec219c77eca220c4142ca00592141e5412212b59f689ebc67359cf0f757d67e723dac5d3d9beab"}, 0xd8) socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003600)={0x18, 0x1b, &(0x7f0000002440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x97}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x13}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xd, 0x1, 0x0, 0x40, 0xfffffffffffffff0}]}, &(0x7f0000002540)='GPL\x00', 0x5, 0x1000, &(0x7f0000002580)=""/4096, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000035c0)={0x3, 0xa, 0x80000001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003980)={r8, 0xe0, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000036c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000003700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000003780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000037c0), &(0x7f0000003800), 0x8, 0x36, 0x8, 0x8, &(0x7f0000003840)}}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000003b00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a00)={0xc0, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:wtmp_t:s0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000005}, 0x44) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000003c80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x54, r10, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x7c}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc080}, 0x20008008) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000003cc0)={r0}) sendmsg$NL80211_CMD_SET_WOWLAN(r11, &(0x7f0000004e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e00)={&(0x7f0000003d40)={0x1084, r10, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xfffff801, 0x41}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x230, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xf8, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x9c, 0x84, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xb4a4}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xcacf}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="8882c1cb45c5"}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x34, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x2}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xd}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @rand_addr=0x64010101}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x81}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @broadcast}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xe4, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x4}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xa0, 0xb, "aa4ee0d7ccdca23033817709caa9838b33869e46e86b9d5f787691b486aa61597a49f9a75c6d03ab1c0c2905a5646f5edaf3f3fc8af4b2a3e572f9b42a3cc9be3f10e23ee3cb0f00d9c472bfd8a0c4f0f3049be08ba509c830e8ca61004996be763bbd83bdcbf770b085d849a437d596ec471af0f67cb67e14f605a47349408044609f2f1c5ab97e1d9cc6b7c1eee63e91d8af5ee7e9a5338f328a4a"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x39, 0x8, {0x1, 0x2, "12381e981adad0a4e15642ab30b3aa386fc4ebee7cbbadc99c4d469254fd3e81b52c403eee4f56de346ec46bf6"}}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x108, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0xf}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xc}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x93, 0x6, "99df2f988dd9a12e117bb9fc4bc6a120b73fb8e7e2eac933ad1d3260fbb317d2f766c48cafc099edaabc42b5cc80d0eadd239eca4b265eb4d73943c5a087b769ed6f3bc37d21f913bf3537867a1d18184e6c4a2eb0d84ecaa32faa9a095abf40e7b5612ff6901c5777ed31794256a96f2eef177a4d25d4e6fa6fb89dacd43ecaae0b9fcc8718651be871ae699bb028"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x50, 0x8, {0x1ff, 0x4, "32b2c1a059e51f960b1a4a9250942046459ab854e4a268c25aa6019cfda56409c0c532e665f09b9751453a0ef66c283433b3689ead9709c134b238230fef5adb4fa96956"}}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xd0c, 0x4, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xd2, 0x1, "d57508c388e255253d35fbd23e7ad231c0e52e9d6f60ac68ad215034cbdb06080d0a08ab2071503ead5e05ed16c7d383d37dd721ba601a3786850d461ca42849c94efb8fc3f6b330606b8765b4594c0c04b9b3ad3a7599063681b3dc74f921fec13497f2c7f603bf40fb2bd397fff0aecd9ff9cea3a8f9d1f627103355b71583c4e64c24bf09e98419e16ca0d55eb44f5d9a6bb8d6b95d0812cac67eb8777146fea34fd090bf8cb345a78e7a7799837b89213a457fb6ef7d124a05d9aba22d848ed6e99636452c3a870297011164"}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd2}, @NL80211_PKTPAT_MASK={0x85, 0x1, "b41925f6c84af5382fdf41859fb37ec7ba65e0a64e746102b85f4d921d6d136e418331ac864097e3c52778e176e093c063847e36abf27383c850d07cfb885d01241cedc63ee0d7728d46d8c9c21cfd48a242f88488b69f3ac43455a8222f9dbf77a0b94f12a81cb2ec9bc89d446dff3f1e4aa93d11e9d4286dd72acc89cf3d4f21"}, @NL80211_PKTPAT_MASK={0x74, 0x1, "568fd95c66dab198a0642f80a09832d0bbb5281e5da011660c57e0b18e712c7f1359712f09cee87b2aabd8d480a3d72fd524216c562e9f2d81383603fc1712df4c0d8b1f402fdb346ddf124db2b9a0737bdf15f494b29bc9f56c68f65805ba2042f4a0e306616e6c4438188dc76284b2"}, @NL80211_PKTPAT_MASK={0x11, 0x1, "fa54dad15d46f9fcea02612f9e"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0x6a, 0x1, "e7987af2aec1a32c88fa1a9f35dbad433daa07f9d74f20d40e9a695142915ae27616bb9828bc7a4c144827e7f806987520c5f63586bb4d90e78a0d895d9026118083b300fef6d065e64fda0245bd68d85ed323b08372d8061553821791b3c3147723d9396c19"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffffe}]}, {0x1c0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0xac, 0x1, "cceff2e0738e3e2e1241cbc6f8b28c5975155853973676b96fcf88b00343b63bd97bb9623258e12e73ab9d024e9393298184403ef00fcb60a6095071fa9c9e4e7614e5437f3bc3c40f11f029fbe131764a57f8892554b969f822774b7b661e15086ef8b76b95c092a717a4010eb4c8e0e815d93657b1299cb1402df1a28cc2e15f32fe6d37e3de7107b1091d4825b31de94c347e6526096b45e0968bc993f1e3877a46bf13755e45"}, @NL80211_PKTPAT_PATTERN={0x81, 0x2, "99303be13860463d01a90c81d5d452c955f1c20952b37cbe8acbc6f62876a6bf2137ab65401d96e01a8a46ff08572996893bef054f1900da468c81ded8f1d6d2e720cc294d855b4bd988db5774f1f7f2a107622477806c2f5ee4440829877e80550afd7412217e3206dee7615374e3aa9f2722135ac552d755c063ace0"}, @NL80211_PKTPAT_PATTERN={0x69, 0x2, "a50488a08279b6932b7e9073a4236c85e75ff1d79174fae047a18342b551c76dd4b4f6a98c92a3759e831ca90e3ba3a55425e1045000913d78c54e7b508b40825f9d97e4eccdf695a42fb6e15bc254ff2845b46ac5903cea63face651d6cd7d6f3e49a372d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x5, 0x2, '\''}]}, {0x330, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_PATTERN={0x3e, 0x2, "463b135e824a4addba08b9b1ed6bb4b71357a94685e6662c0324e9fdcc3ea53d903e6befb4f398429ab20b0d9ff7882d0b944cee8eb368d7de89"}, @NL80211_PKTPAT_MASK={0xb3, 0x1, "09d2eb33639564b40417097325ba63226e50d215aebe464de7f056de292daef884fa85485a60fff30637f722c3015b7f73a85adafded620f2f9054275de062a24f3d0b6f0beca44cffa4342f7e21e95646ad78dcf89cb126e614185e1eb660b52885e7baa4e440657bcf3568b0b8fda7bd187b0a6f61c529c991318c64bb3bc1cfefc51a40a233a77d4a758444d93f6736c4352637453bd5f46a046ce2ebbb3763d5faf15f585889b1a56f0265aaf9"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fff}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x400}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0x96, 0x1, "f765b010c3783c7f46ca9a10206a22eff6361a4e37f0837429d707e7197324a2b647d7359589240c2ea3ef951a3e474081f392d7fedd57c25b227c2e8e4f62f647d49540e56b3907cd6cfa352f0c179f2cdb9edca4e6bdf4a6118e8a8f6ecc8f65140f8f5a69571c9dc03212c850757f4eeee65cdbc554e5017774f3862ee7fe9b16944a62609543f2463c91a39969c3760b"}, @NL80211_PKTPAT_PATTERN={0xa8, 0x2, "6669225c93c882335a8cc6a20638b548266e5d8ac413c3fa946e3b6d1b4236aef442bff109c0c36152697bae6c21c31b226de20a2c38313fc73830077ee6be18aabbcbdab7a0b2e1ef679e66fddc7532c0e012a8b9d0db7e24f73650d00abed30f0c9cd52f0db68adfa4cb159403e7c6d68a0e2bbd9226cb5888a19a73bd46a19db2a1700404045a1c457d82aeedb4c100442b08d7c716104c156ad042d8a4614af5a516"}, @NL80211_PKTPAT_MASK={0xcd, 0x1, "af1fba6af2480e075a1559c9959e09a556df8ac22541c07e5a66eae6206f4872608442d0eae1dea4decd30ccfe0afa55c902279c030928aa602a9bf65c0acc3c7d99c5b3a3de31f4258af53637bae9ce7a2aaf1665ac4c656bf6f5c607b9958cb91b674fac29fb4593500a8b4d7cb9a2e627a1fa3eec4048315ee643866b546f6b28cf2b72c7021c9fa054ac0f006dc1746752b821685051eb04f4827fdeb7a330ccb8a4cdd23008da813a6cc837c9aa0c83a7635744682891cba5618df3f92e669816f9d350059b70"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0xb6, 0x2, "b0a60a958d2b3b68d9550ea4d6da389f593002a9d501519b0db55f6caf409a9725be9ec515362b965730adb883509ee5ba023a9da787ba5b8d03b9b51957c7426c0b5a8f7ad00cd516a563c09874c54513b9e58cf740556fb551d18a5f8c4ba832ad17407a68e336defd5e147c771d75ff01ad23b4da582c7e8e7f0e5f95e91d3319469a9a030c65339434685e012443533b8ad022bed61ab391c8324090f916dbad725bf9af5bc3d55a3bcc47ee2411743e"}, @NL80211_PKTPAT_MASK={0xae, 0x1, "aa17020cd6c8e7fc13ae8ce28e9d5d45f5e914c43292f149343c53646d4abca023c38f4c13bb5cab7eb2c5b355de695c2261359b82db4da8c892c58d7a19d4532f0fcca8528f0b56a39f1d65fa219c648f2332853dce93615c6c71e44d2edd1c5841f375a2b34f6b603a43aa63a5ddcfbf04ecaf3db9ff6ea6315b74f522ecb675fcfbc24c873864bc4511655b3aae86b315a55429d79e69df1fadcb937fd467f25b23e66f8629864658"}]}, {0x4}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}, @NL80211_PKTPAT_MASK={0xab, 0x1, "ad7ecee7696683075bc27c7d6ff63624e55e9922bb2adeb273ac8481237bada6f5b8aa2eec0621f8195701efbde014085bcb59dd94023e860d9df6ef0b668f11d8d591fa920242686402055c05f69479922cbced2e9449781a83d854a517db81a32f2b813f1b4479d0a36ff8973959c6a9b7ee0dfa49ecc7e324999965d5b092cd5e6bad4d14aae53265e12729d5c0f08433fa0ab073a7f48b21597da17a1c3354ff3ee29b6691"}, @NL80211_PKTPAT_MASK={0xfa, 0x1, "15e5024d771d050b94d389cb0e50c533d0c9ed6b84c6368d4f7342a2b385e6ff920670e2690b88086a9f1714fad18003998832d48c29728a4e0feab43bf7cee8aebc0000fac1a72682b74801baefb45a641b1b376be367cf556b91ed6764f0b33f6f125f30ce6dcd2468bda4034a37d9fdf9f0daffb6616427363841ee7d91573a2110678d2d707400c006841098565e7232e693ba57a585c6af56c68705d926e963ed26554daf6f9103f08b18dc5d8884851388f2c1a50b61ad8f12b486e4bad9ac0fea013150c49356cf4af26245124bcb22f8ea47e723d5f65f22ddd3f55c3a2fec5e154c8fbec15322f458331ed2d4edc2fd5bfc"}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xc7, 0x1, "966430f88692302bcfa3e5c9b43edc5a19d9744f613379b18946993c21edb9215632ff88ed5f13de56e238cf1dcc5a392ea2d21834f817dfab09bd7d0f1c6de592bdbab7125abdd4e6ba81ce0169d5ea41efaf76a2ad111286bdfaf36560cc84196907cb7424e2d57587c705e28951a6293c6ad5acb707d18a6a7a23ff3df9bd8c129e4404d754ca4446e404d46e51f94a9544f7d61356f7ba58a4f4e7cfefbc1a3dee8960f2875278ee02858ba4ed188b91106bf43cb615f3985eb308964b53bfa96b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x21, 0x1, "56e58c6f264be11f26275327ed52c7dcea625c04fc18cddf5beb4c08c1"}, @NL80211_PKTPAT_MASK={0x2e, 0x1, "b724fab53914664d80eeb9482a76503c3cb6af6e64cf9f1808602307d14b7049738839acd616b3e0822b"}, @NL80211_PKTPAT_MASK={0x54, 0x1, "2abed6ba528fd2e8005df49aac27893b159db144f530fa1f2606133fa98b869f94dfd78dbde801c612baf6f5f623654b0174eebb60ead0443d2793a8b8a5e50f8909432a949d4d06d48b91abb23249b8"}, @NL80211_PKTPAT_MASK={0xe8, 0x1, "ac991ed3e134c07171a17f75f47f409345bfe72b6d7761a3da2efb1ffba25600b54b963eb87d3ad9ae035a5ee39c2953d73575596cc7c1dcbe0adb69ea7c582d879ef0413a610adb7eb03c61fd3f6f494daf846a28837aa50722550fb9298de48178e72ff505a51e17ec1080bfa14092580ee6e244f74da39ab9238c01f2f4c9bfd9725d0e9f7f6f95f1b5d000573ebe9a7ad573b05f548c24e04ef13d94283d7baf03099174cc65a13f9365eb7fbf21e2d5d86d73259203bafd720791cc168cbebe4715a984596e7aab306dd1cf17c91ebc1c8103f5466dadb977ae9e8f51544c32be99"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x1084}}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000004ec0)={'sit0\x00', &(0x7f0000004e80)={@private0, @broadcast, 0x9, 0x16}}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f40), r9) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f00000051c0)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005180)={&(0x7f0000004f80)={0x1c8, r12, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "882e2f3ea0451ce627e7f490bd1d7798"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2a345010f45fbef98bd5712801d9c780372588155a9831cf2a230ae47e179eab"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_KEY={0x8c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cb1444291f398c3d15fcd5ad85c5917583990b100ef71c4e4a679963ba6def7c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e8bc5ddc2d8c54e1a46e75d020b239e9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "953180e6ef8e009a867a1fcf1b87c555d1b9b3a536c56ec9bbdf8a42bb431761"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}]}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}]}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fc0693104216fcaa1583b8ce6280a270"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8084}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000053c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005200)=""/172, 0xac, 0x1, &(0x7f00000052c0)=""/248, 0xf8}, &(0x7f0000005400)=0x40) 3.143579625s ago: executing program 0 (id=4837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x0, 0x5c, 0x64, 0x0, 0xda, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, {[@rr={0x7, 0x3, 0xbc}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0x0, 0x3, 0x0, 0x2, 0x4, 0x4}, 0x1, {0xfffffffd}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x3, 0x5}, 0x2, {0x6, 0x1000, 0x2, 0x1c, 0x0, 0x0, 0x1}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x20, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0x3cc3590e7fd9df2f, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x58}}, 0x200448d4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000003000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000102cbd7000003500000a00010050000000000000001c00040007004e244e200000fe80000000000000000000000000002d60001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendto(r7, 0x0, 0x0, 0x4810, &(0x7f0000000780)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'veth0_to_batadv\x00', 0x800}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0x12, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 2.755725556s ago: executing program 0 (id=4841): listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x8, 0x80, 0x1, 0x40, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xbd, 0x4, 0x0, @multicast1, @local}}}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 2.679868658s ago: executing program 3 (id=4843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000800) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4802}, 0x20000004) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)={0x3}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) 2.587063311s ago: executing program 4 (id=4844): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r1, 0x8003}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x6, 0x9, 0x3, 0x0, 0x80}}, @IFLA_MAP={0x24, 0xe, {0x22, 0xfff, 0x72b, 0xffa3, 0xf6, 0x5}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r1, 0x8003}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x6, 0x9, 0x3, 0x0, 0x80}}, @IFLA_MAP={0x24, 0xe, {0x22, 0xfff, 0x72b, 0xffa3, 0xf6, 0x5}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) 2.583368277s ago: executing program 2 (id=4845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000000101060000000000000000020000001400188008000140000000000800024000020000240001c71400018007000108000200e00000010c00028005000100000000000400164000000000001b29ee0202d71d5a04e2a57ecec91c639e000328f8105dc6e5115efaefb4aea617e169967a55bddb2d00bffa08977e358090bbb2"], 0x50}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.531402797s ago: executing program 3 (id=4846): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x110) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x0, 0xc}, @initr0, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 2.41922329s ago: executing program 0 (id=4847): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f0000003500)=[{{&(0x7f00000008c0)=@ax25={{0x3, @rose}, [@bcast, @netrom, @netrom, @remote, @remote, @remote, @default, @default]}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/205, 0xcd}, {&(0x7f0000000a40)=""/101, 0x65}, {&(0x7f0000000ac0)=""/18, 0x12}, {&(0x7f0000000b00)=""/82, 0x52}, {&(0x7f0000000b80)=""/84, 0x54}], 0x5, &(0x7f0000000c80)=""/103, 0x67}, 0x7}, {{&(0x7f0000000d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/155, 0x9b}, {&(0x7f0000000e40)=""/165, 0xa5}, {&(0x7f0000000f00)=""/51, 0x33}, {&(0x7f0000000f40)=""/193, 0xc1}], 0x4, &(0x7f0000001080)=""/151, 0x97}}, {{&(0x7f0000001140)=@nfc, 0x80, &(0x7f0000002480)=[{&(0x7f00000011c0)=""/107, 0x6b}, {&(0x7f0000001240)=""/245, 0xf5}, {&(0x7f0000001340)=""/105, 0x69}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/171, 0xab}], 0x5, &(0x7f0000002500)=""/4096, 0x1000}, 0x2}], 0x3, 0x40000040, &(0x7f00000035c0)={0x77359400}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28003, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x2800, 0x1, 0x2, 0x4}, {0x0, 0x3, 0xb, 0xfa}]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x31, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x444c}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000300)={r4, &(0x7f0000000140)='![\x00', 0x4800, &(0x7f0000000180)={@align=0x3, {0x8000, 0x0, 0x900000, 0x8000}}, 0x101, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x5840}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000880)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @ldst={0x1, 0x0, 0x6, 0x1, 0x0, 0x30, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r9}, 0x94) 2.378903603s ago: executing program 2 (id=4848): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x8, @void}, 0x10) sendfile(r3, r1, &(0x7f0000000100)=0xf7c, 0x8) (async) sendfile(r3, r1, &(0x7f0000000100)=0xf7c, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001240)={{r3, &(0x7f0000000140)='$$#,-\\!^,*\x00', 0x8080, &(0x7f0000000180)={@align=0x1, {0x0, 0x7, 0x101, 0x7fffffff}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x6}, {[0x7fffffff, 0x0, 0x4, 0xfff]}, 0x1, 0x1000, &(0x7f0000000240)=""/4096}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001240)={{r3, &(0x7f0000000140)='$$#,-\\!^,*\x00', 0x8080, &(0x7f0000000180)={@align=0x1, {0x0, 0x7, 0x101, 0x7fffffff}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x6}, {[0x7fffffff, 0x0, 0x4, 0xfff]}, 0x1, 0x1000, &(0x7f0000000240)=""/4096}) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x6) (async) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x6) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f00000012c0)={0x9, 0xfffffffffffffff8, 0x4, 0x8, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001300)={0x0}, &(0x7f0000001340)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001380)={r6, 0x1}, 0x8) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f00000013c0)={0x0, 0x2, 0x5, 0x2, 0x7fffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.net/syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001440)={r6, 0xd}, &(0x7f0000001480)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001440)={r6, 0xd}, &(0x7f0000001480)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000014c0)={r7, @in6={{0xa, 0x4e21, 0x4, @private1, 0x7}}}, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{r0, 0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r8}, &(0x7f0000001640), &(0x7f0000001680)=r1}, 0x20) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x50, r5, 0x100000000) recvmsg(r1, &(0x7f0000001bc0)={&(0x7f0000001700)=@phonet, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001780)=""/26, 0x1a}, {&(0x7f00000017c0)=""/34, 0x22}, {&(0x7f0000001800)=""/227, 0xe3}, {&(0x7f0000001900)=""/48, 0x30}, {&(0x7f0000001940)=""/100, 0x64}, {&(0x7f00000019c0)=""/188, 0xbc}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)=""/109, 0x6d}], 0x8}, 0x12001) (async) recvmsg(r1, &(0x7f0000001bc0)={&(0x7f0000001700)=@phonet, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001780)=""/26, 0x1a}, {&(0x7f00000017c0)=""/34, 0x22}, {&(0x7f0000001800)=""/227, 0xe3}, {&(0x7f0000001900)=""/48, 0x30}, {&(0x7f0000001940)=""/100, 0x64}, {&(0x7f00000019c0)=""/188, 0xbc}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)=""/109, 0x6d}], 0x8}, 0x12001) pipe(&(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000001fc0)={&(0x7f0000001c40)=0xb, 0xffffffff, &(0x7f0000001c80)=[{}, {}, {}, {}], &(0x7f0000001f80)}) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000002040)={0x5, &(0x7f0000002000)=[{0x0, 0x7, 0x5, 0xfffffffa}, {0x1000, 0x5, 0x2f, 0x8}, {0x132e, 0x84, 0xff, 0x80}, {0x0, 0x9, 0x3d, 0x9}, {0x1, 0x7, 0x6, 0x5}]}, 0x10) socket$pppoe(0x18, 0x1, 0x0) (async) r10 = socket$pppoe(0x18, 0x1, 0x0) read(r10, &(0x7f0000002080)=""/230, 0xe6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002180)={'vlan0\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000021c0), &(0x7f0000002200)=0xc) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002240)=0x8, &(0x7f0000002280)=0x2) connect$qrtr(r1, &(0x7f00000022c0), 0xc) (async) connect$qrtr(r1, &(0x7f00000022c0), 0xc) r11 = socket$pptp(0x18, 0x1, 0x2) listen(r11, 0x8) (async) listen(r11, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002300)={r0, r2, 0x25, 0x4, @val=@perf_event={0x2d}}, 0x18) 2.321992211s ago: executing program 4 (id=4849): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x18, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x4}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000440)={r7, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7fff}}, 0x9, 0x6d280, 0x21, 0xb75, 0x31}, &(0x7f0000000500)=0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0000000000000000000c009000fdffffffffffffff882a6556c746ce7e75f4338c27eae2ff6e203ae7b4e5eaa3e378156167ae09d4dc49f6aa1bb23e50a9de62246c950ce172ed0a6e8880c31b5811ec84835ebb22b973e35021286623aea4771232486bfe63e553d9ff370b34ef75907144734a323d72863d945eb55253aaede0"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) setsockopt$sock_int(r10, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)}, 0x62) socket$inet6(0xa, 0x800, 0xfffffff8) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400008169bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 2.247324644s ago: executing program 2 (id=4850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40201, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000006c0)=ANY=[], 0x16b) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40201, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) (async) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r0, &(0x7f00000006c0)=ANY=[], 0x16b) (async) 1.355081168s ago: executing program 3 (id=4851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x5, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="62bdd4ca", @ANYRES32=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x800) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 1.333624236s ago: executing program 0 (id=4852): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd05, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 1.175527743s ago: executing program 0 (id=4853): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000002a03332932fdc700"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000cf0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r9) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x81, 0x1, 0x1, 0x31, @dev={0xfe, 0x80, '\x00', 0x1a}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x700, 0x200, 0x3}}) sendmsg$nl_route(r1, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000300), 0xfdb3) setsockopt$inet6_tcp_int(r11, 0x11a, 0x3, 0x0, 0x0) 1.037838188s ago: executing program 2 (id=4854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1f8}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x2e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000b575cb2398001001000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r4 = accept(r1, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) 711.822576ms ago: executing program 3 (id=4855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xb2, "dcbfda05a649a5b0efee4c30e7ea949e527a971483aeb5a59ed398f98737c1fafd36ea0a2feee02b081893266a023e5438fc7b3f902130c8e308e442a73e3de3ff314e0fbf61b509383a72af9ea60b4a3aa9e86d63d7013d8e0f7bd563aa1056509ebc68dce7c2fe1bceb8840935bd139b7a86ff3a058c74bcf78c4ea0b7610294a31474544fd449618fd2d65a2c7bed445ac06db7ac5f5579c1806020cd2826e9617b585ad16e039d616f0e7099ed7aa7d1"}, &(0x7f0000000200)=0xba) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x0, 0x1ff}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e00090027bd70000004000004000000080018000dac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 579.659356ms ago: executing program 0 (id=4856): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200283a0020010000000400000000000000000001b8c300000000000000000000000000aaa100907800000000fc020000000000000000000000fc0000000000000000000041eb000000000000"], 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) pipe(&(0x7f0000000740)) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="c62465d7fb8d"}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c00080000000100736f636b657400000c00028008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x3fa, 0x2, 0x70bd28, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008801}, 0x8800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x8918, 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r9) sendmmsg$inet_sctp(r6, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYBLOB="20000023000000008400000002000000de240102040000006f000000"], 0x20}], 0x1, 0x24010000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, &(0x7f0000000080)=0x8) 478.927077ms ago: executing program 4 (id=4857): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r2 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x4, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) 466.605377ms ago: executing program 2 (id=4858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x440d4}, 0x20004090) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e63, 0xe7, @mcast2, 0x4007daa}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)=[0x0, 0x6], 0x0, 0x0, 0x2}}, 0x40) writev(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) (async) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x4850) 359.794679ms ago: executing program 3 (id=4859): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200008f0800000000000000000000850000006100000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0x26, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000580)="ac0000000000ec67838717bd86ddbd6e902562ac5675da63a84744c677777570e8bd8e1450c4e68db8b8f5853e524b918ea6e4db95eb", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x21) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, 0x0, 0x0) 315.284519ms ago: executing program 3 (id=4860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_GROUP={0x0, 0x2, [{0x2, 0x4}, {0x0, 0x37}]}, @NHA_OIF={0xfffffffffffffcac}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @generic={0x2, 0x3, 0xe, 0x27d, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x11c9764374b6019d}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r8], 0x158}, 0x1, 0xba01}, 0x44) sendmsg$AUDIT_USER(r7, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48000004}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe4, 0x3ed, 0x816, 0x70bd25, 0x25dfdbfd, "a2e56575e32211b303b0a7c20a9d982ff7f5efbed7327efa12758908f47d7b10f98ce58963df59f58616e707e67139cf6ff2e5e532e89094a7091eee108e5da4511cebadf1c37106fa15c538278390a170e589551ece0c8c2715bc0a6b76a5abadf5224cd289eee39404b67799d5230601b097d17c462606122757abb35ca4eecfcd366cffcdae06de41ad866120633d54608cc4ef2bbf50443ccc36cf8a0ad8d478c5b32d0992665b35e3cec4ca36c6f9a8309aedde545e106ba44f92886e3d9564eaadd677b3b3ff2325fb5b9b06431ca7534e", [""]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) 306.61253ms ago: executing program 4 (id=4861): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0x0, &(0x7f0000000040)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYRESDEC=r4, @ANYRES8=r6, @ANYRESOCT=r1], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 239.577775ms ago: executing program 1 (id=4862): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = accept4(r0, &(0x7f00000001c0)=@ieee802154, &(0x7f0000000240)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e20, 0xc27, @empty, 0xe07e}}, 0x0, 0x0, 0x22, 0x0, "20d8f28cc70d098be39a45c472b649bcab8e2ae88572c0dc69a99ef9be7dbf87fc0cb4ffa5bd32c25c8ca92a6672985260dd6bb64e1835803d3e95abade2a9038be956338314532a39770d6ef9009a1b"}, 0xd8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x70bd25, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e24, 0x7fff, @loopback, 0x5}, 0x1c) 210.422775ms ago: executing program 2 (id=4863): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x8001, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) 0s ago: executing program 1 (id=4864): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfcf3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000000c0)="98e9e267c6206e5e5b0d2be8a28310538e475476580b113cb0802fb53f3f622170198631fa9d92862ed88afa4ad15bc81f2c85ba70e34b6d74e1608016105de66ec9", &(0x7f0000000280)=@tcp=r5, 0x1}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) kernel console output (not intermixed with test programs): .477488][T18183] RBP: 00007ff739aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 402.477499][T18183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.477510][T18183] R13: 00007ff738e16038 R14: 00007ff738e15fa0 R15: 00007ffc2f13dda8 [ 402.477543][T18183] [ 402.830533][T18079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.858810][T18191] netlink: 'syz.0.3190': attribute type 4 has an invalid length. [ 402.866983][T18193] netlink: 'syz.0.3190': attribute type 4 has an invalid length. [ 402.925380][T18079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.115638][T18079] team0: Port device team_slave_0 added [ 403.125127][T18079] team0: Port device team_slave_1 added [ 403.259288][T18079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.292384][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.325080][T18079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.340995][T18079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.348032][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.419596][T18079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.539281][T18225] netlink: 'syz.0.3202': attribute type 10 has an invalid length. [ 403.553355][T18079] hsr_slave_0: entered promiscuous mode [ 403.560169][T18079] hsr_slave_1: entered promiscuous mode [ 403.568047][T18079] debugfs: 'hsr0' already exists in 'hsr' [ 403.574683][T18079] Cannot create hsr debugfs directory [ 404.096922][T18253] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.191446][ T51] Bluetooth: hci0: command tx timeout [ 404.468619][T18254] vlan2: entered allmulticast mode [ 404.474096][T18254] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 404.663861][T18079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.916498][T18079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.013449][T18079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.101646][T18079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.152934][T18279] dummy0: left allmulticast mode [ 405.169485][T18279] bridge0: port 3(dummy0) entered disabled state [ 405.234191][T18279] bridge_slave_0: left allmulticast mode [ 405.240030][T18279] bridge_slave_0: left promiscuous mode [ 405.246735][T18279] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.262427][T18279] bridge_slave_1: left allmulticast mode [ 405.268294][T18279] bridge_slave_1: left promiscuous mode [ 405.274830][T18279] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.301550][T18279] bond0: (slave bond_slave_0): Releasing backup interface [ 405.322288][T18279] bond0: (slave bond_slave_1): Releasing backup interface [ 405.363554][T18279] team0: Port device team_slave_0 removed [ 405.408158][T18279] team0: Port device team_slave_1 removed [ 405.436174][T18279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.457661][T18279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.476609][T18279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.484925][T18279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.496676][T18279] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.558837][T18280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.815726][T18299] __nla_validate_parse: 13 callbacks suppressed [ 405.815748][T18299] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3221'. [ 406.004910][T18079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.066714][T18079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.161526][T18079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.211182][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.211537][T18079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.219252][ C1] lec:lec_tx_timeout: lec0 [ 406.231489][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.271248][ T51] Bluetooth: hci0: command tx timeout [ 406.516056][T18329] xt_ecn: cannot match TCP bits for non-tcp packets [ 406.576679][T18079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.594419][T18331] openvswitch: netlink: Missing key (keys=40, expected=100) [ 406.624656][T18079] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.717597][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.724839][T10043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.782984][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.790192][T10043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.816725][T18334] netlink: 'syz.3.3230': attribute type 1 has an invalid length. [ 407.727100][T18079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.883142][T18369] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3235'. [ 407.893099][T18368] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3236'. [ 407.899369][T18079] veth0_vlan: entered promiscuous mode [ 407.939337][T18079] veth1_vlan: entered promiscuous mode [ 407.978346][T18368] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3236'. [ 407.998518][T18368] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3236'. [ 408.084586][T18368] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3236'. [ 408.086876][T18079] veth0_macvtap: entered promiscuous mode [ 408.131661][T18374] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3237'. [ 408.164928][T18368] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3236'. [ 408.167249][T18079] veth1_macvtap: entered promiscuous mode [ 408.186011][T18368] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3236'. [ 408.199460][T18368] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3236'. [ 408.247296][T18079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.294503][T18379] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 408.317826][T18379] netlink: 'syz.4.3238': attribute type 2 has an invalid length. [ 408.348464][T18079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.361469][ T51] Bluetooth: hci0: command tx timeout [ 408.379220][ T1109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.399640][ T1109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.481800][ T1109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.497382][T18383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 408.504877][ T1109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.817739][T11157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.846432][T11157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.877873][T18392] sctp: [Deprecated]: syz.0.3244 (pid 18392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.877873][T18392] Use struct sctp_sack_info instead [ 408.934838][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.946093][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.018682][ T5893] IPVS: starting estimator thread 0... [ 409.111052][T18400] IPVS: using max 26 ests per chain, 62400 per kthread [ 409.714886][T17642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.724560][T17642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.733233][T17642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.758081][T17642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.831867][T18420] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.850295][T17642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.568316][T18424] hsr_slave_0 (unregistering): left promiscuous mode [ 410.916469][T10039] ip6gretap0 (unregistering): left promiscuous mode [ 411.124835][T10039] bond2 (unregistering): (slave vti0): Releasing backup interface [ 411.133140][T10039] vti0 (unregistering): left promiscuous mode [ 411.168093][T10039] erspan0 (unregistering): left promiscuous mode [ 411.198259][T18449] netlink: 'syz.4.3253': attribute type 2 has an invalid length. [ 411.207517][T10039] gretap0 (unregistering): left promiscuous mode [ 411.249111][T18450] __nla_validate_parse: 63 callbacks suppressed [ 411.249130][T18450] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3253'. [ 411.462328][T10039] bridge0 (unregistering): left allmulticast mode [ 411.624817][T10039] bond5 (unregistering): (slave bridge4): Removing an active aggregator [ 411.634811][T10039] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 411.644582][T10039] bridge4 (unregistering): left promiscuous mode [ 411.651272][T10039] bridge4 (unregistering): left allmulticast mode [ 411.785352][T10039] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 411.951447][T17642] Bluetooth: hci3: command tx timeout [ 412.040640][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 412.048716][ C1] lec:lec_tx_timeout: lec0 [ 412.055782][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 412.068852][T10039] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 412.080072][T10039] bond0 (unregistering): Released all slaves [ 412.093107][T10039] bond1 (unregistering): Released all slaves [ 412.106633][T10039] bond2 (unregistering): Released all slaves [ 412.122401][T10039] bond3 (unregistering): Released all slaves [ 412.137765][T10039] bond4 (unregistering): Released all slaves [ 412.158515][T10039] bond5 (unregistering): Released all slaves [ 412.173855][T10039] bond6 (unregistering): Released all slaves [ 412.189114][T10039] bond7 (unregistering): Released all slaves [ 412.205116][T10039] bond8 (unregistering): Released all slaves [ 412.232874][T10039] bond9 (unregistering): Released all slaves [ 412.246624][T10039] bond10 (unregistering): Released all slaves [ 412.262672][T10039] bond11 (unregistering): (slave veth7): Releasing active interface [ 412.278605][T10039] bond11 (unregistering): Released all slaves [ 412.297158][T10039] bond12 (unregistering): Released all slaves [ 412.312353][T10039] bond13 (unregistering): Released all slaves [ 412.328782][T10039] bond14 (unregistering): Released all slaves [ 412.344742][T10039] bond15 (unregistering): Released all slaves [ 412.396054][T18434] netlink: 'syz.2.3252': attribute type 7 has an invalid length. [ 412.483101][T18449] 9: entered promiscuous mode [ 412.520575][T18455] syzkaller1: entered promiscuous mode [ 412.534431][T18455] syzkaller1: entered allmulticast mode [ 412.572808][T10039] : left promiscuous mode [ 412.738196][T18470] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 412.799819][T10039] tipc: Left network mode [ 412.822816][T18470] team0: Device is already in use. [ 412.966549][T18470] team0: Port device bridge1 added [ 412.972847][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 413.039746][T18480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3259'. [ 413.192831][T18491] xt_ecn: cannot match TCP bits for non-tcp packets [ 413.199984][T18492] netlink: zone id is out of range [ 413.209016][T18492] netlink: zone id is out of range [ 413.217212][T18492] netlink: zone id is out of range [ 413.221542][T18497] xt_ecn: cannot match TCP bits for non-tcp packets [ 413.224735][T18492] netlink: zone id is out of range [ 413.238236][T18492] netlink: zone id is out of range [ 413.246537][T18492] netlink: zone id is out of range [ 413.252675][T18492] netlink: zone id is out of range [ 413.257955][T18492] netlink: zone id is out of range [ 413.264040][T18492] netlink: zone id is out of range [ 413.538915][T18502] macvtap1: entered promiscuous mode [ 413.547285][T18502] vlan0: entered promiscuous mode [ 413.568285][T18502] macvtap1: entered allmulticast mode [ 413.574785][T18502] vlan0: entered allmulticast mode [ 413.581614][T18502] veth0_vlan: entered allmulticast mode [ 413.732772][T18418] chnl_net:caif_netlink_parms(): no params data found [ 414.042272][T17642] Bluetooth: hci3: command tx timeout [ 414.694017][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3272'. [ 414.772503][T18556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3272'. [ 414.817119][T18418] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.831308][T18418] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.849161][T18418] bridge_slave_0: entered allmulticast mode [ 414.866327][T18418] bridge_slave_0: entered promiscuous mode [ 414.925002][T18418] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.948486][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.981472][T18418] bridge_slave_1: entered allmulticast mode [ 415.003217][T18418] bridge_slave_1: entered promiscuous mode [ 415.228038][T18418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.254021][T18418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.413139][T18575] veth1_macvtap: renamed from vlan1 [ 415.522893][T18418] team0: Port device team_slave_0 added [ 415.557685][T18418] team0: Port device team_slave_1 added [ 415.631174][T10039] hsr_slave_0: left promiscuous mode [ 415.643675][T10039] hsr_slave_1: left promiscuous mode [ 415.940940][T18585] nbd0: detected capacity change from 0 to 63 [ 415.963744][ T51] block nbd0: Receive control failed (result -104) [ 415.968502][T17642] block nbd0: Receive control failed (result -32) [ 416.111614][T17642] Bluetooth: hci3: command tx timeout [ 416.234102][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3278'. [ 416.387568][T18418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.413881][T18418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.463596][T18418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.517502][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3282'. [ 416.542699][T18595] netlink: 54 bytes leftover after parsing attributes in process `syz.2.3284'. [ 416.558921][T18418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.592921][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 416.606034][T18418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.703924][T18418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.789888][T18604] Bluetooth: MGMT ver 1.23 [ 416.877598][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 416.919861][T18418] hsr_slave_0: entered promiscuous mode [ 416.941990][T18418] hsr_slave_1: entered promiscuous mode [ 416.948523][T18418] debugfs: 'hsr0' already exists in 'hsr' [ 416.974019][T18418] Cannot create hsr debugfs directory [ 416.979814][T18610] macvlan0: entered promiscuous mode [ 417.064812][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3290'. [ 417.074253][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 417.074281][ C1] lec:lec_tx_timeout: lec0 [ 417.083252][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 417.527954][T10039] IPVS: stop unused estimator thread 0... [ 417.614533][T18630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3293'. [ 418.165281][T18652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3296'. [ 418.191051][T17642] Bluetooth: hci3: command tx timeout [ 418.262485][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.288113][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.296371][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.359231][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 418.441688][T18661] netlink: 'syz.2.3300': attribute type 29 has an invalid length. [ 418.499890][T18661] netlink: 'syz.2.3300': attribute type 29 has an invalid length. [ 418.520096][T18668] netlink: 'syz.2.3300': attribute type 32 has an invalid length. [ 418.565486][T18668] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3300'. [ 418.579332][T18418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 418.634763][T18418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 418.668183][T18418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 418.697850][T10540] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.723677][T18418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 418.838090][T18680] macvlan0: entered promiscuous mode [ 419.105634][T18418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.224836][T18418] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.231449][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.329351][T18709] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 419.337157][T18709] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 419.363084][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3311'. [ 419.400230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.407537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.502145][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.509418][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.804014][T18734] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 419.824579][T18734] bond1: (slave lo): Enslaving as an active interface with an up link [ 419.876543][T18734] net_ratelimit: 4 callbacks suppressed [ 419.876562][T18734] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 420.399069][T18418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.537868][T18760] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 420.732507][T18418] veth0_vlan: entered promiscuous mode [ 420.779297][T18418] veth1_vlan: entered promiscuous mode [ 420.944961][T18418] veth0_macvtap: entered promiscuous mode [ 420.966717][T18774] netlink: 'syz.2.3327': attribute type 11 has an invalid length. [ 420.987909][T18418] veth1_macvtap: entered promiscuous mode [ 421.032911][T18774] netlink: 'syz.2.3327': attribute type 3 has an invalid length. [ 421.162229][T18418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.239315][T18418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.413364][T18790] bond1: option mode: invalid value (133) [ 421.428934][T18790] bond1 (unregistering): Released all slaves [ 421.467830][T10043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.478265][T10043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.533788][T18803] veth0: entered promiscuous mode [ 421.574528][T10043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.599655][T10043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.625982][T18803] __nla_validate_parse: 9 callbacks suppressed [ 421.626001][T18803] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3335'. [ 421.651824][T18803] netlink: 'syz.4.3335': attribute type 2 has an invalid length. [ 421.706013][T18808] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3337'. [ 421.730183][T18803] !: entered promiscuous mode [ 421.751828][T18803] netlink: 'syz.4.3335': attribute type 2 has an invalid length. [ 421.802591][T18803] !: left promiscuous mode [ 421.867712][T18802] veth0: left promiscuous mode [ 421.915057][T10043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.952739][T10043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.068990][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'. [ 422.078977][T18823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3342'. [ 422.089633][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'. [ 422.099177][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 422.099209][ C1] lec:lec_tx_timeout: lec0 [ 422.107903][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 422.125349][T18823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3342'. [ 422.137392][T18823] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3342'. [ 422.140916][T18827] netlink: 'syz.0.3342': attribute type 1 has an invalid length. [ 422.178156][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.198514][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.428180][T18832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3344'. [ 422.510938][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.564000][T18840] bridge_slave_0: entered promiscuous mode [ 422.605758][T18837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3344'. [ 422.622488][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'. [ 422.697677][T18837] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 423.264116][T18878] netlink: 'syz.3.3357': attribute type 10 has an invalid length. [ 423.419226][T18878] team0: Port device vxcan1 added [ 425.391599][T18921] vcan0: tx address claim with dlc 0 [ 425.566251][T18927] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.103311][T18952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.667777][T18978] __nla_validate_parse: 5 callbacks suppressed [ 426.667792][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3387'. [ 427.111141][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 427.119271][ C1] lec:lec_tx_timeout: lec0 [ 427.124823][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 427.963209][T18960] batadv_slave_1: entered promiscuous mode [ 427.969584][T18965] batadv_slave_1: left promiscuous mode [ 428.004583][T18981] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.086021][T18986] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3389'. [ 428.175857][T18990] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 428.272830][T18994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3393'. [ 430.067632][T18990] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 430.302998][T19027] syzkaller0: entered promiscuous mode [ 430.331111][T19027] syzkaller0: entered allmulticast mode [ 430.765077][T19054] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.171110][T19078] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3409'. [ 431.200815][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 431.231146][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 431.384947][T19084] macvlan0: entered promiscuous mode [ 431.495167][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3414'. [ 431.705150][T19097] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 431.721459][T19097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3416'. [ 432.131136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 432.139255][ C1] lec:lec_tx_timeout: lec0 [ 432.144394][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.239514][T19119] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3422'. [ 432.933831][T19167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3435'. [ 432.968614][T19170] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 434.510867][T17642] Bluetooth: hci5: command 0x0c1a tx timeout [ 434.517795][T19121] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 434.524198][T19121] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 435.187687][T19121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 435.194234][T19121] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 435.274760][T19121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 435.282127][T19121] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 435.383714][T19121] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 435.399936][T19121] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 435.443208][T19121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 435.450292][T19121] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 435.732949][T19229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.035354][T19236] syzkaller0: entered promiscuous mode [ 436.054622][T19236] syzkaller0: entered allmulticast mode [ 436.268733][T19265] openvswitch: netlink: IP tunnel dst address not specified [ 436.344615][T19266] netlink: 'syz.4.3453': attribute type 1 has an invalid length. [ 436.395748][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3453'. [ 437.152829][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 437.160925][ C1] lec:lec_tx_timeout: lec0 [ 437.165835][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 437.752381][T19270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3454'. [ 438.030039][T19283] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.072147][T19283] netlink: 'syz.3.3457': attribute type 39 has an invalid length. [ 438.680516][T19320] xt_policy: too many policy elements [ 438.713009][T19321] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 438.818234][T19321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.857545][T19326] veth0: entered promiscuous mode [ 439.014836][T10540] IPVS: starting estimator thread 0... [ 439.130852][T19336] IPVS: using max 25 ests per chain, 60000 per kthread [ 439.151193][T19319] veth0: left promiscuous mode [ 439.229640][T19345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3472'. [ 439.467822][T19352] nbd: socks must be embedded in a SOCK_ITEM attr [ 440.197769][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.485957][T19411] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3485'. [ 440.564867][T19414] syzkaller0: entered promiscuous mode [ 440.590020][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3488'. [ 440.590740][T19414] syzkaller0: entered allmulticast mode [ 440.621991][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3489'. [ 440.689968][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3489'. [ 440.709298][T19426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.968786][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'. [ 441.065849][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'. [ 441.105158][T19446] hsr_slave_0: left promiscuous mode [ 441.138443][T19446] hsr_slave_1: left promiscuous mode [ 441.166198][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 441.671667][T19473] bond1: entered promiscuous mode [ 441.676779][T19473] bond1: entered allmulticast mode [ 441.683432][T19473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.696003][T19479] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 441.944358][T19489] IPv6: sit1: Disabled Multicast RS [ 441.985947][T19489] sit1: entered allmulticast mode [ 442.190674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 442.198736][ C1] lec:lec_tx_timeout: lec0 [ 442.204281][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 442.504921][T19519] netlink: 'syz.2.3514': attribute type 1 has an invalid length. [ 443.156379][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3521'. [ 443.211110][T19553] bridge_slave_1: entered promiscuous mode [ 443.329876][T19569] xt_limit: Overflow, try lower: 271964/0 [ 443.339192][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3525'. [ 443.360543][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'. [ 443.388689][T19575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3526'. [ 443.414266][T19577] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3524'. [ 443.440300][T19578] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 443.683800][T19584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3527'. [ 444.040361][T19598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.084037][T19605] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3531'. [ 444.111051][T19599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.129784][T19605] netlink: 'syz.3.3531': attribute type 2 has an invalid length. [ 444.164275][T19595] team0: Port device vxcan1 removed [ 444.187463][T19604] netlink: 'syz.2.3533': attribute type 1 has an invalid length. [ 444.219207][T19604] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3533'. [ 444.221533][T19599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3532'. [ 444.248870][T19595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.300375][T19608] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3534'. [ 444.492033][T19605] team0: Mode changed to "activebackup" [ 444.508067][T19623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.631933][T19625] openvswitch: netlink: Flow key attr not present in new flow. [ 444.826337][T10586] IPVS: starting estimator thread 0... [ 444.880401][T19641] netlink: 'syz.1.3543': attribute type 1 has an invalid length. [ 444.955141][T19639] IPVS: using max 25 ests per chain, 60000 per kthread [ 444.960398][T19641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.018857][T19644] bond2: (slave veth0_to_bond): making interface the new active one [ 445.086229][T19641] openvswitch: netlink: IP tunnel dst address not specified [ 445.095965][T19644] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 445.191901][T19659] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 445.776315][T19684] syzkaller0: entered promiscuous mode [ 445.803466][T19684] syzkaller0: entered allmulticast mode [ 446.473544][T19712] syzkaller0: entered promiscuous mode [ 446.496674][T19712] syzkaller0: entered allmulticast mode [ 446.564493][T19718] tipc: Started in network mode [ 446.569437][T19718] tipc: Node identity ba132ea4367d, cluster identity 5 [ 446.620950][T19718] tipc: Enabled bearer , priority 0 [ 446.798078][T19718] tipc: Disabling bearer [ 447.211174][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 447.219227][ C1] lec:lec_tx_timeout: lec0 [ 447.225611][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.499988][T19766] pim6reg527: entered allmulticast mode [ 447.598531][T19763] tipc: Started in network mode [ 447.621302][T19763] tipc: Node identity ac14140f, cluster identity 4711 [ 447.638195][T19763] tipc: New replicast peer: 255.255.255.255 [ 447.655607][T19763] tipc: Enabled bearer , priority 10 [ 447.704815][T19778] xt_ecn: cannot match TCP bits for non-tcp packets [ 447.871854][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.627994][T19833] __nla_validate_parse: 11 callbacks suppressed [ 448.628017][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 448.748997][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3594'. [ 448.770737][T19829] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.016162][T19829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.042643][T19829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.327942][T19830] : renamed from bond0 [ 449.388492][T10586] tipc: Node number set to 2886997007 [ 449.431693][T11157] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.485122][T11157] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.519544][T11157] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.562001][T11157] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.014853][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3608'. [ 450.214353][T19898] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 450.245842][T19900] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3610'. [ 450.277390][T19898] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 450.296933][T19898] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 450.353850][T19900] syzkaller0: entered allmulticast mode [ 450.864715][T19938] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 450.877099][T19938] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3622'. [ 450.975734][T19943] netlink: 'syz.1.3624': attribute type 1 has an invalid length. [ 450.991744][T19943] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3624'. [ 451.001584][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 451.234344][T19959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3627'. [ 451.262012][T19944] can: request_module (can-proto-0) failed. [ 451.438430][T19964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3628'. [ 451.443932][T19969] netlink: 'syz.3.3629': attribute type 11 has an invalid length. [ 451.471545][T19944] syzkaller0: entered promiscuous mode [ 451.477541][T19944] syzkaller0: entered allmulticast mode [ 451.576589][T19971] veth0_to_bridge: entered promiscuous mode [ 451.588690][T19969] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 451.597712][T19967] veth0_to_bridge: left promiscuous mode [ 452.682515][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 452.990623][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 452.998733][ C1] lec:lec_tx_timeout: lec0 [ 453.004945][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 453.243684][T20052] netlink: 'syz.2.3655': attribute type 32 has an invalid length. [ 453.376095][T20052] bond2: Setting coupled_control to off (0) [ 453.420485][T20064] tipc: Disabling bearer [ 453.544750][T20074] FAULT_INJECTION: forcing a failure. [ 453.544750][T20074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.590997][T20074] CPU: 0 UID: 0 PID: 20074 Comm: syz.3.3661 Not tainted syzkaller #0 PREEMPT(full) [ 453.591024][T20074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 453.591035][T20074] Call Trace: [ 453.591043][T20074] [ 453.591052][T20074] dump_stack_lvl+0xe8/0x150 [ 453.591093][T20074] should_fail_ex+0x412/0x560 [ 453.591129][T20074] _copy_from_user+0x2d/0xb0 [ 453.591153][T20074] ___sys_sendmsg+0x1c6/0x360 [ 453.591183][T20074] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.591244][T20074] ? __fget_files+0x2a/0x420 [ 453.591263][T20074] ? __fget_files+0x3a0/0x420 [ 453.591291][T20074] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.591317][T20074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.591348][T20074] ? __pfx_ksys_write+0x10/0x10 [ 453.591381][T20074] do_syscall_64+0x14d/0xf80 [ 453.591406][T20074] ? trace_irq_disable+0x3b/0x150 [ 453.591422][T20074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.591442][T20074] ? clear_bhb_loop+0x40/0x90 [ 453.591466][T20074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.591485][T20074] RIP: 0033:0x7fa93579c819 [ 453.591505][T20074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.591520][T20074] RSP: 002b:00007fa93663d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.591542][T20074] RAX: ffffffffffffffda RBX: 00007fa935a15fa0 RCX: 00007fa93579c819 [ 453.591557][T20074] RDX: 0000000004000080 RSI: 0000200000001500 RDI: 0000000000000003 [ 453.591569][T20074] RBP: 00007fa93663d090 R08: 0000000000000000 R09: 0000000000000000 [ 453.591582][T20074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.591593][T20074] R13: 00007fa935a16038 R14: 00007fa935a15fa0 R15: 00007ffe416865a8 [ 453.591625][T20074] [ 453.899013][T20090] netlink: 'syz.2.3664': attribute type 39 has an invalid length. [ 453.932409][T20093] __nla_validate_parse: 6 callbacks suppressed [ 453.932428][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3665'. [ 454.022836][T20091] IPVS: set_ctl: invalid protocol: 12 100.1.1.2:20001 [ 454.126245][T20100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.733874][T20126] netlink: 'syz.1.3679': attribute type 13 has an invalid length. [ 454.754877][T20126] netlink: 'syz.1.3679': attribute type 58 has an invalid length. [ 454.763121][T20126] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3679'. [ 454.887347][T20134] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3682'. [ 455.052570][T20142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 455.207185][T20156] netdevsim netdevsim3 : renamed from netdevsim0 [ 455.239661][T20158] netlink: 'syz.1.3687': attribute type 2 has an invalid length. [ 455.248806][T20158] netlink: 'syz.1.3687': attribute type 2 has an invalid length. [ 455.308289][T20163] netlink: 'syz.0.3688': attribute type 29 has an invalid length. [ 455.399786][T20168] FAULT_INJECTION: forcing a failure. [ 455.399786][T20168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.413440][T20168] CPU: 0 UID: 0 PID: 20168 Comm: syz.1.3689 Not tainted syzkaller #0 PREEMPT(full) [ 455.413468][T20168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.413479][T20168] Call Trace: [ 455.413487][T20168] [ 455.413496][T20168] dump_stack_lvl+0xe8/0x150 [ 455.413530][T20168] should_fail_ex+0x412/0x560 [ 455.413565][T20168] _copy_from_user+0x2d/0xb0 [ 455.413590][T20168] ___sys_sendmsg+0x1c6/0x360 [ 455.413622][T20168] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.413686][T20168] ? __fget_files+0x2a/0x420 [ 455.413704][T20168] ? __fget_files+0x3a0/0x420 [ 455.413733][T20168] __x64_sys_sendmsg+0x1bd/0x2a0 [ 455.413762][T20168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.413798][T20168] ? __pfx_ksys_write+0x10/0x10 [ 455.413833][T20168] do_syscall_64+0x14d/0xf80 [ 455.413859][T20168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.413879][T20168] ? clear_bhb_loop+0x40/0x90 [ 455.413904][T20168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.413924][T20168] RIP: 0033:0x7fdec319c819 [ 455.413944][T20168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.413960][T20168] RSP: 002b:00007fdec3ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.413982][T20168] RAX: ffffffffffffffda RBX: 00007fdec3415fa0 RCX: 00007fdec319c819 [ 455.413996][T20168] RDX: 0000000004000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 455.414009][T20168] RBP: 00007fdec3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.414021][T20168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.414033][T20168] R13: 00007fdec3416038 R14: 00007fdec3415fa0 R15: 00007ffdaf770f48 [ 455.414065][T20168] [ 455.671574][T20171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3691'. [ 455.725711][T20171] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3691'. [ 455.778888][T20171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3691'. [ 456.124307][T20184] netlink: 'syz.1.3696': attribute type 4 has an invalid length. [ 456.382640][T20196] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3701'. [ 456.421193][T20196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3701'. [ 456.430204][T20196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3701'. [ 456.577252][T20212] netlink: 'syz.2.3706': attribute type 10 has an invalid length. [ 456.871767][T20226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.268040][T20251] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 457.271085][T20255] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 457.294653][T20251] bond4 (unregistering): Released all slaves [ 457.351302][T20254] syzkaller0: entered promiscuous mode [ 457.360316][T20254] syzkaller0: entered allmulticast mode [ 457.602904][T20273] FAULT_INJECTION: forcing a failure. [ 457.602904][T20273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.658681][T20273] CPU: 0 UID: 0 PID: 20273 Comm: syz.4.3724 Not tainted syzkaller #0 PREEMPT(full) [ 457.658711][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.658723][T20273] Call Trace: [ 457.658731][T20273] [ 457.658740][T20273] dump_stack_lvl+0xe8/0x150 [ 457.658775][T20273] should_fail_ex+0x412/0x560 [ 457.658810][T20273] _copy_from_iter+0x1d3/0x1670 [ 457.658836][T20273] ? rcu_is_watching+0x15/0xb0 [ 457.658872][T20273] ? __pfx__copy_from_iter+0x10/0x10 [ 457.658902][T20273] ? netlink_sendmsg+0x650/0xb40 [ 457.658939][T20273] ? skb_put+0x11b/0x210 [ 457.658967][T20273] netlink_sendmsg+0x6c0/0xb40 [ 457.658998][T20273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.659023][T20273] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.659055][T20273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.659092][T20273] ____sys_sendmsg+0x972/0x9f0 [ 457.659128][T20273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.659163][T20273] ? import_iovec+0x73/0xa0 [ 457.659190][T20273] ___sys_sendmsg+0x2a5/0x360 [ 457.659222][T20273] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.659287][T20273] ? __fget_files+0x2a/0x420 [ 457.659304][T20273] ? __fget_files+0x3a0/0x420 [ 457.659332][T20273] __x64_sys_sendmsg+0x1bd/0x2a0 [ 457.659360][T20273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.659395][T20273] ? __pfx_ksys_write+0x10/0x10 [ 457.659429][T20273] do_syscall_64+0x14d/0xf80 [ 457.659452][T20273] ? trace_irq_disable+0x3b/0x150 [ 457.659469][T20273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.659490][T20273] ? clear_bhb_loop+0x40/0x90 [ 457.659515][T20273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.659535][T20273] RIP: 0033:0x7ff738b9c819 [ 457.659554][T20273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.659570][T20273] RSP: 002b:00007ff739aa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.659592][T20273] RAX: ffffffffffffffda RBX: 00007ff738e15fa0 RCX: 00007ff738b9c819 [ 457.659607][T20273] RDX: 0000000004000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 457.659620][T20273] RBP: 00007ff739aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 457.659631][T20273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.659643][T20273] R13: 00007ff738e16038 R14: 00007ff738e15fa0 R15: 00007ffc2f13dda8 [ 457.659676][T20273] [ 457.720502][T20277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.938985][T20281] syzkaller0: left promiscuous mode [ 457.957570][T20281] syzkaller0: left allmulticast mode [ 458.030676][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 458.038790][ C1] lec:lec_tx_timeout: lec0 [ 458.043912][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 458.183656][T20294] FAULT_INJECTION: forcing a failure. [ 458.183656][T20294] name failslab, interval 1, probability 0, space 0, times 0 [ 458.252889][T20294] CPU: 0 UID: 0 PID: 20294 Comm: syz.0.3731 Not tainted syzkaller #0 PREEMPT(full) [ 458.252919][T20294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 458.252931][T20294] Call Trace: [ 458.252939][T20294] [ 458.252947][T20294] dump_stack_lvl+0xe8/0x150 [ 458.252981][T20294] should_fail_ex+0x412/0x560 [ 458.253017][T20294] should_failslab+0xa8/0x100 [ 458.253045][T20294] __kmalloc_noprof+0xe8/0x760 [ 458.253068][T20294] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 458.253102][T20294] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 458.253137][T20294] genl_family_rcv_msg_doit+0xd9/0x330 [ 458.253171][T20294] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 458.253207][T20294] ? apparmor_capable+0x126/0x170 [ 458.253233][T20294] ? bpf_lsm_capable+0x9/0x20 [ 458.253259][T20294] ? security_capable+0x7e/0x2c0 [ 458.253295][T20294] genl_rcv_msg+0x61c/0x7a0 [ 458.253343][T20294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.253367][T20294] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 458.253393][T20294] ? __pfx_nl80211_get_key+0x10/0x10 [ 458.253419][T20294] ? __pfx_nl80211_post_doit+0x10/0x10 [ 458.253445][T20294] ? __lock_acquire+0x6b5/0x2cf0 [ 458.253485][T20294] netlink_rcv_skb+0x232/0x4b0 [ 458.253508][T20294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.253535][T20294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.253577][T20294] ? down_read+0x272/0x2e0 [ 458.253603][T20294] ? genl_rcv+0xd/0x40 [ 458.253629][T20294] genl_rcv+0x28/0x40 [ 458.253652][T20294] netlink_unicast+0x80f/0x9b0 [ 458.253692][T20294] ? __pfx_netlink_unicast+0x10/0x10 [ 458.253723][T20294] ? netlink_sendmsg+0x650/0xb40 [ 458.253742][T20294] ? skb_put+0x11b/0x210 [ 458.253770][T20294] netlink_sendmsg+0x813/0xb40 [ 458.253802][T20294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.253828][T20294] ? aa_sock_msg_perm+0xf1/0x1b0 [ 458.253859][T20294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.253886][T20294] ____sys_sendmsg+0x972/0x9f0 [ 458.253922][T20294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.253959][T20294] ? import_iovec+0x73/0xa0 [ 458.253987][T20294] ___sys_sendmsg+0x2a5/0x360 [ 458.254019][T20294] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.254084][T20294] ? __fget_files+0x2a/0x420 [ 458.254102][T20294] ? __fget_files+0x3a0/0x420 [ 458.254133][T20294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 458.254161][T20294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.254198][T20294] ? __pfx_ksys_write+0x10/0x10 [ 458.254235][T20294] do_syscall_64+0x14d/0xf80 [ 458.254260][T20294] ? trace_irq_disable+0x3b/0x150 [ 458.254278][T20294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.254298][T20294] ? clear_bhb_loop+0x40/0x90 [ 458.254331][T20294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.254351][T20294] RIP: 0033:0x7f65c299c819 [ 458.254370][T20294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.254386][T20294] RSP: 002b:00007f65c37b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.254408][T20294] RAX: ffffffffffffffda RBX: 00007f65c2c15fa0 RCX: 00007f65c299c819 [ 458.254422][T20294] RDX: 0000000004000080 RSI: 0000200000001500 RDI: 0000000000000003 [ 458.254435][T20294] RBP: 00007f65c37b7090 R08: 0000000000000000 R09: 0000000000000000 [ 458.254447][T20294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.254458][T20294] R13: 00007f65c2c16038 R14: 00007f65c2c15fa0 R15: 00007fff42f3b418 [ 458.254493][T20294] [ 459.082158][T20320] __nla_validate_parse: 8 callbacks suppressed [ 459.082179][T20320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3736'. [ 459.332506][T20335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.443658][T20342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3744'. [ 459.545971][T20343] ip6tnl1: entered promiscuous mode [ 459.708407][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 459.781037][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 459.810899][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 459.828833][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 459.846956][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 459.866239][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 459.889311][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 459.900249][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 460.409003][T20387] Bluetooth: MGMT ver 1.23 [ 460.770281][T20415] syz_tun: entered allmulticast mode [ 460.952039][T20403] syz_tun: left allmulticast mode [ 460.978070][T20422] FAULT_INJECTION: forcing a failure. [ 460.978070][T20422] name failslab, interval 1, probability 0, space 0, times 0 [ 460.992605][T20423] netlink: 'syz.1.3769': attribute type 7 has an invalid length. [ 460.994821][T20422] CPU: 0 UID: 0 PID: 20422 Comm: syz.4.3770 Not tainted syzkaller #0 PREEMPT(full) [ 460.994844][T20422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 460.994855][T20422] Call Trace: [ 460.994862][T20422] [ 460.994870][T20422] dump_stack_lvl+0xe8/0x150 [ 460.994902][T20422] should_fail_ex+0x412/0x560 [ 460.994933][T20422] should_failslab+0xa8/0x100 [ 460.994954][T20422] ? skb_clone+0x212/0x3a0 [ 460.994977][T20422] kmem_cache_alloc_noprof+0x87/0x650 [ 460.995004][T20422] skb_clone+0x212/0x3a0 [ 460.995029][T20422] __netlink_deliver_tap+0x404/0x850 [ 460.995060][T20422] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.995080][T20422] netlink_deliver_tap+0x19c/0x1b0 [ 460.995138][T20422] netlink_sendskb+0x68/0x140 [ 460.995164][T20422] netlink_unicast+0x3a3/0x9b0 [ 460.995197][T20422] ? __pfx_netlink_unicast+0x10/0x10 [ 460.995231][T20422] netlink_rcv_skb+0x2b6/0x4b0 [ 460.995250][T20422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.995274][T20422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.995309][T20422] ? down_read+0x272/0x2e0 [ 460.995331][T20422] ? genl_rcv+0xd/0x40 [ 460.995354][T20422] genl_rcv+0x28/0x40 [ 460.995373][T20422] netlink_unicast+0x80f/0x9b0 [ 460.995406][T20422] ? __pfx_netlink_unicast+0x10/0x10 [ 460.995432][T20422] ? netlink_sendmsg+0x650/0xb40 [ 460.995449][T20422] ? skb_put+0x11b/0x210 [ 460.995471][T20422] netlink_sendmsg+0x813/0xb40 [ 460.995499][T20422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.995521][T20422] ? aa_sock_msg_perm+0xf1/0x1b0 [ 460.995553][T20422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.995576][T20422] ____sys_sendmsg+0x972/0x9f0 [ 460.995607][T20422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.995638][T20422] ? import_iovec+0x73/0xa0 [ 460.995662][T20422] ___sys_sendmsg+0x2a5/0x360 [ 460.995689][T20422] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.995747][T20422] ? __fget_files+0x2a/0x420 [ 460.995762][T20422] ? __fget_files+0x3a0/0x420 [ 460.995788][T20422] __x64_sys_sendmsg+0x1bd/0x2a0 [ 460.995812][T20422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.995844][T20422] ? __pfx_ksys_write+0x10/0x10 [ 460.995875][T20422] do_syscall_64+0x14d/0xf80 [ 460.995896][T20422] ? trace_irq_disable+0x3b/0x150 [ 460.995910][T20422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.995927][T20422] ? clear_bhb_loop+0x40/0x90 [ 460.995949][T20422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.995966][T20422] RIP: 0033:0x7ff738b9c819 [ 460.995984][T20422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.995998][T20422] RSP: 002b:00007ff739aa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.996017][T20422] RAX: ffffffffffffffda RBX: 00007ff738e15fa0 RCX: 00007ff738b9c819 [ 460.996030][T20422] RDX: 0000000004000080 RSI: 0000200000001500 RDI: 0000000000000003 [ 460.996040][T20422] RBP: 00007ff739aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 460.996050][T20422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.996060][T20422] R13: 00007ff738e16038 R14: 00007ff738e15fa0 R15: 00007ffc2f13dda8 [ 460.996097][T20422] [ 461.243949][T20427] syzkaller0: entered promiscuous mode [ 461.472229][T20430] gtp0: entered promiscuous mode [ 461.498996][T20430] gtp0: entered allmulticast mode [ 461.583677][T20419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.618919][T20419] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 461.648587][T20419] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 461.975366][T20460] tipc: Started in network mode [ 461.999756][T20460] tipc: Node identity 9a6c197dca6a, cluster identity 4711 [ 462.025838][T20460] tipc: Enabled bearer , priority 11 [ 462.195465][T20469] h: entered promiscuous mode [ 462.831055][T20496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.051119][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 463.059409][ C1] lec:lec_tx_timeout: lec0 [ 463.064910][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.140803][ T5936] tipc: Node number set to 1342577021 [ 463.535842][T20516] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 463.550102][T20516] bond0 (unregistering): Released all slaves [ 463.562454][T20534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.608031][T20526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.786248][T20545] netlink: 'syz.0.3797': attribute type 1 has an invalid length. [ 464.132685][T20558] netlink: 'syz.3.3810': attribute type 1 has an invalid length. [ 464.149067][T20556] sit1: entered promiscuous mode [ 464.160142][T20558] netlink: 'syz.3.3810': attribute type 1 has an invalid length. [ 464.163764][T20556] sit1: entered allmulticast mode [ 464.173114][T20558] netlink: 'syz.3.3810': attribute type 1 has an invalid length. [ 464.173151][T20558] netlink: 'syz.3.3810': attribute type 2 has an invalid length. [ 464.173164][T20558] __nla_validate_parse: 47 callbacks suppressed [ 464.173174][T20558] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3810'. [ 464.228275][T20561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3812'. [ 464.316702][T20570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3813'. [ 464.378698][T20570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3813'. [ 464.379363][T11157] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 464.418149][T11157] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.494532][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3815'. [ 464.504102][T20577] netlink: 'syz.4.3815': attribute type 26 has an invalid length. [ 464.515303][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3815'. [ 464.515789][T11157] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.562374][T11157] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.584161][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3815'. [ 464.650506][T20577] netlink: 'syz.4.3815': attribute type 26 has an invalid length. [ 464.675142][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 464.705101][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3818'. [ 464.713129][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3815'. [ 464.981941][T20601] dvmrp0: entered allmulticast mode [ 465.044822][T20606] netlink: 'syz.1.3822': attribute type 10 has an invalid length. [ 465.137717][T20606] : (slave netdevsim0): Enslaving as an active interface with an up link [ 465.264834][T20608] netlink: 'syz.2.3823': attribute type 2 has an invalid length. [ 465.331639][T20616] netlink: 'syz.2.3823': attribute type 2 has an invalid length. [ 465.346710][T20608] !: entered promiscuous mode [ 465.359627][T20616] !: left promiscuous mode [ 465.450169][T20620] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 465.467267][T20620] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 466.333116][T20673] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 466.486048][T20685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.560539][T20685] syzkaller0: entered promiscuous mode [ 466.579018][T20685] syzkaller0: entered allmulticast mode [ 467.011683][T11157] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.021935][T11157] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.034086][T11157] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.067989][T20716] sctp: [Deprecated]: syz.2.3852 (pid 20716) Use of int in maxseg socket option. [ 467.067989][T20716] Use struct sctp_assoc_value instead [ 467.318977][T20727] syzkaller0: entered promiscuous mode [ 467.328109][T20727] syzkaller0: entered allmulticast mode [ 467.348130][T20727] bridge_slave_0: left allmulticast mode [ 467.354624][T20727] bridge_slave_0: left promiscuous mode [ 467.360914][T20727] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.394979][T20727] bridge_slave_1: left promiscuous mode [ 467.400946][T20727] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.433635][T20727] bond2: (slave veth0_to_bond): Releasing active interface [ 467.447134][T20727] : (slave bond_slave_0): Releasing backup interface [ 467.462394][T20727] : (slave bond_slave_1): Releasing backup interface [ 467.493004][T20727] team0: Port device team_slave_0 removed [ 467.523840][T20727] team0: Port device team_slave_1 removed [ 467.536880][T20727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.548482][T20727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.558164][T20727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 467.581914][T20738] team0: Mode changed to "activebackup" [ 468.081111][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 468.089188][ C1] lec:lec_tx_timeout: lec0 [ 468.094685][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.100027][ T29] audit: type=1800 audit(1775270388.492:4): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3863" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=535 res=0 errno=0 [ 468.152053][ T29] audit: type=1800 audit(1775270388.542:5): pid=20762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3863" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=535 res=0 errno=0 [ 468.832249][T20795] x_tables: unsorted entry at hook 3 [ 469.187700][T20815] validate_nla: 10 callbacks suppressed [ 469.187721][T20815] netlink: 'syz.3.3877': attribute type 30 has an invalid length. [ 469.240162][T20818] __nla_validate_parse: 22 callbacks suppressed [ 469.240182][T20818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'. [ 469.270795][T20818] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 469.613669][T20831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.823191][T20850] netlink: 'syz.2.3888': attribute type 8 has an invalid length. [ 469.835684][T20850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3888'. [ 469.845376][T20850] openvswitch: netlink: Flow key attr not present in new flow. [ 469.889126][T20853] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 469.931766][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3890'. [ 470.075531][T20864] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 470.092979][T20864] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3892'. [ 470.232166][T20869] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 470.268244][T20875] netlink: 'syz.2.3897': attribute type 10 has an invalid length. [ 470.280531][T20875] bond0: (slave wlan1): Opening slave failed [ 470.299021][T20875] netlink: 'syz.2.3897': attribute type 10 has an invalid length. [ 470.330047][T20875] bond0: (slave wlan1): Opening slave failed [ 470.455059][T20885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3900'. [ 470.483747][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'. [ 470.498947][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 471.239136][T20932] erspan0: entered promiscuous mode [ 471.287704][T20932] netlink: 'syz.3.3914': attribute type 2 has an invalid length. [ 471.315733][T20932] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3914'. [ 471.316371][T20935] syzkaller1: entered promiscuous mode [ 471.330924][T20935] syzkaller1: entered allmulticast mode [ 471.784634][T20955] netlink: 'syz.4.3920': attribute type 1 has an invalid length. [ 471.805029][T20956] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 472.680396][T21003] lo: entered promiscuous mode [ 472.707620][T21003] netlink: 'syz.1.3931': attribute type 2 has an invalid length. [ 472.716292][T21003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.111587][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 473.119655][ C1] lec:lec_tx_timeout: lec0 [ 473.124800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 475.210476][T21036] syzkaller1: entered promiscuous mode [ 475.219227][T21036] syzkaller1: entered allmulticast mode [ 475.626235][T21060] netlink: 'syz.3.3947': attribute type 1 has an invalid length. [ 475.642872][T21060] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3947'. [ 475.709282][T21062] vlan2: entered allmulticast mode [ 475.733534][T21063] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3946'. [ 475.765008][T21062] bond0: entered allmulticast mode [ 475.776399][T21062] bond_slave_0: entered allmulticast mode [ 475.803423][T21062] bond_slave_1: entered allmulticast mode [ 475.863267][T21063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.891532][T21063] bond_slave_0: left allmulticast mode [ 475.911925][T21063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.933334][T21063] bond_slave_1: left allmulticast mode [ 475.949363][T21063] bond0 (unregistering): Released all slaves [ 476.252623][T21091] netlink: 'syz.4.3954': attribute type 152 has an invalid length. [ 476.282907][T21091] netlink: 'syz.4.3954': attribute type 29 has an invalid length. [ 476.500528][T21102] netlink: 'syz.1.3959': attribute type 1 has an invalid length. [ 476.633312][T21102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.674012][T21108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.704488][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 476.723654][T21108] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 476.735795][T21108] bond3: (slave vcan1): Error -95 calling set_mac_address [ 476.799152][T21121] veth0: entered promiscuous mode [ 476.834354][T21110] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3963'. [ 476.851747][T21125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3965'. [ 476.883864][T21118] veth0: left promiscuous mode [ 477.006807][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3966'. [ 477.038190][T21129] netlink: 'syz.1.3967': attribute type 1 has an invalid length. [ 477.076166][T21127] netlink: 'syz.4.3966': attribute type 1 has an invalid length. [ 477.097829][T21135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 477.315729][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3973'. [ 477.737856][T21160] netlink: 'syz.1.3979': attribute type 26 has an invalid length. [ 477.758081][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 477.783314][T21160] netlink: 'syz.1.3979': attribute type 26 has an invalid length. [ 477.807509][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 477.869450][T21165] ip6t_srh: unknown srh match flags 5F28 [ 477.970891][T21175] netlink: 'syz.4.3983': attribute type 18 has an invalid length. [ 478.006484][T21177] netlink: 'syz.2.3982': attribute type 1 has an invalid length. [ 478.064422][T10039] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.091119][T10039] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.119962][T10039] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.141368][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 478.149424][ C1] lec:lec_tx_timeout: lec0 [ 478.154910][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 478.171559][T10039] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.345686][T21193] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3989'. [ 478.461917][T21200] IPVS: Error connecting to the multicast addr [ 478.959689][T21225] gre1: entered promiscuous mode [ 479.002465][T21223] can: request_module (can-proto-3) failed. [ 479.023630][T21225] gre1: entered allmulticast mode [ 479.556882][T21257] openvswitch: netlink: Unknown nsh attribute 0 [ 479.572391][T21257] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 479.611645][T21257] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 479.626872][T21257] gretap1: entered promiscuous mode [ 479.632508][T21257] gretap1: entered allmulticast mode [ 480.130268][T21280] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 480.355069][T21290] bond2: Unable to set up delay as MII monitoring is disabled [ 480.389728][T21290] bond2 (unregistering): Released all slaves [ 480.912340][T21322] __nla_validate_parse: 4 callbacks suppressed [ 480.912362][T21322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4026'. [ 481.469965][T21346] netlink: 'syz.2.4032': attribute type 21 has an invalid length. [ 481.550542][T21346] netlink: 'syz.2.4032': attribute type 12 has an invalid length. [ 481.752480][T21357] netlink: 'syz.3.4036': attribute type 1 has an invalid length. [ 481.772068][T21357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.831524][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 481.942670][T21366] macsec0: entered promiscuous mode [ 481.957744][T21369] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4040'. [ 481.960737][T21366] macsec0: entered allmulticast mode [ 481.994778][T21366] veth1_macvtap: entered allmulticast mode [ 482.002236][T21366] macsec0: left promiscuous mode [ 482.007564][T21366] macsec0: left allmulticast mode [ 482.014340][T21366] veth1_macvtap: left allmulticast mode [ 482.102976][T21374] netlink: 'syz.3.4042': attribute type 1 has an invalid length. [ 482.147615][T21377] netlink: 'syz.4.4044': attribute type 3 has an invalid length. [ 482.325684][T21378] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.341895][T21378] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 482.357582][T21378] bond2: (slave vxcan3): making interface the new active one [ 482.367213][T21378] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 482.431188][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 482.490957][T21395] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.557927][T21400] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4048'. [ 482.583439][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4048'. [ 482.762294][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4049'. [ 482.788056][T21398] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4049'. [ 482.790195][T21409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 482.872473][T21409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.893706][T21412] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4052'. [ 482.947316][T21409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 483.000234][T21409] vxcan5: entered promiscuous mode [ 483.007418][T21409] vxcan5: entered allmulticast mode [ 483.171104][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 483.179194][ C1] lec:lec_tx_timeout: lec0 [ 483.184555][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 483.497853][T21439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.872559][T21469] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.995901][T21476] netlink: 'syz.1.4068': attribute type 1 has an invalid length. [ 484.147125][T21476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.184927][T21485] netlink: 'syz.4.4071': attribute type 8 has an invalid length. [ 484.232756][T21482] bond4: (slave veth3): Enslaving as an active interface with a down link [ 484.246438][T21484] bond4: (slave dummy0): making interface the new active one [ 484.267669][T21484] dummy0: entered promiscuous mode [ 484.277524][T21484] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 484.313274][T21476] bond4: (slave dummy0): Releasing active interface [ 484.320287][T21476] dummy0 (unregistering): left promiscuous mode [ 484.797382][T21513] bridge0: port 3(ipvlan3) entered blocking state [ 484.816274][T21513] bridge0: port 3(ipvlan3) entered disabled state [ 484.824510][T21513] ipvlan3: entered allmulticast mode [ 484.830074][T21513] bridge0: entered allmulticast mode [ 484.839565][T21513] ipvlan3: left allmulticast mode [ 484.846788][T21513] bridge0: left allmulticast mode [ 484.930083][T21517] IPv6: sit1: Disabled Multicast RS [ 484.937922][T21517] sit1: entered allmulticast mode [ 485.107754][T21530] netlink: 'syz.4.4085': attribute type 4 has an invalid length. [ 485.315920][T21540] syzkaller0: entered promiscuous mode [ 485.322629][T21540] syzkaller0: entered allmulticast mode [ 485.607342][T21552] netlink: 'syz.1.4092': attribute type 3 has an invalid length. [ 485.992501][T21568] SET target dimension over the limit! [ 486.005228][T21569] ip6_vti0: entered promiscuous mode [ 486.036576][T21569] __nla_validate_parse: 13 callbacks suppressed [ 486.036595][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 486.083647][T21572] netlink: 'syz.4.4099': attribute type 10 has an invalid length. [ 486.396264][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.428015][T21591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4106'. [ 486.441839][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.459963][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.475799][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.490017][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4106'. [ 486.503485][T21592] vlan2: entered promiscuous mode [ 486.508581][T21592] bridge0: entered promiscuous mode [ 486.516314][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.546631][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.593766][T21596] validate_nla: 6 callbacks suppressed [ 486.593784][T21596] netlink: 'syz.3.4105': attribute type 2 has an invalid length. [ 486.619260][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.642804][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4106'. [ 486.651726][T21596] netlink: 'syz.3.4105': attribute type 2 has an invalid length. [ 486.651952][T21596] netlink: 'syz.3.4105': attribute type 2 has an invalid length. [ 486.652153][T21596] netlink: 'syz.3.4105': attribute type 2 has an invalid length. [ 486.654696][T21596] netlink: 'syz.3.4105': attribute type 2 has an invalid length. [ 486.660881][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.685338][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.687404][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.740245][T21587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.760912][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.783489][T21596] netlink: 'syz.3.4105': attribute type 2 has an invalid length. [ 486.783899][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.819685][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.892622][T21596] netlink: 'syz.3.4105': attribute type 2 has an invalid length. [ 486.936209][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 486.982144][T21612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.993351][T21617] xt_hashlimit: size too large, truncated to 1048576 [ 487.085006][T21625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'. [ 487.134851][T21626] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4115'. [ 487.227336][T21630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4114'. [ 487.298725][T21611] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 487.530130][T21642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4118'. [ 487.559812][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4119'. [ 488.126699][T21668] netlink: 'syz.0.4128': attribute type 3 has an invalid length. [ 488.191048][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 488.199189][ C1] lec:lec_tx_timeout: lec0 [ 488.204341][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 488.448015][T21674] bond4: entered promiscuous mode [ 488.491851][T21685] netlink: 'syz.0.4133': attribute type 10 has an invalid length. [ 488.586657][T21685] batman_adv: batadv0: Adding interface: netdevsim0 [ 488.637698][T21685] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.669217][T21685] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 488.682571][T21690] netlink: 'syz.4.4134': attribute type 7 has an invalid length. [ 488.879610][T21697] syzkaller0: entered promiscuous mode [ 488.886187][T21697] syzkaller0: entered allmulticast mode [ 489.452155][T21738] openvswitch: netlink: IP tunnel TTL not specified. [ 489.608980][T21745] delete_channel: no stack [ 489.820180][T21754] lo speed is unknown, defaulting to 1000 [ 489.851158][T21754] lo speed is unknown, defaulting to 1000 [ 489.877768][T21754] lo speed is unknown, defaulting to 1000 [ 490.526705][T21754] infiniband syz2: set active [ 490.532136][T10586] lo speed is unknown, defaulting to 1000 [ 490.550710][T21754] infiniband syz2: added lo [ 490.558242][T21754] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 490.564308][T21754] infiniband syz2: Couldn't open port 1 [ 490.618778][T21789] lo speed is unknown, defaulting to 1000 [ 490.635145][T21754] RDS/IB: syz2: added [ 490.648681][T21754] smc: adding ib device syz2 with port count 1 [ 490.662331][T21754] smc: ib device syz2 port 1 has no pnetid [ 490.668783][T10540] lo speed is unknown, defaulting to 1000 [ 490.967042][T21805] syzkaller0: entered promiscuous mode [ 490.974874][T21805] syzkaller0: entered allmulticast mode [ 491.089429][T21754] lo speed is unknown, defaulting to 1000 [ 491.364446][T21808] __nla_validate_parse: 14 callbacks suppressed [ 491.364469][T21808] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4169'. [ 491.593946][T21820] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.624865][T21820] bridge_slave_1: left allmulticast mode [ 491.633790][T21820] bridge_slave_1: left promiscuous mode [ 491.644562][T21820] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.675237][T21820] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 491.828336][T21754] lo speed is unknown, defaulting to 1000 [ 492.021597][T21838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4177'. [ 492.026427][T21839] validate_nla: 9 callbacks suppressed [ 492.026444][T21839] netlink: 'syz.0.4178': attribute type 10 has an invalid length. [ 492.060371][T21838] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 492.073272][T21838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.275841][T21847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4181'. [ 492.395673][T21754] lo speed is unknown, defaulting to 1000 [ 492.702944][T21754] lo speed is unknown, defaulting to 1000 [ 492.851304][T21754] lo speed is unknown, defaulting to 1000 [ 492.999256][T21754] lo speed is unknown, defaulting to 1000 [ 493.149141][T21754] lo speed is unknown, defaulting to 1000 [ 493.211094][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 493.219209][ C1] lec:lec_tx_timeout: lec0 [ 493.224480][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 493.304369][T21754] lo speed is unknown, defaulting to 1000 [ 493.645166][T21833] siw: device registration error -23 [ 494.134958][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806eee4c00: rx timeout, send abort [ 494.171446][T21874] syzkaller0: entered promiscuous mode [ 494.177041][T21874] syzkaller0: entered allmulticast mode [ 494.256316][T21895] netlink: 'syz.3.4192': attribute type 1 has an invalid length. [ 494.264509][T21895] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4192'. [ 494.275076][T21895] netlink: 'syz.3.4192': attribute type 8 has an invalid length. [ 494.283974][T21895] netlink: 610 bytes leftover after parsing attributes in process `syz.3.4192'. [ 494.449889][T21900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4193'. [ 494.566554][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4196'. [ 494.635658][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b298000: rx timeout, send abort [ 494.644643][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806eee4c00: abort rx timeout. Force session deactivation [ 495.144036][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b298000: abort rx timeout. Force session deactivation [ 496.060666][T21911] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4197'. [ 496.069698][T21911] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4197'. [ 496.336455][T21917] openvswitch: netlink: Flow actions attr not present in new flow. [ 496.386102][T21922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4200'. [ 496.473228][T21918] syzkaller1: entered promiscuous mode [ 496.481407][T21918] syzkaller1: entered allmulticast mode [ 496.865098][T21942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4206'. [ 496.923204][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'. [ 497.249110][T21961] lo speed is unknown, defaulting to 1000 [ 497.275463][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4214'. [ 497.364205][T21967] bridge_slave_0: left allmulticast mode [ 497.370142][T21967] bridge_slave_0: left promiscuous mode [ 497.378915][T21967] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.428596][T21967] bridge_slave_1: left allmulticast mode [ 497.436755][T21967] bridge_slave_1: left promiscuous mode [ 497.447101][T21967] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.508708][T21967] bond0: (slave bond_slave_0): Releasing backup interface [ 497.574587][T21967] bond0: (slave bond_slave_1): Releasing backup interface [ 497.701718][T21967] team0: Port device team_slave_0 removed [ 497.728211][T21967] team0: Port device team_slave_1 removed [ 497.744698][T21967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.766528][T21967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.778301][T21967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.791764][T21967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.807554][T21967] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 497.874575][T21983] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 497.883504][T21983] netlink: 'syz.1.4218': attribute type 4 has an invalid length. [ 497.894103][T21983] netlink: 'syz.1.4218': attribute type 30 has an invalid length. [ 497.960094][T21986] netlink: 'syz.1.4218': attribute type 10 has an invalid length. [ 497.999785][T21985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4219'. [ 498.070756][T21983] bond5: option arp_missed_max: invalid value (0) [ 498.071750][T21991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4221'. [ 498.078571][T21983] bond5: option arp_missed_max: allowed values 1 - 255 [ 498.108767][T21983] bond5 (unregistering): Released all slaves [ 498.228814][T21986] bridge_slave_1: left allmulticast mode [ 498.266885][T21986] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 498.351262][T10586] IPVS: starting estimator thread 0... [ 498.406039][T21991] lo speed is unknown, defaulting to 1000 [ 498.424817][T22007] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 498.450771][T22005] IPVS: using max 28 ests per chain, 67200 per kthread [ 498.598882][T22012] sock: sock_timestamping_bind_phc: sock not bind to device [ 499.070613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 499.078717][ C1] lec:lec_tx_timeout: lec0 [ 499.084353][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 499.231232][T22033] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 499.332357][T22033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.486525][T22042] vlan3: entered allmulticast mode [ 499.495335][T22042] bond5: entered allmulticast mode [ 499.625486][T22033] bond5: (slave geneve3): making interface the new active one [ 499.633489][T22033] geneve3: entered allmulticast mode [ 499.642682][T22033] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 500.507250][T22063] bond0: entered promiscuous mode [ 500.514975][T22063] bond0: entered allmulticast mode [ 500.531158][T22063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.657856][T22075] sit0: entered promiscuous mode [ 500.713619][T22075] netlink: 'syz.0.4245': attribute type 1 has an invalid length. [ 500.751907][T22075] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4245'. [ 500.853704][T22075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4245'. [ 501.388887][T22109] tipc: Enabled bearer , priority 0 [ 501.474470][T22109] +: renamed from syzkaller0 (while UP) [ 501.485408][T22109] tipc: Disabling bearer [ 501.645231][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.646774][T22116] netlink: 'syz.4.4258': attribute type 1 has an invalid length. [ 501.776240][T22116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.132321][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4261'. [ 502.168002][T22134] veth0_macvtap: left promiscuous mode [ 502.234869][T22142] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4264'. [ 502.334144][T22149] netlink: 'syz.2.4268': attribute type 1 has an invalid length. [ 502.390024][T22142] syzkaller0: entered promiscuous mode [ 502.396481][T22142] syzkaller0: entered allmulticast mode [ 502.438347][T22154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4267'. [ 502.465567][T22149] bond3: entered promiscuous mode [ 502.471833][T22149] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.558648][T22152] bond3: (slave bridge3): making interface the new active one [ 502.605693][T22152] bridge3: entered promiscuous mode [ 502.624826][T22152] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 502.658022][T22163] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4269'. [ 502.931967][T22169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4271'. [ 504.092885][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 504.100955][ C1] lec:lec_tx_timeout: lec0 [ 504.105843][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 504.313043][T22149] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.325856][T22149] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 504.349752][T22159] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.359148][T22159] team0: Device macvlan2 is already an upper device of the team interface [ 504.688427][T22180] bridge_slave_0: left allmulticast mode [ 504.736103][T22180] bridge_slave_0: left promiscuous mode [ 504.766881][T22180] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.826983][T22191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4280'. [ 504.847840][T22180] bridge_slave_1: left allmulticast mode [ 504.857058][T22180] bridge_slave_1: left promiscuous mode [ 504.881578][T22180] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.905065][T22180] team0: Port device team_slave_0 removed [ 504.923451][T22180] team0: Port device team_slave_1 removed [ 504.934807][T22180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.951860][T22180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.965366][T22180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.966924][T22202] x_tables: unsorted entry at hook 2 [ 504.978047][T22180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.989080][T22180] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 505.013794][ T5893] lo speed is unknown, defaulting to 1000 [ 505.281781][T22189] syzkaller0: entered promiscuous mode [ 505.288644][T22189] syzkaller0: entered allmulticast mode [ 505.297627][T22212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.848431][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4292'. [ 507.846917][T22276] tipc: Enabling of bearer rejected, media not registered [ 508.026690][T22280] bond4: entered promiscuous mode [ 508.027379][T22289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4300'. [ 508.054190][T22284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4301'. [ 508.717418][T22326] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 508.745316][T22326] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 508.775200][T22328] netlink: 'syz.4.4314': attribute type 1 has an invalid length. [ 508.783715][T22331] netlink: 'syz.2.4313': attribute type 3 has an invalid length. [ 508.807121][T22328] bond3: entered promiscuous mode [ 508.813985][T22328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.839488][T22328] bond3: (slave bridge4): making interface the new active one [ 508.847244][T22328] bridge4: entered promiscuous mode [ 508.853801][T22328] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 508.874023][T22328] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 508.886617][T22328] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 509.008396][T22343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4318'. [ 509.020056][T22344] Cannot find map_set index 65533 as target [ 509.121048][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 509.129138][ C1] lec:lec_tx_timeout: lec0 [ 509.708377][T22369] netlink: 'syz.1.4327': attribute type 2 has an invalid length. [ 509.730116][T22338] delete_channel: no stack [ 510.033897][T22386] veth0: entered allmulticast mode [ 510.244130][T22402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4337'. [ 510.275467][T22406] delete_channel: no stack [ 510.306591][T22402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4337'. [ 510.450523][T22414] syzkaller0: entered promiscuous mode [ 510.456835][T22414] syzkaller0: entered allmulticast mode [ 510.647864][T22421] 8021q: VLANs not supported on vxcan1 [ 510.796372][T22427] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4344'. [ 510.806880][T22427] 8021q: VLANs not supported on sit0 [ 510.968006][T22436] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4348'. [ 510.983160][T22436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4348'. [ 511.019103][T22441] netlink: 'syz.4.4349': attribute type 23 has an invalid length. [ 511.027994][T22441] netlink: 'syz.4.4349': attribute type 23 has an invalid length. [ 511.071530][T22441] netlink: 'syz.4.4349': attribute type 23 has an invalid length. [ 511.079641][T22441] netlink: 'syz.4.4349': attribute type 23 has an invalid length. [ 511.161622][T22441] netlink: 'syz.4.4349': attribute type 23 has an invalid length. [ 511.171258][T22441] netlink: 'syz.4.4349': attribute type 23 has an invalid length. [ 511.211475][T22441] netlink: 'syz.4.4349': attribute type 23 has an invalid length. [ 511.219589][T22444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'. [ 511.266914][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4350'. [ 511.442164][T22448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.565866][T22450] bond4: (slave veth9): Enslaving as an active interface with a down link [ 511.627430][T22448] vlan2: entered allmulticast mode [ 511.699592][T22448] veth0_to_bond: entered allmulticast mode [ 511.722712][T22448] veth0_to_bond: entered promiscuous mode [ 511.734613][T22448] veth0_to_bond: left promiscuous mode [ 511.743453][T22448] bond4: (slave vlan2): Enslaving as an active interface with a down link [ 511.978157][T22476] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 512.002869][T22476] bond5 (unregistering): Released all slaves [ 512.149874][T22493] IPVS: length: 169 != 8 [ 512.497314][T22476] syzkaller0: entered promiscuous mode [ 512.527419][T22476] syzkaller0: entered allmulticast mode [ 512.742730][T22516] vlan3: entered allmulticast mode [ 512.747939][T22516] bridge0: entered allmulticast mode [ 514.590462][T22530] syzkaller1: entered promiscuous mode [ 514.599572][T22530] syzkaller1: entered allmulticast mode [ 515.133260][T22564] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 515.190473][T22564] bond6: option packets_per_slave: allowed values 0 - 65535 [ 515.224182][T22564] bond6 (unregistering): Released all slaves [ 515.245199][T22583] validate_nla: 59 callbacks suppressed [ 515.245218][T22583] netlink: 'syz.1.4385': attribute type 9 has an invalid length. [ 515.471419][T22589] __nla_validate_parse: 4 callbacks suppressed [ 515.471441][T22589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4386'. [ 515.520788][T22589] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4386'. [ 515.543328][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4386'. [ 517.153326][T22588] dvmrp0: left allmulticast mode [ 517.659640][T22615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.772386][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'. [ 517.866465][T22619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.925806][T22641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4400'. [ 518.315600][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'. [ 518.322778][T22661] netlink: 'syz.1.4406': attribute type 75 has an invalid length. [ 518.870480][T22686] block nbd4: NBD_DISCONNECT [ 519.089308][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4418'. [ 519.244250][T22700] netlink: 'syz.0.4420': attribute type 1 has an invalid length. [ 519.252713][T22700] netlink: 'syz.0.4420': attribute type 3 has an invalid length. [ 519.260474][T22700] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4420'. [ 519.311303][T22694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.407862][T22721] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4425'. [ 519.408554][T22713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.544828][T22713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.685605][T22713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.721420][T22728] netlink: 'syz.3.4428': attribute type 4 has an invalid length. [ 519.736748][T22728] netlink: 'syz.3.4428': attribute type 4 has an invalid length. [ 519.823044][T22713] : (slave netdevsim0): Releasing backup interface [ 519.857085][T22732] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4429'. [ 520.142534][T11157] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.193915][T10043] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.216382][T10043] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.232124][T22746] netlink: 'syz.4.4434': attribute type 1 has an invalid length. [ 520.240094][T10043] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.241054][T22742] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 520.249369][T22739] nbd1: detected capacity change from 0 to 127 [ 520.298820][T22749] tc_dump_action: action bad kind [ 520.339019][T17642] block nbd1: Receive control failed (result -104) [ 520.494927][T22760] __nla_validate_parse: 1 callbacks suppressed [ 520.494947][T22760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 520.503901][T22757] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 520.759496][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4441'. [ 520.975577][T22782] syzkaller0: entered promiscuous mode [ 520.979609][T22786] netlink: 'syz.1.4447': attribute type 39 has an invalid length. [ 521.020352][T22782] syzkaller0: entered allmulticast mode [ 522.566238][T22871] netlink: 'syz.2.4469': attribute type 39 has an invalid length. [ 522.606493][T22874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4470'. [ 522.876553][T22880] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 522.996374][T22883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4474'. [ 523.052848][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4474'. [ 523.066086][T22883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4474'. [ 523.109375][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4476'. [ 523.143141][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4476'. [ 523.178468][T22894] netlink: 'syz.0.4478': attribute type 1 has an invalid length. [ 523.223779][T22894] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.236941][T22900] bond4: entered allmulticast mode [ 523.547526][T22914] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20001 [ 523.583050][T22918] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20001 [ 523.587339][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4486'. [ 523.602343][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4486'. [ 524.105347][T22936] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 524.121231][T22937] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 524.218434][T22941] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 524.233355][T22909] mpoa:mpoad_close: () going down [ 524.314651][T22941] bond5: option min_links: invalid value (18446744073709551614) [ 524.323735][T22941] bond5: option min_links: allowed values 0 - 2147483647 [ 524.334006][T22941] bond5 (unregistering): Released all slaves [ 524.558953][T22953] netem: unknown loss type 0 [ 524.578607][T22953] netem: change failed [ 525.034115][T22983] netlink: 'syz.1.4500': attribute type 3 has an invalid length. [ 525.278675][T23000] veth3: entered promiscuous mode [ 525.302283][T23000] veth3: entered allmulticast mode [ 525.621612][T23011] __nla_validate_parse: 5 callbacks suppressed [ 525.621635][T23011] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4509'. [ 525.681839][T23017] syzkaller1: entered promiscuous mode [ 525.687445][T23012] lo speed is unknown, defaulting to 1000 [ 525.697940][T23017] syzkaller1: entered allmulticast mode [ 526.308790][T23049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 526.609040][T23063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4519'. [ 526.822071][T23075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4522'. [ 527.249686][T23087] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 527.267311][T23087] syzkaller1: linktype set to 823 [ 527.482849][ T5835] syzkaller1: tun_net_xmit 90 [ 528.016124][T23121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4530'. [ 528.294953][T23135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4535'. [ 528.320367][T23135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4535'. [ 528.352566][T23136] openvswitch: netlink: Missing valid actions attribute. [ 528.354252][T23135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4535'. [ 528.362287][T23136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.386606][T23135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4535'. [ 528.396758][T23135] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4535'. [ 528.804934][T23158] syzkaller0: entered promiscuous mode [ 528.827057][T23158] syzkaller0: entered allmulticast mode [ 529.077085][T23171] dvmrp0: entered allmulticast mode [ 529.285898][T23186] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4550'. [ 529.495212][T23196] Can't find ip_set type hasH:ip,port [ 529.548706][T23203] : renamed from virt_wifi0 [ 529.791792][T11156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.800314][T11156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.809425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.817920][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.841457][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.321829][T23236] lo speed is unknown, defaulting to 1000 [ 530.972599][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.988165][T14775] lec:lec_start_xmit: lec0:No lecd attached [ 531.018618][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.044954][T23285] __nla_validate_parse: 12 callbacks suppressed [ 531.044977][T23285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4582'. [ 531.070889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.081108][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4581'. [ 531.095875][T23288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4581'. [ 531.149409][T23283] netlink: 'syz.4.4581': attribute type 5 has an invalid length. [ 531.462548][T23305] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4589'. [ 531.496308][T23305] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003 [ 531.697786][T23312] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 531.708567][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'. [ 531.761791][T23309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4591'. [ 531.849300][T23309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4591'. [ 531.864440][T23314] syzkaller0: entered promiscuous mode [ 531.870087][T23314] syzkaller0: entered allmulticast mode [ 531.879004][T23317] netlink: 'syz.3.4594': attribute type 1 has an invalid length. [ 531.888841][T23317] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4594'. [ 532.075365][T23323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4596'. [ 532.143050][T11157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.264768][T23331] nbd: must specify at least one socket [ 532.296283][T23336] syzkaller0: entered promiscuous mode [ 532.302727][T23336] syzkaller0: entered allmulticast mode [ 532.328319][T23337] block nbd2: not configured, cannot reconfigure [ 532.419995][T23334] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4602'. [ 532.756575][T23354] ip6erspan1: entered allmulticast mode [ 532.958451][T23362] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 533.220543][T23371] syzkaller0: entered promiscuous mode [ 533.253757][T23371] syzkaller0: entered allmulticast mode [ 534.916350][ T1109] net_ratelimit: 5 callbacks suppressed [ 534.916374][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.931490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.380037][T23410] IPVS: Unknown mcast interface: vcan0 [ 535.408429][T23413] IPVS: Unknown mcast interface: vcan0 [ 535.429655][T23422] netlink: 'syz.1.4628': attribute type 12 has an invalid length. [ 535.448116][T23421] : entered promiscuous mode [ 535.462738][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.482922][T23422] netlink: 'syz.1.4628': attribute type 12 has an invalid length. [ 535.493731][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.556735][T11156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.565912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.040618][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 536.048710][ C1] lec:lec_tx_timeout: lec0 [ 536.283306][T23472] __nla_validate_parse: 13 callbacks suppressed [ 536.283326][T23472] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4644'. [ 536.315861][T23472] sctp: [Deprecated]: syz.3.4644 (pid 23472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.315861][T23472] Use struct sctp_sack_info instead [ 536.355550][T23472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.365054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.460195][T23472] lo speed is unknown, defaulting to 1000 [ 536.659331][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.681687][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.762783][T23490] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 536.847959][T23490] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 537.322983][T23520] netlink: 'syz.1.4657': attribute type 1 has an invalid length. [ 537.431539][T23527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4657'. [ 537.487022][T23529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4658'. [ 537.615558][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4657'. [ 537.634844][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4657'. [ 537.784883][T23523] bond5: (slave geneve2): making interface the new active one [ 537.817147][T23523] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 537.863777][T23527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 537.903532][T23545] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4661'. [ 537.931920][T23515] lec:lec_start_xmit: lec0:No lecd attached [ 537.962649][T10043] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 537.995888][T10043] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 538.026570][T23547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4663'. [ 538.099546][T10043] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 538.115777][T10043] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 538.217727][T23561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4666'. [ 538.368143][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4667'. [ 538.658049][T23584] netlink: 'syz.4.4674': attribute type 1 has an invalid length. [ 538.772384][T23588] netlink: 'syz.2.4672': attribute type 3 has an invalid length. [ 539.441786][T23615] netlink: 'syz.4.4681': attribute type 1 has an invalid length. [ 539.494062][T23620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4681'. [ 539.558902][T23615] 8021q: adding VLAN 0 to HW filter on device bond6 [ 539.618598][T23617] bond6: (slave geneve2): making interface the new active one [ 539.652438][T23617] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 539.953562][T10043] net_ratelimit: 10 callbacks suppressed [ 539.953582][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.968174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.051249][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.062126][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.673970][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.682901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.171425][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.196392][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.237706][T23720] netlink: 'syz.1.4710': attribute type 1 has an invalid length. [ 541.270937][T23720] netlink: 'syz.1.4710': attribute type 1 has an invalid length. [ 541.314803][T23723] syzkaller0: entered promiscuous mode [ 541.321884][T23723] syzkaller0: entered allmulticast mode [ 541.398995][T23725] __nla_validate_parse: 4 callbacks suppressed [ 541.399018][T23725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4712'. [ 542.268351][T23771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.277961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.323432][T23777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4726'. [ 542.362206][T23771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4725'. [ 542.459540][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'. [ 542.663142][T23789] netlink: 'syz.0.4733': attribute type 1 has an invalid length. [ 542.709474][T23795] netlink: 'syz.2.4734': attribute type 1 has an invalid length. [ 542.911605][T23808] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4737'. [ 542.991193][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 542.999313][ C1] lec:lec_tx_timeout: lec0 [ 543.004336][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 543.324848][T23821] geneve4: entered promiscuous mode [ 543.369884][T10043] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 50776 - 0 [ 543.391251][T10043] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 50776 - 0 [ 543.400112][T10043] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 50776 - 0 [ 543.418510][T23831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4745'. [ 543.465175][T10043] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 50776 - 0 [ 543.707999][T23839] vlan3: entered allmulticast mode [ 543.751972][T23841] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4747'. [ 543.955911][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4751'. [ 544.065195][T23832] veth0: entered promiscuous mode [ 544.154762][T23830] veth0: left promiscuous mode [ 544.344650][T23876] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4757'. [ 544.358176][T23876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4757'. [ 544.441260][T23885] lo: entered promiscuous mode [ 544.467086][T23885] tunl0: entered promiscuous mode [ 544.504348][T23885] F: entered promiscuous mode [ 544.514633][T23885] F: left allmulticast mode [ 544.523007][T23885] gretap0: entered promiscuous mode [ 544.552446][T23885] erspan0: entered promiscuous mode [ 544.568852][T23885] ip_vti0: entered promiscuous mode [ 544.596191][T10540] lo speed is unknown, defaulting to 1000 [ 544.617336][T10540] syz2: Port: 1 Link DOWN [ 544.627863][ T5936] lo speed is unknown, defaulting to 1000 [ 544.628859][T23891] netlink: 'syz.1.4761': attribute type 3 has an invalid length. [ 545.043638][T23914] net_ratelimit: 9 callbacks suppressed [ 545.043658][T23914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.658508][T23936] tipc: Started in network mode [ 545.669848][T23936] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 545.673133][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.704070][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.709185][T23936] tipc: Enabled bearer , priority 5 [ 545.792154][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.801034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.432841][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.442408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.643111][T24000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.713341][T24002] syzkaller0: entered promiscuous mode [ 546.722718][T24002] syzkaller0: entered allmulticast mode [ 546.774160][T24008] __nla_validate_parse: 9 callbacks suppressed [ 546.774181][T24008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4792'. [ 546.821388][ T5900] tipc: Node number set to 9480874 [ 546.831352][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.843787][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.449600][T24022] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20000 [ 547.553905][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4798'. [ 547.583225][T24027] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4799'. [ 547.628139][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4800'. [ 547.688738][T24031] syzkaller0: entered promiscuous mode [ 547.700795][T24031] syzkaller0: entered allmulticast mode [ 547.888178][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4805'. [ 548.031985][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 548.040096][ C1] lec:lec_tx_timeout: lec0 [ 548.045345][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 548.093858][T24050] x_tables: duplicate underflow at hook 2 [ 548.161584][T24052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4809'. [ 548.183539][T24052] netlink: 'syz.4.4809': attribute type 11 has an invalid length. [ 548.208147][T24052] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4809'. [ 548.286525][T24052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4809'. [ 548.304547][T24052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4809'. [ 548.412867][T24068] syzkaller0: entered promiscuous mode [ 548.419929][T24068] syzkaller0: entered allmulticast mode [ 548.435571][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 548.481606][T24070] netlink: 'syz.2.4815': attribute type 18 has an invalid length. [ 548.525373][T24070] netlink: 'syz.2.4815': attribute type 18 has an invalid length. [ 548.553055][ T983] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.564073][ T983] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.584372][ T983] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.611263][ T983] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.663131][T24077] syzkaller1: entered promiscuous mode [ 548.668673][T24077] syzkaller1: entered allmulticast mode [ 548.803451][T24094] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 548.812577][T24094] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 548.839596][T24094] netlink: 'syz.3.4822': attribute type 8 has an invalid length. [ 548.873040][T24099] netlink: 'syz.1.4823': attribute type 21 has an invalid length. [ 549.137632][T24107] syzkaller0: entered promiscuous mode [ 549.146876][T24107] syzkaller0: entered allmulticast mode [ 549.361612][T24123] syzkaller0: entered promiscuous mode [ 549.367327][T24123] syzkaller0: entered allmulticast mode [ 549.476517][T24122] lo speed is unknown, defaulting to 1000 [ 549.835875][T24143] netlink: 'syz.0.4837': attribute type 3 has an invalid length. [ 549.850882][T24143] netlink: 'syz.0.4837': attribute type 3 has an invalid length. [ 550.211697][T10039] net_ratelimit: 8 callbacks suppressed [ 550.211717][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.234361][T24162] veth1_to_bond: entered allmulticast mode [ 550.250665][T24162] siw: device registration error -23 [ 550.259888][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.369946][T24161] veth1_to_bond: left allmulticast mode [ 550.383102][T24168] macvlan0: left promiscuous mode [ 550.398886][T24168] netlink: 'syz.2.4845': attribute type 2 has an invalid length. [ 550.477317][T24175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.484678][T24175] IPv6: NLM_F_CREATE should be set when creating new route [ 550.491996][T24175] IPv6: NLM_F_CREATE should be set when creating new route [ 550.543118][T24175] lo: entered allmulticast mode [ 550.579459][T24175] tunl0: entered allmulticast mode [ 550.592160][T24175] gre0: entered allmulticast mode [ 550.610526][T24175] gretap0: entered allmulticast mode [ 550.637250][T24175] erspan0: entered allmulticast mode [ 550.648568][T24175] ip_vti0: entered allmulticast mode [ 550.656186][T24175] ip6_vti0: entered allmulticast mode [ 550.664413][T24175] sit0: left promiscuous mode [ 550.669137][T24175] sit0: entered allmulticast mode [ 550.675577][T24175] ip6tnl0: entered allmulticast mode [ 550.688491][T24175] ip6gre0: entered allmulticast mode [ 550.699262][T24175] syz_tun: entered allmulticast mode [ 550.709378][T24175] ip6gretap0: entered allmulticast mode [ 550.718304][T24175] bridge0: entered allmulticast mode [ 550.724163][T24175] bond0: entered allmulticast mode [ 550.729485][T24175] dummy0: left promiscuous mode [ 550.735188][T24175] dummy0: entered allmulticast mode [ 550.749092][T24175] nlmon0: entered allmulticast mode [ 550.757757][T24175] caif0: entered allmulticast mode [ 550.764114][T24175] batadv0: entered allmulticast mode [ 550.773748][T24175] vxcan0: entered allmulticast mode [ 550.781777][T24175] vxcan1: entered allmulticast mode [ 550.787518][T24175] veth0: entered allmulticast mode [ 550.799368][T24175] veth1: entered allmulticast mode [ 550.834270][T24175] wg1: entered allmulticast mode [ 550.847169][T24175] wg2: entered allmulticast mode [ 550.859853][T24175] veth0_to_bridge: entered allmulticast mode [ 550.868909][T24175] bridge_slave_0: left promiscuous mode [ 550.875238][T24175] bridge_slave_0: entered allmulticast mode [ 550.881974][T24175] veth1_to_bridge: entered allmulticast mode [ 550.890053][T24175] bridge_slave_1: entered allmulticast mode [ 550.898831][T24175] veth0_to_bond: entered allmulticast mode [ 550.908688][T24175] bond_slave_0: entered allmulticast mode [ 550.912742][ T1673] block nbd1: Possible stuck request ffff888027100000: control (read@0,1024B). Runtime 30 seconds [ 550.927370][ T1673] block nbd1: Possible stuck request ffff888027100200: control (read@1024,1024B). Runtime 30 seconds [ 550.939940][T24175] veth1_to_bond: entered allmulticast mode [ 550.939974][ T1673] block nbd1: Possible stuck request ffff888027100400: control (read@2048,1024B). Runtime 30 seconds [ 550.952877][T24175] bond_slave_1: entered allmulticast mode [ 550.957419][ T1673] block nbd1: Possible stuck request ffff888027100600: control (read@3072,1024B). Runtime 30 seconds [ 550.974796][T24175] veth0_to_team: entered allmulticast mode [ 550.984152][T24175] team_slave_0: entered allmulticast mode [ 550.990388][T24175] veth1_to_team: entered allmulticast mode [ 551.001565][T24175] team_slave_1: entered allmulticast mode [ 551.007650][T24175] veth0_to_batadv: entered allmulticast mode [ 551.019937][T24175] batadv_slave_0: entered allmulticast mode [ 551.028732][T24175] xfrm0: entered allmulticast mode [ 551.037199][T24175] veth0_to_hsr: entered allmulticast mode [ 551.046498][T24175] hsr_slave_0: entered allmulticast mode [ 551.054474][T24175] veth1_to_hsr: entered allmulticast mode [ 551.063212][T24175] hsr_slave_1: entered allmulticast mode [ 551.070461][T24175] hsr0: entered allmulticast mode [ 551.079196][T24175] veth1_virt_wifi: entered allmulticast mode [ 551.087988][T24175] veth0_virt_wifi: entered allmulticast mode [ 551.096287][T24175] virt_wifi0: entered allmulticast mode [ 551.103916][T24175] veth1_vlan: entered allmulticast mode [ 551.111901][T24175] veth0_vlan: entered allmulticast mode [ 551.117748][T24175] vlan0: entered allmulticast mode [ 551.127875][T24175] vlan1: entered allmulticast mode [ 551.134346][T24175] macvlan0: left promiscuous mode [ 551.139404][T24175] macvlan0: entered allmulticast mode [ 551.148588][T24175] macvlan1: entered allmulticast mode [ 551.156531][T24175] ipvlan0: entered allmulticast mode [ 551.162877][T24175] ipvlan1: entered allmulticast mode [ 551.168275][T24175] veth1_macvtap: entered allmulticast mode [ 551.174889][T24175] veth0_macvtap: entered allmulticast mode [ 551.184812][T24175] macvtap0: entered allmulticast mode [ 551.192351][T24175] macsec0: entered allmulticast mode [ 551.198672][T24175] geneve0: entered allmulticast mode [ 551.207260][T24175] geneve1: entered allmulticast mode [ 551.214922][T24175] netdevsim netdevsim3 : left promiscuous mode [ 551.222256][T24175] netdevsim netdevsim3 : entered allmulticast mode [ 551.229600][T24175] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 551.242646][T24175] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 551.254014][T24175] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 551.264399][T24175] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 551.272606][T24175] ip6gretap1: entered allmulticast mode [ 551.279588][T24175] ip6tnl1: entered allmulticast mode [ 551.286187][T24175] ip6erspan0: entered allmulticast mode [ 551.293903][T24175] bridge1: entered allmulticast mode [ 551.301508][T24175] gretap1: entered allmulticast mode [ 551.309555][T24175] mac80211_hwsim hwsim38 pimreg: entered allmulticast mode [ 551.321551][T24175] bridge2: entered allmulticast mode [ 551.326984][T24175] bridge3: entered allmulticast mode [ 551.332881][T24175] vlan0.1: entered allmulticast mode [ 551.338604][T24175] gre1: entered allmulticast mode [ 551.346289][T24175] syztnl0: entered allmulticast mode [ 551.352370][T24175] mac80211_hwsim hwsim38 p: entered allmulticast mode [ 551.359349][T24175] macvlan2: entered allmulticast mode [ 551.366560][T24175] @: entered allmulticast mode [ 551.373343][T24175] bond1: entered allmulticast mode [ 551.379224][T24175] macsec1: entered allmulticast mode [ 551.386861][T24175] syztnl2: entered allmulticast mode [ 551.392670][T24175] geneve2: entered allmulticast mode [ 551.398198][T24175] bond2: entered allmulticast mode [ 551.404058][T24175] vxcan3: entered allmulticast mode [ 551.409404][T24175] vxcan2: entered allmulticast mode [ 551.416263][T24175] bond3: entered allmulticast mode [ 551.423751][T24175] vxcan4: entered allmulticast mode [ 551.429084][T24175] vxcan5: left promiscuous mode [ 551.434628][T24175] ip6gre1: entered allmulticast mode [ 551.442659][T24175] bond4: left promiscuous mode [ 551.447449][T24175] bond4: entered allmulticast mode [ 551.456552][T24175] syztnl1: entered allmulticast mode [ 551.463354][T24175] ip6tnl2: entered allmulticast mode [ 551.470068][T24175] veth2: entered allmulticast mode [ 551.476131][T24175] veth3: left promiscuous mode [ 551.482704][T24175] ip6tnl3: entered allmulticast mode [ 551.488528][T24175] geneve4: left promiscuous mode [ 551.493987][T24175] geneve4: entered allmulticast mode [ 551.501598][T24175] bridge4: entered allmulticast mode [ 551.630208][T10039] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.642052][T10039] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.660497][T10039] netdevsim netdevsim3 : unset [1, 1] type 2 family 0 port 50776 - 0 [ 551.676093][T10039] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.687966][T10039] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.701810][T10039] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 50776 - 0 [ 551.926592][T10039] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.963272][T10039] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.016274][T10039] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 50776 - 0 [ 552.020493][T24204] netlink: 'syz.0.4853': attribute type 1 has an invalid length. [ 552.047242][T24204] __nla_validate_parse: 18 callbacks suppressed [ 552.047265][T24204] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4853'. [ 552.075548][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4854'. [ 552.186681][T10039] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.211306][T10039] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.220234][T10039] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 50776 - 0 [ 552.252736][T24214] syzkaller1: entered allmulticast mode [ 552.768300][T24244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4861'. [ 552.809796][T24239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4860'. [ 552.830759][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.854638][T24247] [ 552.857020][T24247] ====================================================== [ 552.864065][T24247] WARNING: possible circular locking dependency detected [ 552.871173][T24247] syzkaller #0 Not tainted [ 552.875626][T24247] ------------------------------------------------------ [ 552.882686][T24247] syz.2.4863/24247 is trying to acquire lock: [ 552.888771][T24247] ffffffff8fd4d098 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 552.898104][T24247] [ 552.898104][T24247] but task is already holding lock: [ 552.905494][T24247] ffff888033821370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 552.914926][T24247] [ 552.914926][T24247] which lock already depends on the new lock. [ 552.914926][T24247] [ 552.925342][T24247] [ 552.925342][T24247] the existing dependency chain (in reverse order) is: [ 552.934361][T24247] [ 552.934361][T24247] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 552.942424][T24247] _raw_spin_lock_bh+0x36/0x50 [ 552.947773][T24247] nr_rt_device_down+0x153/0x860 [ 552.953250][T24247] nr_device_event+0x137/0x150 [ 552.958542][T24247] notifier_call_chain+0x1be/0x400 [ 552.964192][T24247] __dev_notify_flags+0x16d/0x310 [ 552.969750][T24247] netif_change_flags+0xe8/0x1a0 [ 552.975217][T24247] dev_change_flags+0x130/0x260 [ 552.980594][T24247] dev_ioctl+0x7b4/0x1150 [ 552.985449][T24247] sock_do_ioctl+0x23e/0x320 [ 552.990569][T24247] sock_ioctl+0x5c6/0x7f0 [ 552.995427][T24247] __se_sys_ioctl+0xfc/0x170 [ 553.000541][T24247] do_syscall_64+0x14d/0xf80 [ 553.005662][T24247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.012086][T24247] [ 553.012086][T24247] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 553.019920][T24247] _raw_spin_lock_bh+0x36/0x50 [ 553.025209][T24247] nr_rt_device_down+0xbe/0x860 [ 553.030585][T24247] nr_device_event+0x137/0x150 [ 553.035875][T24247] notifier_call_chain+0x1be/0x400 [ 553.041519][T24247] __dev_notify_flags+0x16d/0x310 [ 553.047067][T24247] netif_change_flags+0xe8/0x1a0 [ 553.052529][T24247] dev_change_flags+0x130/0x260 [ 553.057903][T24247] dev_ioctl+0x7b4/0x1150 [ 553.060949][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 553.062758][T24247] sock_do_ioctl+0x23e/0x320 [ 553.071121][ C1] lec:lec_tx_timeout: lec0 [ 553.076199][T24247] sock_ioctl+0x5c6/0x7f0 [ 553.085486][T24247] __se_sys_ioctl+0xfc/0x170 [ 553.090607][T24247] do_syscall_64+0x14d/0xf80 [ 553.090628][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 553.101625][T24247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.108042][T24247] [ 553.108042][T24247] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 553.116045][T24247] __lock_acquire+0x15a5/0x2cf0 [ 553.121428][T24247] lock_acquire+0xf0/0x2e0 [ 553.126373][T24247] _raw_spin_lock_bh+0x36/0x50 [ 553.131665][T24247] nr_remove_neigh+0x25/0xe0 [ 553.136867][T24247] nr_add_node+0x1e41/0x2630 [ 553.141983][T24247] nr_rt_ioctl+0xe59/0xf90 [ 553.146922][T24247] sock_do_ioctl+0x101/0x320 [ 553.152040][T24247] sock_ioctl+0x5c6/0x7f0 [ 553.156900][T24247] __se_sys_ioctl+0xfc/0x170 [ 553.162035][T24247] do_syscall_64+0x14d/0xf80 [ 553.167150][T24247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.173572][T24247] [ 553.173572][T24247] other info that might help us debug this: [ 553.173572][T24247] [ 553.183799][T24247] Chain exists of: [ 553.183799][T24247] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 553.183799][T24247] [ 553.197622][T24247] Possible unsafe locking scenario: [ 553.197622][T24247] [ 553.205077][T24247] CPU0 CPU1 [ 553.210438][T24247] ---- ---- [ 553.215799][T24247] lock(&nr_node->node_lock); [ 553.220652][T24247] lock(nr_node_list_lock); [ 553.227774][T24247] lock(&nr_node->node_lock); [ 553.235073][T24247] lock(nr_neigh_list_lock); [ 553.239753][T24247] [ 553.239753][T24247] *** DEADLOCK *** [ 553.239753][T24247] [ 553.247954][T24247] 1 lock held by syz.2.4863/24247: [ 553.253059][T24247] #0: ffff888033821370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 553.262902][T24247] [ 553.262902][T24247] stack backtrace: [ 553.268795][T24247] CPU: 0 UID: 0 PID: 24247 Comm: syz.2.4863 Not tainted syzkaller #0 PREEMPT(full) [ 553.268814][T24247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 553.268823][T24247] Call Trace: [ 553.268829][T24247] [ 553.268836][T24247] dump_stack_lvl+0xe8/0x150 [ 553.268858][T24247] print_circular_bug+0x2e1/0x300 [ 553.268883][T24247] check_noncircular+0x12e/0x150 [ 553.268907][T24247] __lock_acquire+0x15a5/0x2cf0 [ 553.268934][T24247] lock_acquire+0xf0/0x2e0 [ 553.268951][T24247] ? nr_remove_neigh+0x25/0xe0 [ 553.268972][T24247] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 553.268986][T24247] ? nr_remove_neigh+0x25/0xe0 [ 553.269004][T24247] _raw_spin_lock_bh+0x36/0x50 [ 553.269020][T24247] ? nr_remove_neigh+0x25/0xe0 [ 553.269039][T24247] nr_remove_neigh+0x25/0xe0 [ 553.269059][T24247] nr_add_node+0x1e41/0x2630 [ 553.269079][T24247] ? nr_call_to_digi+0x126/0x1b0 [ 553.269098][T24247] nr_rt_ioctl+0xe59/0xf90 [ 553.269120][T24247] ? kasan_quarantine_put+0xbb/0x1f0 [ 553.269135][T24247] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 553.269157][T24247] ? apparmor_capable+0x126/0x170 [ 553.269177][T24247] ? capable+0x88/0xe0 [ 553.269196][T24247] ? nr_ioctl+0x1b1/0x3b0 [ 553.269212][T24247] sock_do_ioctl+0x101/0x320 [ 553.269234][T24247] ? __pfx_sock_do_ioctl+0x10/0x10 [ 553.269253][T24247] ? do_futex+0x395/0x420 [ 553.269276][T24247] sock_ioctl+0x5c6/0x7f0 [ 553.269296][T24247] ? __pfx_sock_ioctl+0x10/0x10 [ 553.269315][T24247] ? __fget_files+0x2a/0x420 [ 553.269327][T24247] ? __fget_files+0x3a0/0x420 [ 553.269339][T24247] ? __fget_files+0x2a/0x420 [ 553.269352][T24247] ? bpf_lsm_file_ioctl+0x9/0x20 [ 553.269371][T24247] ? __pfx_sock_ioctl+0x10/0x10 [ 553.269390][T24247] __se_sys_ioctl+0xfc/0x170 [ 553.269407][T24247] do_syscall_64+0x14d/0xf80 [ 553.269426][T24247] ? trace_irq_disable+0x3b/0x150 [ 553.269438][T24247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.269452][T24247] ? clear_bhb_loop+0x40/0x90 [ 553.269469][T24247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.269483][T24247] RIP: 0033:0x7f828af9c819 [ 553.269497][T24247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.269510][T24247] RSP: 002b:00007f828bee9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.269526][T24247] RAX: ffffffffffffffda RBX: 00007f828b216090 RCX: 00007f828af9c819 [ 553.269537][T24247] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000004 [ 553.269547][T24247] RBP: 00007f828b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 553.269556][T24247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.269565][T24247] R13: 00007f828b216128 R14: 00007f828b216090 R15: 00007ffc84305968 [ 553.269582][T24247] [ 553.279488][T24222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4856'. [ 553.364357][T10038] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 556.681986][ T5197] udevd[5197]: worker [17629] /devices/virtual/block/nbd0 is taking a long time [ 558.081023][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 558.089090][ C1] lec:lec_tx_timeout: lec0 [ 558.094045][ C1] lec:lec_start_xmit: lec0:No lecd attached